From 79c21715b6360b9b9da6c37c9c8a81171a60cd8e Mon Sep 17 00:00:00 2001 From: Amanda Strnad Date: Fri, 15 Mar 2019 11:16:29 -0400 Subject: [PATCH] Add some sample traces that include dlogd activity --- with_dlogd/cadets/sample1.json | 4896 +++++++ with_dlogd/cadets/sample2.json | 18354 +++++++++++++++++++++++ with_dlogd/cdm/sample1.cdm.bin | 5420 +++++++ with_dlogd/cdm/sample1.cdm.json | 5268 +++++++ with_dlogd/cdm/sample2.cdm.bin | 23351 ++++++++++++++++++++++++++++++ with_dlogd/cdm/sample2.cdm.json | 19378 +++++++++++++++++++++++++ 6 files changed, 76667 insertions(+) create mode 100644 with_dlogd/cadets/sample1.json create mode 100644 with_dlogd/cadets/sample2.json create mode 100644 with_dlogd/cdm/sample1.cdm.bin create mode 100644 with_dlogd/cdm/sample1.cdm.json create mode 100644 with_dlogd/cdm/sample2.cdm.bin create mode 100644 with_dlogd/cdm/sample2.cdm.json diff --git a/with_dlogd/cadets/sample1.json b/with_dlogd/cadets/sample1.json new file mode 100644 index 0000000..7c3f4bf --- /dev/null +++ b/with_dlogd/cadets/sample1.json @@ -0,0 +1,4896 @@ +{"event": "host::info:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "uname":"FreeBSD 13.0-CURRENT FreeBSD 13.0-CURRENT 5da4c1df8d5(HEAD) CADETS amd64", "hostname":"cadets-bbn", "network":[ {"name":"em0", "mac":"08:00:27:fc:76:ba", "inet":"10.0.2.15", "inet6":""},{"name":"em1", "mac":"08:00:27:f9:7a:ba", "inet":"192.168.56.101", "inet6":""}] , "version": "versionn_innfo:"} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895034370801, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3", "fd": 5, "retval": 16} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895034370801, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "c1555c7c-d38e-9a58-8ed3-e319889a0469", "fd": 14, "retval": 48} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895034370801, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 48} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 351, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 352, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 353, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 354, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 351, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 352, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 353, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 354, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895933902951, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1578} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1578} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1574} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1627} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 355, "fd": 3, "retval": 110} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 355, "upath1": "/", "fd": 9, "address": "", "retval": 110} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896134203227, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896134203227, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896944139252, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3413} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582897954065555, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3775} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3775} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1831} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1884} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 356, "fd": 3, "retval": 110} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 356, "upath1": "/", "fd": 9, "address": "", "retval": 110} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 357, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 358, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 359, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 360, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 357, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 358, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 359, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 360, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898964841090, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 6972} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582899973949516, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 7337} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 7337} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3193} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3246} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 361, "fd": 3, "retval": 110} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 361, "upath1": "/", "fd": 9, "address": "", "retval": 110} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900134758205, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900134758205, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900134758205, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900134758205, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "fbt:kernel:syncache_expand:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "tid": 100013, "uid": 0, "so_uuid": "b54fd750-467a-11e9-ae92-080027fc76ba", "lport": 22, "fport": 61633, "laddr": "192.168.56.101", "faddr": "192.168.56.1"} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "tid": 100013, "uid": 0, "so_uuid": "d66412b7-467a-11e9-aea7-080027fc76ba", "lport": 22, "fport": 61633, "laddr": "192.168.56.101", "faddr": "192.168.56.1", "iss": 717327324} +{"event": "audit:event:aue_accept:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "arg_objuuid1": "b54fd750-467a-11e9-ae92-080027fc76ba", "ret_objuuid1": "d66412b7-467a-11e9-aea7-080027fc76ba", "fd": 4, "ret_fd1": 5, "address": "192.168.56.1", "port": 61633, "retval": 5} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "fd": 3, "retval": 6, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "fd": 4, "retval": 0, "fcntl_cmd": 4} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "ret_objuuid1": "d6641bd1-467a-11e9-aea7-080027fc76ba", "ret_objuuid2": "d6641bd1-467a-11e9-aea8-080027fc76ba", "ret_fd1": 6, "ret_fd2": 7, "retval": 0} +{"event": "audit:event:aue_socketpair:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "ret_objuuid1": "d6641de9-467a-11e9-aea8-080027fc76ba", "ret_objuuid2": "d6641df6-467a-11e9-aea8-080027fc76ba", "ret_fd1": 8, "ret_fd2": 9, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "ret_objuuid1": "d6642793-467a-11e9-aea8-080027fc76ba", "ret_objuuid2": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_pid": 1278, "retval": 1278} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 5, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 0, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 7, "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 9, "ret_fd1": 5, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 9, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "8bdbf70c-2584-fe5b-8425-ffe24bfe3202", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/sbin/sshd", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/sbin/sshd -R"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "arg_objuuid1": "d6641de9-467a-11e9-aea8-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "fd": 9, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "ret_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "upath1": "/usr/lib/libpam.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4cdcd114-c4ad-0851-adc4-bacbc10874a4", "ret_objuuid1": "4cdcd114-c4ad-0851-adc4-bacbc10874a4", "upath1": "/usr/lib/libprivatessh.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4cdcd114-c4ad-0851-adc4-bacbc10874a4", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "ret_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "upath1": "/usr/lib/libbsm.so.3", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a1687d5a-9a65-045e-a59a-97b4fe04b3bf", "ret_objuuid1": "a1687d5a-9a65-045e-a59a-97b4fe04b3bf", "upath1": "/usr/lib/libblacklist.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a1687d5a-9a65-045e-a59a-97b4fe04b3bf", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "ret_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "upath1": "/usr/lib/libgssapi_krb5.so.10", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6f98459d-6d2f-ff5f-af6d-07280fffd3cb", "ret_objuuid1": "6f98459d-6d2f-ff5f-af6d-07280fffd3cb", "upath1": "/usr/lib/libgssapi.so.10", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6f98459d-6d2f-ff5f-af6d-07280fffd3cb", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3a5de0c0-3468-0e56-a834-3339660e07e7", "ret_objuuid1": "3a5de0c0-3468-0e56-a834-3339660e07e7", "upath1": "/usr/lib/libkrb5.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3a5de0c0-3468-0e56-a834-3339660e07e7", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "002f9f80-1361-7654-a113-52b9a4768b0c", "ret_objuuid1": "002f9f80-1361-7654-a113-52b9a4768b0c", "upath1": "/usr/lib/libwrap.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "002f9f80-1361-7654-a113-52b9a4768b0c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "ret_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "upath1": "/lib/libcrypto.so.111", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "e6f4c6b4-7c40-ef56-807c-7da296efff27", "ret_objuuid1": "e6f4c6b4-7c40-ef56-807c-7da296efff27", "upath1": "/usr/lib/libprivateldns.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "e6f4c6b4-7c40-ef56-807c-7da296efff27", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "ret_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "upath1": "/lib/libcrypt.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "ret_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "upath1": "/lib/libz.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "ret_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "upath1": "/lib/libthr.so.3", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d1c77a04-4c52-7253-924c-62b47372e504", "ret_objuuid1": "d1c77a04-4c52-7253-924c-62b47372e504", "upath1": "/usr/lib/libroken.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d1c77a04-4c52-7253-924c-62b47372e504", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d", "ret_objuuid1": "fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d", "upath1": "/usr/lib/libasn1.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f3b68756-6263-9455-a362-0034d594ada7", "ret_objuuid1": "f3b68756-6263-9455-a362-0034d594ada7", "upath1": "/usr/lib/libcom_err.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f3b68756-6263-9455-a362-0034d594ada7", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4a8576d1-4c86-4855-864c-eea21548af1c", "ret_objuuid1": "4a8576d1-4c86-4855-864c-eea21548af1c", "upath1": "/usr/lib/libhx509.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4a8576d1-4c86-4855-864c-eea21548af1c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5", "ret_objuuid1": "6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5", "upath1": "/usr/lib/libwind.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "99fc3185-2025-565b-a520-dc0cab56462c", "ret_objuuid1": "99fc3185-2025-565b-a520-dc0cab56462c", "upath1": "/usr/lib/libheimbase.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "99fc3185-2025-565b-a520-dc0cab56462c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "02a6c778-5410-d854-9054-fc1f24d8e4bd", "ret_objuuid1": "02a6c778-5410-d854-9054-fc1f24d8e4bd", "upath1": "/usr/lib/libprivateheimipcc.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "02a6c778-5410-d854-9054-fc1f24d8e4bd", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "c0a44a27-28a6-d358-a628-06b288d3fd01", "ret_objuuid1": "c0a44a27-28a6-d358-a628-06b288d3fd01", "upath1": "/usr/lib/libssl.so.111", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "c0a44a27-28a6-d358-a628-06b288d3fd01", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 2, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_closefrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "ret_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "upath1": "/lib/libcrypto.so.111", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "8a2ac349-5bae-1a5c-ae5b-70678c1aee0c", "ret_objuuid1": "8a2ac349-5bae-1a5c-ae5b-70678c1aee0c", "upath1": "/etc/ssl/openssl.cnf", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "8a2ac349-5bae-1a5c-ae5b-70678c1aee0c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d665e1f3-467a-11e9-aea8-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d665e1f3-467a-11e9-aea8-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d665e5a7-467a-11e9-aea8-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d665e5a7-467a-11e9-aea8-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "ret_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "upath1": "/etc/ssh/ssh_host_rsa_key", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "ret_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "upath1": "/etc/ssh/ssh_host_rsa_key", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d85dbf3f-8873-2550-b388-fc6420252c7c", "ret_objuuid1": "d85dbf3f-8873-2550-b388-fc6420252c7c", "upath1": "/etc/ssh/ssh_host_rsa_key.pub", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d85dbf3f-8873-2550-b388-fc6420252c7c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "ret_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "upath1": "/etc/ssh/ssh_host_ecdsa_key", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "ret_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "upath1": "/etc/ssh/ssh_host_ecdsa_key", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3efd70ec-8129-a85e-a981-1a934ea8ee3c", "ret_objuuid1": "3efd70ec-8129-a85e-a981-1a934ea8ee3c", "upath1": "/etc/ssh/ssh_host_ecdsa_key.pub", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3efd70ec-8129-a85e-a981-1a934ea8ee3c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "ret_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "upath1": "/etc/ssh/ssh_host_ed25519_key", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "ret_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "upath1": "/etc/ssh/ssh_host_ed25519_key", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6eb7ebeb-1f96-1e57-961f-e755571e202c", "ret_objuuid1": "6eb7ebeb-1f96-1e57-961f-e755571e202c", "upath1": "/etc/ssh/ssh_host_ed25519_key.pub", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6eb7ebeb-1f96-1e57-961f-e755571e202c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 63} +{"event": "audit:event:aue_chdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "79047e1d-240e-be52-8e24-bdde62be883d", "upath1": "/", "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d6641df6-467a-11e9-aea8-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 2, "fd": -100, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 4, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 4, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 4, "ret_fd1": 2, "retval": 2} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 4, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "ret_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "upath1": "/etc/resolv.conf", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "35657c19-0d44-6554-840d-56131465bb07", "ret_objuuid1": "35657c19-0d44-6554-840d-56131465bb07", "upath1": "/etc/gss/mech", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "ret_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "upath1": "/usr/lib/libgssapi_krb5.so.10", "flags": 3145728, "fd": -100, "ret_fd1": 6, "mode": 0, "retval": 6} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "fd": 6, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "16c3ea07-48df-ba58-9f48-087fd8bab643", "ret_objuuid1": "16c3ea07-48df-ba58-9f48-087fd8bab643", "upath1": "/usr/lib/libgssapi_spnego.so.10", "flags": 3145728, "fd": -100, "ret_fd1": 6, "mode": 0, "retval": 6} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "16c3ea07-48df-ba58-9f48-087fd8bab643", "fd": 6, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "35657c19-0d44-6554-840d-56131465bb07", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901014716984, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 26345} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "e1d2cd21-6a99-d55c-996a-4ae8bcd556d9", "ret_objuuid1": "e1d2cd21-6a99-d55c-996a-4ae8bcd556d9", "upath1": "/etc/pam.d/sshd", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "ret_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "upath1": "/usr/lib/pam_opie.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 9, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "ret_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "upath1": "/usr/lib/libopie.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 9, "mode": 0, "retval": 9} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 9, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "ret_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "upath1": "/lib/libmd.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 9, "mode": 0, "retval": 9} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "ret_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "upath1": "/usr/lib/pam_opieaccess.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 9, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "ret_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "upath1": "/usr/lib/libypclnt.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 9, "mode": 0, "retval": 9} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "abf6fcaf-21ca-5a51-8a21-2a1e615a33b7", "ret_objuuid1": "abf6fcaf-21ca-5a51-8a21-2a1e615a33b7", "upath1": "/usr/lib/pam_nologin.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "abf6fcaf-21ca-5a51-8a21-2a1e615a33b7", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "abf6fcaf-21ca-5a51-8a21-2a1e615a33b7", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "ret_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "upath1": "/usr/lib/pam_login_access.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "ret_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "upath1": "/usr/lib/pam_permit.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "e1d2cd21-6a99-d55c-996a-4ae8bcd556d9", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d68855be-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68855be-467a-11e9-aea9-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68855be-467a-11e9-aea9-080027fc76ba", "ret_msgid": 365, "fd": 4, "retval": 96} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 365, "upath1": "/", "fd": 9, "address": "", "retval": 96} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aafb7a4a-d952-865d-92d9-3ff2ed86d364", "fd": 16, "retval": 72} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68855be-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d689a296-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d689a296-467a-11e9-aea9-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d689a296-467a-11e9-aea9-080027fc76ba", "ret_msgid": 366, "fd": 4, "retval": 96} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 366, "upath1": "/", "fd": 9, "address": "", "retval": 96} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d689a296-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 504} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_gid": 1003, "retval": 0} +{"event": "audit:event:aue_setuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_uid": 0, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_setuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_uid": 0, "retval": 0} +{"event": "audit:event:aue_setgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_gid": 1003, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d68b229c-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68b229c-467a-11e9-aea9-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68b229c-467a-11e9-aea9-080027fc76ba", "ret_msgid": 367, "fd": 4, "retval": 96} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 367, "upath1": "/", "fd": 9, "address": "", "retval": 96} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68b229c-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socketpair:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d68b2f7e-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d68b2f86-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "ret_fd2": 8, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d68b38c5-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_pid": 1280, "retval": 1280} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "ret_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "upath1": "/etc/opiekeys", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "ret_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "upath1": "/etc/opiekeys", "flags": 2, "fd": -100, "ret_fd1": 9, "mode": 0, "retval": 9} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 9, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "ret_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "upath1": "/etc/opiekeys", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "ret_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "upath1": "/etc/opiekeys", "flags": 2, "fd": -100, "ret_fd1": 9, "mode": 0, "retval": 9} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 9, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 368, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 369, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 370, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 371, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 368, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902044028797, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 40841} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 40841} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4579} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4632} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5740} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5793} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3817} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3870} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4856} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5130} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5263} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4091} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 372, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 372, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902134213067, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902134213067, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902134213067, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4909} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902134213067, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902134213067, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902143910395, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5183} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902143910395, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902143910395, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902143910395, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5316} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902153929763, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902153929763, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902153929763, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4144} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902164461959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902164461959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902164461959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902164461959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902173894545, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902173894545, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "ret_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "upath1": "/etc/login.access", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68b2f7e-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1279, "ppid": 1278, "tid": 100102, "uid": 22, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6767a33-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d7b3f08d-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d7b3f08d-467a-11e9-aea9-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d7b3f08d-467a-11e9-aea9-080027fc76ba", "ret_msgid": 373, "fd": 4, "retval": 140} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d7b3f08d-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d6766e84-467a-11e9-aea8-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d6641bd1-467a-11e9-aea8-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "arg_objuuid1": "d6641bd1-467a-11e9-aea7-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 373, "upath1": "/", "fd": 9, "address": "", "retval": 140} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aafb7a4a-d952-865d-92d9-3ff2ed86d364", "fd": 16, "retval": 66} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aafb7a4a-d952-865d-92d9-3ff2ed86d364", "fd": 16, "retval": 116} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2d2507ac-3e04-4a51-843e-b086314a525f", "ret_objuuid1": "2d2507ac-3e04-4a51-843e-b086314a525f", "upath1": "/etc/security/audit_user", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "ret_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "upath1": "/etc/security/audit_class", "flags": 0, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "dc2bb48d-13bc-c451-bc13-145141c492f2", "ret_objuuid1": "dc2bb48d-13bc-c451-bc13-145141c492f2", "upath1": "/etc/security/audit_control", "flags": 0, "ret_fd1": 7, "mode": 438, "retval": 7} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2d2507ac-3e04-4a51-843e-b086314a525f", "fd": 4, "retval": 27} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2d2507ac-3e04-4a51-843e-b086314a525f", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "dc2bb48d-13bc-c451-bc13-145141c492f2", "fd": 7, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "dc2bb48d-13bc-c451-bc13-145141c492f2", "ret_objuuid1": "dc2bb48d-13bc-c451-bc13-145141c492f2", "upath1": "/etc/security/audit_control", "flags": 0, "ret_fd1": 7, "mode": 438, "retval": 7} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "ret_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "upath1": "/etc/security/audit_event", "flags": 0, "ret_fd1": 8, "mode": 438, "retval": 8} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 8, "retval": 27878} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 8, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_socketpair:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d7b494b0-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7b494bb-467a-11e9-aea9-080027fc76ba", "ret_fd1": 9, "ret_fd2": 10, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_pid": 1281, "retval": 1281} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 9, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 10, "retval": 0} +{"event": "audit:event:aue_setgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_gid": 1003, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 10, "mode": 438, "retval": 10} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 10, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 10, "retval": 504} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 10, "retval": 0} +{"event": "audit:event:aue_setlogin:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "login": "user", "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_setuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_uid": 1003, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "ret_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "upath1": "/home/user/.login_conf", "flags": 1048576, "ret_fd1": 10, "mode": 0, "retval": 10} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "fd": 10, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 10, "mode": 0, "retval": 10} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 10, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "ret_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "upath1": "/home/user/.login_conf", "flags": 1048576, "ret_fd1": 10, "mode": 0, "retval": 10} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "fd": 10, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 10, "mode": 0, "retval": 10} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 10, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "ret_objuuid1": "d7b500cd-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7b500ce-467a-11e9-aea9-080027fc76ba", "ret_fd1": 10, "ret_fd2": 11, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "d7b500cd-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0, "fcntl_cmd": 4} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "d7b500ce-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0, "fcntl_cmd": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 12, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 13, "retval": 0} +{"event": "audit:event:aue_posix_openpt:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_fd1": 9, "retval": 9} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/pts/0", "flags": 2, "fd": -100, "ret_fd1": 11, "mode": 0, "retval": 11} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 12, "mode": 438, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 12, "retval": 0} +{"event": "audit:event:aue_chown:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "arg_uid": 1003, "arg_gid": 4, "upath1": "/dev/pts/0", "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 11, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "ret_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "upath1": "/var/log/utx.lastlogin", "flags": 1048576, "ret_fd1": 12, "mode": 438, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "fd": 12, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "ret_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "upath1": "/var/run/utx.active", "flags": 1048576, "ret_fd1": 12, "mode": 438, "retval": 12} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "ret_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "upath1": "/var/run/utx.active", "flags": 1049122, "ret_fd1": 13, "mode": 420, "retval": 13} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 3, "retval": 16386, "fcntl_cmd": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "fd": 13, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "ret_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "upath1": "/var/log/utx.lastlogin", "flags": 1049122, "ret_fd1": 13, "mode": 420, "retval": 13} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 3, "retval": 16386, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "fd": 13, "retval": 394} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "fd": 13, "retval": 197} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "fd": 13, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4516a868-a70c-915d-8ca7-5c9c1d91bbf9", "ret_objuuid1": "4516a868-a70c-915d-8ca7-5c9c1d91bbf9", "upath1": "/var/log/utx.log", "flags": 1049097, "ret_fd1": 13, "mode": 420, "retval": 13} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4516a868-a70c-915d-8ca7-5c9c1d91bbf9", "fd": 13, "retval": 83} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4516a868-a70c-915d-8ca7-5c9c1d91bbf9", "fd": 13, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "fd": 12, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 0} +{"event": "audit:event:aue_sendmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d7b494bb-467a-11e9-aea9-080027fc76ba", "fd": 10, "retval": 1} +{"event": "audit:event:aue_sendmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d7b494bb-467a-11e9-aea9-080027fc76ba", "fd": 10, "retval": 1} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 0, "mode": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 11, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 52} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 374, "fd": 8, "retval": 133} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 374, "upath1": "/", "fd": 9, "address": "", "retval": 133} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "d7b494b0-467a-11e9-aea9-080027fc76ba", "fd": 9, "retval": 1} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "d7b494b0-467a-11e9-aea9-080027fc76ba", "fd": 9, "retval": 1} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "ret_objuuid1": "d7b5a811-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_pid": 1282, "retval": 1282} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 13, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 4, "retval": 0, "fcntl_cmd": 4} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 3, "retval": 6, "fcntl_cmd": 3} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 375, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 375, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 14, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 15, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 12, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/pts/0", "flags": 2, "fd": -100, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 12, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 1, "fd": -100, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 12, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 13, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 13, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 13, "ret_fd1": 2, "retval": 2} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 13, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 376, "fd": 8, "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 376, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fcf113a7-aa96-585f-96aa-757b7f5884e7", "ret_objuuid1": "fcf113a7-aa96-585f-96aa-757b7f5884e7", "upath1": "/etc/motd", "flags": 0, "ret_fd1": 12, "mode": 438, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fcf113a7-aa96-585f-96aa-757b7f5884e7", "fd": 12, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "ret_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "upath1": "/home/user/.login_conf", "flags": 1048576, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "fd": 12, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 12, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_closefrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 11, "retval": 0} +{"event": "audit:event:aue_chdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "802da701-0471-305d-b104-2b472d304411", "upath1": "/home/user", "retval": 0} +{"event": "audit:event:aue_closefrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "-bash"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 66881} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "ret_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "upath1": "/etc/pwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 377, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 377, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cdc8911c-7575-ae53-b575-90e5c3ae1b34", "ret_objuuid1": "cdc8911c-7575-ae53-b575-90e5c3ae1b34", "upath1": "/etc/profile", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cdc8911c-7575-ae53-b575-90e5c3ae1b34", "fd": 3, "retval": 562} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cdc8911c-7575-ae53-b575-90e5c3ae1b34", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3", "ret_objuuid1": "f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3", "upath1": "/home/user/.profile", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3", "fd": 3, "retval": 881} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "d7c185e7-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_pid": 1283, "retval": 1283} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b003464c-20bc-2258-bc20-35a2f822aca3", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/resizewin", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/resizewin -z"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "d7c2196c-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_pid": 1284, "retval": 1284} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "973ecfbf-e437-0451-b7e4-41ba11046147", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/fortune", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/fortune freebsd-tips"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2408448, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2408448, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2928640, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2928640, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4259840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4259840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904133954137, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 75810} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904133954137, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 75810} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904133954137, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904133954137, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904133954137, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4102} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4155} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3634} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3687} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4553} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4606} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4190} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4727} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4810} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4200} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4721} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905153966888, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 79717} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905304236022, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905304236022, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905304236022, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905304236022, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 17} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1229, "ppid": 1226, "tid": 100074, "uid": 0, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "b583ceaf-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b146388e-467a-11e9-ae02-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "dfc2891a-d014-6a5f-94d0-76881f6a1fb0", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/nice", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "nice -4 fsck -B -p"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "19a7640a-bde5-2058-a5bd-6734c820ce3a", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/sbin/fsck", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "fsck -B -p"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2404352, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2404352, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2920448, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2920448, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4251648, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4251648, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "7ff6a25d-5b88-aa5f-885b-b000bfaae0f4", "ret_objuuid1": "7ff6a25d-5b88-aa5f-885b-b000bfaae0f4", "upath1": "/etc/fstab", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "7ff6a25d-5b88-aa5f-885b-b000bfaae0f4", "fd": 3, "retval": 200} +{"event": "audit:event:aue_vfork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "ret_objuuid1": "d952a902-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_pid": 1285, "retval": 1285} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "434858bb-406e-6156-ae40-962bc661e15f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/sbin/fsck_ufs", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "fsck_ufs -p -F /dev/ada0p3"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "ret_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "upath1": "/lib/libufs.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2531328, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2531328, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2535424, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2535424, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2555904, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2555904, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2531328, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2531328, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2580480, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2580480, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3096576, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3096576, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4427776, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4427776, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "ret_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "upath1": "/dev/ada0p3", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "fd": 3, "retval": 8192} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "7ff6a25d-5b88-aa5f-885b-b000bfaae0f4", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "7ff6a25d-5b88-aa5f-885b-b000bfaae0f4", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905794548453, "pid": 1227, "ppid": 1, "tid": 100084, "uid": 0, "cpu_id": 0, "exec": "logger", "subjprocuuid": "b583c3cf-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b4f5c781-467a-11e9-ae58-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906124611700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 79717} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906124611700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906178054811, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 88685} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906283883081, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 2} +{"event": "audit:event:aue_kill:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906293906646, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d7b5a811-467a-11e9-aea9-080027fc76ba", "arg_pid": 1282, "arg_euid": 1003, "arg_ruid": 1003, "arg_egid": 1003, "arg_rgid": 1003, "signum": 2, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906293906646, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906293906646, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906293906646, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 21} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906623959179, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906623959179, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906714285543, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906714285543, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906843870856, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906843870856, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906994149349, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906994149349, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907074986277, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907074986277, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907183946428, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 90319} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907226215093, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907226215093, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "802da701-0471-305d-b104-2b472d304411", "ret_objuuid1": "802da701-0471-305d-b104-2b472d304411", "upath1": "/usr/home/user/.", "flags": 1179652, "ret_fd1": 3, "mode": 29856, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907226215093, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "802da701-0471-305d-b104-2b472d304411", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907226215093, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 21} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 384, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 385, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 386, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 387, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 384, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 385, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 386, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 387, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 90319} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4520} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4573} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4440} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4493} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1630} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1683} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 388, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 388, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908194056284, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 94688} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908713861358, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908713861358, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908904072636, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908904072636, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909013925442, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909013925442, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/home/user/ripe-prov-tests-master/", "flags": 1179652, "ret_fd1": 3, "mode": 48848, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909013925442, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909013925442, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909204168075, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 95840} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909294044101, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909294044101, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_chdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909294044101, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/home/user/ripe-prov-tests-master/Linux", "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909294044101, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909294044101, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 50} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 95840} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4365} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4418} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1148} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1201} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 389, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 389, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910133863566, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910133863566, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910223880459, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 98904} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910364402487, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910364402487, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910364402487, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910364402487, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 32} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 390, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 391, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 392, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 393, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 390, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 391, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 392, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 393, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911233887268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 100381} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "dc9aef12-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "dc9aef12-467a-11e9-aea9-080027fc76ba", "fd": 4, "address": "107.155.79.108", "port": 123, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "dc9aef12-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "tid": 100092, "uid": 123, "so_uuid": "b5434a9c-467a-11e9-ae89-080027fc76ba", "lport": 123, "fport": 123, "laddr": "10.0.2.15", "faddr": "107.155.79.108"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "b5434a9c-467a-11e9-ae89-080027fc76ba", "ret_msgid": 394, "fd": 22, "address": "107.155.79.108", "port": 123, "retval": 48} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "b541acd0-467a-11e9-ae89-080027fc76ba", "ret_msgid": 395, "fd": 3, "retval": 102} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b2110-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 395, "upath1": "/", "fd": 8, "address": "", "retval": 102} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 100381} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3060} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3113} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1473} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1526} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 396, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 396, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912204256412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912204256412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912204256412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912204256412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 37} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912243951039, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 103965} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 17} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913254283039, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 104813} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 397, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 398, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 399, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 400, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 397, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 398, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 399, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 400, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 104813} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3580} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3633} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 844} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 897} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 401, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 401, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914153936323, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914153936323, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914153936323, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914153936323, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 48} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914264068977, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 108412} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582915273963131, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 108777} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 108777} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3595} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3648} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 402, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 402, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "df8637e6-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_pid": 1286, "retval": 1286} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./bash_commands.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ./bash_commands.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ./bash_commands.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916294130790, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 117711} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 403, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 404, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 405, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 406, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 403, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 404, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 405, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 406, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1287, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "df874ee9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 445} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 11} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 11} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 241} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e022ec76-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1288, "retval": 1288} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d1524fc4-3a5e-855b-9e3a-5d212b8581ed", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/whoami", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "whoami"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "ret_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "upath1": "/etc/pwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 5} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 351} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 270} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e023b7af-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1289, "retval": 1289} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ab57cf3a-f09d-cd5e-9df0-38f66ecdfb24", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/netstat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "netstat -n -l"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "ret_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "upath1": "/lib/libkvm.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2555904, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2555904, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2580480, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2580480, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "ret_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "upath1": "/usr/lib/libmemstat.so.3", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2641920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2641920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "ret_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "upath1": "/lib/libxo.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2777088, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2777088, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2822144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2822144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "ret_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "upath1": "/usr/lib/libnetgraph.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2883584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2883584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2891776, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2891776, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2899968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2899968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "ret_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "upath1": "/lib/libelf.so.2", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7077888, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7077888, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7106560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7106560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7176192, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7176192, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 3089} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 322} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 303} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e024fd03-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1290, "retval": 1290} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de3a34c1-0b17-8152-970b-4c2cb281885f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/cat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "cat /proc/cpuinfo"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 5} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 26} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 289} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 336} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02564b5-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1291, "retval": 1291} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de3a34c1-0b17-8152-970b-4c2cb281885f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/cat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "cat /etc/networks"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "ret_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "upath1": "/etc/networks", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "fd": 3, "retval": 310} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 310} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 256} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 359} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e025c619-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1292, "retval": 1292} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "542d495d-cfb1-a954-b1cf-f79fd4a9303e", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/ps", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "ps auxx"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "ret_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "upath1": "/lib/libm.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "ret_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "upath1": "/lib/libkvm.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2699264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2699264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "ret_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "upath1": "/lib/libjail.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2736128, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2736128, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "ret_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "upath1": "/lib/libxo.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2748416, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2748416, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2781184, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2781184, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2879488, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2879488, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4726784, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4726784, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "ret_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "upath1": "/lib/libelf.so.2", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7045120, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7045120, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7073792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7073792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7143424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7143424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7184384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7184384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7229440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7229440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 1048576, "fd": -100, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 5, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 5, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "ret_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "upath1": "/etc/pwd.db", "flags": 1048576, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "ret_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "upath1": "/usr/share/zoneinfo/UTC", "flags": 0, "ret_fd1": 6, "mode": 0, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 6, "retval": 118} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 6, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "ret_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "upath1": "/usr/share/zoneinfo/posixrules", "flags": 0, "ret_fd1": 6, "mode": 24832, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 6, "retval": 3519} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 6, "retval": 0} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 4380} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 233} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e026d50d-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e026d50e-467a-11e9-aea9-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 423} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e026da24-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1293, "retval": 1293} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e026e0b0-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1294, "retval": 1294} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 4, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e026d50e-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 10} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3f4e2dec-9008-5a56-8890-4814765aa0ba", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/sudo", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sudo -S ls"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2510848, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2510848, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2588672, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2588672, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "ret_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "upath1": "/usr/local/libexec/sudo/libsudo_util.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2637824, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2637824, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2703360, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2703360, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2744320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2744320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2756608, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2756608, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3272704, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3272704, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4603904, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4603904, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "ret_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "upath1": "/usr/share/zoneinfo/UTC", "flags": 0, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 3, "retval": 118} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "ret_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "upath1": "/usr/share/zoneinfo/posixrules", "flags": 0, "ret_fd1": 3, "mode": 24832, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 3, "retval": 3519} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 2, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 5, "retval": 0} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "ret_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "upath1": "/usr/local/libexec/sudo/sudoers.so", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7319552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7319552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7434240, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7434240, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7647232, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7647232, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "ret_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "upath1": "/usr/lib/libbsm.so.3", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7667712, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7667712, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7708672, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7708672, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7778304, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7778304, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "ret_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "upath1": "/usr/lib/libpam.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7790592, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7790592, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7815168, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7815168, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7843840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7843840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "ret_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "upath1": "/lib/libz.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7856128, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7856128, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7888896, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7888896, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7958528, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7958528, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": 0, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": 1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "ret_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "upath1": "/usr/local/etc/sudoers", "flags": 0, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 3678} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 3678} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": 0, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": -1, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": 0, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "382d9507-c88d-7556-8dc8-bb47e67533c4", "ret_objuuid1": "382d9507-c88d-7556-8dc8-bb47e67533c4", "upath1": "/usr/local/etc/sudoers.d", "flags": 1179652, "ret_fd1": 6, "mode": 65535, "retval": 6} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "382d9507-c88d-7556-8dc8-bb47e67533c4", "fd": 6, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": 1003, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 504} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 504} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 504} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "ret_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "upath1": "/usr/local/etc/pam.d/sudo", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "fd": 4, "retval": 323} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "ret_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "upath1": "/etc/pam.d/system", "flags": 0, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 648} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "ret_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "upath1": "/usr/lib/pam_opie.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8204288, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8204288, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8208384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8208384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8212480, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8212480, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "ret_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "upath1": "/usr/lib/libopie.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8220672, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8220672, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8232960, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8232960, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8249344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8249344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "ret_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "upath1": "/lib/libmd.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14680064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14680064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14712832, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14712832, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14794752, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14794752, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 7, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "ret_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "upath1": "/usr/lib/pam_opieaccess.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8269824, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8269824, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8273920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8273920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8278016, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8278016, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 7, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8286208, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8286208, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8294400, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8294400, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8302592, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8302592, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "ret_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "upath1": "/lib/libcrypt.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14938112, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14938112, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14954496, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14954496, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14995456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14995456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "ret_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "upath1": "/usr/lib/libypclnt.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8310784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8310784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8323072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8323072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8331264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8331264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 7, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "ret_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "upath1": "/etc/pam.d/system", "flags": 0, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 648} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "ret_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "upath1": "/usr/lib/pam_login_access.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8343552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8343552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8347648, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8347648, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8351744, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8351744, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 7, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8359936, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8359936, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8368128, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8368128, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8376320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8376320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 7, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "ret_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "upath1": "/usr/lib/pam_permit.so.6", "flags": 0, "fd": -100, "ret_fd1": 6, "mode": 0, "retval": 6} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 6, "ret_fd1": 7, "retval": 7, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15077376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15077376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15081472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15081472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15085568, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15085568, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 6, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "ret_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "upath1": "/etc/pam.d/system", "flags": 0, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 648} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15093760, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15093760, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15101952, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15101952, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15110144, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15110144, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 7, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "ret_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "upath1": "/etc/login.access", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "fd": 4, "retval": 1785} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 1024} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 1024} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "ret_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "upath1": "/etc/ttys", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "fd": 4, "retval": 2086} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": 0, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02b4d2c-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02b4d2c-467a-11e9-aea9-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02b4d2c-467a-11e9-aea9-080027fc76ba", "ret_msgid": 407, "fd": 4, "retval": 164} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 407, "upath1": "/", "fd": 9, "address": "", "retval": 164} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aafb7a4a-d952-865d-92d9-3ff2ed86d364", "fd": 16, "retval": 140} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02b4d2c-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": 1003, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "ret_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "upath1": "/etc/security/audit_event", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 27878} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "ret_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "upath1": "/etc/security/audit_class", "flags": 0, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 27878} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 27878} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": -1, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 63} +{"event": "audit:event:aue_setuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_uid": 0, "retval": 0} +{"event": "audit:event:aue_setgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_gid": 0, "retval": 0} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02bec48-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e02bec49-467a-11e9-aea9-080027fc76ba", "ret_fd1": 6, "ret_fd2": 7, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1295, "retval": 1295} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02bf8c6-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e02bf8c7-467a-11e9-aea9-080027fc76ba", "ret_fd1": 7, "ret_fd2": 8, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_euid": 0, "arg_ruid": 0, "arg_suid": 0, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 1, "fcntl_cmd": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_closefrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 6, "ret_fd1": 7, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bec49-467a-11e9-aea9-080027fc76ba", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/ls", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "ls"} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bec48-467a-11e9-aea9-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bec48-467a-11e9-aea9-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2420736, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2420736, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2453504, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2453504, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "ret_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "upath1": "/lib/libncursesw.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2514944, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2514944, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2682880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2682880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2887680, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2887680, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_fchdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1179652, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 5, "retval": 0} +{"event": "audit:event:aue_fchdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 4, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 119} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 107} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 103} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 88} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 104} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 94} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bf8c7-467a-11e9-aea9-080027fc76ba", "fd": 8, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bf8c6-467a-11e9-aea9-080027fc76ba", "fd": 7, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bf8c6-467a-11e9-aea9-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bf8c7-467a-11e9-aea9-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 169} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 489} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02d16f1-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1296, "retval": 1296} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 103} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 508} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02d3b31-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1297, "retval": 1297} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e7451145-d4d2-9753-92d4-25f153976db4", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/nc", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "nc -l 54321"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "ret_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "upath1": "/lib/libipsec.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917485712666, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 195593} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 195593} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4628} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4681} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4298} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4351} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4787} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4840} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4396} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4087} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4338} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4824} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4264} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3913} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4723} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3899} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4199} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3977} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4245} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4214} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4299} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4570} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4449} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3945} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4109} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5021} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 408, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 408, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918144488663, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918144488663, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918144488663, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4140} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4391} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4877} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918167986826, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918167986826, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918167986826, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4317} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3966} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4776} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918188618677, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918188618677, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918188618677, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3952} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4252} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4030} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918204342280, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918204342280, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918204342280, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4298} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918216018019, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918216018019, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918216018019, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4267} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4352} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4623} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918234217398, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918234217398, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918234217398, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3998} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4162} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5074} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918253911946, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918253911946, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 84} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c81a41-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e0c81a42-467a-11e9-aea9-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 551} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c820b9-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1298, "retval": 1298} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c83648-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e0c83648-467a-11e9-aeaa-080027fc76ba", "ret_fd1": 4, "ret_fd2": 5, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1299, "retval": 1299} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1300, "retval": 1300} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 4, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de3a34c1-0b17-8152-970b-4c2cb281885f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/cat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "cat EXFILTRATION_FILE.dat"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 5, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 4, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e7451145-d4d2-9753-92d4-25f153976db4", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/nc", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "nc localhost 54321"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 2416} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 2416} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "ret_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "upath1": "/lib/libipsec.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2449408, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2449408, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2461696, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2461696, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2977792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2977792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4308992, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4308992, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "ret_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "upath1": "/etc/hosts", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 3, "retval": 1031} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "e0c954e1-467a-11e9-aeaa-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0c954e1-467a-11e9-aeaa-080027fc76ba", "fd": 3, "address": "::1", "port": 1, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0c954e1-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "e0c95ac3-467a-11e9-aeaa-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0c95ac3-467a-11e9-aeaa-080027fc76ba", "fd": 3, "address": "127.0.0.1", "port": 1, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0c95ac3-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "e0c95f94-467a-11e9-aeaa-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "tid": 100015, "uid": 0, "so_uuid": "e0c95f94-467a-11e9-aeaa-080027fc76ba", "lport": 58335, "fport": 54321, "laddr": "127.0.0.1", "faddr": "127.0.0.1", "iss": 2687118993} +{"event": "fbt:kernel:syncache_expand:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "tid": 100015, "uid": 0, "so_uuid": "e02dc1a3-467a-11e9-aea9-080027fc76ba", "lport": 54321, "fport": 58335, "laddr": "127.0.0.1", "faddr": "127.0.0.1"} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "tid": 100015, "uid": 0, "so_uuid": "e0c96387-467a-11e9-aeaa-080027fc76ba", "lport": 54321, "fport": 58335, "laddr": "127.0.0.1", "faddr": "127.0.0.1", "iss": 3391450941} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0c95f94-467a-11e9-aeaa-080027fc76ba", "fd": 3, "address": "127.0.0.1", "port": 54321, "retval": 0} +{"event": "audit:event:aue_accept:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02dc1a3-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c96387-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 4, "address": "127.0.0.1", "port": 58335, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 0, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4a7e215d-fecb-7d56-8bfe-3c48a67db43b", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/gzip", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "gzip"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "ret_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "upath1": "/lib/libz.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2465792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2465792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2535424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2535424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "ret_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "upath1": "/usr/lib/liblzma.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "ret_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "upath1": "/usr/lib/libbz2.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2732032, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918573865723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 224757} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 409, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 410, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 411, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 412, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 409, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 410, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 411, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 412, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919584302803, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 225933} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920014838623, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "ret_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "upath1": "/etc/cron.d", "flags": 1179652, "ret_fd1": 5, "mode": 59400, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920014838623, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 225933} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3589} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3642} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3961} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4014} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3861} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3914} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4183} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4589} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4294} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4659} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920594048818, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 230095} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582921604408901, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 230461} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 230461} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4158} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4211} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 362} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 415} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 414, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 414, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922134392999, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922134392999, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922134392999, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922134392999, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 415, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 416, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 417, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 418, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 415, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 416, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 417, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 418, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922614154307, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 233683} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582923626871472, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 234048} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 234048} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3218} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3271} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 419, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 419, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924634267384, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 236454} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 420, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 421, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 422, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 423, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 420, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 421, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 422, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 423, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925644157193, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 237625} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 237625} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2402} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 2455} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1167} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1220} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 424, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 424, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926684053300, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 240035} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582927713020504, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 240399} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 240399} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2406} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 2459} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 425, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 425, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928134166897, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928134166897, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928134166897, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928134166897, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 426, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 427, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 428, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 429, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 426, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 427, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 428, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 429, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928774225532, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 243606} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582929784157083, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 243971} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 243971} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3203} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3256} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 430, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 430, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930164402700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930164402700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930164402700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930164402700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930834131946, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 246392} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 431, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 432, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 433, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 434, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 431, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 432, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 433, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 434, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931874490959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 247570} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 247570} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2417} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 2470} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1174} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1227} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 435, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 435, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932134613200, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932134613200, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932170453790, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932170453790, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c96387-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c96387-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02dc1a3-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_kill:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "df8637e6-467a-11e9-aea9-080027fc76ba", "arg_pid": 1286, "arg_euid": 1003, "arg_ruid": 1003, "arg_egid": 1003, "arg_rgid": 1003, "signum": 2, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 50} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932967496110, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 250819} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582933969545910, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 251183} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 251183} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3245} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3298} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 436, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 436, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934133927192, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934133927192, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934133927192, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934133927192, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 437, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 438, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 439, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 440, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 437, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 438, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 439, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 440, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582935025523231, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 254399} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936033905299, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 254762} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 254762} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3212} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3265} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 441, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 441, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936133880472, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936133880472, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "host::info:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "uname":"FreeBSD 13.0-CURRENT FreeBSD 13.0-CURRENT 5da4c1df8d5(HEAD) CADETS amd64", "hostname":"cadets-bbn", "network":[ {"name":"em0", "mac":"08:00:27:fc:76:ba", "inet":"10.0.2.15", "inet6":""},{"name":"em1", "mac":"08:00:27:f9:7a:ba", "inet":"192.168.56.101", "inet6":""}] , "version": "versionn_innfo:"} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582951268242273, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3", "fd": 5, "retval": 16} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582951268242273, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "c1555c7c-d38e-9a58-8ed3-e319889a0469", "fd": 14, "retval": 48} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582951268242273, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 48} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952124549143, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 257176} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952124549143, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952194028767, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 258177} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 463, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 464, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 465, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 466, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 463, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 464, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 465, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 466, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952664295450, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952664295450, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952664295450, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952664295450, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 2} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582953204141200, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 259659} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582953588138412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582953588138412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582953588138412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582953588138412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 21} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 259659} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 997} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1050} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1478} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1531} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 467, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 467, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954133942560, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954133942560, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954219192362, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 262471} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954506555215, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954506555215, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954506555215, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954506555215, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 51} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955224328560, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 263158} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955413909882, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955413909882, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955413909882, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955413909882, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 37} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 468, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 469, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 470, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 471, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 468, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 469, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 470, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 471, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 263158} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2808} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 2861} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 683} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 736} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 472, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 472, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956233997606, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 266753} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956334770993, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956334770993, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956334770993, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956334770993, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 17} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582957249417963, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 267436} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 267436} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3591} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3644} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 679} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 732} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 473, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 473, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958254271204, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 269844} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 474, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 475, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 476, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 477, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 474, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 475, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 476, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 477, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959264447168, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 271023} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1337, "retval": 1337} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/all.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/all.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "ret_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1884} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 516} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "f98d2634-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1338, "retval": 1338} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959824307368, "pid": 1338, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98d2634-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960284294164, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 279988} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1338, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "f98d2634-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 34} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fa277e30-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1339, "retval": 1339} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "56ecc1ae-1878-7b59-b818-6135097b8030", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./change_file_permissions", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./change_file_permissions "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_chmod:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/README.md", "mode": 438, "retval": 0} +{"event": "audit:event:aue_chmod:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/README.md", "mode": 439, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1368} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 532} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1340, "retval": 1340} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961304776512, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 284908} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 479, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 480, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 481, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 482, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 479, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 480, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 481, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 482, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1341, "retval": 1341} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0609dc59-7cb8-de5b-b87c-35aeebded4bf", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_file", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_file "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "ret_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/README.md", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "745458ec-83ee-b052-ae83-2efb22b0cb41", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/out.tmp", "flags": 1537, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "fd": 3, "retval": 2498} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "745458ec-83ee-b052-ae83-2efb22b0cb41", "fd": 4, "retval": 2498} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "745458ec-83ee-b052-ae83-2efb22b0cb41", "fd": 4, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1352} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 554} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fac368df-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1342, "retval": 1342} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 284908} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4799} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4852} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4158} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4211} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4916} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4969} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962316591861, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 294069} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1343, "retval": 1343} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0f7e034a-4539-ea5b-b945-2560fbea7185", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_buf "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1330} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 588} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1344, "retval": 1344} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963333887767, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 298938} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 38} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1345, "retval": 1345} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "8d001f29-417a-805e-ba41-cecf5e804caf", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_stack_frame", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_buf_stack_frame "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1296} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 617} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1346, "retval": 1346} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964344364848, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 303803} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 485, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 486, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 487, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 488, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 485, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 486, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 487, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 488, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 33} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fc92c880-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1347, "retval": 1347} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "656c7084-7a51-2d53-917a-60f4832de58f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_string", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_buf_string "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1267} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 644} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1348, "retval": 1348} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965354116724, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 308830} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 31} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1349, "retval": 1349} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a40cfc78-90a1-075c-a190-f4d7ac07bd69", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_heap_buf", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_heap_buf "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1240} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 663} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1350, "retval": 1350} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966373962760, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 313695} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 23} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fdc88672-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1351, "retval": 1351} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1bca75f7-71d4-1553-9471-f02cd31597be", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./fork_process", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./fork_process "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "fdc8d004-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1352, "retval": 1352} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 15} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1352, "ppid": 1, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc8d004-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1221} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 677} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1353, "retval": 1353} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1352, "ppid": 1, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc8d004-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967394080897, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 318788} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 490, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 491, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 492, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 493, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 490, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 491, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 492, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 493, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 18} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fe646b69-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1354, "retval": 1354} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2e1f69d8-d3e4-2950-a4d3-829bb0298789", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./listdir", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./listdir "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1179652, "ret_fd1": 3, "mode": 60240, "retval": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 5} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 9} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 5} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 28} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 24} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 15} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 8} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 23} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 21} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 23} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 24} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 9} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 8} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 15} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1207} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 698} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fe654cca-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1355, "retval": 1355} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968418492202, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 326677} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 25} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "feff028b-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1356, "retval": 1356} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cbeb200e-1746-3e58-8617-b743583e4f59", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./make_directory", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./make_directory "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mkdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ef2077a9-1b4f-685b-8f1b-6859ab685e9f", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/temporary", "mode": 511, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1186} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 727} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "feff8c39-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1357, "retval": 1357} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969434831514, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 331677} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 33} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1358, "retval": 1358} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6741c59f-8ce3-8e50-a38c-f0d1808ea1c5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_multi_write", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./multi_read_multi_write "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "ret_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "ret_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "ret_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/output_file1.tmp", "flags": 1537, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "ret_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/output_file2.tmp", "flags": 1537, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 209} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 382} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "fd": 5, "retval": 191} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "fd": 5, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "fd": 6, "retval": 187} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "fd": 6, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1157} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 757} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1359, "retval": 1359} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 331677} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4432} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4485} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3449} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3502} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4996} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5049} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 495, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 495, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970133899473, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970133899473, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970133899473, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970133899473, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970464025726, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 341125} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 496, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 497, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 498, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 499, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 496, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 497, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 498, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 499, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 34} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "00359f92-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1360, "retval": 1360} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d8b8f561-1e30-f858-b01e-d3c3b8f82fe5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_single_write", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./multi_read_single_write "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "ret_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "ret_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "ret_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/merged_file.tmp", "flags": 1537, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 209} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 382} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "fd": 5, "retval": 378} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "fd": 5, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1127} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582971483913741, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 345981} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1361, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00360eca-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 27} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1362, "retval": 1362} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6afebb5e-412d-d25c-ad41-600cfcd2423e", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./remove_directory", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./remove_directory "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_rmdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ef2077a9-1b4f-685b-8f1b-6859ab685e9f", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/temporary", "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1104} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 798} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "00d10d10-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1363, "retval": 1363} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972504128832, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 350970} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "016b62c2-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1364, "retval": 1364} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./remove_file", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./remove_file "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_unlink:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "745458ec-83ee-b052-ae83-2efb22b0cb41", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/out.tmp", "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1086} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 872} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1365, "retval": 1365} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 356013} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 501, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 502, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 503, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 504, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 501, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 502, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 503, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 504, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1366, "retval": 1366} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copied_pipe", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copied_pipe a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "0205e82e-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "0205e82f-467b-11e9-aeb7-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "0205eb21-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1367, "retval": 1367} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1367, "ppid": 1366, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205eb21-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1367, "ppid": 1366, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205eb21-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 4, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1367, "ppid": 1366, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205eb21-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0205e82f-467b-11e9-aeb7-080027fc76ba", "fd": 1, "retval": 2} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1367, "ppid": 1366, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205eb21-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0205e82e-467b-11e9-aeb7-080027fc76ba", "fd": 0, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1012} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974534337270, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360849} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1368, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0206281d-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 28} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "029fc20e-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1369, "retval": 1369} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/datagram.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/datagram.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "ret_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 296} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 250} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "02a0949b-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1370, "retval": 1370} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 268} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "02a09f07-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1371, "retval": 1371} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "373ba8a7-d481-4f5a-81d4-177fea4f8ab6", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./datagram_server", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./datagram_server"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975573954964, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 374757} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 28} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "033a9f30-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1372, "retval": 1372} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ffa1f988-cf0d-7f5b-8dcf-910bcb7fb68e", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./datagram_client", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./datagram_client a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "033af1f1-467b-11e9-aeb7-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033af1f1-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "033af5b2-467b-11e9-aeb7-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033af5b2-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 47} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "033b00cc-467b-11e9-aeb7-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "tid": 100144, "uid": 1003, "so_uuid": "033b00cc-467b-11e9-aeb7-080027fc76ba", "lport": 61810, "fport": 4950, "laddr": "::1", "faddr": "::1"} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "tid": 100015, "uid": 0, "so_uuid": "02a14724-467b-11e9-aeb7-080027fc76ba", "lport": 4950, "fport": 61810, "laddr": "::1", "faddr": "::1"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033b00cc-467b-11e9-aeb7-080027fc76ba", "ret_msgid": 506, "fd": 3, "address": "::1", "port": 4950, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033b00cc-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "033b06bf-467b-11e9-aeb7-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "tid": 100144, "uid": 1003, "so_uuid": "033b06bf-467b-11e9-aeb7-080027fc76ba", "lport": 29583, "fport": 4950, "laddr": "127.0.0.1", "faddr": "127.0.0.1"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033b06bf-467b-11e9-aeb7-080027fc76ba", "ret_msgid": 507, "fd": 3, "address": "127.0.0.1", "port": 4950, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033b06bf-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "02a14724-467b-11e9-aeb7-080027fc76ba", "ret_msgid": 506, "fd": 3, "address": "::1", "port": 61810, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 31} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "02a14724-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 961} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 974} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1373, "retval": 1373} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 374757} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4832} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4885} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4939} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4992} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976605249234, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 384214} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "03d617c8-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1374, "retval": 1374} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f5cca548-4198-c65d-9841-9bcbadc62d45", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./direct_pipe", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./direct_pipe a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "03d65a83-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "03d65a83-467b-11e9-aeb8-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "03d65d8b-467b-11e9-aeb8-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1375, "retval": 1375} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1375, "ppid": 1374, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d65d8b-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1375, "ppid": 1374, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d65d8b-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "03d65a83-467b-11e9-aeb8-080027fc76ba", "fd": 4, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1375, "ppid": 1374, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d65d8b-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1375, "ppid": 1374, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d65d8b-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "03d65a83-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 910} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1025} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "03d69d45-467b-11e9-aeb8-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1376, "retval": 1376} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977614240236, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 389294} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 25} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "047114a8-467b-11e9-aeb8-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1377, "retval": 1377} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/named.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/named.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "ret_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 286} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 253} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "04724181-467b-11e9-aeb8-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1378, "retval": 1378} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 33} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 271} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "04724c46-467b-11e9-aeb8-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1379, "retval": 1379} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "b0bc4f68-c591-a656-91c5-dcf6b6a6dfa5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./named_writer", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./named_writer a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 27} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978653885691, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 403239} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 15} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "050e3275-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1380, "retval": 1380} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "d13b936e-e1a2-e756-a2e1-63e636e7e7c5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./named_reader", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./named_reader"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 27} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "ret_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "ret_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "ret_objuuid2": "04732720-467b-11e9-aeb9-080027fc76ba", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp", "flags": 1, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04732720-467b-11e9-aeb8-080027fc76ba", "fd": 3, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 18} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04732720-467b-11e9-aeb8-080027fc76ba", "fd": 3, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04732720-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 859} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1041} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "050ef741-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1381, "retval": 1381} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979673936273, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 408126} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980015553697, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "ret_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "upath1": "/etc/cron.d", "flags": 1179652, "ret_fd1": 5, "mode": 59400, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980015553697, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 408126} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4918} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4971} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4005} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4058} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5010} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5063} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4883} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 520, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 520, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1381, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "050ef741-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "05a8917f-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1382, "retval": 1382} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7eec5b1a-792a-5556-aa79-9b231655b451", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./shm_exfil", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./shm_exfil "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980684087639, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 413024} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 4} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 843} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1092} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "0644af0a-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1384, "retval": 1384} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981694131361, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 415975} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 415975} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4894} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4947} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2947} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3000} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 521, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 521, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982134345512, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982134345512, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1385, "retval": 1385} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/signal.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/signal.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "ret_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 289} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 245} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "06e087e7-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1386, "retval": 1386} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 44} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 263} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "06e09284-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1387, "retval": 1387} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f7889531-95ae-715e-ae95-c4adae711987", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./signal_server", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./signal_server"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "ret_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "upath1": "/usr/lib/libc++.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "ret_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "upath1": "/lib/libcxxrt.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "ret_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "upath1": "/lib/libm.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "ret_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "upath1": "/lib/libgcc_s.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982744802290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 434234} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "077cbe80-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1388, "retval": 1388} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "74643ad1-37f8-b356-b837-c78bb6b345d2", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./signal_client", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./signal_client a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "ret_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "upath1": "/usr/lib/libc++.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "ret_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "upath1": "/lib/libcxxrt.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "ret_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "upath1": "/lib/libm.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "ret_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "upath1": "/lib/libgcc_s.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3600384, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3600384, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3637248, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3637248, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3690496, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3690496, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3702784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3702784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4218880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4218880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5550080, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5550080, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "ret_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 28} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_unlink:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 792} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1143} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "077dfec4-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1389, "retval": 1389} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1389, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "077dfec4-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983773878145, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 443044} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 443044} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4726} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4779} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4336} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4389} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4695} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4748} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4486} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4550} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4252} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 526, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 526, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4539} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4603} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984143894132, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984143894132, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984143894132, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4305} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984154114648, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984154114648, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984154114648, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984154114648, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984167461125, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984167461125, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1389, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "077dfec4-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "081702f0-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1390, "retval": 1390} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/stream.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/stream.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "ret_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 290} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 256} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "0817de1c-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1391, "retval": 1391} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 34} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 274} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "0817e89b-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1392, "retval": 1392} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1392, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817e89b-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1392, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817e89b-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1392, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0817e89b-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "eeac9f12-b277-945c-b7b2-6dc48c944589", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./stream_server", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./stream_server a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1392, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0817e89b-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "0818480c-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0818480c-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08184bd5-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "08184bd5-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08184f2f-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984818638204, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 460817} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1392, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0817e89b-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 16} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1393, "retval": 1393} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "acf88428-0c9e-7555-9e0c-dc6fa5750416", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./stream_client", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./stream_client"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08b3030d-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "08b3030d-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08b30734-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "08b30734-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08b30ad7-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "tid": 100015, "uid": 0, "so_uuid": "08b30ad7-467b-11e9-aeb9-080027fc76ba", "lport": 10508, "fport": 3490, "laddr": "0.0.0.1", "faddr": "0.0.0.1", "iss": 502550519} +{"event": "fbt:kernel:syncache_expand:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "tid": 100015, "uid": 0, "so_uuid": "08184f2f-467b-11e9-aeb9-080027fc76ba", "lport": 3490, "fport": 10508, "laddr": "0.0.0.1", "faddr": "0.0.0.1"} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "tid": 100015, "uid": 0, "so_uuid": "08b310af-467b-11e9-aeb9-080027fc76ba", "lport": 3490, "fport": 10508, "laddr": "0.0.0.1", "faddr": "0.0.0.1", "iss": 2393361785} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "08b30ad7-467b-11e9-aeb9-080027fc76ba", "fd": 3, "address": "::1", "port": 3490, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 26} +{"event": "audit:event:aue_accept:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "08184f2f-467b-11e9-aeb9-080027fc76ba", "ret_objuuid1": "08b310af-467b-11e9-aeb9-080027fc76ba", "fd": 3, "ret_fd1": 4, "address": "::1", "port": 10508, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 32} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08b3272d-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_pid": 1394, "retval": 1394} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1394, "ppid": 1391, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "08b3272d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1394, "ppid": 1391, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "08b3272d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "08b310af-467b-11e9-aeb9-080027fc76ba", "fd": 4, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1394, "ppid": 1391, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "08b3272d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1394, "ppid": 1391, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "08b3272d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "08b310af-467b-11e9-aeb9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985823904780, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 465801} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 465801} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4117} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4170} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4697} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4750} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4050} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4103} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4893} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4980} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 531, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 531, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4946} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5033} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986143882190, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986143882190, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986154353840, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986154353840, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986164762457, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986164762457, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1395, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "08b37bd8-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "094c9feb-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1396, "retval": 1396} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9e441c0-7c31-1a56-b17c-3f9a061af725", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./with_wget", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./with_wget "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_vfork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "094cee03-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1397, "retval": 1397} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f3f7eadf-5a79-ba55-b95a-881315bae424", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sh -c wget http://www.google.com/index.html"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "ret_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "upath1": "/lib/libedit.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2818048, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2818048, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3334144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3334144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4665344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4665344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "ret_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "upath1": "/lib/libncursesw.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 6983680, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 6983680, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7356416, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7356416, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 20} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 725} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1866} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "094d72a7-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1398, "retval": 1398} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987074157366, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 479100} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 18} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 50} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988115532463, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 480275} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 480275} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4071} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4124} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4807} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4860} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4409} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4462} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1171} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1224} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 532, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 532, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988173936046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988173936046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988173936046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988173936046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 533, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 534, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 535, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 536, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 533, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582989123868619, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 484527} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 484527} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4248} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4301} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 537, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 537, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990133892948, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 486160} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990133892948, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990133892948, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} diff --git a/with_dlogd/cadets/sample2.json b/with_dlogd/cadets/sample2.json new file mode 100644 index 0000000..2263ade --- /dev/null +++ b/with_dlogd/cadets/sample2.json @@ -0,0 +1,18354 @@ +{"event": "host::info:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "uname":"FreeBSD 13.0-CURRENT FreeBSD 13.0-CURRENT 5da4c1df8d5(HEAD) CADETS amd64", "hostname":"cadets-bbn", "network":[ {"name":"em0", "mac":"08:00:27:fc:76:ba", "inet":"10.0.2.15", "inet6":""},{"name":"em1", "mac":"08:00:27:f9:7a:ba", "inet":"192.168.56.101", "inet6":""}] , "version": "versionn_innfo:"} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895034370801, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3", "fd": 5, "retval": 16} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895034370801, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "c1555c7c-d38e-9a58-8ed3-e319889a0469", "fd": 14, "retval": 48} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895034370801, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 48} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 351, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 352, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 353, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 354, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 351, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 352, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 353, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 354, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895933902951, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1578} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1578} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1574} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1627} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 355, "fd": 3, "retval": 110} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 355, "upath1": "/", "fd": 9, "address": "", "retval": 110} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896134203227, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896134203227, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896944139252, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3413} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582897954065555, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3775} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3775} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1831} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1884} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 356, "fd": 3, "retval": 110} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 356, "upath1": "/", "fd": 9, "address": "", "retval": 110} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 357, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 358, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 359, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 360, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 357, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 358, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 359, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 360, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898964841090, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 6972} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582899973949516, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 7337} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 7337} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3193} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3246} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 361, "fd": 3, "retval": 110} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 361, "upath1": "/", "fd": 9, "address": "", "retval": 110} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900134758205, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900134758205, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900134758205, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900134758205, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "fbt:kernel:syncache_expand:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "tid": 100013, "uid": 0, "so_uuid": "b54fd750-467a-11e9-ae92-080027fc76ba", "lport": 22, "fport": 61633, "laddr": "192.168.56.101", "faddr": "192.168.56.1"} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "tid": 100013, "uid": 0, "so_uuid": "d66412b7-467a-11e9-aea7-080027fc76ba", "lport": 22, "fport": 61633, "laddr": "192.168.56.101", "faddr": "192.168.56.1", "iss": 717327324} +{"event": "audit:event:aue_accept:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "arg_objuuid1": "b54fd750-467a-11e9-ae92-080027fc76ba", "ret_objuuid1": "d66412b7-467a-11e9-aea7-080027fc76ba", "fd": 4, "ret_fd1": 5, "address": "192.168.56.1", "port": 61633, "retval": 5} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "fd": 3, "retval": 6, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "fd": 4, "retval": 0, "fcntl_cmd": 4} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "ret_objuuid1": "d6641bd1-467a-11e9-aea7-080027fc76ba", "ret_objuuid2": "d6641bd1-467a-11e9-aea8-080027fc76ba", "ret_fd1": 6, "ret_fd2": 7, "retval": 0} +{"event": "audit:event:aue_socketpair:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "ret_objuuid1": "d6641de9-467a-11e9-aea8-080027fc76ba", "ret_objuuid2": "d6641df6-467a-11e9-aea8-080027fc76ba", "ret_fd1": 8, "ret_fd2": 9, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "ret_objuuid1": "d6642793-467a-11e9-aea8-080027fc76ba", "ret_objuuid2": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_pid": 1278, "retval": 1278} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 5, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 0, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 7, "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 9, "ret_fd1": 5, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 9, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "8bdbf70c-2584-fe5b-8425-ffe24bfe3202", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/sbin/sshd", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/sbin/sshd -R"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "arg_objuuid1": "d6641de9-467a-11e9-aea8-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "fd": 9, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "ret_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "upath1": "/usr/lib/libpam.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4cdcd114-c4ad-0851-adc4-bacbc10874a4", "ret_objuuid1": "4cdcd114-c4ad-0851-adc4-bacbc10874a4", "upath1": "/usr/lib/libprivatessh.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4cdcd114-c4ad-0851-adc4-bacbc10874a4", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "ret_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "upath1": "/usr/lib/libbsm.so.3", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a1687d5a-9a65-045e-a59a-97b4fe04b3bf", "ret_objuuid1": "a1687d5a-9a65-045e-a59a-97b4fe04b3bf", "upath1": "/usr/lib/libblacklist.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a1687d5a-9a65-045e-a59a-97b4fe04b3bf", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "ret_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "upath1": "/usr/lib/libgssapi_krb5.so.10", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6f98459d-6d2f-ff5f-af6d-07280fffd3cb", "ret_objuuid1": "6f98459d-6d2f-ff5f-af6d-07280fffd3cb", "upath1": "/usr/lib/libgssapi.so.10", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6f98459d-6d2f-ff5f-af6d-07280fffd3cb", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3a5de0c0-3468-0e56-a834-3339660e07e7", "ret_objuuid1": "3a5de0c0-3468-0e56-a834-3339660e07e7", "upath1": "/usr/lib/libkrb5.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3a5de0c0-3468-0e56-a834-3339660e07e7", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "002f9f80-1361-7654-a113-52b9a4768b0c", "ret_objuuid1": "002f9f80-1361-7654-a113-52b9a4768b0c", "upath1": "/usr/lib/libwrap.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "002f9f80-1361-7654-a113-52b9a4768b0c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "ret_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "upath1": "/lib/libcrypto.so.111", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "e6f4c6b4-7c40-ef56-807c-7da296efff27", "ret_objuuid1": "e6f4c6b4-7c40-ef56-807c-7da296efff27", "upath1": "/usr/lib/libprivateldns.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "e6f4c6b4-7c40-ef56-807c-7da296efff27", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "ret_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "upath1": "/lib/libcrypt.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "ret_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "upath1": "/lib/libz.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "ret_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "upath1": "/lib/libthr.so.3", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d1c77a04-4c52-7253-924c-62b47372e504", "ret_objuuid1": "d1c77a04-4c52-7253-924c-62b47372e504", "upath1": "/usr/lib/libroken.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d1c77a04-4c52-7253-924c-62b47372e504", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d", "ret_objuuid1": "fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d", "upath1": "/usr/lib/libasn1.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f3b68756-6263-9455-a362-0034d594ada7", "ret_objuuid1": "f3b68756-6263-9455-a362-0034d594ada7", "upath1": "/usr/lib/libcom_err.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f3b68756-6263-9455-a362-0034d594ada7", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4a8576d1-4c86-4855-864c-eea21548af1c", "ret_objuuid1": "4a8576d1-4c86-4855-864c-eea21548af1c", "upath1": "/usr/lib/libhx509.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4a8576d1-4c86-4855-864c-eea21548af1c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5", "ret_objuuid1": "6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5", "upath1": "/usr/lib/libwind.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "99fc3185-2025-565b-a520-dc0cab56462c", "ret_objuuid1": "99fc3185-2025-565b-a520-dc0cab56462c", "upath1": "/usr/lib/libheimbase.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "99fc3185-2025-565b-a520-dc0cab56462c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "02a6c778-5410-d854-9054-fc1f24d8e4bd", "ret_objuuid1": "02a6c778-5410-d854-9054-fc1f24d8e4bd", "upath1": "/usr/lib/libprivateheimipcc.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "02a6c778-5410-d854-9054-fc1f24d8e4bd", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "c0a44a27-28a6-d358-a628-06b288d3fd01", "ret_objuuid1": "c0a44a27-28a6-d358-a628-06b288d3fd01", "upath1": "/usr/lib/libssl.so.111", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "c0a44a27-28a6-d358-a628-06b288d3fd01", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 2, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_closefrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "ret_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "upath1": "/lib/libcrypto.so.111", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "8a2ac349-5bae-1a5c-ae5b-70678c1aee0c", "ret_objuuid1": "8a2ac349-5bae-1a5c-ae5b-70678c1aee0c", "upath1": "/etc/ssl/openssl.cnf", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "8a2ac349-5bae-1a5c-ae5b-70678c1aee0c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d665e1f3-467a-11e9-aea8-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d665e1f3-467a-11e9-aea8-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d665e5a7-467a-11e9-aea8-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d665e5a7-467a-11e9-aea8-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "ret_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "upath1": "/etc/ssh/ssh_host_rsa_key", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "ret_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "upath1": "/etc/ssh/ssh_host_rsa_key", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d85dbf3f-8873-2550-b388-fc6420252c7c", "ret_objuuid1": "d85dbf3f-8873-2550-b388-fc6420252c7c", "upath1": "/etc/ssh/ssh_host_rsa_key.pub", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d85dbf3f-8873-2550-b388-fc6420252c7c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "ret_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "upath1": "/etc/ssh/ssh_host_ecdsa_key", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "ret_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "upath1": "/etc/ssh/ssh_host_ecdsa_key", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3efd70ec-8129-a85e-a981-1a934ea8ee3c", "ret_objuuid1": "3efd70ec-8129-a85e-a981-1a934ea8ee3c", "upath1": "/etc/ssh/ssh_host_ecdsa_key.pub", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3efd70ec-8129-a85e-a981-1a934ea8ee3c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "ret_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "upath1": "/etc/ssh/ssh_host_ed25519_key", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "ret_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "upath1": "/etc/ssh/ssh_host_ed25519_key", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6eb7ebeb-1f96-1e57-961f-e755571e202c", "ret_objuuid1": "6eb7ebeb-1f96-1e57-961f-e755571e202c", "upath1": "/etc/ssh/ssh_host_ed25519_key.pub", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6eb7ebeb-1f96-1e57-961f-e755571e202c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 63} +{"event": "audit:event:aue_chdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "79047e1d-240e-be52-8e24-bdde62be883d", "upath1": "/", "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d6641df6-467a-11e9-aea8-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 2, "fd": -100, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 4, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 4, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 4, "ret_fd1": 2, "retval": 2} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 4, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "ret_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "upath1": "/etc/resolv.conf", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "35657c19-0d44-6554-840d-56131465bb07", "ret_objuuid1": "35657c19-0d44-6554-840d-56131465bb07", "upath1": "/etc/gss/mech", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "ret_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "upath1": "/usr/lib/libgssapi_krb5.so.10", "flags": 3145728, "fd": -100, "ret_fd1": 6, "mode": 0, "retval": 6} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "fd": 6, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "16c3ea07-48df-ba58-9f48-087fd8bab643", "ret_objuuid1": "16c3ea07-48df-ba58-9f48-087fd8bab643", "upath1": "/usr/lib/libgssapi_spnego.so.10", "flags": 3145728, "fd": -100, "ret_fd1": 6, "mode": 0, "retval": 6} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "16c3ea07-48df-ba58-9f48-087fd8bab643", "fd": 6, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "35657c19-0d44-6554-840d-56131465bb07", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901014716984, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 26345} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "e1d2cd21-6a99-d55c-996a-4ae8bcd556d9", "ret_objuuid1": "e1d2cd21-6a99-d55c-996a-4ae8bcd556d9", "upath1": "/etc/pam.d/sshd", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "ret_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "upath1": "/usr/lib/pam_opie.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 9, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "ret_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "upath1": "/usr/lib/libopie.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 9, "mode": 0, "retval": 9} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 9, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "ret_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "upath1": "/lib/libmd.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 9, "mode": 0, "retval": 9} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "ret_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "upath1": "/usr/lib/pam_opieaccess.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 9, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "ret_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "upath1": "/usr/lib/libypclnt.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 9, "mode": 0, "retval": 9} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "abf6fcaf-21ca-5a51-8a21-2a1e615a33b7", "ret_objuuid1": "abf6fcaf-21ca-5a51-8a21-2a1e615a33b7", "upath1": "/usr/lib/pam_nologin.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "abf6fcaf-21ca-5a51-8a21-2a1e615a33b7", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "abf6fcaf-21ca-5a51-8a21-2a1e615a33b7", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "ret_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "upath1": "/usr/lib/pam_login_access.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "ret_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "upath1": "/usr/lib/pam_permit.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "e1d2cd21-6a99-d55c-996a-4ae8bcd556d9", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d68855be-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68855be-467a-11e9-aea9-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68855be-467a-11e9-aea9-080027fc76ba", "ret_msgid": 365, "fd": 4, "retval": 96} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 365, "upath1": "/", "fd": 9, "address": "", "retval": 96} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aafb7a4a-d952-865d-92d9-3ff2ed86d364", "fd": 16, "retval": 72} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68855be-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d689a296-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d689a296-467a-11e9-aea9-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d689a296-467a-11e9-aea9-080027fc76ba", "ret_msgid": 366, "fd": 4, "retval": 96} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 366, "upath1": "/", "fd": 9, "address": "", "retval": 96} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d689a296-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 504} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_gid": 1003, "retval": 0} +{"event": "audit:event:aue_setuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_uid": 0, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_setuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_uid": 0, "retval": 0} +{"event": "audit:event:aue_setgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_gid": 1003, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d68b229c-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68b229c-467a-11e9-aea9-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68b229c-467a-11e9-aea9-080027fc76ba", "ret_msgid": 367, "fd": 4, "retval": 96} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 367, "upath1": "/", "fd": 9, "address": "", "retval": 96} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68b229c-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socketpair:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d68b2f7e-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d68b2f86-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "ret_fd2": 8, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d68b38c5-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_pid": 1280, "retval": 1280} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "ret_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "upath1": "/etc/opiekeys", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "ret_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "upath1": "/etc/opiekeys", "flags": 2, "fd": -100, "ret_fd1": 9, "mode": 0, "retval": 9} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 9, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "ret_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "upath1": "/etc/opiekeys", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "ret_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "upath1": "/etc/opiekeys", "flags": 2, "fd": -100, "ret_fd1": 9, "mode": 0, "retval": 9} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 9, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 368, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 369, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 370, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 371, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 368, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902044028797, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 40841} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 40841} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4579} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4632} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5740} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5793} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3817} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3870} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4856} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5130} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5263} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4091} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 372, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 372, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902134213067, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902134213067, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902134213067, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4909} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902134213067, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902134213067, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902143910395, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5183} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902143910395, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902143910395, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902143910395, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5316} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902153929763, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902153929763, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902153929763, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4144} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902164461959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902164461959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902164461959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902164461959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902173894545, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902173894545, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "ret_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "upath1": "/etc/login.access", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68b2f7e-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1279, "ppid": 1278, "tid": 100102, "uid": 22, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6767a33-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d7b3f08d-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d7b3f08d-467a-11e9-aea9-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d7b3f08d-467a-11e9-aea9-080027fc76ba", "ret_msgid": 373, "fd": 4, "retval": 140} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d7b3f08d-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d6766e84-467a-11e9-aea8-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d6641bd1-467a-11e9-aea8-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "arg_objuuid1": "d6641bd1-467a-11e9-aea7-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 373, "upath1": "/", "fd": 9, "address": "", "retval": 140} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aafb7a4a-d952-865d-92d9-3ff2ed86d364", "fd": 16, "retval": 66} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aafb7a4a-d952-865d-92d9-3ff2ed86d364", "fd": 16, "retval": 116} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2d2507ac-3e04-4a51-843e-b086314a525f", "ret_objuuid1": "2d2507ac-3e04-4a51-843e-b086314a525f", "upath1": "/etc/security/audit_user", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "ret_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "upath1": "/etc/security/audit_class", "flags": 0, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "dc2bb48d-13bc-c451-bc13-145141c492f2", "ret_objuuid1": "dc2bb48d-13bc-c451-bc13-145141c492f2", "upath1": "/etc/security/audit_control", "flags": 0, "ret_fd1": 7, "mode": 438, "retval": 7} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2d2507ac-3e04-4a51-843e-b086314a525f", "fd": 4, "retval": 27} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2d2507ac-3e04-4a51-843e-b086314a525f", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "dc2bb48d-13bc-c451-bc13-145141c492f2", "fd": 7, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "dc2bb48d-13bc-c451-bc13-145141c492f2", "ret_objuuid1": "dc2bb48d-13bc-c451-bc13-145141c492f2", "upath1": "/etc/security/audit_control", "flags": 0, "ret_fd1": 7, "mode": 438, "retval": 7} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "ret_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "upath1": "/etc/security/audit_event", "flags": 0, "ret_fd1": 8, "mode": 438, "retval": 8} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 8, "retval": 27878} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 8, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_socketpair:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d7b494b0-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7b494bb-467a-11e9-aea9-080027fc76ba", "ret_fd1": 9, "ret_fd2": 10, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_pid": 1281, "retval": 1281} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 9, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 10, "retval": 0} +{"event": "audit:event:aue_setgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_gid": 1003, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 10, "mode": 438, "retval": 10} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 10, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 10, "retval": 504} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 10, "retval": 0} +{"event": "audit:event:aue_setlogin:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "login": "user", "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_setuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_uid": 1003, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "ret_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "upath1": "/home/user/.login_conf", "flags": 1048576, "ret_fd1": 10, "mode": 0, "retval": 10} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "fd": 10, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 10, "mode": 0, "retval": 10} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 10, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "ret_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "upath1": "/home/user/.login_conf", "flags": 1048576, "ret_fd1": 10, "mode": 0, "retval": 10} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "fd": 10, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 10, "mode": 0, "retval": 10} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 10, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "ret_objuuid1": "d7b500cd-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7b500ce-467a-11e9-aea9-080027fc76ba", "ret_fd1": 10, "ret_fd2": 11, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "d7b500cd-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0, "fcntl_cmd": 4} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "d7b500ce-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0, "fcntl_cmd": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 12, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 13, "retval": 0} +{"event": "audit:event:aue_posix_openpt:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_fd1": 9, "retval": 9} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/pts/0", "flags": 2, "fd": -100, "ret_fd1": 11, "mode": 0, "retval": 11} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 12, "mode": 438, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 12, "retval": 0} +{"event": "audit:event:aue_chown:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "arg_uid": 1003, "arg_gid": 4, "upath1": "/dev/pts/0", "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 11, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "ret_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "upath1": "/var/log/utx.lastlogin", "flags": 1048576, "ret_fd1": 12, "mode": 438, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "fd": 12, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "ret_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "upath1": "/var/run/utx.active", "flags": 1048576, "ret_fd1": 12, "mode": 438, "retval": 12} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "ret_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "upath1": "/var/run/utx.active", "flags": 1049122, "ret_fd1": 13, "mode": 420, "retval": 13} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 3, "retval": 16386, "fcntl_cmd": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "fd": 13, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "ret_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "upath1": "/var/log/utx.lastlogin", "flags": 1049122, "ret_fd1": 13, "mode": 420, "retval": 13} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 3, "retval": 16386, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "fd": 13, "retval": 394} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "fd": 13, "retval": 197} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "fd": 13, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4516a868-a70c-915d-8ca7-5c9c1d91bbf9", "ret_objuuid1": "4516a868-a70c-915d-8ca7-5c9c1d91bbf9", "upath1": "/var/log/utx.log", "flags": 1049097, "ret_fd1": 13, "mode": 420, "retval": 13} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4516a868-a70c-915d-8ca7-5c9c1d91bbf9", "fd": 13, "retval": 83} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4516a868-a70c-915d-8ca7-5c9c1d91bbf9", "fd": 13, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "fd": 12, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 0} +{"event": "audit:event:aue_sendmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d7b494bb-467a-11e9-aea9-080027fc76ba", "fd": 10, "retval": 1} +{"event": "audit:event:aue_sendmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d7b494bb-467a-11e9-aea9-080027fc76ba", "fd": 10, "retval": 1} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 0, "mode": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 11, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 52} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 374, "fd": 8, "retval": 133} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 374, "upath1": "/", "fd": 9, "address": "", "retval": 133} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "d7b494b0-467a-11e9-aea9-080027fc76ba", "fd": 9, "retval": 1} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "d7b494b0-467a-11e9-aea9-080027fc76ba", "fd": 9, "retval": 1} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "ret_objuuid1": "d7b5a811-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_pid": 1282, "retval": 1282} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 13, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 4, "retval": 0, "fcntl_cmd": 4} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 3, "retval": 6, "fcntl_cmd": 3} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 375, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 375, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 14, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 15, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 12, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/pts/0", "flags": 2, "fd": -100, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 12, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 1, "fd": -100, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 12, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 13, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 13, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 13, "ret_fd1": 2, "retval": 2} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 13, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 376, "fd": 8, "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 376, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fcf113a7-aa96-585f-96aa-757b7f5884e7", "ret_objuuid1": "fcf113a7-aa96-585f-96aa-757b7f5884e7", "upath1": "/etc/motd", "flags": 0, "ret_fd1": 12, "mode": 438, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fcf113a7-aa96-585f-96aa-757b7f5884e7", "fd": 12, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "ret_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "upath1": "/home/user/.login_conf", "flags": 1048576, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "fd": 12, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 12, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_closefrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 11, "retval": 0} +{"event": "audit:event:aue_chdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "802da701-0471-305d-b104-2b472d304411", "upath1": "/home/user", "retval": 0} +{"event": "audit:event:aue_closefrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "-bash"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 66881} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "ret_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "upath1": "/etc/pwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 377, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 377, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cdc8911c-7575-ae53-b575-90e5c3ae1b34", "ret_objuuid1": "cdc8911c-7575-ae53-b575-90e5c3ae1b34", "upath1": "/etc/profile", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cdc8911c-7575-ae53-b575-90e5c3ae1b34", "fd": 3, "retval": 562} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cdc8911c-7575-ae53-b575-90e5c3ae1b34", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3", "ret_objuuid1": "f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3", "upath1": "/home/user/.profile", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3", "fd": 3, "retval": 881} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "d7c185e7-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_pid": 1283, "retval": 1283} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b003464c-20bc-2258-bc20-35a2f822aca3", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/resizewin", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/resizewin -z"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "d7c2196c-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_pid": 1284, "retval": 1284} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "973ecfbf-e437-0451-b7e4-41ba11046147", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/fortune", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/fortune freebsd-tips"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2408448, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2408448, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2928640, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2928640, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4259840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4259840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904133954137, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 75810} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904133954137, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 75810} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904133954137, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904133954137, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904133954137, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4102} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4155} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3634} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3687} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4553} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4606} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4190} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4727} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4810} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4200} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4721} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905153966888, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 79717} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905304236022, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905304236022, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905304236022, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905304236022, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 17} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1229, "ppid": 1226, "tid": 100074, "uid": 0, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "b583ceaf-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b146388e-467a-11e9-ae02-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "dfc2891a-d014-6a5f-94d0-76881f6a1fb0", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/nice", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "nice -4 fsck -B -p"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "19a7640a-bde5-2058-a5bd-6734c820ce3a", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/sbin/fsck", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "fsck -B -p"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2404352, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2404352, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2920448, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2920448, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4251648, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4251648, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "7ff6a25d-5b88-aa5f-885b-b000bfaae0f4", "ret_objuuid1": "7ff6a25d-5b88-aa5f-885b-b000bfaae0f4", "upath1": "/etc/fstab", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "7ff6a25d-5b88-aa5f-885b-b000bfaae0f4", "fd": 3, "retval": 200} +{"event": "audit:event:aue_vfork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "ret_objuuid1": "d952a902-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_pid": 1285, "retval": 1285} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "434858bb-406e-6156-ae40-962bc661e15f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/sbin/fsck_ufs", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "fsck_ufs -p -F /dev/ada0p3"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "ret_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "upath1": "/lib/libufs.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2531328, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2531328, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2535424, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2535424, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2555904, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2555904, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2531328, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2531328, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2580480, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2580480, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3096576, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3096576, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4427776, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4427776, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "ret_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "upath1": "/dev/ada0p3", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "fd": 3, "retval": 8192} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "7ff6a25d-5b88-aa5f-885b-b000bfaae0f4", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "7ff6a25d-5b88-aa5f-885b-b000bfaae0f4", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905794548453, "pid": 1227, "ppid": 1, "tid": 100084, "uid": 0, "cpu_id": 0, "exec": "logger", "subjprocuuid": "b583c3cf-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b4f5c781-467a-11e9-ae58-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906124611700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 79717} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906124611700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906178054811, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 88685} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906283883081, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 2} +{"event": "audit:event:aue_kill:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906293906646, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d7b5a811-467a-11e9-aea9-080027fc76ba", "arg_pid": 1282, "arg_euid": 1003, "arg_ruid": 1003, "arg_egid": 1003, "arg_rgid": 1003, "signum": 2, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906293906646, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906293906646, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906293906646, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 21} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906623959179, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906623959179, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906714285543, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906714285543, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906843870856, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906843870856, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906994149349, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906994149349, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907074986277, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907074986277, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907183946428, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 90319} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907226215093, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907226215093, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "802da701-0471-305d-b104-2b472d304411", "ret_objuuid1": "802da701-0471-305d-b104-2b472d304411", "upath1": "/usr/home/user/.", "flags": 1179652, "ret_fd1": 3, "mode": 29856, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907226215093, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "802da701-0471-305d-b104-2b472d304411", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907226215093, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 21} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 384, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 385, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 386, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 387, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 384, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 385, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 386, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 387, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 90319} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4520} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4573} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4440} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4493} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1630} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1683} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 388, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 388, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908194056284, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 94688} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908713861358, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908713861358, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908904072636, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908904072636, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909013925442, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909013925442, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/home/user/ripe-prov-tests-master/", "flags": 1179652, "ret_fd1": 3, "mode": 48848, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909013925442, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909013925442, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909204168075, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 95840} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909294044101, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909294044101, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_chdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909294044101, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/home/user/ripe-prov-tests-master/Linux", "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909294044101, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909294044101, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 50} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 95840} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4365} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4418} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1148} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1201} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 389, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 389, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910133863566, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910133863566, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910223880459, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 98904} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910364402487, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910364402487, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910364402487, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910364402487, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 32} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 390, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 391, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 392, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 393, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 390, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 391, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 392, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 393, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911233887268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 100381} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "dc9aef12-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "dc9aef12-467a-11e9-aea9-080027fc76ba", "fd": 4, "address": "107.155.79.108", "port": 123, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "dc9aef12-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "tid": 100092, "uid": 123, "so_uuid": "b5434a9c-467a-11e9-ae89-080027fc76ba", "lport": 123, "fport": 123, "laddr": "10.0.2.15", "faddr": "107.155.79.108"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "b5434a9c-467a-11e9-ae89-080027fc76ba", "ret_msgid": 394, "fd": 22, "address": "107.155.79.108", "port": 123, "retval": 48} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "b541acd0-467a-11e9-ae89-080027fc76ba", "ret_msgid": 395, "fd": 3, "retval": 102} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b2110-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 395, "upath1": "/", "fd": 8, "address": "", "retval": 102} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 100381} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3060} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3113} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1473} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1526} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 396, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 396, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912204256412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912204256412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912204256412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912204256412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 37} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912243951039, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 103965} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 17} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913254283039, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 104813} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 397, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 398, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 399, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 400, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 397, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 398, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 399, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 400, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 104813} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3580} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3633} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 844} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 897} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 401, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 401, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914153936323, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914153936323, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914153936323, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914153936323, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 48} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914264068977, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 108412} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582915273963131, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 108777} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 108777} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3595} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3648} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 402, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 402, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "df8637e6-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_pid": 1286, "retval": 1286} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./bash_commands.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ./bash_commands.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ./bash_commands.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916294130790, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 117711} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 403, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 404, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 405, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 406, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 403, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 404, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 405, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 406, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1287, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "df874ee9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 445} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 11} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 11} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 241} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e022ec76-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1288, "retval": 1288} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d1524fc4-3a5e-855b-9e3a-5d212b8581ed", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/whoami", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "whoami"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "ret_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "upath1": "/etc/pwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 5} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 351} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 270} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e023b7af-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1289, "retval": 1289} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ab57cf3a-f09d-cd5e-9df0-38f66ecdfb24", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/netstat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "netstat -n -l"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "ret_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "upath1": "/lib/libkvm.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2555904, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2555904, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2580480, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2580480, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "ret_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "upath1": "/usr/lib/libmemstat.so.3", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2641920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2641920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "ret_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "upath1": "/lib/libxo.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2777088, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2777088, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2822144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2822144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "ret_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "upath1": "/usr/lib/libnetgraph.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2883584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2883584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2891776, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2891776, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2899968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2899968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "ret_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "upath1": "/lib/libelf.so.2", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7077888, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7077888, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7106560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7106560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7176192, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7176192, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 3089} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 322} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 303} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e024fd03-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1290, "retval": 1290} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de3a34c1-0b17-8152-970b-4c2cb281885f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/cat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "cat /proc/cpuinfo"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 5} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 26} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 289} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 336} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02564b5-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1291, "retval": 1291} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de3a34c1-0b17-8152-970b-4c2cb281885f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/cat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "cat /etc/networks"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "ret_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "upath1": "/etc/networks", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "fd": 3, "retval": 310} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 310} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 256} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 359} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e025c619-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1292, "retval": 1292} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "542d495d-cfb1-a954-b1cf-f79fd4a9303e", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/ps", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "ps auxx"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "ret_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "upath1": "/lib/libm.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "ret_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "upath1": "/lib/libkvm.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2699264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2699264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "ret_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "upath1": "/lib/libjail.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2736128, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2736128, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "ret_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "upath1": "/lib/libxo.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2748416, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2748416, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2781184, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2781184, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2879488, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2879488, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4726784, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4726784, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "ret_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "upath1": "/lib/libelf.so.2", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7045120, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7045120, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7073792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7073792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7143424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7143424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7184384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7184384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7229440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7229440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 1048576, "fd": -100, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 5, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 5, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "ret_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "upath1": "/etc/pwd.db", "flags": 1048576, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "ret_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "upath1": "/usr/share/zoneinfo/UTC", "flags": 0, "ret_fd1": 6, "mode": 0, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 6, "retval": 118} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 6, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "ret_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "upath1": "/usr/share/zoneinfo/posixrules", "flags": 0, "ret_fd1": 6, "mode": 24832, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 6, "retval": 3519} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 6, "retval": 0} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 4380} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 233} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e026d50d-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e026d50e-467a-11e9-aea9-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 423} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e026da24-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1293, "retval": 1293} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e026e0b0-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1294, "retval": 1294} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 4, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e026d50e-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 10} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3f4e2dec-9008-5a56-8890-4814765aa0ba", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/sudo", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sudo -S ls"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2510848, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2510848, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2588672, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2588672, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "ret_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "upath1": "/usr/local/libexec/sudo/libsudo_util.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2637824, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2637824, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2703360, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2703360, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2744320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2744320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2756608, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2756608, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3272704, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3272704, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4603904, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4603904, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "ret_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "upath1": "/usr/share/zoneinfo/UTC", "flags": 0, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 3, "retval": 118} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "ret_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "upath1": "/usr/share/zoneinfo/posixrules", "flags": 0, "ret_fd1": 3, "mode": 24832, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 3, "retval": 3519} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 2, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 5, "retval": 0} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "ret_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "upath1": "/usr/local/libexec/sudo/sudoers.so", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7319552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7319552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7434240, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7434240, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7647232, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7647232, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "ret_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "upath1": "/usr/lib/libbsm.so.3", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7667712, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7667712, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7708672, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7708672, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7778304, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7778304, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "ret_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "upath1": "/usr/lib/libpam.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7790592, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7790592, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7815168, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7815168, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7843840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7843840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "ret_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "upath1": "/lib/libz.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7856128, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7856128, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7888896, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7888896, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7958528, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7958528, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": 0, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": 1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "ret_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "upath1": "/usr/local/etc/sudoers", "flags": 0, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 3678} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 3678} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": 0, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": -1, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": 0, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "382d9507-c88d-7556-8dc8-bb47e67533c4", "ret_objuuid1": "382d9507-c88d-7556-8dc8-bb47e67533c4", "upath1": "/usr/local/etc/sudoers.d", "flags": 1179652, "ret_fd1": 6, "mode": 65535, "retval": 6} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "382d9507-c88d-7556-8dc8-bb47e67533c4", "fd": 6, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": 1003, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 504} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 504} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 504} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "ret_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "upath1": "/usr/local/etc/pam.d/sudo", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "fd": 4, "retval": 323} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "ret_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "upath1": "/etc/pam.d/system", "flags": 0, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 648} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "ret_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "upath1": "/usr/lib/pam_opie.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8204288, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8204288, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8208384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8208384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8212480, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8212480, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "ret_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "upath1": "/usr/lib/libopie.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8220672, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8220672, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8232960, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8232960, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8249344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8249344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "ret_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "upath1": "/lib/libmd.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14680064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14680064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14712832, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14712832, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14794752, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14794752, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 7, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "ret_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "upath1": "/usr/lib/pam_opieaccess.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8269824, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8269824, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8273920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8273920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8278016, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8278016, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 7, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8286208, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8286208, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8294400, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8294400, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8302592, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8302592, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "ret_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "upath1": "/lib/libcrypt.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14938112, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14938112, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14954496, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14954496, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14995456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14995456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "ret_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "upath1": "/usr/lib/libypclnt.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8310784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8310784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8323072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8323072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8331264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8331264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 7, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "ret_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "upath1": "/etc/pam.d/system", "flags": 0, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 648} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "ret_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "upath1": "/usr/lib/pam_login_access.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8343552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8343552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8347648, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8347648, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8351744, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8351744, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 7, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8359936, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8359936, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8368128, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8368128, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8376320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8376320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 7, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "ret_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "upath1": "/usr/lib/pam_permit.so.6", "flags": 0, "fd": -100, "ret_fd1": 6, "mode": 0, "retval": 6} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 6, "ret_fd1": 7, "retval": 7, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15077376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15077376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15081472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15081472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15085568, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15085568, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 6, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "ret_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "upath1": "/etc/pam.d/system", "flags": 0, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 648} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15093760, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15093760, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15101952, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15101952, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15110144, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15110144, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 7, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "ret_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "upath1": "/etc/login.access", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "fd": 4, "retval": 1785} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 1024} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 1024} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "ret_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "upath1": "/etc/ttys", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "fd": 4, "retval": 2086} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": 0, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02b4d2c-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02b4d2c-467a-11e9-aea9-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02b4d2c-467a-11e9-aea9-080027fc76ba", "ret_msgid": 407, "fd": 4, "retval": 164} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 407, "upath1": "/", "fd": 9, "address": "", "retval": 164} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aafb7a4a-d952-865d-92d9-3ff2ed86d364", "fd": 16, "retval": 140} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02b4d2c-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": 1003, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "ret_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "upath1": "/etc/security/audit_event", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 27878} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "ret_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "upath1": "/etc/security/audit_class", "flags": 0, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 27878} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 27878} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": -1, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 63} +{"event": "audit:event:aue_setuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_uid": 0, "retval": 0} +{"event": "audit:event:aue_setgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_gid": 0, "retval": 0} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02bec48-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e02bec49-467a-11e9-aea9-080027fc76ba", "ret_fd1": 6, "ret_fd2": 7, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1295, "retval": 1295} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02bf8c6-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e02bf8c7-467a-11e9-aea9-080027fc76ba", "ret_fd1": 7, "ret_fd2": 8, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_euid": 0, "arg_ruid": 0, "arg_suid": 0, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 1, "fcntl_cmd": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_closefrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 6, "ret_fd1": 7, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bec49-467a-11e9-aea9-080027fc76ba", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/ls", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "ls"} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bec48-467a-11e9-aea9-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bec48-467a-11e9-aea9-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2420736, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2420736, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2453504, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2453504, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "ret_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "upath1": "/lib/libncursesw.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2514944, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2514944, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2682880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2682880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2887680, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2887680, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_fchdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1179652, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 5, "retval": 0} +{"event": "audit:event:aue_fchdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 4, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 119} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 107} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 103} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 88} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 104} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 94} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bf8c7-467a-11e9-aea9-080027fc76ba", "fd": 8, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bf8c6-467a-11e9-aea9-080027fc76ba", "fd": 7, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bf8c6-467a-11e9-aea9-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bf8c7-467a-11e9-aea9-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 169} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 489} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02d16f1-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1296, "retval": 1296} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 103} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 508} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02d3b31-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1297, "retval": 1297} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e7451145-d4d2-9753-92d4-25f153976db4", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/nc", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "nc -l 54321"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "ret_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "upath1": "/lib/libipsec.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917485712666, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 195593} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 195593} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4628} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4681} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4298} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4351} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4787} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4840} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4396} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4087} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4338} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4824} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4264} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3913} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4723} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3899} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4199} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3977} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4245} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4214} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4299} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4570} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4449} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3945} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4109} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5021} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 408, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 408, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918144488663, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918144488663, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918144488663, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4140} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4391} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4877} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918167986826, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918167986826, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918167986826, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4317} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3966} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4776} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918188618677, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918188618677, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918188618677, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3952} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4252} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4030} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918204342280, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918204342280, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918204342280, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4298} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918216018019, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918216018019, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918216018019, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4267} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4352} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4623} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918234217398, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918234217398, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918234217398, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3998} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4162} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5074} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918253911946, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918253911946, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 84} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c81a41-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e0c81a42-467a-11e9-aea9-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 551} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c820b9-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1298, "retval": 1298} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c83648-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e0c83648-467a-11e9-aeaa-080027fc76ba", "ret_fd1": 4, "ret_fd2": 5, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1299, "retval": 1299} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1300, "retval": 1300} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 4, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de3a34c1-0b17-8152-970b-4c2cb281885f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/cat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "cat EXFILTRATION_FILE.dat"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 5, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 4, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e7451145-d4d2-9753-92d4-25f153976db4", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/nc", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "nc localhost 54321"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 2416} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 2416} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "ret_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "upath1": "/lib/libipsec.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2449408, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2449408, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2461696, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2461696, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2977792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2977792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4308992, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4308992, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "ret_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "upath1": "/etc/hosts", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 3, "retval": 1031} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "e0c954e1-467a-11e9-aeaa-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0c954e1-467a-11e9-aeaa-080027fc76ba", "fd": 3, "address": "::1", "port": 1, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0c954e1-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "e0c95ac3-467a-11e9-aeaa-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0c95ac3-467a-11e9-aeaa-080027fc76ba", "fd": 3, "address": "127.0.0.1", "port": 1, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0c95ac3-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "e0c95f94-467a-11e9-aeaa-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "tid": 100015, "uid": 0, "so_uuid": "e0c95f94-467a-11e9-aeaa-080027fc76ba", "lport": 58335, "fport": 54321, "laddr": "127.0.0.1", "faddr": "127.0.0.1", "iss": 2687118993} +{"event": "fbt:kernel:syncache_expand:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "tid": 100015, "uid": 0, "so_uuid": "e02dc1a3-467a-11e9-aea9-080027fc76ba", "lport": 54321, "fport": 58335, "laddr": "127.0.0.1", "faddr": "127.0.0.1"} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "tid": 100015, "uid": 0, "so_uuid": "e0c96387-467a-11e9-aeaa-080027fc76ba", "lport": 54321, "fport": 58335, "laddr": "127.0.0.1", "faddr": "127.0.0.1", "iss": 3391450941} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0c95f94-467a-11e9-aeaa-080027fc76ba", "fd": 3, "address": "127.0.0.1", "port": 54321, "retval": 0} +{"event": "audit:event:aue_accept:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02dc1a3-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c96387-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 4, "address": "127.0.0.1", "port": 58335, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 0, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4a7e215d-fecb-7d56-8bfe-3c48a67db43b", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/gzip", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "gzip"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "ret_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "upath1": "/lib/libz.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2465792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2465792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2535424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2535424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "ret_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "upath1": "/usr/lib/liblzma.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "ret_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "upath1": "/usr/lib/libbz2.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2732032, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918573865723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 224757} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 409, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 410, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 411, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 412, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 409, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 410, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 411, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 412, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919584302803, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 225933} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920014838623, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "ret_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "upath1": "/etc/cron.d", "flags": 1179652, "ret_fd1": 5, "mode": 59400, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920014838623, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 225933} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3589} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3642} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3961} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4014} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3861} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3914} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4183} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4589} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4294} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4659} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920594048818, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 230095} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582921604408901, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 230461} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 230461} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4158} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4211} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 362} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 415} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 414, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 414, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922134392999, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922134392999, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922134392999, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922134392999, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 415, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 416, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 417, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 418, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 415, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 416, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 417, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 418, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922614154307, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 233683} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582923626871472, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 234048} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 234048} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3218} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3271} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 419, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 419, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924634267384, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 236454} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 420, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 421, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 422, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 423, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 420, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 421, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 422, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 423, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925644157193, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 237625} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 237625} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2402} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 2455} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1167} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1220} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 424, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 424, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926684053300, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 240035} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582927713020504, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 240399} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 240399} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2406} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 2459} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 425, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 425, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928134166897, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928134166897, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928134166897, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928134166897, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 426, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 427, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 428, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 429, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 426, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 427, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 428, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 429, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928774225532, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 243606} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582929784157083, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 243971} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 243971} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3203} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3256} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 430, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 430, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930164402700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930164402700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930164402700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930164402700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930834131946, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 246392} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 431, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 432, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 433, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 434, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 431, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 432, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 433, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 434, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931874490959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 247570} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 247570} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2417} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 2470} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1174} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1227} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 435, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 435, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932134613200, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932134613200, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932170453790, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932170453790, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c96387-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c96387-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02dc1a3-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_kill:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "df8637e6-467a-11e9-aea9-080027fc76ba", "arg_pid": 1286, "arg_euid": 1003, "arg_ruid": 1003, "arg_egid": 1003, "arg_rgid": 1003, "signum": 2, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 50} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932967496110, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 250819} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582933969545910, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 251183} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 251183} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3245} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3298} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 436, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 436, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934133927192, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934133927192, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934133927192, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934133927192, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 437, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 438, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 439, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 440, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 437, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 438, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 439, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 440, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582935025523231, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 254399} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936033905299, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 254762} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 254762} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3212} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3265} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 441, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 441, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936133880472, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936133880472, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "host::info:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "uname":"FreeBSD 13.0-CURRENT FreeBSD 13.0-CURRENT 5da4c1df8d5(HEAD) CADETS amd64", "hostname":"cadets-bbn", "network":[ {"name":"em0", "mac":"08:00:27:fc:76:ba", "inet":"10.0.2.15", "inet6":""},{"name":"em1", "mac":"08:00:27:f9:7a:ba", "inet":"192.168.56.101", "inet6":""}] , "version": "versionn_innfo:"} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582951268242273, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3", "fd": 5, "retval": 16} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582951268242273, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "c1555c7c-d38e-9a58-8ed3-e319889a0469", "fd": 14, "retval": 48} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582951268242273, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 48} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952124549143, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 257176} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952124549143, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952194028767, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 258177} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 463, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 464, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 465, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 466, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 463, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 464, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 465, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 466, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952664295450, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952664295450, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952664295450, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952664295450, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 2} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582953204141200, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 259659} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582953588138412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582953588138412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582953588138412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582953588138412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 21} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 259659} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 997} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1050} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1478} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1531} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 467, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 467, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954133942560, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954133942560, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954219192362, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 262471} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954506555215, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954506555215, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954506555215, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954506555215, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 51} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955224328560, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 263158} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955413909882, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955413909882, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955413909882, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955413909882, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 37} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 468, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 469, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 470, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 471, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 468, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 469, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 470, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 471, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 263158} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2808} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 2861} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 683} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 736} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 472, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 472, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956233997606, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 266753} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956334770993, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956334770993, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956334770993, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956334770993, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 17} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582957249417963, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 267436} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 267436} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3591} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3644} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 679} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 732} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 473, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 473, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958254271204, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 269844} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 474, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 475, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 476, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 477, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 474, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 475, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 476, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 477, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959264447168, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 271023} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1337, "retval": 1337} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/all.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/all.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "ret_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1884} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 516} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "f98d2634-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1338, "retval": 1338} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959824307368, "pid": 1338, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98d2634-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960284294164, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 279988} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1338, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "f98d2634-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 34} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fa277e30-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1339, "retval": 1339} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "56ecc1ae-1878-7b59-b818-6135097b8030", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./change_file_permissions", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./change_file_permissions "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_chmod:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/README.md", "mode": 438, "retval": 0} +{"event": "audit:event:aue_chmod:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/README.md", "mode": 439, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1368} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 532} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1340, "retval": 1340} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961304776512, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 284908} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 479, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 480, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 481, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 482, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 479, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 480, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 481, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 482, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1341, "retval": 1341} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0609dc59-7cb8-de5b-b87c-35aeebded4bf", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_file", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_file "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "ret_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/README.md", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "745458ec-83ee-b052-ae83-2efb22b0cb41", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/out.tmp", "flags": 1537, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "fd": 3, "retval": 2498} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "745458ec-83ee-b052-ae83-2efb22b0cb41", "fd": 4, "retval": 2498} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "745458ec-83ee-b052-ae83-2efb22b0cb41", "fd": 4, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1352} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 554} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fac368df-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1342, "retval": 1342} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 284908} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4799} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4852} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4158} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4211} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4916} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4969} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962316591861, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 294069} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1343, "retval": 1343} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0f7e034a-4539-ea5b-b945-2560fbea7185", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_buf "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1330} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 588} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1344, "retval": 1344} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963333887767, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 298938} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 38} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1345, "retval": 1345} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "8d001f29-417a-805e-ba41-cecf5e804caf", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_stack_frame", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_buf_stack_frame "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1296} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 617} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1346, "retval": 1346} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964344364848, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 303803} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 485, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 486, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 487, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 488, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 485, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 486, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 487, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 488, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 33} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fc92c880-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1347, "retval": 1347} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "656c7084-7a51-2d53-917a-60f4832de58f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_string", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_buf_string "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1267} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 644} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1348, "retval": 1348} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965354116724, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 308830} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 31} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1349, "retval": 1349} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a40cfc78-90a1-075c-a190-f4d7ac07bd69", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_heap_buf", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_heap_buf "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1240} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 663} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1350, "retval": 1350} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966373962760, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 313695} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 23} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fdc88672-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1351, "retval": 1351} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1bca75f7-71d4-1553-9471-f02cd31597be", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./fork_process", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./fork_process "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "fdc8d004-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1352, "retval": 1352} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 15} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1352, "ppid": 1, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc8d004-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1221} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 677} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1353, "retval": 1353} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1352, "ppid": 1, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc8d004-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967394080897, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 318788} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 490, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 491, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 492, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 493, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 490, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 491, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 492, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 493, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 18} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fe646b69-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1354, "retval": 1354} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2e1f69d8-d3e4-2950-a4d3-829bb0298789", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./listdir", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./listdir "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1179652, "ret_fd1": 3, "mode": 60240, "retval": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 5} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 9} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 5} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 28} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 24} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 15} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 8} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 23} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 21} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 23} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 24} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 9} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 8} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 15} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1207} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 698} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fe654cca-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1355, "retval": 1355} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968418492202, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 326677} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 25} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "feff028b-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1356, "retval": 1356} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cbeb200e-1746-3e58-8617-b743583e4f59", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./make_directory", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./make_directory "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mkdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ef2077a9-1b4f-685b-8f1b-6859ab685e9f", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/temporary", "mode": 511, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1186} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 727} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "feff8c39-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1357, "retval": 1357} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969434831514, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 331677} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 33} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1358, "retval": 1358} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6741c59f-8ce3-8e50-a38c-f0d1808ea1c5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_multi_write", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./multi_read_multi_write "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "ret_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "ret_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "ret_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/output_file1.tmp", "flags": 1537, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "ret_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/output_file2.tmp", "flags": 1537, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 209} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 382} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "fd": 5, "retval": 191} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "fd": 5, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "fd": 6, "retval": 187} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "fd": 6, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1157} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 757} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1359, "retval": 1359} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 331677} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4432} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4485} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3449} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3502} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4996} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5049} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 495, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 495, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970133899473, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970133899473, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970133899473, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970133899473, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970464025726, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 341125} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 496, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 497, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 498, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 499, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 496, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 497, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 498, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 499, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 34} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "00359f92-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1360, "retval": 1360} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d8b8f561-1e30-f858-b01e-d3c3b8f82fe5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_single_write", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./multi_read_single_write "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "ret_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "ret_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "ret_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/merged_file.tmp", "flags": 1537, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 209} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 382} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "fd": 5, "retval": 378} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "fd": 5, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1127} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582971483913741, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 345981} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1361, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00360eca-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 27} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1362, "retval": 1362} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6afebb5e-412d-d25c-ad41-600cfcd2423e", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./remove_directory", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./remove_directory "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_rmdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ef2077a9-1b4f-685b-8f1b-6859ab685e9f", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/temporary", "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1104} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 798} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "00d10d10-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1363, "retval": 1363} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972504128832, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 350970} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "016b62c2-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1364, "retval": 1364} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./remove_file", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./remove_file "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_unlink:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "745458ec-83ee-b052-ae83-2efb22b0cb41", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/out.tmp", "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1086} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 872} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1365, "retval": 1365} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 356013} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 501, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 502, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 503, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 504, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 501, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 502, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 503, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 504, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1366, "retval": 1366} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copied_pipe", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copied_pipe a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "0205e82e-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "0205e82f-467b-11e9-aeb7-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "0205eb21-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1367, "retval": 1367} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1367, "ppid": 1366, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205eb21-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1367, "ppid": 1366, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205eb21-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 4, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1367, "ppid": 1366, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205eb21-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0205e82f-467b-11e9-aeb7-080027fc76ba", "fd": 1, "retval": 2} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1367, "ppid": 1366, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205eb21-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0205e82e-467b-11e9-aeb7-080027fc76ba", "fd": 0, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1012} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974534337270, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360849} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1368, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0206281d-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 28} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "029fc20e-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1369, "retval": 1369} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/datagram.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/datagram.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "ret_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 296} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 250} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "02a0949b-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1370, "retval": 1370} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 268} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "02a09f07-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1371, "retval": 1371} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "373ba8a7-d481-4f5a-81d4-177fea4f8ab6", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./datagram_server", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./datagram_server"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975573954964, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 374757} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 28} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "033a9f30-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1372, "retval": 1372} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ffa1f988-cf0d-7f5b-8dcf-910bcb7fb68e", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./datagram_client", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./datagram_client a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "033af1f1-467b-11e9-aeb7-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033af1f1-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "033af5b2-467b-11e9-aeb7-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033af5b2-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 47} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "033b00cc-467b-11e9-aeb7-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "tid": 100144, "uid": 1003, "so_uuid": "033b00cc-467b-11e9-aeb7-080027fc76ba", "lport": 61810, "fport": 4950, "laddr": "::1", "faddr": "::1"} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "tid": 100015, "uid": 0, "so_uuid": "02a14724-467b-11e9-aeb7-080027fc76ba", "lport": 4950, "fport": 61810, "laddr": "::1", "faddr": "::1"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033b00cc-467b-11e9-aeb7-080027fc76ba", "ret_msgid": 506, "fd": 3, "address": "::1", "port": 4950, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033b00cc-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "033b06bf-467b-11e9-aeb7-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "tid": 100144, "uid": 1003, "so_uuid": "033b06bf-467b-11e9-aeb7-080027fc76ba", "lport": 29583, "fport": 4950, "laddr": "127.0.0.1", "faddr": "127.0.0.1"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033b06bf-467b-11e9-aeb7-080027fc76ba", "ret_msgid": 507, "fd": 3, "address": "127.0.0.1", "port": 4950, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033b06bf-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "02a14724-467b-11e9-aeb7-080027fc76ba", "ret_msgid": 506, "fd": 3, "address": "::1", "port": 61810, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 31} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "02a14724-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 961} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 974} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1373, "retval": 1373} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 374757} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4832} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4885} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4939} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4992} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976605249234, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 384214} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "03d617c8-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1374, "retval": 1374} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f5cca548-4198-c65d-9841-9bcbadc62d45", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./direct_pipe", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./direct_pipe a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "03d65a83-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "03d65a83-467b-11e9-aeb8-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "03d65d8b-467b-11e9-aeb8-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1375, "retval": 1375} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1375, "ppid": 1374, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d65d8b-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1375, "ppid": 1374, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d65d8b-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "03d65a83-467b-11e9-aeb8-080027fc76ba", "fd": 4, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1375, "ppid": 1374, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d65d8b-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1375, "ppid": 1374, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d65d8b-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "03d65a83-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 910} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1025} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "03d69d45-467b-11e9-aeb8-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1376, "retval": 1376} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977614240236, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 389294} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 25} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "047114a8-467b-11e9-aeb8-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1377, "retval": 1377} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/named.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/named.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "ret_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 286} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 253} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "04724181-467b-11e9-aeb8-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1378, "retval": 1378} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 33} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 271} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "04724c46-467b-11e9-aeb8-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1379, "retval": 1379} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "b0bc4f68-c591-a656-91c5-dcf6b6a6dfa5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./named_writer", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./named_writer a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 27} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978653885691, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 403239} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 15} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "050e3275-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1380, "retval": 1380} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "d13b936e-e1a2-e756-a2e1-63e636e7e7c5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./named_reader", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./named_reader"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 27} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "ret_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "ret_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "ret_objuuid2": "04732720-467b-11e9-aeb9-080027fc76ba", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp", "flags": 1, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04732720-467b-11e9-aeb8-080027fc76ba", "fd": 3, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 18} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04732720-467b-11e9-aeb8-080027fc76ba", "fd": 3, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04732720-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 859} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1041} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "050ef741-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1381, "retval": 1381} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979673936273, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 408126} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980015553697, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "ret_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "upath1": "/etc/cron.d", "flags": 1179652, "ret_fd1": 5, "mode": 59400, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980015553697, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 408126} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4918} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4971} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4005} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4058} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5010} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5063} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4883} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 520, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 520, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1381, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "050ef741-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "05a8917f-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1382, "retval": 1382} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7eec5b1a-792a-5556-aa79-9b231655b451", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./shm_exfil", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./shm_exfil "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980684087639, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 413024} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 4} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 843} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1092} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "0644af0a-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1384, "retval": 1384} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981694131361, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 415975} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 415975} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4894} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4947} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2947} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3000} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 521, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 521, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982134345512, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982134345512, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1385, "retval": 1385} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/signal.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/signal.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "ret_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 289} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 245} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "06e087e7-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1386, "retval": 1386} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 44} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 263} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "06e09284-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1387, "retval": 1387} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f7889531-95ae-715e-ae95-c4adae711987", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./signal_server", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./signal_server"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "ret_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "upath1": "/usr/lib/libc++.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "ret_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "upath1": "/lib/libcxxrt.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "ret_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "upath1": "/lib/libm.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "ret_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "upath1": "/lib/libgcc_s.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982744802290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 434234} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "077cbe80-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1388, "retval": 1388} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "74643ad1-37f8-b356-b837-c78bb6b345d2", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./signal_client", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./signal_client a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "ret_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "upath1": "/usr/lib/libc++.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "ret_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "upath1": "/lib/libcxxrt.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "ret_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "upath1": "/lib/libm.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "ret_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "upath1": "/lib/libgcc_s.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3600384, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3600384, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3637248, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3637248, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3690496, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3690496, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3702784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3702784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4218880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4218880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5550080, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5550080, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "ret_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 28} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_unlink:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 792} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1143} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "077dfec4-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1389, "retval": 1389} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1389, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "077dfec4-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983773878145, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 443044} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 443044} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4726} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4779} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4336} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4389} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4695} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4748} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4486} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4550} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4252} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 526, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 526, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4539} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4603} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984143894132, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984143894132, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984143894132, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4305} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984154114648, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984154114648, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984154114648, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984154114648, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984167461125, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984167461125, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1389, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "077dfec4-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "081702f0-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1390, "retval": 1390} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/stream.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/stream.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "ret_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 290} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 256} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "0817de1c-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1391, "retval": 1391} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 34} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 274} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "0817e89b-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1392, "retval": 1392} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1392, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817e89b-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1392, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817e89b-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1392, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0817e89b-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "eeac9f12-b277-945c-b7b2-6dc48c944589", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./stream_server", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./stream_server a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1392, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0817e89b-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "0818480c-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0818480c-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08184bd5-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "08184bd5-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08184f2f-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984818638204, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 460817} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1392, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0817e89b-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 16} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1393, "retval": 1393} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "acf88428-0c9e-7555-9e0c-dc6fa5750416", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./stream_client", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./stream_client"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08b3030d-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "08b3030d-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08b30734-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "08b30734-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08b30ad7-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "tid": 100015, "uid": 0, "so_uuid": "08b30ad7-467b-11e9-aeb9-080027fc76ba", "lport": 10508, "fport": 3490, "laddr": "0.0.0.1", "faddr": "0.0.0.1", "iss": 502550519} +{"event": "fbt:kernel:syncache_expand:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "tid": 100015, "uid": 0, "so_uuid": "08184f2f-467b-11e9-aeb9-080027fc76ba", "lport": 3490, "fport": 10508, "laddr": "0.0.0.1", "faddr": "0.0.0.1"} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "tid": 100015, "uid": 0, "so_uuid": "08b310af-467b-11e9-aeb9-080027fc76ba", "lport": 3490, "fport": 10508, "laddr": "0.0.0.1", "faddr": "0.0.0.1", "iss": 2393361785} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "08b30ad7-467b-11e9-aeb9-080027fc76ba", "fd": 3, "address": "::1", "port": 3490, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 26} +{"event": "audit:event:aue_accept:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "08184f2f-467b-11e9-aeb9-080027fc76ba", "ret_objuuid1": "08b310af-467b-11e9-aeb9-080027fc76ba", "fd": 3, "ret_fd1": 4, "address": "::1", "port": 10508, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 32} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08b3272d-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_pid": 1394, "retval": 1394} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1394, "ppid": 1391, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "08b3272d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1394, "ppid": 1391, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "08b3272d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "08b310af-467b-11e9-aeb9-080027fc76ba", "fd": 4, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1394, "ppid": 1391, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "08b3272d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1394, "ppid": 1391, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "08b3272d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "08b310af-467b-11e9-aeb9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985823904780, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 465801} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 465801} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4117} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4170} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4697} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4750} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4050} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4103} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4893} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4980} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 531, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 531, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4946} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5033} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986143882190, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986143882190, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986154353840, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986154353840, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986164762457, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986164762457, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1395, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "08b37bd8-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "094c9feb-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1396, "retval": 1396} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9e441c0-7c31-1a56-b17c-3f9a061af725", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./with_wget", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./with_wget "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_vfork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "094cee03-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1397, "retval": 1397} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f3f7eadf-5a79-ba55-b95a-881315bae424", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sh -c wget http://www.google.com/index.html"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "ret_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "upath1": "/lib/libedit.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2818048, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2818048, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3334144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3334144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4665344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4665344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "ret_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "upath1": "/lib/libncursesw.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 6983680, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 6983680, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7356416, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7356416, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 20} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 725} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1866} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "094d72a7-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1398, "retval": 1398} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987074157366, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 479100} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 18} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 50} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988115532463, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 480275} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 480275} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4071} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4124} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4807} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4860} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4409} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4462} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1171} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1224} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 532, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 532, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988173936046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988173936046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988173936046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988173936046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 533, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 534, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 535, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 536, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 533, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582989123868619, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 484527} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 484527} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4248} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4301} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 537, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 537, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990133892948, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 486160} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990133892948, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990133892948, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "host::info:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "uname":"FreeBSD 13.0-CURRENT FreeBSD 13.0-CURRENT 5da4c1df8d5(HEAD) CADETS amd64", "hostname":"cadets-bbn", "network":[ {"name":"em0", "mac":"08:00:27:fc:76:ba", "inet":"10.0.2.15", "inet6":""},{"name":"em1", "mac":"08:00:27:f9:7a:ba", "inet":"192.168.56.101", "inet6":""}] , "version": "versionn_innfo:"} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895034370801, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3", "fd": 5, "retval": 16} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895034370801, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "c1555c7c-d38e-9a58-8ed3-e319889a0469", "fd": 14, "retval": 48} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895034370801, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 48} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 351, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 352, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 353, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 354, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 351, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 352, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 353, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895454372813, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 354, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582895933902951, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1578} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1578} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1574} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1627} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 1242, "ppid": 1, "tid": 100104, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d3958442-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 355, "fd": 3, "retval": 110} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 355, "upath1": "/", "fd": 9, "address": "", "retval": 110} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896124648272, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896134203227, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896134203227, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582896944139252, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3413} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582897954065555, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3775} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3775} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1831} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1884} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100105, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d4c69add-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 356, "fd": 3, "retval": 110} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 356, "upath1": "/", "fd": 9, "address": "", "retval": 110} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898124277080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 357, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 358, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 359, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 360, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 357, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 358, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 359, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898455045386, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 360, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582898964841090, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 6972} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582899973949516, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 7337} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 7337} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3193} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3246} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 1242, "ppid": 1, "tid": 100106, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d5f855c1-467a-11e9-aea7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 361, "fd": 3, "retval": 110} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 361, "upath1": "/", "fd": 9, "address": "", "retval": 110} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900123894482, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900134758205, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900134758205, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900134758205, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900134758205, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "fbt:kernel:syncache_expand:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "tid": 100013, "uid": 0, "so_uuid": "b54fd750-467a-11e9-ae92-080027fc76ba", "lport": 22, "fport": 61633, "laddr": "192.168.56.101", "faddr": "192.168.56.1"} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "tid": 100013, "uid": 0, "so_uuid": "d66412b7-467a-11e9-aea7-080027fc76ba", "lport": 22, "fport": 61633, "laddr": "192.168.56.101", "faddr": "192.168.56.1", "iss": 717327324} +{"event": "audit:event:aue_accept:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "arg_objuuid1": "b54fd750-467a-11e9-ae92-080027fc76ba", "ret_objuuid1": "d66412b7-467a-11e9-aea7-080027fc76ba", "fd": 4, "ret_fd1": 5, "address": "192.168.56.1", "port": 61633, "retval": 5} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "fd": 3, "retval": 6, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "fd": 4, "retval": 0, "fcntl_cmd": 4} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "ret_objuuid1": "d6641bd1-467a-11e9-aea7-080027fc76ba", "ret_objuuid2": "d6641bd1-467a-11e9-aea8-080027fc76ba", "ret_fd1": 6, "ret_fd2": 7, "retval": 0} +{"event": "audit:event:aue_socketpair:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "ret_objuuid1": "d6641de9-467a-11e9-aea8-080027fc76ba", "ret_objuuid2": "d6641df6-467a-11e9-aea8-080027fc76ba", "ret_fd1": 8, "ret_fd2": 9, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "ret_objuuid1": "d6642793-467a-11e9-aea8-080027fc76ba", "ret_objuuid2": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_pid": 1278, "retval": 1278} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 5, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 0, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 7, "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 9, "ret_fd1": 5, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 9, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "8bdbf70c-2584-fe5b-8425-ffe24bfe3202", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/sbin/sshd", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/sbin/sshd -R"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "arg_objuuid1": "d6641de9-467a-11e9-aea8-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "fd": 9, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "ret_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "upath1": "/usr/lib/libpam.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4cdcd114-c4ad-0851-adc4-bacbc10874a4", "ret_objuuid1": "4cdcd114-c4ad-0851-adc4-bacbc10874a4", "upath1": "/usr/lib/libprivatessh.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4cdcd114-c4ad-0851-adc4-bacbc10874a4", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "ret_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "upath1": "/usr/lib/libbsm.so.3", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a1687d5a-9a65-045e-a59a-97b4fe04b3bf", "ret_objuuid1": "a1687d5a-9a65-045e-a59a-97b4fe04b3bf", "upath1": "/usr/lib/libblacklist.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a1687d5a-9a65-045e-a59a-97b4fe04b3bf", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "ret_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "upath1": "/usr/lib/libgssapi_krb5.so.10", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6f98459d-6d2f-ff5f-af6d-07280fffd3cb", "ret_objuuid1": "6f98459d-6d2f-ff5f-af6d-07280fffd3cb", "upath1": "/usr/lib/libgssapi.so.10", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6f98459d-6d2f-ff5f-af6d-07280fffd3cb", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3a5de0c0-3468-0e56-a834-3339660e07e7", "ret_objuuid1": "3a5de0c0-3468-0e56-a834-3339660e07e7", "upath1": "/usr/lib/libkrb5.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3a5de0c0-3468-0e56-a834-3339660e07e7", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "002f9f80-1361-7654-a113-52b9a4768b0c", "ret_objuuid1": "002f9f80-1361-7654-a113-52b9a4768b0c", "upath1": "/usr/lib/libwrap.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "002f9f80-1361-7654-a113-52b9a4768b0c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "ret_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "upath1": "/lib/libcrypto.so.111", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "e6f4c6b4-7c40-ef56-807c-7da296efff27", "ret_objuuid1": "e6f4c6b4-7c40-ef56-807c-7da296efff27", "upath1": "/usr/lib/libprivateldns.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "e6f4c6b4-7c40-ef56-807c-7da296efff27", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "ret_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "upath1": "/lib/libcrypt.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "ret_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "upath1": "/lib/libz.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "ret_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "upath1": "/lib/libthr.so.3", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d1c77a04-4c52-7253-924c-62b47372e504", "ret_objuuid1": "d1c77a04-4c52-7253-924c-62b47372e504", "upath1": "/usr/lib/libroken.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d1c77a04-4c52-7253-924c-62b47372e504", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d", "ret_objuuid1": "fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d", "upath1": "/usr/lib/libasn1.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f3b68756-6263-9455-a362-0034d594ada7", "ret_objuuid1": "f3b68756-6263-9455-a362-0034d594ada7", "upath1": "/usr/lib/libcom_err.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f3b68756-6263-9455-a362-0034d594ada7", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4a8576d1-4c86-4855-864c-eea21548af1c", "ret_objuuid1": "4a8576d1-4c86-4855-864c-eea21548af1c", "upath1": "/usr/lib/libhx509.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4a8576d1-4c86-4855-864c-eea21548af1c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5", "ret_objuuid1": "6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5", "upath1": "/usr/lib/libwind.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "99fc3185-2025-565b-a520-dc0cab56462c", "ret_objuuid1": "99fc3185-2025-565b-a520-dc0cab56462c", "upath1": "/usr/lib/libheimbase.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "99fc3185-2025-565b-a520-dc0cab56462c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "02a6c778-5410-d854-9054-fc1f24d8e4bd", "ret_objuuid1": "02a6c778-5410-d854-9054-fc1f24d8e4bd", "upath1": "/usr/lib/libprivateheimipcc.so.11", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "02a6c778-5410-d854-9054-fc1f24d8e4bd", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "c0a44a27-28a6-d358-a628-06b288d3fd01", "ret_objuuid1": "c0a44a27-28a6-d358-a628-06b288d3fd01", "upath1": "/usr/lib/libssl.so.111", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "c0a44a27-28a6-d358-a628-06b288d3fd01", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900834145195, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 2, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_closefrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "ret_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "upath1": "/lib/libcrypto.so.111", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "65a0c3e1-4df2-5355-b24d-52809553d9e2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "8a2ac349-5bae-1a5c-ae5b-70678c1aee0c", "ret_objuuid1": "8a2ac349-5bae-1a5c-ae5b-70678c1aee0c", "upath1": "/etc/ssl/openssl.cnf", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "8a2ac349-5bae-1a5c-ae5b-70678c1aee0c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d665e1f3-467a-11e9-aea8-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d665e1f3-467a-11e9-aea8-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d665e5a7-467a-11e9-aea8-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d665e5a7-467a-11e9-aea8-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "ret_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "upath1": "/etc/ssh/ssh_host_rsa_key", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "ret_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "upath1": "/etc/ssh/ssh_host_rsa_key", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6c8822f7-64d2-8f57-9264-2ff0a78fab74", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d85dbf3f-8873-2550-b388-fc6420252c7c", "ret_objuuid1": "d85dbf3f-8873-2550-b388-fc6420252c7c", "upath1": "/etc/ssh/ssh_host_rsa_key.pub", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d85dbf3f-8873-2550-b388-fc6420252c7c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "ret_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "upath1": "/etc/ssh/ssh_host_ecdsa_key", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "ret_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "upath1": "/etc/ssh/ssh_host_ecdsa_key", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2e02cb3d-0826-5359-a608-18eeb9531fcb", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3efd70ec-8129-a85e-a981-1a934ea8ee3c", "ret_objuuid1": "3efd70ec-8129-a85e-a981-1a934ea8ee3c", "upath1": "/etc/ssh/ssh_host_ecdsa_key.pub", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3efd70ec-8129-a85e-a981-1a934ea8ee3c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "ret_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "upath1": "/etc/ssh/ssh_host_ed25519_key", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "ret_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "upath1": "/etc/ssh/ssh_host_ed25519_key", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "9a762a17-c5f5-3250-b5c5-e86a20328528", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6eb7ebeb-1f96-1e57-961f-e755571e202c", "ret_objuuid1": "6eb7ebeb-1f96-1e57-961f-e755571e202c", "upath1": "/etc/ssh/ssh_host_ed25519_key.pub", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "6eb7ebeb-1f96-1e57-961f-e755571e202c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 63} +{"event": "audit:event:aue_chdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "79047e1d-240e-be52-8e24-bdde62be883d", "upath1": "/", "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d6641df6-467a-11e9-aea8-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 2, "fd": -100, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 4, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 4, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 4, "ret_fd1": 2, "retval": 2} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 4, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "ret_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "upath1": "/etc/resolv.conf", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "35657c19-0d44-6554-840d-56131465bb07", "ret_objuuid1": "35657c19-0d44-6554-840d-56131465bb07", "upath1": "/etc/gss/mech", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "ret_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "upath1": "/usr/lib/libgssapi_krb5.so.10", "flags": 3145728, "fd": -100, "ret_fd1": 6, "mode": 0, "retval": 6} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "842f7c15-d3f8-6754-b8d3-e6077467aec3", "fd": 6, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "16c3ea07-48df-ba58-9f48-087fd8bab643", "ret_objuuid1": "16c3ea07-48df-ba58-9f48-087fd8bab643", "upath1": "/usr/lib/libgssapi_spnego.so.10", "flags": 3145728, "fd": -100, "ret_fd1": 6, "mode": 0, "retval": 6} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "16c3ea07-48df-ba58-9f48-087fd8bab643", "fd": 6, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582900843933382, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "35657c19-0d44-6554-840d-56131465bb07", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901014716984, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 26345} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "e1d2cd21-6a99-d55c-996a-4ae8bcd556d9", "ret_objuuid1": "e1d2cd21-6a99-d55c-996a-4ae8bcd556d9", "upath1": "/etc/pam.d/sshd", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "ret_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "upath1": "/usr/lib/pam_opie.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 9, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "ret_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "upath1": "/usr/lib/libopie.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 9, "mode": 0, "retval": 9} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 9, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "ret_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "upath1": "/lib/libmd.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 9, "mode": 0, "retval": 9} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "ret_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "upath1": "/usr/lib/pam_opieaccess.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 9, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "ret_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "upath1": "/usr/lib/libypclnt.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 9, "mode": 0, "retval": 9} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "abf6fcaf-21ca-5a51-8a21-2a1e615a33b7", "ret_objuuid1": "abf6fcaf-21ca-5a51-8a21-2a1e615a33b7", "upath1": "/usr/lib/pam_nologin.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "abf6fcaf-21ca-5a51-8a21-2a1e615a33b7", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "abf6fcaf-21ca-5a51-8a21-2a1e615a33b7", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "ret_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "upath1": "/usr/lib/pam_login_access.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "ret_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "upath1": "/usr/lib/pam_permit.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "ret_fd1": 9, "retval": 9, "fcntl_cmd": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 9, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "e1d2cd21-6a99-d55c-996a-4ae8bcd556d9", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d68855be-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68855be-467a-11e9-aea9-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68855be-467a-11e9-aea9-080027fc76ba", "ret_msgid": 365, "fd": 4, "retval": 96} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 365, "upath1": "/", "fd": 9, "address": "", "retval": 96} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aafb7a4a-d952-865d-92d9-3ff2ed86d364", "fd": 16, "retval": 72} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901063960835, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68855be-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d689a296-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d689a296-467a-11e9-aea9-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d689a296-467a-11e9-aea9-080027fc76ba", "ret_msgid": 366, "fd": 4, "retval": 96} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 366, "upath1": "/", "fd": 9, "address": "", "retval": 96} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d689a296-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 504} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_gid": 1003, "retval": 0} +{"event": "audit:event:aue_setuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_uid": 0, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_setuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_uid": 0, "retval": 0} +{"event": "audit:event:aue_setgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901074287644, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_gid": 1003, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d68b229c-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68b229c-467a-11e9-aea9-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68b229c-467a-11e9-aea9-080027fc76ba", "ret_msgid": 367, "fd": 4, "retval": 96} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 367, "upath1": "/", "fd": 9, "address": "", "retval": 96} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68b229c-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socketpair:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d68b2f7e-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d68b2f86-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "ret_fd2": 8, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d68b38c5-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_pid": 1280, "retval": 1280} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "ret_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "upath1": "/etc/opiekeys", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "ret_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "upath1": "/etc/opiekeys", "flags": 2, "fd": -100, "ret_fd1": 9, "mode": 0, "retval": 9} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 9, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "ret_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "upath1": "/etc/opiekeys", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "ret_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "upath1": "/etc/opiekeys", "flags": 2, "fd": -100, "ret_fd1": 9, "mode": 0, "retval": 9} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 9, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4f1803ab-96cc-bf5a-8c96-b2d71abf75ad", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901083905501, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 368, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 369, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 370, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 371, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582901454371866, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 368, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902044028797, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 40841} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 40841} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4579} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4632} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5740} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5793} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3817} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3870} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4856} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5130} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5263} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4091} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 1242, "ppid": 1, "tid": 100108, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d7295b6c-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 372, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 372, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902124793290, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902134213067, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902134213067, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902134213067, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4909} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902134213067, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902134213067, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902143910395, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5183} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902143910395, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902143910395, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902143910395, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5316} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902153929763, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902153929763, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902153929763, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4144} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902164461959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902164461959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902164461959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902164461959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902173894545, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582902173894545, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "ret_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "upath1": "/etc/login.access", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903024284413, "pid": 1280, "ppid": 1278, "tid": 100107, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d68b38c5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d68b2f7e-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1279, "ppid": 1278, "tid": 100102, "uid": 22, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6767a33-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d7b3f08d-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d7b3f08d-467a-11e9-aea9-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d7b3f08d-467a-11e9-aea9-080027fc76ba", "ret_msgid": 373, "fd": 4, "retval": 140} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d7b3f08d-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d6766e84-467a-11e9-aea8-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d6641bd1-467a-11e9-aea8-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1108, "ppid": 1, "tid": 100089, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "b54fadf6-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4fc52df-467a-11e9-ae66-080027fc76ba", "arg_objuuid1": "d6641bd1-467a-11e9-aea7-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 373, "upath1": "/", "fd": 9, "address": "", "retval": 140} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aafb7a4a-d952-865d-92d9-3ff2ed86d364", "fd": 16, "retval": 66} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aafb7a4a-d952-865d-92d9-3ff2ed86d364", "fd": 16, "retval": 116} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2d2507ac-3e04-4a51-843e-b086314a525f", "ret_objuuid1": "2d2507ac-3e04-4a51-843e-b086314a525f", "upath1": "/etc/security/audit_user", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "ret_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "upath1": "/etc/security/audit_class", "flags": 0, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "dc2bb48d-13bc-c451-bc13-145141c492f2", "ret_objuuid1": "dc2bb48d-13bc-c451-bc13-145141c492f2", "upath1": "/etc/security/audit_control", "flags": 0, "ret_fd1": 7, "mode": 438, "retval": 7} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2d2507ac-3e04-4a51-843e-b086314a525f", "fd": 4, "retval": 27} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "2d2507ac-3e04-4a51-843e-b086314a525f", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "dc2bb48d-13bc-c451-bc13-145141c492f2", "fd": 7, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "dc2bb48d-13bc-c451-bc13-145141c492f2", "ret_objuuid1": "dc2bb48d-13bc-c451-bc13-145141c492f2", "upath1": "/etc/security/audit_control", "flags": 0, "ret_fd1": 7, "mode": 438, "retval": 7} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "ret_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "upath1": "/etc/security/audit_event", "flags": 0, "ret_fd1": 8, "mode": 438, "retval": 8} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 8, "retval": 27878} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 8, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_socketpair:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d7b494b0-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7b494bb-467a-11e9-aea9-080027fc76ba", "ret_fd1": 9, "ret_fd2": 10, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_pid": 1281, "retval": 1281} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 9, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 10, "retval": 0} +{"event": "audit:event:aue_setgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_gid": 1003, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 10, "mode": 438, "retval": 10} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 10, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 10, "retval": 504} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 10, "retval": 0} +{"event": "audit:event:aue_setlogin:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "login": "user", "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_setuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_uid": 1003, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "ret_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "upath1": "/home/user/.login_conf", "flags": 1048576, "ret_fd1": 10, "mode": 0, "retval": 10} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "fd": 10, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 10, "mode": 0, "retval": 10} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 10, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "ret_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "upath1": "/home/user/.login_conf", "flags": 1048576, "ret_fd1": 10, "mode": 0, "retval": 10} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "fd": 10, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 10, "mode": 0, "retval": 10} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 10, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "ret_objuuid1": "d7b500cd-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7b500ce-467a-11e9-aea9-080027fc76ba", "ret_fd1": 10, "ret_fd2": 11, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "d7b500cd-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0, "fcntl_cmd": 4} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "d7b500ce-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0, "fcntl_cmd": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 12, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 13, "retval": 0} +{"event": "audit:event:aue_posix_openpt:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_fd1": 9, "retval": 9} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/pts/0", "flags": 2, "fd": -100, "ret_fd1": 11, "mode": 0, "retval": 11} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903033904685, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 12, "mode": 438, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 12, "retval": 0} +{"event": "audit:event:aue_chown:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "arg_uid": 1003, "arg_gid": 4, "upath1": "/dev/pts/0", "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 11, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "ret_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "upath1": "/var/log/utx.lastlogin", "flags": 1048576, "ret_fd1": 12, "mode": 438, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "fd": 12, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 12, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "ret_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "upath1": "/var/run/utx.active", "flags": 1048576, "ret_fd1": 12, "mode": 438, "retval": 12} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "ret_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "upath1": "/var/run/utx.active", "flags": 1049122, "ret_fd1": 13, "mode": 420, "retval": 13} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 3, "retval": 16386, "fcntl_cmd": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "fd": 13, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "ret_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "upath1": "/var/log/utx.lastlogin", "flags": 1049122, "ret_fd1": 13, "mode": 420, "retval": 13} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "fd": 3, "retval": 16386, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "fd": 13, "retval": 394} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "fd": 13, "retval": 197} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0", "fd": 13, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4516a868-a70c-915d-8ca7-5c9c1d91bbf9", "ret_objuuid1": "4516a868-a70c-915d-8ca7-5c9c1d91bbf9", "upath1": "/var/log/utx.log", "flags": 1049097, "ret_fd1": 13, "mode": 420, "retval": 13} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4516a868-a70c-915d-8ca7-5c9c1d91bbf9", "fd": 13, "retval": 83} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "4516a868-a70c-915d-8ca7-5c9c1d91bbf9", "fd": 13, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "97a20679-3a19-5355-993a-5a7f9553d88e", "fd": 12, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 0} +{"event": "audit:event:aue_sendmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d7b494bb-467a-11e9-aea9-080027fc76ba", "fd": 10, "retval": 1} +{"event": "audit:event:aue_sendmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "d7b494bb-467a-11e9-aea9-080027fc76ba", "fd": 10, "retval": 1} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 0, "mode": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1278, "ppid": 1108, "tid": 100101, "uid": 0, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d6642793-467a-11e9-aea8-080027fc76ba", "subjthruuid": "d20ed51a-467a-11e9-ae9d-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 11, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 52} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 374, "fd": 8, "retval": 133} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 374, "upath1": "/", "fd": 9, "address": "", "retval": 133} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "d7b494b0-467a-11e9-aea9-080027fc76ba", "fd": 9, "retval": 1} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "d7b494b0-467a-11e9-aea9-080027fc76ba", "fd": 9, "retval": 1} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "ret_objuuid1": "d7b5a811-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_pid": 1282, "retval": 1282} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 13, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 4, "retval": 0, "fcntl_cmd": 4} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1281, "ppid": 1278, "tid": 100102, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b4a9b3-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d20ef5d1-467a-11e9-ae9e-080027fc76ba", "fd": 3, "retval": 6, "fcntl_cmd": 3} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 375, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 375, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 14, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 15, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 12, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/pts/0", "flags": 2, "fd": -100, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 12, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 1, "fd": -100, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 12, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 13, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 13, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 13, "ret_fd1": 2, "retval": 2} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 13, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 376, "fd": 8, "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 376, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fcf113a7-aa96-585f-96aa-757b7f5884e7", "ret_objuuid1": "fcf113a7-aa96-585f-96aa-757b7f5884e7", "upath1": "/etc/motd", "flags": 0, "ret_fd1": 12, "mode": 438, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fcf113a7-aa96-585f-96aa-757b7f5884e7", "fd": 12, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "ret_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "upath1": "/home/user/.login_conf", "flags": 1048576, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4ed02403-1761-215b-a117-fabcfb21c32e", "fd": 12, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 12, "mode": 0, "retval": 12} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 12, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_euid": 1003, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_closefrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 11, "retval": 0} +{"event": "audit:event:aue_chdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "802da701-0471-305d-b104-2b472d304411", "upath1": "/home/user", "retval": 0} +{"event": "audit:event:aue_closefrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "sshd", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "-bash"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903044120595, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 66881} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "ret_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "upath1": "/etc/pwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 377, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 377, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cdc8911c-7575-ae53-b575-90e5c3ae1b34", "ret_objuuid1": "cdc8911c-7575-ae53-b575-90e5c3ae1b34", "upath1": "/etc/profile", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cdc8911c-7575-ae53-b575-90e5c3ae1b34", "fd": 3, "retval": 562} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cdc8911c-7575-ae53-b575-90e5c3ae1b34", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3", "ret_objuuid1": "f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3", "upath1": "/home/user/.profile", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3", "fd": 3, "retval": 881} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903115740698, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "d7c185e7-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_pid": 1283, "retval": 1283} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b003464c-20bc-2258-bc20-35a2f822aca3", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/resizewin", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/resizewin -z"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1283, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "resizewin", "subjprocuuid": "d7c185e7-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "d7c2196c-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_pid": 1284, "retval": 1284} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "973ecfbf-e437-0451-b7e4-41ba11046147", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/fortune", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/fortune freebsd-tips"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2408448, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2408448, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2928640, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2928640, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4259840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4259840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582903124345395, "pid": 1284, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "fortune", "subjprocuuid": "d7c2196c-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904133954137, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 75810} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904133954137, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 75810} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904133954137, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904133954137, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904133954137, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4102} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4155} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3634} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3687} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4553} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4606} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4190} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4727} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4810} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4200} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582904143952425, "pid": 1242, "ppid": 1, "tid": 100110, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d85d6322-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4721} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905153966888, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 79717} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905304236022, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905304236022, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905304236022, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905304236022, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 17} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1229, "ppid": 1226, "tid": 100074, "uid": 0, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "b583ceaf-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b146388e-467a-11e9-ae02-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "dfc2891a-d014-6a5f-94d0-76881f6a1fb0", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/nice", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "nice -4 fsck -B -p"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "nice", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "19a7640a-bde5-2058-a5bd-6734c820ce3a", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/sbin/fsck", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "fsck -B -p"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2404352, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2404352, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2920448, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2920448, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4251648, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4251648, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "7ff6a25d-5b88-aa5f-885b-b000bfaae0f4", "ret_objuuid1": "7ff6a25d-5b88-aa5f-885b-b000bfaae0f4", "upath1": "/etc/fstab", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "7ff6a25d-5b88-aa5f-885b-b000bfaae0f4", "fd": 3, "retval": 200} +{"event": "audit:event:aue_vfork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "ret_objuuid1": "d952a902-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_pid": 1285, "retval": 1285} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "434858bb-406e-6156-ae40-962bc661e15f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/sbin/fsck_ufs", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "fsck_ufs -p -F /dev/ada0p3"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "ret_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "upath1": "/lib/libufs.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2531328, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2531328, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2535424, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2535424, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2555904, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2555904, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "705f2f64-9841-0e51-8198-9150c10e05a0", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2531328, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2531328, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2580480, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2580480, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3096576, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3096576, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4427776, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4427776, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905743923559, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "ret_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "upath1": "/dev/ada0p3", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "fd": 3, "retval": 8192} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "50dc865a-db47-1c50-87db-7aecd01c5655", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1285, "ppid": 1226, "tid": 100109, "uid": 0, "cpu_id": 0, "exec": "fsck_ufs", "subjprocuuid": "d952a902-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "7ff6a25d-5b88-aa5f-885b-b000bfaae0f4", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "arg_objuuid1": "7ff6a25d-5b88-aa5f-885b-b000bfaae0f4", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905755579954, "pid": 1226, "ppid": 1, "tid": 100071, "uid": 0, "cpu_id": 0, "exec": "fsck", "subjprocuuid": "b583c213-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b13fb40a-467a-11e9-ae01-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582905794548453, "pid": 1227, "ppid": 1, "tid": 100084, "uid": 0, "cpu_id": 0, "exec": "logger", "subjprocuuid": "b583c3cf-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "b4f5c781-467a-11e9-ae58-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906124611700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 79717} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906124611700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906178054811, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 88685} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906283883081, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 2} +{"event": "audit:event:aue_kill:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906293906646, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d7b5a811-467a-11e9-aea9-080027fc76ba", "arg_pid": 1282, "arg_euid": 1003, "arg_ruid": 1003, "arg_egid": 1003, "arg_rgid": 1003, "signum": 2, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906293906646, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906293906646, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906293906646, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 21} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906623959179, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906623959179, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906714285543, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906714285543, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906843870856, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906843870856, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906994149349, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582906994149349, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907074986277, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907074986277, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907183946428, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 90319} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907226215093, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907226215093, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "802da701-0471-305d-b104-2b472d304411", "ret_objuuid1": "802da701-0471-305d-b104-2b472d304411", "upath1": "/usr/home/user/.", "flags": 1179652, "ret_fd1": 3, "mode": 29856, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907226215093, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "802da701-0471-305d-b104-2b472d304411", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907226215093, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 21} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 384, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 385, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 386, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 387, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 384, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 385, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 386, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582907453874277, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 387, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 90319} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4520} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4573} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4440} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4493} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1630} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1683} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 1242, "ppid": 1, "tid": 100112, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dabca603-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 388, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 388, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908124699371, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908133943755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908194056284, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 94688} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908713861358, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908713861358, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908904072636, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582908904072636, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909013925442, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909013925442, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/home/user/ripe-prov-tests-master/", "flags": 1179652, "ret_fd1": 3, "mode": 48848, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909013925442, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909013925442, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909204168075, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 95840} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909294044101, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909294044101, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_chdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909294044101, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/home/user/ripe-prov-tests-master/Linux", "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909294044101, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582909294044101, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 50} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 95840} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4365} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4418} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1148} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1201} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100113, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dbedc6bd-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 389, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 389, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910124538394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910133863566, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910133863566, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910223880459, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 98904} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910364402487, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910364402487, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910364402487, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910364402487, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 32} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 390, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 391, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 392, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 393, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 390, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 391, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 392, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582910454003648, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 393, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911233887268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 100381} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "dc9aef12-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "dc9aef12-467a-11e9-aea9-080027fc76ba", "fd": 4, "address": "107.155.79.108", "port": 123, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "dc9aef12-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "tid": 100092, "uid": 123, "so_uuid": "b5434a9c-467a-11e9-ae89-080027fc76ba", "lport": 123, "fport": 123, "laddr": "10.0.2.15", "faddr": "107.155.79.108"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "b5434a9c-467a-11e9-ae89-080027fc76ba", "ret_msgid": 394, "fd": 22, "address": "107.155.79.108", "port": 123, "retval": 48} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "b541acd0-467a-11e9-ae89-080027fc76ba", "ret_msgid": 395, "fd": 3, "retval": 102} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582911260647974, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b2110-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 395, "upath1": "/", "fd": 8, "address": "", "retval": 102} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 100381} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3060} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3113} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1473} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1526} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100114, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "dd1edad2-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 396, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 396, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912123877563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912204256412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912204256412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912204256412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912204256412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 37} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582912243951039, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 103965} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 17} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913234488621, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913254283039, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 104813} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 397, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 398, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 399, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 400, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 397, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 398, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 399, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582913454267401, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 400, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 104813} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3580} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3633} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 844} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 897} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100115, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "de500102-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 401, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 401, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914124368238, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914153936323, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914153936323, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914153936323, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914153936323, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 48} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582914264068977, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 108412} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582915273963131, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 108777} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 108777} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3595} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3648} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100116, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "df813720-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 402, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 402, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916123924774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "df8637e6-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_pid": 1286, "retval": 1286} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./bash_commands.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ./bash_commands.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ./bash_commands.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916153873169, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916294130790, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 117711} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 403, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 404, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 405, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 406, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 403, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 404, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 405, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582916454462035, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 406, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1287, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "df874ee9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 445} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 11} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 11} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 241} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e022ec76-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1288, "retval": 1288} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d1524fc4-3a5e-855b-9e3a-5d212b8581ed", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/whoami", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "whoami"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "ret_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "upath1": "/etc/pwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 5} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1288, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "e022ec76-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 351} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 270} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e023b7af-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1289, "retval": 1289} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ab57cf3a-f09d-cd5e-9df0-38f66ecdfb24", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/netstat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "netstat -n -l"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "ret_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "upath1": "/lib/libkvm.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2555904, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2555904, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2580480, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2580480, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "ret_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "upath1": "/usr/lib/libmemstat.so.3", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2641920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2641920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "ret_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "upath1": "/lib/libxo.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2777088, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2777088, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917183902486, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2822144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2822144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "ret_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "upath1": "/usr/lib/libnetgraph.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2883584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2883584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2891776, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2891776, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2899968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2899968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "ret_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "upath1": "/lib/libelf.so.2", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7077888, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7077888, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7106560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7106560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7176192, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7176192, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 3089} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1289, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "e023b7af-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 322} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 303} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e024fd03-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1290, "retval": 1290} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de3a34c1-0b17-8152-970b-4c2cb281885f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/cat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "cat /proc/cpuinfo"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 5} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 26} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1290, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e024fd03-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 289} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 336} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02564b5-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1291, "retval": 1291} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de3a34c1-0b17-8152-970b-4c2cb281885f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/cat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "cat /etc/networks"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "ret_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "upath1": "/etc/networks", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "fd": 3, "retval": 310} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 310} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1291, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e02564b5-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 256} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 359} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e025c619-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1292, "retval": 1292} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917194287948, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "542d495d-cfb1-a954-b1cf-f79fd4a9303e", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/ps", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "ps auxx"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "ret_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "upath1": "/lib/libm.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "ret_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "upath1": "/lib/libkvm.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2699264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2699264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "ret_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "upath1": "/lib/libjail.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2736128, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2736128, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "ret_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "upath1": "/lib/libxo.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2748416, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2748416, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2781184, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2781184, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2879488, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2879488, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4726784, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4726784, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "ret_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "upath1": "/lib/libelf.so.2", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7045120, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7045120, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7073792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7073792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7143424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7143424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7184384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7184384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7229440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7229440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 1048576, "fd": -100, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 5, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 5, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "ret_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "upath1": "/etc/pwd.db", "flags": 1048576, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "ret_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "upath1": "/usr/share/zoneinfo/UTC", "flags": 0, "ret_fd1": 6, "mode": 0, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 6, "retval": 118} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 6, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "ret_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "upath1": "/usr/share/zoneinfo/posixrules", "flags": 0, "ret_fd1": 6, "mode": 24832, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 6, "retval": 3519} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 6, "retval": 0} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 4380} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1292, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "e025c619-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 233} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e026d50d-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e026d50e-467a-11e9-aea9-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 423} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e026da24-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1293, "retval": 1293} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e026e0b0-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1294, "retval": 1294} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 4, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e026d50e-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 10} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1293, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026da24-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3f4e2dec-9008-5a56-8890-4814765aa0ba", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/sudo", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sudo -S ls"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917203895228, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2510848, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2510848, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2588672, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2588672, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "ret_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "upath1": "/usr/local/libexec/sudo/libsudo_util.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2637824, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2637824, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2703360, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2703360, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2744320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2744320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2756608, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2756608, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3272704, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3272704, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4603904, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4603904, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "ret_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "upath1": "/usr/share/zoneinfo/UTC", "flags": 0, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 3, "retval": 118} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "ret_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "upath1": "/usr/share/zoneinfo/posixrules", "flags": 0, "ret_fd1": 3, "mode": 24832, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 3, "retval": 3519} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 2, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 5, "retval": 0} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "ret_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "upath1": "/usr/local/libexec/sudo/sudoers.so", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7319552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7319552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7434240, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7434240, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7647232, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7647232, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "ret_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "upath1": "/usr/lib/libbsm.so.3", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7667712, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7667712, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7708672, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7708672, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7778304, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917213988194, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7778304, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "ret_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "upath1": "/usr/lib/libpam.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7790592, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7790592, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7815168, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7815168, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7843840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7843840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "ret_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "upath1": "/lib/libz.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7856128, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7856128, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7888896, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7888896, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7958528, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7958528, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": 0, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": 1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "ret_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "upath1": "/usr/local/etc/sudoers", "flags": 0, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 3678} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 3678} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": 0, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": -1, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": 0, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "382d9507-c88d-7556-8dc8-bb47e67533c4", "ret_objuuid1": "382d9507-c88d-7556-8dc8-bb47e67533c4", "upath1": "/usr/local/etc/sudoers.d", "flags": 1179652, "ret_fd1": 6, "mode": 65535, "retval": 6} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "382d9507-c88d-7556-8dc8-bb47e67533c4", "fd": 6, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": 1003, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 504} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 504} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 504} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "ret_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "upath1": "/usr/local/etc/pam.d/sudo", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "fd": 4, "retval": 323} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "ret_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "upath1": "/etc/pam.d/system", "flags": 0, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 648} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "ret_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "upath1": "/usr/lib/pam_opie.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8204288, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8204288, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8208384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8208384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8212480, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8212480, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "ret_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "upath1": "/usr/lib/libopie.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8220672, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8220672, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8232960, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8232960, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8249344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917224096658, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8249344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "ret_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "upath1": "/lib/libmd.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14680064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14680064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14712832, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14712832, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14794752, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14794752, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 7, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "ret_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "upath1": "/usr/lib/pam_opieaccess.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8269824, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8269824, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8273920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8273920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8278016, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8278016, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 7, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8286208, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8286208, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8294400, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8294400, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8302592, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8302592, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "ret_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "upath1": "/lib/libcrypt.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14938112, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14938112, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14954496, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14954496, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14995456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14995456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "ret_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "upath1": "/usr/lib/libypclnt.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8310784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8310784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8323072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8323072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8331264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8331264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 7, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "ret_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "upath1": "/etc/pam.d/system", "flags": 0, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 648} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "ret_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "upath1": "/usr/lib/pam_login_access.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8343552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8343552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8347648, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8347648, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8351744, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8351744, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 7, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8359936, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8359936, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8368128, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8368128, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8376320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8376320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 7, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "ret_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "upath1": "/usr/lib/pam_permit.so.6", "flags": 0, "fd": -100, "ret_fd1": 6, "mode": 0, "retval": 6} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 6, "ret_fd1": 7, "retval": 7, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15077376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15077376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15081472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15081472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15085568, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15085568, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 6, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "ret_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "upath1": "/etc/pam.d/system", "flags": 0, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 648} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15093760, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15093760, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15101952, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15101952, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15110144, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15110144, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 7, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "ret_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "upath1": "/etc/login.access", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "fd": 4, "retval": 1785} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 1024} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 1024} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "ret_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "upath1": "/etc/ttys", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "fd": 4, "retval": 2086} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": 0, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02b4d2c-467a-11e9-aea9-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02b4d2c-467a-11e9-aea9-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02b4d2c-467a-11e9-aea9-080027fc76ba", "ret_msgid": 407, "fd": 4, "retval": 164} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 407, "upath1": "/", "fd": 9, "address": "", "retval": 164} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aafb7a4a-d952-865d-92d9-3ff2ed86d364", "fd": 16, "retval": 140} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02b4d2c-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": 1003, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "ret_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "upath1": "/etc/security/audit_event", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 27878} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "ret_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "upath1": "/etc/security/audit_class", "flags": 0, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 27878} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 27878} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_egid": -1, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_euid": -1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 63} +{"event": "audit:event:aue_setuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_uid": 0, "retval": 0} +{"event": "audit:event:aue_setgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_gid": 0, "retval": 0} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02bec48-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e02bec49-467a-11e9-aea9-080027fc76ba", "ret_fd1": 6, "ret_fd2": 7, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1295, "retval": 1295} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02bf8c6-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e02bf8c7-467a-11e9-aea9-080027fc76ba", "ret_fd1": 7, "ret_fd2": 8, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_euid": 0, "arg_ruid": 0, "arg_suid": 0, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 1, "fcntl_cmd": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_closefrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 6, "ret_fd1": 7, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917233945148, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bec49-467a-11e9-aea9-080027fc76ba", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/ls", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "ls"} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bec48-467a-11e9-aea9-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bec48-467a-11e9-aea9-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2420736, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2420736, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2453504, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2453504, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "ret_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "upath1": "/lib/libncursesw.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2514944, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2514944, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2682880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2682880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2887680, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2887680, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_fchdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1179652, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 5, "retval": 0} +{"event": "audit:event:aue_fchdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 4, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 119} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 107} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 103} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 88} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 104} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 94} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1295, "ppid": 1294, "tid": 100117, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "e02bf2bd-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bf8c7-467a-11e9-aea9-080027fc76ba", "fd": 8, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bf8c6-467a-11e9-aea9-080027fc76ba", "fd": 7, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bf8c6-467a-11e9-aea9-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02bf8c7-467a-11e9-aea9-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1294, "ppid": 1286, "tid": 100118, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "e026e0b0-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 169} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 489} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02d16f1-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1296, "retval": 1296} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 103} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 508} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e02d3b31-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1297, "retval": 1297} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e7451145-d4d2-9753-92d4-25f153976db4", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/nc", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "nc -l 54321"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "ret_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "upath1": "/lib/libipsec.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917245561708, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582917485712666, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 195593} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 195593} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4628} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4681} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4298} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4351} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4787} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4840} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918124100434, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4396} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4087} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4338} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4824} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4264} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3913} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4723} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3899} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4199} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3977} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4245} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4214} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4299} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4570} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4449} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3945} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4109} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5021} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 1242, "ppid": 1, "tid": 100119, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e0b3666a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 408, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 408, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918133897608, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918144488663, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918144488663, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918144488663, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4140} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4391} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918154039828, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4877} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918167986826, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918167986826, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918167986826, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4317} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3966} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918174936799, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4776} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918188618677, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918188618677, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918188618677, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3952} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4252} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918194152918, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4030} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918204342280, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918204342280, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918204342280, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4298} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918216018019, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918216018019, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918216018019, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4267} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4352} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918223937141, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4623} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918234217398, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918234217398, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918234217398, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3998} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4162} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918243926462, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5074} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918253911946, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918253911946, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1297, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "e02d3b31-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 84} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c81a41-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e0c81a42-467a-11e9-aea9-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 551} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c820b9-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1298, "retval": 1298} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c83648-467a-11e9-aea9-080027fc76ba", "ret_objuuid2": "e0c83648-467a-11e9-aeaa-080027fc76ba", "ret_fd1": 4, "ret_fd2": 5, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1299, "retval": 1299} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1300, "retval": 1300} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 4, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de3a34c1-0b17-8152-970b-4c2cb281885f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/cat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "cat EXFILTRATION_FILE.dat"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 5, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 4, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e7451145-d4d2-9753-92d4-25f153976db4", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/nc", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "nc localhost 54321"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 2416} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 2416} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c81a42-467a-11e9-aea9-080027fc76ba", "fd": 1, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1298, "ppid": 1286, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "e0c820b9-467a-11e9-aea9-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "ret_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "upath1": "/lib/libipsec.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918266852861, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2449408, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2449408, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2461696, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2461696, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2977792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2977792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4308992, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4308992, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "ret_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "upath1": "/etc/hosts", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 3, "retval": 1031} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "e0c954e1-467a-11e9-aeaa-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0c954e1-467a-11e9-aeaa-080027fc76ba", "fd": 3, "address": "::1", "port": 1, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0c954e1-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "e0c95ac3-467a-11e9-aeaa-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0c95ac3-467a-11e9-aeaa-080027fc76ba", "fd": 3, "address": "127.0.0.1", "port": 1, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0c95ac3-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "e0c95f94-467a-11e9-aeaa-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "tid": 100015, "uid": 0, "so_uuid": "e0c95f94-467a-11e9-aeaa-080027fc76ba", "lport": 58335, "fport": 54321, "laddr": "127.0.0.1", "faddr": "127.0.0.1", "iss": 2687118993} +{"event": "fbt:kernel:syncache_expand:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "tid": 100015, "uid": 0, "so_uuid": "e02dc1a3-467a-11e9-aea9-080027fc76ba", "lport": 54321, "fport": 58335, "laddr": "127.0.0.1", "faddr": "127.0.0.1"} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "tid": 100015, "uid": 0, "so_uuid": "e0c96387-467a-11e9-aeaa-080027fc76ba", "lport": 54321, "fport": 58335, "laddr": "127.0.0.1", "faddr": "127.0.0.1", "iss": 3391450941} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1300, "ppid": 1286, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e0c8424d-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0c95f94-467a-11e9-aeaa-080027fc76ba", "fd": 3, "address": "127.0.0.1", "port": 54321, "retval": 0} +{"event": "audit:event:aue_accept:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02dc1a3-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "e0c96387-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 4, "address": "127.0.0.1", "port": 58335, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 0, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4a7e215d-fecb-7d56-8bfe-3c48a67db43b", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/gzip", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "gzip"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "ret_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "upath1": "/lib/libz.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2465792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2465792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2535424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2535424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "ret_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "upath1": "/usr/lib/liblzma.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "ret_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "upath1": "/usr/lib/libbz2.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918273899564, "pid": 1299, "ppid": 1286, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "e0c83aad-467a-11e9-aeaa-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2732032, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582918573865723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 224757} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 409, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 410, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 411, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 412, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 409, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 410, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 411, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919453955875, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 412, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582919584302803, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 225933} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920014838623, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "ret_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "upath1": "/etc/cron.d", "flags": 1179652, "ret_fd1": 5, "mode": 59400, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920014838623, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 225933} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3589} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3642} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3961} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4014} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3861} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3914} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4183} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4589} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4294} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4659} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920124301843, "pid": 1242, "ppid": 1, "tid": 100122, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e1e3e2ff-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582920594048818, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 230095} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582921604408901, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 230461} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 230461} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4158} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4211} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 362} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 415} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 1242, "ppid": 1, "tid": 100123, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e314f6c9-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 414, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 414, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922124085113, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922134392999, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922134392999, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922134392999, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922134392999, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 415, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 416, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 417, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 418, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 415, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 416, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 417, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922455276197, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 418, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582922614154307, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 233683} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582923626871472, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 234048} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 234048} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3218} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3271} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100124, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e445e283-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 419, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 419, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924124301064, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582924634267384, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 236454} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 420, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 421, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 422, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 423, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 420, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 421, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 422, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925454237701, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 423, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582925644157193, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 237625} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 237625} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2402} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 2455} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1167} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1220} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100125, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e5770d21-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 424, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 424, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926124364179, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582926684053300, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 240035} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582927713020504, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 240399} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 240399} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2406} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 2459} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 1242, "ppid": 1, "tid": 100126, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e6a8a39c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 425, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 425, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928124226268, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928134166897, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928134166897, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928134166897, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928134166897, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 426, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 427, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 428, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 429, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 426, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 427, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 428, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928469171529, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 429, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582928774225532, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 243606} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582929784157083, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 243971} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 243971} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3203} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3256} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 1242, "ppid": 1, "tid": 100127, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e7d9d2a0-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 430, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 430, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930126236740, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930164402700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930164402700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930164402700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930164402700, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582930834131946, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 246392} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 431, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 432, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 433, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 434, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 431, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 432, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 433, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931468915131, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 434, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582931874490959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 247570} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 247570} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2417} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 2470} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1174} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1227} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 1242, "ppid": 1, "tid": 100128, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e90b116c-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 435, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 435, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932125493089, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932134613200, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932134613200, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932170453790, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932170453790, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c96387-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e0c96387-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e02dc1a3-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1296, "ppid": 1286, "tid": 100118, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "e02d16f1-467a-11e9-aea9-080027fc76ba", "subjthruuid": "e026df2e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_kill:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1286, "ppid": 1282, "tid": 100109, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "df8637e6-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d7c1831a-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "df8637e6-467a-11e9-aea9-080027fc76ba", "arg_pid": 1286, "arg_euid": 1003, "arg_ruid": 1003, "arg_egid": 1003, "arg_rgid": 1003, "signum": 2, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932769036825, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 50} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582932967496110, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 250819} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582933969545910, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 251183} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 251183} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3245} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3298} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 1242, "ppid": 1, "tid": 100129, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ea3c241a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 436, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 436, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934124138338, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934133927192, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934133927192, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934133927192, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934133927192, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 437, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 438, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 439, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 440, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 437, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 438, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 439, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582934470168651, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 440, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582935025523231, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 254399} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936033905299, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 254762} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 254762} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3212} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3265} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100130, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb6d476a-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 441, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 441, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936123929158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936133880472, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582936133880472, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "host::info:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "uname":"FreeBSD 13.0-CURRENT FreeBSD 13.0-CURRENT 5da4c1df8d5(HEAD) CADETS amd64", "hostname":"cadets-bbn", "network":[ {"name":"em0", "mac":"08:00:27:fc:76:ba", "inet":"10.0.2.15", "inet6":""},{"name":"em1", "mac":"08:00:27:f9:7a:ba", "inet":"192.168.56.101", "inet6":""}] , "version": "versionn_innfo:"} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582951268242273, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3", "fd": 5, "retval": 16} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582951268242273, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "c1555c7c-d38e-9a58-8ed3-e319889a0469", "fd": 14, "retval": 48} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582951268242273, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 48} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952124549143, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 257176} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952124549143, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952194028767, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 258177} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 463, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 464, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 465, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 466, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 463, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 464, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 465, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952524635900, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 466, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952664295450, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952664295450, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952664295450, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582952664295450, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 2} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582953204141200, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 259659} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582953588138412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582953588138412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582953588138412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582953588138412, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 21} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 259659} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 997} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1050} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1478} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1531} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100132, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f6278b3e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 467, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 467, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954124034740, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954133942560, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954133942560, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954219192362, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 262471} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954506555215, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954506555215, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954506555215, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582954506555215, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 51} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955224328560, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 263158} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955413909882, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955413909882, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955413909882, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955413909882, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 37} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 468, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 469, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 470, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 471, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 468, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 469, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 470, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582955524478350, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 471, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 263158} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2808} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 2861} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 683} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 736} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100133, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f758d6ea-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 472, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 472, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956124521893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956233997606, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 266753} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956334770993, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956334770993, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956334770993, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582956334770993, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 17} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582957249417963, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 267436} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 267436} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3591} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3644} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 679} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 732} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100134, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f889ed09-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 473, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 473, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958124064985, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958254271204, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 269844} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 474, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 475, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 476, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 477, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 474, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 475, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 476, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582958524009088, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 477, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959264447168, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 271023} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_pid": 1337, "retval": 1337} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/all.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/all.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "ret_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1884} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 516} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959814384316, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "f98d2634-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1338, "retval": 1338} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582959824307368, "pid": 1338, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98d2634-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960284294164, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 279988} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1338, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "f98d2634-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 34} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fa277e30-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1339, "retval": 1339} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "56ecc1ae-1878-7b59-b818-6135097b8030", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./change_file_permissions", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./change_file_permissions "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_chmod:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/README.md", "mode": 438, "retval": 0} +{"event": "audit:event:aue_chmod:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/README.md", "mode": 439, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1339, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "fa277e30-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1368} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 532} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1340, "retval": 1340} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582960834837726, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961304776512, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 284908} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 479, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 480, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 481, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 482, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 479, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 480, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 481, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961524402638, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 482, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1340, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fa27d8bf-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1341, "retval": 1341} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0609dc59-7cb8-de5b-b87c-35aeebded4bf", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_file", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_file "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "ret_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/README.md", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "745458ec-83ee-b052-ae83-2efb22b0cb41", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/out.tmp", "flags": 1537, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "fd": 3, "retval": 2498} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "745458ec-83ee-b052-ae83-2efb22b0cb41", "fd": 4, "retval": 2498} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "745458ec-83ee-b052-ae83-2efb22b0cb41", "fd": 4, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1341, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "fac2e97d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1352} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 554} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fac368df-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1342, "retval": 1342} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582961854200266, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 284908} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4799} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4852} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4158} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4211} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4916} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4969} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962124021046, "pid": 1242, "ppid": 1, "tid": 100136, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faec4be8-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962316591861, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 294069} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1342, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fac368df-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1343, "retval": 1343} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0f7e034a-4539-ea5b-b945-2560fbea7185", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_buf "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1343, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "fb5d222d-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1330} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 588} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1344, "retval": 1344} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582962864346154, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963333887767, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 298938} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1344, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fb5d782c-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 38} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1345, "retval": 1345} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "8d001f29-417a-805e-ba41-cecf5e804caf", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_stack_frame", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_buf_stack_frame "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1345, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "fbf7369e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1296} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 617} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1346, "retval": 1346} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582963874413329, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964344364848, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 303803} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 485, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 486, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 487, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 488, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 485, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 486, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 487, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964524393312, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 488, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1346, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fbf7b574-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 33} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fc92c880-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1347, "retval": 1347} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "656c7084-7a51-2d53-917a-60f4832de58f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_string", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_buf_string "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1347, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "fc92c880-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1267} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 644} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1348, "retval": 1348} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582964894021958, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965354116724, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 308830} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1348, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fc932cb1-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 31} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1349, "retval": 1349} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a40cfc78-90a1-075c-a190-f4d7ac07bd69", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_heap_buf", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_heap_buf "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1349, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "fd2ce4c8-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1240} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 663} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1350, "retval": 1350} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582965904301107, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966373962760, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 313695} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1350, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fd2d3a3f-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 23} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fdc88672-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1351, "retval": 1351} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1bca75f7-71d4-1553-9471-f02cd31597be", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./fork_process", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./fork_process "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "fdc8d004-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1352, "retval": 1352} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 15} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1351, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc88672-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1352, "ppid": 1, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc8d004-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1221} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 677} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1353, "retval": 1353} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1352, "ppid": 1, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "fdc8d004-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582966924213856, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967394080897, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 318788} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 490, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 491, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 492, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 493, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 490, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 491, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 492, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967524304611, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 493, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1353, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fdc941e4-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 18} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fe646b69-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1354, "retval": 1354} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2e1f69d8-d3e4-2950-a4d3-829bb0298789", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./listdir", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./listdir "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1179652, "ret_fd1": 3, "mode": 60240, "retval": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 5} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 9} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 5} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 28} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 24} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 15} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 8} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 23} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 21} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 23} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 24} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 9} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 8} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 15} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1354, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "fe646b69-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1207} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 698} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "fe654cca-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1355, "retval": 1355} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582967944522023, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968418492202, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 326677} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1355, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "fe654cca-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 25} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "feff028b-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1356, "retval": 1356} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cbeb200e-1746-3e58-8617-b743583e4f59", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./make_directory", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./make_directory "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mkdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ef2077a9-1b4f-685b-8f1b-6859ab685e9f", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/temporary", "mode": 511, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1356, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "feff028b-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1186} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 727} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "feff8c39-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1357, "retval": 1357} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582968958047837, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969434831514, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 331677} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1357, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "feff8c39-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 33} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1358, "retval": 1358} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6741c59f-8ce3-8e50-a38c-f0d1808ea1c5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_multi_write", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./multi_read_multi_write "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "ret_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "ret_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "ret_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/output_file1.tmp", "flags": 1537, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "ret_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/output_file2.tmp", "flags": 1537, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 209} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 382} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "fd": 5, "retval": 191} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "fd": 5, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "fd": 6, "retval": 187} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "fd": 6, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1358, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "ff99fb10-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1157} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 757} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1359, "retval": 1359} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582969974290865, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 331677} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4432} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4485} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3449} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3502} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4996} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5049} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 1242, "ppid": 1, "tid": 100141, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ffb1012e-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 495, "fd": 3, "retval": 111} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 495, "upath1": "/", "fd": 9, "address": "", "retval": 111} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970124025667, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 87} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970133899473, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970133899473, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970133899473, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970133899473, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970464025726, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 341125} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 496, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 497, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 498, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 499, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 496, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 497, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 498, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970529488727, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 499, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1359, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ff9aa18e-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 34} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "00359f92-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1360, "retval": 1360} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d8b8f561-1e30-f858-b01e-d3c3b8f82fe5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_single_write", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./multi_read_single_write "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "ret_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "ret_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "ret_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/merged_file.tmp", "flags": 1537, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 209} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 382} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "fd": 5, "retval": 378} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "fd": 5, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1360, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "00359f92-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582970993939804, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1127} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582971483913741, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 345981} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1361, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00360eca-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 27} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1362, "retval": 1362} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6afebb5e-412d-d25c-ad41-600cfcd2423e", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./remove_directory", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./remove_directory "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_rmdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ef2077a9-1b4f-685b-8f1b-6859ab685e9f", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/temporary", "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1362, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "00d0b0a5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1104} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 798} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "00d10d10-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1363, "retval": 1363} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972009613134, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972013891088, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582972504128832, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 350970} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1363, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "00d10d10-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "016b62c2-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1364, "retval": 1364} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./remove_file", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./remove_file "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_unlink:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "745458ec-83ee-b052-ae83-2efb22b0cb41", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/out.tmp", "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1364, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "016b62c2-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1086} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 872} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1365, "retval": 1365} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973023921563, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 356013} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 501, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 502, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 503, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 504, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 501, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 502, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 503, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582973524142365, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 504, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1365, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "016bc3ec-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1366, "retval": 1366} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copied_pipe", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copied_pipe a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "0205e82e-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "0205e82f-467b-11e9-aeb7-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "0205eb21-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1367, "retval": 1367} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1367, "ppid": 1366, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205eb21-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1367, "ppid": 1366, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205eb21-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 4, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1367, "ppid": 1366, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205eb21-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0205e82f-467b-11e9-aeb7-080027fc76ba", "fd": 1, "retval": 2} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1367, "ppid": 1366, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205eb21-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0205e82e-467b-11e9-aeb7-080027fc76ba", "fd": 0, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1366, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "0205a2c5-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974034219849, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1012} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582974534337270, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360849} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1368, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0206281d-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 28} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "029fc20e-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1369, "retval": 1369} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/datagram.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/datagram.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "ret_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 296} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 250} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "02a0949b-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1370, "retval": 1370} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 268} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "02a09f07-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1371, "retval": 1371} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "373ba8a7-d481-4f5a-81d4-177fea4f8ab6", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./datagram_server", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./datagram_server"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975044355157, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975053912224, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582975573954964, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 374757} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1371, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "02a09f07-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 28} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "033a9f30-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1372, "retval": 1372} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ffa1f988-cf0d-7f5b-8dcf-910bcb7fb68e", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./datagram_client", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./datagram_client a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "033af1f1-467b-11e9-aeb7-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033af1f1-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "033af5b2-467b-11e9-aeb7-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033af5b2-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 47} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "033b00cc-467b-11e9-aeb7-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "tid": 100144, "uid": 1003, "so_uuid": "033b00cc-467b-11e9-aeb7-080027fc76ba", "lport": 61810, "fport": 4950, "laddr": "::1", "faddr": "::1"} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "tid": 100015, "uid": 0, "so_uuid": "02a14724-467b-11e9-aeb7-080027fc76ba", "lport": 4950, "fport": 61810, "laddr": "::1", "faddr": "::1"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033b00cc-467b-11e9-aeb7-080027fc76ba", "ret_msgid": 506, "fd": 3, "address": "::1", "port": 4950, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033b00cc-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "033b06bf-467b-11e9-aeb7-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "tid": 100144, "uid": 1003, "so_uuid": "033b06bf-467b-11e9-aeb7-080027fc76ba", "lport": 29583, "fport": 4950, "laddr": "127.0.0.1", "faddr": "127.0.0.1"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033b06bf-467b-11e9-aeb7-080027fc76ba", "ret_msgid": 507, "fd": 3, "address": "127.0.0.1", "port": 4950, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "033b06bf-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1372, "ppid": 1369, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "033a9f30-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "02a14724-467b-11e9-aeb7-080027fc76ba", "ret_msgid": 506, "fd": 3, "address": "::1", "port": 61810, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 31} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976058898304, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "02a14724-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1370, "ppid": 1369, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "02a0949b-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1369, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "029fc20e-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 961} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 974} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1373, "retval": 1373} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976063965319, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 374757} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4832} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4885} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4939} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4992} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976124409490, "pid": 1242, "ppid": 1, "tid": 100145, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0344ad21-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582976605249234, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 384214} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1373, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "033b3c9f-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "03d617c8-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1374, "retval": 1374} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f5cca548-4198-c65d-9841-9bcbadc62d45", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./direct_pipe", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./direct_pipe a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "03d65a83-467b-11e9-aeb7-080027fc76ba", "ret_objuuid2": "03d65a83-467b-11e9-aeb8-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "03d65d8b-467b-11e9-aeb8-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1375, "retval": 1375} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1375, "ppid": 1374, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d65d8b-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1375, "ppid": 1374, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d65d8b-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "03d65a83-467b-11e9-aeb8-080027fc76ba", "fd": 4, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1375, "ppid": 1374, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d65d8b-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1375, "ppid": 1374, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d65d8b-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "03d65a83-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1374, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "03d617c8-467b-11e9-aeb7-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 910} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1025} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "03d69d45-467b-11e9-aeb8-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1376, "retval": 1376} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977078937143, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582977614240236, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 389294} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1376, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "03d69d45-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 25} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "047114a8-467b-11e9-aeb8-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1377, "retval": 1377} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/named.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/named.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "ret_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 286} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 253} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "04724181-467b-11e9-aeb8-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1378, "retval": 1378} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 33} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 271} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "04724c46-467b-11e9-aeb8-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1379, "retval": 1379} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978093935240, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "b0bc4f68-c591-a656-91c5-dcf6b6a6dfa5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./named_writer", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./named_writer a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 27} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978104376001, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582978653885691, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 403239} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1379, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "04724c46-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 15} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "050e3275-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1380, "retval": 1380} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "d13b936e-e1a2-e756-a2e1-63e636e7e7c5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./named_reader", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./named_reader"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 27} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "ret_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "ret_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "ret_objuuid2": "04732720-467b-11e9-aeb9-080027fc76ba", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp", "flags": 1, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04732720-467b-11e9-aeb8-080027fc76ba", "fd": 3, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 18} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1378, "ppid": 1377, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "04724181-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04732720-467b-11e9-aeb8-080027fc76ba", "fd": 3, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04732720-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1380, "ppid": 1377, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "050e3275-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1377, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "047114a8-467b-11e9-aeb8-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 859} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1041} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979123878126, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "050ef741-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1381, "retval": 1381} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582979673936273, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 408126} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980015553697, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "ret_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "upath1": "/etc/cron.d", "flags": 1179652, "ret_fd1": 5, "mode": 59400, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980015553697, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 408126} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4918} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4971} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4005} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4058} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5010} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5063} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4883} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 1242, "ppid": 1, "tid": 100147, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "05a70fcb-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 520, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 520, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980124882723, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1381, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "050ef741-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "05a8917f-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1382, "retval": 1382} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7eec5b1a-792a-5556-aa79-9b231655b451", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./shm_exfil", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./shm_exfil "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980135150042, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582980684087639, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 413024} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 4} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1382, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "05a8917f-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 843} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1092} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "0644af0a-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1384, "retval": 1384} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981158328683, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582981694131361, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 415975} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 415975} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4894} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4947} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2947} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 3000} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100148, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "06d827f2-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 521, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 521, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982124887439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982134345512, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982134345512, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1384, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0644af0a-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1385, "retval": 1385} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/signal.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/signal.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "ret_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 289} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 245} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "06e087e7-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1386, "retval": 1386} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 44} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 263} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "06e09284-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1387, "retval": 1387} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982174660438, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f7889531-95ae-715e-ae95-c4adae711987", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./signal_server", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./signal_server"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "ret_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "upath1": "/usr/lib/libc++.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "ret_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "upath1": "/lib/libcxxrt.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "ret_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "upath1": "/lib/libm.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "ret_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "upath1": "/lib/libgcc_s.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982183880903, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582982744802290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 434234} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1387, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "06e09284-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "077cbe80-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1388, "retval": 1388} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "74643ad1-37f8-b356-b837-c78bb6b345d2", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./signal_client", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./signal_client a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "ret_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "upath1": "/usr/lib/libc++.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "ret_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "upath1": "/lib/libcxxrt.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "ret_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "upath1": "/lib/libm.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "ret_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "upath1": "/lib/libgcc_s.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3600384, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3600384, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3637248, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3637248, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3690496, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3690496, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3702784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3702784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4218880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4218880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5550080, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5550080, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "ret_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 28} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1388, "ppid": 1385, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "077cbe80-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_unlink:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "14d38b49-9f5f-7855-9f9f-80594578129e", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1386, "ppid": 1385, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "06e087e7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1385, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "06dfb5b9-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 792} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1143} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "077dfec4-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1389, "retval": 1389} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983204405852, "pid": 1389, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "077dfec4-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582983773878145, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 443044} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 443044} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4726} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4779} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4336} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4389} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4695} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4748} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4486} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4550} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4252} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 1242, "ppid": 1, "tid": 100149, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08097641-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 526, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 526, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984123985942, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4539} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984133945856, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4603} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984143894132, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984143894132, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984143894132, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4305} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984154114648, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984154114648, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984154114648, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984154114648, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984167461125, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984167461125, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1389, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "077dfec4-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "081702f0-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1390, "retval": 1390} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/stream.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/stream.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "ret_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 290} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 256} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "0817de1c-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1391, "retval": 1391} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 34} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 274} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "0817e89b-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1392, "retval": 1392} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1392, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817e89b-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1392, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817e89b-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1392, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0817e89b-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "eeac9f12-b277-945c-b7b2-6dc48c944589", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./stream_server", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./stream_server a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1392, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0817e89b-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984214699854, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "0818480c-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0818480c-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08184bd5-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "08184bd5-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984223939650, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08184f2f-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582984818638204, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 460817} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1392, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "0817e89b-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 16} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1390, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "081702f0-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1393, "retval": 1393} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "acf88428-0c9e-7555-9e0c-dc6fa5750416", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./stream_client", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./stream_client"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08b3030d-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "08b3030d-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08b30734-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "08b30734-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08b30ad7-467b-11e9-aeb9-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "tid": 100015, "uid": 0, "so_uuid": "08b30ad7-467b-11e9-aeb9-080027fc76ba", "lport": 10508, "fport": 3490, "laddr": "0.0.0.1", "faddr": "0.0.0.1", "iss": 502550519} +{"event": "fbt:kernel:syncache_expand:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "tid": 100015, "uid": 0, "so_uuid": "08184f2f-467b-11e9-aeb9-080027fc76ba", "lport": 3490, "fport": 10508, "laddr": "0.0.0.1", "faddr": "0.0.0.1"} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "tid": 100015, "uid": 0, "so_uuid": "08b310af-467b-11e9-aeb9-080027fc76ba", "lport": 3490, "fport": 10508, "laddr": "0.0.0.1", "faddr": "0.0.0.1", "iss": 2393361785} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "08b30ad7-467b-11e9-aeb9-080027fc76ba", "fd": 3, "address": "::1", "port": 3490, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1393, "ppid": 1390, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "08b29b3d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 26} +{"event": "audit:event:aue_accept:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "08184f2f-467b-11e9-aeb9-080027fc76ba", "ret_objuuid1": "08b310af-467b-11e9-aeb9-080027fc76ba", "fd": 3, "ret_fd1": 4, "address": "::1", "port": 10508, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 32} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "ret_objuuid1": "08b3272d-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_pid": 1394, "retval": 1394} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1391, "ppid": 1390, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "0817de1c-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1394, "ppid": 1391, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "08b3272d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1394, "ppid": 1391, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "08b3272d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "08b310af-467b-11e9-aeb9-080027fc76ba", "fd": 4, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1394, "ppid": 1391, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "08b3272d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985234024146, "pid": 1394, "ppid": 1391, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "08b3272d-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "08b310af-467b-11e9-aeb9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582985823904780, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 465801} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 465801} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4117} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4170} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4697} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4750} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4050} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4103} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4893} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4980} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 1242, "ppid": 1, "tid": 100151, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "093a8b71-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 531, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 531, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986124378135, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4946} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986134636454, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 5033} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986143882190, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986143882190, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986154353840, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986154353840, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986164762457, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986164762457, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1395, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "08b37bd8-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "094c9feb-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1396, "retval": 1396} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9e441c0-7c31-1a56-b17c-3f9a061af725", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./with_wget", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./with_wget "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_vfork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "094cee03-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1397, "retval": 1397} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f3f7eadf-5a79-ba55-b95a-881315bae424", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sh -c wget http://www.google.com/index.html"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "ret_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "upath1": "/lib/libedit.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2818048, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2818048, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3334144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3334144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4665344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4665344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "ret_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "upath1": "/lib/libncursesw.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 6983680, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 6983680, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7356416, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7356416, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 20} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1397, "ppid": 1396, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "094cee03-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1396, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "094c9feb-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 725} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1866} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "094d72a7-467b-11e9-aeb9-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1398, "retval": 1398} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582986244400733, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987074157366, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 479100} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1398, "ppid": 1337, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "094d72a7-467b-11e9-aeb9-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 18} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1337, "ppid": 1282, "tid": 100117, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "f98bb0e2-467a-11e9-aeb7-080027fc76ba", "subjthruuid": "df874b8e-467a-11e9-aea9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582987267490974, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 50} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988115532463, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 480275} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 480275} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4071} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4124} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988125996282, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4807} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4860} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4409} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988133999679, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4462} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988158826122, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1171} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 1224} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 1242, "ppid": 1, "tid": 100152, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a6c7c9b-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 532, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 532, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988170844062, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988173936046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988173936046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988173936046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988173936046, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 533, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 534, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 535, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 536, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582988523946631, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 533, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582989123868619, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 484527} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 484527} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4248} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100098, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0c0278-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4301} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 1242, "ppid": 1, "tid": 100153, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b9cc6c6-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 537, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 537, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990124349634, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990133892948, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 486160} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990133892948, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552582990133892948, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "ca0be36d-467a-11e9-ae9b-080027fc76ba", "fd": 14, "retval": 46} +{"event": "host::info:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "uname":"FreeBSD 13.0-CURRENT FreeBSD 13.0-CURRENT 5da4c1df8d5(HEAD) CADETS amd64", "hostname":"cadets-bbn", "network":[ {"name":"em0", "mac":"08:00:27:fc:76:ba", "inet":"10.0.2.15", "inet6":""},{"name":"em1", "mac":"08:00:27:f9:7a:ba", "inet":"192.168.56.101", "inet6":""}] , "version": "versionn_innfo:"} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584214124584224, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 486690} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584214124584224, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584214194244634, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3", "fd": 5, "retval": 16} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584214194244634, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "c1555c7c-d38e-9a58-8ed3-e319889a0469", "fd": 14, "retval": 48} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584214194244634, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 48} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584215124320762, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 487685} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584215534083105, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584215534083105, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16928, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584215534083105, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16929, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584215534083105, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16930, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584215534083105, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16931, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584215534083105, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16928, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584215534083105, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16929, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584215534083105, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16930, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584215534083105, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16931, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216124855581, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 487685} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216124855581, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216124855581, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216124855581, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216124855581, "pid": 1242, "ppid": 1, "tid": 100170, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e65d88c3-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216124855581, "pid": 1242, "ppid": 1, "tid": 100170, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e65d88c3-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216124855581, "pid": 1242, "ppid": 1, "tid": 100170, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e65d88c3-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 991} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216124855581, "pid": 1242, "ppid": 1, "tid": 100170, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e65d88c3-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216124855581, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1044} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216124855581, "pid": 1242, "ppid": 1, "tid": 100170, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e65d88c3-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216124855581, "pid": 1242, "ppid": 1, "tid": 100170, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e65d88c3-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16932, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216124855581, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16932, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216124855581, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216124855581, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216124855581, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584216134014133, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 490395} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584217144147017, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 490757} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 490757} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100171, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e78eb6d8-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100171, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e78eb6d8-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100171, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e78eb6d8-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2706} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100171, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e78eb6d8-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2759} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100171, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e78eb6d8-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100171, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e78eb6d8-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100171, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e78eb6d8-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100171, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e78eb6d8-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100171, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e78eb6d8-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100171, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e78eb6d8-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16933, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16933, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218123884085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218153886551, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 493182} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218534024445, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218534024445, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16934, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218534024445, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16935, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218534024445, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16936, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218534024445, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16937, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218534024445, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16934, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218534024445, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16935, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218534024445, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16936, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584218534024445, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16937, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584219163889083, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 494367} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 494367} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100172, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e8c06fd6-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100172, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e8c06fd6-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100172, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e8c06fd6-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2421} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100172, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e8c06fd6-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2474} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100172, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e8c06fd6-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100172, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e8c06fd6-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100172, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e8c06fd6-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1181} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100172, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e8c06fd6-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1234} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100172, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e8c06fd6-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100172, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e8c06fd6-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16938, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16938, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220124212241, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220134149156, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220134149156, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220174656411, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 496796} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220254401345, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "e8d3878e-467d-11e9-aecf-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220254401345, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "e8d3878e-467d-11e9-aecf-080027fc76ba", "fd": 4, "address": "23.131.160.7", "port": 123, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220254401345, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "e8d3878e-467d-11e9-aecf-080027fc76ba", "fd": 4, "retval": 0} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220254401345, "tid": 100092, "uid": 123, "so_uuid": "b5434a9c-467a-11e9-ae89-080027fc76ba", "lport": 123, "fport": 123, "laddr": "10.0.2.15", "faddr": "23.131.160.7"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220254401345, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "b5434a9c-467a-11e9-ae89-080027fc76ba", "ret_msgid": 16939, "fd": 22, "address": "23.131.160.7", "port": 123, "retval": 48} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220254401345, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "b541acd0-467a-11e9-ae89-080027fc76ba", "ret_msgid": 16940, "fd": 3, "retval": 100} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584220254401345, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b2110-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16940, "upath1": "/", "fd": 8, "address": "", "retval": 100} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584221184231476, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 497951} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584221539826639, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584221539826639, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16941, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584221539826639, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16942, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584221539826639, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16943, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584221539826639, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16944, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584221539826639, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16941, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584221539826639, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16942, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584221539826639, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16943, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584221539826639, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16944, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584221824468319, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584221824468319, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584221824468319, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584221824468319, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 15} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 497951} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100173, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e9f1046d-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100173, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e9f1046d-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100173, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e9f1046d-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2425} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100173, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e9f1046d-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2478} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100173, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e9f1046d-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100173, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e9f1046d-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100173, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e9f1046d-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1151} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100173, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e9f1046d-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1204} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100173, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e9f1046d-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100173, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "e9f1046d-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16945, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16945, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222123900893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222194047722, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 501567} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222733900013, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222733900013, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222733900013, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584222733900013, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 20} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584223203936803, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 502258} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584223659195782, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584223659195782, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584223659195782, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584223659195782, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 21} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 502258} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100174, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb22e820-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100174, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb22e820-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100174, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb22e820-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3612} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100174, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb22e820-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3665} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100174, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb22e820-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100174, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb22e820-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100174, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb22e820-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 687} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100174, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb22e820-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 740} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100174, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb22e820-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 1242, "ppid": 1, "tid": 100174, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eb22e820-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16946, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16946, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224128851998, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224136004800, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224136004800, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224136004800, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224136004800, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224213876716, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 505084} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224534037545, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224534037545, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16947, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224534037545, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16948, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224534037545, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16949, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224534037545, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16950, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224534037545, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16947, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224534037545, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16948, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224534037545, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16949, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584224534037545, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16950, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584225223945325, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 506266} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 506266} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100175, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ec535618-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100175, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ec535618-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100175, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ec535618-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2822} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100175, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ec535618-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2875} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100175, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ec535618-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100175, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ec535618-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100175, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ec535618-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1178} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100175, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ec535618-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1231} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100175, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ec535618-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100175, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ec535618-467d-11e9-aecf-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16951, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16951, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226123871328, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226233914850, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 508687} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "ecab3f79-467d-11e9-aecf-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1491, "retval": 1491} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./bash_commands.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ./bash_commands.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ./bash_commands.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226693997604, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "ret_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./bash_commands.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 592} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 11} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 11} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584226703947958, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 11} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227264471263, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 517549} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227534437584, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227534437584, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16952, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227534437584, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16953, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227534437584, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16954, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227534437584, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16955, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227534437584, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16952, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227534437584, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16953, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227534437584, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16954, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227534437584, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16955, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1492, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ecac45d5-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 445} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 11} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 11} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 241} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ed460855-467d-11e9-aecf-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1493, "retval": 1493} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d1524fc4-3a5e-855b-9e3a-5d212b8581ed", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/whoami", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "whoami"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "ret_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "upath1": "/etc/pwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 5} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1493, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "ed460855-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 351} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 270} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ed468077-467d-11e9-aecf-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1494, "retval": 1494} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ab57cf3a-f09d-cd5e-9df0-38f66ecdfb24", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/netstat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "netstat -n -l"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "ret_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "upath1": "/lib/libkvm.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2555904, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2555904, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2580480, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2580480, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "ret_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "upath1": "/usr/lib/libmemstat.so.3", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2641920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2641920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "79f5d4d1-43bc-2c5f-bc43-f067df2cf245", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "ret_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "upath1": "/lib/libxo.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2777088, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2777088, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2822144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2822144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "ret_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "upath1": "/usr/lib/libnetgraph.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2883584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2883584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2891776, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2891776, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2899968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 2899968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "603b87e0-3252-8c5e-9232-acf89e8c9393", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "ret_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "upath1": "/lib/libelf.so.2", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2551808, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7077888, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7077888, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7106560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7106560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7176192, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7176192, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 3213} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1494, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "netstat", "subjprocuuid": "ed468077-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 322} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 303} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227714423859, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ed474591-467d-11e9-aecf-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1495, "retval": 1495} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de3a34c1-0b17-8152-970b-4c2cb281885f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/cat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "cat /proc/cpuinfo"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 5} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 26} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1495, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed474591-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 289} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 336} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ed47bd13-467d-11e9-aecf-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1496, "retval": 1496} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de3a34c1-0b17-8152-970b-4c2cb281885f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/cat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "cat /etc/networks"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "ret_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "upath1": "/etc/networks", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "fd": 3, "retval": 310} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 310} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c21b29ec-2630-1554-b026-2ba75415bafa", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1496, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ed47bd13-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 256} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 359} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ed482372-467d-11e9-aecf-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1497, "retval": 1497} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 521, "fd": -100, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "542d495d-cfb1-a954-b1cf-f79fd4a9303e", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/ps", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "ps auxx"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "ret_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "upath1": "/lib/libm.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2621440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "ret_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "upath1": "/lib/libkvm.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2633728, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2699264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 2699264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fee1ef9b-e913-9457-93e9-db4a97946773", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "ret_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "upath1": "/lib/libjail.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2736128, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 2736128, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5d16b826-67a0-1d5b-a067-c36f7b1d84a3", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "ret_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "upath1": "/lib/libxo.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2748416, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2748416, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2781184, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2781184, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 2867200, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "41d1fada-b9cb-4e55-8bb9-caec854e4e9c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2879488, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2879488, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4726784, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4726784, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "ret_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "upath1": "/lib/libelf.so.2", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7045120, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7045120, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7073792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7073792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7143424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 7143424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "7f31dff6-afc8-9257-88af-4252e792cde7", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7184384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7184384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7229440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 7229440, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227723891923, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 1048576, "fd": -100, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 5, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 5, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "ret_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "upath1": "/etc/pwd.db", "flags": 1048576, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "ret_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "upath1": "/usr/share/zoneinfo/UTC", "flags": 0, "ret_fd1": 6, "mode": 0, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 6, "retval": 118} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 6, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "ret_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "upath1": "/usr/share/zoneinfo/posixrules", "flags": 0, "ret_fd1": 6, "mode": 24832, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 6, "retval": 3519} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 6, "retval": 0} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 5, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 1, "retval": 4434} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1497, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ps", "subjprocuuid": "ed482372-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 233} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ed494a7c-467d-11e9-aecf-080027fc76ba", "ret_objuuid2": "ed494a7c-467d-11e9-aed0-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 423} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ed495023-467d-11e9-aed0-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1498, "retval": 1498} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ed4956e2-467d-11e9-aed0-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1499, "retval": 1499} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1498, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed495023-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1498, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed495023-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1498, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed495023-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 4, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1498, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed495023-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "3f4e2dec-9008-5a56-8890-4814765aa0ba", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/sudo", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sudo -S ls"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1498, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed495023-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed494a7c-467d-11e9-aed0-080027fc76ba", "fd": 1, "retval": 10} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1498, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed495023-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2510848, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2510848, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2588672, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2588672, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "ret_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "upath1": "/usr/local/libexec/sudo/libsudo_util.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2637824, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2637824, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6318c23c-4c7f-9552-bf4c-2f482295e518", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2703360, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2703360, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2744320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 2744320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2506752, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2756608, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2756608, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3272704, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3272704, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4603904, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4603904, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "ret_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "upath1": "/usr/share/zoneinfo/UTC", "flags": 0, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 3, "retval": 118} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "01aaae62-8a03-3b5f-838a-d6569f3b2a48", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "ret_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "upath1": "/usr/share/zoneinfo/posixrules", "flags": 0, "ret_fd1": 3, "mode": 24832, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 3, "retval": 3519} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "52914756-cb96-445b-96cb-2e502b44f61b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 2, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 5, "retval": 0} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227733870086, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "ret_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "upath1": "/usr/local/libexec/sudo/sudoers.so", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7319552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7319552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7434240, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7434240, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7647232, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 7647232, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2239233b-9622-735e-a296-89384e73935d", "fd": 5, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "ret_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "upath1": "/usr/lib/libbsm.so.3", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7667712, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7667712, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7708672, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7708672, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7778304, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 7778304, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f606e2dc-2d1a-8e54-9a2d-e654148eb90e", "fd": 5, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "ret_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "upath1": "/usr/lib/libpam.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7790592, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7790592, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7815168, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7815168, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7843840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 7843840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 5, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "ret_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "upath1": "/lib/libz.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7315456, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7856128, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7856128, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7888896, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7888896, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7958528, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 7958528, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 5, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_euid": -1, "arg_ruid": 0, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_euid": 1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "ret_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "upath1": "/usr/local/etc/sudoers", "flags": 0, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 3678} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 3678} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 1, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_euid": 0, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_egid": -1, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_euid": 0, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "382d9507-c88d-7556-8dc8-bb47e67533c4", "ret_objuuid1": "382d9507-c88d-7556-8dc8-bb47e67533c4", "upath1": "/usr/local/etc/sudoers.d", "flags": 1179652, "ret_fd1": 6, "mode": 65535, "retval": 6} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "382d9507-c88d-7556-8dc8-bb47e67533c4", "fd": 6, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_euid": -1, "arg_ruid": 1003, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 504} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_euid": -1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 504} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 504} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_euid": -1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "ret_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "upath1": "/usr/local/etc/pam.d/sudo", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "fd": 4, "retval": 323} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "ret_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "upath1": "/etc/pam.d/system", "flags": 0, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 648} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "ret_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "upath1": "/usr/lib/pam_opie.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8204288, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8204288, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8208384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8208384, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8212480, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 8212480, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "ret_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "upath1": "/usr/lib/libopie.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8220672, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8220672, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8232960, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8232960, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8249344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 8249344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "731abae6-8f31-c05a-b18f-0bfe5ac06da8", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "ret_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "upath1": "/lib/libmd.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14680064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14680064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14712832, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14712832, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14794752, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 14794752, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a4d78665-6f27-8a51-a76f-7bf6a18ae91e", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "7acb8e1a-7795-cf54-9577-7bb374cf7993", "fd": 7, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "ret_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "upath1": "/usr/lib/pam_opieaccess.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8269824, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8269824, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8273920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8273920, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8278016, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 8278016, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4c76078b-0d74-bd50-b40d-548bf0bdcf31", "fd": 7, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8286208, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8286208, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8294400, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8294400, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8302592, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8302592, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "ret_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "upath1": "/lib/libcrypt.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14938112, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14938112, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14954496, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14954496, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14995456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 14995456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "361927fc-6969-1555-a969-68fff515170e", "fd": 8, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "ret_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "upath1": "/usr/lib/libypclnt.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 8, "mode": 0, "retval": 8} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8310784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8310784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8323072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8323072, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8331264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 8331264, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "18eb50ef-3995-7f5e-9539-43795e7f5284", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 7, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "ret_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "upath1": "/etc/pam.d/system", "flags": 0, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 648} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "ret_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "upath1": "/usr/lib/pam_login_access.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8343552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8343552, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8347648, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8347648, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8351744, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 8351744, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "3c3bd098-e401-ae51-81e4-136b51aedffb", "fd": 7, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8359936, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8359936, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8368128, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8368128, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8376320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8376320, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 7, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "ret_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "upath1": "/usr/lib/pam_permit.so.6", "flags": 0, "fd": -100, "ret_fd1": 6, "mode": 0, "retval": 6} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 6, "ret_fd1": 7, "retval": 7, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15077376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15077376, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15081472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15081472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15085568, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 15085568, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "b1857442-6384-095d-8463-a0938d09e3b4", "fd": 6, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "ret_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "upath1": "/etc/pam.d/system", "flags": 0, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 648} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "ret_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "upath1": "/usr/lib/pam_unix.so.6", "flags": 0, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 7, "ret_fd1": 8, "retval": 8, "fcntl_cmd": 17} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 8200192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15093760, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15093760, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15101952, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15101952, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15110144, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227743896003, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 15110144, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 8, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "bd4f3750-1951-5c56-9119-d1a4d65c8c52", "fd": 7, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c", "fd": 6, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "48de70ac-ab23-ae52-a3ab-f629e2ae3418", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "ret_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "upath1": "/etc/login.access", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "fd": 4, "retval": 1785} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "d38a73f1-9f17-6458-979f-93bf586467d6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 1024} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 1024} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "ret_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "upath1": "/etc/ttys", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "fd": 4, "retval": 2086} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f92e526d-6218-7d5b-9862-69e68b7d7dcf", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_euid": -1, "arg_ruid": 0, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_egid": 0, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "ed4c3241-467d-11e9-aed0-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed4c3241-467d-11e9-aed0-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 4, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed4c3241-467d-11e9-aed0-080027fc76ba", "ret_msgid": 16956, "fd": 4, "retval": 164} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16956, "upath1": "/", "fd": 9, "address": "", "retval": 164} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "aafb7a4a-d952-865d-92d9-3ff2ed86d364", "fd": 16, "retval": 140} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed4c3241-467d-11e9-aed0-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_egid": 1003, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_euid": -1, "arg_ruid": 1003, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "06078de3-2eda-d757-9a2e-abc657d728cd", "fd": 5, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "ret_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "upath1": "/etc/security/audit_event", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 27878} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "ret_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "upath1": "/etc/security/audit_class", "flags": 0, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 27878} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 27878} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 560} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_setresgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_egid": -1, "arg_rgid": -1, "arg_sgid": -1, "retval": 0} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_euid": -1, "arg_ruid": -1, "arg_suid": -1, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 63} +{"event": "audit:event:aue_setuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_uid": 0, "retval": 0} +{"event": "audit:event:aue_setgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_gid": 0, "retval": 0} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "ed4cd44f-467d-11e9-aed0-080027fc76ba", "ret_objuuid2": "ed4cd450-467d-11e9-aed0-080027fc76ba", "ret_fd1": 6, "ret_fd2": 7, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1500, "retval": 1500} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "ed4d0744-467d-11e9-aed0-080027fc76ba", "ret_objuuid2": "ed4d0745-467d-11e9-aed0-080027fc76ba", "ret_fd1": 7, "ret_fd2": 8, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_setresuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_euid": 0, "arg_ruid": 0, "arg_suid": 0, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 1, "retval": 1, "fcntl_cmd": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "914fe8b4-bc73-3e57-b3bc-41d1373eed3c", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de49b29f-2171-c15f-b121-40390fc15206", "fd": 5, "retval": 0} +{"event": "audit:event:aue_closefrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 6, "ret_fd1": 7, "retval": 7} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed4cd450-467d-11e9-aed0-080027fc76ba", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/ls", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "ls"} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed4cd44f-467d-11e9-aed0-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed4cd44f-467d-11e9-aed0-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2420736, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2420736, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2453504, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2453504, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "ret_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "upath1": "/lib/libncursesw.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2514944, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2514944, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2682880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2682880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2887680, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2887680, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2912256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3428352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4759552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227754893579, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_fchdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1048576, "ret_fd1": 4, "mode": 0, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1179652, "ret_fd1": 5, "mode": 0, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 5, "retval": 0} +{"event": "audit:event:aue_fchdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 4, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 119} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 107} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 103} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 88} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 104} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 94} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1500, "ppid": 1499, "tid": 100120, "uid": 0, "cpu_id": 0, "exec": "ls", "subjprocuuid": "ed4cda3e-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed4d0745-467d-11e9-aed0-080027fc76ba", "fd": 8, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed4d0744-467d-11e9-aed0-080027fc76ba", "fd": 7, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed4d0744-467d-11e9-aed0-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed4d0745-467d-11e9-aed0-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1499, "ppid": 1491, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "sudo", "subjprocuuid": "ed4956e2-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 169} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 489} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ed4e1828-467d-11e9-aed0-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1501, "retval": 1501} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 103} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e7451145-d4d2-9753-92d4-25f153976db4", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/nc", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "nc -l 54321"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 508} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ed4e6160-467d-11e9-aed0-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1502, "retval": 1502} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "ret_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "upath1": "/lib/libipsec.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2449408, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2449408, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2461696, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2461696, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2977792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2977792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4308992, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4308992, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "ed4ed62e-467d-11e9-aed0-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed4ed62e-467d-11e9-aed0-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "ed4edb36-467d-11e9-aed0-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_bind:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed4edb36-467d-11e9-aed0-080027fc76ba", "fd": 3, "address": "0.0.0.0", "port": 54321, "retval": 0} +{"event": "audit:event:aue_listen:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed4edb36-467d-11e9-aed0-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227764730935, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584227773954188, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228123853254, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 517549} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228123853254, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228123853254, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228123853254, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228123853254, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228123853254, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228123853254, "pid": 1242, "ppid": 1, "tid": 100176, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ed848f83-467d-11e9-aed0-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228123853254, "pid": 1242, "ppid": 1, "tid": 100176, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ed848f83-467d-11e9-aed0-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228123853254, "pid": 1242, "ppid": 1, "tid": 100176, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ed848f83-467d-11e9-aed0-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2417} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228123853254, "pid": 1242, "ppid": 1, "tid": 100176, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ed848f83-467d-11e9-aed0-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228444725377, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 600032} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1502, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "ed4e6160-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 84} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ede9615e-467d-11e9-aed0-080027fc76ba", "ret_objuuid2": "ede96181-467d-11e9-aed0-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 551} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ede96800-467d-11e9-aed0-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1503, "retval": 1503} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ede96d0c-467d-11e9-aed0-080027fc76ba", "ret_objuuid2": "ede96d0c-467d-11e9-aed1-080027fc76ba", "ret_fd1": 4, "ret_fd2": 5, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ede9706f-467d-11e9-aed1-080027fc76ba", "ret_objuuid2": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_pid": 1504, "retval": 1504} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "ede978f0-467d-11e9-aed1-080027fc76ba", "ret_objuuid2": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_pid": 1505, "retval": 1505} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 4, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de3a34c1-0b17-8152-970b-4c2cb281885f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/cat", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "cat EXFILTRATION_FILE.dat"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "fd": 5, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "4a7e215d-fecb-7d56-8bfe-3c48a67db43b", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/gzip", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "gzip"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a", "fd": 255, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 4, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "e7451145-d4d2-9753-92d4-25f153976db4", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/nc", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "nc localhost 54321"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "ret_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ede96181-467d-11e9-aed0-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ede96181-467d-11e9-aed0-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ede96181-467d-11e9-aed0-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ede96181-467d-11e9-aed0-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ede96181-467d-11e9-aed0-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ede96181-467d-11e9-aed0-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ede96181-467d-11e9-aed0-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ede96181-467d-11e9-aed0-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ede96181-467d-11e9-aed0-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ede96181-467d-11e9-aed0-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ede96181-467d-11e9-aed0-080027fc76ba", "fd": 1, "retval": 4096} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 2186} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ede96181-467d-11e9-aed0-080027fc76ba", "fd": 1, "retval": 2186} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cf557f18-9d85-b95e-859d-95f6feb980dc", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ede96181-467d-11e9-aed0-080027fc76ba", "fd": 1, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1503, "ppid": 1491, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "cat", "subjprocuuid": "ede96800-467d-11e9-aed0-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "ret_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "upath1": "/lib/libz.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2465792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2465792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2535424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 2535424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a55fa421-3072-7451-b230-2012f174bff1", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "ret_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "upath1": "/usr/lib/liblzma.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2605056, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 2711552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ae7093f3-2081-df5b-8120-61c30bdf0c57", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "ret_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "upath1": "/usr/lib/libbz2.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2719744, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2732032, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2732032, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2797568, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 2797568, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f18526b4-6913-ba55-9369-356b45ba4751", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2805760, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2805760, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3321856, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3321856, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4653056, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4653056, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "ret_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "upath1": "/lib/libthr.so.3", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "fd": 3, "retval": 2428928, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "fd": 3, "retval": 6971392, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "fd": 3, "retval": 6971392, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "fd": 3, "retval": 7024640, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "fd": 3, "retval": 7024640, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "fd": 3, "retval": 7094272, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "fd": 3, "retval": 7094272, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c7381901-4ea2-b956-a24e-59a436b93c00", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228785423457, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ede9615e-467d-11e9-aed0-080027fc76ba", "fd": 0, "retval": 47242} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ede9615e-467d-11e9-aed0-080027fc76ba", "fd": 0, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ede96d0c-467d-11e9-aed1-080027fc76ba", "fd": 1, "retval": 3820} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ede96d0c-467d-11e9-aed1-080027fc76ba", "fd": 1, "retval": 8} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1504, "ppid": 1491, "tid": 100144, "uid": 1003, "cpu_id": 0, "exec": "gzip", "subjprocuuid": "ede9706f-467d-11e9-aed1-080027fc76ba", "subjthruuid": "02a09da6-467b-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "ret_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "upath1": "/lib/libipsec.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2433024, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2449408, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2449408, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2461696, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2461696, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2977792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2977792, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4308992, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4308992, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "ret_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "upath1": "/etc/hosts", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 3, "retval": 1031} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584228794039059, "pid": 1505, "ppid": 1491, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ede978f0-467d-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584229493902856, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 617776} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 617776} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4821} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4874} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4407} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4460} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4083} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230124034672, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4136} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4327} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4872} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4280} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3918} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4804} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3923} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4214} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3987} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4257} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4224} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4326} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4587} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3968} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4120} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4380} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4803} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4486} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5242} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4580} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3972} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3934} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 1242, "ppid": 1, "tid": 100177, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "eeb6bcbd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16958, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16958, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230133848239, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230143852843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230143852843, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230143852843, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4925} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230159136457, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230159136457, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230159136457, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4333} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230166112437, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230166112437, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230166112437, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3971} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230166112437, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230166112437, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230166112437, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4857} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230174301917, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230174301917, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230174301917, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3976} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230184506722, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230184506722, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230184506722, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4267} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230184506722, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230184506722, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230184506722, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4040} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230193882177, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230193882177, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230193882177, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4310} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230203871715, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230203871715, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230203871715, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4277} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230203871715, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230203871715, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230203871715, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4379} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230214499516, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230214499516, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230214499516, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4640} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230224265106, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230224265106, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230224265106, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4021} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230224265106, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230224265106, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230224265106, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4173} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230233853342, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230233853342, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230233853342, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4856} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230243902171, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230243902171, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230243902171, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4539} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230243902171, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230243902171, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230243902171, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 5295} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230253849267, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230253849267, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230253849267, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4633} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230263879253, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230263879253, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230263879253, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4025} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230273887434, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230544152117, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 632797} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230544152117, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230544152117, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16959, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230544152117, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16960, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230544152117, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16961, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230544152117, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16962, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230544152117, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16959, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230544152117, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16960, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230544152117, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16961, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584230544152117, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16962, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584231555482583, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 633972} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 633972} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3542} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3595} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3942} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3995} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4139} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4192} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3382} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1171} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 1242, "ppid": 1, "tid": 100178, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "efe7017e-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16963, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16963, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232124327011, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232134041430, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232134041430, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232134041430, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3435} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232134041430, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232134041430, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232134041430, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1224} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232148434520, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232148434520, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232153933994, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232153933994, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584232573855164, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 638079} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584233534321675, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584233534321675, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16964, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584233534321675, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16965, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584233534321675, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16966, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584233534321675, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16967, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584233534321675, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16964, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584233534321675, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16965, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584233534321675, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16966, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584233534321675, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16967, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584233583899865, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 639261} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 639261} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100179, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f1182974-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100179, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f1182974-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100179, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f1182974-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4103} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100179, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f1182974-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4156} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100179, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f1182974-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100179, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f1182974-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100179, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f1182974-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1178} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100179, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f1182974-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1231} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100179, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f1182974-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100179, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f1182974-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16968, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16968, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234124060706, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234133884264, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234133884264, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584234594321050, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 641693} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584235604092551, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 642056} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 642056} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100180, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f2495489-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100180, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f2495489-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100180, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f2495489-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2428} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100180, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f2495489-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2481} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100180, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f2495489-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100180, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f2495489-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100180, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f2495489-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100180, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f2495489-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100180, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f2495489-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100180, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f2495489-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16969, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16969, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236124076565, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236533867083, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236533867083, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16970, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236533867083, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16971, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236533867083, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16972, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236533867083, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16973, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236533867083, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16970, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236533867083, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16971, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236533867083, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16972, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236533867083, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16973, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584236614304448, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 645284} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584237623931354, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 645645} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 645645} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100181, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f37a812a-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100181, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f37a812a-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100181, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f37a812a-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3224} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100181, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f37a812a-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3277} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100181, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f37a812a-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100181, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f37a812a-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100181, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f37a812a-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 357} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 410} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100181, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f37a812a-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100181, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f37a812a-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100181, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f37a812a-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16974, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16974, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238124044631, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584238634374313, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 648068} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584239533845286, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584239533845286, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16975, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584239533845286, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16976, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584239533845286, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16977, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584239533845286, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16978, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584239533845286, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16975, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584239533845286, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16976, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584239533845286, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16977, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584239533845286, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16978, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584239644331221, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 649249} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240013831477, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "ret_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "upath1": "/etc/cron.d", "flags": 1179652, "ret_fd1": 5, "mode": 59400, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240013831477, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 649249} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100182, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f4ab860f-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100182, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f4ab860f-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100182, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f4ab860f-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2419} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100182, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f4ab860f-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2472} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100182, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f4ab860f-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100182, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f4ab860f-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100182, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f4ab860f-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1177} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1230} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100182, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f4ab860f-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100182, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f4ab860f-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100182, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f4ab860f-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16979, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16979, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240124263657, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584240654589430, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 652060} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584241663878328, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 652426} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 652426} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100183, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f5dcbe00-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100183, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f5dcbe00-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100183, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f5dcbe00-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2807} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100183, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f5dcbe00-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2860} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100183, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f5dcbe00-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100183, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f5dcbe00-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100183, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f5dcbe00-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 362} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 415} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100183, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f5dcbe00-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100183, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f5dcbe00-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100183, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f5dcbe00-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16980, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16980, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242123835901, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242533909016, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242533909016, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16981, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242533909016, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16982, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242533909016, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16983, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242533909016, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16984, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242533909016, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16981, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242533909016, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16982, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242533909016, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16983, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242533909016, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16984, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584242674177471, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 655649} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584243683918291, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 656010} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 656010} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100184, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f70deadd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100184, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f70deadd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100184, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f70deadd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3219} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100184, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f70deadd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3272} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100184, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f70deadd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100184, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f70deadd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100184, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f70deadd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 357} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 410} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100184, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f70deadd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100184, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f70deadd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100184, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f70deadd-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16985, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16985, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244123864715, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584244694062516, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 658433} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584245534369468, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584245534369468, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16986, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584245534369468, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16987, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584245534369468, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16988, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584245534369468, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16989, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584245534369468, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16986, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584245534369468, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16987, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584245534369468, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16988, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584245534369468, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16989, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584245703944747, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 659614} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 659614} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100185, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f83f30f2-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100185, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f83f30f2-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100185, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f83f30f2-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2419} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100185, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f83f30f2-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2472} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100185, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f83f30f2-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100185, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f83f30f2-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100185, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f83f30f2-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1177} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1230} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100185, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f83f30f2-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100185, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f83f30f2-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100185, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f83f30f2-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16990, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16990, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246124723019, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584246714452213, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 662036} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584247724106486, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 662399} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 662399} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100186, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f97067df-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100186, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f97067df-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100186, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f97067df-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2418} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100186, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f97067df-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2471} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100186, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f97067df-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100186, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f97067df-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100186, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f97067df-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100186, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f97067df-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100186, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f97067df-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100186, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "f97067df-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16991, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16991, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248123829994, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248534469121, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248534469121, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16992, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248534469121, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16993, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248534469121, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16994, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248534469121, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16995, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248534469121, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16992, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248534469121, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16993, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248534469121, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16994, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248534469121, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16995, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584248733947226, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 665619} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584249743883976, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 665983} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 665983} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100187, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faa23f92-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100187, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faa23f92-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100187, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faa23f92-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3216} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3269} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100187, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faa23f92-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100187, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faa23f92-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100187, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faa23f92-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100187, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faa23f92-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100187, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faa23f92-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100187, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faa23f92-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 1242, "ppid": 1, "tid": 100187, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "faa23f92-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16996, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16996, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250124290863, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250133889925, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250133889925, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250133889925, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250133889925, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584250754130972, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 668417} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584251533828907, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584251533828907, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16997, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584251533828907, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16998, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584251533828907, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 16999, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584251533828907, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17000, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584251533828907, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16997, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584251533828907, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16998, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584251533828907, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 16999, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584251533828907, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17000, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584251764182090, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 669604} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 669604} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100188, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fbd3543b-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100188, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fbd3543b-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100188, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fbd3543b-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2430} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2483} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100188, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fbd3543b-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100188, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fbd3543b-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100188, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fbd3543b-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100188, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fbd3543b-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1183} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1236} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100188, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fbd3543b-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100188, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fbd3543b-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 1242, "ppid": 1, "tid": 100188, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fbd3543b-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17001, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17001, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252128142806, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252133832584, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252133832584, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252133832584, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252133832584, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584252774116018, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 672026} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584253783852317, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 672393} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 672393} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100189, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fd03f444-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100189, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fd03f444-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100189, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fd03f444-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2418} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2471} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100189, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fd03f444-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100189, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fd03f444-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100189, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fd03f444-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100189, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fd03f444-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 363} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 416} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100189, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fd03f444-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100189, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fd03f444-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100189, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fd03f444-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17002, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17002, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254124572306, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254533862315, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254533862315, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17003, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254533862315, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17004, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254533862315, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17005, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254533862315, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17006, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254533862315, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17003, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254533862315, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17004, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254533862315, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17005, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254533862315, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17006, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584254793926066, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 675609} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584255804132553, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 675972} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 675972} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100190, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fe34fa22-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100190, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fe34fa22-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100190, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fe34fa22-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3212} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3265} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100190, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fe34fa22-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100190, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fe34fa22-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100190, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fe34fa22-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100190, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fe34fa22-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100190, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fe34fa22-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100190, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fe34fa22-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100190, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "fe34fa22-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17007, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17007, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256123948563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584256814318189, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 678389} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584257534350792, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584257534350792, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17008, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584257534350792, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17009, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584257534350792, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17010, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584257534350792, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17011, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584257534350792, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17008, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584257534350792, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17009, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584257534350792, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17010, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584257534350792, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17011, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584257824352420, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 679571} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 679571} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100191, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ff661d21-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100191, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ff661d21-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100191, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ff661d21-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2413} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2466} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100191, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ff661d21-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100191, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ff661d21-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100191, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ff661d21-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100191, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ff661d21-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1178} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1231} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100191, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ff661d21-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100191, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ff661d21-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100191, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ff661d21-467d-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17012, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17012, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258124207271, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584258834304908, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 681993} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584259843893973, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 682354} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 682354} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100192, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0097e4d4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100192, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0097e4d4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100192, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0097e4d4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2418} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2471} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100192, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0097e4d4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100192, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0097e4d4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100192, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0097e4d4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100192, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0097e4d4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 357} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 410} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100192, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0097e4d4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100192, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0097e4d4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100192, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0097e4d4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17013, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17013, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260123888849, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260533887890, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260533887890, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17014, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260533887890, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17015, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260533887890, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17016, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260533887890, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17017, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260533887890, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17014, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260533887890, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17015, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260533887890, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17016, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260533887890, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17017, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584260853873240, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 685572} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584261864540108, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 685935} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 685935} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100193, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "01c9188d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100193, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "01c9188d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100193, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "01c9188d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3214} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3267} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100193, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "01c9188d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100193, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "01c9188d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100193, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "01c9188d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100193, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "01c9188d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100193, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "01c9188d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100193, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "01c9188d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 1242, "ppid": 1, "tid": 100193, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "01c9188d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17018, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17018, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262127754195, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262134398557, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262134398557, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262134398557, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262134398557, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584262874554244, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 688364} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584263533867724, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584263533867724, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17019, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584263533867724, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17020, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584263533867724, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17021, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584263533867724, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17022, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584263533867724, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17019, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584263533867724, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17020, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584263533867724, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17021, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584263533867724, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17022, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584263884275814, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 689544} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 689544} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100194, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "02fa2d2f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100194, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "02fa2d2f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100194, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "02fa2d2f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2425} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2478} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100194, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "02fa2d2f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100194, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "02fa2d2f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100194, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "02fa2d2f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100194, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "02fa2d2f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1176} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1229} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100194, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "02fa2d2f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100194, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "02fa2d2f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100194, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "02fa2d2f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17023, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17023, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264124147912, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264134179981, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264134179981, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584264894363233, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 691969} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584265904052933, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 692331} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 692331} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100195, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "042b84c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100195, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "042b84c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100195, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "042b84c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2421} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2474} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100195, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "042b84c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100195, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "042b84c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100195, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "042b84c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100195, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "042b84c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100195, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "042b84c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100195, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "042b84c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 1242, "ppid": 1, "tid": 100195, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "042b84c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17024, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17024, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266123901719, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266133842429, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266133842429, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266133842429, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266133842429, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266533970028, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266533970028, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17025, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266533970028, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17026, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266533970028, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17027, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266533970028, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17028, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266533970028, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17025, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266533970028, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17026, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266533970028, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17027, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266533970028, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17028, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584266966143998, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 695559} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584267974017195, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 695921} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 695921} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100196, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "055c4235-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100196, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "055c4235-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100196, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "055c4235-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3224} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3277} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100196, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "055c4235-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100196, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "055c4235-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100196, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "055c4235-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100196, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "055c4235-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100196, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "055c4235-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100196, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "055c4235-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 1242, "ppid": 1, "tid": 100196, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "055c4235-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17029, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17029, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268123881800, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268165841756, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268165841756, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268165841756, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584268165841756, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584269023879300, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 698347} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584269564508297, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584269564508297, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17030, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584269564508297, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17031, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584269564508297, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17032, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584269564508297, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17033, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584269564508297, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17030, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584269564508297, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17031, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584269564508297, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17032, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584269564508297, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17033, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270070336354, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 699531} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 699531} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100197, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "068d6d16-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100197, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "068d6d16-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100197, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "068d6d16-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2422} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2475} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100197, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "068d6d16-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100197, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "068d6d16-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100197, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "068d6d16-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100197, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "068d6d16-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1180} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1233} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100197, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "068d6d16-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100197, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "068d6d16-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 1242, "ppid": 1, "tid": 100197, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "068d6d16-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17034, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17034, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270123874805, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270164540728, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270164540728, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270164540728, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584270164540728, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584271118730958, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 701966} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 702328} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 702328} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100198, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "07be6fb7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100198, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "07be6fb7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100198, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "07be6fb7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2431} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2484} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100198, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "07be6fb7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100198, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "07be6fb7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100198, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "07be6fb7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100198, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "07be6fb7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100198, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "07be6fb7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100198, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "07be6fb7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100198, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "07be6fb7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17035, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17035, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272123887175, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272561514630, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272561514630, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17036, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272561514630, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17037, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272561514630, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17038, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272561514630, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17039, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272561514630, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17036, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272561514630, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17037, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272561514630, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17038, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584272561514630, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17039, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584273214604315, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 705537} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274123948691, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 705537} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274123948691, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274123948691, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274123948691, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274123948691, "pid": 1242, "ppid": 1, "tid": 100199, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08efaf9d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274123948691, "pid": 1242, "ppid": 1, "tid": 100199, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08efaf9d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274123948691, "pid": 1242, "ppid": 1, "tid": 100199, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08efaf9d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3205} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274123948691, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3258} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274123948691, "pid": 1242, "ppid": 1, "tid": 100199, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08efaf9d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274123948691, "pid": 1242, "ppid": 1, "tid": 100199, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08efaf9d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274123948691, "pid": 1242, "ppid": 1, "tid": 100199, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "08efaf9d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17040, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274123948691, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17040, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274123948691, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274162636101, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274162636101, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584274261818272, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 707369} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584275265379982, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 707734} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584275560981117, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584275560981117, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17041, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584275560981117, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17042, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584275560981117, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17043, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584275560981117, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17044, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584275560981117, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17041, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584275560981117, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17042, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584275560981117, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17043, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584275560981117, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17044, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 707734} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100200, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a211224-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100200, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a211224-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100200, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a211224-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1828} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1881} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100200, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a211224-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100200, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a211224-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100200, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a211224-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100200, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a211224-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100200, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a211224-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100200, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a211224-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 1242, "ppid": 1, "tid": 100200, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0a211224-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17045, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17045, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276124158270, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276149563669, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276149563669, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276149563669, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276149563669, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584276314020683, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 711054} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584277324255941, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 711417} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 711417} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100201, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b5226f3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100201, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b5226f3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100201, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b5226f3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3316} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3369} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100201, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b5226f3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100201, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b5226f3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100201, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b5226f3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100201, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b5226f3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100201, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b5226f3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100201, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b5226f3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 1242, "ppid": 1, "tid": 100201, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0b5226f3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17046, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17046, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278123932225, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278136972446, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278136972446, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278136972446, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278136972446, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278343931312, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 713856} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278554763794, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278554763794, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17047, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278554763794, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17048, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278554763794, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17049, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278554763794, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17050, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278554763794, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17047, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278554763794, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17048, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278554763794, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17049, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584278554763794, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17050, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584279354003829, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 715038} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280124885136, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 715038} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280124885136, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280124885136, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280124885136, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280124885136, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280124885136, "pid": 1242, "ppid": 1, "tid": 100202, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0c84136e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280124885136, "pid": 1242, "ppid": 1, "tid": 100202, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0c84136e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280124885136, "pid": 1242, "ppid": 1, "tid": 100202, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0c84136e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2435} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280124885136, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2488} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280124885136, "pid": 1242, "ppid": 1, "tid": 100202, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0c84136e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280124885136, "pid": 1242, "ppid": 1, "tid": 100202, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0c84136e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280124885136, "pid": 1242, "ppid": 1, "tid": 100202, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0c84136e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280124885136, "pid": 1242, "ppid": 1, "tid": 100202, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0c84136e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1178} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280134045337, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1231} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280134045337, "pid": 1242, "ppid": 1, "tid": 100202, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0c84136e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280134045337, "pid": 1242, "ppid": 1, "tid": 100202, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0c84136e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280134045337, "pid": 1242, "ppid": 1, "tid": 100202, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0c84136e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17051, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280134045337, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17051, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280134045337, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280134045337, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280134045337, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280134045337, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280134045337, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584280374211682, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 717470} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584281384410608, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 717833} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584281553835869, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584281553835869, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17052, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584281553835869, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17053, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584281553835869, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17054, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584281553835869, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17055, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584281553835869, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17052, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584281553835869, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17053, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584281553835869, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17054, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584281553835869, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17055, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 717833} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100203, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0db47258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100203, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0db47258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100203, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0db47258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2428} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2481} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100203, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0db47258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100203, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0db47258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100203, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0db47258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100203, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0db47258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100203, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0db47258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100203, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0db47258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100203, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0db47258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17056, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17056, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282123978006, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584282404109541, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 721137} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584283414598458, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 721499} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 721499} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100204, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0ee5a6db-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100204, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0ee5a6db-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100204, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0ee5a6db-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3300} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3353} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100204, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0ee5a6db-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100204, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0ee5a6db-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100204, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0ee5a6db-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100204, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0ee5a6db-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100204, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0ee5a6db-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100204, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0ee5a6db-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 1242, "ppid": 1, "tid": 100204, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "0ee5a6db-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17057, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17057, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284123884601, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284134103346, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284134103346, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284134103346, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284134103346, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284433873171, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 723931} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284553900022, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284553900022, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17058, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284553900022, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17059, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284553900022, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17060, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284553900022, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17061, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284553900022, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17058, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284553900022, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17059, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284553900022, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17060, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584284553900022, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17061, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584285444109498, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 725114} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 725114} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100205, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1016dcc5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100205, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1016dcc5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100205, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1016dcc5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2428} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2481} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100205, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1016dcc5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100205, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1016dcc5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100205, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1016dcc5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100205, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1016dcc5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1179} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1232} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100205, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1016dcc5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100205, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1016dcc5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 1242, "ppid": 1, "tid": 100205, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1016dcc5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17062, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17062, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286124380692, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286133982653, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286133982653, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286133982653, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286133982653, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286254429753, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "102a5b93-467e-11e9-aed1-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286254429753, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "102a5b93-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "138.68.201.49", "port": 123, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286254429753, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "102a5b93-467e-11e9-aed1-080027fc76ba", "fd": 4, "retval": 0} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286254429753, "tid": 100092, "uid": 123, "so_uuid": "b5434a9c-467a-11e9-ae89-080027fc76ba", "lport": 123, "fport": 123, "laddr": "10.0.2.15", "faddr": "138.68.201.49"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286254429753, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "b5434a9c-467a-11e9-ae89-080027fc76ba", "ret_msgid": 17063, "fd": 22, "address": "138.68.201.49", "port": 123, "retval": 48} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286254429753, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "b541acd0-467a-11e9-ae89-080027fc76ba", "ret_msgid": 17064, "fd": 3, "retval": 101} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286254429753, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b2110-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17064, "upath1": "/", "fd": 8, "address": "", "retval": 101} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584286464314603, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 728312} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584287473978910, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 728676} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584287554339483, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584287554339483, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17065, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584287554339483, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17066, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584287554339483, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17067, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584287554339483, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17068, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584287554339483, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17065, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584287554339483, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17066, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584287554339483, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17067, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584287554339483, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17068, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 728676} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100206, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1147ca11-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100206, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1147ca11-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100206, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1147ca11-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3194} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3247} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100206, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1147ca11-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100206, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1147ca11-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100206, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1147ca11-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100206, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1147ca11-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100206, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1147ca11-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100206, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1147ca11-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100206, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1147ca11-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17069, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17069, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288123841431, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584288494097284, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 731990} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584289504468213, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 732353} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 732353} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100207, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "12793e62-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100207, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "12793e62-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100207, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "12793e62-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3310} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3363} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100207, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "12793e62-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100207, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "12793e62-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100207, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "12793e62-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100207, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "12793e62-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100207, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "12793e62-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100207, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "12793e62-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 1242, "ppid": 1, "tid": 100207, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "12793e62-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17070, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17070, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290123963243, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290134155122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290134155122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290134155122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290134155122, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290523884679, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 734790} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290553853588, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290553853588, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17071, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290553853588, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17072, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290553853588, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17073, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290553853588, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17074, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290553853588, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17071, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290553853588, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17072, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290553853588, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17073, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584290553853588, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17074, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584291523912098, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "edeb0cca-467d-11e9-aed1-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584291523912098, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "edeb0cca-467d-11e9-aed1-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584291523912098, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed4edb36-467d-11e9-aed0-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584291523912098, "pid": 1501, "ppid": 1491, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "nc", "subjprocuuid": "ed4e1828-467d-11e9-aed0-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_kill:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584291523912098, "pid": 1491, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "ecab3f79-467d-11e9-aecf-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ecab3f79-467d-11e9-aecf-080027fc76ba", "arg_pid": 1491, "arg_euid": 1003, "arg_ruid": 1003, "arg_egid": 1003, "arg_rgid": 1003, "signum": 2, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584291523912098, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584291523912098, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584291523912098, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 50} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584291534898678, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 736822} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584291713988210, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584291713988210, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584291923871502, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584291923871502, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292093960690, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292093960690, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 736822} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100208, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "13aa569f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100208, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "13aa569f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100208, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "13aa569f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2433} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2486} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100208, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "13aa569f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100208, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "13aa569f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100208, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "13aa569f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100208, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "13aa569f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2028} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2081} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100208, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "13aa569f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100208, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "13aa569f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 1242, "ppid": 1, "tid": 100208, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "13aa569f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17075, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17075, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292123907396, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292133941659, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292133941659, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292133941659, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292133941659, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292144135537, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292144135537, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292184100274, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292184100274, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292284020026, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292284020026, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292473998304, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292473998304, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584292553886038, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 740401} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293483909813, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293483909813, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293483909813, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293483909813, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293483909813, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293483909813, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293483909813, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293483909813, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293553874656, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293553874656, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17076, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293553874656, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17077, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293553874656, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17078, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293553874656, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17079, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293553874656, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17076, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293553874656, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17077, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293553874656, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17078, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293553874656, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17079, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584293564056736, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 742168} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 742168} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100209, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "14db795a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100209, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "14db795a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100209, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "14db795a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3575} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3628} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100209, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "14db795a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100209, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "14db795a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100209, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "14db795a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100209, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "14db795a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1763} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1816} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100209, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "14db795a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100209, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "14db795a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100209, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "14db795a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17080, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17080, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294124109425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294133977351, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294133977351, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294454380625, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294454380625, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294463838783, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294463838783, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294463838783, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294463838783, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294463838783, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294463838783, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584294583997533, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 745176} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584295473886203, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584295473886203, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584295473886203, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584295473886203, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584295473886203, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584295473886203, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584295483956356, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584295483956356, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584295593991259, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 746132} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584295714062348, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584295714062348, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584295883896525, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584295883896525, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296063928133, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296063928133, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 746132} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100210, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "160cc951-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100210, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "160cc951-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100210, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "160cc951-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3004} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3057} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100210, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "160cc951-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100210, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "160cc951-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100210, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "160cc951-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100210, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "160cc951-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 952} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1005} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100210, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "160cc951-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100210, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "160cc951-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 1242, "ppid": 1, "tid": 100210, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "160cc951-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17081, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17081, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296124492515, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296133970829, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296133970829, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296133970829, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296133970829, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296144373591, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296144373591, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296414265876, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296414265876, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296494302835, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296494302835, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296554162167, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296554162167, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17082, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296554162167, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17083, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296554162167, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17084, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296554162167, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17085, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296554162167, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17082, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296554162167, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17083, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296554162167, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17084, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296554162167, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17085, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296623880102, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 750376} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296623880102, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296623880102, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296743845299, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296743845299, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296893867379, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584296893867379, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584297634272779, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 751219} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584297873898659, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584297873898659, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584297873898659, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584297873898659, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584297884005270, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584297884005270, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584297884005270, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584297884005270, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584297884005270, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584297884005270, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 751219} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100211, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "173dcf4c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100211, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "173dcf4c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100211, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "173dcf4c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4240} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4293} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100211, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "173dcf4c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100211, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "173dcf4c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100211, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "173dcf4c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100211, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "173dcf4c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 839} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 892} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100211, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "173dcf4c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100211, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "173dcf4c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 1242, "ppid": 1, "tid": 100211, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "173dcf4c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17086, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17086, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298124326320, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298134767783, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298134767783, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298134767783, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298134767783, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298643846103, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 754438} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298794175888, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298794175888, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298794175888, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "17a487f0-467e-11e9-aed1-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1506, "retval": 1506} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "789286b6-6159-ca52-9961-08e732cabe3c", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/sbin/ping", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "ping -c 20 www.google.com"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "ret_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "upath1": "/lib/libm.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2420736, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2420736, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2490368, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2490368, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2613248, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2613248, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0fb6a3a-f866-5c52-a6f8-c743325c1987", "ret_objuuid1": "e0fb6a3a-f866-5c52-a6f8-c743325c1987", "upath1": "/lib/libcasper.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0fb6a3a-f866-5c52-a6f8-c743325c1987", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0fb6a3a-f866-5c52-a6f8-c743325c1987", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0fb6a3a-f866-5c52-a6f8-c743325c1987", "fd": 3, "retval": 2625536, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0fb6a3a-f866-5c52-a6f8-c743325c1987", "fd": 3, "retval": 2625536, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0fb6a3a-f866-5c52-a6f8-c743325c1987", "fd": 3, "retval": 2637824, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0fb6a3a-f866-5c52-a6f8-c743325c1987", "fd": 3, "retval": 2637824, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0fb6a3a-f866-5c52-a6f8-c743325c1987", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0fb6a3a-f866-5c52-a6f8-c743325c1987", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e0fb6a3a-f866-5c52-a6f8-c743325c1987", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d06aed7d-ad9b-b059-9bad-9a7fd9b06378", "ret_objuuid1": "d06aed7d-ad9b-b059-9bad-9a7fd9b06378", "upath1": "/lib/casper/libcap_dns.so.2", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d06aed7d-ad9b-b059-9bad-9a7fd9b06378", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d06aed7d-ad9b-b059-9bad-9a7fd9b06378", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d06aed7d-ad9b-b059-9bad-9a7fd9b06378", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d06aed7d-ad9b-b059-9bad-9a7fd9b06378", "fd": 3, "retval": 2658304, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d06aed7d-ad9b-b059-9bad-9a7fd9b06378", "fd": 3, "retval": 2666496, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d06aed7d-ad9b-b059-9bad-9a7fd9b06378", "fd": 3, "retval": 2666496, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d06aed7d-ad9b-b059-9bad-9a7fd9b06378", "fd": 3, "retval": 2678784, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d06aed7d-ad9b-b059-9bad-9a7fd9b06378", "fd": 3, "retval": 2678784, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d06aed7d-ad9b-b059-9bad-9a7fd9b06378", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "ret_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "upath1": "/lib/libipsec.so.4", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2691072, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2707456, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2707456, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2723840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 2723840, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0a766c59-f9d6-4e5f-96f9-b3f07f4e481a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2736128, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2736128, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4583424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4583424, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9b790869-26ca-5d5a-8a26-7f02da5d7fce", "ret_objuuid1": "9b790869-26ca-5d5a-8a26-7f02da5d7fce", "upath1": "/lib/libnv.so.0", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9b790869-26ca-5d5a-8a26-7f02da5d7fce", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9b790869-26ca-5d5a-8a26-7f02da5d7fce", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9b790869-26ca-5d5a-8a26-7f02da5d7fce", "fd": 3, "retval": 6901760, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9b790869-26ca-5d5a-8a26-7f02da5d7fce", "fd": 3, "retval": 6901760, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9b790869-26ca-5d5a-8a26-7f02da5d7fce", "fd": 3, "retval": 6942720, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9b790869-26ca-5d5a-8a26-7f02da5d7fce", "fd": 3, "retval": 6942720, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9b790869-26ca-5d5a-8a26-7f02da5d7fce", "fd": 3, "retval": 6995968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9b790869-26ca-5d5a-8a26-7f02da5d7fce", "fd": 3, "retval": 6995968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9b790869-26ca-5d5a-8a26-7f02da5d7fce", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_setuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 0, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_uid": 1003, "retval": 0} +{"event": "audit:event:aue_socketpair:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "17a6494a-467e-11e9-aed1-080027fc76ba", "ret_objuuid2": "17a64956-467e-11e9-aed1-080027fc76ba", "ret_fd1": 5, "ret_fd2": 6, "retval": 0} +{"event": "audit:event:aue_pdfork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "17a64e20-467e-11e9-aed1-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1507, "ret_fd1": 7, "retval": 1507} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 6, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a6494a-467e-11e9-aed1-080027fc76ba", "fd": 5, "retval": 85} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_socketpair:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "17a65cf3-467e-11e9-aed1-080027fc76ba", "ret_objuuid2": "17a65cfc-467e-11e9-aed1-080027fc76ba", "ret_fd1": 5, "ret_fd2": 7, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "17a66018-467e-11e9-aed1-080027fc76ba", "ret_objuuid2": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_pid": 1508, "retval": 1508} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 6, "fcntl_cmd": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1508, "ppid": 1507, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a66018-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17a64956-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 19} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17a64956-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 66} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17a65cf3-467e-11e9-aed1-080027fc76ba", "fd": 5, "retval": 54} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1508, "ppid": 1507, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a66018-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17a65cfc-467e-11e9-aed1-080027fc76ba", "fd": 7, "retval": 19} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1508, "ppid": 1507, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a66018-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17a65cfc-467e-11e9-aed1-080027fc76ba", "fd": 7, "retval": 35} +{"event": "audit:event:aue_socketpair:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1508, "ppid": 1507, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a66018-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "ret_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "ret_objuuid2": "17a69b3d-467e-11e9-aed1-080027fc76ba", "ret_fd1": 5, "ret_fd2": 8, "retval": 0} +{"event": "audit:event:aue_pdfork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1508, "ppid": 1507, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a66018-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "ret_objuuid1": "17a6a023-467e-11e9-aed1-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1509, "ret_fd1": 9, "retval": 1509} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1508, "ppid": 1507, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a66018-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1508, "ppid": 1507, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a66018-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 1, "retval": 0, "fcntl_cmd": 1} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1508, "ppid": 1507, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a66018-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 1, "retval": 0, "fcntl_cmd": 1} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1508, "ppid": 1507, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a66018-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17a65cfc-467e-11e9-aed1-080027fc76ba", "fd": 7, "retval": 87} +{"event": "audit:event:aue_sendmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298803914949, "pid": 1508, "ppid": 1507, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a66018-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17a65cfc-467e-11e9-aed1-080027fc76ba", "fd": 7, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1508, "ppid": 1507, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a66018-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1508, "ppid": 1507, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a66018-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 9, "retval": 0} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17a65cf3-467e-11e9-aed1-080027fc76ba", "fd": 5, "retval": 19} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17a65cf3-467e-11e9-aed1-080027fc76ba", "fd": 5, "retval": 68} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17a65cf3-467e-11e9-aed1-080027fc76ba", "fd": 5, "retval": 1} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 1, "retval": 0, "fcntl_cmd": 1} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "fd": 7, "retval": 91} +{"event": "audit:event:aue_sendmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "fd": 7, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 1, "retval": 0, "fcntl_cmd": 1} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17a64956-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 123} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a6494a-467e-11e9-aed1-080027fc76ba", "fd": 5, "retval": 19} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a6494a-467e-11e9-aed1-080027fc76ba", "fd": 5, "retval": 104} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_sendmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1507, "ppid": 1506, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a64e20-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17a64956-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 1} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a6494a-467e-11e9-aed1-080027fc76ba", "fd": 5, "retval": 1} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 6, "fcntl_cmd": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a64e20-467e-11e9-aed1-080027fc76ba", "arg_pid": 1507, "arg_euid": 1003, "arg_ruid": 1003, "arg_egid": 1003, "arg_rgid": 1003, "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a6494a-467e-11e9-aed1-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 52} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 19} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 72} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 1} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 2, "fd": -100, "ret_fd1": 7, "mode": 0, "retval": 7} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 7, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 7, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 7, "ret_fd1": 2, "retval": 2} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_closefrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 9, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 6, "fcntl_cmd": 3} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 19} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 33} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1508, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 78} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 19} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 59} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 187} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1508, "ppid": 1, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a66018-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17a65cfc-467e-11e9-aed1-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1508, "ppid": 1, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a66018-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 19} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 168} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 52} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 19} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 33} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 52} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 19} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 33} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 187} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 19} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 168} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 222} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 19} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 203} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 52} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 19} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 33} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b31-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 129} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 19} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 110} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "ret_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "upath1": "/etc/resolv.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "fd": 3, "retval": 102} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "ret_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "upath1": "/etc/hosts", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 3, "retval": 1031} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "17a77e7e-467e-11e9-aed1-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a77e7e-467e-11e9-aed1-080027fc76ba", "fd": 3, "address": "149.32.200.97", "port": 53, "retval": 0} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "tid": 100120, "uid": 1003, "so_uuid": "17a77e7e-467e-11e9-aed1-080027fc76ba", "lport": 21853, "fport": 53, "laddr": "10.0.2.15", "faddr": "149.32.200.97"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298813894517, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a77e7e-467e-11e9-aed1-080027fc76ba", "ret_msgid": 17087, "fd": 3, "retval": 32} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584298824074938, "tid": 100013, "uid": 0, "so_uuid": "17a77e7e-467e-11e9-aed1-080027fc76ba", "lport": 21853, "fport": 53, "laddr": "10.0.2.15", "faddr": "149.32.200.97"} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584299694159893, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 770988} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584299844288362, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584299894293572, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584299894293572, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 60} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "ret_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "upath1": "/etc/cron.d", "flags": 1179652, "ret_fd1": 5, "mode": 59400, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "fd": 5, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "ret_objuuid1": "185e0fe8-467e-11e9-aed1-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1510, "retval": 1510} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1510, "ppid": 1141, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e0fe8-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "5ca33fc6-a233-c258-b3a2-9494d8c23030", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1510, "ppid": 1141, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e0fe8-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "322b6b83-e47e-3457-bee4-d897e73425b5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1510, "ppid": 1141, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e0fe8-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "185e28df-467e-11e9-aed1-080027fc76ba", "ret_objuuid2": "185e28e0-467e-11e9-aed1-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1510, "ppid": 1141, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e0fe8-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "185e2d47-467e-11e9-aed1-080027fc76ba", "ret_objuuid2": "185e2d48-467e-11e9-aed1-080027fc76ba", "ret_fd1": 5, "ret_fd2": 6, "retval": 0} +{"event": "audit:event:aue_vfork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1510, "ppid": 1141, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e0fe8-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "185e31a3-467e-11e9-aed1-080027fc76ba", "ret_objuuid2": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_pid": 1511, "retval": 1511} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "ret_objuuid1": "185e3c78-467e-11e9-aed1-080027fc76ba", "ret_fd1": 7, "retval": 7} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "185e3c78-467e-11e9-aed1-080027fc76ba", "upath1": "/var/run/logpriv", "fd": 7, "address": "/var/run/logpriv", "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "185e3c78-467e-11e9-aed1-080027fc76ba", "ret_msgid": 17092, "fd": 7, "retval": 105} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "185e3c78-467e-11e9-aed1-080027fc76ba", "fd": 7, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 0, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 1, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 6, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 2, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 1, "ret_fd1": 2, "retval": 2} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "ret_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "upath1": "/etc/spwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 3, "retval": 1024} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 3, "retval": 1024} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 3, "retval": 1024} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 3, "retval": 1024} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 3, "retval": 0} +{"event": "audit:event:aue_setgid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_gid": 0, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "ret_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "upath1": "/etc/group", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 3, "retval": 504} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 3, "retval": 504} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "5a32b0cb-0331-045d-b103-151f6d0491a8", "fd": 3, "retval": 0} +{"event": "audit:event:aue_setlogin:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "login": "root", "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_setuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_uid": 0, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_egid": 0, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_euid": 0, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "ret_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "upath1": "/etc/login.conf", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 3, "retval": 1024} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 3, "retval": 1024} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 3, "retval": 1024} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 3, "retval": 1024} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 3, "retval": 1024} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 3, "retval": 1024} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 3, "retval": 585} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4d541c5a-9f32-1253-b29f-e21bd3128288", "fd": 3, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_euid": 0, "retval": 0} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_egid": 0, "retval": 0} +{"event": "audit:event:aue_umask:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 18} +{"event": "audit:event:aue_chdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4ed663f7-1a63-7453-a31a-44560374ad6c", "upath1": "/root", "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "f3f7eadf-5a79-ba55-b95a-881315bae424", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/bin/sh -c /usr/libexec/atrun"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "ret_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "upath1": "/lib/libedit.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300014421483, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2818048, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2818048, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3334144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3334144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4665344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4665344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "ret_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "upath1": "/lib/libncursesw.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 6983680, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 6983680, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7356416, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7356416, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "sh", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "5f1bc80d-8924-0358-a489-1d3dd8031ebe", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/libexec/atrun", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/libexec/atrun"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "ret_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "upath1": "/usr/lib/libpam.so.6", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 3, "retval": 2424832, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 3, "retval": 2453504, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 3, "retval": 2453504, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "20aa562e-78b1-685e-b178-e5904e689ef5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "ret_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "upath1": "/lib/libutil.so.9", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2465792, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2465792, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2498560, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 2543616, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "358b737b-af6c-9c5a-acaf-aa7d5a9cb56a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2560000, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2560000, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3076096, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3076096, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4407296, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4407296, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300024217175, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_setegid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_egid": 1, "retval": 0} +{"event": "audit:event:aue_seteuid:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 0, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_euid": 1, "retval": 0} +{"event": "audit:event:aue_chdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 1, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "8be76a6a-0af1-345d-b10a-39530d34b9b9", "upath1": "/var/at/jobs/", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 1, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "8be76a6a-0af1-345d-b10a-39530d34b9b9", "ret_objuuid1": "8be76a6a-0af1-345d-b10a-39530d34b9b9", "upath1": "/var/at/jobs/.", "flags": 1179652, "ret_fd1": 3, "mode": 60540, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 1, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "8be76a6a-0af1-345d-b10a-39530d34b9b9", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 1511, "ppid": 1510, "tid": 100150, "uid": 1, "cpu_id": 0, "exec": "atrun", "subjprocuuid": "185e31a3-467e-11e9-aed1-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17092, "upath1": "/", "fd": 9, "address": "", "retval": 105} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "dc33ebb8-d658-595f-98d6-b7077f5992cc", "fd": 18, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 1510, "ppid": 1141, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e0fe8-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "185e28df-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 1510, "ppid": 1141, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e0fe8-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "185e2d48-467e-11e9-aed1-080027fc76ba", "fd": 6, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 1510, "ppid": 1141, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e0fe8-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "185e28e0-467e-11e9-aed1-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 1510, "ppid": 1141, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e0fe8-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 1510, "ppid": 1141, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e0fe8-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "185e2d47-467e-11e9-aed1-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 1510, "ppid": 1141, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e0fe8-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "185e2d47-467e-11e9-aed1-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300033885404, "pid": 1510, "ppid": 1141, "tid": 100139, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "185e0fe8-467e-11e9-aed1-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 770988} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100212, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "186f628f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100212, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "186f628f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100212, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "186f628f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3215} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3268} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100212, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "186f628f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100212, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "186f628f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100212, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "186f628f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100212, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "186f628f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4518} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4571} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100212, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "186f628f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100212, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "186f628f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100212, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "186f628f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300124112844, "pid": 1242, "ppid": 1, "tid": 100212, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "186f628f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4035} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300794008675, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 787930} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300854442507, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300903980356, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584300903980356, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 60} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584301804090948, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 788703} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584301864420919, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584301914796918, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584301914796918, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 60} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 788703} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4435} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4488} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3999} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4052} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4270} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4323} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4222} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302124341365, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302133876652, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302133876652, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302133876652, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 769} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302133876652, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302133876652, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302133876652, "pid": 1242, "ppid": 1, "tid": 100213, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "19a0a7c3-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17094, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302133876652, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17094, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302133876652, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302133876652, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302133876652, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302133876652, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4275} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302193998436, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302193998436, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302193998436, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 822} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302193998436, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302833872609, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 793132} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302873936468, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302923907095, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584302923907095, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 60} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584303844198859, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 793909} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584303883935567, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584303933997675, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584303933997675, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 60} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 793909} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100214, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1ad16540-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100214, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1ad16540-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100214, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1ad16540-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4425} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4478} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100214, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1ad16540-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100214, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1ad16540-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100214, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1ad16540-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100214, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1ad16540-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 773} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 826} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100214, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1ad16540-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100214, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1ad16540-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 1242, "ppid": 1, "tid": 100214, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1ad16540-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17099, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17099, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304124406074, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304134477303, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304134477303, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304134477303, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304134477303, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304864485100, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 796818} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304894058153, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304944409214, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584304944409214, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 60} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584305553938232, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584305553938232, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17100, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584305553938232, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17101, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584305553938232, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17102, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584305553938232, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17103, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584305553938232, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17100, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584305553938232, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17101, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584305553938232, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17102, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584305553938232, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17103, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584305874025976, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 798400} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584305904012954, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584305964118315, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584305964118315, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 60} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 798400} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100215, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1c028d33-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100215, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1c028d33-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100215, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1c028d33-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2905} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2958} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100215, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1c028d33-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100215, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1c028d33-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100215, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1c028d33-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100215, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1c028d33-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1578} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1631} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100215, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1c028d33-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100215, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1c028d33-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 1242, "ppid": 1, "tid": 100215, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1c028d33-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17104, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17104, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306124182607, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306134640071, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306134640071, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306134640071, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306134640071, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306893910587, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 801320} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306914279290, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306963833526, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584306963833526, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 60} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584307904622272, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 802097} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584307923991598, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584307974812964, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584307974812964, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 60} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 802097} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100216, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1d33bd35-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100216, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1d33bd35-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100216, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1d33bd35-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2916} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2969} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100216, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1d33bd35-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100216, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1d33bd35-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100216, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1d33bd35-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100216, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1d33bd35-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 773} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 826} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100216, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1d33bd35-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100216, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1d33bd35-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100216, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1d33bd35-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17105, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17105, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308123898758, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308134578867, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308134578867, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308554088644, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308554088644, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17106, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308554088644, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17107, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308554088644, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17108, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308554088644, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17109, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308554088644, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17106, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308554088644, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17107, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308554088644, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17108, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308554088644, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17109, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308924164188, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 805796} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308934110559, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308983874572, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584308983874572, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 61} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584309934422381, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 806573} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584309943871375, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584309993890072, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584309993890072, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 61} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 806573} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100217, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1e64d611-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100217, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1e64d611-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100217, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1e64d611-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3695} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3748} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100217, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1e64d611-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100217, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1e64d611-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100217, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1e64d611-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100217, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1e64d611-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 773} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 826} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100217, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1e64d611-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100217, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1e64d611-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 1242, "ppid": 1, "tid": 100217, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1e64d611-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17110, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17110, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310124131673, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310133875974, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310133875974, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310133875974, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310133875974, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310954182055, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 809492} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584310954182055, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584311033961744, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584311033961744, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 61} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584311553879724, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584311553879724, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17111, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584311553879724, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17112, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584311553879724, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17113, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584311553879724, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17114, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584311553879724, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17111, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584311553879724, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17112, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584311553879724, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17113, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584311553879724, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17114, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584311963870183, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 811069} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584311974059893, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312024311349, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312024311349, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 61} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 811069} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100218, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1f96271e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100218, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1f96271e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100218, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1f96271e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2915} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2968} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100218, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1f96271e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100218, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1f96271e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100218, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1f96271e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100218, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1f96271e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1573} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1626} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100218, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1f96271e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100218, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1f96271e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 1242, "ppid": 1, "tid": 100218, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "1f96271e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17115, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17115, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312124016654, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312134286677, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312134286677, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312134286677, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312134286677, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312984134835, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 813982} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584312984134835, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584313043929094, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584313043929094, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 61} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584313994464318, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 814753} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314004295967, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314054164511, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314054164511, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 61} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 814753} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100219, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "20c75b47-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100219, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "20c75b47-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100219, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "20c75b47-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2909} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2962} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100219, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "20c75b47-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100219, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "20c75b47-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100219, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "20c75b47-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100219, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "20c75b47-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 767} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 820} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100219, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "20c75b47-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100219, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "20c75b47-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 1242, "ppid": 1, "tid": 100219, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "20c75b47-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17116, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17116, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314123963142, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314134273477, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314134273477, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314134273477, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314134273477, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314553898162, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314553898162, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17117, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314553898162, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17118, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314553898162, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17119, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314553898162, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17120, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314553898162, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17117, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314553898162, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17118, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314553898162, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17119, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584314553898162, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17120, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584315013906146, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 818464} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584315013906146, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584315074208793, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584315074208793, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 61} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316024280872, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 819230} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316033893872, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316084347592, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316084347592, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 61} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 819230} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100220, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "21f884cf-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100220, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "21f884cf-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100220, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "21f884cf-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3707} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3760} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100220, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "21f884cf-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100220, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "21f884cf-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100220, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "21f884cf-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100220, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "21f884cf-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 762} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 815} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100220, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "21f884cf-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100220, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "21f884cf-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 1242, "ppid": 1, "tid": 100220, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "21f884cf-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17121, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17121, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316124183529, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316133944445, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316133944445, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316133944445, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584316133944445, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584317034437969, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 822156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584317043861904, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584317093912383, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584317093912383, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 61} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584317553838314, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584317553838314, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17122, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584317553838314, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17123, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584317553838314, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17124, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584317553838314, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17125, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584317553838314, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17122, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584317553838314, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17123, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584317553838314, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17124, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584317553838314, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17125, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318044870502, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 823739} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318053883643, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a643e1-467e-11e9-aed1-080027fc76ba", "fd": 3, "retval": 64} +{"event": "audit:event:aue_recvmsg:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318103911768, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a645c0-467e-11e9-aed1-080027fc76ba", "ret_miouuid": "17a645c0-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "172.217.9.4", "port": 0, "retval": 84} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318103911768, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 61} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318103911768, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318103911768, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 39} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318103911768, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 62} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318103911768, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 62} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318103911768, "pid": 1506, "ppid": 1282, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a487f0-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318103911768, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318103911768, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17a69b3d-467e-11e9-aed1-080027fc76ba", "fd": 8, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318103911768, "pid": 1509, "ppid": 1, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "ping", "subjprocuuid": "17a6a023-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318103911768, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318103911768, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 50} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 823739} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100221, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "232998e9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100221, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "232998e9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100221, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "232998e9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2922} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2975} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100221, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "232998e9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100221, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "232998e9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100221, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "232998e9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100221, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "232998e9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1579} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1632} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100221, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "232998e9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100221, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "232998e9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 1242, "ppid": 1, "tid": 100221, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "232998e9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17126, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17126, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318123919984, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318133868284, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318133868284, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318133868284, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584318133868284, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584319074052964, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 827409} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320084299466, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 827772} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 827772} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100222, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "245ad7eb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100222, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "245ad7eb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100222, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "245ad7eb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3666} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3719} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100222, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "245ad7eb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100222, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "245ad7eb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100222, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "245ad7eb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100222, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "245ad7eb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100222, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "245ad7eb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100222, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "245ad7eb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 1242, "ppid": 1, "tid": 100222, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "245ad7eb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17127, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17127, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320124659723, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320134129462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320134129462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320134129462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320134129462, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320554892025, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320554892025, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17128, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320554892025, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17129, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320554892025, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17130, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320554892025, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17131, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320554892025, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17128, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320554892025, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17129, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320554892025, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17130, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584320554892025, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17131, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584321103989747, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 831003} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322114391625, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 831369} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 831369} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100223, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "258c0dca-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100223, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "258c0dca-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100223, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "258c0dca-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3227} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3280} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100223, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "258c0dca-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100223, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "258c0dca-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100223, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "258c0dca-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100223, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "258c0dca-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 362} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 415} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100223, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "258c0dca-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100223, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "258c0dca-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 1242, "ppid": 1, "tid": 100223, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "258c0dca-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17132, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17132, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322124466850, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322134182087, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322134182087, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322134182087, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584322134182087, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584323133997085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 833804} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584323553875697, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584323553875697, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17133, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584323553875697, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17134, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584323553875697, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17135, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584323553875697, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17136, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584323553875697, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17133, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584323553875697, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17134, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584323553875697, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17135, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584323553875697, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17136, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324124902872, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 833804} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324124902872, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324124902872, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324124902872, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324124902872, "pid": 1242, "ppid": 1, "tid": 100224, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "26bd24ab-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324124902872, "pid": 1242, "ppid": 1, "tid": 100224, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "26bd24ab-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324124902872, "pid": 1242, "ppid": 1, "tid": 100224, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "26bd24ab-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2431} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324124902872, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2484} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324124902872, "pid": 1242, "ppid": 1, "tid": 100224, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "26bd24ab-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324124902872, "pid": 1242, "ppid": 1, "tid": 100224, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "26bd24ab-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324124902872, "pid": 1242, "ppid": 1, "tid": 100224, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "26bd24ab-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17137, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324124902872, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17137, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324124902872, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324124902872, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324124902872, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584324153868449, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 836511} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584325164080546, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 836873} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 836873} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100225, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "27ee4aa8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100225, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "27ee4aa8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100225, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "27ee4aa8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2703} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2756} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100225, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "27ee4aa8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100225, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "27ee4aa8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100225, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "27ee4aa8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100225, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "27ee4aa8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100225, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "27ee4aa8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100225, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "27ee4aa8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100225, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "27ee4aa8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17138, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17138, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326124196963, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326134645765, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326134645765, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326183959785, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 839311} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326554340004, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326554340004, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17139, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326554340004, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17140, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326554340004, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17141, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326554340004, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17142, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326554340004, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17139, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326554340004, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17140, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326554340004, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17141, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584326554340004, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17142, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584327194793165, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 840506} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 840506} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100226, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "291f7378-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100226, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "291f7378-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100226, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "291f7378-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2434} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2487} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100226, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "291f7378-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100226, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "291f7378-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100226, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "291f7378-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100226, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "291f7378-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1191} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1244} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100226, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "291f7378-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100226, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "291f7378-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100226, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "291f7378-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17143, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17143, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328124030397, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328134040024, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328134040024, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584328213889521, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 842938} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584329223836438, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 843300} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584329554107803, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584329554107803, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17144, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584329554107803, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17145, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584329554107803, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17146, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584329554107803, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17147, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584329554107803, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17144, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584329554107803, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17145, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584329554107803, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17146, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584329554107803, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17147, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 843300} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100227, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2a50bc40-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100227, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2a50bc40-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100227, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2a50bc40-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2428} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2481} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100227, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2a50bc40-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100227, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2a50bc40-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100227, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2a50bc40-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100227, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2a50bc40-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100227, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2a50bc40-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100227, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2a50bc40-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 1242, "ppid": 1, "tid": 100227, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2a50bc40-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17148, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17148, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330124359206, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330133942768, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330133942768, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330133942768, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330133942768, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584330243929659, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 846613} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584331254367044, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 846975} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 846975} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100228, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2b81fa3d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100228, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2b81fa3d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100228, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2b81fa3d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3309} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3362} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100228, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2b81fa3d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100228, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2b81fa3d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100228, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2b81fa3d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100228, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2b81fa3d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100228, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2b81fa3d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100228, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2b81fa3d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 1242, "ppid": 1, "tid": 100228, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2b81fa3d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17149, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17149, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332124159729, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332133971845, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332133971845, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332133971845, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332133971845, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332273954414, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 849407} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332553866890, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332553866890, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17150, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332553866890, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17151, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332553866890, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17152, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332553866890, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17153, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332553866890, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17150, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332553866890, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17151, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332553866890, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17152, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584332553866890, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17153, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584333283975297, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 850585} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 850585} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100229, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2cb2f1e0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100229, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2cb2f1e0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100229, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2cb2f1e0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2428} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2481} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100229, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2cb2f1e0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100229, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2cb2f1e0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100229, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2cb2f1e0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100229, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2cb2f1e0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1174} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1227} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100229, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2cb2f1e0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100229, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2cb2f1e0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100229, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2cb2f1e0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17154, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17154, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334124249050, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334134586908, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334134586908, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584334304267328, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 853018} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584335254600109, "pid": 1028, "ppid": 1, "tid": 100167, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "c215bbc5-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "c215b936-467d-11e9-aec3-080027fc76ba", "fd": 29, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584335254600109, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "c215b91e-467d-11e9-aec3-080027fc76ba", "fd": 28, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584335254600109, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "c215b936-467d-11e9-aec3-080027fc76ba", "fd": 29, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584335254600109, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "c215b91e-467d-11e9-aec3-080027fc76ba", "fd": 28, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584335313843426, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 853753} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584335554194831, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584335554194831, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17155, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584335554194831, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17156, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584335554194831, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17157, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584335554194831, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17158, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584335554194831, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17155, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584335554194831, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17156, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584335554194831, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17157, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584335554194831, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17158, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 853753} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100230, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2de4519d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100230, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2de4519d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100230, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2de4519d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2429} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2482} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100230, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2de4519d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100230, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2de4519d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100230, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2de4519d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100230, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2de4519d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 731} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 784} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100230, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2de4519d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100230, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2de4519d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100230, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2de4519d-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17159, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17159, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336124158632, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336133907511, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336133907511, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584336334065373, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 857069} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584337343906905, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 857434} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 857434} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100231, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2f1572d9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100231, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2f1572d9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100231, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2f1572d9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3312} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3365} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100231, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2f1572d9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100231, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2f1572d9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100231, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2f1572d9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100231, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2f1572d9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100231, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2f1572d9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100231, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2f1572d9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100231, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "2f1572d9-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17160, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17160, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338124426783, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338133863464, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338133863464, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338363978514, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 859872} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338554217516, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338554217516, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17161, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338554217516, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17162, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338554217516, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17163, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338554217516, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17164, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338554217516, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17161, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338554217516, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17162, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338554217516, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17163, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584338554217516, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17164, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584339374520842, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 861056} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 861056} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100232, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3046ec5e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100232, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3046ec5e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100232, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3046ec5e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2434} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2487} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100232, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3046ec5e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100232, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3046ec5e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100232, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3046ec5e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100232, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3046ec5e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1180} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1233} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100232, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3046ec5e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100232, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3046ec5e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 1242, "ppid": 1, "tid": 100232, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3046ec5e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17165, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17165, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340123996519, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340134619345, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340134619345, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340134619345, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340134619345, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584340394253710, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 863483} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584341404029043, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 863848} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584341553840531, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584341553840531, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17166, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584341553840531, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17167, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584341553840531, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17168, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584341553840531, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17169, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584341553840531, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17166, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584341553840531, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17167, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584341553840531, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17168, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584341553840531, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17169, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 863848} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100233, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3177afa5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100233, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3177afa5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100233, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3177afa5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2423} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2476} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100233, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3177afa5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100233, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3177afa5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100233, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3177afa5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100233, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3177afa5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100233, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3177afa5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100233, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3177afa5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 1242, "ppid": 1, "tid": 100233, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3177afa5-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17170, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17170, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342124196461, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342133883155, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342133883155, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342133883155, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342133883155, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584342424290180, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 867158} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584343434142827, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 867522} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 867522} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100234, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "32a8d96e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100234, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "32a8d96e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100234, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "32a8d96e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3306} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3359} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100234, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "32a8d96e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100234, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "32a8d96e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100234, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "32a8d96e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100234, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "32a8d96e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100234, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "32a8d96e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100234, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "32a8d96e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 1242, "ppid": 1, "tid": 100234, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "32a8d96e-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17171, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17171, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344124257668, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344134165236, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344134165236, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344134165236, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344134165236, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344453910507, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 869957} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344554272571, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344554272571, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17172, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344554272571, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17173, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344554272571, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17174, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344554272571, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17175, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344554272571, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17172, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344554272571, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17173, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344554272571, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17174, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584344554272571, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17175, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584345464064441, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 871139} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 871139} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100235, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "33da1252-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100235, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "33da1252-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100235, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "33da1252-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2431} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2484} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100235, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "33da1252-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100235, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "33da1252-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100235, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "33da1252-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100235, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "33da1252-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1178} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1231} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100235, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "33da1252-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100235, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "33da1252-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 1242, "ppid": 1, "tid": 100235, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "33da1252-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17176, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17176, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346123866085, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346134170169, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346134170169, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346134170169, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346134170169, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "33ed8e85-467e-11e9-aed1-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "33ed8e85-467e-11e9-aed1-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "33ed9753-467e-11e9-aed1-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "33ed9753-467e-11e9-aed1-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "33ed9eac-467e-11e9-aed1-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "33ed9eac-467e-11e9-aed1-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "33eda7f2-467e-11e9-aed1-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "33eda7f2-467e-11e9-aed1-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "33edaf7e-467e-11e9-aed1-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "33edaf7e-467e-11e9-aed1-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "33edb6bf-467e-11e9-aed1-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "33edb6bf-467e-11e9-aed1-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "33edbdf4-467e-11e9-aed1-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "33edbdf4-467e-11e9-aed1-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "33edc6a7-467e-11e9-aed1-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "33edc6a7-467e-11e9-aed1-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "33edcdea-467e-11e9-aed1-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346254046273, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "33edcdea-467e-11e9-aed1-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584346494002074, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 875011} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584347503963039, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 875371} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584347554362864, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584347554362864, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17177, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584347554362864, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17178, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584347554362864, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17179, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584347554362864, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17180, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584347554362864, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17177, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584347554362864, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17178, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584347554362864, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17179, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584347554362864, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17180, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 875371} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100236, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "350b33bd-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100236, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "350b33bd-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100236, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "350b33bd-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3868} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3921} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100236, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "350b33bd-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100236, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "350b33bd-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100236, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "350b33bd-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100236, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "350b33bd-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 356} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 409} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100236, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "350b33bd-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100236, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "350b33bd-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 1242, "ppid": 1, "tid": 100236, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "350b33bd-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17181, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17181, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348124323621, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348134785831, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348134785831, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348134785831, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348134785831, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584348524309003, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 878686} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584349534585675, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 879047} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 879047} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100237, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "363c5c6b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100237, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "363c5c6b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100237, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "363c5c6b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3311} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3364} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100237, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "363c5c6b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100237, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "363c5c6b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100237, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "363c5c6b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100237, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "363c5c6b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 357} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 410} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100237, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "363c5c6b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100237, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "363c5c6b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 1242, "ppid": 1, "tid": 100237, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "363c5c6b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17182, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17182, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350124276936, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350134184753, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350134184753, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350134184753, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350134184753, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350254410108, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "364ff73b-467e-11e9-aed1-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350254410108, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "364ff73b-467e-11e9-aed1-080027fc76ba", "fd": 4, "address": "23.31.21.163", "port": 123, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350254410108, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "364ff73b-467e-11e9-aed1-080027fc76ba", "fd": 4, "retval": 0} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350254410108, "tid": 100092, "uid": 123, "so_uuid": "b5434a9c-467a-11e9-ae89-080027fc76ba", "lport": 123, "fport": 123, "laddr": "10.0.2.15", "faddr": "23.31.21.163"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350254410108, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "b5434a9c-467a-11e9-ae89-080027fc76ba", "ret_msgid": 17183, "fd": 22, "address": "23.31.21.163", "port": 123, "retval": 48} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350254410108, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "b541acd0-467a-11e9-ae89-080027fc76ba", "ret_msgid": 17184, "fd": 3, "retval": 100} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350254410108, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b2110-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17184, "upath1": "/", "fd": 8, "address": "", "retval": 100} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350553853162, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 882250} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350553853162, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350553853162, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17185, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350553853162, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17186, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350553853162, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17187, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350553853162, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17188, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350553853162, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17185, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350553853162, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17186, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350553853162, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17187, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584350553853162, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17188, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584351563965247, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 883425} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 883425} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100238, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "376d9b1f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100238, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "376d9b1f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100238, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "376d9b1f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3199} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3252} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100238, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "376d9b1f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100238, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "376d9b1f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100238, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "376d9b1f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100238, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "376d9b1f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1171} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1224} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100238, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "376d9b1f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100238, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "376d9b1f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 1242, "ppid": 1, "tid": 100238, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "376d9b1f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17189, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17189, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352124308784, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352134191124, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352134191124, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352134191124, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352134191124, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584352584162883, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 885859} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584353554305528, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584353554305528, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17190, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584353554305528, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17191, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584353554305528, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17192, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584353554305528, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17193, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584353554305528, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17190, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584353554305528, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17191, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584353554305528, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17192, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584353554305528, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17193, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584353594417320, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 887040} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 887040} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100239, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "389ed342-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100239, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "389ed342-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100239, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "389ed342-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2430} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2483} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100239, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "389ed342-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100239, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "389ed342-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100239, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "389ed342-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100239, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "389ed342-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1177} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1230} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100239, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "389ed342-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100239, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "389ed342-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 1242, "ppid": 1, "tid": 100239, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "389ed342-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17194, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17194, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354124436149, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354133845363, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354133845363, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354133845363, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354133845363, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584354613932763, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 889470} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584355624310322, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 889832} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 889832} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100240, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "39cfdec8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100240, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "39cfdec8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100240, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "39cfdec8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2426} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2479} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100240, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "39cfdec8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100240, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "39cfdec8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100240, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "39cfdec8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100240, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "39cfdec8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100240, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "39cfdec8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100240, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "39cfdec8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100240, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "39cfdec8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17195, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17195, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356124264883, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356554258044, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356554258044, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17196, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356554258044, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17197, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356554258044, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17198, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356554258044, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17199, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356554258044, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17196, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356554258044, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17197, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356554258044, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17198, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356554258044, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17199, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584356644012080, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 893057} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584357654009299, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 893421} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 893421} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100241, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3b013519-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100241, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3b013519-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100241, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3b013519-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3221} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3274} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100241, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3b013519-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100241, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3b013519-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100241, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3b013519-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100241, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3b013519-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100241, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3b013519-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100241, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3b013519-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 1242, "ppid": 1, "tid": 100241, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3b013519-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17200, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17200, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358124429902, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358134010970, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358134010970, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358134010970, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358134010970, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584358674080271, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 895843} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584359554835321, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584359554835321, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17201, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584359554835321, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17202, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584359554835321, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17203, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584359554835321, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17204, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584359554835321, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17201, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584359554835321, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17202, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584359554835321, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17203, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584359554835321, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17204, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584359684033327, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 897024} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360014564878, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "ret_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "upath1": "/etc/cron.d", "flags": 1179652, "ret_fd1": 5, "mode": 59400, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360014564878, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 897024} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100242, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3c3265cb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100242, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3c3265cb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100242, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3c3265cb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2418} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2471} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100242, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3c3265cb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100242, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3c3265cb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100242, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3c3265cb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100242, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3c3265cb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1177} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1230} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100242, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3c3265cb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100242, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3c3265cb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 1242, "ppid": 1, "tid": 100242, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3c3265cb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17205, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17205, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360123894557, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360133855941, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360133855941, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360133855941, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360133855941, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584360703885969, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 899831} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584361714110689, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 900196} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 900196} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100243, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3d636b7b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100243, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3d636b7b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100243, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3d636b7b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2803} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2856} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100243, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3d636b7b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100243, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3d636b7b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100243, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3d636b7b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100243, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3d636b7b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100243, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3d636b7b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100243, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3d636b7b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100243, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3d636b7b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17206, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17206, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362123966406, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362133831640, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362133831640, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362554188816, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362554188816, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17207, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362554188816, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17208, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362554188816, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17209, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362554188816, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17210, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362554188816, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17207, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362554188816, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17208, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362554188816, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17209, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362554188816, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17210, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584362733980807, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 903421} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584363744193316, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 903784} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 903784} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100244, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3e94aaea-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100244, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3e94aaea-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100244, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3e94aaea-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3221} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3274} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100244, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3e94aaea-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100244, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3e94aaea-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100244, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3e94aaea-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100244, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3e94aaea-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100244, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3e94aaea-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100244, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3e94aaea-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 1242, "ppid": 1, "tid": 100244, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3e94aaea-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17211, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17211, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364123869278, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364133962481, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364133962481, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364133962481, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364133962481, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584364764365507, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 906220} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584365553839168, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584365553839168, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17212, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584365553839168, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17213, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584365553839168, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17214, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584365553839168, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17215, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584365553839168, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17212, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584365553839168, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17213, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584365553839168, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17214, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584365553839168, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17215, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584365773863118, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 907410} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 907410} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100245, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3fc5d359-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100245, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3fc5d359-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100245, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3fc5d359-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2432} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2485} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100245, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3fc5d359-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100245, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3fc5d359-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100245, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3fc5d359-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100245, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3fc5d359-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1186} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1239} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100245, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3fc5d359-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100245, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3fc5d359-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100245, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "3fc5d359-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17216, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17216, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366123868014, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366134645641, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366134645641, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584366794686340, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 909842} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584367804437601, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 910206} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 910206} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100246, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "40f70008-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100246, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "40f70008-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100246, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "40f70008-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2428} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2481} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100246, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "40f70008-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100246, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "40f70008-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100246, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "40f70008-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100246, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "40f70008-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100246, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "40f70008-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100246, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "40f70008-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 1242, "ppid": 1, "tid": 100246, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "40f70008-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17217, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17217, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368123891729, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368134043616, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368134043616, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368134043616, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368134043616, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368553925902, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368553925902, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17218, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368553925902, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17219, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368553925902, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17220, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368553925902, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17221, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368553925902, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17218, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368553925902, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17219, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368553925902, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17220, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368553925902, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17221, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584368824050917, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 913427} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584369834248718, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 913791} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 913791} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100247, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "422823bb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100247, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "422823bb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100247, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "422823bb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3217} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3270} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100247, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "422823bb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100247, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "422823bb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100247, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "422823bb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100247, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "422823bb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100247, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "422823bb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100247, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "422823bb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 1242, "ppid": 1, "tid": 100247, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "422823bb-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17222, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17222, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370124221789, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370134064037, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370134064037, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370134064037, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370134064037, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584370853860699, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 916221} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584371553878608, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584371553878608, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17223, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584371553878608, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17224, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584371553878608, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17225, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584371553878608, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17226, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584371553878608, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17223, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584371553878608, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17224, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584371553878608, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17225, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584371553878608, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17226, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584371864648124, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 917404} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 917404} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100248, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "43597287-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100248, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "43597287-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100248, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "43597287-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2426} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2479} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100248, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "43597287-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100248, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "43597287-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100248, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "43597287-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100248, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "43597287-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1179} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1232} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100248, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "43597287-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100248, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "43597287-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 1242, "ppid": 1, "tid": 100248, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "43597287-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17227, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17227, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372124675269, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372133970173, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372133970173, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372133970173, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372133970173, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584372883885518, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 919835} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584373893911586, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 920201} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 920201} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100249, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "448a84c0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100249, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "448a84c0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100249, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "448a84c0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2427} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2480} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100249, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "448a84c0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100249, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "448a84c0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100249, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "448a84c0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100249, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "448a84c0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 362} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 415} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100249, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "448a84c0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100249, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "448a84c0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 1242, "ppid": 1, "tid": 100249, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "448a84c0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17228, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17228, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374123883043, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374134100297, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374134100297, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374134100297, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374134100297, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374553880273, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374553880273, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17229, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374553880273, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17230, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374553880273, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17231, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374553880273, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17232, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374553880273, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17229, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374553880273, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17230, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374553880273, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17231, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374553880273, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17232, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584374913894183, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 923436} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584375923865622, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 923799} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 923799} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100250, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "45bbcb88-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100250, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "45bbcb88-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100250, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "45bbcb88-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3231} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3284} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100250, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "45bbcb88-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100250, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "45bbcb88-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100250, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "45bbcb88-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100250, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "45bbcb88-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100250, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "45bbcb88-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100250, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "45bbcb88-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 1242, "ppid": 1, "tid": 100250, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "45bbcb88-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17233, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17233, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376124305108, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376133898481, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376133898481, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376133898481, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376133898481, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584376933866868, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 926232} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584377553868394, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584377553868394, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17234, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584377553868394, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17235, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584377553868394, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17236, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584377553868394, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17237, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584377553868394, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17234, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584377553868394, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17235, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584377553868394, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17236, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584377553868394, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17237, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584377943853743, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 927413} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 927413} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100251, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "46ece22c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100251, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "46ece22c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100251, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "46ece22c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2429} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2482} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100251, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "46ece22c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100251, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "46ece22c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100251, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "46ece22c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100251, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "46ece22c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1177} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1230} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100251, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "46ece22c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100251, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "46ece22c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 1242, "ppid": 1, "tid": 100251, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "46ece22c-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17238, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17238, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378123936363, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378133899775, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378133899775, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378133899775, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378133899775, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584378963889706, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 929840} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584379974067358, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 930203} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 930203} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100252, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "481e3215-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100252, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "481e3215-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100252, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "481e3215-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2423} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2476} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100252, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "481e3215-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100252, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "481e3215-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100252, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "481e3215-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100252, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "481e3215-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100252, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "481e3215-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100252, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "481e3215-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 1242, "ppid": 1, "tid": 100252, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "481e3215-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17239, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17239, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380124047022, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380134004652, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380134004652, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380134004652, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380134004652, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380553865075, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380553865075, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17240, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380553865075, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17241, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380553865075, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17242, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380553865075, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17243, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380553865075, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17240, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380553865075, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17241, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380553865075, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17242, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380553865075, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17243, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584380993941343, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 933424} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382004231439, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 933787} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 933787} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100253, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "494f5258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100253, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "494f5258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100253, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "494f5258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3217} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3270} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100253, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "494f5258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100253, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "494f5258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100253, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "494f5258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100253, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "494f5258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100253, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "494f5258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100253, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "494f5258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 1242, "ppid": 1, "tid": 100253, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "494f5258-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17244, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17244, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382123908641, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382133890587, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382133890587, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382133890587, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584382133890587, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584383024287351, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 936230} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584383554017323, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584383554017323, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17245, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584383554017323, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17246, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584383554017323, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17247, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584383554017323, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17248, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584383554017323, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17245, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584383554017323, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17246, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584383554017323, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17247, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584383554017323, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17248, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384034393256, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 937412} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 937412} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100254, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4a807112-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100254, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4a807112-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100254, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4a807112-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2439} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2492} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100254, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4a807112-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100254, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4a807112-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100254, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4a807112-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100254, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4a807112-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1178} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1231} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100254, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4a807112-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100254, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4a807112-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 1242, "ppid": 1, "tid": 100254, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4a807112-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17249, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17249, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384123867448, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384134127942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384134127942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384134127942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584384134127942, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584385053970141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 939845} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386063937286, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 940212} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 940212} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100255, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4bb1a253-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100255, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4bb1a253-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100255, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4bb1a253-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2429} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2482} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100255, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4bb1a253-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100255, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4bb1a253-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100255, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4bb1a253-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100255, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4bb1a253-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 363} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 416} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100255, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4bb1a253-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100255, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4bb1a253-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100255, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4bb1a253-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17250, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17250, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386124290196, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386554134484, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386554134484, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17251, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386554134484, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17252, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386554134484, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17253, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386554134484, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17254, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386554134484, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17251, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386554134484, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17252, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386554134484, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17253, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584386554134484, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17254, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584387083901140, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 943442} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388094338582, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 943805} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 943805} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100256, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4ce2e4b0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100256, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4ce2e4b0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100256, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4ce2e4b0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3226} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3279} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100256, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4ce2e4b0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100256, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4ce2e4b0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100256, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4ce2e4b0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100256, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4ce2e4b0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100256, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4ce2e4b0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100256, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4ce2e4b0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 1242, "ppid": 1, "tid": 100256, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4ce2e4b0-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17255, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17255, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388124630859, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388134091894, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388134091894, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388134091894, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584388134091894, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584389114277936, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 946236} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584389554442826, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584389554442826, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17256, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584389554442826, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17257, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584389554442826, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17258, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584389554442826, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17259, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584389554442826, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17256, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584389554442826, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17257, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584389554442826, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17258, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584389554442826, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17259, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 947413} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 947413} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100257, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4e14bace-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100257, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4e14bace-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100257, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4e14bace-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2427} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2480} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100257, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4e14bace-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100257, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4e14bace-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100257, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4e14bace-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100257, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4e14bace-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1173} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1226} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390124155187, "pid": 1242, "ppid": 1, "tid": 100257, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4e14bace-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390133865016, "pid": 1242, "ppid": 1, "tid": 100257, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4e14bace-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390133865016, "pid": 1242, "ppid": 1, "tid": 100257, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4e14bace-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17260, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390133865016, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17260, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390133865016, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390133865016, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390133865016, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390133865016, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584390133865016, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584391143928729, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 949837} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392124088394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 949837} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392124088394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392124088394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392124088394, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392124088394, "pid": 1242, "ppid": 1, "tid": 100258, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4f45313a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392124088394, "pid": 1242, "ppid": 1, "tid": 100258, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4f45313a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392124088394, "pid": 1242, "ppid": 1, "tid": 100258, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4f45313a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2420} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392124088394, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2473} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392124088394, "pid": 1242, "ppid": 1, "tid": 100258, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4f45313a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392124088394, "pid": 1242, "ppid": 1, "tid": 100258, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4f45313a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392124088394, "pid": 1242, "ppid": 1, "tid": 100258, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "4f45313a-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17261, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392124088394, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17261, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392124088394, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392134298073, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392134298073, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392154182085, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 951667} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392553827362, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392553827362, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17262, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392553827362, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17263, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392553827362, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17264, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392553827362, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17265, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392553827362, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17262, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392553827362, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17263, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392553827362, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17264, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584392553827362, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17265, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584393164515330, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 952845} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 952845} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100259, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "507667a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100259, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "507667a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100259, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "507667a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1826} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1879} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100259, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "507667a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100259, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "507667a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100259, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "507667a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100259, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "507667a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1174} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1227} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100259, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "507667a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100259, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "507667a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100259, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "507667a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17266, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17266, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394124128369, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394133863101, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394133863101, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584394184016366, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 955278} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584395194647150, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 955642} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584395554087565, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584395554087565, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17267, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584395554087565, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17268, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584395554087565, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17269, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584395554087565, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17270, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584395554087565, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17267, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584395554087565, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17268, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584395554087565, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17269, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584395554087565, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17270, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 955642} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100260, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "51a799a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100260, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "51a799a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100260, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "51a799a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2429} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2482} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100260, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "51a799a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100260, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "51a799a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100260, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "51a799a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100260, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "51a799a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100260, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "51a799a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100260, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "51a799a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 1242, "ppid": 1, "tid": 100260, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "51a799a1-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17271, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17271, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396123894581, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396134149761, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396134149761, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396134149761, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396134149761, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584396214012424, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 958959} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584397224126901, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 959324} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 959324} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100261, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "52d8bd50-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100261, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "52d8bd50-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100261, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "52d8bd50-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3313} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3366} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100261, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "52d8bd50-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100261, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "52d8bd50-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100261, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "52d8bd50-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100261, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "52d8bd50-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100261, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "52d8bd50-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100261, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "52d8bd50-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 1242, "ppid": 1, "tid": 100261, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "52d8bd50-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17272, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17272, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398124330943, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398134141312, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398134141312, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398134141312, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398134141312, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398243926468, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 961763} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398553868433, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398553868433, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17273, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398553868433, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17274, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398553868433, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17275, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398553868433, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17276, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398553868433, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17273, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398553868433, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17274, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398553868433, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17275, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584398553868433, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17276, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584399254338698, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 962947} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 962947} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100262, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5409c07b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100262, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5409c07b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100262, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5409c07b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2435} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2488} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100262, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5409c07b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100262, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5409c07b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100262, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5409c07b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100262, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5409c07b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1180} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1233} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100262, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5409c07b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100262, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5409c07b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100262, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5409c07b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17277, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17277, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400123897422, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400133953956, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400133953956, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584400273864730, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 965377} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584401283859668, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 965741} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584401553884950, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584401553884950, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17278, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584401553884950, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17279, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584401553884950, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17280, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584401553884950, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17281, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584401553884950, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17278, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584401553884950, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17279, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584401553884950, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17280, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584401553884950, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17281, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 965741} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100263, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "553af12f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100263, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "553af12f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100263, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "553af12f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2426} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2479} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100263, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "553af12f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100263, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "553af12f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100263, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "553af12f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100263, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "553af12f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100263, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "553af12f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100263, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "553af12f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 1242, "ppid": 1, "tid": 100263, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "553af12f-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17282, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17282, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402124261704, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402134358957, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402134358957, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402134358957, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402134358957, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584402304376296, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 969062} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584403314081657, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 969427} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 969427} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100264, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "566c2171-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100264, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "566c2171-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100264, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "566c2171-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3317} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3370} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100264, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "566c2171-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100264, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "566c2171-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100264, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "566c2171-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100264, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "566c2171-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100264, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "566c2171-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100264, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "566c2171-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 1242, "ppid": 1, "tid": 100264, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "566c2171-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17283, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17283, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404124278609, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404133903136, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404133903136, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404133903136, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404133903136, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404334213115, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 971874} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404553973081, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404553973081, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17284, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404553973081, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17285, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404553973081, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17286, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404553973081, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17287, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404553973081, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17284, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404553973081, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17285, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404553973081, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17286, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584404553973081, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17287, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584405344666802, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 973056} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 973056} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100265, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "579d7f5b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100265, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "579d7f5b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100265, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "579d7f5b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2443} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2496} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100265, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "579d7f5b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100265, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "579d7f5b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100265, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "579d7f5b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100265, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "579d7f5b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1178} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1231} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100265, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "579d7f5b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100265, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "579d7f5b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 1242, "ppid": 1, "tid": 100265, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "579d7f5b-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17288, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17288, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406124146356, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406134219765, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406134219765, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406134219765, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406134219765, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584406363950676, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 975490} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584407374036276, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 975856} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584407553896337, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584407553896337, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17289, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584407553896337, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17290, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584407553896337, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17291, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584407553896337, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17292, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584407553896337, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17289, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584407553896337, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17290, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584407553896337, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17291, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584407553896337, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17292, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 975856} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100266, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "58ce83a8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100266, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "58ce83a8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100266, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "58ce83a8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2430} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2483} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100266, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "58ce83a8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100266, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "58ce83a8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100266, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "58ce83a8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100266, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "58ce83a8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 362} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 415} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100266, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "58ce83a8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100266, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "58ce83a8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 1242, "ppid": 1, "tid": 100266, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "58ce83a8-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17293, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17293, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408123922197, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408134000160, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408134000160, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408134000160, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408134000160, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584408393883739, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 979172} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584409404577929, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 979536} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 979536} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100267, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "59ffdfe4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100267, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "59ffdfe4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100267, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "59ffdfe4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3312} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3365} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100267, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "59ffdfe4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100267, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "59ffdfe4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100267, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "59ffdfe4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100267, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "59ffdfe4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100267, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "59ffdfe4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100267, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "59ffdfe4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 1242, "ppid": 1, "tid": 100267, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "59ffdfe4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17294, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17294, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410124161928, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410134312941, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410134312941, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410134312941, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410134312941, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410423897303, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 981978} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410554159596, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410554159596, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17295, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410554159596, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17296, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410554159596, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17297, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410554159596, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17298, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410554159596, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17295, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410554159596, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17296, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410554159596, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17297, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584410554159596, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17298, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584411434323544, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 983162} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 983162} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100268, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5b30ebc4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100268, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5b30ebc4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100268, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5b30ebc4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2438} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2491} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100268, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5b30ebc4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100268, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5b30ebc4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100268, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5b30ebc4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100268, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5b30ebc4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1180} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1233} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100268, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5b30ebc4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100268, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5b30ebc4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 1242, "ppid": 1, "tid": 100268, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5b30ebc4-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17299, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17299, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412124408772, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412134051223, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412134051223, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412134051223, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412134051223, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584412454448661, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 985597} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584413463877787, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 985959} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584413553885034, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584413553885034, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17300, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584413553885034, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17301, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584413553885034, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17302, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584413553885034, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17303, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584413553885034, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17300, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584413553885034, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17301, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584413553885034, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17302, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584413553885034, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17303, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 985959} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100269, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5c6201b7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100269, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5c6201b7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100269, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5c6201b7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2431} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2484} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100269, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5c6201b7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100269, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5c6201b7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100269, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5c6201b7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100269, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5c6201b7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100269, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5c6201b7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100269, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5c6201b7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100269, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5c6201b7-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17304, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17304, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414124379024, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414133855720, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414133855720, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584414483836657, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 989269} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584415494289392, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 989634} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416044341965, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416044341965, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 989634} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100270, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5d936913-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100270, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5d936913-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100270, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5d936913-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3306} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3359} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100270, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5d936913-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100270, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5d936913-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100270, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5d936913-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100270, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5d936913-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100270, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5d936913-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100270, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5d936913-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 1242, "ppid": 1, "tid": 100270, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5d936913-467e-11e9-aed1-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17305, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17305, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416123993178, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416133873592, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416133873592, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416133873592, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416133873592, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416223907807, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416223907807, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416344205345, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416344205345, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416483881722, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416483881722, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416513964774, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 992831} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416554376215, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416554376215, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17306, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416554376215, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17307, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416554376215, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17308, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416554376215, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17309, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416554376215, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17306, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416554376215, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17307, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416554376215, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17308, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416554376215, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17309, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416574415259, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416574415259, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416693872807, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416693872807, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416984306277, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416984306277, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "5e17cedc-467e-11e9-aed1-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1512, "retval": 1512} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d1524fc4-3a5e-855b-9e3a-5d212b8581ed", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/whoami", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "whoami"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "ret_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "upath1": "/etc/nsswitch.conf", "flags": 1048576, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 272} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "ret_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "upath1": "/etc/pwd.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 5} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1512, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "5e17cedc-467e-11e9-aed1-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584416994472554, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 50} +{"event": "audit:event:aue_socketpair:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "5e3f49f2-467e-11e9-aed1-080027fc76ba", "ret_objuuid2": "5e3f49f2-467e-11e9-aed2-080027fc76ba", "ret_fd1": 4, "ret_fd2": 5, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "fd": 4, "ret_fd1": 28, "retval": 28, "fcntl_cmd": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "fd": 5, "ret_fd1": 29, "retval": 29, "fcntl_cmd": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "fd": 5, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "fd": 4, "retval": 0, "fcntl_cmd": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "ret_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "upath1": "/etc/resolv.conf", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "fd": 4, "retval": 102} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "03614f72-3bf3-3753-b33b-4946a3373b97", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "1df6d669-9ad1-615e-919a-34676e6130b6", "ret_objuuid1": "1df6d669-9ad1-615e-919a-34676e6130b6", "upath1": "/etc/services", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "1df6d669-9ad1-615e-919a-34676e6130b6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "1df6d669-9ad1-615e-919a-34676e6130b6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "1df6d669-9ad1-615e-919a-34676e6130b6", "fd": 4, "retval": 32768} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "1df6d669-9ad1-615e-919a-34676e6130b6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "ret_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "upath1": "/etc/hosts", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 4, "retval": 1031} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 4, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "ret_objuuid1": "5e3fa898-467e-11e9-aed2-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "5e3fa898-467e-11e9-aed2-080027fc76ba", "fd": 4, "address": "149.32.200.97", "port": 53, "retval": 0} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "tid": 100271, "uid": 123, "so_uuid": "5e3fa898-467e-11e9-aed2-080027fc76ba", "lport": 29578, "fport": 53, "laddr": "10.0.2.15", "faddr": "149.32.200.97"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417254040088, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "5e3fa898-467e-11e9-aed2-080027fc76ba", "ret_msgid": 17310, "fd": 4, "retval": 40} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417363996266, "tid": 100013, "uid": 0, "so_uuid": "5e3fa898-467e-11e9-aed2-080027fc76ba", "lport": 29578, "fport": 53, "laddr": "10.0.2.15", "faddr": "149.32.200.97"} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417363996266, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "5e3fa898-467e-11e9-aed2-080027fc76ba", "fd": 4, "address": "149.32.200.97", "port": 53, "retval": 104} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417363996266, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "5e3fa898-467e-11e9-aed2-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417363996266, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "ret_objuuid1": "5e514e85-467e-11e9-aed2-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417363996266, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "5e514e85-467e-11e9-aed2-080027fc76ba", "fd": 4, "address": "149.32.200.97", "port": 53, "retval": 0} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417363996266, "tid": 100271, "uid": 123, "so_uuid": "5e514e85-467e-11e9-aed2-080027fc76ba", "lport": 51176, "fport": 53, "laddr": "10.0.2.15", "faddr": "149.32.200.97"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417363996266, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "5e514e85-467e-11e9-aed2-080027fc76ba", "ret_msgid": 17311, "fd": 4, "retval": 40} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417383919500, "tid": 100013, "uid": 0, "so_uuid": "5e514e85-467e-11e9-aed2-080027fc76ba", "lport": 51176, "fport": 53, "laddr": "10.0.2.15", "faddr": "149.32.200.97"} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417383919500, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "5e514e85-467e-11e9-aed2-080027fc76ba", "fd": 4, "address": "149.32.200.97", "port": 53, "retval": 95} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417383919500, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "5e514e85-467e-11e9-aed2-080027fc76ba", "fd": 4, "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417383919500, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "1df6d669-9ad1-615e-919a-34676e6130b6", "ret_objuuid1": "1df6d669-9ad1-615e-919a-34676e6130b6", "upath1": "/etc/services", "flags": 1048576, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417383919500, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "1df6d669-9ad1-615e-919a-34676e6130b6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417383919500, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "1df6d669-9ad1-615e-919a-34676e6130b6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417383919500, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "1df6d669-9ad1-615e-919a-34676e6130b6", "fd": 4, "retval": 32768} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417383919500, "pid": 1028, "ppid": 1, "tid": 100271, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "5e3f6156-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "1df6d669-9ad1-615e-919a-34676e6130b6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417543988933, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1001535} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417974088074, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417974088074, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417974088074, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417974088074, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417974088074, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417974088074, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417974088074, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584417974088074, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 31} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1001535} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100272, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ec488c6-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100272, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ec488c6-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100272, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ec488c6-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3193} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3246} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100272, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ec488c6-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100272, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ec488c6-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100272, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ec488c6-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100272, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ec488c6-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4410} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4463} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100272, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ec488c6-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100272, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ec488c6-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100272, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ec488c6-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100272, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ec488c6-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4286} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4339} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100272, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ec488c6-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100272, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ec488c6-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 1242, "ppid": 1, "tid": 100272, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ec488c6-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17314, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17314, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418123846069, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418133987583, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418133987583, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418144121218, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418144121218, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418144121218, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418144121218, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418554267304, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1005195} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418874413171, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418874413171, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418874413171, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584418874413171, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 48} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584419553866343, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584419553866343, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17315, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584419553866343, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17316, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584419553866343, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17317, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584419553866343, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17318, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584419553866343, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17315, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584419553866343, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17316, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584419553866343, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17317, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584419553866343, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17318, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584419563876326, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1006678} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584419774396815, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584419774396815, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584419774396815, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584419774396815, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 36} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420013874688, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "ret_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "upath1": "/etc/cron.d", "flags": 1179652, "ret_fd1": 5, "mode": 59400, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420013874688, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1006678} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100273, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ff5668f-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100273, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ff5668f-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100273, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ff5668f-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3656} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3709} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100273, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ff5668f-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100273, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ff5668f-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100273, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ff5668f-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100273, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ff5668f-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1479} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1532} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100273, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ff5668f-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100273, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ff5668f-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100273, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "5ff5668f-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17319, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17319, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420124084755, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420134665091, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420134665091, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420574608737, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1009795} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "604abe51-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1513, "retval": 1513} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/all.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/all.sh"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "ret_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1884} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 516} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "604be711-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1514, "retval": 1514} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584420684121696, "pid": 1514, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604be711-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421604041203, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1018769} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1514, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "604be711-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 34} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1515, "retval": 1515} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "56ecc1ae-1878-7b59-b818-6135097b8030", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./change_file_permissions", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./change_file_permissions "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_chmod:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/README.md", "mode": 438, "retval": 0} +{"event": "audit:event:aue_chmod:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/README.md", "mode": 439, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1515, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "change_file_permiss", "subjprocuuid": "60e6ab2d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1368} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 532} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "60e76282-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1516, "retval": 1516} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421704387085, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584421714467938, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1018769} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100274, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6126fa7e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100274, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6126fa7e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100274, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6126fa7e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3113} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3166} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100274, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6126fa7e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100274, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6126fa7e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100274, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6126fa7e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100274, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6126fa7e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4825} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4878} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100274, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6126fa7e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100274, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6126fa7e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100274, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6126fa7e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100274, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6126fa7e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4141} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4194} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100274, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6126fa7e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100274, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6126fa7e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 1242, "ppid": 1, "tid": 100274, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6126fa7e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17320, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17320, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422124578154, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422134286759, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422134286759, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422144201756, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422144201756, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422144201756, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422144201756, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422553857895, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422553857895, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17321, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422553857895, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17322, "fd": 8, "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422654762242, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1028020} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1516, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "60e76282-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "61838ec5-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1517, "retval": 1517} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0609dc59-7cb8-de5b-b87c-35aeebded4bf", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_file", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_file "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "ret_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/README.md", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "03a0fc55-d7ed-6d5d-add7-543d4d6df1d3", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/out.tmp", "flags": 1537, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "fd": 3, "retval": 2498} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "03a0fc55-d7ed-6d5d-add7-543d4d6df1d3", "fd": 4, "retval": 2498} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "03a0fc55-d7ed-6d5d-add7-543d4d6df1d3", "fd": 4, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1517, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_file", "subjprocuuid": "61838ec5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1352} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 554} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6184b48e-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1518, "retval": 1518} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1518, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6184b48e-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1518, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6184b48e-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1518, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6184b48e-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1518, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6184b48e-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1518, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6184b48e-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584422734066919, "pid": 1518, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6184b48e-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423683920264, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1033018} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1518, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6184b48e-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6220b512-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1519, "retval": 1519} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "0f7e034a-4539-ea5b-b945-2560fbea7185", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_buf "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1519, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf", "subjprocuuid": "6220b512-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1330} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 588} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "622169a1-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1520, "retval": 1520} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584423763933545, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424714289257, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1037897} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1520, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "622169a1-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 38} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "62bc54a0-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1521, "retval": 1521} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "8d001f29-417a-805e-ba41-cecf5e804caf", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_stack_frame", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_buf_stack_frame "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1521, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_sta", "subjprocuuid": "62bc54a0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1296} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 617} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "62bd012c-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1522, "retval": 1522} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584424784068895, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425743915351, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1042770} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1522, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "62bd012c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 33} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "635816b6-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1523, "retval": 1523} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "656c7084-7a51-2d53-917a-60f4832de58f", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_string", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_buf_string "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1523, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_buf_str", "subjprocuuid": "635816b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1267} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 644} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6358c1f4-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1524, "retval": 1524} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584425804421141, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426774419391, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1047710} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1524, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6358c1f4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 31} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "63f3cab7-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1525, "retval": 1525} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a40cfc78-90a1-075c-a190-f4d7ac07bd69", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_heap_buf", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copy_static_heap_buf "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1525, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copy_static_heap_bu", "subjprocuuid": "63f3cab7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1240} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 663} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "63f47686-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1526, "retval": 1526} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584426824427450, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427804615106, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1052582} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427804615106, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427804615106, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427804615106, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427804615106, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427804615106, "pid": 1242, "ppid": 1, "tid": 100277, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "648a3afe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427804615106, "pid": 1242, "ppid": 1, "tid": 100277, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "648a3afe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427804615106, "pid": 1242, "ppid": 1, "tid": 100277, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "648a3afe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4936} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427804615106, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4989} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427804615106, "pid": 1242, "ppid": 1, "tid": 100277, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "648a3afe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427804615106, "pid": 1242, "ppid": 1, "tid": 100277, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "648a3afe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427804615106, "pid": 1242, "ppid": 1, "tid": 100277, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "648a3afe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427804615106, "pid": 1242, "ppid": 1, "tid": 100277, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "648a3afe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4868} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427813879344, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4921} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427813879344, "pid": 1242, "ppid": 1, "tid": 100277, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "648a3afe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427813879344, "pid": 1242, "ppid": 1, "tid": 100277, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "648a3afe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427813879344, "pid": 1242, "ppid": 1, "tid": 100277, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "648a3afe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17331, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427813879344, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17331, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427813879344, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427813879344, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427813879344, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427823857254, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427823857254, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1526, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "63f47686-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 23} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "648f499d-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1527, "retval": 1527} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1bca75f7-71d4-1553-9471-f02cd31597be", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./fork_process", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./fork_process "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584427843982013, "pid": 1527, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "fork_process", "subjprocuuid": "648f499d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428833907966, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1057300} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1529, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "64907b28-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 18} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "652ae83a-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1530, "retval": 1530} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2e1f69d8-d3e4-2950-a4d3-829bb0298789", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./listdir", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./listdir "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "ret_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/.", "flags": 1179652, "ret_fd1": 3, "mode": 60240, "retval": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 5} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 9} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 5} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 7} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 28} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 24} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 15} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 8} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428864156433, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 23} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 21} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 23} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 24} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 12} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 13} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 10} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 9} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 8} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 15} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1edee73d-9a38-a754-b89a-6d3944a71c62", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1530, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "listdir", "subjprocuuid": "652ae83a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1207} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 698} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "652d7380-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1531, "retval": 1531} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428873871782, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428883941520, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584428883941520, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429884048836, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1065170} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1531, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "652d7380-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 25} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1532, "retval": 1532} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "cbeb200e-1746-3e58-8617-b743583e4f59", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./make_directory", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./make_directory "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mkdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "9e2d96dd-3aba-a25f-ba3a-5be12fa267ac", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/temporary", "mode": 511, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1532, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "make_directory", "subjprocuuid": "65c9a9a6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1186} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 727} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1533, "retval": 1533} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584429903890986, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1070174} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1533, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "65ca8b6c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 33} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "666466ab-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1534, "retval": 1534} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6741c59f-8ce3-8e50-a38c-f0d1808ea1c5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_multi_write", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./multi_read_multi_write "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "ret_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430913895665, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "ret_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "ret_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/output_file1.tmp", "flags": 1537, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "ret_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/output_file2.tmp", "flags": 1537, "ret_fd1": 6, "mode": 438, "retval": 6} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 209} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 382} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "fd": 5, "retval": 191} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9679d39e-c74a-3855-8ac7-3e3be538a626", "fd": 5, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "fd": 6, "retval": 187} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "95dea952-8b38-a659-b88b-355249a60651", "fd": 6, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1534, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_multi_wr", "subjprocuuid": "666466ab-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1157} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 757} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "666576d5-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1535, "retval": 1535} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1535, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "666576d5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1535, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "666576d5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1535, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "666576d5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584430923858739, "pid": 1535, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "666576d5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1075253} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1535, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "666576d5-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 34} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6701724a-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1536, "retval": 1536} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d8b8f561-1e30-f858-b01e-d3c3b8f82fe5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_single_write", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./multi_read_single_write "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "ret_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "ret_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c", "flags": 0, "ret_fd1": 4, "mode": 438, "retval": 4} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "ret_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/merged_file.tmp", "flags": 1537, "ret_fd1": 5, "mode": 438, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 209} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 382} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "66902a05-711e-db5e-9e71-61fe3edb93c1", "fd": 3, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "310e9e89-2b11-5f5c-912b-f6fd3c5feee6", "fd": 4, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "fd": 5, "retval": 378} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "93a7558e-de2a-0550-aade-8f47a0052450", "fd": 5, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1536, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "multi_read_single_w", "subjprocuuid": "6701724a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1127} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 780} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431944473296, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "67024d97-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1537, "retval": 1537} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431954396238, "pid": 1537, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "67024d97-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431954396238, "pid": 1537, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "67024d97-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431954396238, "pid": 1537, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "67024d97-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431954396238, "pid": 1537, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "67024d97-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431954396238, "pid": 1537, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "67024d97-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431954396238, "pid": 1537, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "67024d97-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584431954396238, "pid": 1537, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "67024d97-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1080401} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1537, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "67024d97-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 27} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "679ee503-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1538, "retval": 1538} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6afebb5e-412d-d25c-ad41-600cfcd2423e", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./remove_directory", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./remove_directory "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432973974675, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_rmdir:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "9e2d96dd-3aba-a25f-ba3a-5be12fa267ac", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/temporary", "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1538, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_directory", "subjprocuuid": "679ee503-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1104} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 798} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "679fadce-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1539, "retval": 1539} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584432983984696, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1085392} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1539, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "679fadce-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "683beda8-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1540, "retval": 1540} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./remove_file", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./remove_file "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_unlink:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "03a0fc55-d7ed-6d5d-add7-543d4d6df1d3", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/out.tmp", "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1540, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "remove_file", "subjprocuuid": "683beda8-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434004427548, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1086} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 872} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "683cae13-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1541, "retval": 1541} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584434013886023, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435024202717, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1090418} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435024202717, "pid": 1541, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "683cae13-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435024202717, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435024202717, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435024202717, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "68d83cba-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1542, "retval": 1542} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435024202717, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435024202717, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./copied_pipe", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./copied_pipe a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435024202717, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "68d8c812-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "68d8c813-467e-11e9-aed2-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "68d8cb51-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1543, "retval": 1543} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1543, "ppid": 1542, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d8cb51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1543, "ppid": 1542, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d8cb51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 4, "ret_fd1": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1543, "ppid": 1542, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d8cb51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "68d8c813-467e-11e9-aed2-080027fc76ba", "fd": 1, "retval": 2} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1543, "ppid": 1542, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d8cb51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "68d8c812-467e-11e9-aed2-080027fc76ba", "fd": 0, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1542, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "copied_pipe", "subjprocuuid": "68d83cba-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1012} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 923} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "68d95835-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1544, "retval": 1544} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1544, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "68d95835-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1544, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "68d95835-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1544, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "68d95835-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1544, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "68d95835-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1544, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "68d95835-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1544, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "68d95835-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584435034712594, "pid": 1544, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "68d95835-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1095543} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1544, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "68d95835-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 28} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6974c6fa-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1545, "retval": 1545} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "ret_objuuid1": "5b518504-be76-5653-b6be-34ff435661ed", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/datagram.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/datagram.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436053856433, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "ret_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 296} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 250} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6976c7cb-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1546, "retval": 1546} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 268} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436064675618, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6976fae9-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_pid": 1547, "retval": 1547} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "373ba8a7-d481-4f5a-81d4-177fea4f8ab6", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./datagram_server", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./datagram_server"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584436074461252, "pid": 1546, "ppid": 1545, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1109606} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1547, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6976fae9-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 28} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6a199b1c-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_pid": 1548, "retval": 1548} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ffa1f988-cf0d-7f5b-8dcf-910bcb7fb68e", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./datagram_client", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./datagram_client a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "ret_objuuid1": "6a1a1ef3-467e-11e9-aed2-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "6a1a1ef3-467e-11e9-aed2-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "ret_objuuid1": "6a1a27ca-467e-11e9-aed2-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "6a1a27ca-467e-11e9-aed2-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437134371235, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 47} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "ret_objuuid1": "6a1a4653-467e-11e9-aed2-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "tid": 100150, "uid": 1003, "so_uuid": "6a1a4653-467e-11e9-aed2-080027fc76ba", "lport": 50883, "fport": 4950, "laddr": "::1", "faddr": "::1"} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "tid": 100015, "uid": 0, "so_uuid": "6978d0e1-467e-11e9-aed2-080027fc76ba", "lport": 4950, "fport": 50883, "laddr": "::1", "faddr": "::1"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "6a1a4653-467e-11e9-aed2-080027fc76ba", "ret_msgid": 17348, "fd": 3, "address": "::1", "port": 4950, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "6a1a4653-467e-11e9-aed2-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "ret_objuuid1": "6a1a521e-467e-11e9-aed2-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "tid": 100150, "uid": 1003, "so_uuid": "6a1a521e-467e-11e9-aed2-080027fc76ba", "lport": 60145, "fport": 4950, "laddr": "127.0.0.1", "faddr": "127.0.0.1"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "6a1a521e-467e-11e9-aed2-080027fc76ba", "ret_msgid": 17349, "fd": 3, "address": "127.0.0.1", "port": 4950, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "6a1a521e-467e-11e9-aed2-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1548, "ppid": 1545, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "datagram_client", "subjprocuuid": "6a199b1c-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38903a1a-040d-3c53-8d04-93e6a33cb671", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1545, "ppid": 1513, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6974c6fa-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1546, "ppid": 1, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6978d0e1-467e-11e9-aed2-080027fc76ba", "ret_msgid": 17348, "fd": 3, "address": "::1", "port": 50883, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1546, "ppid": 1, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 31} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1546, "ppid": 1, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1546, "ppid": 1, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6978d0e1-467e-11e9-aed2-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1546, "ppid": 1, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "datagram_server", "subjprocuuid": "6976c7cb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 961} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 974} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6a1a904a-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1549, "retval": 1549} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437143921076, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437554058524, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437554058524, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17350, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437554058524, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17351, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437554058524, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17352, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437554058524, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17353, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437554058524, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17350, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437554058524, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17351, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437554058524, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17352, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584437554058524, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17353, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438124253481, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1109606} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438124253481, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438124253481, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438124253481, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438124253481, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438124253481, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438124253481, "pid": 1242, "ppid": 1, "tid": 100282, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6ab05c4e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438124253481, "pid": 1242, "ppid": 1, "tid": 100282, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6ab05c4e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438124253481, "pid": 1242, "ppid": 1, "tid": 100282, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6ab05c4e-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4934} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438174204922, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1119124} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438174204922, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1549, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6a1a904a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 22} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6ab91c12-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1550, "retval": 1550} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "f5cca548-4198-c65d-9841-9bcbadc62d45", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./direct_pipe", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./direct_pipe a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_pipe:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "6ab99e7b-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "6ab99e7c-467e-11e9-aed2-080027fc76ba", "ret_fd1": 3, "ret_fd2": 4, "retval": 0} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "6ab9a7a7-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1551, "retval": 1551} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1551, "ppid": 1550, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab9a7a7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1551, "ppid": 1550, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab9a7a7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ab99e7c-467e-11e9-aed2-080027fc76ba", "fd": 4, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1551, "ppid": 1550, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab9a7a7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1551, "ppid": 1550, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab9a7a7-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ab99e7b-467e-11e9-aed2-080027fc76ba", "fd": 3, "retval": 2} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 17} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 14} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1550, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "direct_pipe", "subjprocuuid": "6ab91c12-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 910} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1025} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6aba4abf-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1552, "retval": 1552} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1552, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6aba4abf-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1552, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6aba4abf-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438183922949, "pid": 1552, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6aba4abf-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438193827577, "pid": 1552, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6aba4abf-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438193827577, "pid": 1552, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6aba4abf-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584438193827577, "pid": 1552, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6aba4abf-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1124251} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1552, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6aba4abf-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 25} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6b55589d-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1553, "retval": 1553} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/named.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/named.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439203907306, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "ret_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 286} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 253} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "6b57508b-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1554, "retval": 1554} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 33} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 271} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439213920762, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "6b578690-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_pid": 1555, "retval": 1555} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "b0bc4f68-c591-a656-91c5-dcf6b6a6dfa5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./named_writer", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./named_writer a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 27} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584439224574414, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1138306} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1555, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6b578690-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 15} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "6bfa6958-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_pid": 1556, "retval": 1556} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "d13b936e-e1a2-e756-a2e1-63e636e7e7c5", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./named_reader", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./named_reader"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440284231412, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 27} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "ret_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "ret_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "ret_objuuid2": "6b594c4f-467e-11e9-aed2-080027fc76ba", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp", "flags": 1, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6b594c4e-467e-11e9-aed2-080027fc76ba", "fd": 3, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 18} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "eafcf6b5-df06-685f-86df-21037f68996a", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1554, "ppid": 1553, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "named_writer", "subjprocuuid": "6b57508b-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "6b594c4e-467e-11e9-aed2-080027fc76ba", "fd": 3, "retval": 1} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "6b594c4f-467e-11e9-aed2-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1556, "ppid": 1553, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "named_reader", "subjprocuuid": "6bfa6958-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "38944848-7de6-8d54-a67d-1217648d35c0", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1553, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6b55589d-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 859} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1041} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584440294245531, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6bfb8fe0-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1557, "retval": 1557} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1143219} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1557, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6bfb8fe0-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6c977eff-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1558, "retval": 1558} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "7eec5b1a-792a-5556-aa79-9b231655b451", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./shm_exfil", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./shm_exfil "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441313878565, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "6c980dd4-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_pid": 1559, "retval": 1559} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441324035099, "pid": 1559, "ppid": 1558, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c980dd4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "e743c6df-0852-745d-9208-c2ae9d74024c", "ret_objuuid1": "e743c6df-0852-745d-9208-c2ae9d74024c", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/SECRETFILE.tmp", "flags": 1537, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441324035099, "pid": 1559, "ppid": 1558, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c980dd4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "e743c6df-0852-745d-9208-c2ae9d74024c", "fd": 3, "retval": 7} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441324035099, "pid": 1559, "ppid": 1558, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c980dd4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "e743c6df-0852-745d-9208-c2ae9d74024c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584441324035099, "pid": 1559, "ppid": 1558, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c980dd4-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442124065300, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1143219} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442124065300, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442124065300, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442124065300, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442124065300, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442124065300, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442124065300, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442124065300, "pid": 1242, "ppid": 1, "tid": 100284, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6d12dabf-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442124065300, "pid": 1242, "ppid": 1, "tid": 100284, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6d12dabf-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442124065300, "pid": 1242, "ppid": 1, "tid": 100284, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6d12dabf-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4920} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442124065300, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4973} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442124065300, "pid": 1242, "ppid": 1, "tid": 100284, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6d12dabf-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442124065300, "pid": 1242, "ppid": 1, "tid": 100284, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6d12dabf-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442124065300, "pid": 1242, "ppid": 1, "tid": 100284, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6d12dabf-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442124065300, "pid": 1242, "ppid": 1, "tid": 100284, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6d12dabf-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4016} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1147957} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 4} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1558, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "shm_exfil", "subjprocuuid": "6c977eff-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 843} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1092} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6d348418-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1560, "retval": 1560} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584442343872792, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1150896} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1560, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6d348418-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6dd05417-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1561, "retval": 1561} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/signal.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443363982269, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/signal.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "ret_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 289} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 245} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "6dd24633-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_pid": 1562, "retval": 1562} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443373877641, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 44} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "f7889531-95ae-715e-ae95-c4adae711987", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./signal_server", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./signal_server"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 263} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "6dd2f704-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1563, "retval": 1563} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "ret_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "upath1": "/usr/lib/libc++.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "ret_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "upath1": "/lib/libcxxrt.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "ret_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "upath1": "/lib/libm.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "ret_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "upath1": "/lib/libgcc_s.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3600384, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3600384, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3637248, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3637248, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3690496, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3690496, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3702784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3702784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4218880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4218880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5550080, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5550080, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443383857081, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584443394217625, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444464228828, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1168708} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444464228828, "pid": 1563, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6dd2f704-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444464228828, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444464228828, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444464228828, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "6e78fb87-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1564, "retval": 1564} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "74643ad1-37f8-b356-b837-c78bb6b345d2", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./signal_client", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./signal_client a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "ret_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "upath1": "/usr/lib/libc++.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2416640, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 2793472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 3215360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "86731679-6196-845b-9661-bd57db846ad9", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "ret_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "upath1": "/lib/libcxxrt.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3252224, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3305472, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 3362816, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "11055fcc-3e6d-ad52-ad3e-07c112adcb50", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "ret_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "upath1": "/lib/libm.so.5", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3395584, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3465216, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 3588096, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "4c04d3c5-3aee-7458-ae3a-ee0258746598", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "ret_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "upath1": "/lib/libgcc_s.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3600384, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3600384, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3637248, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3637248, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3690496, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 3690496, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a7ccc371-8123-4454-a381-b03504446d50", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2412544, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3702784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3702784, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4218880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4218880, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5550080, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5550080, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444473970773, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb", "ret_objuuid1": "a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp", "flags": 0, "ret_fd1": 3, "mode": 438, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb", "fd": 3, "retval": 4} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb", "fd": 3, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb", "fd": 3, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb", "fd": 3, "retval": 4} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 28} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1564, "ppid": 1561, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "signal_client", "subjprocuuid": "6e78fb87-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_unlink:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 16} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1562, "ppid": 1561, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "signal_server", "subjprocuuid": "6dd24633-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "fdea8fdd-1295-d356-9512-4bf3c6d37104", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1561, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6dd05417-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 792} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1143} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6e7b2830-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1565, "retval": 1565} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584444484199126, "pid": 1565, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6e7b2830-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1177549} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1565, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6e7b2830-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 26} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1566, "retval": 1566} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "/usr/bin/env bash ../Bash/stream.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445514098887, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4247552, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "env", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17ec1e80-a1f9-ca5f-b9a1-5a793fcab981", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/local/bin/bash", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "bash ../Bash/stream.sh a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "ret_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "upath1": "/lib/libncurses.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3506176, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3657728, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 3837952, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "e270d10a-6d2e-d757-ae6d-4173d7d7bc9b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "ret_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "upath1": "/usr/local/lib/libintl.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3862528, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3878912, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 3903488, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "066d2f22-503b-3d5c-bb50-bda4ac3d505f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "ret_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "upath1": "/usr/lib/libdl.so.1", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3915776, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3919872, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 3923968, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "2291fb8e-646b-c75b-ab64-2eb55bc78dd5", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3502080, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3932160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4448256, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 5779456, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "ret_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "upath1": "/dev/tty", "flags": 6, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "ret_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 80} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "ret_fd1": 255, "retval": 255} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 3, "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 2, "retval": 0, "fcntl_cmd": 2} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "fd": 3, "retval": 0, "fcntl_cmd": 3} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 290} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445523941575, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 256} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "6f1a8489-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_pid": 1567, "retval": 1567} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 34} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 274} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "6f1ab290-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1568, "retval": 1568} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "ret_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "upath1": "/dev/null", "flags": 0, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_dup2:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "fd": 3, "ret_fd1": 0, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "1633500b-d34b-8058-8bd3-abb7d880915e", "fd": 3, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "eeac9f12-b277-945c-b7b2-6dc48c944589", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./stream_server", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./stream_server a"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "ret_objuuid1": "6f1be505-467e-11e9-aed2-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "6f1be505-467e-11e9-aed2-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "ret_objuuid1": "6f1bede6-467e-11e9-aed2-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "6f1bede6-467e-11e9-aed2-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "ret_objuuid1": "6f1bf7ce-467e-11e9-aed2-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_bind:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "6f1bf7ce-467e-11e9-aed2-080027fc76ba", "fd": 3, "address": "::", "port": 3490, "retval": 0} +{"event": "audit:event:aue_listen:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "6f1bf7ce-467e-11e9-aed2-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445534324005, "pid": 1567, "ppid": 1566, "tid": 100150, "uid": 1003, "cpu_id": 0, "exec": "stream_server", "subjprocuuid": "6f1a8489-467e-11e9-aed2-080027fc76ba", "subjthruuid": "08b32583-467b-11e9-aeb9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 35} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584445544294043, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1177549} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4923} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4976} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4017} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4070} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446124407117, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4667} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4720} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4189} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4584} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446133897041, "pid": 1242, "ppid": 1, "tid": 100286, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "6f757933-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4249} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1195630} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17367, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17368, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17369, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17370, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17367, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17368, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17369, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17370, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1568, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6f1ab290-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "ret_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "upath1": "/usr/share/misc/termcap.db", "flags": 1048576, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 260} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 4096} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "96d82599-7779-ef52-b977-075492ef8d39", "fd": 3, "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 16} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1566, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6f18b1f3-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "6fc15517-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1569, "retval": 1569} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "648191b4-da2e-2357-aeda-9bcac723947b", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "acf88428-0c9e-7555-9e0c-dc6fa5750416", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./stream_client", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./stream_client"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6fc1e2fd-467e-11e9-aed2-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6fc1e2fd-467e-11e9-aed2-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6fc1ee82-467e-11e9-aed2-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6fc1ee82-467e-11e9-aed2-080027fc76ba", "fd": 3, "retval": 0} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "6fc1f718-467e-11e9-aed2-080027fc76ba", "ret_fd1": 3, "retval": 3} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "tid": 100015, "uid": 0, "so_uuid": "6fc1f718-467e-11e9-aed2-080027fc76ba", "lport": 13773, "fport": 3490, "laddr": "0.0.0.1", "faddr": "0.0.0.1", "iss": 1413555922} +{"event": "fbt:kernel:syncache_expand:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "tid": 100015, "uid": 0, "so_uuid": "6f1bf7ce-467e-11e9-aed2-080027fc76ba", "lport": 3490, "fport": 13773, "laddr": "0.0.0.1", "faddr": "0.0.0.1"} +{"event": "fbt:kernel:cc_conn_init:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "tid": 100015, "uid": 0, "so_uuid": "6fc2037c-467e-11e9-aed2-080027fc76ba", "lport": 3490, "fport": 13773, "laddr": "0.0.0.1", "faddr": "0.0.0.1", "iss": 701559262} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584446623850756, "pid": 1569, "ppid": 1566, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "stream_client", "subjprocuuid": "6fc15517-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "6fc1f718-467e-11e9-aed2-080027fc76ba", "fd": 3, "address": "::1", "port": 3490, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1200432} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1571, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "6fc2e0eb-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 20} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "705edb2a-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1572, "retval": 1572} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "c9e441c0-7c31-1a56-b17c-3f9a061af725", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/home/user/ripe-prov-tests-master/Linux/./with_wget", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "./with_wget "} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447653827442, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_vfork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "ret_objuuid1": "705f7e50-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1573, "retval": 1573} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "f3f7eadf-5a79-ba55-b95a-881315bae424", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sh", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sh -c wget http://www.google.com/index.html"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "ret_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "upath1": "/lib/libedit.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2568192, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2650112, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 2789376, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "152a8717-716f-265c-af71-11d7ac26ac9f", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2818048, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2818048, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3334144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 3334144, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4665344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4665344, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "ret_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "upath1": "/lib/libncursesw.so.8", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 2564096, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 6983680, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 6983680, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7151616, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7356416, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 7356416, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "04da366e-0b24-2e5c-a40b-b8adfc2e2ba6", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 20} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1573, "ppid": 1572, "tid": 100121, "uid": 1003, "cpu_id": 0, "exec": "sh", "subjprocuuid": "705f7e50-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c84164-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1572, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "with_wget", "subjprocuuid": "705edb2a-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 725} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 1866} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "ret_objuuid1": "7060a8b6-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_pid": 1574, "retval": 1574} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "6ce4ece2-78d7-5951-9778-d00331594fca", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/bin/sleep", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "sleep 1"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2387968, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2392064, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2908160, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 4239360, "arg_mem_flags": ["PROT_READ", "PROT_WRITE"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584447664016709, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_READ"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1200432} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4917} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4970} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4025} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4078} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 5069} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 5122} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448124267696, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448133852278, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448133852278, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448133852278, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4054} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448133852278, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448133852278, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448133852278, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448133852278, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4798} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448133852278, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448133852278, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448133852278, "pid": 1242, "ppid": 1, "tid": 100287, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "70a675d4-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17371, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448133852278, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17371, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448133852278, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448133852278, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448133852278, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448133852278, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4107} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448174053876, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448174053876, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448174053876, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4851} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448174053876, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448733851940, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1214072} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448733851940, "pid": 1574, "ppid": 1513, "tid": 100139, "uid": 1003, "cpu_id": 0, "exec": "sleep", "subjprocuuid": "7060a8b6-467e-11e9-aed2-080027fc76ba", "subjthruuid": "fdc8cee6-467a-11e9-aeb7-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448733851940, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 18} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448733851940, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448733851940, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 1, "retval": 5} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448733851940, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "a518b5ee-67b5-d155-b567-a865b5d16327", "fd": 255, "retval": 0} +{"event": "audit:event:aue_exit:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448733851940, "pid": 1513, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "604abe51-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "retval": 0} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448733851940, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584448733851940, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 50} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584449553879164, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584449553879164, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17372, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584449553879164, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17373, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584449553879164, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17374, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584449553879164, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17375, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584449553879164, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17372, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584449553879164, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17373, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584449553879164, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17374, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584449553879164, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17375, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584449743875592, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1216062} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1216062} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4947} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 5000} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4332} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4385} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4349} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4402} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1986} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 1242, "ppid": 1, "tid": 100288, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "71d78221-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17376, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450124330093, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17376, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450133851536, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450133851536, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450133851536, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450133851536, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2039} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450174112545, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450174112545, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450174112545, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450174112545, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450174112545, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450174112545, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584450773921816, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1219697} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584451774143857, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1220060} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1220060} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100289, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7308859c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100289, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7308859c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100289, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7308859c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3631} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3684} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100289, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7308859c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100289, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7308859c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100289, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7308859c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100289, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7308859c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100289, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7308859c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100289, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7308859c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 1242, "ppid": 1, "tid": 100289, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7308859c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17377, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17377, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452123993319, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452134082761, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452134082761, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452134082761, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452134082761, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452553881776, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452553881776, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17378, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452553881776, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17379, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452553881776, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17380, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452553881776, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17381, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452553881776, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17378, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452553881776, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17379, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452553881776, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17380, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452553881776, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17381, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584452794082676, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1223288} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584453804654643, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1223649} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1223649} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100290, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "743983bb-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100290, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "743983bb-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100290, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "743983bb-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3224} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3277} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100290, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "743983bb-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100290, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "743983bb-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100290, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "743983bb-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100290, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "743983bb-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 357} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 410} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100290, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "743983bb-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100290, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "743983bb-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 1242, "ppid": 1, "tid": 100290, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "743983bb-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17382, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17382, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454124243001, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454134101141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454134101141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454134101141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454134101141, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584454824464327, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1226066} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584455553865301, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584455553865301, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17383, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584455553865301, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17384, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584455553865301, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17385, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584455553865301, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17386, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584455553865301, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17383, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584455553865301, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17384, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584455553865301, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17385, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584455553865301, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17386, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584455833894270, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1227258} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1227258} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100291, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "756ac10a-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100291, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "756ac10a-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100291, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "756ac10a-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2413} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2466} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100291, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "756ac10a-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100291, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "756ac10a-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100291, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "756ac10a-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100291, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "756ac10a-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1188} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1241} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100291, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "756ac10a-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100291, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "756ac10a-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 1242, "ppid": 1, "tid": 100291, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "756ac10a-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17387, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17387, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456123849125, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456133892794, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456133892794, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456133892794, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456133892794, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584456853907891, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1229683} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584457864192805, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1230046} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1230046} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100292, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "769be3b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100292, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "769be3b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100292, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "769be3b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2421} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2474} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100292, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "769be3b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100292, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "769be3b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100292, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "769be3b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100292, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "769be3b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100292, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "769be3b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100292, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "769be3b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100292, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "769be3b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17388, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17388, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458123987075, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458134048959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458134048959, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458554036441, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458554036441, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17389, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458554036441, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17390, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458554036441, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17391, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458554036441, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17392, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458554036441, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17389, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458554036441, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17390, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458554036441, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17391, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458554036441, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17392, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584458884115235, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1233276} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584459893963834, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1233638} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1233638} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100293, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "77cd19b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100293, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "77cd19b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100293, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "77cd19b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3226} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3279} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100293, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "77cd19b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100293, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "77cd19b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100293, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "77cd19b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100293, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "77cd19b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100293, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "77cd19b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100293, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "77cd19b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 1242, "ppid": 1, "tid": 100293, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "77cd19b8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17393, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17393, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460124381599, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460133918341, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460133918341, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460133918341, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460133918341, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584460914179428, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1236071} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584461553865492, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584461553865492, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17394, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584461553865492, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17395, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584461553865492, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17396, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584461553865492, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17397, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584461553865492, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17394, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584461553865492, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17395, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584461553865492, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17396, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584461553865492, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17397, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584461923912427, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1237253} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1237253} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100294, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "78fe3b95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100294, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "78fe3b95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100294, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "78fe3b95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2429} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2482} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100294, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "78fe3b95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100294, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "78fe3b95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100294, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "78fe3b95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100294, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "78fe3b95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1178} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1231} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100294, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "78fe3b95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100294, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "78fe3b95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100294, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "78fe3b95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17398, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17398, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462124322794, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462134585695, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462134585695, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584462943852502, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1239690} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584463954020571, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1240052} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1240052} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100295, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7a2f9e17-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100295, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7a2f9e17-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100295, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7a2f9e17-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2433} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2486} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100295, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7a2f9e17-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100295, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7a2f9e17-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100295, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7a2f9e17-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100295, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7a2f9e17-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100295, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7a2f9e17-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100295, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7a2f9e17-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 1242, "ppid": 1, "tid": 100295, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7a2f9e17-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17399, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17399, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464124066201, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464134054163, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464134054163, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464134054163, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464134054163, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464554000636, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464554000636, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17400, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464554000636, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17401, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464554000636, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17402, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464554000636, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17403, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464554000636, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17400, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464554000636, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17401, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464554000636, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17402, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464554000636, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17403, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584464973968246, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1243280} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584465984232722, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1243644} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1243644} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100296, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7b60c808-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100296, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7b60c808-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100296, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7b60c808-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3224} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3277} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100296, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7b60c808-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100296, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7b60c808-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100296, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7b60c808-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100296, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7b60c808-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100296, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7b60c808-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100296, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7b60c808-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 1242, "ppid": 1, "tid": 100296, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7b60c808-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17404, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17404, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466124059516, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466134185415, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466134185415, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466134185415, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584466134185415, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584467003966475, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1246080} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584467554802913, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584467554802913, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17405, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584467554802913, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17406, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584467554802913, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17407, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584467554802913, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17408, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584467554802913, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17405, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584467554802913, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17406, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584467554802913, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17407, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584467554802913, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17408, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468014109522, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1247264} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1247264} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100297, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7c91bf95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100297, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7c91bf95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100297, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7c91bf95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2432} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2485} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100297, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7c91bf95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100297, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7c91bf95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100297, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7c91bf95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100297, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7c91bf95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1180} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1233} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100297, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7c91bf95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100297, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7c91bf95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100297, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7c91bf95-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17409, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17409, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468124321035, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468134325669, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584468134325669, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584469024225210, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1249696} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470034008763, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1250061} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1250061} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100298, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7dc2f3b2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100298, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7dc2f3b2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100298, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7dc2f3b2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2428} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2481} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100298, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7dc2f3b2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100298, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7dc2f3b2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100298, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7dc2f3b2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100298, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7dc2f3b2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100298, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7dc2f3b2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100298, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7dc2f3b2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100298, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7dc2f3b2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17410, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17410, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470124099629, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470553934589, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470553934589, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17411, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470553934589, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17412, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470553934589, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17413, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470553934589, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17414, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470553934589, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17411, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470553934589, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17412, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470553934589, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17413, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584470553934589, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17414, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584471053899008, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1253290} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472064051405, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1253653} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1253653} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100299, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7ef42f45-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100299, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7ef42f45-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100299, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7ef42f45-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3225} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3278} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100299, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7ef42f45-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100299, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7ef42f45-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100299, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7ef42f45-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100299, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7ef42f45-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100299, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7ef42f45-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100299, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7ef42f45-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 1242, "ppid": 1, "tid": 100299, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "7ef42f45-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17415, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17415, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472124502542, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472134235058, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472134235058, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472134235058, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584472134235058, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584473084679458, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1256091} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584473554810204, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584473554810204, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17416, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584473554810204, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17417, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584473554810204, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17418, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584473554810204, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17419, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584473554810204, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17416, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584473554810204, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17417, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584473554810204, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17418, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584473554810204, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17419, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474094375838, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1257267} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1257267} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100300, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "80254e83-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100300, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "80254e83-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100300, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "80254e83-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2434} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2487} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100300, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "80254e83-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100300, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "80254e83-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100300, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "80254e83-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100300, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "80254e83-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1172} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1225} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100300, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "80254e83-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100300, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "80254e83-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100300, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "80254e83-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17420, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17420, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474124184605, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474134546537, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584474134546537, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584475114006376, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1259697} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1260063} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1260063} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100301, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "81568824-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100301, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "81568824-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100301, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "81568824-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2426} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2479} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100301, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "81568824-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100301, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "81568824-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100301, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "81568824-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100301, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "81568824-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 362} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 415} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100301, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "81568824-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100301, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "81568824-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 1242, "ppid": 1, "tid": 100301, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "81568824-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17421, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17421, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476123862887, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476133895763, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476133895763, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476133895763, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476133895763, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476554137112, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476554137112, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17422, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476554137112, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17423, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476554137112, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17424, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476554137112, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17425, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476554137112, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17422, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476554137112, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17423, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476554137112, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17424, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584476554137112, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17425, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584477143922864, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1263292} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478124887597, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1263292} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478124887597, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478124887597, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478124887597, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478124887597, "pid": 1242, "ppid": 1, "tid": 100302, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8287a8a8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478124887597, "pid": 1242, "ppid": 1, "tid": 100302, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8287a8a8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478124887597, "pid": 1242, "ppid": 1, "tid": 100302, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8287a8a8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3225} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478124887597, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3278} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478124887597, "pid": 1242, "ppid": 1, "tid": 100302, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8287a8a8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478124887597, "pid": 1242, "ppid": 1, "tid": 100302, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8287a8a8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478124887597, "pid": 1242, "ppid": 1, "tid": 100302, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8287a8a8-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17426, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478124887597, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17426, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478124887597, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478133865563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478133865563, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584478154181514, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1265132} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584479163878471, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1265496} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584479554103913, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584479554103913, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17427, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584479554103913, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17428, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584479554103913, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17429, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584479554103913, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17430, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584479554103913, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17427, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584479554103913, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17428, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584479554103913, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17429, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584479554103913, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17430, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_open_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480013902334, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "ret_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "upath1": "/etc/cron.d", "flags": 1179652, "ret_fd1": 5, "mode": 59400, "retval": 5} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480013902334, "pid": 1141, "ppid": 1, "tid": 100079, "uid": 0, "cpu_id": 0, "exec": "cron", "subjprocuuid": "b57805cf-467a-11e9-ae92-080027fc76ba", "subjthruuid": "b4c323d6-467a-11e9-ae33-080027fc76ba", "arg_objuuid1": "09806a61-b72a-5859-aab7-43fff9583fdc", "fd": 5, "retval": 0} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1265496} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100303, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "83b8f0a0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100303, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "83b8f0a0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100303, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "83b8f0a0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1836} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1889} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100303, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "83b8f0a0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100303, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "83b8f0a0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100303, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "83b8f0a0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100303, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "83b8f0a0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100303, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "83b8f0a0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100303, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "83b8f0a0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100303, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "83b8f0a0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17431, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17431, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480124033425, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584480183908239, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1269081} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584481194513468, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1269446} +{"event": "audit:event:aue_socket:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584481254270566, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "ret_objuuid1": "8464f2f3-467e-11e9-aed2-080027fc76ba", "ret_fd1": 4, "retval": 4} +{"event": "audit:event:aue_connect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584481254270566, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "8464f2f3-467e-11e9-aed2-080027fc76ba", "fd": 4, "address": "74.6.168.73", "port": 123, "retval": 0} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584481254270566, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "8464f2f3-467e-11e9-aed2-080027fc76ba", "fd": 4, "retval": 0} +{"event": "udp:kernel:none:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584481254270566, "tid": 100092, "uid": 123, "so_uuid": "b5434a9c-467a-11e9-ae89-080027fc76ba", "lport": 123, "fport": 123, "laddr": "10.0.2.15", "faddr": "74.6.168.73"} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584481254270566, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "b5434a9c-467a-11e9-ae89-080027fc76ba", "ret_msgid": 17432, "fd": 22, "address": "74.6.168.73", "port": 123, "retval": 48} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584481254270566, "pid": 1028, "ppid": 1, "tid": 100092, "uid": 123, "cpu_id": 0, "exec": "ntpd", "subjprocuuid": "b5358eab-467a-11e9-ae89-080027fc76ba", "subjthruuid": "b5358a58-467a-11e9-ae89-080027fc76ba", "arg_objuuid1": "b541acd0-467a-11e9-ae89-080027fc76ba", "ret_msgid": 17433, "fd": 3, "retval": 99} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584481254270566, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b2110-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17433, "upath1": "/", "fd": 8, "address": "", "retval": 99} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1269446} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100304, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "84ea2cc5-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100304, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "84ea2cc5-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100304, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "84ea2cc5-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3581} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3634} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100304, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "84ea2cc5-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100304, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "84ea2cc5-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100304, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "84ea2cc5-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100304, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "84ea2cc5-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100304, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "84ea2cc5-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100304, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "84ea2cc5-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 1242, "ppid": 1, "tid": 100304, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "84ea2cc5-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17434, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17434, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482124160835, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482133833202, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482133833202, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482133833202, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482133833202, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482214320927, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1272763} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482554127838, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482554127838, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17435, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482554127838, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17436, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482554127838, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17437, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482554127838, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17438, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482554127838, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17435, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482554127838, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17436, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482554127838, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17437, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584482554127838, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17438, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584483224438472, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1273950} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1273950} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100305, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "861b4a36-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100305, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "861b4a36-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100305, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "861b4a36-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3313} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3366} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100305, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "861b4a36-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100305, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "861b4a36-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100305, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "861b4a36-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100305, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "861b4a36-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1183} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1236} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100305, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "861b4a36-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100305, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "861b4a36-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 1242, "ppid": 1, "tid": 100305, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "861b4a36-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17439, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17439, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484124549854, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484133856444, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484133856444, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484133856444, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484133856444, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584484244311279, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1276392} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584485254610173, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1276757} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584485554055465, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584485554055465, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17440, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584485554055465, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17441, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584485554055465, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17442, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584485554055465, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17443, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584485554055465, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17440, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584485554055465, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17441, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584485554055465, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17442, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584485554055465, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17443, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1276757} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100306, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "874c731b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100306, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "874c731b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100306, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "874c731b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2438} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2491} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100306, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "874c731b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100306, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "874c731b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100306, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "874c731b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100306, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "874c731b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100306, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "874c731b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100306, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "874c731b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100306, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "874c731b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17444, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17444, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486124573757, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486133937745, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486133937745, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584486273915410, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1280067} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584487284828533, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1280430} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1280430} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100307, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "887d9c4c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100307, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "887d9c4c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100307, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "887d9c4c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3306} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3359} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100307, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "887d9c4c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100307, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "887d9c4c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100307, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "887d9c4c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100307, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "887d9c4c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100307, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "887d9c4c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100307, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "887d9c4c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 1242, "ppid": 1, "tid": 100307, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "887d9c4c-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17445, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17445, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488124300049, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488133895741, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488133895741, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488133895741, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488133895741, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488304430211, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1282864} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488554032827, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488554032827, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17446, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488554032827, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17447, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488554032827, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17448, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488554032827, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17449, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488554032827, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17446, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488554032827, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17447, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488554032827, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17448, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584488554032827, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17449, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584489314110483, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1284046} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1284046} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100308, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "89aebb56-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100308, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "89aebb56-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100308, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "89aebb56-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2430} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2483} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100308, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "89aebb56-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100308, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "89aebb56-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100308, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "89aebb56-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100308, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "89aebb56-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1178} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1231} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100308, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "89aebb56-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100308, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "89aebb56-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100308, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "89aebb56-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17450, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17450, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490123842997, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490133853052, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490133853052, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584490333831535, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1286488} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584491344558360, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1286849} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584491553878990, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584491553878990, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17451, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584491553878990, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17452, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584491553878990, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17453, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584491553878990, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17454, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584491553878990, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17451, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584491553878990, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17452, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584491553878990, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17453, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584491553878990, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17454, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1286849} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100309, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8ae00bbd-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100309, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8ae00bbd-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100309, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8ae00bbd-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2438} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2491} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100309, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8ae00bbd-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100309, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8ae00bbd-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100309, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8ae00bbd-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100309, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8ae00bbd-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 357} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 410} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100309, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8ae00bbd-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100309, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8ae00bbd-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100309, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8ae00bbd-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17455, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17455, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492124051666, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492133997455, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492133997455, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584492364302282, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1290166} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584493374204607, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1290531} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1290531} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100310, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8c1115f3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100310, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8c1115f3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100310, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8c1115f3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3313} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3366} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100310, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8c1115f3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100310, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8c1115f3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100310, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8c1115f3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100310, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8c1115f3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100310, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8c1115f3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100310, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8c1115f3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 1242, "ppid": 1, "tid": 100310, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8c1115f3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17456, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17456, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494123841560, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494133856389, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494133856389, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494133856389, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494133856389, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494394619608, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1292971} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494554778756, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494554778756, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17457, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494554778756, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17458, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494554778756, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17459, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494554778756, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17460, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494554778756, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17457, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494554778756, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17458, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494554778756, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17459, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584494554778756, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17460, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584495404277052, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1294156} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1294156} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100311, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8d4242d2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100311, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8d4242d2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100311, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8d4242d2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2436} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2489} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100311, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8d4242d2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100311, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8d4242d2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100311, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8d4242d2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100311, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8d4242d2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1181} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1234} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100311, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8d4242d2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100311, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8d4242d2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100311, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8d4242d2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17461, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17461, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496123875716, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496134877797, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496134877797, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584496423910610, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1296587} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584497433831100, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1296953} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584497554705118, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584497554705118, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17462, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584497554705118, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17463, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584497554705118, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17464, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584497554705118, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17465, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584497554705118, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17462, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584497554705118, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17463, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584497554705118, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17464, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584497554705118, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17465, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1296953} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100312, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8e738e97-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100312, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8e738e97-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100312, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8e738e97-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2427} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2480} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100312, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8e738e97-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100312, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8e738e97-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100312, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8e738e97-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100312, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8e738e97-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 362} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 415} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100312, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8e738e97-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100312, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8e738e97-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100312, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8e738e97-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17466, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17466, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498124133887, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584498454210284, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1300272} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584499464335120, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1300637} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1300637} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100313, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8fa49ad9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100313, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8fa49ad9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100313, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8fa49ad9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3315} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3368} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100313, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8fa49ad9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100313, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8fa49ad9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100313, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8fa49ad9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100313, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8fa49ad9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100313, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8fa49ad9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100313, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8fa49ad9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 1242, "ppid": 1, "tid": 100313, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "8fa49ad9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17467, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17467, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500123896603, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500134366800, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500134366800, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500134366800, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500134366800, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500483887426, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1303076} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500554503965, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500554503965, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17468, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500554503965, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17469, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500554503965, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17470, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500554503965, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17471, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500554503965, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17468, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500554503965, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17469, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500554503965, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17470, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584500554503965, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17471, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584501494302543, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1304265} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1304265} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100314, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "90d5c988-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100314, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "90d5c988-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100314, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "90d5c988-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2435} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2488} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100314, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "90d5c988-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100314, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "90d5c988-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100314, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "90d5c988-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100314, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "90d5c988-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1185} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1238} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100314, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "90d5c988-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100314, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "90d5c988-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100314, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "90d5c988-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17472, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17472, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502123867508, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502134290151, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502134290151, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584502513870224, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1306700} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584503524253487, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1307063} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584503554042783, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584503554042783, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17473, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584503554042783, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17474, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584503554042783, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17475, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584503554042783, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17476, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584503554042783, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17473, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584503554042783, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17474, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584503554042783, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17475, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584503554042783, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17476, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1307063} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100315, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9206e99d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100315, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9206e99d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100315, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9206e99d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2431} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2484} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100315, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9206e99d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100315, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9206e99d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100315, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9206e99d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100315, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9206e99d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100315, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9206e99d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100315, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9206e99d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100315, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9206e99d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17477, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17477, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504124277208, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504134185279, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504134185279, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584504544447345, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1310377} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584505554355040, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1310742} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1310742} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100316, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "933837b3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100316, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "933837b3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100316, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "933837b3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3310} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3363} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100316, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "933837b3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100316, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "933837b3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100316, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "933837b3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100316, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "933837b3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100316, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "933837b3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100316, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "933837b3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 1242, "ppid": 1, "tid": 100316, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "933837b3-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17478, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17478, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506124678482, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506134086102, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506134086102, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506134086102, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506134086102, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506553910240, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506553910240, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17479, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506553910240, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17480, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506553910240, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17481, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506553910240, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17482, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506553910240, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17479, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506553910240, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17480, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506553910240, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17481, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506553910240, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17482, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584506574579623, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1313977} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584507584139091, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1314341} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1314341} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100317, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "94695299-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100317, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "94695299-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100317, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "94695299-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3231} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3284} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100317, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "94695299-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100317, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "94695299-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100317, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "94695299-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100317, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "94695299-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100317, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "94695299-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100317, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "94695299-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 1242, "ppid": 1, "tid": 100317, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "94695299-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17483, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17483, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508123906119, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508134002991, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508134002991, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508134002991, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508134002991, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584508604648975, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1316778} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584509554614294, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584509554614294, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17484, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584509554614294, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17485, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584509554614294, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17486, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584509554614294, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17487, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584509554614294, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17484, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584509554614294, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17485, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584509554614294, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17486, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584509554614294, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17487, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584509613880343, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1317963} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1317963} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100318, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "959a705b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100318, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "959a705b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100318, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "959a705b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2433} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2486} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100318, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "959a705b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100318, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "959a705b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100318, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "959a705b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100318, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "959a705b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1181} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1234} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100318, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "959a705b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100318, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "959a705b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100318, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "959a705b-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17488, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17488, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510124234916, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510133914229, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510133914229, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584510634359060, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1320397} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584511644593812, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1320761} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1320761} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100319, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "96cbca62-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100319, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "96cbca62-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100319, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "96cbca62-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2430} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2483} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100319, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "96cbca62-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100319, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "96cbca62-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100319, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "96cbca62-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100319, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "96cbca62-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100319, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "96cbca62-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100319, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "96cbca62-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 1242, "ppid": 1, "tid": 100319, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "96cbca62-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17489, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17489, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512124918227, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512133923572, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512133923572, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512133923572, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512133923572, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512553869015, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512553869015, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17490, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512553869015, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17491, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512553869015, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17492, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512553869015, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17493, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512553869015, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17490, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512553869015, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17491, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512553869015, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17492, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512553869015, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17493, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584512664093577, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1323991} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584513674669025, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1324352} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1324352} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100320, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "97fcdb1d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100320, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "97fcdb1d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100320, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "97fcdb1d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3226} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3279} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100320, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "97fcdb1d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100320, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "97fcdb1d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100320, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "97fcdb1d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100320, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "97fcdb1d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 357} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 410} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100320, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "97fcdb1d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100320, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "97fcdb1d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 1242, "ppid": 1, "tid": 100320, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "97fcdb1d-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17494, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17494, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514124150510, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514133876580, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514133876580, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514133876580, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514133876580, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584514684242442, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1326787} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584515554205471, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584515554205471, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17495, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584515554205471, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17496, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584515554205471, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17497, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584515554205471, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17498, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584515554205471, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17495, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584515554205471, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17496, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584515554205471, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17497, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584515554205471, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17498, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584515693838384, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1327972} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1327972} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100321, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "992e06e0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100321, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "992e06e0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100321, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "992e06e0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2431} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2484} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100321, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "992e06e0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100321, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "992e06e0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100321, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "992e06e0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100321, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "992e06e0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1181} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1234} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100321, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "992e06e0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100321, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "992e06e0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100321, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "992e06e0-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17499, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17499, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516124360495, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516134265541, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516134265541, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584516714081398, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1330402} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584517724681292, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1330767} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1330767} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100322, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9a5f2710-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100322, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9a5f2710-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100322, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9a5f2710-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2426} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2479} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100322, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9a5f2710-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100322, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9a5f2710-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100322, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9a5f2710-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100322, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9a5f2710-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100322, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9a5f2710-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100322, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9a5f2710-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100322, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9a5f2710-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17500, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17500, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518124274759, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518133899975, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518133899975, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518553885761, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518553885761, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17501, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518553885761, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17502, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518553885761, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17503, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518553885761, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17504, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518553885761, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17501, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518553885761, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17502, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518553885761, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17503, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518553885761, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17504, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584518744305271, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1333999} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584519754223593, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1334362} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1334362} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100323, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9b904b55-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100323, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9b904b55-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100323, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9b904b55-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3228} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3281} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100323, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9b904b55-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100323, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9b904b55-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100323, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9b904b55-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100323, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9b904b55-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 359} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 412} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100323, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9b904b55-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100323, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9b904b55-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 1242, "ppid": 1, "tid": 100323, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9b904b55-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17505, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17505, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520123852571, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520133863831, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520133863831, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520133863831, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520133863831, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584520774189856, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1336799} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584521554215819, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584521554215819, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17506, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584521554215819, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17507, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584521554215819, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17508, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584521554215819, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17509, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584521554215819, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17506, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584521554215819, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17507, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584521554215819, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17508, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584521554215819, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17509, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584521783851194, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1337976} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1337976} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100324, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9cc1b0fe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100324, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9cc1b0fe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100324, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9cc1b0fe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2433} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2486} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100324, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9cc1b0fe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100324, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9cc1b0fe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100324, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9cc1b0fe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100324, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9cc1b0fe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1173} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1226} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100324, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9cc1b0fe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100324, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9cc1b0fe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100324, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9cc1b0fe-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17510, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17510, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522123950585, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522134308729, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522134308729, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584522804691991, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1340408} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584523814374395, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1340770} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1340770} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100325, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9df2a958-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100325, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9df2a958-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100325, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9df2a958-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2428} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2481} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100325, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9df2a958-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100325, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9df2a958-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100325, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9df2a958-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100325, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9df2a958-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 358} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 411} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100325, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9df2a958-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100325, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9df2a958-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100325, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9df2a958-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17511, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17511, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524124255426, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524553830255, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524553830255, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17512, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524553830255, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17513, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524553830255, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17514, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524553830255, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17515, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524553830255, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17512, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524553830255, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17513, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524553830255, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17514, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524553830255, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17515, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584524833882781, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1343998} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584525844244311, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1344363} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1344363} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100326, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9f23e394-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100326, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9f23e394-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100326, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9f23e394-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3224} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3277} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100326, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9f23e394-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100326, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9f23e394-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100326, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9f23e394-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100326, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9f23e394-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100326, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9f23e394-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100326, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9f23e394-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 1242, "ppid": 1, "tid": 100326, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "9f23e394-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17516, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17516, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526123853790, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526133912957, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526133912957, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526133912957, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526133912957, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584526864425768, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1346803} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584527554179549, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584527554179549, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17517, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584527554179549, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17518, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584527554179549, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17519, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584527554179549, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17520, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584527554179549, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17517, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584527554179549, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17518, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584527554179549, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17519, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584527554179549, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17520, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584527873868158, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1347987} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1347987} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100327, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a0550519-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100327, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a0550519-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100327, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a0550519-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2436} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2489} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100327, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a0550519-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100327, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a0550519-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100327, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a0550519-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100327, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a0550519-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1180} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1233} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100327, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a0550519-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100327, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a0550519-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100327, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a0550519-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17521, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17521, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528124277292, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528134373032, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528134373032, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584528893909521, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1350423} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584529904552028, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1350788} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530023823654, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530023823654, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_fcntl:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530023823654, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "fd": 3, "retval": 2, "fcntl_cmd": 3} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530023823654, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 50} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1350788} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100328, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a18632fa-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100328, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a18632fa-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100328, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a18632fa-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2432} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2485} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100328, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a18632fa-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100328, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a18632fa-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100328, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a18632fa-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100328, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a18632fa-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100328, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a18632fa-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100328, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a18632fa-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100328, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a18632fa-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17522, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17522, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530123865486, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530553901676, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530553901676, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17523, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530553901676, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17524, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530553901676, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17525, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530553901676, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17526, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530553901676, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17523, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530553901676, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17524, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530553901676, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17525, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530553901676, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17526, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584530914278379, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1354512} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584531924739198, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1354877} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1354877} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100329, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a2b77802-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100329, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a2b77802-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100329, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a2b77802-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 3720} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 3773} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100329, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a2b77802-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100329, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a2b77802-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100329, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a2b77802-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100329, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a2b77802-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 361} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 414} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100329, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a2b77802-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100329, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a2b77802-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 1242, "ppid": 1, "tid": 100329, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a2b77802-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17527, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17527, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532124353290, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532134238147, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532134238147, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532134238147, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532134238147, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584532944226918, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1357311} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533453917788, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533453917788, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533524320820, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533524320820, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533553973195, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533553973195, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17528, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533553973195, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17529, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533553973195, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17530, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533553973195, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17531, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533553973195, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17528, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533553973195, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17529, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533553973195, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17530, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533553973195, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17531, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533664389072, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533664389072, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533793943107, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533793943107, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533953875340, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1359167} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533963993042, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584533963993042, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534033874891, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534033874891, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1359167} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100330, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a3e898e9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100330, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a3e898e9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100330, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a3e898e9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 2430} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 2483} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100330, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a3e898e9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100330, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a3e898e9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100330, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a3e898e9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100330, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a3e898e9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1852} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 1905} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100330, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a3e898e9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100330, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a3e898e9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100330, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a3e898e9-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17532, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17532, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534123885255, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534133870863, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534133870863, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 0, "retval": 1} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "arg_objuuid1": "ed281817-20f6-7e52-b620-7e7b827e05af", "fd": 2, "retval": 1} +{"event": "audit:event:aue_fork:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1282, "ppid": 1281, "tid": 100107, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "d7b5a811-467a-11e9-aea9-080027fc76ba", "subjthruuid": "d68b31af-467a-11e9-aea9-080027fc76ba", "ret_objuuid1": "a4040771-467e-11e9-aed2-080027fc76ba", "ret_objuuid2": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_pid": 1575, "retval": 1575} +{"event": "audit:event:aue_execve:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1575, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "bash", "subjprocuuid": "a4040771-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "d1524fc4-3a5e-855b-9e3a-5d212b8581ed", "arg_objuuid2": "27ec417a-1419-0858-9914-a67d9808b904", "upath1": "/usr/bin/whoami", "upath2": "/libexec/ld-elf.so.1", "retval": -1, "cmdline": "whoami"} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1575, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "a4040771-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "ret_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "upath1": "/etc/libmap.conf", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1575, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "a4040771-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 47} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1575, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "a4040771-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "17896ffd-a9e4-c755-a4a9-412945c7b90c", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1575, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "a4040771-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "ret_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "upath1": "/var/run/ld-elf.so.hints", "flags": 1048576, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1575, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "a4040771-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 128} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1575, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "a4040771-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 81} +{"event": "audit:event:aue_close:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1575, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "a4040771-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "58ea8ea9-f0ae-855c-aef0-404acc85bce2", "fd": 3, "retval": 0} +{"event": "audit:event:aue_openat_rwtc:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1575, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "a4040771-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "ret_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "upath1": "/lib/libc.so.7", "flags": 3145728, "fd": -100, "ret_fd1": 3, "mode": 0, "retval": 3} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1575, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "a4040771-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1575, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "a4040771-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2396160, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1575, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "a4040771-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1575, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "a4040771-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2400256, "arg_mem_flags": ["PROT_READ"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1575, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "a4040771-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_mmap:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534304220238, "pid": 1575, "ppid": 1282, "tid": 100120, "uid": 1003, "cpu_id": 0, "exec": "whoami", "subjprocuuid": "a4040771-467e-11e9-aed2-080027fc76ba", "subjthruuid": "e0c838c5-467a-11e9-aeaa-080027fc76ba", "arg_objuuid1": "de4160ec-95f8-cb51-b895-6278f1cb229c", "fd": 3, "retval": 2916352, "arg_mem_flags": ["PROT_READ", "PROT_EXEC"], "arg_mem_other_flags": ["MAP_PRIVATE"]} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584534974108811, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1363923} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584535984365741, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1364287} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1364287} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_preadv:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "ret_miouuid": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 0} +{"event": "audit:event:aue_mprotect:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "retval": 0, "arg_mem_flags": ["PROT_NONE"]} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100331, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a519c3c2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100331, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a519c3c2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100331, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a519c3c2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 4752} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4805} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100331, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a519c3c2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100331, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a519c3c2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 12} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100331, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a519c3c2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 8} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100331, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a519c3c2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 360} +{"event": "audit:event:aue_write:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100168, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "d9795abb-467d-11e9-aec3-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 413} +{"event": "audit:event:aue_pwrite:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100331, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a519c3c2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1", "fd": 8, "retval": 4} +{"event": "audit:event:aue_pread:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100331, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a519c3c2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "825e9d78-8dfc-a257-bc8d-d06bd7a25609", "fd": 9, "retval": 0} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 1242, "ppid": 1, "tid": 100331, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "a519c3c2-467e-11e9-aed2-080027fc76ba", "arg_objuuid1": "ca0a6fcb-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17533, "fd": 3, "retval": 112} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17533, "upath1": "/", "fd": 9, "address": "", "retval": 112} +{"event": "audit:event:aue_writev:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536123882231, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "86836dec-ed75-5552-b5ed-c25e1255414b", "fd": 19, "retval": 88} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536133912092, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536133912092, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536133912092, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 4} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536133912092, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "d979352e-467d-11e9-aec3-080027fc76ba", "fd": 14, "retval": 46} +{"event": "audit:event:aue_read:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536553942487, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "e393303b-721f-8457-9f72-2da477847b65", "fd": 3, "retval": 156} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536553942487, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17534, "fd": 8, "retval": 237} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536553942487, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17535, "fd": 8, "retval": 76} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536553942487, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17536, "fd": 8, "retval": 86} +{"event": "audit:event:aue_sendto:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536553942487, "pid": 605, "ppid": 1, "tid": 100075, "uid": 0, "cpu_id": 0, "exec": "devd", "subjprocuuid": "b4fde811-467a-11e9-ae67-080027fc76ba", "subjthruuid": "b146e4da-467a-11e9-ae02-080027fc76ba", "arg_objuuid1": "b693e0fc-467a-11e9-ae9b-080027fc76ba", "ret_msgid": 17537, "fd": 8, "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536553942487, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17534, "upath1": "/", "fd": 9, "address": "", "retval": 237} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536553942487, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17535, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536553942487, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17536, "upath1": "/", "fd": 9, "address": "", "retval": 86} +{"event": "audit:event:aue_recvfrom:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536553942487, "pid": 725, "ppid": 1, "tid": 100085, "uid": 0, "cpu_id": 0, "exec": "syslogd", "subjprocuuid": "b50b64f4-467a-11e9-ae7b-080027fc76ba", "subjthruuid": "b4f60375-467a-11e9-ae59-080027fc76ba", "arg_objuuid1": "b50b436a-467a-11e9-ae7b-080027fc76ba", "ret_msgid": 17537, "upath1": "/", "fd": 9, "address": "", "retval": 76} +{"event": "audit:event:aue_lseek:", "host": "dc53375b-4149-46ac-9570-64b1090f28fd", "time": 1552584536994272133, "pid": 1242, "ppid": 1, "tid": 100097, "uid": 0, "cpu_id": 0, "exec": "dlogd", "subjprocuuid": "ca0ad94b-467a-11e9-ae9b-080027fc76ba", "subjthruuid": "ca0ad3b0-467a-11e9-ae9b-080027fc76ba", "arg_objuuid1": "c4673949-cad4-c653-94ca-ec5243c65b55", "fd": 7, "retval": 1367524} diff --git a/with_dlogd/cdm/sample1.cdm.bin b/with_dlogd/cdm/sample1.cdm.bin new file mode 100644 index 0000000..f8b71d1 --- /dev/null +++ b/with_dlogd/cdm/sample1.cdm.bin @@ -0,0 +1,5420 @@ +Objavro.codecnullavro.schema„¯{"type": "record", "name": "TCCDMDatum", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": [{"type": "record", "name": "Host", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": {"type": "fixed", "name": "UUID", "namespace": "com.bbn.tc.schema.avro.cdm20", "size": 16}, "name": "uuid", "doc": "universally unique identifier for the host"}, {"type": "string", "name": "hostName", "doc": "hostname or machine name"}, {"type": "string", "name": "ta1Version", "doc": "* For debugging and analysis, the TA2 and TA3 teams would\n * like to have the TA1 version number included in the CDM\n * output. This string gets populated from the contents of a\n * well known file, either /etc/tc-version or\n * \\Windows\\System32\\drivers\\etc\\tc-version. This file\n * contains a date timestamp (down to second granularity) and\n * hash (that incorporates all components of the system\n * including configs and translator)."}, {"type": ["null", {"type": "array", "items": {"type": "record", "name": "HostIdentifier", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "string", "name": "idType"}, {"type": "string", "name": "idValue"}], "doc": "Host identifier, such as serial number, IMEI number"}}], "name": "hostIdentifiers", "default": null, "doc": "list of identifiers, such as serial number, IMEI number"}, {"type": ["null", "string"], "name": "osDetails", "default": null, "doc": "OS level details revealed by tools such as uname -a"}, {"type": {"type": "enum", "name": "HostType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["HOST_MOBILE", "HOST_SERVER", "HOST_DESKTOP", "HOST_OTHER"], "doc": "* HostType enumerates the host roles or device types"}, "name": "hostType", "doc": "host's role or device type, such as mobile, server, desktop"}, {"type": ["null", {"type": "array", "items": {"type": "record", "name": "Interface", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "string", "name": "name"}, {"type": "string", "name": "macAddress"}, {"type": ["null", {"type": "array", "items": "string"}], "name": "ipAddresses", "default": null}], "doc": "Interface name and addresses"}}], "name": "interfaces", "default": null, "doc": "names and addresses of network interfaces"}], "doc": "* Hosts represent a host/machine/node in a network."}, {"type": "record", "name": "Principal", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "A unique id for the principal"}, {"type": {"type": "enum", "name": "PrincipalType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["PRINCIPAL_LOCAL", "PRINCIPAL_REMOTE"], "doc": "* PrincipalType identifies the type of user: either local to the\n * host, or remote users/systems."}, "name": "type", "default": "PRINCIPAL_LOCAL", "doc": "The type of the principal, local by default"}, {"type": "string", "name": "userId", "doc": "The operating system identifier associated with the user"}, {"type": ["null", "string"], "name": "username", "default": null, "doc": "Human-readable string identifier, such as username (Optional)"}, {"type": ["null", {"type": "array", "items": "string"}], "name": "groupIds", "default": null, "doc": "The ids of the groups which this user is part of"}, {"type": ["null", {"type": "map", "values": "string"}], "name": "properties", "default": null, "order": "ignore", "doc": "* Arbitrary key, value pairs describing the entity.\n * NOTE: This attribute is meant as a temporary place holder for items that\n * will become first-class attributes in the next CDM version."}], "doc": "* A principal is a local user\n * TODO: extend to include remote principals\n * TODO: what happens when the user information changes (are we tracking versions?)\n * TODO: Authentication mechanisms: are TA1s providing that information and how?"}, {"type": "record", "name": "ProvenanceTagNode", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "tagId", "doc": "Tag ID for this node *"}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "flowObject", "default": null, "doc": "* The UUID of the source or sink object associated with this\n * tag. (Optional)\n *\n * This attribute is optional because if the\n * ProvenanceTagNode is simply joining two existing\n * provenances (e.g., when two values are added together), there\n * is no flow object associated with that definition.\n *"}, {"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "subject", "doc": "Subject that is performing the src/sink action *"}, {"type": ["null", "string"], "name": "systemCall", "default": null, "doc": "System call that read/wrote the data *"}, {"type": ["null", "string"], "name": "programPoint", "default": null, "doc": "The program point where the event was triggered (e.g., executable and line number), (Optional)"}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "prevTagId", "default": null, "doc": "The previous tag for this value *"}, {"type": ["null", {"type": "enum", "name": "TagOpCode", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["TAG_OP_UNION", "TAG_OP_ENCODE", "TAG_OP_STRONG", "TAG_OP_MEDIUM", "TAG_OP_WEAK"], "doc": "* The tag opcode describes the provenance relation i.e., how multiple sources are combined to\n * produce the output. We identify the following provenance relations"}], "name": "opcode", "default": null, "doc": "Tag operation that resulted in the tagId of this ProvenanceTagNode *"}, {"type": ["null", {"type": "array", "items": "com.bbn.tc.schema.avro.cdm20.UUID"}], "name": "tagIds", "default": null}, {"type": ["null", {"type": "enum", "name": "IntegrityTag", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["INTEGRITY_UNTRUSTED", "INTEGRITY_BENIGN", "INTEGRITY_INVULNERABLE"], "doc": "* The integrity tag may be used to specify the initial integrity of an entity,\n * or to endorse its content after performing appropriate checking/sanitization."}], "name": "itag", "default": null, "doc": "The integrity tag may be used to specify the intial\n * integrity of an entity, or to endorse it content after\n * performing appropriate checking/sanitization."}, {"type": ["null", {"type": "enum", "name": "ConfidentialityTag", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["CONFIDENTIALITY_SECRET", "CONFIDENTIALITY_SENSITIVE", "CONFIDENTIALITY_PRIVATE", "CONFIDENTIALITY_PUBLIC"], "doc": "* The confidentiality tag may be used to specify the initial confidentiality of an entity,\n * or to declassify its content after performing appropriate checking/sanitization."}], "name": "ctag", "default": null, "doc": "* The confidentiality tag may be used to specify the initial\n * confidentiality of an entity, or to declassify its content\n * after performing appropriate checking/sanitization."}, {"type": ["null", {"type": "map", "values": "string"}], "name": "properties", "default": null, "order": "ignore", "doc": "* Arbitrary key, value pairs describing the entity.\n * NOTE: This attribute is meant as a temporary place holder for items that\n * will become first-class attributes in the next CDM version."}], "doc": "* A provenance tag defines source dependence on specific data sources (inputs).\n * A tag identifier is typically bound to a source and used by the tracking system to\n * capture dependence on this source input.\n *\n * ProvenanceTagNode defines one step of provenance for a value\n * (i.e., one read from a source or write to a sink), a reference\n * to the previous provenance of the value (if any), and the tag\n * operation that resulted the tagId of this ProvenanceTagNode"}, {"type": "record", "name": "UnknownProvenanceNode", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "upnTagId", "doc": "Tag ID for this node *"}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "subject", "default": null, "doc": "the subject that generated this UnknownProvenanceNode, optional"}, {"type": ["null", "string"], "name": "programPoint", "default": null, "doc": "The program point where the node was created\n (e.g., executable and line number), (Optional)"}, {"type": ["null", {"type": "map", "values": "string"}], "name": "properties", "default": null, "order": "ignore", "doc": "* Arbitrary key, value pairs describing the entity.\n * NOTE: This attribute is meant as a temporary place holder for items that\n * will become first-class attributes in the next CDM version."}], "doc": "* An UnknownProvenanceNode communicates that a Value (of an\n * Event) has unknown provenance. This record can be used anywhere\n * a ProvenanceTagNode can be used. \n *\n * Example use cases from the ClearScope team: During the early\n * stages of device boot we are not tracking; files are written\n * during these stages, and when they are later read, we would\n * like to report the (earliest) provenance as unknown. Also, for\n * some processes we do not have our full-precision tracking\n * enabled, and we would like to communicate to the TA2 analyses\n * that a Value has unknown provenance, but that the value was\n * generated by a particular program, possibly at a particular\n * program point.\n * \n * Semantically, if a Value is tagged with an\n * UnknownProvenanceNode with a Subject, this means that the Value\n * could have any provenance generated by that Subject up to the\n * point the UnknownProvnenanceNode was generated.\n *\n * If a Value is tagged with an UnknownProvenanceNode with no\n * subject, it should be conservatively interpreted as meaning the\n * value could have any \"provenance\" defined by the system up to\n * the point the UnknownProvenanceNode was created."}, {"type": "record", "name": "Subject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "universally unique identifier for the subject"}, {"type": {"type": "enum", "name": "SubjectType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["SUBJECT_PROCESS", "SUBJECT_THREAD", "SUBJECT_UNIT", "SUBJECT_BASIC_BLOCK", "SUBJECT_OTHER"], "doc": "* SubjectType enumerates the types of execution contexts supported.\n *\n * SUBJECT_PROCESS, process\n * SUBJECT_THREAD, thread within a process\n * SUBJECT_UNIT so far we only know of TRACE BEEP using this"}, "name": "type", "doc": "the subject type"}, {"type": "int", "name": "cid", "doc": "Context ID: OS process id for type process, thread id for threads"}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "parentSubject", "default": null, "doc": "* parent subject's UUID. For a process, this is a parent\n * process. For a thread, this is the process that created the\n * thread. Only optional because in some cases the parent may not\n * be known; null value indicates that the parent is unknown."}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "localPrincipal", "default": null, "doc": "* UUID of local principal that owns this subject This\n * attribute is optional because there are times when\n * the owner of the subject may not be known at the time the file\n * object is reported (e.g., missed open call). Otherwise,\n * the local principal SHOULD be included."}, {"type": ["null", "long"], "name": "startTimestampNanos", "default": null, "doc": "* The start time of the subject\n * A timestamp stores the number of nanoseconds from the unix epoch, 1 January 1970 00:00:00.000000 UTC.\n *\n * This attribute is optional because there are times when the\n * subject's start time may not be known. This happens when\n * the subject was started before TC instrumentation software\n * was started. Otherwise, the timestamp SHOULD be included."}, {"type": ["null", "int"], "name": "unitId", "default": null, "doc": "unit id for unit based instrumentation (Optional)"}, {"type": ["null", "int"], "name": "iteration", "default": null, "doc": "iteration and count are used for distinguishing individual \"units\" of execution (Optional)"}, {"type": ["null", "int"], "name": "count", "default": null}, {"type": ["null", "string"], "name": "cmdLine", "default": null, "doc": "Process command line arguments including process name (Optional)"}, {"type": ["null", {"type": "enum", "name": "PrivilegeLevel", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["LIMITED", "ELEVATED", "FULL"], "doc": "* Windows allows Subjects (processes) to have the following\n * enumerated privilege levels."}], "name": "privilegeLevel", "default": null, "doc": "Windows allows processes to have different privilege levels (Optional)"}, {"type": ["null", {"type": "array", "items": "string"}], "name": "importedLibraries", "default": null, "doc": "* imported libraries. (Optional). Lists the libraries that\n * are expected to be loaded, but may not necessarily\n * correspond 1-to-1 with actual load library events because\n * some libraries may already be loaded when this event\n * occurs."}, {"type": ["null", {"type": "array", "items": "string"}], "name": "exportedLibraries", "default": null, "doc": "exported libraries. (Optional)"}, {"type": ["null", {"type": "map", "values": "string"}], "name": "properties", "default": null, "order": "ignore", "doc": "* Arbitrary key, value pairs describing the entity.\n * NOTE: This attribute is meant as a temporary place holder for items that\n * will become first-class attributes in the next CDM version."}], "doc": "* Subjects represent execution contexts and include mainly threads and processes. They can be more granular and\n * can represent other execution boundaries such as units and blocks if needed."}, {"type": "record", "name": "FileObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "Universally unique identifier for the object"}, {"type": {"type": "record", "name": "AbstractObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": ["null", {"type": "fixed", "name": "SHORT", "namespace": "com.bbn.tc.schema.avro.cdm20", "size": 2}], "name": "permission", "default": null, "doc": "Permission bits defined over the object (Optional)"}, {"type": ["null", "int"], "name": "epoch", "default": null, "doc": "* Used to track when an object is deleted and a new one is\n * created with the same identifier. This is useful for when\n * UUIDs are based on something not likely to be unique, such\n * as file path."}, {"type": ["null", {"type": "map", "values": "string"}], "name": "properties", "default": null, "order": "ignore", "doc": "* Arbitrary key, value pairs describing the entity.\n * NOTE: This attribute is meant as a temporary place holder for items that\n * will become first-class attributes in the next CDM version."}], "doc": "* Objects, in general, represent data sources and sinks which\n * could include sockets, files, memory, and any data in general\n * that can be an input and/or output to an event. This record\n * is intended to be abstract i.e., one should not instantiate an\n * Object but rather instantiate one of its sub types (ie,\n * encapsulating records) FileObject, UnnamedPipeObject,\n * RegistryKeyObject, NetFlowObject, MemoryObject, or\n * SrcSinkObject."}, "name": "baseObject", "doc": "The base object attributes"}, {"type": {"type": "enum", "name": "FileObjectType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["FILE_OBJECT_BLOCK", "FILE_OBJECT_CHAR", "FILE_OBJECT_DIR", "FILE_OBJECT_FILE", "FILE_OBJECT_LINK", "FILE_OBJECT_PEFILE", "FILE_OBJECT_UNIX_SOCKET"], "doc": "* These types enumerate the types of FileObjects"}, "name": "type", "doc": "The type of FileObject"}, {"type": ["null", "int"], "name": "fileDescriptor", "default": null, "doc": "The file descriptor (Optional)"}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "localPrincipal", "default": null, "doc": "UUID of local principal that owns this file object. This\n * attribute is optional because there are times when \n * the owner of the file may not be known at the time the file\n * object is reported (e.g., missed open call). Otherwise,\n * the local principal SHOULD be included."}, {"type": ["null", "long"], "name": "size", "default": null, "doc": "* The file size in bytes (Optional). This attribute reports\n * the file size at the time the FileObject is created. Since records\n * are not updated, changes in file size is trackable via the events\n * that changed the file size."}, {"type": ["null", "string"], "name": "peInfo", "default": null, "doc": "* portable execution (PE) info for windows (Optional).\n * Note from FiveDirections: We will LIKELY change this type for engagement 3"}, {"type": ["null", {"type": "array", "items": {"type": "record", "name": "CryptographicHash", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": {"type": "enum", "name": "CryptoHashType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["MD5", "SHA1", "SHA256", "SHA512", "AUTHENTIHASH", "SSDEEP", "IMPHASH"], "doc": "Cryptographich hash types"}, "name": "type", "doc": "The type of hash used"}, {"type": "string", "name": "hash", "doc": "The base64 encoded hash value"}], "doc": "* Cryptographic hash records represent one or more cryptographic hashes for\n * an object, typically, a FileObject."}}], "name": "hashes", "default": null, "doc": "(Optional) Zero or more cryptographic hashes over the FileObject"}], "doc": "* Represents a file on the file system. Instantiates an AbstractObject."}, {"type": "record", "name": "IpcObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "Universally unique identifier for the object"}, {"type": "com.bbn.tc.schema.avro.cdm20.AbstractObject", "name": "baseObject", "doc": "The base object attributes"}, {"type": {"type": "enum", "name": "IpcObjectType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["IPC_OBJECT_PIPE_NAMED", "IPC_OBJECT_PIPE_UNNAMED", "IPC_OBJECT_SOCKET_ABSTRACT", "IPC_OBJECT_SOCKET_PAIR", "IPC_OBJECT_SOCKET_PATHNAME", "IPC_OBJECT_SOCKET_UNNAMED", "IPC_OBJECT_WINDOWS_ALPC", "IPC_OBJECT_WINDOWS_MAILSLOT", "IPC_OBJECT_SOCKET_NETLINK"], "doc": "* These types enumerate the types of IpcObjects"}, "name": "type", "doc": "The type of IpcObject"}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "uuid1", "default": null, "doc": "* If flow is unidirectional, then source is UUID1/fd1 and\n * destination is UUID2/fd2."}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "uuid2", "default": null}, {"type": ["null", "int"], "name": "fd1", "default": null}, {"type": ["null", "int"], "name": "fd2", "default": null}], "doc": "* Represents an IPC. Instantiates an AbstractObject."}, {"type": "record", "name": "RegistryKeyObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "Universally unique identifier for the object"}, {"type": "com.bbn.tc.schema.avro.cdm20.AbstractObject", "name": "baseObject", "doc": "The base object attributes"}, {"type": "string", "name": "key", "doc": "The registry key/path"}, {"type": ["null", {"type": "record", "name": "Value", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "int", "name": "size", "default": -1, "doc": "The size of the value: the number of elements of type valueDataType; -1 for non-arrays"}, {"type": {"type": "enum", "name": "ValueType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["VALUE_TYPE_SRC", "VALUE_TYPE_SINK", "VALUE_TYPE_CONTROL"], "doc": "* A value type is either source, sink, or control This is for\n * Event parameters to distinguish source/sink values vs control\n * parameters (such as a file descriptor)."}, "name": "type", "doc": "The type indicates whether it's a source, sink, or control value"}, {"type": {"type": "enum", "name": "ValueDataType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["VALUE_DATA_TYPE_BYTE", "VALUE_DATA_TYPE_BOOL", "VALUE_DATA_TYPE_CHAR", "VALUE_DATA_TYPE_SHORT", "VALUE_DATA_TYPE_INT", "VALUE_DATA_TYPE_FLOAT", "VALUE_DATA_TYPE_LONG", "VALUE_DATA_TYPE_DOUBLE", "VALUE_DATA_TYPE_POINTER32", "VALUE_DATA_TYPE_POINTER64", "VALUE_DATA_TYPE_COMPLEX"], "doc": "* A value data type is one of the primitive data types. A string is treated as a char array"}, "name": "valueDataType", "doc": "The actual datatype of the value elements, e.g., int, double, byte, etc. (Optional)\n * Strings are treated as char[] so type=CHAR\n * String[] is a COMPLEX value whose components are the string values (each modeled as a char[])\n * Complex composite objects comprising of primitive values use the COMPLEX type"}, {"type": "boolean", "name": "isNull", "default": false, "doc": "Whether this value is null, needed to indicate null objects (default: false)"}, {"type": ["null", "string"], "name": "name", "default": null, "doc": "the name of the Value, string. (Optional)"}, {"type": ["null", "string"], "name": "runtimeDataType", "default": null, "doc": "The runtime data type of the value (Optional); For example, an object of dataType=COMPLEX, can have\n * a runtime data type of say \"MyClass\""}, {"type": ["null", "bytes"], "name": "valueBytes", "default": null, "doc": "* The actual bytes of the value in Big Endian format, e.g.,\n * an int is converted to a 4 byte buffer (Optional)\n *\n * Strings are represented as an array of UTF32_BE encoded\n * characters (i.e., 4 bytes per char)"}, {"type": ["null", {"type": "array", "items": {"type": "record", "name": "ProvenanceAssertion", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "asserter", "doc": "Which Subject is making this assertion?"}, {"type": ["null", {"type": "array", "items": "com.bbn.tc.schema.avro.cdm20.UUID"}], "name": "sources", "default": null, "doc": "Object(s) that this Value's data came from."}, {"type": ["null", {"type": "array", "items": "com.bbn.tc.schema.avro.cdm20.ProvenanceAssertion"}], "name": "provenance", "default": null, "doc": "* Further provenance assertions within this assertion.\n\t * For example, to describe a situation in which X asserts that\n\t * Y asserts that Z asserts that V came from {p,q}:\n\t *\n\t * ```\n\t * Event {\n\t * subject = X,\n\t * parameters = [\n\t * Value (V) {\n\t * provenance = [\n\t * ProvenanceAssertion {\n\t * asserter = UUID of X,\n\t * sources = [ UUID of p, UUID of q ],\n\t * provenance = [\n\t * ProvenanceAssertion {\n\t * asserter = UUID of Y,\n\t * provenance = [\n\t * ProvenanceAssertion {\n\t * asserter = UUID of Z,\n\t * },\n\t * ],\n\t * },\n\t * ],\n\t * },\n\t * ],\n\t * },\n\t * ],\n\t * }\n\t * ```\n\t * Z should have a provenance assertion\n\t * e.g.,\n * \"X asserts that Y asserts that Z comes from {p,q}\"."}], "doc": "* An assertion about the provenance of information"}}], "name": "provenance", "default": null, "doc": "* Assertions about the provenance of this value\n * (e.g., the file that data is claimed to come from).\n *\n * This is a direct assertion about provenance for systems that don't\n * use tags to track data flows."}, {"type": ["null", {"type": "array", "items": {"type": "record", "name": "TagRunLengthTuple", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "int", "name": "numValueElements", "default": 0}, {"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "tagId"}], "doc": "* This record is a single tuple in a run length encoding of tags"}}], "name": "tag", "default": null, "doc": "* The value's tag expression describing its provenance (Optional)\n * Since value could be an array, the tag can use run length encoding if needed."}, {"type": ["null", {"type": "array", "items": "com.bbn.tc.schema.avro.cdm20.Value"}], "name": "components", "default": null, "doc": "A complex value might comprise other component values if needed (Optional)"}], "doc": "* Values represent transient data, mainly parameters to\n * events. Values are created and used once within an event's\n * execution and are relevant mainly during fine-grained tracking\n * (such as with tag/taint propagation). Values have tags\n * describing their provenance. Sometimes the actual value's value\n * is reported in addition to the value's metadata\n *\n * The size of the value is the number of elements of type\n * valueDataType. This should be -1 for primitive and complex\n * types. For arrays, the size is the array length. i.e., if\n * size >= 0, then this value is an array. A complex value (such as\n * an object) can contain other values (primitives or other\n * complex values) within it, as components.\n *\n * Examples:
\n *\n * an integer will have size=-1 and valueDataType=INT, and\n * valueBytes.length=4 bytes
\n *\n * an int[4] will have size=4 and valueDataType=INT, and\n * valueBytes.length=16 bytes (4*4)
\n *\n * a string s=\"abc\" has size=3 and valueDataType=CHAR, and\n * valueBytes.length=12 bytes (UTF32_BE encoding; 4 bytes per\n * char)
\n *\n * an MyClass obj has size=-1, valueDataType=COMPLEX,\n * runtimeDataType=\"MyClass\", valueBytes=
"}], "name": "value", "default": null, "doc": "The value of the key"}, {"type": ["null", "long"], "name": "size", "default": null, "doc": "The entry size in bytes (Optional)"}], "doc": "* Represents a registry key. Instantiates an AbstractObject."}, {"type": "record", "name": "PacketSocketObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "Universally unique identifier for the object"}, {"type": "com.bbn.tc.schema.avro.cdm20.AbstractObject", "name": "baseObject", "doc": "The base object attributes"}, {"type": "com.bbn.tc.schema.avro.cdm20.SHORT", "name": "proto", "doc": "Physical-layer protocol"}, {"type": "int", "name": "ifIndex", "doc": "Interface number"}, {"type": "com.bbn.tc.schema.avro.cdm20.SHORT", "name": "haType", "doc": "ARP hardware type"}, {"type": {"type": "fixed", "name": "BYTE", "namespace": "com.bbn.tc.schema.avro.cdm20", "size": 1}, "name": "pktType", "doc": "Packet type"}, {"type": "bytes", "name": "addr", "doc": "Physical-layer address"}], "doc": "* Represents a packet socket. Instantiates an AbstractObject."}, {"type": "record", "name": "NetFlowObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "Universally unique identifier for the object"}, {"type": "com.bbn.tc.schema.avro.cdm20.AbstractObject", "name": "baseObject", "doc": "The base object attributes"}, {"type": ["null", "string"], "name": "localAddress", "default": null, "doc": "* The local IP address for this flow. Optional for when not\n * obtained initially."}, {"type": ["null", "int"], "name": "localPort", "default": null, "doc": "* The local network port for this flow. Optional for AF_UNIX\n * sockets (unnamed and abstract), or for when not obtained\n * initially."}, {"type": ["null", "string"], "name": "remoteAddress", "default": null, "doc": "* The remote IP address for this flow. Optional for binds\n * that are a listening action and not a full connection, or\n * for when not obtained initially."}, {"type": ["null", "int"], "name": "remotePort", "default": null, "doc": "* The remote network port for this flow. Optional for binds\n * that are a listening action and not a full connection. Also\n * optional for AF_UNIX sockets (unnamed and abstract) and for\n * when not obtained intially."}, {"type": ["null", "int"], "name": "ipProtocol", "default": null, "doc": "The IP protocol number e.g., TCP=6"}, {"type": ["null", "int"], "name": "initTcpSeqNum", "default": null, "doc": "* The initial sequence number for a TCP connection (use the\n * SYN from the initiator). This is to correlate flows across\n * hosts for improved cross-host tracking."}, {"type": ["null", "int"], "name": "fileDescriptor", "default": null, "doc": "The file descriptor (Optional)"}], "doc": "* Represents a network flow object. Instantiates an AbstractObject."}, {"type": "record", "name": "MemoryObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "Universally unique identifier for the object"}, {"type": "com.bbn.tc.schema.avro.cdm20.AbstractObject", "name": "baseObject", "doc": "The base object attributes"}, {"type": "long", "name": "memoryAddress", "doc": "The memory address"}, {"type": ["null", "long"], "name": "pageNumber", "default": null, "doc": "(Optional) decomposed memory addressed into pageNumber and pageOffset"}, {"type": ["null", "long"], "name": "pageOffset", "default": null}, {"type": ["null", "long"], "name": "size", "default": null, "doc": "The entry size in bytes (Optional)"}], "doc": "* Represents a page in memory. Instantiates an AbstractObject.\n * TODO: is memory really an object (with permissions and so on) or is it a transient data?"}, {"type": "record", "name": "SrcSinkObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "Universally unique identifier for the object"}, {"type": "com.bbn.tc.schema.avro.cdm20.AbstractObject", "name": "baseObject", "doc": "The base object attributes"}, {"type": {"type": "enum", "name": "SrcSinkType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["SRCSINK_ACCELEROMETER", "SRCSINK_TEMPERATURE", "SRCSINK_GYROSCOPE", "SRCSINK_MAGNETIC_FIELD", "SRCSINK_HEART_RATE", "SRCSINK_LIGHT", "SRCSINK_PROXIMITY", "SRCSINK_PRESSURE", "SRCSINK_RELATIVE_HUMIDITY", "SRCSINK_LINEAR_ACCELERATION", "SRCSINK_MOTION", "SRCSINK_STEP_DETECTOR", "SRCSINK_STEP_COUNTER", "SRCSINK_TILT_DETECTOR", "SRCSINK_ROTATION_VECTOR", "SRCSINK_GRAVITY", "SRCSINK_GEOMAGNETIC_ROTATION_VECTOR", "SRCSINK_GPS", "SRCSINK_AUDIO", "SRCSINK_SYSTEM_PROPERTY", "SRCSINK_ENV_VARIABLE", "SRCSINK_ACCESSIBILITY_SERVICE", "SRCSINK_ACTIVITY_MANAGEMENT", "SRCSINK_ALARM_SERVICE", "SRCSINK_ANDROID_AUTO", "SRCSINK_ANDROID_RADIO", "SRCSINK_ANDROID_TV", "SRCSINK_ANDROID_VR", "SRCSINK_AUDIO_IO", "SRCSINK_AUTOFILL", "SRCSINK_BACKUP_MANAGER", "SRCSINK_BINDER", "SRCSINK_BLUETOOTH", "SRCSINK_BOOT_EVENT", "SRCSINK_BROADCAST_RECEIVER_MANAGEMENT", "SRCSINK_CAMERA", "SRCSINK_CLIPBOARD", "SRCSINK_COMPANION_DEVICE", "SRCSINK_COMPONENT_MANAGEMENT", "SRCSINK_CONTENT_PROVIDER", "SRCSINK_CONTENT_PROVIDER_MANAGEMENT", "SRCSINK_DATABASE", "SRCSINK_DEVICE_ADMIN", "SRCSINK_DEVICE_SEARCH", "SRCSINK_DEVICE_USER", "SRCSINK_DISPLAY", "SRCSINK_DROPBOX", "SRCSINK_EMAIL", "SRCSINK_EXPERIMENTAL", "SRCSINK_FILE", "SRCSINK_FILE_SYSTEM", "SRCSINK_FILE_SYSTEM_MANAGEMENT", "SRCSINK_FINGERPRINT", "SRCSINK_FLASHLIGHT", "SRCSINK_GATEKEEPER", "SRCSINK_HDMI", "SRCSINK_IDLE_DOCK_SCREEN", "SRCSINK_IMS", "SRCSINK_INFRARED", "SRCSINK_INSTALLED_PACKAGES", "SRCSINK_JSSE_TRUST_MANAGER", "SRCSINK_KEYCHAIN", "SRCSINK_KEYGUARD", "SRCSINK_LOCATION", "SRCSINK_LOWPAN", "SRCSINK_MACHINE_LEARNING", "SRCSINK_MBMS", "SRCSINK_MEDIA", "SRCSINK_MEDIA_CAPTURE", "SRCSINK_MEDIA_LOCAL_MANAGEMENT", "SRCSINK_MEDIA_LOCAL_PLAYBACK", "SRCSINK_MEDIA_NETWORK_CONNECTION", "SRCSINK_MEDIA_REMOTE_PLAYBACK", "SRCSINK_MIDI", "SRCSINK_NATIVE", "SRCSINK_NETWORK", "SRCSINK_NETWORK_MANAGEMENT", "SRCSINK_NFC", "SRCSINK_NOTIFICATION", "SRCSINK_OVERLAY_MANAGER", "SRCSINK_PAC_PROXY", "SRCSINK_PERMISSIONS", "SRCSINK_PERSISTANT_DATA", "SRCSINK_POSIX", "SRCSINK_POWER_MANAGEMENT", "SRCSINK_PRINT_SERVICE", "SRCSINK_PROCESS_MANAGEMENT", "SRCSINK_QUICK_SETTINGS", "SRCSINK_RECEIVER_MANAGEMENT", "SRCSINK_RCS", "SRCSINK_RPC", "SRCSINK_SCREEN_AUDIO_CAPTURE", "SRCSINK_SERIAL_PORT", "SRCSINK_SERVICE_CONNECTION", "SRCSINK_SERVICE_MANAGEMENT", "SRCSINK_SHORTCUTS", "SRCSINK_SMS_MMS", "SRCSINK_SPEECH_INTERACTION", "SRCSINK_STATUS_BAR", "SRCSINK_SYNC_FRAMEWORK", "SRCSINK_SYSTEM_UPDATE", "SRCSINK_TASK_STACK", "SRCSINK_TELEPHONY", "SRCSINK_TEST", "SRCSINK_TEXT_SERVICES", "SRCSINK_THREADING", "SRCSINK_TIME_EVENT", "SRCSINK_UI", "SRCSINK_UID_EVENT", "SRCSINK_UI_AUTOMATION", "SRCSINK_UI_MODE", "SRCSINK_UI_RPC", "SRCSINK_USAGE_STATS", "SRCSINK_USB", "SRCSINK_USER_ACCOUNTS_MANAGEMENT", "SRCSINK_USER_INPUT", "SRCSINK_VIBRATOR", "SRCSINK_WAKE_LOCK", "SRCSINK_WALLPAPER_MANAGER", "SRCSINK_WAP", "SRCSINK_WEB_BROWSER", "SRCSINK_WIDGETS", "SRCSINK_IPC", "SRCSINK_UNKNOWN"], "doc": "* There are many types of sources such as sensors. The type of a\n * sensor could be base (close to hardware) or composite. This is\n * mostly (only?) applicable to the Android platform. See\n * https://source.android.com/devices/sensors/index.html for\n * details."}, "name": "type", "doc": "The type of the object"}, {"type": ["null", "int"], "name": "fileDescriptor", "default": null, "doc": "The file descriptor (Optional)"}], "doc": "* Represents a generic source or sink on the host device that is can be a file, memory, or netflow.\n * This is the most basic representation of a source or sink, basically specifying its type only."}, {"type": "record", "name": "Event", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "A universally unique identifier for the event"}, {"type": ["null", "long"], "name": "sequence", "default": null, "doc": "* A logical sequence number for ordering events relative to\n * each other within a subject's execution context\n *\n * This attribute is only optional for inferred events, such\n * as an object's attribute change that was observed without\n * an explicit event or system call."}, {"type": {"type": "enum", "name": "EventType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["EVENT_ACCEPT", "EVENT_ADD_OBJECT_ATTRIBUTE", "EVENT_BIND", "EVENT_BLIND", "EVENT_BOOT", "EVENT_CHANGE_PRINCIPAL", "EVENT_CHECK_FILE_ATTRIBUTES", "EVENT_CLONE", "EVENT_CLOSE", "EVENT_CONNECT", "EVENT_CORRELATION", "EVENT_CREATE_OBJECT", "EVENT_CREATE_THREAD", "EVENT_DUP", "EVENT_EXECUTE", "EVENT_EXIT", "EVENT_FLOWS_TO", "EVENT_FCNTL", "EVENT_FORK", "EVENT_LINK", "EVENT_LOADLIBRARY", "EVENT_LOGCLEAR", "EVENT_LOGIN", "EVENT_LOGOUT", "EVENT_LSEEK", "EVENT_MMAP", "EVENT_MODIFY_FILE_ATTRIBUTES", "EVENT_MODIFY_PROCESS", "EVENT_MOUNT", "EVENT_MPROTECT", "EVENT_OPEN", "EVENT_OTHER", "EVENT_READ", "EVENT_READ_SOCKET_PARAMS", "EVENT_RECVFROM", "EVENT_RECVMSG", "EVENT_RENAME", "EVENT_SENDTO", "EVENT_SENDMSG", "EVENT_SERVICEINSTALL", "EVENT_SHM", "EVENT_SIGNAL", "EVENT_STARTSERVICE", "EVENT_TRUNCATE", "EVENT_UMOUNT", "EVENT_UNIT", "EVENT_UNLINK", "EVENT_UPDATE", "EVENT_WAIT", "EVENT_WRITE", "EVENT_WRITE_SOCKET_PARAMS", "EVENT_TEE", "EVENT_SPLICE", "EVENT_VMSPLICE", "EVENT_INIT_MODULE", "EVENT_FINIT_MODULE"], "doc": "* EventType enumerates the most common system calls. Since there\n * are hundreds of possible system calls, enumerating all of them\n * and managing the list across OS versions is a\n * challenge. EVENT_OTHER is the catch all for events not enumerated here. Any events\n * that are expected to be of importance, should be included in this list."}, "name": "type", "doc": "The type of the event"}, {"type": ["null", "int"], "name": "threadId", "default": null, "doc": "* The thread id to which this event belongs. Required for\n * all events, except the EVENT_ADD_OBJECT_ATTRIBUTE and\n * EVENT_FLOWS_TO event."}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "subject", "default": null, "doc": "* UUID of Subject that generated this event. The subject is\n * required for all events, except the\n * EVENT_ADD_OBJECT_ATTRIBUTE and EVENT_FLOWS_TO event."}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "predicateObject", "default": null, "doc": "* UUID of Object/Subject this event acts on. For events that\n * have two arguments, this attribute contains the first\n * argument (following the argument order in the underlying\n * system call). This attribute is optional because it may not\n * be relevant for some events."}, {"type": ["null", "string"], "name": "predicateObjectPath", "default": null, "doc": "If applicable, the object's absolute file path (Optional)"}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "predicateObject2", "default": null, "doc": "* Optional UUID of Object/Subject for events that take two\n * arguments (e.g., link, rename, etc). This attribute\n * contains the second argument (following the argument order\n * in the underlying system call)."}, {"type": ["null", "string"], "name": "predicateObject2Path", "default": null, "doc": "If applicable, the second object's absolute file path (Optional)"}, {"type": "long", "name": "timestampNanos", "doc": "* The time at which the event occurred. Timestamps allow\n * reasoning about order of events on a host when the same\n * clock is used. A timestamp stores the number of nanoseconds\n * from the unix epoch, 1 January 1970 00:00:00.000000 UTC.\n *\n * TODO: When different clocks are used on a host or across\n * hosts, we need to also define a clock source\n *\n * NOTE: When an object update is inferred without an explicit\n * system call event, TA1s may not have an accurate timestamp\n * of when the object was updated. In that case, the timestamp\n * used in the update event is the same as the timestamp used\n * in the next system call event that uses the updated object."}, {"type": ["null", {"type": "array", "items": "string"}], "name": "names", "default": null, "doc": "* Event names (Optional). Multiple names may be provided to\n * allow for reporting many parameterless system calls in a\n * single Event record."}, {"type": ["null", {"type": "array", "items": "com.bbn.tc.schema.avro.cdm20.Value"}], "name": "parameters", "default": null, "doc": "Event parameters represented as values, see Value (Optional)"}, {"type": ["null", "long"], "name": "location", "default": null, "doc": "Location refers to the location of the data affecting the event\n * (e.g., the read offset in the file for the read system call event). (Optional)"}, {"type": ["null", "long"], "name": "size", "default": null, "doc": "Size refers to the size of the data affecting the event\n * (e.g., the number of bytes read from the file for the read system call event). (Optional)"}, {"type": ["null", "string"], "name": "programPoint", "default": null, "doc": "The program point where the event was triggered (e.g., executable and line number). (Optional)"}, {"type": ["null", {"type": "map", "values": "string"}], "name": "properties", "default": null, "order": "ignore", "doc": "* Arbitrary key, value pairs describing the entity.\n * NOTE: This attribute is meant as a temporary place holder for items that\n * will become first-class attributes in the next CDM version."}], "doc": "* Events represent actions executed by subjects on data objects\n * or other subjects. Events are generally system calls, but\n * could also include function calls, instruction executions, or\n * even more abstract notions. Events are the core entity in the\n * data model and they are the main abstraction for representing\n * information flow between data objects and subjects."}, {"type": "record", "name": "UnitDependency", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "unit"}, {"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "dependentUnit"}], "doc": "* This record captures a relationship edge between two units, one\n * dependent on the other. This relationship is inferred from a\n * combination of underlying events."}, {"type": "record", "name": "TimeMarker", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "long", "name": "tsNanos", "doc": "Timestamp in nanoseconds"}], "doc": "* TimeMarker records are used to delineate time periods in a data\n * stream to help consumers know their current read position in the\n * data stream."}, {"type": "record", "name": "EndMarker", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "int", "name": "sessionNumber", "doc": "session number in the corresponding StartMarker"}, {"type": {"type": "map", "values": "string"}, "name": "recordCounts", "order": "ignore", "doc": "* Reports countc of each record type that has been published\n * since the the start of the data stream."}], "doc": "* EndMarker records marks the end of a data stream."}], "name": "datum"}, {"type": "string", "name": "CDMVersion", "default": "20"}, {"type": {"type": "enum", "name": "RecordType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["RECORD_HOST", "RECORD_PRINCIPAL", "RECORD_PROVENANCE_TAG_NODE", "RECORD_UNKNOWN_PROVENANCE_NODE", "RECORD_SUBJECT", "RECORD_FILE_OBJECT", "RECORD_IPC_OBJECT", "RECORD_REGISTRY_KEY_OBJECT", "RECORD_PACKET_SOCKET_OBJECT", "RECORD_NET_FLOW_OBJECT", "RECORD_MEMORY_OBJECT", "RECORD_SRC_SINK_OBJECT", "RECORD_EVENT", "RECORD_UNIT_DEPENDENCY", "RECORD_TIME_MARKER", "RECORD_END_MARKER"], "doc": "*"}, "name": "type", "doc": "The type of record in the union"}, {"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "hostId", "doc": "unique identifier of the host publishing this record"}, {"type": "int", "name": "sessionNumber", "doc": "sequence number that monotonically increases each time the system is started"}, {"type": {"type": "enum", "name": "InstrumentationSource", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["SOURCE_ANDROID_JAVA_CLEARSCOPE", "SOURCE_ANDROID_NATIVE_CLEARSCOPE", "SOURCE_FREEBSD_OPENBSM_TRACE", "SOURCE_FREEBSD_DTRACE_CADETS", "SOURCE_FREEBSD_TESLA_CADETS", "SOURCE_FREEBSD_LOOM_CADETS", "SOURCE_FREEBSD_MACIF_CADETS", "SOURCE_LINUX_SYSCALL_TRACE", "SOURCE_LINUX_NETFILTER_TRACE", "SOURCE_LINUX_PROC_TRACE", "SOURCE_LINUX_BEEP_TRACE", "SOURCE_LINUX_THEIA", "SOURCE_WINDOWS_DIFT_FAROS", "SOURCE_WINDOWS_PSA_FAROS", "SOURCE_WINDOWS_FIVEDIRECTIONS", "SOURCE_WINDOWS_MARPLE", "SOURCE_PVM_CADETS"], "doc": "* InstrumentationSource identifies the source reporting provenance information."}, "name": "source", "doc": "What source generated this record?"}], "doc": "* A record representing either a vertex or an edge. This is the top level record that allows\n * us to easily mix the vertices and edges defined above on the wire.\n *\n * Host records delineate system (re)starts in a data\n * stream. i.e., A data stream MUST start with a Host record and a\n * new session number. TCCDMDatum records that contain a Host\n * record define the Host UUID in the Host record, and MUST also\n * include the same UUID in the TCCDMDatum record's hostId field."}¹”àìñoN^ž$MÙÀÐúÜS7[AIF¬•pd± (ýcadets-bbn´versionn_innfo:translator, 2019 Mar 4 15:33:16, 1833e058956186fe832c4cc2b027c65667a09bcd; ’FreeBSD 13.0-CURRENT FreeBSD 13.0-CURRENT 5da4c1df8d5(HEAD) CADETS amd64em0"08:00:27:fc:76:ba10.0.2.15em1"08:00:27:f9:7a:ba192.168.56.10120ÜS7[AIF¬•pd± (ý +ªa݈ˌûWŒË=ûŠ³20 +ÜS7[AIF¬•pd± (ý™, Bª¢T$µ„äý`Ú0root20ÜS7[AIF¬•pd± (ýµ dôFzé®{'üvºª ™, Bª¢T$µ„äý`ÚhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý|ÎN‰GK:‹æeq¢Â@ê› µ dôFzé®{'üvºªa݈ˌûWŒË=ûŠ³â«øíØúð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1execsyslogd20ÜS7[AIF¬•pd± (ý +ÁU\|ÓŽšXŽÓ㈚i20 +ÜS7[AIF¬•pd± (ý WbÓÃŒHв-Ímbê› µ dôFzé®{'üvºÁU\|ÓŽšXŽÓ㈚iâ«øíØúð‹+aue_writev`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1execsyslogd20ÜS7[AIF¬•pd± (ý +†ƒmìíuURµíÂ^UAK20 +ÜS7[AIF¬•pd± (ý !ßPNš!(JVýbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKâ«øíØúð‹+aue_writev`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý +ã“0;r„WŸr-¤w„{e20 +ÜS7[AIF¬•pd± (ý´ýèFzé®g'üvºº ™, Bª¢T$µ„äý`ÚhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý;£/«$,D»Œg7¿ k@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eš¾þÛúð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý +¶“àüFzé®›'üvº 20 +ÜS7[AIF¬•pd± (ý›—µ¾H݆%«K£™½®JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºš¾þÛúð‹+aue_sendtoÚ +ret_msgid351hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýM» Û¦µGô‡Ÿ|˜ŸŒ| +JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºš¾þÛúð‹+aue_sendto˜ +ret_msgid352hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý}ù.Ù/D亞uZ¸Z³ JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºš¾þÛúð‹+aue_sendto¬ +ret_msgid353hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý^½-_4Bì‘9é<>öJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºš¾þÛúð‹+aue_sendto˜ +ret_msgid354hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý +µ CjFzé®{'üvº 20 +ÜS7[AIF¬•pd± (ýÑ £ÞEB›'?ÁgˆªyDê› µ dôFzé®{'üvºµ CjFzé®{'üvºš¾þÛúð‹+aue_recvfromÚ ret_msgid351hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýO_Â)J‚žÄ»zbaLDê› µ dôFzé®{'üvºµ CjFzé®{'üvºš¾þÛúð‹+aue_recvfrom˜ ret_msgid352hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý=ÀšíK¢®ŒQƒßëfDê› µ dôFzé®{'üvºµ CjFzé®{'üvºš¾þÛúð‹+aue_recvfrom¬ ret_msgid353hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýSžíRÚ²@  Ôƒ9.êvDê› µ dôFzé®{'üvºµ CjFzé®{'üvºš¾þÛúð‹+aue_recvfrom˜ ret_msgid354hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý +Äg9IÊÔÆS”ÊìRCÆ[U20 +ÜS7[AIF¬•pd± (ýÊ +ÙKFzé®›'üvº´™, Bª¢T$µ„äý`ÚhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÄöV©GM^¡Û¡njM 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÁæÇßúð‹+aue_lseekÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýȯ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦²°Îîúð‹+aue_lseekþ:hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·X;ÒHÃ¥ Ëzðl@0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_lseekþ:hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅèÝò³ZF¢-‰¤AD ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+20ÜS7[AIF¬•pd± (ýj*¶t|H£»~™ê&½B@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™S,lš´IÕŽ{Úú´«ÔëH ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+20ÜS7[AIF¬•pd± (ý(žcÚW C߉d,á]¿F@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·~9´Ê•B"¦o ?RL ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+20ÜS7[AIF¬•pd± (ý@ÌE +CõŠNÏ”~1J@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý””Ì~¸@ù†·üq"N:‚œ Ê +ÙKFzé®›'üvº°•Úðïúð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýä¸ðÁPÐM¿”*l~6¸ÛP@’œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V °•Úðïúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%'¥Ó¡MP³ÜÉJ"òÌ´R@’œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâ«’)cF\«dI Š T@’œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáõÂû JEý¿LÙQZ0KEVb’œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á°•Úðïúð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýHbË‚I܌Ӕ”›+Xb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°•Úðïúð‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +L™N¡zDF˜w¨ÉKžÿëZ@’œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V °•Úðïúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýF&¯ó$KÌEà *Tg\@’œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýt’mÚ‹­@w­|!N‹5M!^@’œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadÌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýkúPMñ».bV«µ`b’œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á°•Úðïúð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅ9Ú]Û @â­*ɬªFbb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°•Úðïúð‹+aue_write¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎ!ÉøÞI«…‰s£/Çd@’œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V °•Úðïúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåƒD™A5–À-ÆmÒ|fJ’œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº°•Úðïúð‹+aue_sendtoÜ +ret_msgid356hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýäI™ÿâ@¯ÿ„…L]ÝhDê› µ dôFzé®{'üvºµ CjFzé®{'üvº°•Úðïúð‹+aue_recvfromÜ ret_msgid356hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýzgÔÜÅE +˜L½L¬¬jbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK°•Úðïúð‹+aue_writev¬hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý²QiÜèÜB¼?1Š°´lD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°•Úðïúð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐh8 +¥¬OÑŽ(#MŽvnD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°•Úðïúð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝLšøÉTB?§nßÙÍ·pD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°•Úðïúð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂm§Ù¤M}¯$ÝÅBð•G’ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+20ÜS7[AIF¬•pd± (ýeã('v K#¯ÓxÃ’Ò@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­û¼O¢™LÔb—ã– ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+20ÜS7[AIF¬•pd± (ýhî>x¼öLs$j,îµ”@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$匇I®‚q–Âë÷˜:‚œ Ê +ÙKFzé®›'üvº¤‹Øãþúð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²3÷­¿MS¶Ó†žž“0©š@”œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤‹Øãþúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU? ßBz¶6¤Èµû}5œ@”œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½Ž‰È¥D~©\¾þh²' +ž@”œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+aue_preadò1hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ˜ú6ÆGÑW +A ˜ÿŸ·2af b”œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤‹Øãþúð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ým©=§.þCø··ü\ÅZ7q¢b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¤‹Øãþúð‹+aue_writeÜ2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’»äM£aJ?žª}Ýn #^¤@”œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤‹Øãþúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢ QлIx›pÏDj‹sõ¦@”œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘×EƒIÂG¬+Är ~ü¨@”œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý VÓÖHEï–"Û-ŸC”ªb”œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤‹Øãþúð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýì’£Þ_.C³§ÃÎppTάb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¤‹Øãþúð‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýEMlFÒ˜šVžv³Ô®@”œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤‹Øãþúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßüžˆótKd’Ÿ§ä¸W,õ°J”œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¤‹Øãþúð‹+aue_sendtoÜ +ret_msgid361hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²¥ÎÀ«KM°(¤3ÍY²Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¤‹Øãþúð‹+aue_recvfromÜ ret_msgid361hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýìÂ+ qIV°mj +õ¿›ƒ´bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¤‹Øãþúð‹+aue_writev¬hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýàåe­ÃÛKòº­»•æỸÊŠœ Öd'“Fz鮨'üvº‹Û÷ %„þ[„%ÿâKþ2/usr/sbin/sshd'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ö΄‰„ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"/usr/sbin/sshd -Rppid1108execsshd20ÜS7[AIF¬•pd± (ý +‰oý©äÇU¤©A)Eǹ 20 +ÜS7[AIF¬•pd± (ý*ó"};EîƒEÓœt–&Ì<Šœ Öd'“Fz鮨'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÖ΄‰„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý6?/Ï3E²Ÿýï:ÕßÎò› µO­öFzé®’'üvºÖdéFz鮨'üvºÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1execsshd20ÜS7[AIF¬•pd± (ýZRÏezN]Š5 ÛÂý»ÐŠœ Öd'“Fz鮨'üvº‰oý©äÇU¤©A)Eǹ Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Xꎩð®…\®ð@JÌ…¼â20 +ÜS7[AIF¬•pd± (ý(äíú„PNˆ’ +”•Æd±^Ò<Šœ Öd'“Fz鮨'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÖ΄‰„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý2ÔÜv-Dx‹3^ÍAÒÔ@Šœ Öd'“Fz鮨'üvºXꎩð®…\®ð@JÌ…¼âÖ΄‰„ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ý蕽Áx¨DòŒÿÕ‡EU-ÖÖŠœ Öd'“Fz鮨'üvºXꎩð®…\®ð@JÌ…¼âÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý + ªV.x±h^±xåNhžõ20 +ÜS7[AIF¬•pd± (ý–±UÈÄ@"¦HÅ> ƒ ØØ<Šœ Öd'“Fz鮨'üvº ªV.x±h^±xåNhžõ(/usr/lib/libpam.so.6Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýêz íLÂc +ÚŠœ Öd'“Fz鮨'üvº ªV.x±h^±xåNhžõÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +LÜÑÄ­Q­ÄºËÁt¤20 +ÜS7[AIF¬•pd± (ýÃwC ³øG®­ D_´‘—ßÜ<Šœ Öd'“Fz鮨'üvºLÜÑÄ­Q­ÄºËÁt¤6/usr/lib/libprivatessh.so.5Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýpË´¸EÞ@ÙŠ½šqmÓ!"òŠœ Öd'“Fz鮨'üvºo˜Em/ÿ_¯m(ÿÓËÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +:]àÀ4hV¨439fç20 +ÜS7[AIF¬•pd± (ýºŒ{ÐQN­Z%—û{RHô<Šœ Öd'“Fz鮨'üvº:]àÀ4hV¨439fç,/usr/lib/libkrb5.so.11Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýгrÎEˆ‹ò©ü±DöŠœ Öd'“Fz鮨'üvº:]àÀ4hV¨439fçÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +/Ÿ€avT¡R¹¤v‹ 20 +ÜS7[AIF¬•pd± (ýS%9ÍgjN³âT­U$¾Wø<Šœ Öd'“Fz鮨'üvº/Ÿ€avT¡R¹¤v‹ */usr/lib/libwrap.so.6Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýZƒ>‘œuKú—ª\»Ÿ’¸úŠœ Öd'“Fz鮨'üvº/Ÿ€avT¡R¹¤v‹ Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +e ÃáMòSU²MR€•SÙâ20 +ÜS7[AIF¬•pd± (ý}'9ÿŠFÌž¢ùÁÏü<Šœ Öd'“Fz鮨'üvºe ÃáMòSU²MR€•SÙâ*/lib/libcrypto.so.111Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýù¬Ö øðGÞ¢øþ j·ü þŠœ Öd'“Fz鮨'üvºe ÃáMòSU²MR€•SÙâÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ÞA`ì•øËQ¸•bxñË"œ20 +ÜS7[AIF¬•pd± (ýÙ'c'jËELœsàÊxô:€<Šœ Öd'“Fz鮨'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý;Lé|]D ‡3àøŸï[›‚Šœ Öd'“Fz鮨'üvºÞA`ì•øËQ¸•bxñË"œÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +æôÆ´|@ïV€|}¢–ïÿ'20 +ÜS7[AIF¬•pd± (ý/N÷;I6¥Hò¼»`JÚ73ú¶:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý•Ý dãƒBã¼@RSãtŒ¸:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýOË Í3)GV¤¡ƒÌGò¾¥º:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý ×zÊ´ND½›Ír¾Ì„¼:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýƪxZsëN)½ãQ1J“>¾:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý™­­\hHŽ£¶0`fz5À:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý£5›òQHì¶l-¸”NÂ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýA7Ù¨jCfµFUÞYÄ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýª¿ç_=Cè¹eM©Ö‹@Æ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýä€B OX·6!?ÛñvÈ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý´ñÔõ O䡼8mŽ$SóÊ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý žÃwbÿNg‚‚š—qp2«Ì:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÆÆÕ;rK<õîâ"”ÉÎ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÐe@·HKKœ´Ú¹¿|8Ð:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýô9$ä¢Kó¸_ÖŽ#SmnÒ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¬% +.ÄGÞ˜]ۮܥŒÔ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýñó×FœKj°¬°à.ÂÝÖ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýä¼Ê¾ûÁMq“â¶÷‰oÖØ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý—¦>‹J¡'ÝoÊV~Ú:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýE6êP›@™•,U»€íXÑÜ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý«·ûZM®†›ÆÁ‘ê—ÚÞ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýl*93eðF ¥zÑéÕHm7à:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý2ì=q'@C€6‡æÉâ:Šœ Öd'“Fz鮨'üvºŒ»¯’„ûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýVrLT–NŸð´ž}z²ä:Šœ Öd'“Fz鮨'üvºŒ»¯’„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +3P ÓK€X‹Ó«·Ø€‘^20 +ÜS7[AIF¬•pd± (ýW\mUK·D²õòI[æ<Šœ Öd'“Fz鮨'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nullŒ»¯’„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý“Ö›3 Ž@Í£"Y@L¹÷H芜 Öd'“Fz鮨'üvº3P ÓK€X‹Ó«·Ø€‘^Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýº™ÙNô¦]RÔê<Šœ Öd'“Fz鮨'üvºe ÃáMòSU²MR€•SÙâ*/lib/libcrypto.so.111Œ»¯’„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýߦJù•N–¡†…_w?¦ìŠœ Öd'“Fz鮨'üvºe ÃáMòSU²MR€•SÙ⌻¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Š*ÃI[®\®[pgŒî 20 +ÜS7[AIF¬•pd± (ýX×õZñ°CG‹r•}ùpðî<Šœ Öd'“Fz鮨'üvºŠ*ÃI[®\®[pgŒî (/etc/ssl/openssl.cnfŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý5 /ÀL™FùøÀ]ÝœˆðŠœ Öd'“Fz鮨'üvºŠ*ÃI[®\®[pgŒî Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ÖeáóFz鮨'üvº20 +ÜS7[AIF¬•pd± (ýêZZ^Œ»O“–ô]—ŠVƒ!òŠœ Öd'“Fz鮨'üvºÖeáóFz鮨'üvºŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Öeå§Fz鮨'üvº20 +ÜS7[AIF¬•pd± (ýå¿Gÿ:DÍ‹2—{jP·ÉôŠœ Öd'“Fz鮨'üvºÖeå§Fz鮨'üvºŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ÜN½Ëê¯+^¯êZ£®+V20 +ÜS7[AIF¬•pd± (ýY¤*î@â²Í|ì*r:‘ö<Šœ Öd'“Fz鮨'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.confŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýn»©>g FC… óó>#¶øŠœ Öd'“Fz鮨'üvºÜN½Ëê¯+^¯êZ£®+VŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ôì{M6N?^Ž6%â?>g20 +ÜS7[AIF¬•pd± (ý¤òüDDCé€[¾ žú<Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbŒ»¯’„ûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý«5<+kI­¬•_¦… +–ü@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÌ…H§BI®œ)«×³d€þ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ýZÐ7ùhtO\¦g~Ⱥ.Ç€@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ý¡¶„ªC¦ŽreèÀ´V‚@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ýä0°h“|F£±LÎC(C}¸„@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÐÖöôÌvG_¡£RuNJŒ†@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ý¯ŠáòæMEb¶¿ßÆ¡ RÙˆ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ý ^çO›K»§ÉñÔ‹ŠxŠ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ýõWÄû3Ck“+óeËî©ŒŠœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +lˆ"÷dÒW’d/ð§«t20 +ÜS7[AIF¬•pd± (ý)f¡µ2QFƒ™CZ“ÄdeŽ<Šœ Öd'“Fz鮨'üvºlˆ"÷dÒW’d/ð§«t2/etc/ssh/ssh_host_rsa_keyŒ»¯’„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýo%>…,MR¾ÏÐòo*¶ÖŠœ Öd'“Fz鮨'üvºlˆ"÷dÒW’d/ð§«tŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýŽïýŠO…3>–M’<Šœ Öd'“Fz鮨'üvºlˆ"÷dÒW’d/ð§«t2/etc/ssh/ssh_host_rsa_keyŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýn}SxÁAЗ™n#ú¦c”Šœ Öd'“Fz鮨'üvºlˆ"÷dÒW’d/ð§«tŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Ø]¿?ˆs%P³ˆüd %,|20 +ÜS7[AIF¬•pd± (ýÂóàHjG©‚S¹³!&A«–<Šœ Öd'“Fz鮨'üvºØ]¿?ˆs%P³ˆüd %,|:/etc/ssh/ssh_host_rsa_key.pubŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýfgع6’F–ŽZèø G!R˜Šœ Öd'“Fz鮨'üvºØ]¿?ˆs%P³ˆüd %,|Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +.Ë=&SY¦î¹SË20 +ÜS7[AIF¬•pd± (ý¹—ËJžP@©Œ”ÑXþuš<Šœ Öd'“Fz鮨'üvº.Ë=&SY¦î¹SË6/etc/ssh/ssh_host_ecdsa_keyŒ»¯’„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÃVâªP†NuºdçÇ?Â9ÂœŠœ Öd'“Fz鮨'üvº.Ë=&SY¦î¹SËŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý˜âÇ?+fNá™,þöHØž<Šœ Öd'“Fz鮨'üvº.Ë=&SY¦î¹SË6/etc/ssh/ssh_host_ecdsa_keyŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý¿©XÒB>ãÛé´ã Šœ Öd'“Fz鮨'üvº.Ë=&SY¦î¹SËŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +>ýpì)¨^©“N¨î<20 +ÜS7[AIF¬•pd± (ýßqS³ÿG‘§ö¢°tÓë¢<Šœ Öd'“Fz鮨'üvº>ýpì)¨^©“N¨î<>/etc/ssh/ssh_host_ecdsa_key.pubŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýˆê›–¬%EuòÞø2“b²¤Šœ Öd'“Fz鮨'üvº>ýpì)¨^©“N¨î<Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +šv*Åõ2PµÅèj 2…(20 +ÜS7[AIF¬•pd± (ýp’‚ôtD¢„.ªéða;ó¦<Šœ Öd'“Fz鮨'üvºšv*Åõ2PµÅèj 2…(:/etc/ssh/ssh_host_ed25519_keyŒ»¯’„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÀ¦ vG·½}mÎÁ†°¨Šœ Öd'“Fz鮨'üvºšv*Åõ2PµÅèj 2…(Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÏsr¥**J`¶•hmãå'ª<Šœ Öd'“Fz鮨'üvºšv*Åõ2PµÅèj 2…(:/etc/ssh/ssh_host_ed25519_keyŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý8O¨§)ÏÔŒáñÂ<Šœ Öd'“Fz鮨'üvºaOr;ó7S³;IF£7;— /etc/resolv.confŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý™‰¯ÞCº©ì@ôë˜aYÄŠœ Öd'“Fz鮨'üvºaOr;ó7S³;IF£7;—Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +5e| DeT„ Ve»20 +ÜS7[AIF¬•pd± (ýò P@¼HkšÃE÷äÃJÆ<Šœ Öd'“Fz鮨'üvº5e| DeT„ Ve»/etc/gss/mechŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý³¦@§ä¤E+‰>8ûþÙP|È<Šœ Öd'“Fz鮨'üvº„/|ÓøgT¸Óætg®Ã:/usr/lib/libgssapi_krb5.so.10Œ»¯’„ûð‹+aue_openat_rwtc +flags0mode ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value6ppid1108execsshd20ÜS7[AIF¬•pd± (ýã³öâv@«²U€|´/usr/lib/libgssapi_spnego.so.10Œ»¯’„ûð‹+aue_openat_rwtc +flags0mode ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value6ppid1108execsshd20ÜS7[AIF¬•pd± (ýãéŸ5@B€„ßâ‡g+Ίœ Öd'“Fz鮨'üvºÃêHߺXŸHغ¶CŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÕžqÏù@o´‘à€Ð:Šœ Öd'“Fz鮨'üvºŒ»¯’„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÆÑ1Ó3rAË€õj®ç;XÒŠœ Öd'“Fz鮨'üvº5e| DeT„ Ve»Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýËeÆ5éBø¯Í€™@kÊÔ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UðˆŸµ…ûð‹+aue_lseekÒ›hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9«¿©Ô±A'‡™<°¿BÕÖ<Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g/etc/spwd.db†¤šä…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ýÕxL%«Â×=ÖsÄØ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý@#Qß Jp æÕ¢†J.Ú@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýã'Z_øNO‘¶…Ã:õEeÜ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýÃJ בI¡­3 |¨ƒ^<Þ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýÈîáfÙAŠµñÑ‹=½à@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýl>q]"¬H|—(> Õ´÷¬â@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý-ŸR MÖ@ ¿«M”(wÈä@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýéc',cÅA¶š^>ô +8•9æ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýþ +$‡K…²rÉá”Pr芜 Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +MTZŸ2S²ŸâÓ‚ˆ20 +ÜS7[AIF¬•pd± (ýUI²ËoHa½®/på4Žê<Šœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.conf†¤šä…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ýn*¹‚"@¿£u˜ÊLæ5슜 Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +áÒÍ!j™Õ\™jJè¼ÕVÙ20 +ÜS7[AIF¬•pd± (ýc­Ì#‚àOÉŒŒñ=~ºøî<Šœ Öd'“Fz鮨'üvºáÒÍ!j™Õ\™jJè¼ÕVÙ/etc/pam.d/sshd†¤šä…ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý +zËŽw•ÏT•w{³tÏy“20 +ÜS7[AIF¬•pd± (ý³¥^®WÀAD­9ÆÆQ'Xð<Šœ Öd'“Fz鮨'üvºzËŽw•ÏT•w{³tÏy“,/usr/lib/pam_opie.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ýÛa¼ÃL@•œ‡ÜP¡Ue6ò"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ý¯ŽÖ’SbGµg@ÏyjôŠœ Öd'“Fz鮨'üvºzËŽw•ÏT•w{³tÏy“†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +sºæ1ÀZ± þZÀm¨20 +ÜS7[AIF¬•pd± (ýx»Ý?eü@¹=©ÒN™Uö<Šœ Öd'“Fz鮨'üvºsºæ1ÀZ± þZÀm¨*/usr/lib/libopie.so.8†¤šä…ûð‹+aue_openat_rwtc +flags0mode ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ý+ÿÞý?ARŒÐÅ&ìΛøŠœ Öd'“Fz鮨'üvºsºæ1ÀZ± þZÀm¨†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +¤×†eo'ŠQ§o{ö¡Šé20 +ÜS7[AIF¬•pd± (ý’¦%: D÷Ž=ÀãÌjú<Šœ Öd'“Fz鮨'üvº¤×†eo'ŠQ§o{ö¡Šé/lib/libmd.so.6†¤šä…ûð‹+aue_openat_rwtc +flags0mode ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýo-/óxDŠ¯‡yƒ½€÷üŠœ Öd'“Fz鮨'üvº¤×†eo'ŠQ§o{ö¡Šé†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýJŽwëãJñ•òVƒÚ:þ:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýuýÜ&D‹‘L yôÝ€:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý‘óÍÂÍåCHŽ…(ä×9ªå‚:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýì±6IG‚M;Ûh§¤„Šœ Öd'“Fz鮨'üvºzËŽw•ÏT•w{³tÏy“†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Lv‹ t½P´ T‹ð½Ï120 +ÜS7[AIF¬•pd± (ý¼Ù¥ùLªI¦¿ º«iïÿ†<Šœ Öd'“Fz鮨'üvºLv‹ t½P´ T‹ð½Ï18/usr/lib/pam_opieaccess.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ý-„‰ZñáD®VÆ"‡ˆ"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýw£R‡·K>¯¨Q!ø4ŠŠœ Öd'“Fz鮨'üvºLv‹ t½P´ T‹ð½Ï1†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÇHÝñ©¬@ô¬ãË‹_|°SŒ:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýàW´,¸#Le˜hˆg÷¢m’ŽŠœ Öd'“Fz鮨'üvºLv‹ t½P´ T‹ð½Ï1†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +½O7PQ\V‘ѤÖ\ŒR20 +ÜS7[AIF¬•pd± (ýE¿)vN¹ÎÞ-ñÿ<Šœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR,/usr/lib/pam_unix.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ýDW„£ÄJÇ„ÿ|y~x’"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ý^hì>úMÊ·ÚX7­Q¿þ”Šœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ëPï9•^•9Cy^R„20 +ÜS7[AIF¬•pd± (ýGק¯qCÚ–{±~ +”>"–<Šœ Öd'“Fz鮨'üvºëPï9•^•9Cy^R„./usr/lib/libypclnt.so.4†¤šä…ûð‹+aue_openat_rwtc +flags0mode ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýÈí¡†¤Fõ†"½°ù}˜Šœ Öd'“Fz鮨'üvºëPï9•^•9Cy^R„†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý.ݘ­øCÄœ)¥ÃÐ䔚:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý$Š«ƒ÷îDÁŒêÖqê …œœ:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÕ5½*?‹EµÔT{háxŒžŠœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +«öü¯!ÊZQŠ!*aZ3·20 +ÜS7[AIF¬•pd± (ýÿ¢"ïuK=³mǽ¿Øúœ <Šœ Öd'“Fz鮨'üvº«öü¯!ÊZQŠ!*aZ3·2/usr/lib/pam_nologin.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ý¨­L`0H›¸ö{U hߢ"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ý »ÀOxNN°¶±&¤ÝÕÖ¤Šœ Öd'“Fz鮨'üvº«öü¯!ÊZQŠ!*aZ3·†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý€ÐT¬6%IÚ»AZ´¹{¦:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý]ëžš‰HË“ÅufqL¨Šœ Öd'“Fz鮨'üvº«öü¯!ÊZQŠ!*aZ3·†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +<;Иä®QäkQ®ßû20 +ÜS7[AIF¬•pd± (ý¸ÙÌ^õDç®%A¨Jª<Šœ Öd'“Fz鮨'üvº<;Иä®QäkQ®ßûó‹ÛêF‡¸‘Ê4q¥”7ØŠœ Öd'“Fz鮨'üvºÖˆU¾Fz鮩'üvº†¤šä…ûð‹+aue_connect hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108address /var/run/logprivexecsshd20ÜS7[AIF¬•pd± (ýq2µÝï£C3¥L&ƒ¦ø¨*ÚJŠœ Öd'“Fz鮨'üvºÖˆU¾Fz鮩'üvº†¤šä…ûð‹+aue_sendtoÀ +ret_msgid365hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýàíàËù‡IîºÚœ”L»ì)ÜDê› µ dôFzé®{'üvºµ CjFzé®{'üvº†¤šä…ûð‹+aue_recvfromÀ ret_msgid365hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý +ªûzJÙR†]’Ù?òí†Ód20 +ÜS7[AIF¬•pd± (ýò°Ýi_nM ›ŒtéM‡Þbê› µ dôFzé®{'üvºªûzJÙR†]’Ù?òí†Ód†¤šä…ûð‹+aue_writevhostHdc53375b-4149-46ac-9570-64b1090f28fdfd16ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¯ø#M¬¡9G—òŽàŠœ Öd'“Fz鮨'üvºÖˆU¾Fz鮩'üvº†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¨+cd‚@ÿ¥²õ¯ÿŽôfâ<Šœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.conf¸ð†î…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ýüÕA!ßyFBk£ •— q䊜 Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ¸ð†î…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Ö‰¢–Fz鮩'üvº 20 +ÜS7[AIF¬•pd± (ý˜³²æA„€ËóuD›£æŠœ Öd'“Fz鮨'üvºÖ‰¢–Fz鮩'üvº¸ð†î…ûð‹+aue_connect hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108address /var/run/logprivexecsshd20ÜS7[AIF¬•pd± (ýÔ4”æHCG¯Ã•Ž*)èJŠœ Öd'“Fz鮨'üvºÖ‰¢–Fz鮩'üvº¸ð†î…ûð‹+aue_sendtoÀ +ret_msgid366hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýkßÌ8¦}Lß“¤ö°%÷«êDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¸ð†î…ûð‹+aue_recvfromÀ ret_msgid366hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýmš‡ÆM+¯<Û_’Rà슜 Öd'“Fz鮨'üvºÖ‰¢–Fz鮩'üvº¸ð†î…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Z2°Ë1]±m‘¨20 +ÜS7[AIF¬•pd± (ýJ hxFžš|B·Zî<Šœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨/etc/group¸ð†î…ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý¥êºsxJȃ|ÚuǤŒ ð0Šœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨¸ð†î…ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý+Ƭ+Ø&MŸÎ·W-ò0Šœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨¸ð†î…ûð‹+aue_lseekðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý-þŠ²EÁB¬ƒc—Jì|>ßôŠœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨¸ð†î…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¯ zŠ*vNŽ¼ ÏÐ:3³ö +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_setgidgidë +arg_gid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý Є,ì@J6§PhîoMø +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_setuiduid +arg_uid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýB·fÎêCÕ…ZÌž`oú +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ývɽ.l0By½#â"¬åÂü +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý°äÿ§®]vRS<„äB±100320ÜS7[AIF¬•pd± (ý¢ËðܧFø¾!Ž¢:ÐgDþ +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_setuiduid +arg_uid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÒˆH_¦dªV·þ6/€ +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_setgidgidë +arg_gid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ývC8çÍ:CVªµƒ¥bÀ±º‚<Šœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confº÷œ÷…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý Y0]„NŽƒâ¡'•¸ÂI„Šœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆº÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Ö‹"œFz鮩'üvº 20 +ÜS7[AIF¬•pd± (ý.²Þš-ýJè–¼|²]A¦Ñ†Šœ Öd'“Fz鮨'üvºÖ‹"œFz鮩'üvºº÷œ÷…ûð‹+aue_connect hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108address /var/run/logprivexecsshd20ÜS7[AIF¬•pd± (ýžµq‚DkJ‰8–þ·S+jˆJŠœ Öd'“Fz鮨'üvºÖ‹"œFz鮩'üvºº÷œ÷…ûð‹+aue_sendtoÀ +ret_msgid367hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý;šŽþBIM—›]%pTÃRŠDê› µ dôFzé®{'üvºµ CjFzé®{'üvºº÷œ÷…ûð‹+aue_recvfromÀ ret_msgid367hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýf4^ÖÕ'CÊ—pFYØ8뎌Šœ Öd'“Fz鮨'üvºÖ‹"œFz鮩'üvºº÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÖ‹/†Fz鮩'üvºô20ÜS7[AIF¬•pd± (ýÖ‹/~Fz鮩'üvºô20ÜS7[AIF¬•pd± (ý E/M…å^AŽM?FX! +4Ö‹/~Fz鮩'üvºÖ‹/†Fz鮩'üvº20 ÜS7[AIF¬•pd± (ýš‘'çé'HÛ–çDs'™‘ÙŽŠœ Öd'“Fz鮨'üvºE/M…å^AŽM?FX! +4Ö‹/†Fz鮩'üvºº÷œ÷…ûð‹+aue_socketpair ret_fd14ret_fd28hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÖ‹8ÅFz鮩'üvº€Öd'“Fz鮨'üvº™, Bª¢T$µ„äý`Úº÷œ÷…ûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýƒ 7$Dõ¹x}Þ:B$Šœ Öd'“Fz鮨'üvºÖ‹8ÅFz鮩'üvºº÷œ÷…ûð‹+aue_fork +arg_pid1280hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1280ppid1108execsshd20ÜS7[AIF¬•pd± (ý +O«–Ì¿ZŒ–²×¿u­20 +ÜS7[AIF¬•pd± (ý"Åt»·HK\°CZSÊhJ’<–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­/etc/opiekeysº÷œ÷…ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ý!À|€Ið†\¤ÉUŒ ”<–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­/etc/opiekeysº÷œ÷…ûð‹+aue_openat_rwtc +flagsmode ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value9ppid1278execsshd20ÜS7[AIF¬•pd± (ýN¢’ˆ¤C£ž»:±«íùð––œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýÝ÷âvpôIË“êð[f9¦Ã˜0–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýMq#Ä8E’¼Il>ÂùmQš–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýF°H xÇK­¦û%õÝ‚œ<–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbº÷œ÷…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ý Ð>™J$Bô¢³:L3¯èž@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÊÖ@}-J™™®±|  @–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýè~;±{T@!³ºI{'øÑ¢@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÒ솧ÔNð§pShš­0¤@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý’ýHeþJ ›À·c–Nf¾¦@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý‘¤ðŸX!N㶠WI‹é3¨@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý‡8³€åkE®Re×]ÐŪ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý­øà¿gMq–º·M!K…¬@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý‹Ñ +ìÁAE(¹^d»1±ÒD®–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý²[úeKY­K„n›°¨°<–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­/etc/opiekeysº÷œ÷…ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ý¸¼ ¸NJ~«(÷œJÙá²<–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­/etc/opiekeysº÷œ÷…ûð‹+aue_openat_rwtc +flagsmode ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value9ppid1278execsshd20ÜS7[AIF¬•pd± (ýÒ\#ÝZ|H·¥Nâ²’=ZÛ´–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý¯›fñæLW¨ÔûMµÄ§¶0–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý‰³ÿ±QïH轕4ЃB}鸖œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýª椢JD.Fwo/d'áº<–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbº÷œ÷…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ý!Ïb¯ž’D«µ ëñÛVc¼@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýáý,‹MѪ”ò¹š³4ß¾@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý¤VVHÃgº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý†ÿ%2JrŸˆÂ¨e«É%Â@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýûïk¶"\AìŒQóƒZ˜ÊËÄ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý8Ž0 _G„”ûç“›Æ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý»[.ôpKò‰ä}WKEÈ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý êDz:E£n³XâæÚáÊ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý†„¹Þ ¤HÈ…Èì^#e Ì–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýˆô©zÍ@ZƒŸ×XâÆwžÎ<–œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confº÷œ÷…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ°ÌûïW£ÑJî™|(ÌյЖœ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆº÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý~ýV$ÝCO¬ºú¥\#gÒ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e´ðÃ؈ûð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÁbiáJHÕ€0[Ùü¬#ùÔJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº´ðÃ؈ûð‹+aue_sendtoÚ +ret_msgid368hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýåai¸6µCçû€MWë§QÖJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº´ðÃ؈ûð‹+aue_sendto˜ +ret_msgid369hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýAÓsé˜H-€€ãw’ +ØJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº´ðÃ؈ûð‹+aue_sendto¬ +ret_msgid370hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýrãÑ1C£…©š RKÏÚJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº´ðÃ؈ûð‹+aue_sendto˜ +ret_msgid371hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÐ3{_‘Kñ»öðÖÍX%ÜDê› µ dôFzé®{'üvºµ CjFzé®{'üvº´ðÃ؈ûð‹+aue_recvfromÚ ret_msgid368hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýd¥TV|@}†^û"»ÒÞ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uú½ïŠûð‹+aue_lseek’þhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýbœõÄùEA¸žþñN +)à0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_lseek’þhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýx¾M6—/L9°É‡øWÏä ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+20ÜS7[AIF¬•pd± (ý£Ú )=cN£bÓô‹{ðâ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛ`$â ²Eo¤ÃáÞ·^ùêè ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+20ÜS7[AIF¬•pd± (ý`¬qûûN¥µþ¶Y5º‡Ãæ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåý@šžN¸Ÿ!»üwø²ì ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+20ÜS7[AIF¬•pd± (ý³XúE®»D½ó°yÑ(#ñê@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/¹V›Eî­à¡æôñ5Íð ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+20ÜS7[AIF¬•pd± (ý'oWÇREM‚ÇŸl­ˆAšî@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†v3TjŠJq›OU´‡êòäô ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+20ÜS7[AIF¬•pd± (ý_šp+×@ü¼ƒ•KØžò@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,Üìž@ð–ùÁ_¼Ù€ø ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+20ÜS7[AIF¬•pd± (ý3ÏÌùy„K²¢LÅ h„ ö@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþPw¼9I¦³Ž*:¿WÞü ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+20ÜS7[AIF¬•pd± (ý¢àoâ]Ad“§åqn¬fú@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcòúv (D»—äóW^ù©Ø€ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+20ÜS7[AIF¬•pd± (ý¾áÛO¤4MC¶˜;êuÖþ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4¼Û:üoK­¤¼áHÂã‚:‚œ Ê +ÙKFzé®›'üvº”·ò×ûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃ<%>ÕöH[±»±}c# °„@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýHšÝ(K­F¥ŠOÈ>e÷Š†@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%íb3DŽ‚×ÃwÀpˆ@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadÆGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£# Û´¥Iœ·AüBh>·<Šb˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý2 ÿë§D6¯í™ÄiYÍ~Œb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”·ò×ûð‹+aue_write°HhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>Ák'šK±˜@À9”´ÁIŽ@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý G@gæHZ‚©ûÒ¨õ¡¬@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!ÅéÒWNFˆuj¼az ’@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadØYhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ¦ÅJŸQLë£ W~Sµú”b˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜dØÇÃóHÑ…º+WÀD–b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”·ò×ûð‹+aue_writeÂZhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýódÆ9ˆ,Ni•\>¯Ú"f˜@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþQ •ÍÜ@ª†Ý¾ V¹bš@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýã%àAj­”˜p:—¯\œ@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadÒ;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýy:à™Kñ•.Ý5áØ +žb˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýº‚a?2I²vb9µE= b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”·ò×ûð‹+aue_write¼<hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥M—PK„¾|éž"}¢@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°º@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦ê@BæUIš¼ð£µ›•O¼@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýr™|MÖHs‹Ë™Ó9ŽÖ¥¾@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadö?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýäÜV¡/F™¥NžK™©ŒmÀb˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:ï£L[JRŠðMðCðÂ@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýb¾/ B6 {¬óØïâÄJ˜œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº”·ò×ûð‹+aue_sendtoÞ +ret_msgid372hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“ö¶‡Gu¿~‹¹©Ùÿ<ÆDê› µ dôFzé®{'üvºµ CjFzé®{'üvº”·ò×ûð‹+aue_recvfromÞ ret_msgid372hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÌÛj¢AN¤±ÌÛqpa@Èbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK”·ò×ûð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýà>ÁxŠ®K¡²2ßõÊÝ +«ÊD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§ðàûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚òcYü K׸ð_ì”3xÌD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§ðàûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉ”r?aA5ƒWà]»º²*Îb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§ðàûð‹+aue_writeÚLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýXOb ûJJ¸HýÕ[t6ÐD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§ðàûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJqÅ~s­E2–V$ÙÄN¹˜ÒD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§ðàûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýuŠI‹fHù¿n&HõDsÔb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºö‡êûð‹+aue_writeþPhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýº»K¸Eò¸¹Á=ãËGˆÖD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºö‡êûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢œÚ¤=H9™úá@(ž¿ØD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºö‡êûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©ôá@ŽHs‹i}ÛZ4"˜Úb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºö‡êûð‹+aue_writeˆShostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•×tP˜GX…VÎn¤T–ÄÜD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ×óûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{|9•…dK +j3׸ø"3ÞD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ×óûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽPC†ÿTD¾6tèw·Äàb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ×óûð‹+aue_writeà@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*ùI_)@¹¥ÎPj¯^zâD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŽæÜýûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„­@ŒÔüGy‘q7Q2öäD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŽæÜýûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýi _àÏ@í‘ÎÝô¶ŒªæD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŽæÜýûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýt²„xz¥H¹”Hü÷~ƒ‡èD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŽæÜýûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊG¡SNÿºÎÖÑìvæêD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¢žÜ†Žûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[µ¥V=FòŸ§52‘?YìD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¢žÜ†Žûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŧ¼d^‡E •ÒÍÜ6¾©Õî<–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbúËÛ±”ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÎ`Û‹Gü”æÕÃQÎð@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý@OùñDJÝžÑÝÙTüò@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý²ÀL«Aº¤iGñ¯*žô@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý!3UUIŠ§óÆJy¶Þö@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý·J0×HŸ»­Ä"Úzê(ø@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÑnJ‰²FY·/5ç¢Æú@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý ¥•j¼FœŸ\°îå½.Œü@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý7M†TBQ²ÄÂ~ew%þ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ®Øü¥W"½ßD\¬ +ºæ¯C;€–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýeléž²>@µ‰XèØ—q©‚<–œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confúËÛ±”ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ý ‚„¥ŽÃGü¨‡Ëx¦ž„–œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆúËÛ±”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý +ÓŠsñŸdX—Ÿ“¿XdgÖ20 +ÜS7[AIF¬•pd± (ý7‹÷I[Hª‘íÉÂ儆<–œ Ö‹8ÅFz鮩'üvºÓŠsñŸdX—Ÿ“¿XdgÖ"/etc/login.accessúËÛ±”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ýòm)I˜¦(ãÛÒ6»ˆ–œ Ö‹8ÅFz鮩'üvºÓŠsñŸdX—Ÿ“¿XdgÖúËÛ±”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý£¯û`ÜO;šçi"½=Š<–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbúËÛ±”ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ýò®Ø¾zNÿ‹(l\ÙÿyŒ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý$Z%?™@Õ¦G¢E¢ùŽ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýà¶þ&FI˜†ïáµõÙû4@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýZ¢$€]@Ô“£ÖªŽ’@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý‡ÌA ¦@بÇ@õš¬<û”@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÈßr´‚VMa´2a«ªa¦å–@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý¾Ùa?y LýŒîFTö~Ò˜@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý ±ÜŽBÛŸvWmÿE,vš@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÐ$– +˜Kù»…^7Æí®œ–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý3ßÑ]w#EÚ·©qˆ½̧ž<–œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confúËÛ±”ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ý¯9[ÙPIŒ›-„ìå>hL –œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆúËÛ±”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýS¡©a[N”£•½0¦Ë¢–œ Ö‹8ÅFz鮩'üvºÖ‹8ÅFz鮩'üvºúËÛ±”ûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýÍplü7ÇL ‡`r4e9*;¤Šœ Öd'“Fz鮨'üvºÖ‹/~Fz鮩'üvºÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¶ºÿ÷ªõ_’¨bªð§ÎcÌ2220ÜS7[AIF¬•pd± (ýÖvz3Fz鮩'üvºþ¶ºÿ÷ªõ_’¨bªð§ÎcÌhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýRÅ qÃHÚ²YÉ!O>¦Œœ Övz3Fz鮩'üvºÖvz3Fz鮩'üvºÚøñº”ûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý +׳ðFz鮩'üvº 20 +ÜS7[AIF¬•pd± (ý›ª§Ý‚õEöª®I§§ ¨Šœ Öd'“Fz鮨'üvº׳ðFz鮩'üvºÚøñº”ûð‹+aue_connect hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108address /var/run/logprivexecsshd20ÜS7[AIF¬•pd± (ý"^¸PjB™jŠÎ4'õRªJŠœ Öd'“Fz鮨'üvº׳ðFz鮩'üvºÚøñº”ûð‹+aue_sendto˜ +ret_msgid373hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý»že¨¤HЇhÐgèÙ_J¬Šœ Öd'“Fz鮨'üvº׳ðFz鮩'üvºÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Övn„Fz鮨'üvº20 +ÜS7[AIF¬•pd± (ý$þVbE¹¼mbØ9Móþ®Šœ Öd'“Fz鮨'üvºÖvn„Fz鮨'üvºÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýFéŒÝ•òO”‹ Š?Bä#­°Šœ Öd'“Fz鮨'üvºÖdÑFz鮨'üvºÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý)óguõN¥°>Rmm>q¾²ò› µO­öFzé®’'üvºÖdÑFz鮧'üvºÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1execsshd20ÜS7[AIF¬•pd± (ý) …—ÖE°´¯¬*¶C´Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÚøñº”ûð‹+aue_recvfrom˜ ret_msgid373hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý« ‘ÀLý€4Œk˜6°P¶bê› µ dôFzé®{'üvºªûzJÙR†]’Ù?òí†ÓdÚøñº”ûð‹+aue_writev„hostHdc53375b-4149-46ac-9570-64b1090f28fdfd16ppid1execsyslogd20ÜS7[AIF¬•pd± (ýnSåNþjLc¬D‹¬¸bê› µ dôFzé®{'üvºªûzJÙR†]’Ù?òí†ÓdÚøñº”ûð‹+aue_writevèhostHdc53375b-4149-46ac-9570-64b1090f28fdfd16ppid1execsyslogd20ÜS7[AIF¬•pd± (ý +-%¬>JQ„>°†1JR_20 +ÜS7[AIF¬•pd± (ý‚IÝc-bFÝ°=Ë…ÞŸWº<Šœ Öd'“Fz鮨'üvº-%¬>JQ„>°†1JR_0/etc/security/audit_userÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ÞI²Ÿ!qÁ_±!@9ÁR20 +ÜS7[AIF¬•pd± (ý,ú)nwFÜ•¼Dª*fíÖ¼<Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁR2/etc/security/audit_classÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1108execsshd20ÜS7[AIF¬•pd± (ý—ä,DJ½™]Ïjndr¾0Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁRÚøñº”ûð‹+aue_lseekàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Ü+´¼ÄQ¼QAÄ’ò20 +ÜS7[AIF¬•pd± (ýsž)*MÍ®dl-ˆÄòðÀ<Šœ Öd'“Fz鮨'üvºÜ+´¼ÄQ¼QAÄ’ò6/etc/security/audit_controlÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value7ppid1108execsshd20ÜS7[AIF¬•pd± (ýQV¯Ü¤H1¶>þŠÉ¹"YÂ0Šœ Öd'“Fz鮨'üvº-%¬>JQ„>°†1JR_Úøñº”ûð‹+aue_lseek6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýéX &ðC<Šx¸~Ä0Šœ Öd'“Fz鮨'üvº-%¬>JQ„>°†1JR_Úøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý›þÕUÎdJ±… N\2q¡?ÆŠœ Öd'“Fz鮨'üvºÜ+´¼ÄQ¼QAÄ’òÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýå&¬ÛGEDZ‡'­¸ù‡E!È<Šœ Öd'“Fz鮨'üvºÜ+´¼ÄQ¼QAÄ’ò6/etc/security/audit_controlÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value7ppid1108execsshd20ÜS7[AIF¬•pd± (ý +‘Oè´¼s>W³¼AÑ7>í<20 +ÜS7[AIF¬•pd± (ý˜ü¼œ/ÛA¤–‚ɨ*ÖÎ&Ê<Šœ Öd'“Fz鮨'üvº‘Oè´¼s>W³¼AÑ7>í<2/etc/security/audit_eventÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ýQ½(©F¼¿ñßm7œrIÌ0Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁRÚøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1108execsshd20ÜS7[AIF¬•pd± (ýtˆ~ tuO$ŽÚó½Qi:Î0Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁRÚøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1108execsshd20ÜS7[AIF¬•pd± (ýÝ ½qlO^¥¥VvR²4øÐ0Šœ Öd'“Fz鮨'üvº‘Oè´¼s>W³¼AÑ7>í<Úøñº”ûð‹+aue_lseek̳hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1108execsshd20ÜS7[AIF¬•pd± (ýž8}%H€¨ŸõjßB£Ò0Šœ Öd'“Fz鮨'üvº‘Oè´¼s>W³¼AÑ7>í<Úøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1108execsshd20ÜS7[AIF¬•pd± (ý6¨£:ihG­™+Îà4h_‹Ô0Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁRÚøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1108execsshd20ÜS7[AIF¬•pd± (ý9–fƒh@7«"Vuä)Ö0Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁRÚøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1108execsshd20ÜS7[AIF¬•pd± (ý×´”»Fz鮩'üvºô20ÜS7[AIF¬•pd± (ý×´”°Fz鮩'üvºô20ÜS7[AIF¬•pd± (ý §VïAt^‡¹Ì‰ÆÞœòÀ×´”°Fz鮩'üvº×´”»Fz鮩'üvº20 ÜS7[AIF¬•pd± (ýÆõ9s°ÆKê—X öÍ:BéØŠœ Öd'“Fz鮨'üvº§VïAt^‡¹Ì‰ÆÞœòÀ×´”»Fz鮩'üvºÚøñº”ûð‹+aue_socketpair ret_fd19ret_fd210hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýê ð-–&EI—Ý„%J|×…Ú"Šœ Öd'“Fz鮨'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÎÝD£ñNš‡¦mYDÃÖÜ"Šœ Öd'“Fz鮨'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý×´©³Fz鮩'üvº‚Öd'“Fz鮨'üvº™, Bª¢T$µ„äý`ÚÚøñº”ûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÞ4ÁåkH›Ê/mRáZ‡Þ$Šœ Öd'“Fz鮨'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_fork +arg_pid1281hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1281ppid1108execsshd20ÜS7[AIF¬•pd± (ýÞœÂ=í\M|—ÜemsÅøà +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setgidgidë +arg_gid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý›ð]**ÈDl‰ØË3‹ íYâ<Œœ ×´©³Fz鮩'üvºZ2°Ë1]±m‘¨/etc/groupÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd110hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value10ppid1278execsshd20ÜS7[AIF¬•pd± (ýóÔBC @¡¦ˆsë¦æä0Œœ ×´©³Fz鮩'üvºZ2°Ë1]±m‘¨Úøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd10ppid1278execsshd20ÜS7[AIF¬•pd± (ýçÉ^[Lð’ò2}‡æ0Œœ ×´©³Fz鮩'üvºZ2°Ë1]±m‘¨Úøñº”ûð‹+aue_lseekðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd10ppid1278execsshd20ÜS7[AIF¬•pd± (ýíÙÉ´-yJ4¬¼h7²G茜 ×´©³Fz鮩'üvºZ2°Ë1]±m‘¨Úøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd10return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý[cÝÿROÑ™ ÉÃå‰Eê,Œœ ×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setlogin +hostHdc53375b-4149-46ac-9570-64b1090f28fd +loginuserreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýn5-¦FÒ£¾›e3ßqQì6Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1278execsshd20ÜS7[AIF¬•pd± (ýû¾©Ÿ²ÚEnˆÊNCzÚáÇî6Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1278execsshd20ÜS7[AIF¬•pd± (ýø:ûèJ¹<³ßJoCð +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setuiduidë +arg_uid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýùO5#N(Š@Œá¼BŠWò +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý¤çƒ3 +ðLQ´'áÚ^ì”ô +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý +NÐ$a![¡ú¼û!Ã.20 +ÜS7[AIF¬•pd± (ýXáÊs@…¬¶ðù=µ’ö<Œœ ×´©³Fz鮩'üvºNÐ$a![¡ú¼û!Ã.,/home/user/.login_confÚøñº”ûð‹+aue_open_rwtc +flagsmode +ret_fd110hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value10ppid1278execsshd20ÜS7[AIF¬•pd± (ýJ>ðxª£NÂ$Rz‡¢ÅîøŒœ ×´©³Fz鮩'üvºNÐ$a![¡ú¼û!Ã.Úøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd10return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý¼÷•êŒBC —{$1ò_¡+ú<Œœ ×´©³Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confÚøñº”ûð‹+aue_open_rwtc +flagsmode +ret_fd110hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value10ppid1278execsshd20ÜS7[AIF¬•pd± (ýN@àrÝ.ER…ªÑ¸ÊTüŒœ ×´©³Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd10return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýËŒ/µiA…˜P9(¶}fþ +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý6«”uvD1¤›6™ëئ€ +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý ¨ª×oCQ’úÖP²^{B‚6Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1278execsshd20ÜS7[AIF¬•pd± (ýûVš]¹J £ì¥¸Ô„ +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý[í£,rH]Ÿcæß±ÄІ +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý¼Œ€Üù5@F¯/†¶ƒÔˆˆ<Œœ ×´©³Fz鮩'üvºNÐ$a![¡ú¼û!Ã.,/home/user/.login_confÚøñº”ûð‹+aue_open_rwtc +flagsmode +ret_fd110hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value10ppid1278execsshd20ÜS7[AIF¬•pd± (ýb0øT ÖI±ƒiuRsôAŠŒœ ×´©³Fz鮩'üvºNÐ$a![¡ú¼û!Ã.Úøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd10return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýWÀ`‘tALj­ðú'i®dŒ<Œœ ×´©³Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confÚøñº”ûð‹+aue_open_rwtc +flagsmode +ret_fd110hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value10ppid1278execsshd20ÜS7[AIF¬•pd± (ý˜={ȃAü§L‚ôñ…Å鎌œ ×´©³Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd10return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýMÑ¿P{‡DÀœ£âÁ mW +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙªøýFƒð¯EÂJª§—P‹¥ÝÏp’ +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýÍÂ<ö¬D£¤Whs,•ì”6Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1278execsshd20ÜS7[AIF¬•pd± (ý×µÎFz鮩'üvºô20ÜS7[AIF¬•pd± (ý×µÍFz鮩'üvºô20ÜS7[AIF¬•pd± (ý VÔt°_å“-º?XŒ×µÍFz鮩'üvº×µÎFz鮩'üvº20 ÜS7[AIF¬•pd± (ý[ +wù@C›Bø,bÚ–Œœ ×´©³Fz鮩'üvºVÔt°_å“-º?XŒÚøñº”ûð‹+aue_pipe ret_fd110ret_fd211hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýî.2XMìߘéÌÊP˜"Œœ ×´©³Fz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýs0éÝVÀLGˆ’eênµQš"Œœ ×´©³Fz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýÿ0œâÑOJŒGpµu¢ùœ"Œœ ×´©³Fz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1278execsshd20ÜS7[AIF¬•pd± (ýu!L'M«üðŒgv–Yž"Œœ ×´©³Fz鮩'üvº×µÍFz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýŽÜ˜áÐoF,³.¥Áñ@µŸ "Œœ ×´©³Fz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1278execsshd20ÜS7[AIF¬•pd± (ýt(¡'õH‡ú]Öµ¢"Œœ ×´©³Fz鮩'üvº×µÎFz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýûé-ë_J|“vIÑj¤~8¤>Šœ Öd'“Fz鮨'üvºÚøñº”ûð‹+ aue_posix_openpt +ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ý +í( ö~R¶ ~{‚~¯20 +ÜS7[AIF¬•pd± (ýcÊ+¹p;Hò¼RM#[Ë¡¦<Šœ Öd'“Fz鮨'üvºí( ö~R¶ ~{‚~¯/dev/pts/0Úøñº”ûð‹+aue_openat_rwtc +flagsmode ret_fd111hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value11ppid1108execsshd20ÜS7[AIF¬•pd± (ýø\òñ°´E~˜`SËñÛѨ<Šœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨/etc/groupÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1108execsshd20ÜS7[AIF¬•pd± (ýeQ¦ŽlÅEÞ»eR¨¢ÛªªŠœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý«v ÌÆŸB2‰k£:ˌǽ¬4Šœ Öd'“Fz鮨'üvºí( ö~R¶ ~{‚~¯/dev/pts/0¦€ÑÄ”ûð‹+aue_chownuidëgid arg_uid1003arg_gid4hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýXÊú…OU½Ôa‹á9ú¥®<Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g/etc/spwd.db¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1108execsshd20ÜS7[AIF¬•pd± (ýÐô+ÐJI“†}—!ØàP°@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý¢¯U¤!¨ES¤0A•\·\ʲ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýcµ¨L$¯L¿‰”¶ÍÝ›´@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý9.a +@º·‚ÜX„Í+ë¶@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýGÅ ±-O9¤kñóO_¸@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý{¡4»L”®RL1/ éúº@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý¤v@dzŒL•{F7d!H¼@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýé1;H¯E}®chƒ¾@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý…³ÆÈ‹qJXšO0eP¢ÀŠœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +‹»Äñþ^ñVE®þ;À20 +ÜS7[AIF¬•pd± (ý—Ø:qDB4ˆyŠÎ6ÞP1Â<Šœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À,/var/log/utx.lastlogin¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1108execsshd20ÜS7[AIF¬•pd± (ýgtÒ„×NMcŸSë8Ú=ÙKÄŠœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýæd· ø¶Dò‚Pœ¶ àXÆ<Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g/etc/spwd.db¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1108execsshd20ÜS7[AIF¬•pd± (ýò© ªn@¸äãCŽ ¯ÿÈ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý>sK|"Jj¢è/pu­Ê@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý‚Êg£»5E=‰‚벇Ì@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýßu'l‘D¢¤Ûu‚ÄÅ‹Î@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý‰C»¤š¥E œ•¼8D}Ð@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýœîY˜'DD€ä§YôÎ÷®Ò@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý9¬|ØéÚ@ÿ©–yxKV²Ô@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýÚWØBÇ…f(—ž\kgÖ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýQVÃÌ ËHº¬Ã­¼†ë͵ØŠœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +—¢y:SU™:Z•SØŽ20 +ÜS7[AIF¬•pd± (ýÁضMU…Å.é€ç’Ú<Šœ Öd'“Fz鮨'üvº—¢y:SU™:Z•SØŽ&/var/run/utx.active¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1108execsshd20ÜS7[AIF¬•pd± (ýÑ!/NÎBâ¢d˜Nìö(þÜ<Šœ Öd'“Fz鮨'üvº—¢y:SU™:Z•SØŽ&/var/run/utx.active¦€ÑÄ”ûð‹+aue_open_rwtc +flags"mode¤ +ret_fd113hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value13ppid1108execsshd20ÜS7[AIF¬•pd± (ýÅ×ô’vOÓ³þu~µYÞ"Šœ Öd'“Fz鮨'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value +16386ppid1108execsshd20ÜS7[AIF¬•pd± (ý¼øbµ9EgƒÖχyäÁàŠœ Öd'“Fz鮨'üvº—¢y:SU™:Z•SØŽ¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý´=D¨Kc€©\_ÓèÃ-â<Šœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À,/var/log/utx.lastlogin¦€ÑÄ”ûð‹+aue_open_rwtc +flags"mode¤ +ret_fd113hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value13ppid1108execsshd20ÜS7[AIF¬•pd± (ý)2ˆŠëƒL¹yRUn†Ô=ä"Šœ Öd'“Fz鮨'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value +16386ppid1108execsshd20ÜS7[AIF¬•pd± (ýCÅŽøÎNGø¹a¥_š_æ0Šœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À¦€ÑÄ”ûð‹+aue_lseek”hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13ppid1108execsshd20ÜS7[AIF¬•pd± (ý…¸ÒãRNþ«Q«»äYŒ0è0Šœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À¦€ÑÄ”ûð‹+aue_lseekŠhostHdc53375b-4149-46ac-9570-64b1090f28fdfd13ppid1108execsshd20ÜS7[AIF¬•pd± (ý¤ÓIJL=Œ ¥12ꊜ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +E¨h§ ‘]Œ§\œ‘»ù20 +ÜS7[AIF¬•pd± (ý·ôý—ÛGÿšwñ?÷:ì<Šœ Öd'“Fz鮨'üvºE¨h§ ‘]Œ§\œ‘»ù /var/log/utx.log¦€ÑÄ”ûð‹+aue_open_rwtc +flags mode¤ +ret_fd113hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value13ppid1108execsshd20ÜS7[AIF¬•pd± (ýð(`d4ŒJ¼³|P)†5ãîbŠœ Öd'“Fz鮨'üvºE¨h§ ‘]Œ§\œ‘»ù¦€ÑÄ”ûð‹+aue_writev¦hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13ppid1108execsshd20ÜS7[AIF¬•pd± (ýU‹™©¥TJ“³…îC>ðŠœ Öd'“Fz鮨'üvºE¨h§ ‘]Œ§\œ‘»ù¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý{óœíäLj£GØ©ÿ9èòŠœ Öd'“Fz鮨'üvº—¢y:SU™:Z•SØŽ¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýºÚ<ï?K¼œ™HN‚;^¥ôŠœ Öd'“Fz鮨'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd0return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý²Fs-káGê¸ôSÔC/öLŠœ Öd'“Fz鮨'üvº×´”»Fz鮩'üvº¦€ÑÄ”ûð‹+aue_sendmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd10ppid1108execsshd20ÜS7[AIF¬•pd± (ýc¿JþD&”ØaräÁïïøLŠœ Öd'“Fz鮨'üvº×´”»Fz鮩'üvº¦€ÑÄ”ûð‹+aue_sendmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd10ppid1108execsshd20ÜS7[AIF¬•pd± (ý;6<Ò´Ò@i¼#ч5Èú<Šœ Öd'“Fz鮨'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/null¦€ÑÄ”ûð‹+aue_openat_rwtc +flagsmode ret_fd10hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¥'»y¸C¥žJmÖÐôWüŠœ Öd'“Fz鮨'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd11return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý3ú7ïÏIQ½×ü×VRöyþ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¦€ÑÄ”ûð‹+aue_readhhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÏ `~HFy¬ó9êÕµŽ#€ JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦€ÑÄ”ûð‹+aue_sendtoŠ +ret_msgid374hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ým°–ÒeF:«‘ ²bÑÞ‚ Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦€ÑÄ”ûð‹+aue_recvfromŠ ret_msgid374hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÖ?Ój+@@-’5ñÉ}„ FŒœ ×´©³Fz鮩'üvº×´”°Fz鮩'üvº¦€ÑÄ”ûð‹+aue_recvmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1278execsshd20ÜS7[AIF¬•pd± (ýSQÇÂG4OH†jÔoGX† FŒœ ×´©³Fz鮩'üvº×´”°Fz鮩'üvº¦€ÑÄ”ûð‹+aue_recvmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1278execsshd20ÜS7[AIF¬•pd± (ý×µ¨Fz鮩'üvº„×´©³Fz鮩'üvº°äÿ§®]vRS<„äB±¦€ÑÄ”ûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýßÇ 5*[Ní˜+h\…Wúˆ $Œœ ×´©³Fz鮩'üvº×µ¨Fz鮩'üvº¦€ÑÄ”ûð‹+aue_fork +arg_pid1282hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1282ppid1278execsshd20ÜS7[AIF¬•pd± (ýÑ„Äâ„Aω&¥pš`'$Š Œœ ×´©³Fz鮩'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýÚãᔈJT•À,ìnÒ)Œ "Œœ ×´©³Fz鮩'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý”4ûžKE²†‹Ñ³B% Ž "Œœ ×´©³Fz鮩'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýt‚ÚQ/F?£•ÆïAòè "Œœ ×´©³Fz鮩'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1278execsshd20ÜS7[AIF¬•pd± (ýŸ¡îº„6J“•>믫)ÓÚ’ "Œœ ×´©³Fz鮩'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý[j⦥MQ®Ð³°@&ÇÉ” "Œœ ×´©³Fz鮩'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value6ppid1278execsshd20ÜS7[AIF¬•pd± (ý8µVŽwL¤™1£=ÔÊ*©– JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦€ÑÄ”ûð‹+aue_sendto˜ +ret_msgid375hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý ®Š¬BУ¶Ÿ0šÚ-˜ Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦€ÑÄ”ûð‹+aue_recvfrom˜ ret_msgid375hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýº”æì÷OdŽƒ&–Z*,š <–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯/dev/pts/0¦€ÑÄ”ûð‹+aue_openat_rwtc +flagsmode ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value12ppid1281execsshd20ÜS7[AIF¬•pd± (ýˆ¤1µ9Oô¸ÝÖdæÚœ –œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý1•"Ã@áM°Š§áÁFÿœž <–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯/dev/tty¦€ÑÄ”ûð‹+aue_openat_rwtc +flagsmode ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value12ppid1281execsshd20ÜS7[AIF¬•pd± (ý Þ'0éD•l" +•íi  –œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý4”:OS­$ +Úì¾ÆA¢ –œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý¡ZëtªH¹¿,»¤ JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦€ÑÄ”ûð‹+aue_sendto¬ +ret_msgid376hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýHlfæÛC*ªYpÝ·–Ó¦ Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦€ÑÄ”ûð‹+aue_recvfrom¬ ret_msgid376hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý +üñ§ª–X_–ªu{X„ç20 +ÜS7[AIF¬•pd± (ýnV +||ÞN§ª‰” +;¨ <–œ ×µ¨Fz鮩'üvºüñ§ª–X_–ªu{X„ç/etc/motd¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1281execsshd20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ–ÔúÀšÖÌä@è´ˆß~;Àª –œ ×µ¨Fz鮩'üvºüñ§ª–X_–ªu{X„禀ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýÌ#Å´«B@2™w6é)0ÓѬ +–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº¦€ÑÄ”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý]ÛzJôNW™_î—0°‰® +–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº¦€ÑÄ”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýÌ{÷,@§¢Ú0(¦Î‚¥° <–œ ×µ¨Fz鮩'üvºNÐ$a![¡ú¼û!Ã.,/home/user/.login_conf¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1281execsshd20ÜS7[AIF¬•pd± (ýKYû€©6@ô¾ŠL~Õþ¦² –œ ×µ¨Fz鮩'üvºNÐ$a![¡ú¼û!Ã.¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýéäù´¦Iô¬“XCóߥÍ´ <–œ ×µ¨Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.conf¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1281execsshd20ÜS7[AIF¬•pd± (ýÓb®O¡I¥¶𪅘jZ¶ –œ ×µ¨Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý!§Ióº@÷¿Â’âGȸ +–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº¦€ÑÄ”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý™‹bWßHF„Úb(€]ĺ +–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº¦€ÑÄ”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýWY8 CC@´";Ó@ͼ –œ ×µ¨Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<¦€ÑÄ”ûð‹+aue_closefrom +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd11return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý +€-§q0]±+G-0D20 +ÜS7[AIF¬•pd± (ý¸Êâ?¡ÄA)²¼\©EtŽz¾ 6–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº€-§q0]±+G-0D/home/user¦€ÑÄ”ûð‹+aue_chdirhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý +쀡ùÊ_¹¡Zy?ʹ20 +ÜS7[AIF¬•pd± (ýóA.²ØùM|¾Zl‰d–g~À –œ ×µ¨Fz鮩'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¦€ÑÄ”ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine +-bashppid1281execsshd20ÜS7[AIF¬•pd± (ýÎ{¿f—NL~”SÐP8M÷ <–œ ×µ¨Fz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¦€ÑÄ”ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý‰[kAR“ Ÿyzˆ>Ä @–œ ×µ¨Fz鮩'üvº‰oý©äÇU¤©A)Eǹ ¦€ÑÄ”ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý%uJ%4RF\Ÿy×1„Æ –œ ×µ¨Fz鮩'üvº‰oý©äÇU¤©A)Eǹ ¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýÐé¾ äaK#”’º%ÝjýþÈ <–œ ×µ¨Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¦€ÑÄ”ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýt”³N?ªH®¨ýD`ƨtÙÊ @–œ ×µ¨Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â¦€ÑÄ”ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý (³cÚBR¸š7ÎP.OÌ @–œ ×µ¨Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â¦€ÑÄ”ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý#@@è>GERš×ß`–qüeÎ –œ ×µ¨Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý +âpÑ +m.×W®mAs××¼›20 +ÜS7[AIF¬•pd± (ýÚëBx%OߤÐSzû¦¸Ð <–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8¦€ÑÄ”ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýëŸ +Ä„F„}šÈ9¬Ò 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýXJB( ÷Ol¨guíÏ‘gÔ 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý¾Õf¬í¬EË¿[Œ¢PbÛÖ 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý'Dò†&HÛ¨Ö¡¹Y`Ø 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýpM| M ºœü¸0…œÚ 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýÔ"´1¾J •+Q'£êÜ 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýèBÃÏwwKžcûfS`µ\Þ 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý¤ºl-ßÆOU¥nöÃ-k8àà 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý"'ê÷»ÒIà£ï¦ÖÒêâ –œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý +m/"P;=\»P½¤¬=P_20 +ÜS7[AIF¬•pd± (ýo´îyOÞ­þ™•üÝä <–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8¦€ÑÄ”ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýÇ2a̳ Eö†çü<ã_æ 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý' “’K¤ aNà$?óè 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý–ƒc"ŸFõ³K~eMö-òê 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýÌ*™X7ªG›µa=rFüì 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýL}X¸NC«uÙ<¬ŒÉ¢î 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýÊ@b&gHš¬”î# ð 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýºúÂjé±O’lg ÓâGýò 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý¥öèh™ÉI@µ\‚÷Ƨ6ô 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýÂÕß^‹|F°»Å㾑èlö –œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý +"‘ûŽdkÇ[«d.µ[ÇÕ20 +ÜS7[AIF¬•pd± (ýNf€ÏLu¤²Úßn[ø <–œ ×µ¨Fz鮩'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1¦€ÑÄ”ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý ©ÖMögM~©ÅEÛÑó.ú 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´Ø÷ˆ•ûð‹+aue_lseek‚•hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýWzıe°H×¼sÙÅ3^%4ü 2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý2M¼‰1@‹¶‚Fyu-îþ 2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýpdmµ.Og€‹9+Ç_€ +2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý*ƒ ~GÝC4¦²MÓÊûâ‚ +2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýæ¹3Ò¡LL ¢çõzÈVO„ +2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý!é­uÌMi—Éý Júì† +2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý²¾^›X]EwS‰CšÝ-3ˆ +2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýQ ¨gÄîG©þyæõqBŠ +2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý$¾¦ÐÆØA¥­Ž˜ÍDgŒ +–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýH/BMíF¡õ4ÈŽ +:–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý&+o¸;I~x„¢"  +:–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýÜP„M%dL÷ŽÖº$EYÔ’ +:–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýåfMJZµI•X—7$;£F” +:–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý›ëÖ,CRŒÈù¨S߈[– +:–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý rÄ+R‰Cž‘Wk‡Yõ˜ +<–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯/dev/tty´Ø÷ˆ•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý—á{¥R#Lų‚Zþ‚ ´½š +–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý¶ +›5Û“I –<¹ZûIõœ +<–œ ×µ¨Fz鮩'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.conf´Ø÷ˆ•ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý0rY`7òK´‚qs¿Ì¬ªž +@–œ ×µ¨Fz鮩'üvºÜN½Ëê¯+^¯êZ£®+V´Ø÷ˆ•ûð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýº’ÌÐ]GÔ·Â5 ¨„÷  +@–œ ×µ¨Fz鮩'üvºÜN½Ëê¯+^¯êZ£®+V´Ø÷ˆ•ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý®N½ENÚŽ’˜ØDž¢ +–œ ×µ¨Fz鮩'üvºÜN½Ëê¯+^¯êZ£®+V´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý +fš Ž_è^ŸŽkèþ–20 +ÜS7[AIF¬•pd± (ýÖ›ÌÞ´EÜ—„Ì'(JNO¤ +<–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–/etc/pwd.db´Ø÷ˆ•ûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý›.U#jC%Ÿéø1]·¦ +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý! ½Ý@@§%çƹ55¨ +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýJ4ëDÂDɈÂÌ ß¬tª +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýkfœÙ/HNbt¥ÛÈâ'•¬ +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý$Š‘¶AîžÖe„ÂYN® +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýç‘­kxEΔV0á¥x;5° +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý 3ؽ„‡@º­!Ão«vèE² +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙœ¾û";h8)A¹¥'íÚ–g´ +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýÇß¼¿AGÙ¶-îé¹t„¶ +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýEÜa˜[H"„­-Ñ)Ôú¸ +–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýÖËN5ÜÂHF™Ü æËI"º +JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº´Ø÷ˆ•ûð‹+aue_sendto˜ +ret_msgid377hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýNgC°\>EY¶°UŽ)˜¼ +Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº´Ø÷ˆ•ûð‹+aue_recvfrom˜ ret_msgid377hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýàÇsIB¦µ!•×‹Ab¾ +–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý—¢¼Üj@lºÙà`DmÒ¡À +"–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý +–Ø%™wyïR¹wT’ï920 +ÜS7[AIF¬•pd± (ý–JÜ$ÒmJ~…ŒÅbÁ€Ûm +<–œ ×µ¨Fz鮩'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.db´Ø÷ˆ•ûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýBüß?ë5Ft©˜¶.+ª…ÁÄ +@–œ ×µ¨Fz鮩'üvº–Ø%™wyïR¹wT’ï9´Ø÷ˆ•ûð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýã +ŒË5XJ¯žæ^§ÍkÊÛÆ +@–œ ×µ¨Fz鮩'üvº–Ø%™wyïR¹wT’ï9´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý$ +Üy‚.K¤}ƒ’nn/È +@–œ ×µ¨Fz鮩'üvº–Ø%™wyïR¹wT’ï9´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýuõ%H¾bÇÊùÆ*¾Ê +–œ ×µ¨Fz鮩'üvº–Ø%™wyïR¹wT’ï9´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý +ÍÈ‘uu®Sµuåî420 +ÜS7[AIF¬•pd± (ýW#®ªH¬‘9È.N& Ì +<–œ ×µ¨Fz鮩'üvºÍÈ‘uu®Sµuåî4/etc/profile´Ø÷ˆ•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý»b#ÿlKfµqºo+ÊÎ +@–œ ×µ¨Fz鮩'üvºÍÈ‘uu®Sµuåî4´Ø÷ˆ•ûð‹+aue_readähostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýL>>fBB¨¼:tjÙ¶èÐ +–œ ×µ¨Fz鮩'üvºÍÈ‘uu®Sµuåî4´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý +ö"УîêZ›îÀÀªê&ã20 +ÜS7[AIF¬•pd± (ý€ðp ¼¥OåºõaI„4€çÒ +<–œ ×µ¨Fz鮩'üvºö"УîêZ›îÀÀªê&ã&/home/user/.profile´Ø÷ˆ•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýð­2hNI½iã—èEÎÔ +@–œ ×µ¨Fz鮩'üvºö"УîêZ›îÀÀªê&ã´Ø÷ˆ•ûð‹+aue_readâ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý…UìH°EHwç&Š…Ö +–œ ×µ¨Fz鮩'üvºö"УîêZ›îÀÀªê&ã´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý×Á…çFz鮩'üvº†×µ¨Fz鮩'üvº°äÿ§®]vRS<„äB±戒‘•ûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÊ!™£9¸O„ú®íãLîWØ +$–œ ×µ¨Fz鮩'üvº×Á…çFz鮩'üvºæˆ’‘•ûð‹+aue_fork +arg_pid1283hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1283ppid1281execbash20ÜS7[AIF¬•pd± (ý +°FL ¼"X¼ 5¢ø"¬£20 +ÜS7[AIF¬•pd± (ý YÄ/•L‰¶—„äÚ +šœ ×Á…çFz鮩'üvº°FL ¼"X¼ 5¢ø"¬£$/usr/bin/resizewin'ìAzX™¦}˜¹(/libexec/ld-elf.so.1戒‘•ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine*/usr/bin/resizewin -zppid1282execbash20ÜS7[AIF¬•pd± (ýP÷‡ÖGF¢0çsñÜ +<šœ ×Á…çFz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf戒‘•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýH}Ò¹Š§E€A4X‚ÅÞ +@šœ ×Á…çFz鮩'üvº‰oý©äÇU¤©A)Eǹ 戒‘•ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýð6}?‘§CLˆÈ>«5 ›ïà +šœ ×Á…çFz鮩'üvº‰oý©äÇU¤©A)Eǹ 戒‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ý‘{•äJžD]¥’AMlt½â +<šœ ×Á…çFz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints戒‘•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýì$¡Æ”}B'±ïGRjý<ä +@šœ ×Á…çFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýÛHA¬”C €oð‘.R*¢æ +@šœ ×Á…çFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýO?’l­OÄ°‚(2ïõ[è +šœ ×Á…çFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ýiLØ ïÇNŠŒÒºÃ'‹ðê +<šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7戒‘•ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýL禂b"Eï´ø-K(ì +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýz÷1ŽÈH¦º¿Þ¾tî +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýbôhMÐŒŽÞ"Ú•ð +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýæéó´F1@n«o¯š–ò +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýa Ð2Ì®E7†f‰vÓA¢ô +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ý"N®ë)FÖž>ß w³üö +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýS7`KA·Ý¡û‘¹äø +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýVÈø€q«J¯_å‰výzú +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ý7v ˆg§C¹¢(u­ðŠ]ü +šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ý艒_£>F£ÒÝmù½GIþ +:šœ ×Á…çFz鮩'üvºæˆ’‘•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ýy›z0RLOŒøjŪêHð€ :šœ ×Á…çFz鮩'üvºæˆ’‘•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ýxž¹®Fä¦W=U±mÖ‚ <šœ ×Á…çFz鮩'üvºí( ö~R¶ ~{‚~¯/dev/tty戒‘•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execresizewin20ÜS7[AIF¬•pd± (ý |ðžO`¦çåóKË—ù„ šœ ×Á…çFz鮩'üvº×Á…çFz鮩'üvºæˆ’‘•ûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ý×ÂlFz鮩'üvºˆ×µ¨Fz鮩'üvº°äÿ§®]vRS<„äB±戒‘•ûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýßKš¨UD¶¥™ÔáKQŽ¬† $–œ ×µ¨Fz鮩'üvº×ÂlFz鮩'üvºæˆ’‘•ûð‹+aue_fork +arg_pid1284hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1284ppid1281execbash20ÜS7[AIF¬•pd± (ý +—>Ï¿ä7Q·äAºaG20 +ÜS7[AIF¬•pd± (ý‡‚ð˜N½«e„EÞˆ šœ ×ÂlFz鮩'üvº—>Ï¿ä7Q·äAºaG /usr/bin/fortune'ìAzX™¦}˜¹(/libexec/ld-elf.so.1戒‘•ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine:/usr/bin/fortune freebsd-tipsppid1282execbash20ÜS7[AIF¬•pd± (ýÁÓ6[¿¦B•‹„ˆl‘¼ê’Š <šœ ×ÂlFz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf戒‘•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execfortune20ÜS7[AIF¬•pd± (ýgL/‰ËèIΠ h»*É6Œ @šœ ×ÂlFz鮩'üvº‰oý©äÇU¤©A)Eǹ 戒‘•ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýÆð̬<ÛK7¸¶‰ý8³ÊøŽ šœ ×ÂlFz鮩'üvº‰oý©äÇU¤©A)Eǹ 戒‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execfortune20ÜS7[AIF¬•pd± (ýÝÏ"K’E'rú|—* <šœ ×ÂlFz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints戒‘•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execfortune20ÜS7[AIF¬•pd± (ý‡0ˆ:B‹o }C’ @šœ ×ÂlFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ý|å:0K‡€‡HäènÛ” @šœ ×ÂlFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýŠu&ÊçMB†ó³ûx'LB– šœ ×ÂlFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execfortune20ÜS7[AIF¬•pd± (ýR\ ÙsàN›¤­êñI*˜ <šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7戒‘•ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execfortune20ÜS7[AIF¬•pd± (ýûæï½èJ(¤Û˜úzU¹š 2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ý‡öæ—ŒA,¡Äñ½\a¤Mœ 2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýð¬:_.C8›|t¿l"½¯ž 2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ý0qI»ìF ŒÇèú ‚Ï  2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ý5'~3øCȬý]%'Ê¢ 2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€Àå arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ý·l“ÖÙöLV˜•L|æñ-¤ 2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€Àå arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýQ.]?]OõŽr © +ñ°¦ 2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€ˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ý·&m° +G–²G“‹¶*Q¨ 2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€ˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýŽà«\$I:»L=-enI6ª šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execfortune20ÜS7[AIF¬•pd± (ýx³N%ŽÓy­B0²‰¬ :šœ ×ÂlFz鮩'üvºæˆ’‘•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execfortune20ÜS7[AIF¬•pd± (ý^`M¶ªN¹‹x^N80® :šœ ×ÂlFz鮩'üvºæˆ’‘•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execfortune20ÜS7[AIF¬•pd± (ýg9-gÉJü¦p;…LfVÚ° 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+aue_lseekÄ  hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýBûå¾?H¨S‘çuæ|² 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+aue_lseekÄ  hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýòŠ ÎXNËŽ’=Œý’zç¶ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+20ÜS7[AIF¬•pd± (ý\2"#F¨‚D¾õƒ¦þ¶´ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃúå¢H…jÜ%| zº ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+20ÜS7[AIF¬•pd± (ýû¶‹»Æ§C\–ì†)Á'¸ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðBJIÝbOZ…ƒ?P6׺¾ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+20ÜS7[AIF¬•pd± (ýóswôM»–ãh‚Þ,Ed¼ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýaåÕ)p BsƒH­Ës¢’ˆ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ¨‚û£SjBÓA‡ék2Hå¸miáw;â~à bœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ãE0C¡™ÚNºßžaâ b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÒèÁÝœûð‹+aue_writeö@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\í!³uG*› fÜ6ˆÂä @œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœúÄsUG¬ gy߬æ @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3¶G V@xˆëë§è @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadä8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡è®uDÆM‚¨¸&ðÃÜ÷ê bœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#Á,ÔD½±;ºxYÓ²³ì b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÒèÁÝœûð‹+aue_writeÎ9hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“,øH+ÙD€„·Ù´e)Bî @œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýêl«Õò¡K´¾üT;¸ªð @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýa•ùÄD+–W‡W®[Àò @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_pread’GhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖ±‹Ã5™@Ì…n,Ç|Lô bœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYèùÁGâ«|ªÅ_Üö b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÒèÁÝœûð‹+aue_writeüGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûPŒ–LX²Büœ$Ôh]ø @œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûe¤jîáE»|¨þmú @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸÷¨-E:œ8'±{ðü @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_pread¼AhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾°A-¤`C7ª•äzPVAÏþ bœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈÍî0G¿‚$‚Ç“:$ € @œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥²C›VA³æªtBfWÍ‚ @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦øtW +C¿ŽútóÍ]„ @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadîIhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»jÔ±aÝ@Ø·®J’ݨr† bœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýíÁضüJD=ƒÜ¼žvðEˆ @œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýguÉ¢i$NÛƒ…ÙH¦6pŠ @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýeÜטKp™Ë\Öª_¡Œ @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_pread”KhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýT¢2—!žIP»ò©»w¿%Ž bœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýUkÂ÷Fµ»Ö¯8€[ @œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…ïf{;2E/‹Ó|d‡…ú.’ @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýЗŠVhD‡¤n‹' ¸);” @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadÐAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,кÚÝ +MÕÛuó|¸ÿ– bœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýB|‚ŒòN¹ú_áóh¯+˜ @œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁ¦d }ED¬p–ý1¹Yš @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýn×ØJÌI»³E{6÷‡9œ @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadâIhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+ô?2íBÒ€Ê&U‹6­ž 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÐÌÞ ¤ûð‹+aue_lseekÊÝ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+’èÿçiBd¢*‡[PÞv  @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ìÿ…°¥ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý4£ÁPD0º*[˜G¤¢ @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ìÿ…°¥ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýT î| ›K Ù~@)—¤ @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ìÿ…°¥ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý'íŒØCE0‹”fwÙ‰rê¦ b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ìÿ…°¥ûð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýµƒÎ¯Fzé®›'üvºš™, Bª¢T$µ„äý`ÚhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýy$¹ˆ¯8D5´¹oѲÕ>¨ Ô› µƒÎ¯Fzé®›'üvºµƒÎ¯Fzé®›'üvºÎå®Ó¨ûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1226exec +sleep20ÜS7[AIF¬•pd± (ýµƒÂFzé®›'üvº”™, Bª¢T$µ„äý`ÚhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý +߉Ðj_”Ðvˆj°20 +ÜS7[AIF¬•pd± (ý•H ¼« Hò¢ei@(='ª Λ µƒÂFzé®›'üvº߉Ðj_”Ðvˆj°/usr/bin/nice'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Îå®Ó¨ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine$nice -4 fsck -B -pppid1execsh20ÜS7[AIF¬•pd± (ý~gÞTHö»µ'iƒMPœ¬ <Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execnice20ÜS7[AIF¬•pd± (ýë® +´­+A-´4qÊ]7® @Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýKó¢0åD‰ƒG`Bf¦° Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execnice20ÜS7[AIF¬•pd± (ýÐÊQ¸Ô­LÕœ02°¨È² <Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execnice20ÜS7[AIF¬•pd± (ý! w­[E#¾oÿðlbª±´ @Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýÔ‘ŽôþB³•ñäÕ fìÓ¶ @Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ý+^w”wcDá0äÞ3§á¸ Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execnice20ÜS7[AIF¬•pd± (ý²°m'4Mn³T(•¯<º <Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Îå®Ó¨ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execnice20ÜS7[AIF¬•pd± (ýè®2¾eOô’ѳ³¢o¼ 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýªó-©´DP…ÈÉæìì¾ 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýK½õ¹A :©Ðiˆò|À 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ý2©ç£ó÷IÄ„7ÈãéDP 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ý¹Øh—›FH1Œä$Õ$˜Ä 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýŸ;L¼ (G…§éº ùàÆ 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýŠWÕðøYKŽ ¤…ºr(5áÈ 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýVˆ—NëE›½×=®jñÑ]Ê 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýpG³oC¹¨Z¥¾ŠtÌ Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execnice20ÜS7[AIF¬•pd± (ýAÎk왣Bƒ·”5 ^Î :Λ µƒÂFzé®›'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execnice20ÜS7[AIF¬•pd± (ý¾ôã‡\ßN®¢SnNÎÐ :Λ µƒÂFzé®›'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execnice20ÜS7[AIF¬•pd± (ý +§d +½å X¥½g4È Î:20 +ÜS7[AIF¬•pd± (ýAA£îœM¯¨7÷Ð/b`ŸÒ Λ µƒÂFzé®›'üvº§d +½å X¥½g4È Î:/sbin/fsck'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Îå®Ó¨ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinefsck -B -pppid1execnice20ÜS7[AIF¬•pd± (ý¯ð¸|6ïG[ Î¡¸o=yÔ <Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execfsck20ÜS7[AIF¬•pd± (ýB¼ëOIöª¦GíøâàÖ @Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýïH•ƒBeŸ,·\‚ d¥Ø Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execfsck20ÜS7[AIF¬•pd± (ýò7ÿ}žAÿŸìvB(õ‹ìÚ <Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execfsck20ÜS7[AIF¬•pd± (ý)jêüÒCƤo¿ßÎ*?Ü @Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý»«œ|ßÍMo»dÓÒ^o¢=Þ @Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý •Óø*D$¯¹àï/A_à Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execfsck20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ˜ÂûúéâhED(˜ +‰ãe•â <Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Îå®Ó¨ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execfsck20ÜS7[AIF¬•pd± (ýâÞœëH©£‹Æa–ç„ä 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýaÞԖ˃B|¯Žç„äQë æ 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý/#é›ÚµJ™‚ ž1õ¬}ñè 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý 0â?óI`f‰Mbì¾ðê 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý¨$lLɱN^¸wá +³)KGì 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€Àä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý”Á‘"ž·Mt¤{‘Z²à¥î 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€Àä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýð±@Rá”AÕ¡8(Ðå„™ð 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€‡ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý¹…bl¯A;0ΦÜ& ò 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€‡ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýÿ’^´;ÔA"³7j +È°¼ü6;G`‰Kl؉n˜ 2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€Àµ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýºônðÞ÷L,¯ì$C>Ðíš 2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€€¸ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýåŒ}ž“·F5„[iÓ=‡›œ 2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€€¸ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýɲ•ù€K£“²ÏKy(òž 2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€À¹ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý­ÄñUx•G¼„•7Ä+ q  2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€À¹ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý¦ g/nO’® ×D8ü¢ šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýöðóà AZ°GÏÙGÊÎܤ <šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Îå®Ó¨ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýsmó‰þDž ÷9Ž‰”¦ 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€µ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýù2† OI‹‹ÔÐq ôD¨ 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€µ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýùrW\NÓE$ª«üˆúD.ª 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€» arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýÅ ‘Ñ‹F6«D9Ž%Ã+¬ 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€» arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý¨£†Ð5+@ß’ê%4"Ñ %® 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€ú arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýãdÄDA€²¢¬^|Š‚e° 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€ú arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýÈ[½/‡Aà\ý£×Ų 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€Àœ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýÃÛÛuðGjžð­ô´ 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€Àœ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý}×ÓHÀBɵâ>S6ù¶ šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýHNKÔO†¤XUWhžó¸ :šœ ÙR©Fz鮩'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý˜9Ñt$OB·!Æ·í#·º :šœ ÙR©Fz鮩'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý|¤áÏB.²»oXr»ÀS¼ :šœ ÙR©Fz鮩'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý +P܆ZÛGP‡ÛzìÐVU20 +ÜS7[AIF¬•pd± (ý{ð;9ªLŒ€V„ú4m,¾ <šœ ÙR©Fz鮩'üvºP܆ZÛGP‡ÛzìÐVU/dev/ada0p3äؽިûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýuIwvQŸ@ù€l <±³R À @šœ ÙR©Fz鮩'üvºP܆ZÛGP‡ÛzìÐVUäؽިûð‹+aue_pread€€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý›ÇSb‘ëLa¾>±¨Å ‹½ @šœ ÙR©Fz鮩'üvºP܆ZÛGP‡ÛzìÐVUäؽިûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý#ŽâÏ.D  .g’*&üÄ @šœ ÙR©Fz鮩'üvºP܆ZÛGP‡ÛzìÐVUäؽިûð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýSºXnDȧº"EsèrVÆ šœ ÙR©Fz鮩'üvºP܆ZÛGP‡ÛzìÐVUäؽިûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý¼q’ô>1J‰•ìºƒÈzQ&È šœ ÙR©Fz鮩'üvºÙR©Fz鮩'üvºäؽިûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý<ÇodODp¦£°«%y/Ê @Λ µƒÂFzé®›'üvºö¢][ˆª_ˆ[°¿ªàôäؽިûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý ­• +KoŠ×ÇI¾áÖÌ Λ µƒÂFzé®›'üvºö¢][ˆª_ˆ[°¿ªàôäؽިûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execfsck20ÜS7[AIF¬•pd± (ý-F‡•ç€E§G».”µtÎ Λ µƒÂFzé®›'üvºµƒÂFzé®›'üvºäؽިûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execfsck20ÜS7[AIF¬•pd± (ýµƒÃÏFzé®›'üvº–™, Bª¢T$µ„äý`ÚhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÚ&¹$LûF«’eæ!m !:Ð è› µƒÃÏFzé®›'üvºµƒÃÏFzé®›'üvºÊËÒƒ©ûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec logger20ÜS7[AIF¬•pd± (ýê*·WJ¹ž?ò“­eÇÒ 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UèÁµ¾«ûð‹+aue_lseekÊÝ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃÿÄ4]A×­XÑñ'Ö ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UèÁµ¾«ûð‹+20ÜS7[AIF¬•pd± (ý` =ZfOšy¿™®ð“Ô @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UèÁµ¾«ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚª“/NGy™,v?ͼØ 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶ª±ñ«ûð‹+aue_lseekÚé +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’µ\º^…BsˆÖqsa&˜zÚ b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯’é§Ö¬ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýp+RåˆqLü§ìÚ±ùÜ R–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº¬³ï߬ûð‹+aue_killpid signumarg_pid1282arg_euid1003arg_ruid1003arg_egid1003arg_rgid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý'‡~‘{H²¼ T‘ð«*Þ b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¬³ï߬ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýJ €’uÅOq« s^õ©GÃà "–œ ×µ¨Fz鮩'üvº¬³ï߬ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1281execbash20ÜS7[AIF¬•pd± (ý¬O-ÃßGLA³V¡ kª â b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¬³ï߬ûð‹+aue_write*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýG†$¸C €·¤}ÄÊvšä @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯–‚Ñš¯ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýBÝPµ§LFÈ£xÌC”I´;æ b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯–‚Ñš¯ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý¿B‘¼X@ͤa‡âV‡!‹è @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Î—ãð¯ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýñ–+—ž}K·• Ü;€Uê b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Î—ãð¯ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýGa'éñsDu¸ô™ÌUxì @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú­ì°ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ°Œüv£B.!Eª¦ä`’{ÒGî b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú­ì°ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÄhûawF˜‘púùð @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÊŸÖû±ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÅ©\Ò Eµ(x~ Aò b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÊŸÖû±ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý£“LLö• D½`IKÀô @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ê„âȲûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýüÄ\x6OV››§ìž6a”ö b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ê„âȲûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýZCÜòÙ¿B ¨ËC|Òt>ø 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UøêÖ°³ûð‹+aue_lseekžƒ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOlOÕÆÑGã„t†‚â":Ãú @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯êÊþسûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý˜‹›£(OÌ°ÖŠza°}ü <–œ ×µ¨Fz鮩'üvº€-§q0]±+G-0D /usr/home/user/.êÊþسûð‹+aue_open_rwtc +flagsmodet  +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý'Qó ïB!²ƒP²è´rþ –œ ×µ¨Fz鮩'üvº€-§q0]±+G-0DêÊþسûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý£r² »jO½¶ò–;i¦“ê€b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯êÊþسûð‹+aue_write*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýª»1Ü0ÃBj¼bûh‚Š®Q‚@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eʲµûð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÏñÔÏSH*”é†M¬<¸$„JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊ²µûð‹+aue_sendtoÚ +ret_msgid384hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý\ï‘íÝ»B}µ$ \†JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊ²µûð‹+aue_sendto˜ +ret_msgid385hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý²’{ƒê@ÿŸ>‰ËäðUSˆJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊ²µûð‹+aue_sendto¬ +ret_msgid386hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÚ@nôKBð¨<­BñGãŠJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊ²µûð‹+aue_sendto˜ +ret_msgid387hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýFÝÃÊà¬Gí¹©fÙü<µDŒDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ²µûð‹+aue_recvfromÚ ret_msgid384hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¶aËfô'A®…kËÙ僢šŽDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ²µûð‹+aue_recvfrom˜ ret_msgid385hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý²E&0*Ndøm˜æ¥Ð@Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ²µûð‹+aue_recvfrom¬ ret_msgid386hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýoÏa CrŽ¾V('’æ’Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ²µûð‹+aue_recvfrom˜ ret_msgid387hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‚÷ˆlLľ…-9‰gÓ”0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_lseekžƒ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}”ª>…Kغ?%»PAH!˜ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+20ÜS7[AIF¬•pd± (ý[ /#D½E¦¼¹åÓ…Í–@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýnr À˜øEi”÷üOyƒ5òœ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+20ÜS7[AIF¬•pd± (ý‰MËCV†CN±ªÃE´äø%š@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýj ônŠ`E݇øÊjúk%)  ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+20ÜS7[AIF¬•pd± (ý?Ћ§þŽOo›ù'ßÕt*ž@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛ|ôâõbC£ƒ1Á3wÁ¤ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+20ÜS7[AIF¬•pd± (ý;øo“NÚššSýPƒm¢@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôd50ôNª˜ÅËÔɾ*¦:‚œ Ê +ÙKFzé®›'üvºÖë챺ûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[£`™LV‹¿S±¸ÕÚ¨@ œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Öë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†G­¯B@¹ùq.ðJKSª@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"qOÎsG`™€²'|f¡¬@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadÐFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒË>ÎN•üÒ·ƒ›¢®b œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÖë챺ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄhãiÿHô•$Q?‹©¹~°b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÖë챺ûð‹+aue_writeºGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊøPA—°M±¯WùcȲ@ œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Öë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°Ç)DôBó¯x&¶"~´@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýo‰p¯€ê@½kß^R˶@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_pread°EhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµU#ðIœN³¦ú zõ²ä'¸b œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÖë챺ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýï„q%™8D ˜y= Na§ºb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÖë챺ûð‹+aue_writešFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊ`+}LLi§ÿ@}æãà¼@ œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Öë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5þí'¬Bðª¬gšOç¾@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=]{‡ÕEI•FgëÀ@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_pread¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYß܈-D§þ˜chkêÂb œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÖë챺ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]æÔ°J J~€õ>þì—Äb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÖë챺ûð‹+aue_write¦hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýú©J“sCJ©´*‡¤N@b£Æ@ œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Öë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄ-´êžBó¤cÄ3ÿƒüGÈJ œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÖë챺ûð‹+aue_sendtoÞ +ret_msgid388hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕ«×:VN«¼L7¤þ½ÌÊDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÖë챺ûð‹+aue_recvfromÞ ret_msgid388hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýµíIŒ7¬UžKÌbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÖë챺ûð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý©º•‘Cü¹²'²’C”3ÎD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§Õººûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢ÔW$Fd™Ò^æõ\ååÐD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§Õººûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýBÒUk†©@a¤_Øâí9ÒD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§Õººûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@G¶sÿGN†–0`ˆªŽáÔD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§Õººûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞŸ2h¥rM9¤m†©x«9,ÖD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§Õººûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`é8¾E*‰ùòŽóS—‰ØD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§Õººûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…äOñÍHh³8ÛݨŽ~Ú0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸¡ÿóºûð‹+aue_lseekÀÇ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ým "$JÝ ûÏ …iÖÜ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÜƒÜã¾ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýR¿w-\ÕNI„ˆ1®$¸Þb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÜƒÜã¾ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýS0Ï›D¯~p„wz\à@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ø–™Àûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý’ÃueJ’¥°ó“|s™âb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ø–™Àûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý-Ò¥šAJ§y–Ä7”ä@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯„ùðÁûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý +[Q…¾vVS¶¾4ÿCVaí20 +ÜS7[AIF¬•pd± (ýúÉ{‡ ÑB’¸z]&üC’‰æ<–œ ×µ¨Fz鮩'üvº[Q…¾vVS¶¾4ÿCVaíD/home/user/ripe-prov-tests-master/„ùðÁûð‹+aue_open_rwtc +flagsmode¾Ð +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýúÃÎD¼FE€žºYÇ‘¸úhè–œ ×µ¨Fz鮩'üvº[Q…¾vVS¶¾4ÿCVaí„ùðÁûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý**=ßD¸¹‡„Q¼û†êb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯„ùðÁûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýs†@ÛËÒMŒC~!ûZì0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ö§·Âûð‹+aue_lseekÀÙ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂXšw}­K¡k4ÇW›jÃî@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ŠƒÃûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýäª~pK”·ûÁ* +D_ðb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ŠƒÃûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý +Þç=š8§T¸šm9D§b20 +ÜS7[AIF¬•pd± (ý•X6ÛµC=¸ó.d”žÍuò6–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvºÞç=š8§T¸šm9D§bN/home/user/ripe-prov-tests-master/LinuxŠƒÃûð‹+aue_chdirhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýø/a„¼MʳY¯Œgãô"–œ ×µ¨Fz鮩'üvºŠƒÃûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1281execbash20ÜS7[AIF¬•pd± (ýøoveUJ§ŸÕ}rÝ@¬øöb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ŠƒÃûð‹+aue_writedhostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý¦ýj¸ÊCѶ4U ¯SDø0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_lseekÀÙ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀ@HHMPƒß7@Ž±üü ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+20ÜS7[AIF¬•pd± (ýÕøÍâ¤H œ0Ù¬Ù% Cú@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõ›zWDá‚¢ÙÛ¯¸i†€ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+20ÜS7[AIF¬•pd± (ý|ËNï²D!¬$ˆ›ùàþ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyI‚<ìoCÓµsöóK„ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+20ÜS7[AIF¬•pd± (ýk3ô†§JK©€/DÚ4Û‚@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾åº³í§AK€,þIðA ç†:‚œ Ê +ÙKFzé®›'üvº´è…¥Éûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{x]ÛßLá´‘%çÔ,Öˆ@¢œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ´è…¥Éûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýaŒ²Cƒ]Ob…íƒ[]%v Š@¢œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþtJxE»ìÑgÊËŒ@¢œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_preadšDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“€ùªZnL¼Yl¯²$pNŽb¢œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á´è…¥Éûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýc])uÎI߇v»Áº© +b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº´è…¥Éûð‹+aue_write„EhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý' p·+ŸB¨…ü¸OmH1’@¢œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ´è…¥Éûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýE?ªÑ¹B™ôP”Bôk'”@¢œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýN†Ž«bAGð³N¹¹H¤uX–@¢œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_preadøhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý 8¯HùöJܘ¾+`ˆQƒM˜b¢œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á´è…¥Éûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ´¤ü‹ Û²–D ­8D´’/Éšb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº´è…¥Éûð‹+aue_writeâhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&Æž’|ÕK3id‹…µœ@¢œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ´è…¥Éûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOÛ‰"æ÷AuU¯^hR•QžJ¢œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº´è…¥Éûð‹+aue_sendtoÞ +ret_msgid389hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýSø8À¿Á@(ŽØ¤Còf9 Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº´è…¥Éûð‹+aue_recvfromÞ ret_msgid389hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÍ™eQìzDœíÛk–8P@¢bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK´è…¥Éûð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý,Œ‘Ï{2L8—ë³™ M¤D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº´è…¥Éûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'ðóWH*±?_cŸøpa¦D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº´è…¥Éûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖœÕðÁ¾Mß„9½( ^…N¨D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ’ø­Éûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýíž9ýè£Ay%Q£ =ªD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ’ø­Éûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýö \6VHõ¹j²¥W!ä"¬0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ÄäƒÊûð‹+aue_lseek°‰ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐÒ“-Í+Kŧ|¤äß¿®@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯îŒæ‰Ëûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýž‡ˆ™P @¿ƒ¡ŽEÑ'Ç®°@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯îŒæ‰Ëûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÞ ª¸’lA»Ÿýüç»›8²@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯îŒæ‰Ëûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýí’â?IDÃ…ìÓÂz=Ôµ´b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯îŒæ‰Ëûð‹+aue_write@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý¯]ñpJ!„?ÇJ!D2¶@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e€ßŸßËûð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÇl,½÷G¨|],f;÷µ¸JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ßŸßËûð‹+aue_sendtoÚ +ret_msgid390hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýfõß´ÔDº”W™…ZÙמºJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ßŸßËûð‹+aue_sendto˜ +ret_msgid391hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýŒ®¬2?éD3¾enYˆ­¼JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ßŸßËûð‹+aue_sendto¬ +ret_msgid392hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýeš‚l«B"¢ì–œ ¾JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ßŸßËûð‹+aue_sendto˜ +ret_msgid393hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý÷MÊèõAý™{ô9@¹ÀDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ßŸßËûð‹+aue_recvfromÚ ret_msgid390hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýC2š€ÅiJ½ƒÝ8wM[ÂDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ßŸßËûð‹+aue_recvfrom˜ ret_msgid391hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýüsŽ/ @B™<ÙèÏÄDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ßŸßËûð‹+aue_recvfrom¬ ret_msgid392hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý˜ú/¦ãIƒ….'‰§ö²?ÆDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ßŸßËûð‹+aue_recvfrom˜ ret_msgid393hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýDø8f2NgµÊ9îžthÈ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈ°€ÇÑûð‹+aue_lseekº  hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹›îÝ\‡ž}Ë¿cyê12320ÜS7[AIF¬•pd± (ýµ5Ž«Fz鮉'üvºˆ‹›îÝ\‡ž}Ë¿cyêhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÜšïFz鮩'üvº107.155.79.108ö20ÜS7[AIF¬•pd± (ýš+»êDá¦+×£·ô›Êø› µ5Ž«Fz鮉'üvºÜšïFz鮩'üvºÌˆÃàÑûð‹+aue_connecthostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1address107.155.79.108port123execntpd20ÜS7[AIF¬•pd± (ýÁxF‚#¢C1¿>¡'£ÃÌø› µ5Ž«Fz鮉'üvºÜšïFz鮩'üvºÌˆÃàÑûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ýµCJœFz鮉'üvº10.0.2.15ö107.155.79.108ö20ÜS7[AIF¬•pd± (ý/ +/ØE—›Ð6³Ô€ˆÎJø› µ5Ž«Fz鮉'üvºµCJœFz鮉'üvºÌˆÃàÑûð‹+aue_sendto`ret_msgid394hostHdc53375b-4149-46ac-9570-64b1090f28fdfd22ppid1address107.155.79.108port123execntpd20ÜS7[AIF¬•pd± (ý +µA¬ÐFz鮉'üvº 20 +ÜS7[AIF¬•pd± (ý€··¹«ÕK°ýäÛ¥;ÐJø› µ5Ž«Fz鮉'üvºµA¬ÐFz鮉'üvºÌˆÃàÑûð‹+aue_sendtoÌ +ret_msgid395hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execntpd20ÜS7[AIF¬•pd± (ý +µ !Fzé®{'üvº 20 +ÜS7[AIF¬•pd± (ý,"h”üI¹š¯Ms!ïͳÒDê› µ dôFzé®{'üvºµ !Fzé®{'üvºÌˆÃàÑûð‹+aue_recvfromÌ ret_msgid395hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý;caЊ(B¾•Í6LäGÔ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_lseekº  hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,Z·üriH¤Øñ  @Ù{Ø ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+20ÜS7[AIF¬•pd± (ýYpصSAt­³±_ÓÖ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý žÈä®A;­~^"–_*Ü ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+20ÜS7[AIF¬•pd± (ýúÙZERoJ5£¹3pÖ:¯´Ú@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýéÑ n©EH~„‰„Îá3Ùà ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+20ÜS7[AIF¬•pd± (ýÑ‚ÃGx›Tv½HÕÞ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~òV­ÁFª“ÏjB£Ð‹â:‚œ Ê +ÙKFzé®›'üvºöâá—Øûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáHÊhªKж5 Ò{7ºä@¤œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V öâá—Øûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³לåO?³xs¤®¿¤Ãæ@¤œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ³³`]²H×ò¥UȱÅVè@¤œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadè/hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýd1…I|EF”9FkÂNêb¤œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áöâá—Øûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðz÷jI%›×—ÀÎÉìb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_writeÒ0hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸ôÌ­KDn’Úr!Òg¬î@¤œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V öâá—Øûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI €á?E¸¨>£kòzð@¤œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤@á‡Ë@Å Ç—Î#ðò@¤œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_pread‚hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠi ­¸ÙAvŒ°‡ñvŽSôb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_writeìhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.å¿ÿXÀF*–Æd}ÀµVöb¤œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áöâá—Øûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýü3݈/ÌK/²q´ÙAOø@¤œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V öâá—Øûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0¤Ü´M7•yljžúJ¤œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºöâá—Øûð‹+aue_sendtoÞ +ret_msgid396hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQO£žo×Ejš-]tgâüDê› µ dôFzé®{'üvºµ CjFzé®{'üvºöâá—Øûð‹+aue_recvfromÞ ret_msgid396hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýb˜Ùvö¯I¢­²72w­gEþbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKöâá—Øûð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý£kž\è^Cžڜѕš0¤€D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀY—ºãB¸¯/õI­áxp‚D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýß lÏM"¢ÄºÛF 'Ý„D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘ï® ÄG¹ºh,f ¹_†D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½M&,v‡M[¥ycó9ᙈ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¸ÒµäØûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý±dô\B®IQžq¼É Y¼Š@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¸ÒµäØûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýé¤ùú_N@¢çMÅ^›fŒ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¸ÒµäØûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýw?írLÛµ"&Èx†6Žb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¸ÒµäØûð‹+aue_writeJhostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý +Z¼ìA‘DϯgÏ5¦}ö 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ–£ŠÙûð‹+aue_lseekºØ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶—šÍ‘ïLÿ—ŸïÅ‰É ’@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýëDû+d@øªíµ–Íñö”@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý*$yÈRŸDQº(%¸6Ô‰«–@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý_l:‚Js£"5¼ Ö4˜b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý -²²4eOé¯Êrh›£úš@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý㑳ý&C¤Xã;“ñœ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý»˜.êJ¤J›íØW-ëž@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýúhóAGŽâE½ì€K 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾ÜæÍàûð‹+aue_lseekÚå hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽAäœM~²%ë ® kN>³Ä¯ñÂ:‚œ Ê +ÙKFzé®›'üvºÜ¥Ê‹çûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýö½ +U O¦²c˜š·¡>˜Ä@¦œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ܥʋçûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(P¹¡ê@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯†×ã§çûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý#´IÞ©PˆS…‡èì@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯†×ã§çûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý5ÇPÁãN÷ˆƒ¨v `îb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯†×ã§çûð‹+aue_write`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýúÎfÈvÈC‡yüT…©ð0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâÍçèûð‹+aue_lseekø hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜ[k~OS–yF=M£dò0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UöÙõÓïûð‹+aue_lseekÒ£ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûMŽ|—H°rz­RK»ãô0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_lseekÒ£ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýGè-gdŸIº¸¼+Þ·;4ø ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+20ÜS7[AIF¬•pd± (ý!‹Ä^He»îÿ‹Ÿ3>Êö@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—Ó‹¥E³šÎm+·îü ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+20ÜS7[AIF¬•pd± (ýœØ£ÂioMH°x]–É}~ú@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýß(ß2uEô£Îay³’@€ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+20ÜS7[AIF¬•pd± (ýÒd×gÆ€Nð‡âO´]üþtþ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹(š›Bù“tú(.X8‚:‚œ Ê +ÙKFzé®›'üvºÌäÀþõûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýtðR³ÒèB:¢òˆ3j„@¨œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÌäÀþõûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛX6öPH£•m¡‹±Ž‹†@¨œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'{}šnQOÙ‰Tˆƒ¬Úòˆ@¨œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_pread–8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~â³n\D˜ªÔ BÑgŠb¨œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÌäÀþõûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýó†a›Dv@ ‡p¶FÃ}ØÈŒb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_write€9hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£ –þj˜Iˆ¢ä7»vjÂLŽ@¨œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÌäÀþõûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>‹´¶MµCºŽ<šÔé‚Bœ@¨œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAô¢ß@"FÙŸÔ€S­g¾’@¨œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýžù“žAOç Y3ïkæh”b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYv-_uB}’Àì _®7‰–b¨œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÌäÀþõûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²°gwRQKb‚÷ ¬œ#ɘ@¨œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÌäÀþõûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýF–ì2šùDׂŽŽLw!tšJ¨œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÌäÀþõûð‹+aue_sendtoÞ +ret_msgid402hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyÅ8€O3¹ öø³Æ#œDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÌäÀþõûð‹+aue_recvfromÞ ret_msgid402hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý Ü.¹BU†™…WÏØzžbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÌäÀþõûð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý2‹\Æ”Bè›Çá jÒ D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZ"¢i^K“·ó÷•Ì”g¢D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"ZäRâOТ9cE8”»2¤D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýeháq‘Oeº{a¿° Ž|¦D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿ>ØZF¤<@–r¨@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¢Ìˆ›öûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý³™úßF–ŠÁ×KáÜ"ªb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¢Ìˆ›öûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý߆7æFz鮩'üvºŒ×µ¨Fz鮩'üvº°äÿ§®]vRS<„äB±¢Ìˆ›öûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýê{ÓT"E¡Äˆ´„rÄo¬$–œ ×µ¨Fz鮩'üvº߆7æFz鮩'üvº¢Ìˆ›öûð‹+aue_fork +arg_pid1286hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1286ppid1281execbash20ÜS7[AIF¬•pd± (ý +€ËâÞ +jÉO+³¸ŸJ@JˆÞ<šœ ߆7æFz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¢Ìˆ›öûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ’øýú×_~_AÊ’›‡rrà@šœ ߆7æFz鮩'üvºXꎩð®…\®ð@JÌ…¼â¢Ìˆ›öûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý@!XÇŒ{EýˆdÕÐûôâ@šœ ߆7æFz鮩'üvºXꎩð®…\®ð@JÌ…¼â¢Ìˆ›öûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý6çC‡nkK¦†mÎÊ—iäšœ ߆7æFz鮩'üvºXꎩð®…\®ð@JÌ…¼â¢Ìˆ›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýùM@R¨Lºž>Ðv#nTÍö2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý®#u]ÁE[‡= +sÊzøšœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýf ÒMôùOð¶•)ï¯Kú<šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8¢Ìˆ›öûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýêÌÔ©DOz›¦Mæ‰$QMü2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýgF¹îãOª¬0ìgkþ2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýôÝuS(DM…÷êÍ¢Ÿæ€2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý!sTÎ/O’V –‰~‚2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýï5Á˜B=²¶q%zX,„2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýȃǬzLã®õ;f°E†2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý}y9¤˜€A³›¡ÄJ:œ¦éˆ2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý–sTƒAø‚²xëw Š2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý…ŽIì‰8C„ªþ›Ç€1猚œ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýÀÁüß7H؆ÈFƒßdÌŽ<šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1¢Ìˆ›öûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý¤Ì¢ wC·þãrŸ‡2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý’á\'nÛKԚǻ_á"Î’2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýªÓ†üO0µÿâðI~N”2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýb—G=ŠnAÚ‘{qì®MÔ–2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýæý§ÿ,BPºÎ8Icë˜2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýfÐô’JbLk•iÑìCU\š2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÅOćCü„iC2gÞ2Mœ2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý)^jüƒ2FX½7àЯZ;Úž2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýM}ª°ªüEf´D/gÒâÓ šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý³Û·UéKž¸ÂX4Š{!¢<šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¢Ìˆ›öûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý Õ9Ø?¿Hð†Fû˜¤2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¶âlÉcO%ŠI³^²uG:¦2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý‹ä1tÖãIR‚…c¿õw¨2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýg¾íL¿¹N­ûLºMFŒª2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýgÑöºsMM¶»ÏÄÖ³¥¬2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¯û“ê@r¡ +„ŠÌßÀ®2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý+)šQKú²óø?µ¿_°0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌñé ÷ûð‹+aue_lseekž¯hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýé>™†¥M(¹…i´té~ª²@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¦Éݹøûð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýè G؈{Cd‡ëiŸ­å4 ´JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦Éݹøûð‹+aue_sendtoÚ +ret_msgid403hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý1Y´¡uM`Œïn·+h¶JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦Éݹøûð‹+aue_sendto˜ +ret_msgid404hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¥ÌbÃóiB”*ù’¢ÃÌ +¸JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦Éݹøûð‹+aue_sendto¬ +ret_msgid405hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýè) ¨©¿F=¦³D%0<ºJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦Éݹøûð‹+aue_sendto˜ +ret_msgid406hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýjLzÒp:Oi¬n|`ÃF©¼Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦Éݹøûð‹+aue_recvfromÚ ret_msgid403hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýtS®¥ƒ|LèÚýÑ'|µ¾Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦Éݹøûð‹+aue_recvfrom˜ ret_msgid404hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýßF± J\¢ ”86 +CÀDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦Éݹøûð‹+aue_recvfrom¬ ret_msgid405hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÖ¶3Z ôIª¡Äoá0ÛÂÂDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦Éݹøûð‹+aue_recvfrom˜ ret_msgid406hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý߇NéFz鮩'üvºŽ°äÿ§®]vRS<„äB±hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýŒŸäbAá’‹ @å3Īœ ߇NéFz鮩'üvº߇NéFz鮩'üvº¬Ì°ñýûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286exec +sleep20ÜS7[AIF¬•pd± (ý«ïvDƒBF£¼ÿ5’¾Æ<šœ ߆7æFz鮩'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.db¬Ì°ñýûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýnPöúé–NñâùÅXLÈ@šœ ߆7æFz鮩'üvº–Ø%™wyïR¹wT’ï9¬Ì°ñýûð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý=wäÎ@H†Š¬,p+Ê@šœ ߆7æFz鮩'üvº–Ø%™wyïR¹wT’ï9¬Ì°ñýûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¼ˆôJQ¡´öÕU¢(yÌ@šœ ߆7æFz鮩'üvº–Ø%™wyïR¹wT’ï9¬Ì°ñýûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýñ»°šÊðCU‡r!ï £ªËΚœ ߆7æFz鮩'üvº–Ø%™wyïR¹wT’ï9¬Ì°ñýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýTWIYG`¡E´tñútÐ@šœ ߆7æFz鮩'üvº€ËâÞ +õˆO› ‰Ls@f þ2ªœ à"ìvFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¬Ì°ñýûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ý•ø :K<˜Q´sûØ@€2ªœ à"ìvFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¬Ì°ñýûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýW±åØF§®Éµçbš‰‚ªœ à"ìvFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¬Ì°ñýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286exec whoami20ÜS7[AIF¬•pd± (ý²¨ÉvèJY•œyÃTk„:ªœ à"ìvFz鮩'üvº¬Ì°ñýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286exec whoami20ÜS7[AIF¬•pd± (ý ö«}GIݼ ÂÏX†:ªœ à"ìvFz鮩'üvº¬Ì°ñýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286exec whoami20ÜS7[AIF¬•pd± (ýAHß”/Ó|Ð,ˆ<ªœ à"ìvFz鮩'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.conf¬Ì°ñýûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýùÆ&X`Mqˆxß.õÚ±Š@ªœ à"ìvFz鮩'üvºÜN½Ëê¯+^¯êZ£®+V¬Ì°ñýûð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýÆåÙ“ÕAņP"õjÔ–TŒ@ªœ à"ìvFz鮩'üvºÜN½Ëê¯+^¯êZ£®+V¬Ì°ñýûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýC¨$X/O'‚Š7ÌÖþòðŽªœ à"ìvFz鮩'üvºÜN½Ëê¯+^¯êZ£®+V¬Ì°ñýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286exec whoami20ÜS7[AIF¬•pd± (ý +¥úœ—ÚGÔ©4&—šŒ³<ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–/etc/pwd.db¬Ì°ñýûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1286exec whoami20ÜS7[AIF¬•pd± (ý]ìoÏųCx ,›×ɦ_ô’@ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–¬Ì°ñýûð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ý’[± +¹Hï”cbìà<­ª”@ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–¬Ì°ñýûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýHLó’WÌI_aˆB6•q–@ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–¬Ì°ñýûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ý¶p^^×ÍA5‡ÀK‰ái‡-˜@ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–¬Ì°ñýûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ý#“‰áõOe›¿K‡@”5õÇÑÌÿÊ2ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý;ßÚ½}gFr–”,FÜcž–Ì2ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_mmap€€¸ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýçq#¦/ÜLÄ™ »®¯wö&Î2ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_mmap€€¸ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýŒ À³I¼†Eÿ QáÙÐ2ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_mmap€€» arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý´è<…L1Á¤ »VsÒ2ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_mmap€€» arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý^ñÈÅÿ‘F¯sï#l‘Ô2ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_mmap€€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý¡—÷®õ`KxŸ&YŸF£ýýÖ2ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_mmap€€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýnШ}²2G×ÏÇ<\|üÔتœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý +yõÔÑC¼,_¼Cðgß,òE20 +ÜS7[AIF¬•pd± (ý䘧7pnOøšð$ç<=¡Ú<ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE0/usr/lib/libmemstat.so.3¬Ì°ñýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýö+¯)ηH7‹]}!Ö&´Ü2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý§f9ñaNB¡Žm–cŽ¢ÛÞ2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý(nhÝ–LF’Ë"Aµqà2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€ÀÁ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý|ÀŠ–Ê(L¨¦­Ñ e*Éaâ2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€ÀÁ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý.&• ÇHR»7Áí®—/ä2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€À arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý#ÝΩÇcNZ’¨oŒ}…æ2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€À arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý¾WšW9B.Š°Q&Íé™]è2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýºx®¯´ÅDB›8l&=GŸôê2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý°–‚­pšBÛ¼L#7à ÒÓ쪜 à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý +AÑúÚ¹ËNU‹¹Êì…NNœ20 +ÜS7[AIF¬•pd± (ýðâÚwëpG¦‡lž dÞ°î<ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ/lib/libxo.so.0¬Ì°ñýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýø7Õºd>Nq³²Í2E<Ôbð2ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýú[aOcJ…—ü³ž¢Œµò2ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙŠüús:M$§A8²¡ ‹™$'ô2ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_mmap€ÀÄ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýóEª+ìD9’&Í(zŸ…ö2ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_mmap€ÀÄ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÆ_Å +~îNð¬`¿á§·wø2ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_mmap€ÀÈ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý’N–VªI¤ ´ÌÄ|„Öú2ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_mmap€ÀÈ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÄ°6æŸNIp”ò[N&æBü2ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_mmap€€Ó arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýª—þîÛDÆòàJ­jþ2ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_mmap€€Ó arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýë¹ê‰‹‡E™ðŽ¥•~°€ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýæu|¥Ci‡H– áyw•‚<ªœ à#·¯Fz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj"/lib/libutil.so.9¬Ì°ñýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý¼ p»–Gм8Å2Ï•-„2ªœ à#·¯Fz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj¬Ì°ñýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý ¾,Š HX½q@iÊI8‘†2ªœ à#·¯Fz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj¬Ì°ñýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý«Û¸¸äN£¡ ~ ð€Õˆ2ªœ à#·¯Fz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj˜­¤ûýûð‹+aue_mmap€ÀÔ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýŸD<ÆfÒG6“†³pŒaÁŠ2ªœ à#·¯Fz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj˜­¤ûýûð‹+aue_mmap€ÀÔ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý¼ºvÞ°TEø§¦È¾Œ2ªœ à#·¯Fz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj˜­¤ûýûð‹+aue_mmap€ÀØ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý]™%GFHщ}ìîíä×;Ž2ªœ à#·¯Fz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj˜­¤ûýûð‹+aue_mmap€ÀØ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýk–E¼¢šLÓž@{ÿ^‹2ªœ à#·¯Fz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj˜­¤ûýûð‹+aue_mmap€€Þ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýË]îÑ<øEo¯|âÉüe’2ªœ à#·¯Fz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj˜­¤ûýûð‹+aue_mmap€€Þ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÆ}JÑO¶÷®ÿ2‹”ªœ à#·¯Fz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý +`;‡à2RŒ^’2¬øžŒ““20 +ÜS7[AIF¬•pd± (ýŒ2­2L¿£ö‰¶‰ÝƒÂ–<ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““2/usr/lib/libnetgraph.so.4˜­¤ûýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÚ]˜í—aJû>Ê5–@ǘ2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý OµLöDg¼å¯‘Å€çš2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý»·¢ðKYº¯.0¬¤rœ2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýH¡,‘‡GD·ö¯á´qqž2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý~w°÷Ï*J¹q ÷¶ªú 2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€á arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýúUô†±D8¤íìmÂl´Ð¢2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€á arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý]íDU©H9xmæ•,ݤ2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€â arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý" ü=(ŒL&3l¬ô¡»¦2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€â arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýêùD«CŒ¤öiöšÿWÞ¨ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýfŒð/o‰C¹Æ¸>ª<ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7˜­¤ûýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý"¢ÿ€eŒKã«ž’u%„]\¬2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýv~ VF£Hwº`^îÒ ©®2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý=>NôÃE왽„¤÷x°2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý +€&lÙO1  +fÊÏFC²2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÈÎyìÞFÀµGc(äÑ ´2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýò|¢ÊYBÔ¾‘kÚeµe¶2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÇ2BHyvw¼öuÑ^¸2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý‰šíoJeKñ§‚DáNÌ®}º2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýØÊYŒ·Dû¿œ·[*·à¼ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý +1ßö¯È’Wˆ¯BRç’Íç20 +ÜS7[AIF¬•pd± (ýuIjK”'ŽÕ—v¾<ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Íç /lib/libelf.so.2˜­¤ûýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÕØ¡òOÌCM‹µ4ÏÛ:lÀ2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýo.uOHO›?\üA,VÂ2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýØ–×™•ÅAb†úä$öÄ2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý 6ã§+[Ef ¯,6'È Æ2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýúýD‹l>M*.†ádÖÈ2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€Àã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýŸ’‡ðnãG´¼úwŒs‘Ê2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€Àã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýp Ö‘&ˆI[[3K\šÌ2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€€ì arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÞ² +(@ܿΕr‹UFþÎ2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€€ì arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýŒÇ™œI1 Æ«z2¨ÒЪœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýh+µ™ÅJA¨˜˜ÝB5òoÒ:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÀÛEªM±·ð)ÔåG 'Ô:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý`àääO$»>k&ä$˜tÖ:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý”åЦFdE3—Ø !›ÿØ:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýy…TþHت“H±¶ 'Ú:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý•¥ ?Ü:D¹FW« ãøÜ:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý3x¯E>ÀD[•—¼Ó+M‘Þ:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÿŒ®š9oOõ•Æ} ü˜Ç–à:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý‘%*½Vl@©Œ­Š³Œå¯âbªœ à#·¯Fz鮩'üvºÏU…¹^…•öþ¹€Ü˜­¤ûýûð‹+aue_write¢0hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execnetstat20ÜS7[AIF¬•pd± (ý²E¨~ÂEá­`¥Q5¥$䪜 à#·¯Fz鮩'üvºà#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýRdv¾éEmYA=ÄÒkæ@šœ ߆7æFz鮩'üvº€ËâÞ +˜60Š2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý‚^VpüéB +‰¨Ô˜Ùíº—Œ2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý}H³hCöŠ,¨-RPyÁŽ2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýø«²çc•D[ˆ¢Ðøêpó2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý”]:­fCzªOÓÃ1Ÿ’2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýKRâO¾Ì@‰ïb¸óÕ‚”ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýpaŽóGR½Õq6÷ê¥>–:ªœ à$ýFz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý½ÉðþAw¸[£–ª›˜:ªœ à$ýFz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýVN¹×%Es§Å0ÃYšbªœ à$ýFz鮩'üvºí( ö~R¶ ~{‚~¯˜­¤ûýûð‹+aue_write +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1286execcat20ÜS7[AIF¬•pd± (ýˉi¢‹ËOƒ¼IS.GæÙœbªœ à$ýFz鮩'üvºí( ö~R¶ ~{‚~¯˜­¤ûýûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1286execcat20ÜS7[AIF¬•pd± (ý D…É–SG½vÌŽ[±žbªœ à$ýFz鮩'üvºí( ö~R¶ ~{‚~¯˜­¤ûýûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1286execcat20ÜS7[AIF¬•pd± (ýe[€wÍ/C +—QÄį²p bªœ à$ýFz鮩'üvºí( ö~R¶ ~{‚~¯˜­¤ûýûð‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1286execcat20ÜS7[AIF¬•pd± (ý«–eêîAõ¨¶¿€u¶¾#¢ªœ à$ýFz鮩'üvºÏU…¹^…•öþ¹€Ü˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýÍûTÇDð@ Ó!ž¶®æ¤ªœ à$ýFz鮩'üvºà$ýFz鮩'üvº˜­¤ûýûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý·ßQv “G)&CÂR øõ¦@šœ ߆7æFz鮩'üvº€ËâÞ +ú-þ~¾@ªœ à%dµFz鮩'üvºXꎩð®…\®ð@JÌ…¼â˜­¤ûýûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý™“1!?ÐCѵ¸d²{‚Ù«Àªœ à%dµFz鮩'üvºXꎩð®…\®ð@JÌ…¼â˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýaG†D¨C=¹—d"åÍïÂ<ªœ à%dµFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7˜­¤ûýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execcat20ÜS7[AIF¬•pd± (ý׌¨ +ALÆ¥?Ö”Â,NÄ2ªœ à%dµFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýFBÈÉG†1U3‘ÒÆ2ªœ à%dµFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýùÚ• L‹ƒÐéŽ\ÅâÈ2ªœ à%dµFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýzß{äUVEÜ‹°Ÿ—çëÊ2ªœ à%dµFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýöºÍ¦CK¥ìw"›/1Ì2ªœ à%dµFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý¿ ß…‡Dnˆ ›&b“õÎ2ªœ à%dµFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýÒE­@æÎFKŸâòï—äÄZÐ2ªœ à%dµFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý­ÿzgátCÚ„Íifüœñ<Ò2ªœ à%dµFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý´]&Nâ¯1ç^“¹÷àÔªœ à%dµFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý” d/fxE³†¤p)SÀ˜5Ö:ªœ à%dµFz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý„+ò5ÕM½œ EA +Ø:ªœ à%dµFz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý +Â)ì&0T°&+§Tºú20 +ÜS7[AIF¬•pd± (ýXþá"F—”f.˜mJ¶Ú<ªœ à%dµFz鮩'üvºÂ)ì&0T°&+§Tºú/etc/networks˜­¤ûýûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execcat20ÜS7[AIF¬•pd± (ý¹ õSËCA¤óâþi‘Ü@ªœ à%dµFz鮩'üvºÂ)ì&0T°&+§Tºú˜­¤ûýûð‹+aue_readìhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýª®,9 OÈ®‡/¡ßV³•Þbªœ à%dµFz鮩'üvºÏU…¹^…•öþ¹€Ü˜­¤ûýûð‹+aue_writeìhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýA;CƒˆA£›#Q7y8à@ªœ à%dµFz鮩'üvºÂ)ì&0T°&+§Tºú˜­¤ûýûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýÈ68›ñIµœ_LCF:⪜ à%dµFz鮩'üvºÂ)ì&0T°&+§Tºú˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýî‚B¸ÛN2¬# ßš…"Žäªœ à%dµFz鮩'üvºÏU…¹^…•öþ¹€Ü˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý·H¡ÖG ¢µKyºõ檜 à%dµFz鮩'üvºà%dµFz鮩'üvº˜­¤ûýûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýbˆÇXê©@ѠĵÄÃXè@šœ ߆7æFz鮩'üvº€ËâÞ +20 +ÜS7[AIF¬•pd± (ý±l(Ñ‘AÆž{äÍùôªœ à%ÆFz鮩'üvºT-I]ϱ©T±Ï÷ŸÔ©0>/bin/ps'ìAzX™¦}˜¹(/libexec/ld-elf.so.1øŽ¹„þûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineps auxxppid1286execbash20ÜS7[AIF¬•pd± (ý´ +È +bºI@’æ(ÜÖA8ûö<ªœ à%ÆFz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conføŽ¹„þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýìx@Ô ÅA¤Z@{"›>ø@ªœ à%ÆFz鮩'üvº‰oý©äÇU¤©A)Eǹ øŽ¹„þûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÝ\f4 CƯ֬uøf(¨úªœ à%ÆFz鮩'üvº‰oý©äÇU¤©A)Eǹ øŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýé:òþI…«Ÿm[ÿ9ü<ªœ à%ÆFz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsøŽ¹„þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ý×âu-‰KF‚êJ&žRÝþ@ªœ à%ÆFz鮩'üvºXꎩð®…\®ð@JÌ…¼âøŽ¹„þûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýpš€@ˆãIí‚=£‡=ñK…€@ªœ à%ÆFz鮩'üvºXꎩð®…\®ð@JÌ…¼âøŽ¹„þûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýõœ™®K¤g\!ð`”Ø‚ªœ à%ÆFz鮩'üvºXꎩð®…\®ð@JÌ…¼âøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý +LÓÅ:îtX®:îXte˜20 +ÜS7[AIF¬•pd± (ýØ#ÖzwØDyµ3Ò@ðÓ„<ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜/lib/libm.so.5øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ„†ýÇ©kÌA†xVG§& †2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýrd*egNUº.ɽ=mˆ2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý|ŒŒ¿GU³göøOŽù¥Š2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý¦Ð +#.bO¡~šD´È½Œ2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÁšvz“K9¥pdýŸ¶ªRŽ2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýø´–ž>C{œÞ&Ÿí¸2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÎRóÒãîH]®7TŒq–A’2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý;‹ÑñbfNq·±”qAhC”2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýrÿë0ÃN¡é68íÇ –ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýÙo2DÓ LM¹"da$a˜<ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gs /lib/libkvm.so.7øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ý±% @ÝvDw„;Ée p¶µš2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý·&ü&kÂO½³˜|ÌÝfÜ!œ2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýu1TÊËuHÆŽ·êOÕª–ž2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÁ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýrËÏ”¨~H›³ED+Üÿª… 2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÁ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýy>´ï¡LN ½ãÑë’Š¢×¢2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÄ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÍ5szOÁqš-¶Ø'¤2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÄ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýgJ¦8I‚rÈÊó€…2¦2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÉ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý̺[ž¬GŠ²’7¿ß°Ú¨2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÉ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý•0Z{¿c@»’Š_à.¥Þrªªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý +]¸&g [ gÃo{„£20 +ÜS7[AIF¬•pd± (ýB ?dê{Cý²Ûž{‡°É,¬<ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£"/lib/libjail.so.1øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ý·¥þÛO±©Ò”0>é®2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýõ1Òã¾»HÛ‘ñNkñY*½°2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý¤Óu¿êAò¶úÄk +²2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Ë arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýŒàúÛñ”E×€°³Ð#’€n´2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Ë arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýíãZmÿZM¡«û:TÓ¡¶2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Ì arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýQVûB×H¢…kx1Rʸ2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Ì arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýžˆÐ@PB?¢{’>Õ Kº2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Î arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý8É 9WFy¹ 7‚},_¢¼2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Î arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý)8[ÌxLx‹zXДCoÙ¾ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý ÌÄ®Ñ.C ƒ–Tà(;åÈÀ<ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ/lib/libxo.so.0øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ý2Òe®Dsnô¤Z&=Â2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýíb¡m[I>¬°~I°jÄ2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý,¿)àæwIíº«ó•UúÆ2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€ÀÏ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýFËZ¿Bg®ÜAG飕È2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€ÀÏ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÏAB­Eg‡&÷©I,ëÛÊ2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€ÀÓ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýð®âé’9J-‰‚füGú.ÊÌ2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€ÀÓ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý»¼‘Ž3ìBà†¿„™&î +&Î2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€€Þ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýSà K‹¯q¹Ç÷ÜÊ»Ð2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€€Þ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýV¢ÇŒSjOÀžYµ}AîÖÒªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý11Ò9A[œHß_7íGÔ<ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ý'ÁØ[ÎeE3®Ñ50LÉ2bÖ2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý¹¬»®¼‹A}¿âS÷pŸ4IØ2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý&Æ»aâEÒ•õñá[—Ú2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€Àß arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýžÆü!Bà¤úöØÍK¼äÜ2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€Àß arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý›þwZþKR½‘N8˜¾~Þ2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€Àž arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý®º]èúØF醗…7Œ5Rà2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€Àž arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýŽ3Þ5ØíD†’]ü?Ð â2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€€Á arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýz aL×HrŒWÕš9è6†ä2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€€Á arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÆÇœ/O¬¦pżŠ{5F檜 à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý¯œ}(óÞGƒÜ‚²§Ï-è<ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’Íç /lib/libelf.so.2øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ý™åà«]ÆE™¨oì!„OZê2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý`§Jy7Nf…ÔZeK*ì2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýaøŽ§%aI“¨žiÎÙQ®î2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€Ü arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý™g ö H<¦O_õ9\æ‡ð2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€Ü arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÕ%½àWI’±Î’’‡+Ïò2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€Àß arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýìœ +Ú›ñMX©ó™€¤÷ô2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€Àß arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýëlãND¾ˆÇo'“µö2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€è arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý'õ{‡˜wO—‰A׆`tø2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€è arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýުɳIMI‰Üû_&®Ÿúªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýºŽÕÇÁAÞ´®Ç⚸Ðõü<ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj"/lib/libutil.so.9øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ý sPË¥êGù¹7zè":þ2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýVm(4YéE™¯¢ç‰ø“Ë.€2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýŒä+]Q¬IØ _&Š—­Ô„‚2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýð¼µ»«M ½'!üòjÂÚ„2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý­<~|KO{£[´"Þ-š†2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€í arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ žý&ûÜ€5›Fþ£Ü›Oí™?cˆ2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€í arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýƒ úÌAãø¼ç>XñŠ2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€Àò arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý"·qMF¶žDm˜—=¢>Œ2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€Àò arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý·É~ZSGáŒN¶öC`ÞýŽªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýi³E†‚ïG9¥»j2„p:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ýž ¥•HRKÚ”¢t’ò›2’:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ýh}2aeN†¦ßOÀKÜå¾”:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ýÄ+zEŸoJV±BÊá|ϸ–:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ý,¶ºõ¯Cà¥ôÏ9úÞ>˜:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ý"ÙêyÊB7¤m¬óŒŠš:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ý–€‘Ší^Fs–%bZ B¡_œ:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ý¡e—IA±·ààµj™Ož:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ý¤·$Bë"I²5>Qª¦¯á <ªœ à%ÆFz鮩'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nulløŽ¹„þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýyø¿ˆ““N·®7¢È§¢<ªœ à%ÆFz鮩'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nulløŽ¹„þûð‹+aue_openat_rwtc +flagsmode ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value4ppid1286execps20ÜS7[AIF¬•pd± (ý±ï¡Àb…Kò¿c2X…ðÓ¤¤<ªœ à%ÆFz鮩'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.conføŽ¹„þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1286execps20ÜS7[AIF¬•pd± (ýÞŸxþIîDhŽ†v^‹(<¦@ªœ à%ÆFz鮩'üvºÜN½Ëê¯+^¯êZ£®+VøŽ¹„þûð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ýf¡«¡‡®F¯«ƒO¦œGK¨@ªœ à%ÆFz鮩'üvºÜN½Ëê¯+^¯êZ£®+VøŽ¹„þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ýK%峉™E„¥<[×T<«†ªªœ à%ÆFz鮩'üvºÜN½Ëê¯+^¯êZ£®+VøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýR|#·QGM³“ÿî¾z2Š¬<ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–/etc/pwd.dbøŽ¹„þûð‹+aue_open_rwtc +flagsmode +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1286execps20ÜS7[AIF¬•pd± (ý +[î½ kK;¶íE˜ßu3®@ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–øŽ¹„þûð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ýdå6ê[ÙFE Qb‹†°@ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–øŽ¹„þûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ýø<æÃB‡£#“‹/ï²@ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–øŽ¹„þûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ý +ª®bŠ;_ƒŠÖVŸ;*H20 +ÜS7[AIF¬•pd± (ý\!YÊ G‚€ÎI^0nê´<ªœ à%ÆFz鮩'üvºª®bŠ;_ƒŠÖVŸ;*H./usr/share/zoneinfo/UTCøŽ¹„þûð‹+aue_open_rwtc +flagsmode +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1286execps20ÜS7[AIF¬•pd± (ýB;•S„ AM°÷Ó¹rÀÝU¶@ªœ à%ÆFz鮩'üvºª®bŠ;_ƒŠÖVŸ;*HøŽ¹„þûð‹+aue_readìhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execps20ÜS7[AIF¬•pd± (ýîðáUC³®Ã9&à Ó¸ªœ à%ÆFz鮩'üvºª®bŠ;_ƒŠÖVŸ;*HøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý +R‘GVË–D[–Ë.P+Dö20 +ÜS7[AIF¬•pd± (ýw¦Ër­-FË…ºìÜUÆ<к<ªœ à%ÆFz鮩'üvºR‘GVË–D[–Ë.P+DönΪœ à%ÆFz鮩'üvºà%ÆFz鮩'üvºøŽ¹„þûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ý/ ¥ºFÊKdªbð=>%öÐ@šœ ߆7æFz鮩'üvº€ËâÞ +Í}Æ:¬œ à&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýïߌ !GE¶fuÂR~>È:¬œ à&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýŽgcòÀAý»éÞ¯ÀaæÊ:¬œ à&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýµG'âÏNúËÑEÙqÌ"¬œ à&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1286execsudo20ÜS7[AIF¬•pd± (ýyÍŸGY7BA‘ok$ŸóÀÎ"¬œ à&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1286execsudo20ÜS7[AIF¬•pd± (ý‰&ðÙòCAÝ´¯pÅB"‹Ð"¬œ à&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1286execsudo20ÜS7[AIF¬•pd± (ý¨ÓtÕ¦@DT…Ruž¢¤”¿Ò<¬œ à&à°Fz鮩'üvºª®bŠ;_ƒŠÖVŸ;*H./usr/share/zoneinfo/UTCÄ•‰Žþûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1286execsudo20ÜS7[AIF¬•pd± (ý¡£t5µwE¿•:œm +q¸Ô@¬œ à&à°Fz鮩'üvºª®bŠ;_ƒŠÖVŸ;*HÄ•‰Žþûð‹+aue_readìhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýq¨c¢~K^²E<-?EIçÖ¬œ à&à°Fz鮩'üvºª®bŠ;_ƒŠÖVŸ;*HÄ•‰Žþûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýcëói$¼A¿kƒUKŽààØ<¬œ à&à°Fz鮩'üvºR‘GVË–D[–Ë.P+Dö°ÉšîûJå¶@ï'¿?Q¿ä¬œ à&à°Fz鮩'üvºÜN½Ëê¯+^¯êZ£®+VÄ•‰Žþûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý §9Ät@Mó¾îÍ|ü´Xæ<¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbÄ•‰Žþûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1286execsudo20ÜS7[AIF¬•pd± (ýW6 Ù»HjµZ‡Ç÷ÿ'¡è@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýèÆW&¤¦HªÎýåÀï0ê@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýl;›*»K–g7É9ÕÌì<¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨/etc/groupÄ•‰Žþûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ýènlR!iOµ×K‡z»£±î<¬œ à&à°Fz鮩'üvºí( ö~R¶ ~{‚~¯/dev/ttyÄ•‰Žþûð‹+aue_openat_rwtc +flagsmode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ýlNëõ›¹Jâ´@ˆD1|µ¶ð¬œ à&à°Fz鮩'üvºí( ö~R¶ ~{‚~¯Ä•‰Žþûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýuÅš[€Gí¸kºožmLÚò@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýó½¯Mç6D S>ô@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýa{1Eˆ¬taWK—Êö@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý÷xë.ƒEG¦LäL‚…þ¿ø@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýj„"y@×O·Ìi“k/,¢ú@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý.OãsM¸ŒíûÒÌÒöü@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýrLdI²®±_Í­™~þ@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýšÚ<Î?ªNn[“{Î/E€6¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1286execsudo20ÜS7[AIF¬•pd± (ý€) Km(GÖ¾‚@ýWû¯‚6¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý +"9#;–"s^¢–‰8Ns“]20 +ÜS7[AIF¬•pd± (ý}mÏûë@YªŒÍ}I^Т„<¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]D/usr/local/libexec/sudo/sudoers.soÄ•‰Žþûð‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÈo+[ÊdCb« TÝ«Ùzm†2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý,ÔX.§„L…°ñÓ²î +²ˆ2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý«(°õR‰AÊ‚Pt…}Ö!Š2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€Àý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý$ò¡R[GV…¸U‰buŒ2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€Àý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýg¶3 ÔíJo´`·m±E/Ž2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€À‹ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýö=³ª²]J@˜MºÂI•Ï +2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€À‹ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýB©‰œÇµ@·b +çœK“ ’2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýËQ±ïûAÙ±Ðö[ü9”2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý^ dÎû@ +†˜®ß¼J–¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý‡Œ±+«IC™;àq[X§Ô˜<¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹(/usr/lib/libbsm.so.3Ä•‰Žþûð‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ý,NŒ &RL ²@6ÂI$š2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýC#ò3EÙ¸º6–›‹ Iœ2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÂLY„:ÆJ«µUíLº&ž2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ývF¢ØãG‰›ðßó Ù¯ 2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙŽÊûevÈt«@¼œq0~œ(™¢2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€­ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýµM>F-œƒ®`\™I¤2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€­ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý÷ñw¼Ò¬M‡š¹²vÓ¿Qì¦2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€Àµ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýh$FrnNºªÅ!²àÕ!¨2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€Àµ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý¯&¡£Om……ªÓ¶g—ª¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýNlËÍÔ_@íœrsC{£¬<¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ(/usr/lib/libpam.so.6¤ŽÛ—þûð‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÉžk߇OÁœyUì$ã.®2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýø€ IÑMN¾¼JÕ4°2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÕA)0°ÔM?ƒ4·.ЉÛ²2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýë´¦„ó Ll¼’Júí^b–´2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýØÁ,ÿð‡Lc¤°ÕýÛà ¶2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€º arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý^ÞŒó¡Cʬ®sC«8Ýt¸2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€º arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý‚ƒ¿ægMn©²I‘¶æ#<º2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€À½ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÑluÃ+ØE™Ðuêd}pƒ¼2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€À½ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý;H4uœEQ¬lÅ+󄾬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý•Âç¤ðMÁ¦¼ ÷ÛQkÀ<¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ/lib/libz.so.6¤ŽÛ—þûð‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ý–R% øKq¬ÙAÈÞÒLÂ2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý|.s8K‡™Ejò¾ ¾üÄ2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýõ ¤(ÀFK©µo¬ICE½Æ2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€¿ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýŒ¥¨N¼Iö¾»Žñ5bœÈ2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€¿ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýêÂa9=D­ý8Ê2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€Ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýß•Cs)hH±’=$Rî:ÜãÌ2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€Ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýN½8·ÙÄAǧ°^#“FMÌÎ2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€ÀË arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý9 +ÊšÞWM‹‡•nOÍ×ëÐ2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€ÀË arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýö>ÏWI°OI™éébÒ¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýõÎp•$A “/|kÝJŽÔ:¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýBD?/ëJ¥‚9¤\è`øÇÖ:¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¡=9ja‘Oϵ«™™ÇÊØØ:¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¨ÎF¯,ÒCa“©˜˜É»pÚ:¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýu‰D#`M.›zc]¯:®Ü +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduideuidÿsuidÿarg_euid-1arg_ruid0arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý7Q ùF'œOŒ«ãÿ3Þ +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresgidgidÿegidsgidÿarg_egid0arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýªTŠ¤ÇILh½:8 d'nèà +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduidÿeuidsuidÿarg_euid1arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý +ã.Ú×Wš.«ÆW×(Í20 +ÜS7[AIF¬•pd± (ýŽ(RNQʇšëJ€öu 120ÜS7[AIF¬•pd± (ýùJÜ29B¦˜G„Ò$â<¬œ à&à°Fz鮩'üvºã.Ú×Wš.«ÆW×(Í,/usr/local/etc/sudoers¤ŽÛ—þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ý +ÿŭ)Lƒ«K>â èBä@¬œ à&à°Fz鮩'üvºã.Ú×Wš.«ÆW×(ͤŽÛ—þûð‹+aue_read¼9hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý½9Ä+à!Nï­ ö§ëæ0¬œ à&à°Fz鮩'üvºã.Ú×Wš.«ÆW×(ͤŽÛ—þûð‹+aue_lseek¼9hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý¾à”Ló@׉U{RU|´è"¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý^Ž‹7ðFFŽ,7e¨ÔuVê +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduidÿeuidsuidÿarg_euid0arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý±dóÍHÙ‘Så›å1Yöì +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresgidgidÿegidÿsgidÿarg_egid-1arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý6E­ª:5IǶ¿s>V=ê×î +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduidÿeuidsuidÿarg_euid0arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý\Ø$pQçE§©Ú6rÖ<ð@¬œ à&à°Fz鮩'üvºã.Ú×Wš.«ÆW×(ͤŽÛ—þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý +8-•ÈuVÈ»Gæu3Ä20 +ÜS7[AIF¬•pd± (ýä®/L¨¢ØÝ¿­»Œ@ò<¬œ à&à°Fz鮩'üvº8-•ÈuVÈ»Gæu3Ä0/usr/local/etc/sudoers.d¤ŽÛ—þûð‹+aue_open_rwtc +flagsmodeÿÿ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1286execsudo20ÜS7[AIF¬•pd± (ý_*æQKW„þñËL!o¤ô¬œ à&à°Fz鮩'üvº8-•ÈuVÈ»Gæu3ĤŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¡1h˜C_ŸVèëÏ/‰ö +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresgidgidÿegidësgidÿarg_egid1003arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÕÔÅEX±ìhÓž ‚ø +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduidëeuidÿsuidÿarg_euid-1arg_ruid1003arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýãAåÎvCfŒ°* ‚rk"ú +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresgidgidÿegidsgidÿarg_egid0arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý;9µÖ/GŸ³«Axó‹³ü0¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý$=Mm}a@ËžG/5‰2Ó þ0¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý<Þ"“•Md«¤OÆrøóV€@¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_readðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý\Ï?Ý©B¤¬öœ4’;¢‚@¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýá7óNÂNÞ†VO±$A섬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¹¾–PLÞ˜äonâ»&«† +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresgidgidÿegidësgidÿarg_egid1003arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýï„ ü„VD¦yÉòĦ¡ˆ +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduidÿeuidÿsuidÿarg_euid-1arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý +åhÑqK¸¦IâÝá@¿Š +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresgidgidÿegidsgidÿarg_egid0arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý:[–àH_˜,Ô8öœŒ<¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨/etc/group¤ŽÛ—þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ýs¦VàA†¼Õ¥pÔ׎@¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_readðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýLnþü+mEå¶:!J@” ¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý«ú­!ÒyCH‚ªž{f„6t’<¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨/etc/group¤ŽÛ—þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ývÐð6NO–»XÇu¸¤Tî”@¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_readðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýßç!Á‘©Dá™vl7!>½½–¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý´áºRí~E¬Ø˜ V³È˜ +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresgidgidÿegidësgidÿarg_egid1003arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý#î¹È5B¸”ªjÒhö­š +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduidÿeuidÿsuidÿarg_euid-1arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý +HÞp¬«#®R£«ö)â®420 +ÜS7[AIF¬•pd± (ý(ps5¨EÅ‘’|UI鵜<¬œ à&à°Fz鮩'üvºHÞp¬«#®R£«ö)â®42/usr/local/etc/pam.d/sudo¤ŽÛ—þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ýî»8M^“A –Î’e_^Œž@¬œ à&à°Fz鮩'üvºHÞp¬«#®R£«ö)â®4¤ŽÛ—þûð‹+aue_read†hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý +À‹kB¼Ñ^¼B<.Ñë,20 +ÜS7[AIF¬•pd± (ýw߬țyGè‘K¦i ká <¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,"/etc/pam.d/system¤ŽÛ—þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1286execsudo20ÜS7[AIF¬•pd± (ý¡ü'˜\Fñ±Õªa¹Ã°z¢@¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,¤ŽÛ—þûð‹+aue_read +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execsudo20ÜS7[AIF¬•pd± (ý?+þ¸^ÞY2Aâ¬ko˜±e©È2¬œ à&à°Fz鮩'üvºsºæ1ÀZ± þZÀm¨¤ŽÛ—þûð‹+aue_mmap€€ï arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý¨‰>†L“ÝÂsÛëqQÊ2¬œ à&à°Fz鮩'üvºsºæ1ÀZ± þZÀm¨¤ŽÛ—þûð‹+aue_mmap€€ï arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý‘eeAÑOPªN%ïQö–̬œ à&à°Fz鮩'üvºsºæ1ÀZ± þZÀm¨ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý{œ ˆ³M‚ô”B¢õaÎ<¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šé/lib/libmd.so.6ø¨¡þûð‹+aue_openat_rwtc +flags0mode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ýVLP×øÄIÙ‚‰²ƒÈõ Ð2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýªshTdî@ò³7`mÛ$”—Ò2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý2í†úñøJ¾r´1é|é·Ô2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý +CPT6àNŠ®´¢6]³þÖ2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýpˆ?€çIB¹ÕAÚNüGõØ2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€„ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýCêK"¸?A}ºß5³Âþ¸§Ú2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€„ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýU¾#nkó@K†óÿÎsgÏÜ2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€Ž arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýº}{Ü>Bë²£ZLQÀ Þ2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€Ž arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýØÞOWLÞ­®¤¸7^£7ଜ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý´D:€1@í±(W¥â:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý/Ç‘9pÊF"¿ÌEÆì;[ä:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýpcYÒšJ‡¤c ]¥DP\æ:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÿÜ•¦O¢£%oûùƒè¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýtÀáBC”£Œ/VVh$ê<¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï18/usr/lib/pam_opieaccess.so.6ø¨¡þûð‹+aue_openat_rwtc +flagsmode ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value7ppid1286execsudo20ÜS7[AIF¬•pd± (ýwýDž)áG ÛHåc…êòì"¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_fcntlcmd ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ý“‹…š5‡EY©?³Œ\îî2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýwH.Jy¶Lß‘Þ¾fQð2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýK ›WçBŦaU&Kø2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àý arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýú6D§óàH•¡Æd*1ù¿ú2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àý arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýÝ$—0GܪÝòâÌÁ¤Çü2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àþ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýL×õz±«IÄEÖäºLþ2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àþ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýr ^îE‚¿³g™Ì†ý€¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý©>”ѦB+‚\*.7µy‚:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýË×J‹ŽN½raB§Ý<„¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¼ºh LÝ KH/°ÌÞ׆@¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,ø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execsudo20ÜS7[AIF¬•pd± (ýsôj|R A~¥QwI’¶(Áˆ¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýäL¨@óÌB™‘<²ç/e¥Š<¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´0/usr/lib/pam_permit.so.6ø¨¡þûð‹+aue_openat_rwtc +flagsmode ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value6ppid1286execsudo20ÜS7[AIF¬•pd± (ýšø–½Hi­ " ÞiíŒ"¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_fcntlcmd ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value7ppid1286execsudo20ÜS7[AIF¬•pd± (ýÌ'r—©Oϳ¸þxSŽ2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýv9Wh¥QCÉ™©Øi>êJ 2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýžÛm„‰F‡¬8C'y©ª’2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€À° arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ý>äÿMooI.‡FóǼøæ”2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€À° arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýrà9@¦.)zxd–2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýCô XþHKjLƶ˜2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýaµÖE»I‰·Ñþ¾l+š2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€À± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýM«~l‡M¼¾ Ø¿äÿœ2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€À± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýÄR^ý8QO$•ÓB3Û—‘ž¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý87;8‚¾Mm©ëœ­¾Ù  :¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý£ Íi€EC掉ÀڮƢ¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý3 Ø4‡‡EУq攺Á-h¤<¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,"/etc/pam.d/systemø¨¡þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1286execsudo20ÜS7[AIF¬•pd± (ý_DKt¤0DŸ´¥2ߣ;¦@¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,ø¨¡þûð‹+aue_read +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execsudo20ÜS7[AIF¬•pd± (ýÇ1ªe²dEÐ¥±‘!šØŸ—¨<¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒR,/usr/lib/pam_unix.so.6ø¨¡þûð‹+aue_openat_rwtc +flagsmode ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value7ppid1286execsudo20ÜS7[AIF¬•pd± (ý?×€¦I“¾Y÷Q¼ðí¢ª"¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_fcntlcmd ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ýÝàWzN¶Þ÷ÖÓÈѬ2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý¡cÚ¼(AŒ—ä D²4±±®2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýêVÔföqOÚ°©û¢] ‘°2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€À² arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ¦¬û&mÿ7àB"¬r° β2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€À² arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý W³¼AÑ7>í<2/etc/security/audit_eventø¨¡þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ýÉ:ÇnTÚJAŸ'%š{ø@¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_read̳hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý›­ðP²"JH±}$…"Púú<¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁR2/etc/security/audit_classø¨¡þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ý¹añ0'7Læ¹H¶ +N“õäü@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý|-\”v¿Ew·xvx£G÷™þ0¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_lseekàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý°†.àÇEP¶‹Á +W³¼AÑ7>í<ø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýî”$Pã&H¥ŒÙJ9 ç¦RŽ0¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_lseek̳hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýz󣶣‡Nó¨ËOŸ&>b0¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýV\ݲ›´DƒŽœ‹G±aím’@¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_read̳hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý]X2ÃÌNB˜Lº^î!‹”@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýzå.èO^˜ÁJÖ‡T'F–0¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýâÕQ˜ÈB¹Ÿv%³¤á}Ϙ@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý<ÊÇ\ÙO¤º¦­C‘®dš@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý\%î¨Û JÍv3öÇxyÄœ0¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýhfŽp†MI©!hP@(œåž@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýARƒƒÕN ©ú\;I @¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý‚fÜD®IŒaÙ%–w6¢ +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setresgidgidÿegidÿsgidÿarg_egid-1arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÅÄ°ðm>J߯~a*ÿÂÒ¤ +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setresuiduidÿeuidÿsuidÿarg_euid-1arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÖÓŒ óCk“oHÇhÞ_¦6¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1286execsudo20ÜS7[AIF¬•pd± (ý¡è-aEÓN·N38è6¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value63ppid1286execsudo20ÜS7[AIF¬•pd± (ýØ_zä ƒC›§60>#ª +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setuiduid +arg_uid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý±L¼¼¥²GÝò‰X–“¬ +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setgidgid +arg_gid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýà+ìIFz鮩'üvºô20ÜS7[AIF¬•pd± (ýà+ìHFz鮩'üvºô20ÜS7[AIF¬•pd± (ý ·ÿ¥‘![l®m;†.¤bà+ìHFz鮩'üvºà+ìIFz鮩'üvº20 ÜS7[AIF¬•pd± (ýGhª5MJHÞ¹òò2Ùë©›®¬œ à&à°Fz鮩'üvº·ÿ¥‘![l®m;†.¤bø¨¡þûð‹+aue_pipe ret_fd16ret_fd27hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýà+ò½Fz鮩'üvºžà&à°Fz鮩'üvº™, Bª¢T$µ„äý`Úø¨¡þûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýöxÓù H-ªm÷æ8A °$¬œ à&à°Fz鮩'üvºà+ò½Fz鮩'üvºø¨¡þûð‹+aue_fork +arg_pid1295hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1295ppid1286execsudo20ÜS7[AIF¬•pd± (ýà+øÇFz鮩'üvºô20ÜS7[AIF¬•pd± (ýà+øÆFz鮩'üvºô20ÜS7[AIF¬•pd± (ý -gø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execsudo20ÜS7[AIF¬•pd± (ýΔNG1CåCý¢è é¼ªœ à+ò½Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1294execsudo20ÜS7[AIF¬•pd± (ýy-ÁVB„” Êå]r¾ªœ à+ò½Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1294execsudo20ÜS7[AIF¬•pd± (ý¦*RßÆK¤›ÕÊëˆ +ÅÀ"ªœ à+ò½Fz鮩'üvºø¨¡þûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1294execsudo20ÜS7[AIF¬•pd± (ýÄlšÈBGó¦ž +Æ2ªàªœ à+ò½Fz鮩'üvºà+ìIFz鮩'üvº/bin/ls'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ø­—¬þûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinelsppid1294execsudo20ÜS7[AIF¬•pd± (ýM›lA,ôB²‚Ì„lTxVlÄ@¬œ à&à°Fz鮩'üvºà+ìHFz鮩'üvºØ­—¬þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execsudo20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ”ìûG@b#ÒÇHY”²nì³KƬœ à&à°Fz鮩'üvºà+ìHFz鮩'üvºØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýù¸È[TOD¡‹ÄîŠ\\È<ªœ à+ò½Fz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confØ­—¬þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1294execls20ÜS7[AIF¬•pd± (ýQÁ¡Fy _¢d²hJÊ@ªœ à+ò½Fz鮩'üvº‰oý©äÇU¤©A)Eǹ Ø­—¬þûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýí%êí JׇÌñ-ý+&̪œ à+ò½Fz鮩'üvº‰oý©äÇU¤©A)Eǹ Ø­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýŸÑlð±Fɺ£±†#KÎ<ªœ à+ò½Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsØ­—¬þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1294execls20ÜS7[AIF¬•pd± (ýý@»&ù@Pˆ$sC*½ôÐ@ªœ à+ò½Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýúŸ%»ƒmNQ¼d¢ñ_&ðþÒ@ªœ à+ò½Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýÏe – +H[¶:徨c ºÔªœ à+ò½Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýÀTʼô@³ YÖí”Ö<ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj"/lib/libutil.so.9Ø­—¬þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1294execls20ÜS7[AIF¬•pd± (ý3XRšž-NX¦…Qm‰§ã_Ø2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýìÀA–ìDLŒwèUW½<Ú2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýÌ©Vú¯îL“yX3Ó3áãÜ2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€À§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýãi _LÜ QpŸ¢àeÞ2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€À§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý€0àí >GʽÖAË §9õà2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€À« arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýµq¬}ZC:§ÝJ}ûÐ^â2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€À« arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýlûªi¡JŸa!!ÞíHùä2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€€± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý9ç¶ ŽGŒ³‘Ä›†¤¤æ2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€€± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýýAì\@¼ýÂÅT"®þ誜 à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ý +Ú6n $.\¤ ¸­ü.+¦20 +ÜS7[AIF¬•pd± (ý)œLLAE9Š¨SFKþ[fê<ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦*/lib/libncursesw.so.8Ø­—¬þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1294execls20ÜS7[AIF¬•pd± (ý4<*d¹¹H±—«Á3Nì2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýé©Béb NÝ–œz}­-ZEî2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý%}?Už2C]­eœR8Îð2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€€³ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýáî„NH¿µCŸ²¹£ò2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€€³ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý¾‘äi>6Bh½cLÞ¼ýMô2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€ÀÇ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýödê¿E¾hÐàË‚¿ö2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€ÀÇ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý+­­”M_F° u8ŸÛ%šø2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý'í85)ñFPŽåÀÇýµIãú2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýÕá ¨m +LIƒÔ´ õ&eüªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ý·/¸H5YMe˜ˆjNqJéÿþ<ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Ø­—¬þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1294execls20ÜS7[AIF¬•pd± (ýÖž nNCqŽ·ú + Ï€2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýÚûÑfxµL‘z®¡²(‚2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ým°7.¶ÄNL±{s7ˆ„2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý/îmSMBŽ¹>J®‡µœ†2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýD×äô¿J‰¡‰îgÖãhˆ2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý‰­Ñ{¹Jé…Ox‚c°XŠ2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý Dÿq±OIº€^¼a_B^Œ2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýh¶ùÓ?Eˆ¦Çk…è3sÈŽ2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýlñÍ~O÷¾„‹5µé&ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýÒ¦³rÄÄF¦†c}YUTP(’:ªœ à+ò½Fz鮩'üvºØ­—¬þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execls20ÜS7[AIF¬•pd± (ýb`ƒèŽÒA˜®dä[e_Ë«”:ªœ à+ò½Fz鮩'üvºØ­—¬þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execls20ÜS7[AIF¬•pd± (ý¯ +â²eGƒ¼ÄDµg]–:ªœ à+ò½Fz鮩'üvºØ­—¬þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execls20ÜS7[AIF¬•pd± (ýú–>V ÆHàž}ZùòÌë˜:ªœ à+ò½Fz鮩'üvºØ­—¬þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execls20ÜS7[AIF¬•pd± (ýˆCÖ¹ÆNûŒÇãÙ–½ÿš<ªœ à+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bZ/usr/home/user/ripe-prov-tests-master/Linux/.Ø­—¬þûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1294execls20ÜS7[AIF¬•pd± (ýdÜŠ%°Is©yè+d¥%œ6ªœ à+ò½Fz鮩'üvºà+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bØ­—¬þûð‹+aue_fchdir +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ý+ð挱L…±Pnd×6©¶ž<ªœ à+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bZ/usr/home/user/ripe-prov-tests-master/Linux/.Ø­—¬þûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1294execls20ÜS7[AIF¬•pd± (ý6=X8'Nß’1Š•<¤ <ªœ à+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bZ/usr/home/user/ripe-prov-tests-master/Linux/.Ø­—¬þûð‹+aue_open_rwtc +flagsmode +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1294execls20ÜS7[AIF¬•pd± (ý«K¾ÝʶIËŒdyû†¬á¢ªœ à+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýIV¡Ž +5Hì‰k}¶Þe–¤6ªœ à+ò½Fz鮩'üvºà+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bØ­—¬þûð‹+aue_fchdir +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýš"ò‘A̧h”µmT¦ªœ à+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýwVÌ.PvLˆ¼n¨F_ç~¨bªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_writeîhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ýgñÃ\H²‘}!MJ­,ªbªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_writeÖhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ýLš?§“G@¶r–÷ñkÒ¬bªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_writeÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ýåȵžRFGæ;-ÌwçÁ®bªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_write°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ý'·OŒlN…éµxL*K°bªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_writeÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ý¨ùéödÙJ›b·xשɲbªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ý[6Xë7H?¿KyGjn¹W´ªœ à+ò½Fz鮩'üvºà+ò½Fz鮩'üvºØ­—¬þûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execls20ÜS7[AIF¬•pd± (ý‹98–H€…ŠÙÉÙi‹¶b¬œ à&à°Fz鮩'üvºà+øÇFz鮩'üvºØ­—¬þûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýÀ£®«¨O¥°>L‘ÿžŽ¸@¬œ à&à°Fz鮩'üvºà+øÆFz鮩'üvºØ­—¬þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ý¤(6csžK ”-¶út)º¬œ à&à°Fz鮩'üvºà+øÆFz鮩'üvºØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý7̪·Z\M¸„Sºc5¿ŠÙKl¾ÿtŽ³Ì¬œ à-ñFz鮩'üvº€ËâÞ +† b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝhÐÏDF×´Ô† +ga¢ˆ @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýh–›ÿ +Bî¡Ib˅⊠@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘-Ì”aAeŒÞWóÀÁ@Œ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadäChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞÀº5rG ¸sY`·#ÂÃŽ b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8ÚûÅp!NáƒÝ?¥¶›#z @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_Ò¡ÑG3•Ê}éÐ’ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+·†'‚O»ÿŽØ'æ'!” @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_pread°KhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýMhJ¡Ëk@ü£ò¼F  s– b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]‹ÙSªçL¿Œ–‰±cÞ8 ˜ @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåHc0LÁB- –šg×3¼Ñš @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®í×aO +¯Ñ!~àQœ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadÐBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…ÝĹE„Xó •îÌž b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“&“t<­E9Ž_ß°£„ÆU  @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°fñ¿ÀHÓœ]Ëð>ÃÕߢ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýNÈ~¿Æ@ +„É•ù],¥¤ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_pread’=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©w>‹À NÌÏ/ÝÀ¬¦ b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7åûÏñH ³„î5QQ¥¨ @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJݤYŽL!‚Vômßù˪ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$xÊMÄ®J›K€ ¬ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadæIhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæ«“'œ@I·ÂKˆ/NF¶® b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8áˆy0«MNˆè‘uÃÙ° @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$LwÙ€AŽ¹ÖiÙ›¹² @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉÿ{ƒJ"¯6Ãõ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠŸw¿EH¯¤É^cêGrÊÆ b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"—øî£H1†ß‡·[‹õ2È @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9ÓUk¹K}ŒÚÜ{µâáðÊ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçºAMPÂÌk2¦Ì @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadªBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛY5,A¡¼»·¸¨PÎ b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýVËA‹¸NC´u»Ì¹‡¢`Ð @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠù`4P8IŽI ‹y%ãÒ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“¼ª ²n@î†rhÜ&É`@Ô @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadìAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýòñ9L8 Ež t¾KôRoÀÖ b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýüÆMžŸÒOþ¿ŽÚYD˜ƒØ @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛVñ=ëO„Ð0ù¢Ú @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýû@µBøOŒ³að­rX¾mÜ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_pread–ChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýq¹­3E=M;²ÍñŽê…6ÜÞ b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýöað,ßK¥øÝï¡ßôûà @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×´©z%ÉN÷üîø“ìêºâ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±£Nû7AÅ€½‘¡ Ñ5ä @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_pread´GhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0Õ­XOB¾Þ1غéà‡æ b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýtèB'°Jß±QìÊÓü€öè D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºæ®û„üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýå\©Ò&9I š#ÅoIdB­ê D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºæ®û„üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~‡âßK-„Ê¯ï §[ì b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºæ®û„üð‹+aue_writeÂEhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0ùC­ëwHV±0µ‡õW¡î @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýo½J³‹LÝ„P¥† ôBð @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqý¿0¿I¦•[CšÙlÙò @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadÒ=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)ù¼–0àOÒu8L…Öéxô b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯S(½Oï¾xªáÒø+ö @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4úy£z@{–Òî×›]ÔUø @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýBµ„$Nź×"þsJ=mú @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadš@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿÃú¾ö¾Kˆ²ZÑKdcëü b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’Åo1ÌIŸ¾H5>­ãþ @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýö~>-·CD“‘["ã³ï€!@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£ &ö…ÅL1»``қ˂!@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadºNhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`ë¯êÔ/IŒ¢¢Ló[žá„!b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñb …7E +¬­/¼:;l†!@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²˜e Ê)C}½Z¥c ˆ!J®œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºæ®û„üð‹+aue_sendtoÞ +ret_msgid408hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–ScL]€#чÒR”Š!Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºæ®û„üð‹+aue_recvfromÞ ret_msgid408hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý§siOo‡`Áà …VOŒ!bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKæ®û„üð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý‘K›ÁÞFs«œëY„åçŽ!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº®Ó»……üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ô2ìyÈ@Ä©EAúßs&¸!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº®Ó»……üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI#&ÎM€¤Í’YÏU!’!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº®Ó»……üð‹+aue_writeØ@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:m¼a£T@K—T?+ïèþ”!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}=žÖ]IH•”7( ]–!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJ-ÈcJë—Ι‹èÄü˜!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_writeÎDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?\. B‡«¡Áñ@8€š!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýj¹Ð®MÁ¡½”ÝDHµœ!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠO_öM²ªÓ4O™ž!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_writešLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQÜ}KhIü—ùGm‹7 !D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Šð›…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýF¼5vË®Jy¡úŽ†Ÿ°á¢!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Šð›…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµåüKX©†ÎwžOHB¤!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Šð›…üð‹+aue_writeºChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…îéY÷B×ßâi^ú€ò¦!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!h£T±C ŽRI3h½Ì¨!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýü²ïòÆ@g¹SÑpÔOϪ!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_writeü=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛfMF††—K`OA!¬!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”ŸBÇŠFŸtÖ Õ—ø¬®!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙª¤üeõÃ}:G0›õµñ•Þ÷°!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_writeÐJhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!*¸ÙE‡íMŠ2º&²!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêÎƯ…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýá<€œA-JD•¯ØÝW=Añ´!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêÎƯ…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýj^©®¨E-¸oð÷ÆU¶!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêÎƯ…üð‹+aue_writeà=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!³É)^aB°véÙývew¸!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬—ê´…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>é¤[’rE±ô ÚX÷6Cº!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬—ê´…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶w(TnMɽDúý[þм!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬—ê´…üð‹+aue_write¸BhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜?ˆcCˆM,²Y$!Qpf–¾!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬—ê´…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@ÅQj…ëMq€­“´ŽUƒ À!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬—ê´…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨Ýé:f@æá¿z4ð–Â!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬—ê´…üð‹+aue_writeü>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûDóÖœIK£™[Æ(AÝ¢&À3ƒMÎ!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ¡×É…üð‹+aue_writeÖBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýhÑ£­ˆ@[ª7àÒ©äÐ!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýBëÃÆ°G”¯#<´ 4Ò!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýVþ¬»Oh­ÑZÍd*è–Ô!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_write€DhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^ï‡r¾H%¢-ÁÈÌ \Ö!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬QdxO³ãƆvõöÒØ!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~ökŒO¢¬žÞ¤’KÇÚ!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_writežHhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈÌÍ\´Jjʈ‰€"Ü!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìî„Û…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“Q;+öwHkƒ»&q•åC¾Þ!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìî„Û…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘_É÷J?™Irvø<à!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìî„Û…üð‹+aue_write¼>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚\‹Ê=ZHμ0´|–âÞ"â!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýó¾É½…H3|*/LSŒ^ä!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹Äcƒ°šA*ªØqÔ30æ!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_write„AhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸm¨QLtV&ù¤JV`è!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýá-&„ûÕL“œ0Ç ÌÏê!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýòáçX+A «ë5E¥~æxì!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_write¤OhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)½ËI§¶\íÅIñ¡î!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”þèí…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±lˆ”pCѨF&å½äÈð!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”þèí…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþXEÌÂF}‰bS8Ú·Tò!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºú×”ú…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑ€&ÀåFBƒ–^ÔçJÀóô!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºú×”ú…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýbÛ¯±ÈFwN†2._)ö!ªœ à-;1Fz鮩'üvºà-;1Fz鮩'üvºú×”ú…üð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286exec +sleep20ÜS7[AIF¬•pd± (ýËTŠÃ ±E€—ƪŽÑ‡„ ø!@šœ ߆7æFz鮩'üvº€ËâÞ +Iõ´ð#ý* Í–"ªœ àÈ ¹Fz鮩'üvº‰oý©äÇU¤©A)Eǹ ú×”ú…üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýBê!2#Oüäד³Ž˜"<ªœ àÈ ¹Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsú×”ú…üð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execcat20ÜS7[AIF¬•pd± (ý ´…'$Bխظ²Vdš"@ªœ àÈ ¹Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âú×”ú…üð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýfïl™OÖK¢Ïš5<Ú"œ"@ªœ àÈ ¹Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âú×”ú…üð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý–ží2Gã±ÅW\®œÿSž"ªœ àÈ ¹Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âú×”ú…üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý_X“Õƒ@6®ã´Ä>{¾M "<ªœ àÈ ¹Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ú×”ú…üð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execcat20ÜS7[AIF¬•pd± (ýDçé›õüJñ¹P9ÐÖé–¢"2ªœ àÈ ¹Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œú×”ú…üð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý +ƒ|röGô¸›í-ÇÒ¤"2ªœ àÈ ¹Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œú×”ú…üð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýÏàlÎK‚¸(ý:•ƒ#¦"2ªœ àÈ ¹Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œú×”ú…üð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýâ×ö˜,ÅGÕˆl[ì¨Lª@¨"2ªœ àÈ ¹Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œú×”ú…üð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý•½?ÅAj@j‘ò –‹fª"2ªœ àÈ ¹Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œú×”ú…üð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý¿Õ"¯§Nk·Ú™uó+7¬"2ªœ àÈ ¹Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œú×”ú…üð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý·T¹*©B3«­Ó.l d®"2ªœ àÈ ¹Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œú×”ú…üð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý:ÎiÇ´×H=¾3·Ag².°"2ªœ àÈ ¹Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œú×”ú…üð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý°EìÈËM0©x±šX`žJ²"ªœ àÈ ¹Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œú×”ú…üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýK£ VèBÏ­¤7ë“Ì´":ªœ àÈ ¹Fz鮩'üvºú×”ú…üð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýKšP‹YÞC…šü•ÔW>`¶":ªœ àÈ ¹Fz鮩'üvºú×”ú…üð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýWy{ëMB ½q}­šd§¸"<ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Ü‚/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.datú×”ú…üð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execcat20ÜS7[AIF¬•pd± (ý¢hzCw@÷€Õø/±u¬º"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý«»¯¬kA¨¿ÛlÕµïÀ$¼"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ý +DÞ%BTƒ²?¿tG.¾"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý9^º »–D®’>Ë]!i¼À"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýº¾îp&L—Ž†ÍŽöåU1Â"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýE¹«çsƒK¥£V­\›{‘Ä"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýö¶±9W¿I‚™4Õ,=M$Æ"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ Œû9â +`S Js´ã›t”X%È"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýVw0u£îMd¾¡FW¦gýÊ"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýe\VçAOh¥R6jù c“Ì"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýzÂPÊèsJe½„÷ÕS +Î"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý­Là-cDx!)’ߤóÐ"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýó•GO!•UCtç¨~Ò"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýÙBê—PGlºÎ_DÕ®$ðÔ"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýsdI‰ŽEôˆ­O +  Ö"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýcElÞK¨¡Ó¡”ë`Ø"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ý·H›‚f@º¥oÿÁVgTÚ"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýgáXD(ŸÃq^&€8`Ü"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ý«ó^r‹„Dâ»@ ÊaK÷Þ"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_readà%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý³IÌ_€Cœ¢ñ¦H~6à"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_writeà%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýLØ3ÒùsG뿃X¹u5™‡â"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý"°ªªÖNæ¿}©=Ä='2ä"ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý‘½IùavK4…ÒÏ«¤ú¿æ"ªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýTú‚={ô@1’ûã2ýD +âzºÄ#@¬œ à-ñFz鮩'üvº3P ÓK€X‹Ó«·Ø€‘^Øðð€†üð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1286execnc20ÜS7[AIF¬•pd± (ý +J~!]þË}V‹þÓ°Ø#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ¢˜úÃSïæ7AÆ ãèæÐÕëñÚ#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý¬†DvÎÎJŸ¥¶QåÔK°Ü#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€€© arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýñ‡ŸèOÄ‘N–ë <´Þ#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€€© arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýÁ𪽕Mßñlq}<à#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€€­ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý"£•ØÍK¥¦îßâÐCªâ#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€€­ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýãžÁ6\F~Ÿ¯‚MÈntä#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€Àµ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýtõÛ£(¦Cý;Þ’{<1ææ#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€Àµ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýÐÓRî,•D2ªmÙz†b!úè#°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execgzip20ÜS7[AIF¬•pd± (ý +®p“ó ß[ aÃ ß W20 +ÜS7[AIF¬•pd± (ýèwjƒÖ^Nª¸®Ç%½¯aê#<°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß W*/usr/lib/liblzma.so.5Øðð€†üð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execgzip20ÜS7[AIF¬•pd± (ý ÁT±K9“ª>{½/$ì#2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý‘}p<à²D…­‹nU/X˜î#2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýmÊ«…1œOI²}²Wѳlð#2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€À¶ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýñ¹Ké‚AŠŸêí€(̪{ò#2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€À¶ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýV6Y'ìOºŽ´ 8'jãTô#2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€€¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýÎí‘ Û@²µÈGƒŒ4Ãmļ$ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ýÜ÷Â]&TH-µ¤e✶^º$@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×Áü¹AÛ£>Ÿ|SÞI}À$ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ýM#%âüAFlHbŠ×°µ°¾$@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšî?AZ!D²ýDÖ£·JÄ$ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ý"3¶R3M.®îâ±íÊ'5Â$@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜf¼‚BF˜(¹¦&`@È$ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ýÏ2S¹vœDO»º +¯Û 9öÆ$@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝwçÃJ€ŠÉOCÉ`Ú•Ê$:‚œ Ê +ÙKFzé®›'üvº¦ˆÈå“üð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýp=ÿýŽMG3¹Ðq©22˜Ì$@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7BÁ,xJôÞz··B•Î$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýp ?–jLj¨® ˆn 5Ð$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadŠ8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJo¿¶ÏDÌ­f»š/"Ò$b´œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ˆÈå“üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥1{ëßøHE¾f ß-ÒîèÔ$b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ˆÈå“üð‹+aue_writeô8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆjxØGF3t¥„gìÁ~Ö$@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýhš…ÇžK¡ˆ îºõ”ŠÊØ$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7ÿ”¹òE«¸«i„«Z$ZÚ$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadò=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýà¨m³àeF™–µXFú ékÜ$b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ˆÈå“üð‹+aue_writeÜ>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýP¹ Ó]mF;´Ï%U^|¬Þ$b´œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ˆÈå“üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý M9²3J¤g ·j”à$@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3H°ÍJ+­^kiqÄûâ$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…¶¸Ä_@Ò¹5s3Ôñ'ä$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadª<hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýîœ`ÔMœšñÔÔ’†æ$b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ˆÈå“üð‹+aue_write”=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘ü¡ÿ¬C ¯M)CiË…è$b´œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ˆÈå“üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹D¥ •FÆ™ï»þŸg¥ê$@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„w™x7Ê@T&…+XFBì$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉs‹ãœüHf·ˆebøÇZ/î$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_pread®AhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýlSÙ²C9ƒò9ÍAã¾ð$b´œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ˆÈå“üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©NpåÉKµ(Àï™&‡µò$@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ®¨ü±ckAï„|™ ¹â|ô$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<­¨oøLŒ¯_KúÊ"X+ö$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadÚGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­Ú9_ÇÏIµ¥ÆYVHø$b´œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ˆÈå“üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4«< D7 ¡eÒ ?%ú$@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌxä)M!C¦£û`j +Pü$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˼çƒYMt  rEÏoÆŸþ$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadŒChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQsÓzCŸ¢(BY!å1€%b´œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ˆÈå“üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýTù»LúÃK³§©WÛC›­Ç‚%@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”ŽZ»§J“–9ƒ+Š Ç%„%@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý($¯üCù”Z²R1þÈi†%@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadæHhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™G­«eˆH/Ÿ¤Ëø± ~Pˆ%b´œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ˆÈå“üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—N\ÛÖ¼E8µßl/·oŠ%@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôo1/JS½›ž˜ 7ÆŒ%0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UäœÆ¥—üð‹+aue_lseekž‹hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁ­HxéJ!Èèïø¶¿ Ž%0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŠ™éžüð‹+aue_lseekúhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6ËN"eFD½¢|ÓfÍ©4%0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_lseekúhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýVƒ?ÙõI¸ŽÌà.”% ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+20ÜS7[AIF¬•pd± (ý\# îC6M³ªw‚PA»æ’%@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”Yø9J'J)ªR±ÑHÜt¢˜% ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+20ÜS7[AIF¬•pd± (ý8y¡¶Ho‡ä„U>–%@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿžž½kBU‡zp#ˆsœ% ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+20ÜS7[AIF¬•pd± (ýŽBÏ&AjŽÚU<‚š%@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýkˆ€M†K¾’ƒÐÝbcü?ž%:‚œ Ê +ÙKFzé®›'üvºòÚØ¢üð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹x‘J¸£}£ r2 %@¶œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V òÚØ¢üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýz-™¾ŒFÇ¢æ2V\$ÔÛ¢%@¶œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý aˆjqAß”\þZYËI¤%@¶œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadü@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýPÈz}£F‘±—É'.¦%b¶œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áòÚØ¢üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?ÒêØ™WBúŠkKUNÞ>¨%b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºòÚØ¢üð‹+aue_writeæAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOÌéÕXI4ŸéH½fQª%@¶œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V òÚØ¢üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýy ƒ†›æD±¤|ç©[Ò¬%@¶œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁaÅ\gF¬=/{jM3>®%@¶œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"0kIdGN†»½Ñ +úwð°%b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºòÚØ¢üð‹+aue_write¾hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdõSH(³KèlYô,²%b¶œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áòÚØ¢üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ýBµ[N1žúÚ<ω´%@¶œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V òÚØ¢üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýo`•Iç¤èæe£G±Ë¶%J¶œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºòÚØ¢üð‹+aue_sendtoÞ +ret_msgid414hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýMž BÀ¥üšõи%Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºòÚØ¢üð‹+aue_recvfromÞ ret_msgid414hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý³6ø>åIˆ€Ú_ p@ýº%bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKòÚØ¢üð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýî†éäõM$œéOZæU Ú¼%D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÎÂÄâ¢üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~ΦÑk]O°ªÍkIéÜÞ½¾%D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÎÂÄâ¢üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.ªÔ‹šñDg¢<4d:2»À%D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÎÂÄâ¢üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûÄÄʼn¡F¯¨‹JÉ{öÂ%D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÎÂÄâ¢üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·#÷E,mI­tj´¢ŽƒzÄ%@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÊêÆ”¥üð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý É "ÙŸN«¦´>;þŽZÆ%JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊêÆ”¥üð‹+aue_sendtoÚ +ret_msgid415hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÒ¶.+¬N"¨²„ÜÕ^á¾È%JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊêÆ”¥üð‹+aue_sendto˜ +ret_msgid416hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý1ŽùX*A=¸ž_ +ORÊ%JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊêÆ”¥üð‹+aue_sendto¬ +ret_msgid417hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý ×!îºKÃŒ£‹Û`y¼Ì%JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊêÆ”¥üð‹+aue_sendto˜ +ret_msgid418hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý3–ÖKK¿€äŽ5’ÞÎ%Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊêÆ”¥üð‹+aue_recvfromÚ ret_msgid415hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¸#ƒ„ÌF¢˜¡èÒ£ŒI‘Ð%Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊêÆ”¥üð‹+aue_recvfrom˜ ret_msgid416hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý­‚³….CJû™ÈÒSxÙÝÒ%Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊêÆ”¥üð‹+aue_recvfrom¬ ret_msgid417hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý?¥L€eÛ@å¹0ÓE*ÿ€Ô%Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊêÆ”¥üð‹+aue_recvfrom˜ ret_msgid418hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýUlÑ°B%¬ô0í|j±Ö%0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†‘‰¬¦üð‹+aue_lseek¦ÃhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄÏá´Îº@³”.Åc‘»ƒØ%0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uàêïñ­üð‹+aue_lseek€ÉhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýn«P§H»Ed¼äÝnÏÌÚ%0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_lseek€ÉhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâ:U"žE¡ýr¹ÀØ óÞ% ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+20ÜS7[AIF¬•pd± (ý3Ä[êx@…ûäÿÈyÜ%@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýï@ISϧKÁ§n)‡ñá·â% ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+20ÜS7[AIF¬•pd± (ýóæ…L.ðO‹Ÿc¬Ç6B¾à%@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·²’ÜzM^•O˜ŸfnÑæ% ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+20ÜS7[AIF¬•pd± (ý6ïòbNÄ’²&·æ!Œä%@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ç‘dÁóHƦV$9™0¯Øè%:‚œ Ê +ÙKFzé®›'üvºœ¡Ì±üð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýR‹E +¥ö@:–v·"õz›ê%@¸œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ¡Ì±üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýíâöˆLg>¯ã‰³?òì%@¸œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý䌻ª¬‡Jð…ÕFÛ{,gBî%@¸œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_pread¤2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýw¿DK ¾H¡¤q¡}+ˆð%b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ¡Ì±üð‹+aue_writeŽ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠZ±‰´O:‚QHd·/ò%b¸œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áœ¡Ì±üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹K.ùµHD‘tǃ:£¬ô%@¸œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ¡Ì±üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’iõX§Fh±ŽíS˜¢[]ö%@¸œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&Jú™Bò”1>âœ@×ø%@¸œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”:=(@@H¥â$‚–‡âPú%b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ¡Ì±üð‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»AÝØJÛœµ\‘ Ѿü%b¸œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áœ¡Ì±üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬ ksÑ@‰ùB?Šþ%@¸œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ¡Ì±üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?ÐZ®ŸµG”¢s‚*ÿ¶ƒ€&J¸œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºœ¡Ì±üð‹+aue_sendtoÞ +ret_msgid419hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœ"Ÿg.ÿI¥Ї[‰±‚&Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºœ¡Ì±üð‹+aue_recvfromÞ ret_msgid419hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‰ì²›} L¾¥ö,9Ãø˜®„&bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKœ¡Ì±üð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýJŒ<+ pL<—{ F-Èó†&D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ¡Ì±üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýMK‚<Õ­K纼Î7^™øjˆ&D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ¡Ì±üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýMRÙGcJ;€ùAH¸^Š¸Š&D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ¡Ì±üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢Î¶˜ÈØDå˜_×X¢sJìŒ&D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ¡Ì±üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñ#«Äé¨J ¡£*ÐⵇTŽ&0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uðû̲µüð‹+aue_lseekÌîhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾+”}jB؉ñ¨.ç²&@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eŠ€ËÀ»üð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýžÍ …xˆMYŽ¤ÂÙ¦å’&JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŠ€ËÀ»üð‹+aue_sendtoÚ +ret_msgid420hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¹Ÿc¨ÇGº°j¤úS ë”&JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŠ€ËÀ»üð‹+aue_sendto˜ +ret_msgid421hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý'´™l½×EÉž‚´†%#¹±–&JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŠ€ËÀ»üð‹+aue_sendto¬ +ret_msgid422hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýŠ™šþCÿ‚<)xœ1˜&JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŠ€ËÀ»üð‹+aue_sendto˜ +ret_msgid423hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýZÏÑPcÐD›S<ÛôÃb š&Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŠ€ËÀ»üð‹+aue_recvfromÚ ret_msgid420hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý"ÔKÝ'B °>z néyœ&Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŠ€ËÀ»üð‹+aue_recvfrom˜ ret_msgid421hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýƒö6,´F÷¸ylQ‹{mž&Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŠ€ËÀ»üð‹+aue_recvfrom¬ ret_msgid422hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý{@tzµ!LÀˆVÐÉx9 &Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŠ€ËÀ»üð‹+aue_recvfrom˜ ret_msgid423hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ®Žúœ8§)HIŸ®ûãc¢&0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U’ÄÚõ¼üð‹+aue_lseekò€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâ¿÷GLªÀ‘¹±mÞ¤&0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_lseekò€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý l1Oñ´Hc¬JÞçòÔ•À¨& ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+20ÜS7[AIF¬•pd± (ýšÌ”´Æ Dïg0ÇEa¦&@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý볬¸ÂF¡²tûjâš=¬& ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+20ÜS7[AIF¬•pd± (ý=lní5Dº¤¡& + ñš»ª&@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…v‹AKÂœ9ÌŒþ!ë°& ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+20ÜS7[AIF¬•pd± (ý¢AmEO¥&Ö™ýb +s®&@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<2QßCZŸ±OÿQ²&:‚œ Ê +ÙKFzé®›'üvº¦ÆÕ¿Àüð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôhkHCIÕ™Fƒ…r´&@ºœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ÆÕ¿Àüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýgÈG ÆCPŽ,׋çÆ ¶&@ºœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýäþ%E–'JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’õìûÑüð‹+aue_sendto¬ +ret_msgid428hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýصTäìKѯ-r÷¬šÚÖ˜'JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’õìûÑüð‹+aue_sendto˜ +ret_msgid429hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýoÓ½€‚OŸœHdðZš'Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’õìûÑüð‹+aue_recvfromÚ ret_msgid426hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýàðe›8H•§¹ÇIÀ¤æÚœ'Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’õìûÑüð‹+aue_recvfrom˜ ret_msgid427hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý“È9^¤B¨ŽuÇ€ ž'Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’õìûÑüð‹+aue_recvfrom¬ ret_msgid428hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý´q…×Mz¥YíNG#õ 'Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’õìûÑüð‹+aue_recvfrom˜ ret_msgid429hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýì²Ù;¶QF¥ì¦ðàÕâ¢'0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UøùâžÔüð‹+aue_lseek¬ÞhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆß‘³®@=×Áÿ¹¼Ê¤'0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶ÎõáÛüð‹+aue_lseek†ähostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈ…ïG§Bt± €Pz}tJ¦'0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_lseek†ähostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓ Ä.ä£LÖ´2Zåwª' ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+20ÜS7[AIF¬•pd± (ýR3FÚ¡Ko•æ÷Ÿ(2ך¨'@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒ£áNd¸J•š²¯=Ø%ú®' ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+20ÜS7[AIF¬•pd± (ýÒ!€»äOX—G%ƒó@þ¬'@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýû—·þY[O£‚a5ÄLj²' ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+20ÜS7[AIF¬•pd± (ý4f& ›CN(šÀñœàŸI°'@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ývÖ”FÚKŠ´,Q¨œ:¢¦´':‚œ Ê +ÙKFzé®›'üvºˆ±“¨Þüð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýaDFÇSACˆN2yïFô-¶'@¾œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆ±“¨Þüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZ\Ozb1H§­§­ÎWéf¸'@¾œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§02T8—Fy‰œoúº'@¾œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_pread†2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$Æ Ÿ O†d¤>|£f¼'b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºˆ±“¨Þüð‹+aue_writeð2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}O[ßÿJ²RQƒõI$¾'b¾œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áˆ±“¨Þüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýP›„Geµe½D¶¦À'@¾œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆ±“¨Þüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8 +†]¯|HRsš¡‘èÆÂ'@¾œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœûšåÏMY®Ýùþßû‡0Ä'@¾œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñ§ÓŒåG‘Šë- AÆ'b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºˆ±“¨Þüð‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýs䇓¡™F¡¤:[­˜u^È'b¾œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áˆ±“¨Þüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýi!d2ÅT@¯‹øC¤E;Úh²;ð'0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_lseek¤œhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~?Mºr0C$‰vNe~‡ô' ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+20ÜS7[AIF¬•pd± (ý—šîW|qIü’ôD„ëM¢üò'@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQ ® ;Ox‹Až€m3°qø' ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+20ÜS7[AIF¬•pd± (ý¨ø`ŽE=N೬C³ +o,ö'@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýr§\tHD6“¼2M²4ü' ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+20ÜS7[AIF¬•pd± (ýHÊ?ðAN¤¯W¦-¶–Cüú'@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊ4žÇyMe†áÚ3®9þ':‚œ Ê +ÙKFzé®›'üvºÂåšíüð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-·)ùµ©IS¾¯ ˆµÛ€(@Àœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Âåšíüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?eþN»½ï»Ê+9œ‚(@Àœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +€pGzá@€†@âD‡_-„(@Àœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadâ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉõöóKþf—A}þ††(b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÂåšíüð‹+aue_writeÌ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýBâ‰5Fsª»Ü\1½Å©ˆ(bÀœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÂåšíüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'Û,êE·9ÊJÊ¥Š(@Àœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Âåšíüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæ_aÐBƒ’‰ +8Y7q‰Œ(@Àœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýEÎ|ªJ„ˆä@wçÓ@׎(@Àœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_pread¬hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞøÌÝà°D“©“¹rëàn (b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÂåšíüð‹+aue_write–hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`ƒ«qˆBð¢£g¿ò‰’(bÀœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÂåšíüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôƉÝ*ÀC9¸Ò{Õõ-ƒ”(@Àœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Âåšíüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZ¹*o/Iý§ 9cEYÝ–(JÀœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÂåšíüð‹+aue_sendtoÞ +ret_msgid435hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýUƒ- ŸJÌ–ÿ¬wFAQ˜(Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÂåšíüð‹+aue_recvfromÞ ret_msgid435hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýñv=D5ãO.šª@èéå ;š(bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÂåšíüð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý,uã‡óØGâŽ/Ï_šÚæœ(D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº Ã¾£íüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙã’…“œI·oq©K¹ž(D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº Ã¾£íüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßZ*T`xGϹ)®ÈbõB (D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¼ÌÕÅíüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞ¼N].(A!«Æó¶Özvá¢(D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¼ÌÕÅíüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇmµçKpMH¿ìqJÐÐmȤ(@¬œ à-ñFz鮩'üvºàÉc‡Fz鮪'üvº²è€òüð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execnc20ÜS7[AIF¬•pd± (ýçìQÖOú§IŽg8†Å¦(¬œ à-ñFz鮩'üvºàÉc‡Fz鮪'üvº²è€òüð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ý(“ ê´C +¯ +Ë¥G ã¨(¬œ à-ñFz鮩'üvºà-Á£Fz鮩'üvº²è€òüð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ý;$&T-M{§%„‹å1ª(¬œ à-ñFz鮩'üvºà-ñFz鮩'üvº²è€òüð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnc20ÜS7[AIF¬•pd± (ý¨yló¯£Ì*[½’)@Äœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŒÉÿÿŠýð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯0.ÃA#šdª +‰s”)@Äœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒy¬¥æºHÆÅ¥:X]v–)@Äœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_pread˜2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýf+pµ~MNEá^,u&%¢˜)b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŒÉÿÿŠýð‹+aue_write‚3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý Y¾ªæ3LM«ùMK]ÖÛïš)bÄœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŒÉÿÿŠýð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬ ]˜Jȯ5y¸†Yxœ)@Äœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŒÉÿÿŠýð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCë@N’„iW|}Ãæž)@Äœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›ã„ÜMK®0Ší¾“£Ü )@Äœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyÖV¿lGª‰‡_aÇxtà¢)b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŒÉÿÿŠýð‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;u—{ÛBv‰1]6ô?ó¤)bÄœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŒÉÿÿŠýð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýª,ÆXÖB6Œ)Gχ°x¦)@Äœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŒÉÿÿŠýð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁÝ* ›7Jܬ ÅBë®Þ¨)JÄœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºŒÉÿÿŠýð‹+aue_sendtoÞ +ret_msgid441hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+TâªB|žjH+61U7ª)Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŒÉÿÿŠýð‹+aue_recvfromÞ ret_msgid441hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÆŽ}îªD¶ŽÍ3v¹í²¬)bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKŒÉÿÿŠýð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýV(¢ +“QH4¯xÚI"g«®)D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŒÉÿÿŠýð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýéÛ å¥L‘‹<Œ':³)ù°)D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŒÉÿÿŠýð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*§®«D¿ƒJBȻ߲)D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°ª¾‰‹ýð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýäªeàDMD¸ÎFGfìûy´)D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°ª¾‰‹ýð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆ1œ\òBò&P W2ê¶)@ê› µ dôFzé®{'üvºªa݈ˌûWŒË=ûŠ³ÂÍÞêûýð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1execsyslogd20ÜS7[AIF¬•pd± (ý{¹«G⮽5Ê+•Œ¸)bê› µ dôFzé®{'üvºÁU\|ÓŽšXŽÓ㈚iÂÍÞêûýð‹+aue_writev`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1execsyslogd20ÜS7[AIF¬•pd± (ý"&8·p@>‹ÇyHÙº)bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÂÍÞêûýð‹+aue_writev`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýif0†é+FÕ†È2ӭ҅ϼ)0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U® °›‚þð‹+aue_lseek°²hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜ['Z½ŽO<¹.ûÇ"@À) ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U® °›‚þð‹+20ÜS7[AIF¬•pd± (ýQÒ÷Œ¯–Nî’FýŸT@vÓ¾)@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U® °›‚þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyÙÝeÙKÁ¦òB­„kB%Â)0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾ÓÑÝ‚þð‹+aue_lseek‚ÂhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýý †&KK–ˆÙÎÄ)@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eøûö˜…þð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýõç³×ö¤Ct‰;«› ­˜ïÆ)JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøûö˜…þð‹+aue_sendtoÚ +ret_msgid463hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý†ÊGôœ N»¢BJŸ #È)JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøûö˜…þð‹+aue_sendto˜ +ret_msgid464hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý‹âaÕ9†@ö¯ƒ˜ö4‹Ê)JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøûö˜…þð‹+aue_sendto¬ +ret_msgid465hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýäà†4„I_œ~@Ö÷c® Ì)JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøûö˜…þð‹+aue_sendto˜ +ret_msgid466hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý”  ©ÈDªý/'Ìì#ÿÎ)Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºøûö˜…þð‹+aue_recvfromÚ ret_msgid463hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýQ€4%J +²u‡dÉMápÐ)Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºøûö˜…þð‹+aue_recvfrom˜ ret_msgid464hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýaŸ™ÒÉHIÓ¤0Ñ'5›uÒ)Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºøûö˜…þð‹+aue_recvfrom¬ ret_msgid465hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¶+öšO"¨܉²RÔ)Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºøûö˜…þð‹+aue_recvfrom˜ ret_msgid466hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý-gݼ‹ñE´€wӶʀqÖ)@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´ ž†þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýYJÜÃL¡ð½DÏ]Ø)@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´ ž†þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýj °›²@l‰sB–×ÿÚ)@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´ ž†þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý*c¶û¼eDA±vÀ¨ŒÜ)b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´ ž†þð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÚÒ)l9_H–M¼’påxMÞ)0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ²ú Šþð‹+aue_lseek–ÙhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!Z¤8Nñˆ¨l“'Ȩà)@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø†•þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý†ÖNÞ!ëHà„¶“ þ”â)@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø†•þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýaetðëC”° r®Ø²Šä)@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø†•þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýפs¥–\@ iĶ+¯Ðæ)b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø†•þð‹+aue_write*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÆ Öë%òHŽ‹eð#‡¤×Óè)0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_lseek–ÙhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýká8Õ2EÕnûí:E£äì) ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+20ÜS7[AIF¬•pd± (ý×Fu pO=·±³oà?RVê)@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýA©Â¬pG°´h”töŸ?ð) ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+20ÜS7[AIF¬•pd± (ýY÷û^Ó8GG‰(¼:!Ýî)@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçN=!4!DôŸˆ$?ó’+ô) ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+20ÜS7[AIF¬•pd± (ýþŠ%Ž¹B½‹C¼ùqÓ¹ò)@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýM.çoH¶^J>*&Ôþö):‚œ Ê +ÙKFzé®›'üvºèŠžŽ‘þð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÛ «Þ~M.¶æ¬£u%3ø)@Èœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V 芞Ž‘þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýga'ÓA?NöŽAßÙ3Rqú)@Èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬K|•YI¹ˆƒìv{‡¼Qü)@Èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadÊhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7}x1 G_³þæ“÷‚^þ)bÈœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á芞Ž‘þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑI'NM滵Äê‰Ú›€*b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèŠžŽ‘þð‹+aue_write´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌÒ,–¨kG@±Å“in)´‚*@Èœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V 芞Ž‘þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'3¤I©·ËÆ´ŽeC#„*@Èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)ú_þ‹A¥‡'+ÞÇ ñ†*@Èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadŒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜Ì¨íGG•˜ obˆ*bÈœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á芞Ž‘þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZž|mñ>Mœ¡Ëµ`råü¿Š*b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèŠžŽ‘þð‹+aue_writeöhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆ0«{»³JgŸ\\ Œ8ÉŒ*@Èœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V 芞Ž‘þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýuw¼sŽÁOEŸ´…XÔìx˜Ž*JÈœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºèŠžŽ‘þð‹+aue_sendtoÞ +ret_msgid467hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂ8¤‡íôOŠ‡óåöÒ)’:*Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºèŠžŽ‘þð‹+aue_recvfromÞ ret_msgid467hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýçZÙ;8H¨š¸×d”Íÿ’*bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK芞Ž‘þð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýBmšKb¤½áÀ¥0Á”*D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèŠžŽ‘þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰Æ‰rÚ»Dÿ¬0m÷´b–*D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèŠžŽ‘þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5x—HkŸü® RC#ÿ˜*D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÀÄ×—‘þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýK3ЕSD˜– »0©ØOš*D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÀÄ×—‘þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýš¨ Jû³ÿ¨hx_sœ*0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ€þè‘þð‹+aue_lseekŽ… hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠž?4`OJ£š‘Á ¤ŸFž*@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ž½„û“þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÅïå»Õ_Dˆ¤’7ŸÓJ% *@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ž½„û“þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý6¿l#,*C˜æBas».¢*@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ž½„û“þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýD8ÜžB›ÂY}耤*b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ž½„û“þð‹+aue_writefhostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýØËdgÑ°@ø“·ÓÀ?p!¦*0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà¥Ç§™þð‹+aue_lseekì hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýL®ò†m/MÌ°¹Ô÷Pš©¨*@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ôÅ­Üšþð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ®¶ü‡ÿwIGª•¦Í`¹^Ð(ª*@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ôÅ­Üšþð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýð/;n‹~M†¥ý}=ƒJ1¬*@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ôÅ­Üšþð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýG” ¼AG±E˜ÇòtÖá®*b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ôÅ­Üšþð‹+aue_writeJhostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÊ ÛâîD¸ƒ]a4lÙ°*@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eœÖæÅ›þð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý …ìDºOS‘¾ä—vo5Ʋ*JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœÖæÅ›þð‹+aue_sendtoÚ +ret_msgid468hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýfÅ ÞYA¸œÝn'ú&»´*JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœÖæÅ›þð‹+aue_sendto˜ +ret_msgid469hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¿¤Ì4w\D’%žú +šLM¶*JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœÖæÅ›þð‹+aue_sendto¬ +ret_msgid470hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýeLéÖÝEG´®å7 +*#ˆ¡¸*JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœÖæÅ›þð‹+aue_sendto˜ +ret_msgid471hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý3Ÿ.oNÉ‘÷{áغ*Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºœÖæÅ›þð‹+aue_recvfromÚ ret_msgid468hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýT0¿‚ÙI!°ûL¢ÒßÁq¼*Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºœÖæÅ›þð‹+aue_recvfrom˜ ret_msgid469hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýıœðGI%ŸåuïO¶±¾*Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºœÖæÅ›þð‹+aue_recvfrom¬ ret_msgid470hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýšªß¾ëfJ¯A w²ŠŒcÀ*Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºœÖæÅ›þð‹+aue_recvfrom˜ ret_msgid471hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý4€÷ªD—’Ù.<OºÂ*0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_lseekì hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_RyõNtF»¦…ⶀvÆ* ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+20ÜS7[AIF¬•pd± (ýá$Û>¡àL½„‘T<á4˜üÄ*@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýmËn†¨ÒKžb“XQ™Ê* ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+20ÜS7[AIF¬•pd± (ýQ±Ã +4¢@ªšÔ(µ6x¯>È*@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýss¡ð¼AP¿ê¨u…ývÎ* ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+20ÜS7[AIF¬•pd± (ýSb¿+T‰NÀ¹ßìzfÛ³Ì*@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…éõ@y³­–ÜW¡ˆÐ*:‚œ Ê +ÙKFzé®›'üvºÊ–†‚ þð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçC<ãµ@_ˆþÈsâ¯ç{Ò*@Êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ê–†‚ þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýk¾àtQ”J·>CþˆÔ*@Êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨©y»âL¦²¾.…÷iRmÖ*@Êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadð+hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!«Æ'¡GHª‰ÐxÝø¿üŒØ*bÊœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÊ–†‚ þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýWúÒZAÏ…Gœt]÷Ú*b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_writeÚ,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþP>J §Aù¬Hè&oía·Ü*@Êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ê–†‚ þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýê.Ÿ gZ@vžt6´åDŠ[Þ*@Êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?*xš6ALh‘é³#ÂtâÜà*@Êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadÖ +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^ŸÉ?AªŠ/ê]ñ£ìßâ*bÊœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÊ–†‚ þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýhwƒgtD’•A´šyÓ–ä*b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_writeÀ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅ€'!“K ‘æý˜'?>æ*@Êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ê–†‚ þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™àþ%ÄDH‘ô:6B§hÞè*JÊœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÊ–†‚ þð‹+aue_sendtoÞ +ret_msgid472hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×^¤a@D¸~äpîpê*Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ–†‚ þð‹+aue_recvfromÞ ret_msgid472hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý´y¸LüCøƒðú +Ç3ô¶ì*bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÊ–†‚ þð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý{¶°Û.F²‚ +’–ó÷¶Sî*D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýn‚ZFB·-UÔ¹Û¹ð*D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉ…¼èJC‰÷6;n¦²Wò*D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOg†:¾NÅ¿þqÖƒBbåô*D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤¥S¹®GH‹qùu+èxö*0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌô¹ê þð‹+aue_lseek‚È hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýä‘‘TôoO£{©ʦ+{ø*@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯â¬ÇÊ¡þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýٻܠAò®y×~èzú*@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯â¬ÇÊ¡þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýUÉ¢YH¨$9CŠ Ooü*@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯â¬ÇÊ¡þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý«8¾ÿgLʉ™¾:Ÿs¯þ*b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯â¬ÇÊ¡þð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý½½M¯ŠˆE– j˜¸€+0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖË겨þð‹+aue_lseekØÒ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­éŸŒG‹“+Â^GÈÿ‚+0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_lseekØÒ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎJ©IK³‡ˆä˜_Ç"†+ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+20ÜS7[AIF¬•pd± (ým!?ZlBןIŸâ­¿V„+@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²˜*g’.BG%¢oâ,Š+ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+20ÜS7[AIF¬•pd± (ýÅ`rÔÆLª§!~ó/w`ˆ+@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýg ÊÝq%Gy…ø½è7;I£Ž+ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+20ÜS7[AIF¬•pd± (ýª=E°£ÊByœ”–Á©žíyŒ+@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwîj&ýB{x´h±!1+:‚œ Ê +ÙKFzé®›'üvº²ƒûô®þð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýžþ b¦A3…L ÖFz!É’+@Ìœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ²ƒûô®þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ¬[¾G`£Õ"ÕŠc×È”+@Ìœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊ"ê,S¯D)¾¨œ¹æ¼‰–+@Ìœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadŽ8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýtR‘2©HJ·ûÞý{ˆÌ˜+bÌœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á²ƒûô®þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9=)­Çi@ļ€«„Ä9š+b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_writeø8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬ß ÕµF£¬˜Ý£g⯜+@Ìœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ²ƒûô®þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓçyI3MX”Nóc½OT ž+@Ìœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›Ã ™I¨†?o*Ü® +@Ìœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadÎ +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠ*é”I²§ â ¤?ï¢+b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_write¸ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯Ó›Ë¨¼Lš¬êôãß³à—¤+bÌœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á²ƒûô®þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©ïÊ&L¾MÓ—OŠµ6¦+@Ìœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ²ƒûô®þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýe¹ôƒ«‰OºDAŠ«g„¨+JÌœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº²ƒûô®þð‹+aue_sendtoÞ +ret_msgid473hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËÃyË/NAª…-¸’Ǫ+Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº²ƒûô®þð‹+aue_recvfromÞ ret_msgid473hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýBœȆF xioÝ킬+bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK²ƒûô®þð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýšVnM|N@ƒÒ°ÅB®+D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕÁŸ€+FDƒGrȳװ°+D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ‚jŒ¿Cw³l£ô°Çt…²+D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/ ¥µ„Kƒ­XÿÄ;d´+D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýMoÄCO ªR#­…Yà¶+0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈ«‘ñ¯þð‹+aue_lseek¨ø hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|Pp1ÐD~¥ž.¹¬»!œ¸+@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e€ª°ò±þð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÆÅÚ!'XE6­0!õ®ãÄƺ+JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ª°ò±þð‹+aue_sendtoÚ +ret_msgid474hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýbhÌršHM·¹ ©¦K‘Ƽ+JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ª°ò±þð‹+aue_sendto˜ +ret_msgid475hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¿cvï7¤M=¤JïZc- œ¾+JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ª°ò±þð‹+aue_sendto¬ +ret_msgid476hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý×9ËÁ¸Fñ§lCϯãý;À+JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ª°ò±þð‹+aue_sendto˜ +ret_msgid477hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýº" CyôåvœP¦Â+Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ª°ò±þð‹+aue_recvfromÚ ret_msgid474hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýUÃÌØ=rBZ¢™àSÆí­âÄ+Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ª°ò±þð‹+aue_recvfrom˜ ret_msgid475hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýцQ=Fb¦‚+•î³ ^Æ+Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ª°ò±þð‹+aue_recvfrom¬ ret_msgid476hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýýñ¯¹TN>¶´˜¼Í4ÃÈ+Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ª°ò±þð‹+aue_recvfrom˜ ret_msgid477hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýS[”~ÈcHÕƒ±ˆ"¬;B-Ê+0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U€ëÁ´·þð‹+aue_lseekÞŠ!hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹ ¤OêH±Ä4¹"{ËÌ+@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯øêüÀ»þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýô&çU‘L&¦xiþdsÎ+b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯øêüÀ»þð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýù‹°âFzé®·'üvºò×µ¨Fz鮩'üvº°äÿ§®]vRS<„äB±øêüÀ»þð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýjè¿èEFŽÄ‡õS€2Ð+$–œ ×µ¨Fz鮩'üvºù‹°âFzé®·'üvºøêüÀ»þð‹+aue_fork +arg_pid1337hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1337ppid1281execbash20ÜS7[AIF¬•pd± (ý +¥µîgµÑUµg¨eµÑc'20 +ÜS7[AIF¬•pd± (ýœhgœÓgM>ˆÎ¬*5CrÒ+ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc't/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1øêüÀ»þð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine@/usr/bin/env bash ../Bash/all.shppid1282execbash20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ†àüTžW‰/lHÀ¯ OÅ ÜCÔ+<ªœ ù‹°âFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conføêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execenv20ÜS7[AIF¬•pd± (ý>òGŠL¿¶Qf†ÛAÖ+@ªœ ù‹°âFzé®·'üvº‰oý©äÇU¤©A)Eǹ øêüÀ»þð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýèÓuƒ‡O{‚7"ð¬åØ+ªœ ù‹°âFzé®·'üvº‰oý©äÇU¤©A)Eǹ øêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýª-ÖŒËsO>ŠœÞ„ ½òÚ+<ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsøêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execenv20ÜS7[AIF¬•pd± (ýfeÐq.˜B»u™»EìsûÜ+@ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýèãUD¾îMׂ‡”ÎôkíêÞ+@ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýsoÞÚÍI¹®¨F€ Rà+ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execenv20ÜS7[AIF¬•pd± (ý˜KÉÏ+ÐJlº9d¢ÄÊ©â+<ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7øêüÀ»þð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execenv20ÜS7[AIF¬•pd± (ý!¥-«ÌJ²×¸‰,ê ä+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý¾2kZH‹¿Wz¶‘©Dæ+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý\H'qcFv¾# J¦Äè+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý—Ǧ2ø@m ¿Ì³Ï\ê+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý½7ô%š@0±=xáæüNì+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý(¤:GJDsƒÊ¹ÂØÿœî+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýRMÄ„æCȲætü†õð+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý +*ŠÇEN¦õ GüHæ‚ò+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý:ã—RÊMl´súº´eèô+ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execenv20ÜS7[AIF¬•pd± (ým/*äÃB-š«e?½œê"ö+:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execenv20ÜS7[AIF¬•pd± (ý@+oKæM¨¿pöí8«Ÿ0ø+:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýãîšLÏ<ÒN W0æú+ªœ ù‹°âFzé®·'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1øêüÀ»þð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine&bash ../Bash/all.shppid1282execenv20ÜS7[AIF¬•pd± (ý¨²>+SIl½†m¨VkYü+<ªœ ù‹°âFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conføêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý›d;¶DÇ´Ú5Æõ^eþ+@ªœ ù‹°âFzé®·'üvº‰oý©äÇU¤©A)Eǹ øêüÀ»þð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý-F¼BùO ºÐý¯3)¢a€,ªœ ù‹°âFzé®·'üvº‰oý©äÇU¤©A)Eǹ øêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýâ#]›nI¯› k¿ãúQ‚,<ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsøêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý€Ï"€)&K¦€úØÖÞ + „,@ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý+fb¬(G? ×ÕQ(ÊzO†,@ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýlbMÇK»CD•yŒy uÓˆ,ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýVçPâäHð“Æ)½æéŠ,<ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8øêüÀ»þð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýe@£om«Jm¥mÖâÕ.½Œ,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýq6 /Cn­^tµy)oŽ,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý…éü0M7—%xRÿý˜…,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý·›MÕŸ0Ií½ïOäx&_’,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý×~‡Æ-ÐOï½`9üj Ž”,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýfK¬0{¹Hýké³w@§–,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýc'ÀûW@²©2#äaļâ˜,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÁu÷þ?DKŒ…\6*žš,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýçüÑu*J¬»V8Íל,ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýìµ=YH1Bº­4Fe‹•¦ž,<ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8øêüÀ»þð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýšÅòv‰|Eä·ìáO†X— ,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýz/a›=ÍLX’7ÐÐDĮˢ,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýí'{’D¡,/6F"¤,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýŸôu0AÚIœ +󙢻¦,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý®»ˆ÷•úJ›¹ØlƒfJŽ¨,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý‘©ys¶M“ˆ #i¼Z×6ª,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýkPIqÙK@¶´RÀׯñ¬,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýžþGØ­ÂIè¯À~sñýŽo®,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýZpŒ¹I™¯,¡û4w°,ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýá ¸²AÆ¿•I7;²,<ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1øêüÀ»þð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý¥ÂF¶ºAL˜ø‰ž`k´,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýð[±hq|Otý»±&Ÿ¶,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýdÑXFàŽ0XwöÁ‘¸,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýS¹¬ïDÌ¥ˆ BòRÆ׺,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýv>ä*.J'ªP©Œ$ (Ò¼,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýVb™dLIè¸20oæ  ¾,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý w¾ÖHG*äØ3À,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýªüŹÔFÔ“ãËËDÝ¿SÂ,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýYü¸ÉKêº)gýÒm´Ä,ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý¯jåÐõZM`»Á`ÝYf"Æ,<ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7øêüÀ»þð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýkT +œ£êHݹȦ]z¥ÎÈ,2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÉSŸtI½¥*þOØ:eKÊ,2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýDÝ´·&>J¨læUu<Ì,2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýoÔEÝ‚Mç½ý%ni «Î,2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýân^=}cJ–*{ëï„[Ð,2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýE3A¾7Gˆ¢WŽ>&IÇÒ,2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýzL±«ÁC‡öæ%ÒE´Ô,2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýsø‡¿ì@p¬#`Ñ=ÆNÖ,2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý÷ÖÔh +FBn©tÉmï>Ÿ«Ø,ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ˜ˆúŸyRÂG®ˆIÆàÁ‘_Ú,:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýH± {ÃDó¾4Zq[ÜpÜ,:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýËä¥bЈC.™ÅB¦"»æÞ,:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýR‘·±0æNåŽàš‹I=ÇÏà,:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý±ð‚ChBʤILéjÁMâ,:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý,\ÕXÅA ¼… Uä,<ªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯/dev/ttyøêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýêï¶ÎÚáH´’ÂzŸSÊæ,ªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯øêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý +Ãü¢lD7·)jº ÂCWè,<ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc't/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.shøêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý’ÞºðÉ@|’ŸK‹±éê,0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¯Œ‡æ7ÁHͪi?bÂg‘ì,@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýP«=ñFK¾M>«½_î,0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýtÉ&ΑDIÄ™Hß èð,ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý´dž›xJë³c!GìÍ2jò,"ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýS¡ËÂBC‰¯u ²†tÔ;ô,"ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýËÀèU¨íJ7+Ú¤ö,0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý’›™«;Ea¼q8&K/8õø,@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý8 Í +.Dw¦í%nägöíú,0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_lseekˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýù&4Fzé®·'üvºôù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±øêüÀ»þð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý“M0® +D<‡õ ë6Jü,$ªœ ù‹°âFzé®·'üvºù&4Fzé®·'üvºøêüÀ»þð‹+aue_fork +arg_pid1338hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1338ppid1282execbash20ÜS7[AIF¬•pd± (ý€é—¿B¡°ª7 z½‰»þ,²œ ù&4Fzé®·'üvº¥µîgµÑUµg¨eµÑc'Ð’¸Ê»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýñ}´—M.…¢f!¥t±€-0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨ðŽ¿þð‹+aue_lseekè–"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCl½÷!@0¿®¢ùÈã‚-²œ ù&4Fzé®·'üvºù&4Fzé®·'üvº¼ó“ŽÃþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýöÁ"– J°²9=õO„-<ªœ ù‹°âFzé®·'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.db¼ó“ŽÃþð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýôà®Q±¡N ’ œ~D ÉĆ-@ªœ ù‹°âFzé®·'üvº–Ø%™wyïR¹wT’ï9¼ó“ŽÃþð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýɚŠÎOǵ +¸ga3ˆ-@ªœ ù‹°âFzé®·'üvº–Ø%™wyïR¹wT’ï9¼ó“ŽÃþð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýòaÛÁ/mJ‡§ã¦è ìŠ-@ªœ ù‹°âFzé®·'üvº–Ø%™wyïR¹wT’ï9¼ó“ŽÃþð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýDL‚ X-K—ªh„SÍÌ&ÎŒ-ªœ ù‹°âFzé®·'üvº–Ø%™wyïR¹wT’ï9¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý+®÷ɉD³÷îXd÷!ÃŽ-bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¼ó“ŽÃþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý¤’߶voB²¬¼Ÿ­Ü!B‘-bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¼ó“ŽÃþð‹+aue_writeDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýú'~0Fzé®·'üvºöù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±¼ó“ŽÃþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÊCT‘Â÷H²}$(X†’-$ªœ ù‹°âFzé®·'üvºú'~0Fzé®·'üvº¼ó“ŽÃþð‹+aue_fork +arg_pid1339hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1339ppid1282execbash20ÜS7[AIF¬•pd± (ý*i+€$Jˆµkþê”úî”-²œ ú'~0Fzé®·'üvº¥µîgµÑUµg¨eµÑc'¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +VìÁ®x{Y¸a5 {€020 +ÜS7[AIF¬•pd± (ýd‡…õýCIˆ¡ ÇâŸ0Q–-²œ ú'~0Fzé®·'üvºVìÁ®x{Y¸a5 {€0Š/usr/home/user/ripe-prov-tests-master/Linux/./change_file_permissions'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¼ó“ŽÃþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine4./change_file_permissions ppid1337execbash20ÜS7[AIF¬•pd± (ýþ8djŒOI€į]͘-<²œ ú'~0Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¼ó“ŽÃþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýc󉫦eBá˜Iw¢dì /š-@²œ ú'~0Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ¼ó“ŽÃþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý-Ô¯‰±–Dû™iUx|°1`œ-²œ ú'~0Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýƒû‘˜ñA,ž°ƒK[ÍÐÜž-<²œ ú'~0Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¼ó“ŽÃþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýÌÜ(è†?J™粌ŠŸü -@²œ ú'~0Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â¼ó“ŽÃþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý(Ä4I)Bô­3¾(]–ج¢-@²œ ú'~0Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â¼ó“ŽÃþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýýd~% +@焇ϻZ|R¶¤-²œ ú'~0Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýÒPx3_9A$¶ÂÌ6~i–¦-<²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¼ó“ŽÃþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýÄ~TªOÆ´÷[jÔº†¨-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýmâ]ðTMÄ­"µYý›F™ª-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý¤†ŒÖ¡UH‘—&¹=[Ȭ-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýf(“xEÓ¤>©tds®-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý ózËGóKM‡Å"·”9Ü°-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý©™tΡK ©ÄN|II½²-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý:Kˆp‰WIy»¶ Ë†WÙ´-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýǹu¶D·±Û³±¶ƒ„â¶-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý‡¸ÇM'ŽceˆG¸-²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýãpÍFuªÂ½vßjëº-:²œ ú'~0Fzé®·'üvº¼ó“ŽÃþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý?‰ÄÒìFžŒ¢˜ñØ"kõ¼-:²œ ú'~0Fzé®·'üvº¼ó“ŽÃþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý +j/°®¨¢¤_¢¨gIÿ¤ï20 +ÜS7[AIF¬•pd± (ý¾9+€.Oå†X??…ˆu¾-4²œ ú'~0Fzé®·'üvºj/°®¨¢¤_¢¨gIÿ¤ïj/usr/home/user/ripe-prov-tests-master/Linux/README.md¼ó“ŽÃþð‹+aue_chmodmode¶hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýÀm¥*º±M¤ ®Df¦m™À-4²œ ú'~0Fzé®·'üvºj/°®¨¢¤_¢¨gIÿ¤ïj/usr/home/user/ripe-prov-tests-master/Linux/README.md¼ó“ŽÃþð‹+aue_chmodmode·hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýÒêhãF +ƒ9¾ìÝájxÂ-²œ ú'~0Fzé®·'üvºú'~0Fzé®·'üvº¼ó“ŽÃþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýëþJ¾[CﯓÚ×Û’*ûÄ-@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¼ó“ŽÃþð‹+aue_read°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýÁ¢Š?æýN’kujQË«™Æ-0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¼ó“ŽÃþð‹+aue_lseek¨hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýú'Ø¿Fzé®·'üvºøù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±¼ó“ŽÃþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýnn2ëJíµq˜•ßÈyÈ-$ªœ ù‹°âFzé®·'üvºú'Ø¿Fzé®·'üvº¼ó“ŽÃþð‹+aue_fork +arg_pid1340hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1340ppid1282execbash20ÜS7[AIF¬•pd± (ý â©@æNGi¶¢ê;!n?+Ê-²œ ú'Ø¿Fzé®·'üvº¥µîgµÑUµg¨eµÑc'¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÅkɉ‡ÒNø™“þ¼ *~5Ì-²œ ú'Ø¿Fzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¼ó“ŽÃþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýcJPŒNç™$2æ¢ ÒÎ-<²œ ú'Ø¿Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¼ó“ŽÃþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý²ñÓ„VI\€¥Cmåô÷Ð-@²œ ú'Ø¿Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ¼ó“ŽÃþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÉÓ!ïVlH¼“FÕy»Ò-²œ ú'Ø¿Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý³§íAé`H•ˆ= Ê–jÔ-<²œ ú'Ø¿Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¼ó“ŽÃþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý«Z@GãwL +¿éÖäw^{Ö-@²œ ú'Ø¿Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â¼ó“ŽÃþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýïTA=DpMü–ɹàÎØ-@²œ ú'Ø¿Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â¼ó“ŽÃþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýBIJÕ>B³eá ¸+ qÚ-²œ ú'Ø¿Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý$A¨Ï5B§ŸK¨!déçÜ-0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U€½©ÎÆþð‹+aue_lseekØã"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜h­¯O‚‡J›™i¹6üÞ-@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eœ§ãŸÈþð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýOÓBÒ@Hi²Æ +½Ü¨à-JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœ§ãŸÈþð‹+aue_sendtoÚ +ret_msgid479hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý+ì¿Óè@L?Q+´Ø[Zjâ-JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœ§ãŸÈþð‹+aue_sendto˜ +ret_msgid480hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý*tŽööAŸ’¦´ Çw¡ ä-JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœ§ãŸÈþð‹+aue_sendto¬ +ret_msgid481hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÂ~¾0¹ŸDܱ/"Jß,Wžæ-JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœ§ãŸÈþð‹+aue_sendto˜ +ret_msgid482hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ–Šú0vú’yIk˜Ç5ËcORè-Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºœ§ãŸÈþð‹+aue_recvfromÚ ret_msgid479hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý ½»EW©‡'’Äwžê-Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºœ§ãŸÈþð‹+aue_recvfrom˜ ret_msgid480hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýŒç²QÈFź?QMKÓò;ì-Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºœ§ãŸÈþð‹+aue_recvfrom¬ ret_msgid481hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý«ù€ÒC¶©Üzœ¶bî-Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºœ§ãŸÈþð‹+aue_recvfrom˜ ret_msgid482hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý<õ+zN爞„A‚ð-²œ ú'Ø¿Fzé®·'üvºú'Ø¿Fzé®·'üvº”ç¥ÚÊþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý°?¼_«ÌNg™ä#•š]èÙò-bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯”ç¥ÚÊþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýÀ/&²\M³kDÌi‚-&ô-bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯”ç¥ÚÊþð‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýúÂé}Fzé®·'üvºúù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±”ç¥ÚÊþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýý&†ñºA=‡ð|ë÷G›õe«‚G®è.0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_lseekØã"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·ä¾'TxE‘ú%û¸|æì. ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+20ÜS7[AIF¬•pd± (ýÓ]škÈJO5‚”jÚ~ê.@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýäelÑhC`¦ö¥·IÁ‰yð. ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+20ÜS7[AIF¬•pd± (ýâòÙÛµwH¼™»‘‰]î.@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,Ðö:@b€ 9b _ýô. ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+20ÜS7[AIF¬•pd± (ýŽæãÅC«Š˜¿þƒWVYò.@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙš¬úÉxo‰At°ƒô¦:ãø. ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+20ÜS7[AIF¬•pd± (ý"KÖ„*ÙM2”‰-¨5°ö.@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛ†K4T@¬z½J+mÕú.:‚œ Ê +ÙKFzé®›'üvºìôÎÛÌþð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý2‚’ Gô¶‘±Ðº`ü.@Ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜–NgßE#”[JïÎm5Àþ.@Ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!NôöLìŠ:þbÀU±€/@Ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadþJhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸¨f‹€˜G^´’0$H…eb‚/bÐœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áìôÎÛÌþð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³'°«ÉDA’ƈôø9í¢„/b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìôÎÛÌþð‹+aue_writeèKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`÷‰<#H/ª­ŸçІ/@Ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1òJ²£N[‰¥Ù¸æˆ/@Ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý •;‡Q2Fú­Mâû§êPŠ/@Ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadü@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýGÎF̳VM£ÙDx¨ÉŒ/b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìôÎÛÌþð‹+aue_writeæAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛë»­ESG¼‡8Wœú2RŽ/bÐœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áìôÎÛÌþð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™­6¹~F0™//@Ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCQ¯Ë†D}£ 9;Ñ=¬=’/@Ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšÒóý[HO—¾¼l ç:”/@Ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadèLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆ°¡NãôK ‘Vtâ*v}'–/b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìôÎÛÌþð‹+aue_writeÒMhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxÂc)GA¨$P´,?˜/bÐœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áìôÎÛÌþð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×z}ì;Aî…çÛðCw;š/@Ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýì˪(Eì(Æ1¤öÀÃœ/0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uê‹¢“Îþð‹+aue_lseekêò#hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»¥I=uDCºŽïÜ@`¶¦ÿž/²œ úÃhßFzé®·'üvºúÃhßFzé®·'üvºÔÐÒÒþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýøÌ}¿W¿OY¥Õœ.ŸÀÈw /bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ÔÐÒÒþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýÓTáä0…JæÓÕ'h½O ¢/bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ÔÐÒÒþð‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýû]"-Fzé®·'üvºþù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±ÔÐÒÒþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýZ‹`ßFý…Yý1$Q<¤/$ªœ ù‹°âFzé®·'üvºû]"-Fzé®·'üvºÔÐÒÒþð‹+aue_fork +arg_pid1343hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1343ppid1282execbash20ÜS7[AIF¬•pd± (ýŠ,é +$õMÓ‡¸U£d ô¦/²œ û]"-Fzé®·'üvº¥µîgµÑUµg¨eµÑc'ÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +~JE9ê[¹E%`ûêq…20 +ÜS7[AIF¬•pd± (ýãÖ/XJ¼Ðì¯"å¨/²œ û]"-Fzé®·'üvº~JE9ê[¹E%`ûêq…z/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ÔÐÒÒþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine$./copy_static_buf ppid1337execbash20ÜS7[AIF¬•pd± (ýŸ•ÎO7îL¤…aU©§éLª/<²œ û]"-Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÔÐÒÒþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýlxÉñÍüKj«õCäKÁs¬/@²œ û]"-Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ÔÐÒÒþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýVxšcH‰ôžâµ®/²œ û]"-Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýÏ0­ç¡íCå°5ê6NÃüV°/<²œ û]"-Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÔÐÒÒþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ý1)krÖCÖ¡îf5‹úD.²/@²œ û]"-Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýkºß¬$F‡çj<´/@²œ û]"-Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ý Ÿ&™D¤¢d0¤*÷½¶/²œ û]"-Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýŠf9‚«JK‰—/ü3Ë}’/¸/<²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ÔÐÒÒþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýEÆÁ€™ˆI|‘4ü|ïÃrº/2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýr‘¸}ÚHžŒ– „µ ¼/2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýh\4¯ùOK‰d?dêKo7¾/2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýMRù‹Ið¥¸_ŽZûžsÀ/2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýºJ=n™ôM©”õ¢B²U*>Â/2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ý½ãqŽ7¾G2ŸT@ºò °¡Ä/2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýÝDÈÁÜLZ´RÞ%DtÎÆ/2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýäqÕô‡ZAý®­úñOSšÐÈ/2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýçŽL2.ÖF.˜=RÝ”â‡Ê/²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýÕÕ4ÞG±<®Þ[R,Ì/:²œ û]"-Fzé®·'üvºÔÐÒÒþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýl}WŠ´>NÙ…UÉÔjÆùÎ/:²œ û]"-Fzé®·'üvºÔÐÒÒþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýôRqYD0'eϦy¿Ð/²œ û]"-Fzé®·'üvºû]"-Fzé®·'üvºÔÐÒÒþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýI+ÿ$@לð'`Ð;¿WÒ/@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'ÔÐÒÒþð‹+aue_readähostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýž®¢µIåŠýOEï:o×Ô/0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'ÔÐÒÒþð‹+aue_lseek˜ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýû]x,Fzé®·'üvº€ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±ÔÐÒÒþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýàòF_L@…Ôå‹ú‰îÂÖ/$ªœ ù‹°âFzé®·'üvºû]x,Fzé®·'üvºÔÐÒÒþð‹+aue_fork +arg_pid1344hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1344ppid1282execbash20ÜS7[AIF¬•pd± (ýÑZ„(ØIÀ銌c Š²Ø/²œ û]x,Fzé®·'üvº¥µîgµÑUµg¨eµÑc'ÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýèöy¼!2C@–ó!¹}/1æÚ/²œ û]x,Fzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ÔÐÒÒþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýAòi„#Bò™/˜ÓK‚ËÜ/<²œ û]x,Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÔÐÒÒþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý$$tÀAi¦f=8ìw’Þ/@²œ û]x,Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ÔÐÒÒþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý"ûž&f Nˬš§lÕà/²œ û]x,Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýk"÷6ƒ3GQœCûQ·qâ/<²œ û]x,Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÔÐÒÒþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýn8ØOžMŠ‰ê\ÉsK©:ä/@²œ û]x,Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýöf“”¹F˜’ ògæekæ/@²œ û]x,Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýñ +©±DN[6H7†Ùè/²œ û]x,Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý›»–yùCé§kYˆÆk ê/<²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ÔÐÒÒþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýhSé­I&¥)Ó _8ì/2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¾+lØBš´-ŽÏØî/2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý1Žå*G}O=ž}÷pP•ð/2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýåS´Î9H5šÛ'¦‡Ø.ò/2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýç|RM•JˆºC‹VÀ>ô/2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý(‚¦Ž°§Gñ«vÄ7¸¤•ö/2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÃÀ \H/Œ åÿ¬¥| ø/0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®Ü·ÝÕþð‹+aue_lseekô¾$hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýô <ç›ÓJ6ª6À îú/²œ û]x,Fzé®·'üvºû]x,Fzé®·'üvº¢ìõàÙþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýk»¨Q€eE‰‹Åø²U vùü/bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¢ìõàÙþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý=ýœ»Hj€–Y ¼Jþ/bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¢ìõàÙþð‹+aue_writeLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýû÷6žFzé®·'üvº‚ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±¢ìõàÙþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýsE¾À B»,ê/Æɦ€0$ªœ ù‹°âFzé®·'üvºû÷6žFzé®·'üvº¢ìõàÙþð‹+aue_fork +arg_pid1345hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1345ppid1282execbash20ÜS7[AIF¬•pd± (ýLl·ÒLü¯ÌŒ5<-‚0²œ û÷6žFzé®·'üvº¥µîgµÑUµg¨eµÑc'¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +)Az€^ºAÎÏ^€L¯20 +ÜS7[AIF¬•pd± (ýyR‚HñŸÀÜIÓSñ„0²œ û÷6žFzé®·'üvº)Az€^ºAÎÏ^€L¯’/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_stack_frame'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¢ìõàÙþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine<./copy_static_buf_stack_frame ppid1337execbash20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ¦þK)>?—‹JB–^…ãÙk †0<²œ û÷6žFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¢ìõàÙþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýÛt:.܈Aˆ¬ÛÈÌEÞˆ0@²œ û÷6žFzé®·'üvº‰oý©äÇU¤©A)Eǹ ¢ìõàÙþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýZZ¥Ó I‰‡‚ümJ†Ö‘Š0²œ û÷6žFzé®·'üvº‰oý©äÇU¤©A)Eǹ ¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýÈxÂÉ|‚B¾ù?@¯ZÐŒ0<²œ û÷6žFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¢ìõàÙþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýö)~j¾k@‚’ZÂæŽ0@²œ û÷6žFzé®·'üvºXꎩð®…\®ð@JÌ…¼â¢ìõàÙþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýv‡³”œJb¡I$hkén(0@²œ û÷6žFzé®·'üvºXꎩð®…\®ð@JÌ…¼â¢ìõàÙþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýôX%¥ÚõM‚­C®v8j£’0²œ û÷6žFzé®·'üvºXꎩð®…\®ð@JÌ…¼â¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý•/‹ÜŠhK«‰Åj1夔0<²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¢ìõàÙþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýHêMébF‹†£~“ŸÛ+D–02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýŠÏ¹ºkK +¹"€¥æ®˜02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý ;yCmƒB ¯È$‡È žÆš02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýqE@ýH$‰tða¾Oœ02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý´Î;eÅO=’’+“éÙèž02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý&acujHäž/÷}äÁ 02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý7¨b ÊWOVŠÃä´ïG„¢02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýÐAâ4ÚM–yöuQ¤02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýûï]àÈ‚K-Ga‚ÈÖ3¦0²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýè ÇÆX—H&€ûÚêŸõ¨0:²œ û÷6žFzé®·'üvº¢ìõàÙþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýJÉ«µÃF­„ÿ`å'ïª0:²œ û÷6žFzé®·'üvº¢ìõàÙþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý±cEÖ(G3±Ÿ-Š€{Ù½¬0²œ û÷6žFzé®·'üvºû÷6žFzé®·'üvº¢ìõàÙþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý7 âCà`ë)½Ü0JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀåÌÞþð‹+aue_sendto¬ +ret_msgid487hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÕSÙÎYO­ DˆãƒôöÞ0JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀåÌÞþð‹+aue_sendto˜ +ret_msgid488hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÐÙ¨ŒAKq”jŽô†ƒOà0Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀåÌÞþð‹+aue_recvfromÚ ret_msgid485hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýW©G­¹©Kóâ0Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀåÌÞþð‹+aue_recvfrom˜ ret_msgid486hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý*X–½^K¬»LBý‡Ý[ìä0Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀåÌÞþð‹+aue_recvfrom¬ ret_msgid487hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý(°lÝP¿Jç3¢d´|ýæ0Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀåÌÞþð‹+aue_recvfrom˜ ret_msgid488hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý²X¯Ç".B‰Y"ŠÙ8tè0²œ û÷µtFzé®·'üvºû÷µtFzé®·'üvºŒå¥­áþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý4ô.éoi@ª£‹ ˜ßuþšê0bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Œå¥­áþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý¨D'“9Ní£µnÎFÓEì0bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Œå¥­áþð‹+aue_writeBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýü’È€Fzé®·'üvº†ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±Œå¥­áþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý¢çè1JLÕœw¿¹!Nªî0$ªœ ù‹°âFzé®·'üvºü’È€Fzé®·'üvºŒå¥­áþð‹+aue_fork +arg_pid1347hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1347ppid1282execbash20ÜS7[AIF¬•pd± (ýÝôßH3‰¸8g åð0²œ ü’È€Fzé®·'üvº¥µîgµÑUµg¨eµÑc'Œå¥­áþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +elp„zQ-S‘z`ôƒ-å20 +ÜS7[AIF¬•pd± (ýßTÈ&€Ká€dœL”ïQ|ò0²œ ü’È€Fzé®·'üvºelp„zQ-S‘z`ôƒ-åˆ/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_string'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Œå¥­áþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine2./copy_static_buf_string ppid1337execbash20ÜS7[AIF¬•pd± (ýýŽ½J¾ÿO®ˆŸ"ÃÂëzCô0<²œ ü’È€Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confŒå¥­áþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýÎNdHH´£ôl™Gýö0@²œ ü’È€Fzé®·'üvº‰oý©äÇU¤©A)Eǹ Œå¥­áþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýì4>ª½Jƒ«óùü©£;ø0²œ ü’È€Fzé®·'üvº‰oý©äÇU¤©A)Eǹ Œå¥­áþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýCÓ‘½HM­§úå€9&…ú0<²œ ü’È€Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsŒå¥­áþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý¶ìÖ¦LN¸%Áø§Ê‹ü0@²œ ü’È€Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âŒå¥­áþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýÑ#FÂð.ëB ÚX¿D„12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý~gçk}Hà¼ï¾; Z¨»†12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýr–q2@§ž7>/W…qÓˆ12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýzûÅÝ”L†²´ô¡©QNŠ12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýÞNKdK耬Wƒ¿ºsøŒ12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýUêû¦E[I&—öQ ÐÿŽ12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ”ÀúiW»«RNI¦‚CåÁ¶ÝÑ12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýE.$ôhÔIÐ’ºjðõ +³ß’12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýÅN ?Ë:AœËœLÃs”1²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýÔh|™oòO„´m{ME–1:²œ ü’È€Fzé®·'üvºŒå¥­áþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý°è¦H¡‹Æœž0¨®>˜1:²œ ü’È€Fzé®·'üvºŒå¥­áþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý͆Â\ñD½”E§qµ…Óš1b²œ ü’È€Fzé®·'üvºí( ö~R¶ ~{‚~¯Œå¥­áþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýÜ HNŽÉOå¸k°ÚÓ„u»œ1²œ ü’È€Fzé®·'üvºü’È€Fzé®·'üvºŒå¥­áþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý•¬\m]I¡ÿ% @¯‹€ž1@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Œå¥­áþð‹+aue_readæhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýó‡~ÆËK_· :[¾2m7 10ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Œå¥­áþð‹+aue_lseekˆ +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýü“,±Fzé®·'üvºˆù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±Œå¥­áþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý).¼GˆM ®§<¿ØM\Ý¢1$ªœ ù‹°âFzé®·'üvºü“,±Fzé®·'üvºŒå¥­áþð‹+aue_fork +arg_pid1348hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1348ppid1282execbash20ÜS7[AIF¬•pd± (ýV¿˜E‘µlƒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýý,äÈFzé®·'üvºŠù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±æðâðèþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý6!¤“kUNݬðRΨ›U¸1$ªœ ù‹°âFzé®·'üvºý,äÈFzé®·'üvºæðâðèþð‹+aue_fork +arg_pid1349hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1349ppid1282execbash20ÜS7[AIF¬•pd± (ýr‚X†•„Jó¼/5³‡êS¶º1²œ ý,äÈFzé®·'üvº¥µîgµÑUµg¨eµÑc'æðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +¤ üx¡\¡ô׬½i20 +ÜS7[AIF¬•pd± (ýñVF$JFj’¤®Wd`³'¼1²œ ý,äÈFzé®·'üvº¤ üx¡\¡ô׬½i„/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_heap_buf'ìAzX™¦}˜¹(/libexec/ld-elf.so.1æðâðèþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine../copy_static_heap_buf ppid1337execbash20ÜS7[AIF¬•pd± (ý)ŠäMîCŒ½1Hèku›Ý¾1<²œ ý,äÈFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confæðâðèþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý |D]}&K¿·‚5óîò¦À1@²œ ý,äÈFzé®·'üvº‰oý©äÇU¤©A)Eǹ æðâðèþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýn¾å?L"”~û^ÄøK­Â1²œ ý,äÈFzé®·'üvº‰oý©äÇU¤©A)Eǹ æðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýì] ºÜ…K½½*"{}"OÄ1<²œ ý,äÈFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsæðâðèþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý©:Ë3žPG°ÿ‡)?Æ1@²œ ý,äÈFzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýFH;öû›Kz‰˜Ç¯{szÈ1@²œ ý,äÈFzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý¯Cµ–›[Jʲ-µ&õ¿Ê1²œ ý,äÈFzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýÓ…ä‹J“‡î"PÌ1<²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7æðâðèþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýØoÐaC&A˜dG®¬voþÎ12²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýj}‡ +,Cæ‡õã9aÐ12²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýo¥d½>ùDê¾ k^‹‘Ò12²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý¡…ˆGG~Ô¥ÃA ÙÔ12²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý*!ÏýGÀ£ôáOºüÖ12²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýŽ9“»Ç¡D2Ab­dêØ12²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýÿôêš¡¦F‰·îäƒÚ12²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý"xƒ:I³Gu#Ë)ªÖ!Ü12²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýÕõ°ô.WEc®W$1Î<îÁÞ1²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý´M"-KK¡úâòå;¶)à1:²œ ý,äÈFzé®·'üvºæðâðèþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýz\¦t"LSŸâäªí§â1:²œ ý,äÈFzé®·'üvºæðâðèþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýxfò”"KB©Ž¤Àˆ´³ä1²œ ý,äÈFzé®·'üvºý,äÈFzé®·'üvºæðâðèþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýt=Kþú$Fˆ j“/5T:æ1@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'æðâðèþð‹+aue_read°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýB±âÍÂE=¬çñ‡®& qè10ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'æðâðèþð‹+aue_lseek® +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýý-:?Fzé®·'üvºŒù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±æðâðèþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýØÿ%muŸA“4B9—ê1$ªœ ù‹°âFzé®·'üvºý-:?Fzé®·'üvºæðâðèþð‹+aue_fork +arg_pid1350hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1350ppid1282execbash20ÜS7[AIF¬•pd± (ýÛ*.TMÄ­‘ò%Ål¿Ïì1²œ ý-:?Fzé®·'üvº¥µîgµÑUµg¨eµÑc'æðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÝ&yo®-G—4Û;î1²œ ý-:?Fzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1æðâðèþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ý”ú•Õ‹5G·­ŽÉÞÞð1<²œ ý-:?Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confæðâðèþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý\;uØáA{œÎÉ3 +ÿ cò1@²œ ý-:?Fzé®·'üvº‰oý©äÇU¤©A)Eǹ æðâðèþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÉ¡0Eü½4!XŒ¨´ô1²œ ý-:?Fzé®·'üvº‰oý©äÇU¤©A)Eǹ æðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýª}Ë¡ãK€¼VS@àö1<²œ ý-:?Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsæðâðèþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýYÖ +S§ÙAÆŸ·hÍA¬ø1@²œ ý-:?Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý=Ð*”vAá” _¶äùú1@²œ ý-:?Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý ƒøÝ£G²¡¶yp=Š.ü1²œ ý-:?Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¹zs:ÙMÃýœÓFW¡”þ1<²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7æðâðèþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¾™âu­CXšFØw£"É€22²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýì-f0ÑÊKU¥] n­ålÙ‚22²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý‡iN!ü­K«Âøjš°Y„22²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýŽ‰ÁXLȱŒÝá¸c†22²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý#æY ý^@Ó A÷’vp ²ˆ22²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý7¾ùÅÐvLï¬cVY•ý'Š22²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÿÖå «CQyf‹Z¦rŒ20‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÐÖ°ìþð‹+aue_lseek¾¥&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý HàºïK—ª.îD¢7UŽ2²œ ý-:?Fzé®·'üvºý-:?Fzé®·'üvºÀù·½ðþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýQYž°G +œg,G Éö2bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Àù·½ðþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýÙÊB5³qJŦ“¹ a’Ø’2bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Àù·½ðþð‹+aue_write.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýýȆrFzé®·'üvºŽù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±Àù·½ðþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÄ":%eºC]—þ¿X?»”2$ªœ ù‹°âFzé®·'üvºýȆrFzé®·'üvºÀù·½ðþð‹+aue_fork +arg_pid1351hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1351ppid1282execbash20ÜS7[AIF¬•pd± (ý•m§-@L `Ù0»É–2²œ ýȆrFzé®·'üvº¥µîgµÑUµg¨eµÑc'Àù·½ðþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +Êu÷qÔS”qð,Ó—¾20 +ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ”®üÇHµÉ@Lš–á+-áQ_˜2²œ ýȆrFzé®·'üvºÊu÷qÔS”qð,Ó—¾t/usr/home/user/ripe-prov-tests-master/Linux/./fork_process'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Àù·½ðþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./fork_process ppid1337execbash20ÜS7[AIF¬•pd± (ýý/ƒ¢Edr?ߎâDÀš2<²œ ýȆrFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÀù·½ðþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execfork_process20ÜS7[AIF¬•pd± (ý\‰brKÊ¡”`"¼Úœ2@²œ ýȆrFzé®·'üvº‰oý©äÇU¤©A)Eǹ Àù·½ðþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ý\núŠ%BüZ2W:$už2²œ ýȆrFzé®·'üvº‰oý©äÇU¤©A)Eǹ Àù·½ðþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execfork_process20ÜS7[AIF¬•pd± (ýɯ€‚@’ºNãàÁE 2<²œ ýȆrFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÀù·½ðþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execfork_process20ÜS7[AIF¬•pd± (ý¦J ŸË½@¹æt\ƒôs¢2@²œ ýȆrFzé®·'üvºXꎩð®…\®ð@JÌ…¼âÀù·½ðþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýS}³K +MϢ܅öªóæ’¤2@²œ ýȆrFzé®·'üvºXꎩð®…\®ð@JÌ…¼âÀù·½ðþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ý° ªüœNï´3!ã1óŸ¦2²œ ýȆrFzé®·'üvºXꎩð®…\®ð@JÌ…¼âÀù·½ðþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execfork_process20ÜS7[AIF¬•pd± (ýylAiˆtóLî<,Ψ2<²œ ýȆrFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Àù·½ðþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execfork_process20ÜS7[AIF¬•pd± (ý—'Å#>ŽA¹«X)MÍsת22²œ ýȆrFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýJ•J•pCZÒîYDÄÁ¬22²œ ýȆrFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýÅnÿ¼AMÅ´&|ðçÖ~®22²œ ýȆrFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýSXàŒ,H¨›hî™’ |°22²œ ýȆrFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýÆÊù-EARºà;°½ØG¶»xŸhÉÌ0Ô2<²œ ýÉAäFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÀù·½ðþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÏCy°®BAª5:Çd>®Ö2@²œ ýÉAäFzé®·'üvº‰oý©äÇU¤©A)Eǹ Àù·½ðþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý™o¹ M_“\@uªØ2²œ ýÉAäFzé®·'üvº‰oý©äÇU¤©A)Eǹ Àù·½ðþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý•1\ôZFž„zß 9f©Ú2<²œ ýÉAäFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÀù·½ðþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¬SXƒ$A¼—"êß4Ðü­Ü2@²œ ýÉAäFzé®·'üvºXꎩð®…\®ð@JÌ…¼âÀù·½ðþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýRB$„'éEæŽ9=?°ò¶êÞ2@²œ ýÉAäFzé®·'üvºXꎩð®…\®ð@JÌ…¼âÀù·½ðþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýé¡\Kµ[GÜœ&I&…ZQ–à2²œ ýÉAäFzé®·'üvºXꎩð®…\®ð@JÌ…¼âÀù·½ðþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý…<ÙågrO@»\²6 +¸Dâ2<²œ ýÉAäFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Àù·½ðþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý«N[ÈH– >{Ä ä22²œ ýÉAäFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýFô]ÜpN¶°ÉÂîŸhÊæ22²œ ýÉAäFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýþª¢žLK”™a†¯-§¼™è20‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U‚âÄýóþð‹+aue_lseekˆõ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ‰0JJk™0jO K’pê2@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÆ›Ýùôþð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÙ YˆÉJì¯ÅúD<:Ê_ì2JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆ›Ýùôþð‹+aue_sendtoÚ +ret_msgid490hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýø§ëÆ]¤NȃD×ÇÑ …dî2JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆ›Ýùôþð‹+aue_sendto˜ +ret_msgid491hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý–È¢ º™L±ž2–šØð2JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆ›Ýùôþð‹+aue_sendto¬ +ret_msgid492hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý>óâJ÷ëJà”v¹MÑsò2JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆ›Ýùôþð‹+aue_sendto˜ +ret_msgid493hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý!û­º½WA}¬G Û,èhô2Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆ›Ýùôþð‹+aue_recvfromÚ ret_msgid490hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýg«rÐ%lIU–á%‡¶”ö2Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆ›Ýùôþð‹+aue_recvfrom˜ ret_msgid491hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýò)ª™£COÔ°³†ml¿ ø2Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆ›Ýùôþð‹+aue_recvfrom¬ ret_msgid492hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýà—KëUŸL” Žÿ×)6üú2Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆ›Ýùôþð‹+aue_recvfrom˜ ret_msgid493hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýRÖAåLvjh¯1×=Xü2²œ ýÉAäFzé®·'üvºýÉAäFzé®·'üvºÎ¤½Šøþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý(D=÷‰fOT™ª¬<ñó2Ìþ2bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýNY¨/ˆO?¬Oð_öbQÛ€3bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write$hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýþdkiFzé®·'üvº”ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±Τ½Šøþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýxמÉC®Ž>0¢Ô¯ý‚3$ªœ ù‹°âFzé®·'üvºþdkiFzé®·'üvºÎ¤½Šøþð‹+aue_fork +arg_pid1354hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1354ppid1282execbash20ÜS7[AIF¬•pd± (ý˜þæ'ìK5 ®Á£.yý„3²œ þdkiFzé®·'üvº¥µîgµÑUµg¨eµÑc'Τ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +.iØÓä)P¤Ó‚›°)‡‰20 +ÜS7[AIF¬•pd± (ýÛ¼= @ö”­1aÞz–†3²œ þdkiFzé®·'üvº.iØÓä)P¤Ó‚›°)‡‰j/usr/home/user/ripe-prov-tests-master/Linux/./listdir'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Τ½Šøþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./listdir ppid1337execbash20ÜS7[AIF¬•pd± (ýðH)ݺÎDd»ó§"2;vÔˆ3<²œ þdkiFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confΤ½Šøþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execlistdir20ÜS7[AIF¬•pd± (ý"ÉY%C%M™Š§¦ïíŠ3@²œ þdkiFzé®·'üvº‰oý©äÇU¤©A)Eǹ Τ½Šøþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ýgBûÓ@v·— ñUyËŒ3²œ þdkiFzé®·'üvº‰oý©äÇU¤©A)Eǹ Τ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execlistdir20ÜS7[AIF¬•pd± (ým¬Œ1H·€h¼±< 9&Ž3<²œ þdkiFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsΤ½Šøþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execlistdir20ÜS7[AIF¬•pd± (ýð­vù}Eõ°^¾ãp3@²œ þdkiFzé®·'üvºXꎩð®…\®ð@JÌ…¼âΤ½Šøþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ý ^^KLÅ ³gÌ2*¥Â’3@²œ þdkiFzé®·'üvºXꎩð®…\®ð@JÌ…¼âΤ½Šøþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ýèÓ6îG£`éH+°ÝÞ”3²œ þdkiFzé®·'üvºXꎩð®…\®ð@JÌ…¼âΤ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execlistdir20ÜS7[AIF¬•pd± (ý°ÆÑs1kJÞ˜àå $Kϼ–3<²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Τ½Šøþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execlistdir20ÜS7[AIF¬•pd± (ý£F[Xo@o``Íyå˜32²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ýh¨øqC“íȶÒ]J(š32²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ý€©À|J¬‚;_ƒ¥7óþœ32²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ý¢wg¨µýLø’T¯ Kþ³ž32²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ý3}…c7Fˆ=&9²°% 32²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ý]V§9é+E†²íD询32²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ¢‚úÈSrÚcšEô´Vè>fl͇¤32²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ýö,ó­àœHt¦g=“pz¦32²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ýïß„Þ°­F<­ºŒG &¨3²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execlistdir20ÜS7[AIF¬•pd± (ýÿùÒOEJùº [CB¾Qת3:²œ þdkiFzé®·'üvºÎ¤½Šøþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execlistdir20ÜS7[AIF¬•pd± (ýåõ‘—H«:•ìÛí^B¬3:²œ þdkiFzé®·'üvºÎ¤½Šøþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execlistdir20ÜS7[AIF¬•pd± (ý—OÄ{àC’–…’|8oi®3<²œ þdkiFzé®·'üvºÞç=š8§T¸šm9D§bZ/usr/home/user/ripe-prov-tests-master/Linux/.Τ½Šøþð‹+aue_open_rwtc +flagsmodeëP +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337execlistdir20ÜS7[AIF¬•pd± (ýc§³9²F ¾°Ô0öO°3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýD© IÞ¸’Ø"ó64Z²3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý;y³UÚ,L“ëúøSÞE…´3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý±£ã¥†üBY§ŽUuðþ¥¶3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý­Ÿ ðð¥BΤ¶¬ÝöäÀ†¸3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýçX°ÚnE·˜±’8¢t‹º3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýWL<TÛD¦÷ËŸ­¾¼3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýöx¿™àÀFyŸ/ë)ê]7‰¾3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý@‘*dO»C̱Ï=æE]À3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýeÌ‹÷îH¶¤<ûIL°ô€Â3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýô(VAÙ²ù$W£‘½ÜÄ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýñÁ„w|ìCd‰®\vß®Æ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write0hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý·ÏÂÑì G§²pè ßEÖÈ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýy»¶@»”à­z\OÝÙÊ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýü)„‰ýIv¼ SAÜ»JÌ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý‰*æl½HCXª¨"×6wœUÎ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý¶iaz½De§i†¾ +½%Ð3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý†hñ%mH;³%Ï[ÕA³Ò3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý™ÃžË|bAW£í±¢Æn¿$Ô3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýîñ^ÊŸB©¿Êð.žXz‰Ö3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýŠH{IA”®%Ð1‹ +Ø3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý›ýa“UOO‡ã_Œ›÷‹Ú3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write0hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýÍUGªK_Œ “àÒ°ã™Ü3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý–+ràŽAŸªVZëBÑÞ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýºM Ä«µMh År/]öîà3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýD“ÅhU3FE”dï° T\Oâ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýæTû¢ECŠ7|8 ¬ä3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýèDxÑž$Aø‚€Ö œ!Zæ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý¹Í'LQ­F€¾”ýsxtcè3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýËJ×¢0E±¹£sÏÆ~ê3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýÈXk ôKWˆ±V÷«äiì3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýy^“¡ô€Lz–ÙjˆðÈÚî3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý:]̪¡F±‡ºÃ²faËÐð3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý¼[©vë~Næz¾Ö!{bKò3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýw‚±6­xEp‘VÂP„OŽ¶ô3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýP+pÙé@¾™Ûuqö3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýŒAhôˆDä0Þ øîø3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý˜t€¿9ÐN‘_ŒºÂÞôú3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý®¨C±ŸbL—¶Oê`tü3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý†Jh—lO§ƒ+Z;áRþ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýÄñ ‘Fó”¥"~úo€4b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý÷Ÿ õ·@·šFÇooª®‚4b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýͦïCͲ‹’¤2•J„4²œ þdkiFzé®·'üvºÞç=š8§T¸šm9D§bΤ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execlistdir20ÜS7[AIF¬•pd± (ýr«-WÛrMë ‚Xâ#—Ç †4²œ þdkiFzé®·'üvºþdkiFzé®·'üvºÎ¤½Šøþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execlistdir20ÜS7[AIF¬•pd± (ýO^*¡¡Eš³–Ÿ0?Ž¡ˆ4@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Τ½Šøþð‹+aue_readîhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý9Ó®åe@EŸÂ¬'<îZΊ40ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Τ½Šøþð‹+aue_lseekô +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýþeLÊFzé®·'üvº–ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±Τ½Šøþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÙ'hÄF ¿Sx+#·èŒ4$ªœ ù‹°âFzé®·'üvºþeLÊFzé®·'üvºÎ¤½Šøþð‹+aue_fork +arg_pid1355hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1355ppid1282execbash20ÜS7[AIF¬•pd± (ý ËÅa³Kø§™©»Ýè3Ž4²œ þeLÊFzé®·'üvº¥µîgµÑUµg¨eµÑc'Τ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýd nèoF­ 2—;ƒR4²œ þeLÊFzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Τ½Šøþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýÒ¢ï@*K#€Æ®ýîû’4<²œ þeLÊFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confΤ½Šøþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýxÇ[WBZ¿ø:´×â ”4@²œ þeLÊFzé®·'üvº‰oý©äÇU¤©A)Eǹ Τ½Šøþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýAr>`C_¸€å‚–4²œ þeLÊFzé®·'üvº‰oý©äÇU¤©A)Eǹ Τ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýþÊQžª¾@¬«˜OM:²˜4<²œ þeLÊFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsΤ½Šøþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÿ´"§ê¢4²œ þeLÊFzé®·'üvºþeLÊFzé®·'üvººÙ†Ñÿþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýËydÒV¶B@„œL@§Tu¨¤4bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ºÙ†Ñÿþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýlOùá¥cA3Ÿœä!é§F%¦4bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ºÙ†Ñÿþð‹+aue_write2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýþÿ‹Fzé®·'üvº˜ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±ºÙ†Ñÿþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý;/"uµE{¸®Åßñ,¨4$ªœ ù‹°âFzé®·'üvºþÿ‹Fzé®·'üvººÙ†Ñÿþð‹+aue_fork +arg_pid1356hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1356ppid1282execbash20ÜS7[AIF¬•pd± (ýø*¨e¨'Iƒç9-¼ª4²œ þÿ‹Fzé®·'üvº¥µîgµÑUµg¨eµÑc'ºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +Ëë F>X†·CX>OY20 +ÜS7[AIF¬•pd± (ý½Â§,ŽLX»ÂRlÂ;Pú¬4²œ þÿ‹Fzé®·'üvºËë F>X†·CX>OYx/usr/home/user/ripe-prov-tests-master/Linux/./make_directory'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ºÙ†Ñÿþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"./make_directory ppid1337execbash20ÜS7[AIF¬•pd± (ý™à¶ÓCÍ’“)ˆ”’Ó®4<²œ þÿ‹Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confºÙ†Ñÿþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý]KÌãp¼OÝ®E Õ›±8°4@²œ þÿ‹Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ºÙ†Ñÿþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýC/±¦A|¢êñ©·u´²4²œ þÿ‹Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý†wÍÓÀH`¼Ú¢¼ÎÔ²´4<²œ þÿ‹Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsºÙ†Ñÿþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýò–±#DP¦ôB’²ìôn¶4@²œ þÿ‹Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýª³kû’Iµ”ÀRÊB:¸4@²œ þÿ‹Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý¥^Kl‹O¨èk÷öQ~çº4²œ þÿ‹Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýðÖ±vhJ³ƒ@Ìß3u¼4<²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ºÙ†Ñÿþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýÕzýGî‡W +Þ]õ ¾42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ’Öúåp¾ÓÆC¨‰SnHR+lÀ42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýÛ âÇ’Cõ‹¦/âgÈøÂ42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý4%kÔxaJÆ›¿/ ’טÄ42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý*²æFпcd£×@bÆ42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý¤”×ñçMÕ‚PÔ3CZ0ýÈ42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýGúͲÁIh‡ÞçÉÉ8*aÊ42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýZ‹ãGXeEÉ¡+,Ò¡ÙíÌ42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýAô%;Ž+Få´¶—õí¸¦~Ö4²œ þÿ‹Fzé®·'üvºþÿ‹Fzé®·'üvººÙ†Ñÿþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýa§D"clN™‰^êÂ`wËØ4@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'ºÙ†Ñÿþð‹+aue_readÄhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýs÷´Â»@µ†Ÿ +aÖÕzÚ40ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'ºÙ†Ñÿþð‹+aue_lseek® hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýþÿŒ9Fzé®·'üvºšù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±ºÙ†Ñÿþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÒ‹[ªúLȤš®#Ë™Å2Ü4$ªœ ù‹°âFzé®·'üvºþÿŒ9Fzé®·'üvººÙ†Ñÿþð‹+aue_fork +arg_pid1357hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1357ppid1282execbash20ÜS7[AIF¬•pd± (ýÞ™ÆàRN®: +ij2#Þ4²œ þÿŒ9Fzé®·'üvº¥µîgµÑUµg¨eµÑc'ºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¨V [íÆIï¥Nù[räà4²œ þÿŒ9Fzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ºÙ†Ñÿþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ý½ØÔ Jÿ›ÉH/|aâ4<²œ þÿŒ9Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confºÙ†Ñÿþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý8"ÇöxM’³õ±žµ§Öä4@²œ þÿŒ9Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ºÙ†Ñÿþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý*‚\w=KNèÁÇa«yæ4²œ þÿŒ9Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý«øÃœøNž©»A¨wúÝè4<²œ þÿŒ9Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsºÙ†Ñÿþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýßÿl ÒAÂéìõ÷}æ€ê4@²œ þÿŒ9Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý\/ÞûmYEB¤Äß–&W@°ì4@²œ þÿŒ9Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÂ*¿=à‚HøšE‰Ð[;Vî4²œ þÿŒ9Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýZ¹Ê~qK|Šób€! rWð4<²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ºÙ†Ñÿþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýsC­nÙCx‘ú ƒdò42²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýö@+ó‚+IŽ GW¯\x:ô42²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý£Ï_$@ +Lü«Idú‚4-ö42²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýä'sòfGt½þsý!&êø42²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýöÅ÷:Š×DY‹/škobߪú42²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý/ècy”,NN™ÜHÕw‘Yü40‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´êß—ƒÿð‹+aue_lseekº¾(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæsžU¿(Kz‘ªÑ௳þ4²œ þÿŒ9Fzé®·'üvºþÿŒ9Fzé®·'üvºâ曚‡ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÌH˜2ø²Ieµþ¾Šîº"€5bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯â曚‡ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýd‚¿É‡úK |Š"…;‚5bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯â曚‡ÿð‹+aue_writeBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýÿ™ûFzé®·'üvºœù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±â曚‡ÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý†«‘eŸ?@©ñ9Å£á,ä„5$ªœ ù‹°âFzé®·'üvºÿ™ûFzé®·'üvºâ曚‡ÿð‹+aue_fork +arg_pid1358hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1358ppid1282execbash20ÜS7[AIF¬•pd± (ýsº×XÏÙDæ€ÄÁž¯n†5²œ ÿ™ûFzé®·'üvº¥µîgµÑUµg¨eµÑc'â曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +gAÅŸŒãŽP£ŒðÑ€Ž¡Å20 +ÜS7[AIF¬•pd± (ýg}µ—ýÎN“˜÷ðØSë1 ˆ5²œ ÿ™ûFzé®·'üvºgAÅŸŒãŽP£ŒðÑ€Ž¡Åˆ/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_multi_write'ìAzX™¦}˜¹(/libexec/ld-elf.so.1â曚‡ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine2./multi_read_multi_write ppid1337execbash20ÜS7[AIF¬•pd± (ý±š.!@dJ™š³‰?Ù­Š5<²œ ÿ™ûFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confâ曚‡ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýÖ‰d‰7K£’?ŸÈ¶¢Œ5@²œ ÿ™ûFzé®·'üvº‰oý©äÇU¤©A)Eǹ â曚‡ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýù·ùG‡Ð6_çcÜŽ5²œ ÿ™ûFzé®·'üvº‰oý©äÇU¤©A)Eǹ â曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý÷;ßhC1²¥ó×Ævó)5<²œ ÿ™ûFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsâ曚‡ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý†¿ÆñÌüO$‘Ûl¦`Г’5@²œ ÿ™ûFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýÂO†G;Ls»ÛÞ¼Ylj"”5@²œ ÿ™ûFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý¯gÒ=;C´™üg˜’ëÃÚ–5²œ ÿ™ûFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýÏcˆòKÿ°Õ2÷àXyœ˜5<²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7â曚‡ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý6Ý8QsÈM[šÆÎÑpOš52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý'?²üLL&¹OÊ£™âÒœ52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýª&SUÕk@ì™Õ/%‹jò(ž52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý¿*dD­eAد?è¯| 52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýˆ÷^O8oNil`ÖÞe&D¢52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý½D'O_³ûxÉR›!?¤52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý†A—WpSB™º<ÔúâGþ¦52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýE½`IºEã‡0³¾Bï@j¨52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýGééKÙØH÷¬ßâ Çs‚ª5²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýÚèц3˜C–àKÿ˜§¬5:²œ ÿ™ûFzé®·'üvºâ曚‡ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýÒ ŸXëA%—º\ÅUÖ®5:²œ ÿ™ûFzé®·'üvºâ曚‡ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý +f*qÛ^žqaþ>Û“Á20 +ÜS7[AIF¬•pd± (ý +qk×µÿGe¼ž­h,n+R°5<²œ ÿ™ûFzé®·'üvºf*qÛ^žqaþ>Û“Á€/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.câ曚‡ÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý +1ž‰+_\‘+öý<_îæ20 +ÜS7[AIF¬•pd± (ýÓïzµLê…Õ¾ ÓŠj²5<²œ ÿ™ûFzé®·'üvº1ž‰+_\‘+öý<_îæ˜/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.câ曚‡ÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý +–yÓžÇJ8UŠÇ>;å8¦&20 +ÜS7[AIF¬•pd± (ý<Ðì­ž$A-€áª"´5<²œ ÿ™ûFzé®·'üvº–yÓžÇJ8UŠÇ>;å8¦&x/usr/home/user/ripe-prov-tests-master/Linux/output_file1.tmpâ曚‡ÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý +•Þ©R‹8¦Y¸‹5RI¦Q20 +ÜS7[AIF¬•pd± (ý¢°¼;t™NʺÇÉÒºb7ʶ5<²œ ÿ™ûFzé®·'üvº•Þ©R‹8¦Y¸‹5RI¦Qx/usr/home/user/ripe-prov-tests-master/Linux/output_file2.tmpâ曚‡ÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýèüÙ^®œ@²ª1Z¢ÿGG¸5@²œ ÿ™ûFzé®·'üvºf*qÛ^žqaþ>Û“Áâ曚‡ÿð‹+aue_read¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýfB-—!r@™Vü9K”©º5@²œ ÿ™ûFzé®·'üvº1ž‰+_\‘+öý<_îæâ曚‡ÿð‹+aue_readühostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý)NV"I«†á;ƒˆ®¼5²œ ÿ™ûFzé®·'üvºf*qÛ^žqaþ>Û“Áâ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý è•Î›gFa§·¬î¾o_ÿ¾5²œ ÿ™ûFzé®·'üvº1ž‰+_\‘+öý<_îæâ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý¨ã£9H4ËfXÄéƒGÀ5b²œ ÿ™ûFzé®·'üvº–yÓžÇJ8UŠÇ>;å8¦&â曚‡ÿð‹+aue_writeþhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ¢¨ü×(Úp¥7K¸³ :2†“PäÂ5²œ ÿ™ûFzé®·'üvº–yÓžÇJ8UŠÇ>;å8¦&â曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýHL½Ÿ¢ï@§€öl~@6YÄ5b²œ ÿ™ûFzé®·'üvº•Þ©R‹8¦Y¸‹5RI¦Qâ曚‡ÿð‹+aue_writeöhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýpÃÇcMk§þDøúøäÆ5²œ ÿ™ûFzé®·'üvº•Þ©R‹8¦Y¸‹5RI¦Qâ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýJ`Í”Ÿ²D^”qX ʟܦÈ5²œ ÿ™ûFzé®·'üvºÿ™ûFzé®·'üvºâ曚‡ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýb®6ÆyìEÛµÀtR>‚õƒÊ5@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'â曚‡ÿð‹+aue_readŠhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýš –2FúŽ¡´«ZI{Ì50ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'â曚‡ÿð‹+aue_lseekê hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýÿš¡ŽFzé®·'üvºžù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±â曚‡ÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý÷ƒ[þ”DfªŸc°hó‚/Î5$ªœ ù‹°âFzé®·'üvºÿš¡ŽFzé®·'üvºâ曚‡ÿð‹+aue_fork +arg_pid1359hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1359ppid1282execbash20ÜS7[AIF¬•pd± (ýÐËé—JݹêÝ Ñ£Ð5²œ ÿš¡ŽFzé®·'üvº¥µîgµÑUµg¨eµÑc'â曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÇØ.ùä]Kɸ ¸$\ÌžÒ5²œ ÿš¡ŽFzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1â曚‡ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýÐM+`Ø©J·³Àó4 ò Ô5<²œ ÿš¡ŽFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confâ曚‡ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýØ%Žcý¨K»´Ú3ÅîîBbÖ5@²œ ÿš¡ŽFzé®·'üvº‰oý©äÇU¤©A)Eǹ â曚‡ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýºâ½à7Kb¯†ŒØ5²œ ÿš¡ŽFzé®·'üvº‰oý©äÇU¤©A)Eǹ â曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý×ãt$‹Já°hÁ¹êæÕ¶Ú5<²œ ÿš¡ŽFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsâ曚‡ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý[²GN"?2Ð6¹Ü5@²œ ÿš¡ŽFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý ‰@Í ]IÔ’b¹s¼Þ5@²œ ÿš¡ŽFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý@*C^=tL2BüD^zà5²œ ÿš¡ŽFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýOå:2+EYƒvÒù”]Â,â5<²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7â曚‡ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÏšp¼MO¡§ž®JòSä52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýͪålßLœ)I˜{7qàæ52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¡‹¡repE,½Xü×ØV!÷è52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýã†ÒC‚±‰óÿ=ÀÑøê52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÒy—uCA¸Lzm†Fg.ì52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýgéq“·D#¢ÕîH!™…’î52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýäŸY—xK×ñÓ¬0ƒð52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý”¼®^êvB…¡º¾LÐLï‹ò52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý§Ø{ðΈHƒžLÿØ5õ-ô5²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýà$c’N ¯WPø_ÙZpö5:²œ ÿš¡ŽFzé®·'üvºâ曚‡ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýâRØÙ@Ó‚< õˆù8ø5:²œ ÿš¡ŽFzé®·'üvºâ曚‡ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÃƽ™VGö¶¤`£ð3Òú50‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_lseekº¾(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýægËN¼ÖFÎŽ jƒ#ºn\þ5 ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+20ÜS7[AIF¬•pd± (ýñ|æöò`GˆUÞ¾Z bü5@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœ·ó£Eœ·ë-çD +ø‚6 ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+20ÜS7[AIF¬•pd± (ý¯x +í)E²¼æ“<çu.'€6@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðš­‹’OÅ™ûØTd|†6 ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+20ÜS7[AIF¬•pd± (ýo€{}jAJ‡ÝeD|dVs„6@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýIzÀ£J§˜”ÆGK㾊6 ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+20ÜS7[AIF¬•pd± (ýXÚãRH¸@8„ÂR‚.¸éˆ6@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡aG/…§JàÕ6:‚œ Ê +ÙKFzé®›'üvº†ý©ˆÿð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅâm‚©NIì‡ïMjö˜Q]Ž6@Úœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V †ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýY¾A°¡Gm€Væ…Ç×ëØ6@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶.0›Dô—†ùAÑ¿‚‹’6@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_pread EhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâ=àõ [EŽŒ¤FyšQÏ…”6b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº†ý©ˆÿð‹+aue_writeŠFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚ùÔê%ùJgƒÚ¶Õ€X°Q–6bÚœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á†ý©ˆÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|O:r:H⸬hí°Oõj˜6@Úœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V †ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…<™½G%·Žê|C++tš6@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýè1á ®¤I7€b¹ªæ‹˜œ6@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadò5hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýì*uRFg¢ˆ¹]ç-šÆž6b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº†ý©ˆÿð‹+aue_writeÜ6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9H­œ¯Hª¡¦4áVi 6bÚœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á†ý©ˆÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýܦàÞsH´¨>åÒÔIñ¢6@Úœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V †ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑœãtæK½Ži[J„IQX¤6@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýDEžå¥¤Jº/ÈõÓ 2¦6@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadˆNhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}á\üŒ@üt„5˜c=t¨6b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº†ý©ˆÿð‹+aue_writeòNhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý Eå|—Æ6JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®ýØ«‹ÿð‹+aue_sendto˜ +ret_msgid499hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÖ¨8[‰K²‡ã.–ŠÏÈ6Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ýØ«‹ÿð‹+aue_recvfromÚ ret_msgid496hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýæÇ8¸”K7²OBšüe7Ê6Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ýØ«‹ÿð‹+aue_recvfrom˜ ret_msgid497hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýì mÝžO°™'‹ QÌ6Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ýØ«‹ÿð‹+aue_recvfrom¬ ret_msgid498hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýë’ R®k@º¿¢Quî¾÷Î6Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ýØ«‹ÿð‹+aue_recvfrom˜ ret_msgid499hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÿt+ÑD9¢Þ˜ó1ØÐ6²œ ÿš¡ŽFzé®·'üvºÿš¡ŽFzé®·'üvº¸ÕÐæŽÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýùZ»Š:@›™„i”hñ‘Ò6bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¸ÕÐæŽÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý·Iå£HÖƒj‰Œ| ¡Ô6bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¸ÕÐæŽÿð‹+aue_writeDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý5Ÿ’F{é®·'üvº ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±¸ÕÐæŽÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÉÀÚPJC©áëÛüSzÖ6$ªœ ù‹°âFzé®·'üvº5Ÿ’F{é®·'üvº¸ÕÐæŽÿð‹+aue_fork +arg_pid1360hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1360ppid1282execbash20ÜS7[AIF¬•pd± (ýü¶ã‹M¹Né²øƒ¨ËQØ6²œ 5Ÿ’F{é®·'üvº¥µîgµÑUµg¨eµÑc'¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +ظõa0øX°Óøø/å20 +ÜS7[AIF¬•pd± (ý­Ëß2¹ +M®—>·U€ ùÚ6²œ 5Ÿ’F{é®·'üvºظõa0øX°Óøø/åŠ/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_single_write'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¸ÕÐæŽÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine4./multi_read_single_write ppid1337execbash20ÜS7[AIF¬•pd± (ýž˜3^(#@^šUh‹§÷ÓŠÜ6<²œ 5Ÿ’F{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¸ÕÐæŽÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙÒüsøc_gªEP­Íɽ¾£ƒ½Þ6@²œ 5Ÿ’F{é®·'üvº‰oý©äÇU¤©A)Eǹ ¸ÕÐæŽÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýlæ}Ý|J5‘°{O³›èÄà6²œ 5Ÿ’F{é®·'üvº‰oý©äÇU¤©A)Eǹ ¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýÒ†¯ ”ÒHš¯ 'sé”/â6<²œ 5Ÿ’F{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¸ÕÐæŽÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýàáÞ"Ò¡Jݦ·=a’4ä6@²œ 5Ÿ’F{é®·'üvºXꎩð®…\®ð@JÌ…¼â¸ÕÐæŽÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýîž_­G¡§73|ÅÚ6æ6@²œ 5Ÿ’F{é®·'üvºXꎩð®…\®ð@JÌ…¼â¸ÕÐæŽÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýØÀ•hH‚ŽÚŸ¯è6²œ 5Ÿ’F{é®·'üvºXꎩð®…\®ð@JÌ…¼â¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý2–Òû¹FŠcHxK ‚ê6<²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¸ÕÐæŽÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýH²¯=HÈŒ¢Ýàý³]¿ì62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý¥þ ¶öN~– æ2N î62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýü4õ/°NN)¤°öúvHCð62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýYs YÉNGÅ p xÆAò¡ò62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý<;"úIJdžëìRÖÝô62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý” C F¿‰&]‰Yéö62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý¨š‚ÝãOª]«ßZ©wø62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýîw„zæCüŠè9´ÌjHXú62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýXâæÆA2µçÆU@‹ü6²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý"Š¸.ã@Í£k¤Ý›þ6:²œ 5Ÿ’F{é®·'üvº¸ÕÐæŽÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý²²¸5ÙM~‹-ÌýJ~€7:²œ 5Ÿ’F{é®·'üvº¸ÕÐæŽÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýIüù† sOb„$Ë5v²M‚7<²œ 5Ÿ’F{é®·'üvºf*qÛ^žqaþ>Û“Á€/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c¸ÕÐæŽÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýR3*ž¤¶IÒ­]“»ÕB¶õ„7<²œ 5Ÿ’F{é®·'üvº1ž‰+_\‘+öý<_îæ˜/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c¸ÕÐæŽÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý +“§UŽÞ*PªÞG $P20 +ÜS7[AIF¬•pd± (ýàÛÇ*³H¸±[7êþa–†7<²œ 5Ÿ’F{é®·'üvº“§UŽÞ*PªÞG $Pv/usr/home/user/ripe-prov-tests-master/Linux/merged_file.tmp¸ÕÐæŽÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý ¬rdœL@…84ó’Ÿ ˆ7@²œ 5Ÿ’F{é®·'üvºf*qÛ^žqaþ>Û“Á¸ÕÐæŽÿð‹+aue_read¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýþpD.IIöõÿˆÑ"0Š7@²œ 5Ÿ’F{é®·'üvº1ž‰+_\‘+öý<_îæ¸ÕÐæŽÿð‹+aue_readühostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýN‰W»m*Bø”È¿ïH Œ7²œ 5Ÿ’F{é®·'üvºf*qÛ^žqaþ>Û“Á¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý÷KLIµIG-—[-è"N8±Ž7²œ 5Ÿ’F{é®·'üvº1ž‰+_\‘+öý<_îæ¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý¶«6è`nExœ*Ã#`6…,7b²œ 5Ÿ’F{é®·'üvº“§UŽÞ*PªÞG $P¸ÕÐæŽÿð‹+aue_writeôhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýÍÅõO±CaêyWÀ'æ’7²œ 5Ÿ’F{é®·'üvº“§UŽÞ*PªÞG $P¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý™å߬+ÿAZ€6¥ÃkTÔ”7²œ 5Ÿ’F{é®·'üvº5Ÿ’F{é®·'üvº¸ÕÐæŽÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýM‹Ñ7+úHš}ݾO~–7@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¸ÕÐæŽÿð‹+aue_readÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý¹hÉÖ®No¬‘36;1 ˜70‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Ušøó¹’ÿð‹+aue_lseekú*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6ÊF{é®·'üvº¢°äÿ§®]vRS<„äB±hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÞ‚ÔÜ2½Má¥ÏÊ‚XXš7²œ 6ÊF{é®·'üvº6ÊF{é®·'üvºœ ¯–ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýŸKزKU«¬¢¬ÊÌDÞœ7bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯œ ¯–ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý,—ii•OR³Ò/ÖÒaÿ´ž7bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯œ ¯–ÿð‹+aue_write6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýа¥F{é®·'üvº¤ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±œ ¯–ÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý¼SÁ]P_Bn¢"}°’ô 7$ªœ ù‹°âFzé®·'üvºа¥F{é®·'üvºœ ¯–ÿð‹+aue_fork +arg_pid1362hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1362ppid1282execbash20ÜS7[AIF¬•pd± (ý9c„ŒæDN £´†1Ü°¦¢7²œ а¥F{é®·'üvº¥µîgµÑUµg¨eµÑc'œ ¯–ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +jþ»^A-Ò\­A` üÒB>20 +ÜS7[AIF¬•pd± (ýÊ êLMK“›ò=ቤ7²œ а¥F{é®·'üvºjþ»^A-Ò\­A` üÒB>|/usr/home/user/ripe-prov-tests-master/Linux/./remove_directory'ìAzX™¦}˜¹(/libexec/ld-elf.so.1œ ¯–ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine&./remove_directory ppid1337execbash20ÜS7[AIF¬•pd± (ýÞ†'•¢¶NB¿X\i#ÐGi¦7<²œ а¥F{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confœ ¯–ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ý®6@–ÌMƒ²û Lm^•¨7@²œ а¥F{é®·'üvº‰oý©äÇU¤©A)Eǹ œ ¯–ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ý“Üö; Os‡·ÄW÷6瑪7²œ а¥F{é®·'üvº‰oý©äÇU¤©A)Eǹ œ ¯–ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ýíz ¡UÿO«>]|(+D¬7<²œ а¥F{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsœ ¯–ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ý¯ÏíÔ°fH˲KÔy¼y¿®7@²œ а¥F{é®·'üvºXꎩð®…\®ð@JÌ…¼âœ ¯–ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ýVo8yëA¬¥ŒFÁÑ+æ°7@²œ а¥F{é®·'üvºXꎩð®…\®ð@JÌ…¼âœ ¯–ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ýnX2§Í£Eºù*÷'‚½+²7²œ а¥F{é®·'üvºXꎩð®…\®ð@JÌ…¼âœ ¯–ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ýÃñ»®‡ìC€±nUîпÝ´7<²œ а¥F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7œ ¯–ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ý}–!§Du¨\߉ñlº¶72²œ а¥F{é®·'üvºÞA`ì•øËQ¸•bxñË"œœ ¯–ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ýR7DÔeKÏŽ§B Ë[¸72²œ а¥F{é®·'üvºÞA`ì•øËQ¸•bxñË"œœ ¯–ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ý¬ÿº‹á¿Bµ®­xämyÃÿº72²œ а¥F{é®·'üvºÞA`ì•øËQ¸•bxñË"œœ ¯–ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ý²ó°Lˆ¸pî72²œ Ñ F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ ¸ª³–ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý?òž_ÿÔH¡Ýe¨õæ/¬ð72²œ Ñ F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ ¸ª³–ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýcÛpÌGѬ¥ˆt¡*ò72²œ Ñ F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ ¸ª³–ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÞlp—™­E§Ïµ]ñ)'ô70‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U€õ톚ÿð‹+aue_lseekôë*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáû_ h“@Rf4ܦ&ö7²œ Ñ F{é®·'üvºÑ F{é®·'üvº¶–Éöÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýdIAx@„ÄØ>Éø7bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¶–Éöÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý:Ž·´JCi´ÄX+`¹ú7bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¶–Éöÿð‹+aue_write,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýkbÂF{é®·'üvº¨ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±¶–Éöÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÛà’¥}¼J5Žé7Õ#Ÿ*ü7$ªœ ù‹°âFzé®·'üvºkbÂF{é®·'üvº¶–Éöÿð‹+aue_fork +arg_pid1364hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1364ppid1282execbash20ÜS7[AIF¬•pd± (ýOë0šdDL‹¸Ý“ +õ³þ7²œ kbÂF{é®·'üvº¥µîgµÑUµg¨eµÑc'¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¸²‘¯ÀBL·ºÊkLtf¸€8²œ kbÂF{é®·'üvº[Q…¾vVS¶¾4ÿCVaír/usr/home/user/ripe-prov-tests-master/Linux/./remove_file'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¶–Éöÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./remove_file ppid1337execbash20ÜS7[AIF¬•pd± (ýlÂýyvKz‚nõ›·`Ù‚8<²œ kbÂF{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¶–Éöÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýŒp|ÐéKCk¹}±Ö~¯Ýý„8@²œ kbÂF{é®·'üvº‰oý©äÇU¤©A)Eǹ ¶–Éöÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý5ò/{gÎGýŠŒ´¦P†8²œ kbÂF{é®·'üvº‰oý©äÇU¤©A)Eǹ ¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ýEB|®MT›•°µ×ˆ8<²œ kbÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¶–Éöÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýì“Œ˜ÉO ¤¹DdOj8 Š8@²œ kbÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý¾­khOŸ°½Úíý—Œ8@²œ kbÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý½s^c :E5¿Yáë„Ž8²œ kbÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ýƒA:4l2J¶ã7e2Ȳ8<²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¶–Éöÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýx°¾WãILJw†­{ç +’82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýIê7¶N0õ”GêÈ¥”82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýK”ö.#±LV¼MÍdÓ°r£–82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý³º +T ÏBˆ#¿‡RǾ˜82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýsR—ȽFKµhNB4$š82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýUm£Ñ—B|ª~aºX·Èœ82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýèuòô€/C7œò¾ºÌÜâž82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýƒc÷ÌO7«ï_>…IÛ¡ 82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý=± …žIJ‚‰4€%H¼Ý¢8²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ýªp áó@€ŠŒnyÌÚÞ¤8:²œ kbÂF{é®·'üvº¶–Éöÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ý}ϱØNÜ°ÓÔfµX :¦8:²œ kbÂF{é®·'üvº¶–Éöÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ý~JùhèB³—‰go=K¨8\²œ kbÂF{é®·'üvºtTXìƒî°R®ƒ.û"°ËAf/usr/home/user/ripe-prov-tests-master/Linux/out.tmp¶–Éöÿð‹+aue_unlinkhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ýÞ°çæH¶™Rs 7DcѪ8²œ kbÂF{é®·'üvºkbÂF{é®·'üvº¶–Éöÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ýØtä¬TIÛ¡Sà¬BO¬8@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¶–Éöÿð‹+aue_readühostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý!ÁJèËÈ@<¶FwLÁº®80ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¶–Éöÿð‹+aue_lseekÐ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýkÃìF{é®·'üvºªù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±¶–Éöÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÂÈZ¨=ôLº¾ý$ïØMÈ°8$ªœ ù‹°âFzé®·'üvºkÃìF{é®·'üvº¶–Éöÿð‹+aue_fork +arg_pid1365hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1365ppid1282execbash20ÜS7[AIF¬•pd± (ý쬓âH=‡ìMñ™'²8²œ kÃìF{é®·'üvº¥µîgµÑUµg¨eµÑc'¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý„PMwŒFü¦£æå%m´8²œ kÃìF{é®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¶–Éöÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýÄú é€ì@m®¾Û‘,J*¶8<²œ kÃìF{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¶–Éöÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý!þÂÏÒL +§U„Œ¥¸¸8@²œ kÃìF{é®·'üvº‰oý©äÇU¤©A)Eǹ ¶–Éöÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý{=òëõHŠXéÝŒ( +º8²œ kÃìF{é®·'üvº‰oý©äÇU¤©A)Eǹ ¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý /4š^Bk±sԟ룄¼8<²œ kÃìF{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¶–Éöÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¢Ï¢Ë En©\µm¤g㦾8@²œ kÃìF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÀ!Ü~âoN@DëÀ¾$ÌÀ8@²œ kÃìF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¤z‘§@ rwe6)§ºÂ8²œ kÃìF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý•}Ã+£³Hמètð{ÚWÄ8<²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¶–Éöÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÇâp>­çME“™7¯¡‚tÆ82²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý}ÄW|Fѵ?“Éö‰îéÈ82²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýWëi|LNxˆÙPVzéÊ82²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¬÷zœJ¾ŒV€2%{ª.Ì82²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý]aÂ$ðRF쌵{˜ šþ„Î82²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýŽø±—Iß®hnö ;ìÐ80‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº¤ÏÓ¡ÿð‹+aue_lseekÚº+hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•Ðtc× @~˜‰naÒ8@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eº¤ÏÓ¡ÿð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýŒKKŸ‰+žp!ùÄÔ8JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºº¤ÏÓ¡ÿð‹+aue_sendtoÚ +ret_msgid501hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý‘2”¡ƒFˆ„íÚ<¨éÖ8JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºº¤ÏÓ¡ÿð‹+aue_sendto˜ +ret_msgid502hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý~€[r%ÎA¤á5Õ9´Ø8JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºº¤ÏÓ¡ÿð‹+aue_sendto¬ +ret_msgid503hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýNQ•?ü‹B{°¢ŠkÐô­Ú8JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºº¤ÏÓ¡ÿð‹+aue_sendto˜ +ret_msgid504hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýª¶¬è¯G|³¹E²‡õËÜ8Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºº¤ÏÓ¡ÿð‹+aue_recvfromÚ ret_msgid501hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‹J—µi±Iý»e;X9Æ®šÞ8Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºº¤ÏÓ¡ÿð‹+aue_recvfrom˜ ret_msgid502hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý&¨û"DÇLE¡6Fõ÷ºTà8Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºº¤ÏÓ¡ÿð‹+aue_recvfrom¬ ret_msgid503hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýøX!çÝ@Ôœ¸Ül‘sa¨â8Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºº¤ÏÓ¡ÿð‹+aue_recvfrom˜ ret_msgid504hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýš70¦›F©´4{QèÇÆä8²œ kÃìF{é®·'üvºkÃìF{é®·'üvº’͈º¥ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÿQÉåJæ‚Ù4¨P8áæ8bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯’͈º¥ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý²Å4Ë!âI2‹©@ QÛ%è8bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯’͈º¥ÿð‹+aue_write,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý¢ÅF{é®·'üvº¬ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±’͈º¥ÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýU`PÆ[´G6¿îëe¡*ÿnê8$ªœ ù‹°âFzé®·'üvº¢ÅF{é®·'üvº’͈º¥ÿð‹+aue_fork +arg_pid1366hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1366ppid1282execbash20ÜS7[AIF¬•pd± (ýô\Ò#dÆAˆƒþ€Y§ÇÖì8²œ ¢ÅF{é®·'üvº¥µîgµÑUµg¨eµÑc'’͈º¥ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýõÇ@$rL+šëN$gô'™î8²œ ¢ÅF{é®·'üvº[Q…¾vVS¶¾4ÿCVaír/usr/home/user/ripe-prov-tests-master/Linux/./copied_pipe'ìAzX™¦}˜¹(/libexec/ld-elf.so.1’͈º¥ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./copied_pipe appid1337execbash20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ–ˆûR`àM[B, ])¸Ër—éð8<²œ ¢ÅF{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf’͈º¥ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýO»dÉvM@¦žû`oº”ò8@²œ ¢ÅF{é®·'üvº‰oý©äÇU¤©A)Eǹ ’͈º¥ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý{¾ƒÈ@1£@š€½zô8²œ ¢ÅF{é®·'üvº‰oý©äÇU¤©A)Eǹ ’͈º¥ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý·´NJ>…B? :kùšJö8<²œ ¢ÅF{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints’͈º¥ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýyRwžÍjO°gšo‘.°ø8@²œ ¢ÅF{é®·'üvºXꎩð®…\®ð@JÌ…¼â’͈º¥ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý{? CMÕ¥%Äbv´ÀÆú8@²œ ¢ÅF{é®·'üvºXꎩð®…\®ð@JÌ…¼â’͈º¥ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýRdê{æN€§Ðì:ãÞ8Wü8²œ ¢ÅF{é®·'üvºXꎩð®…\®ð@JÌ…¼â’͈º¥ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý. Ó¢ÞN&­¤›¬œÊ]Óþ8<²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7’͈º¥ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý¡pôîK›Dü¸W2¯ì €92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýÂe4;!@@‡p?õƬ|‚92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý9¹×ºDk„ãÔÀå„92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýÔ$¾8%Df‰Áܺþ_†92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýá,[E[ž”GJÕ5!jˆ92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý?’ÚÎê­Oóµ±¥¬½¤ +Š92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý®TOçübG‰­+×ý¸Œ92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý^…t}uH¡²cíõÒ`›Ž92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý~¹‰‹…EĶ‹ +>k„ù9²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýðF ôfOz°"°—“Y’9:²œ ¢ÅF{é®·'üvº’͈º¥ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýÌÂœìÀœL´¶éKýšÂ”9:²œ ¢ÅF{é®·'üvº’͈º¥ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýè/F{é®·'üvºô20ÜS7[AIF¬•pd± (ýè.F{é®·'üvºô20ÜS7[AIF¬•pd± (ý xFö‰Ö]íù>Hàè.F{é®·'üvºè/F{é®·'üvº20 ÜS7[AIF¬•pd± (ýÓ…6+1¨I*¸,þ*cº#–9²œ ¢ÅF{é®·'üvºxFö‰Ö]íù>Hà’͈º¥ÿð‹+aue_pipe ret_fd13ret_fd24hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýë!F{é®·'üvº®¢ÅF{é®·'üvº°äÿ§®]vRS<„äB±’͈º¥ÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýaAÈÆuÅC ‰&9¦ãBÎs˜9$²œ ¢ÅF{é®·'üvºë!F{é®·'üvº’͈º¥ÿð‹+aue_fork +arg_pid1367hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1367ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýÂütv¶DR[ UC +Öš9bÖœ ë!F{é®·'üvºí( ö~R¶ ~{‚~¯’͈º¥ÿð‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1366execcopied_pipe20ÜS7[AIF¬•pd± (ýê ÝÿCΔc¹cœÒIÛœ9bÖœ ë!F{é®·'üvºè/F{é®·'üvº’͈º¥ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1366execcopied_pipe20ÜS7[AIF¬•pd± (ýryŒ‡ÃïIï¬DÕ$¢\Ï£ž9Öœ ë!F{é®·'üvºë!F{é®·'üvº’͈º¥ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1366execcopied_pipe20ÜS7[AIF¬•pd± (ýûŸ«?|sE®¢Ô—ïË–¥ 9@²œ ¢ÅF{é®·'üvºè.F{é®·'üvº’͈º¥ÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýu‹´œMÅ……ö}ò•:¢9b²œ ¢ÅF{é®·'üvºí( ö~R¶ ~{‚~¯’͈º¥ÿð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýòŽ?¥2kIqŸ[‘°¸ž@¤9²œ ¢ÅF{é®·'üvº¢ÅF{é®·'üvº’͈º¥ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýyKÖ}–yGß»ýîÿ@4›¦9@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'’͈º¥ÿð‹+aue_readèhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýBÅc˜D0«ûµ3Tiw¨90‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uì‹‚—©ÿð‹+aue_lseek¢†,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(F{é®·'üvº°°äÿ§®]vRS<„äB±hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý@°Êø½F¢Äßû2?qª9²œ (F{é®·'üvº(F{é®·'üvºª‘´ý¬ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýßð8œ²M%Œ<<Ç$fÂõ¬9bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ª‘´ý¬ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý¹2/}qG°…¤“¥Þšd¯®9bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ª‘´ý¬ÿð‹+aue_write8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýŸÂF{é®·'üvº²ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±ª‘´ý¬ÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÅ…•ôµ7NˆÍœ©×ñ°9$ªœ ù‹°âFzé®·'üvºŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_fork +arg_pid1369hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1369ppid1282execbash20ÜS7[AIF¬•pd± (ý(ý:Bn.G'‘½IÒÃq²9²œ ŸÂF{é®·'üvº¥µîgµÑUµg¨eµÑc'ª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +8: ò92²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý +>•ÿ7™B¾{¥…Å·» ô92²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýyÆõó–EÖ©&v,R8áö92²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙŽÒû¸$÷LàLë«3j°EÇ;{ø92²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýcÒ1§”GSº=Ó³¼¿©ú92²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýð`²¼ø E +¥bSëQDü92²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýË%ÉÇtKŠH—oïæàþ9²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý!†âæ±D°†¢?ó™$Wj€:<²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8ª‘´ý¬ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý@–©:OIQ­âÒtF8[‚:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý@è.IJ A°†çE«Þ…„:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý8˜ÝXLX¢°ÿRÝÝr†:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýˆÜ(ª +IG¹øï{壈:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý—ê]’TN ƒs +³ÚŠ:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýT¸•¨d=EÝŽóØÿÅvŒ:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¥®+K½C&ª¬òB䪎:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýâè'Ò‰FA ®²ìÅÿ>:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý:ZêbÂÓDé§gØd¿t(’:²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýùj £éöCE‡k"wÀË”:<²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1ª‘´ý¬ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýq]CˆFå¿Zc`úù#–:2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýY¾aàçB\†»Ò8?xZ˜:2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýñ=qÄO¯¯Ýg䕱¾Óš:2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýeä|'Ú LàŒ(•­£s²åœ:2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýƒÐ)PömIϬ#.ö ž:2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýY÷—»Iœ¯ +†ZÖIbÅ :2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý^ûÇÌ€CÒšäÃóSÛHb¢:2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý CO©:g½M¥Ï/¤:2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý§*¡‚I¾"¹áG@ͦ:²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¹¨Þ'^@„عHÔi¨:<²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ª‘´ý¬ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýeÓ¨Dв:$åA’ª:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÞïpÉAj‹W½ LÚÖȬ:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýËÜ[“¼Gɾ'etž+ô€®:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý“lɵ¯+C:£Õ­*rSÞ°:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¾GpÉ!ÎG¢¡–ú«ò¶Œ$²:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýñ`´ —Gàš×‡€•——´:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýovÁ³oN¾Í».ŽÃ6¶:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýsïîçþMM¶Œü§qC›¸:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýi%çWAKx«»dT¥ Aº:²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý")Ж@FÓ‘†ߦ~„¼::²œ ŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý<¨²õpIA¼ Ù]Å€=à¾::²œ ŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýf»~nG‰ƒ¤zNÄ…ÿÀ::²œ ŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý·ø¢"Ì'O–¾riÛÆœ¸Â::²œ ŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýçÄèC •Nꊄtâœ9ÈÄ::²œ ŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýâ*cjC3Ž4+ºb),Æ:<²œ ŸÂF{é®·'üvºí( ö~R¶ ~{‚~¯/dev/ttyª‘´ý¬ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýÅK¹§BBƤDýoÁqïÈ:²œ ŸÂF{é®·'üvºí( ö~R¶ ~{‚~¯ª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý£4@ÒF˱þëF^W£Ê:<²œ ŸÂF{é®·'üvº8: š§Ö:"²œ ŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýŸ›vÕIO³c8ï2ÅØ:0²œ ŸÂF{é®·'üvº8: ÿ×ç>ê;2àœ :Ÿ0F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ€ÞùÄ´ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ý€& $ K±º‚ÁË£nì;2àœ :Ÿ0F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ€ÞùÄ´ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ýma'×sBõ¸BŽ‘ÞÅzeî;àœ :Ÿ0F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ€ÞùÄ´ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ýS(í–ñO„w-=W•ð;:àœ :Ÿ0F{é®·'üvº€ÞùÄ´ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ý’X‘‚FfÀ¾¹ èÊ=ò;:àœ :Ÿ0F{é®·'üvº€ÞùÄ´ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ý +:ññF{é®·'üvº20 +ÜS7[AIF¬•pd± (ýw‚ª;Mõ{^|nòÔô;àœ :Ÿ0F{é®·'üvº:ññF{é®·'üvº€ÞùÄ´ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ý +:õ²F{é®·'üvº20 +ÜS7[AIF¬•pd± (ýý~ó£(?C³‰F¶y‰Œƒö;àœ :Ÿ0F{é®·'üvº:õ²F{é®·'üvº€ÞùÄ´ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ýLY IEJº²—¡‚Dÿéø;bàœ :Ÿ0F{é®·'üvºí( ö~R¶ ~{‚~¯€ÞùÄ´ÿð‹+aue_write^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ý;ÌF{é®·'üvº::1äÅ::1¬M20ÜS7[AIF¬•pd± (ý¡G$F{é®·'üvº::1¬M::1äÅ20ÜS7[AIF¬•pd± (ýî°Ì_G##b$ç"ú;Jàœ :Ÿ0F{é®·'üvº;ÌF{é®·'üvº€ÞùÄ´ÿð‹+aue_sendtoret_msgid506hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369address::1port4950execdatagram_client20ÜS7[AIF¬•pd± (ý¿"[…{5C– Я4ôÃ_ü;àœ :Ÿ0F{é®·'üvº;ÌF{é®·'üvº€ÞùÄ´ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ý;¿F{é®·'üvº127.0.0.1žÎ127.0.0.1¬M20ÜS7[AIF¬•pd± (ý טyJ£,Á¥ÅûWþ;Jàœ :Ÿ0F{é®·'üvº;¿F{é®·'üvº€ÞùÄ´ÿð‹+aue_sendtoret_msgid507hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369address127.0.0.1port4950execdatagram_client20ÜS7[AIF¬•pd± (ý ÄñZO;L±¨œxíËN®ô€<àœ :Ÿ0F{é®·'üvº;¿F{é®·'üvº€ÞùÄ´ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ýF•‰·þlDÝ«e¶ý³A‚<àœ :Ÿ0F{é®·'üvº:Ÿ0F{é®·'üvº€ÞùÄ´ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ýÆÌ ÿ"H-‰?ˆÿ¤ç)„hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý'¤´Ÿ—@\škô‡Jˆ›”GÄÊ'Àpx9¾<:²œ ;<ŸF{é®·'üvºŽ¢äÉ´ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý3ºëä‘O%·/5Ì)\ìÜÀ<:²œ ;<ŸF{é®·'üvºŽ¢äÉ´ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýâ]»]I ¹î@dã Â<0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_lseekÊß-hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýúè „õË@‰æ!j¿G›Æ< ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+20ÜS7[AIF¬•pd± (ý§„·7ÈO‹©{ Èl ÄÄ<@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ¼o èLk±~e [å¡ Ê< ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+20ÜS7[AIF¬•pd± (ý=nÏä¬LãÚC :ÙßÈ<@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwKüÙj¡@þ«vµ­)%&êÎ< ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+20ÜS7[AIF¬•pd± (ýêoz:ÿN@”$a5·¨IÌ<@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©ÓœŸS^Iw <Œç».¨ÉÒ< ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+20ÜS7[AIF¬•pd± (ý‘î] 3O¶SS¶ä)ZNÐ<@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýtà’ÆrI†—ÆlÕ#F%ËÖ< ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+20ÜS7[AIF¬•pd± (ý99=Í·BœrÏ_4@±4Ô<@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃÞßÀá¦JO¹Z(~ÇÃÆùØ<:‚œ Ê +ÙKFzé®›'üvº¤Ú¶ƒµÿð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'‘Ë cDg“þË¿~ÞwÚ<@✠Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤Ú¶ƒµÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŒYï´ï +Lʽ­ÓÂ_á+Ü<@✠Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýîXJaŽA@´·øvN÷›Þ<@✠Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadÀKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½~²}â¦B›e‡æå<(Ià>îG‹‡Í(Ö‡öä<@✠Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤Ú¶ƒµÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘_Ùס¸A”,ÁÒ 6d¼æ<@✠Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñÏ^Õ1%Lè›ÄùŽÕ[aè<@✠Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_pread–MhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕp€ +D•›®Ìuæ}êqT‹ÌÈH¢¤,„ÂÔ”‘·†=@²œ ÖÈF{é®·'üvºXꎩð®…\®ð@JÌ…¼âî˜Þ‘¼ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýÉë¯=‚ñCš¸jÜÂ?±=ˆ=@²œ ÖÈF{é®·'üvºXꎩð®…\®ð@JÌ…¼âî˜Þ‘¼ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýB™#­nÖOs€šíË3”éYŠ=²œ ÖÈF{é®·'üvºXꎩð®…\®ð@JÌ…¼âî˜Þ‘¼ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýž¬š>¦ÂA ”µ`b¥Ç{dŒ=<²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7î˜Þ‘¼ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýã£×ÔýFj¿“ú,Ž=2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý\S*Ý +A¤¸³ cb¢¨=2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýFo0ÞKIà„™ª–;’=2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý)æ™îësD˜xÍ¿W&;”=2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýá‹ß&ªËA®Ü  +$&Ú–=2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý%#ÊÛƒCº Ò@…~ʘ=2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýË-]Ë'ÕC€’ÒõIíØ2bš=2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ˜Üú¤ã„ä\¼Oþ·Ý÷2Çœ=2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý&_„›×@­¡¸Úœ7^£Áž=²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýéKkd·Hª§H=ýnŸ =:²œ ÖÈF{é®·'üvºî˜Þ‘¼ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý7šQ‹}ßB{­@ “®pO¢=:²œ ÖÈF{é®·'üvºî˜Þ‘¼ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýÖZƒF{鮸'üvºô20ÜS7[AIF¬•pd± (ýÖZƒF{é®·'üvºô20ÜS7[AIF¬•pd± (ý "q¥"’¸YDŠª?‘ÁÖZƒF{é®·'üvºÖZƒF{鮸'üvº20 ÜS7[AIF¬•pd± (ýš9åíAs”ˤm„3÷Ú¤=²œ ÖÈF{é®·'üvº"q¥"’¸YDŠª?‘Áî˜Þ‘¼ÿð‹+aue_pipe ret_fd13ret_fd24hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýÖ]‹F{鮸'üvº¾ÖÈF{é®·'üvº°äÿ§®]vRS<„äB±î˜Þ‘¼ÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýŒùèCI ‹¦}Æ%¦=$²œ ÖÈF{é®·'üvºÖ]‹F{鮸'üvºî˜Þ‘¼ÿð‹+aue_fork +arg_pid1375hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1375ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý{ür®>@â¼O„Ëꕉ¨=bÖœ Ö]‹F{鮸'üvºí( ö~R¶ ~{‚~¯î˜Þ‘¼ÿð‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1374execdirect_pipe20ÜS7[AIF¬•pd± (ýûýµ±€ Om­&4ð-wŒª=bÖœ Ö]‹F{鮸'üvºÖZƒF{鮸'üvºî˜Þ‘¼ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1374execdirect_pipe20ÜS7[AIF¬•pd± (ýÂä7Oâ—˜Q¶/4¬=bÖœ Ö]‹F{鮸'üvºí( ö~R¶ ~{‚~¯î˜Þ‘¼ÿð‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1374execdirect_pipe20ÜS7[AIF¬•pd± (ýa<Öu¬O/½õv6áb„C®=Öœ Ö]‹F{鮸'üvºÖ]‹F{鮸'üvºî˜Þ‘¼ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1374execdirect_pipe20ÜS7[AIF¬•pd± (ýæïç6=(NJšúfNZ°=@²œ ÖÈF{é®·'üvºÖZƒF{é®·'üvºî˜Þ‘¼ÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýXµþ±™*JÆŠÈ·{_ÔÚ²=b²œ ÖÈF{é®·'üvºí( ö~R¶ ~{‚~¯î˜Þ‘¼ÿð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý-ÕäLgŸM €¶mqOîÓÛ´=b²œ ÖÈF{é®·'üvºí( ö~R¶ ~{‚~¯î˜Þ‘¼ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý$ÏëNÙAÅ“C*?²¶=²œ ÖÈF{é®·'üvºÖÈF{é®·'üvºî˜Þ‘¼ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýrÏÓ›õL™·¨K9‡~¸=@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'î˜Þ‘¼ÿð‹+aue_readœhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýœKýbü¶D°ÝT-öWó_º=0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'î˜Þ‘¼ÿð‹+aue_lseek‚hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýÖEF{鮸'üvºÀù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±î˜Þ‘¼ÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÐŒSmIUGg²î †ÅE+ïØ=²œ q¨F{鮸'üvº8”HH}æT¦}d5Àx/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ªÛÙÃÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineH/usr/bin/env bash ../Bash/named.sh appid1337execbash20ÜS7[AIF¬•pd± (ýßÚ1‡ßRN ­W;N.´õÚ=<²œ q¨F{鮸'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýŒ¡ÿ,ÉI;uU§&y}Ü=@²œ q¨F{鮸'üvº‰oý©äÇU¤©A)Eǹ ªÛÙÃÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý<~ ÿÍàH  çºï÷uÞ=²œ q¨F{鮸'üvº‰oý©äÇU¤©A)Eǹ ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý¢€ì# NдôÔþGªà=<²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýÂ_ÌõÑñJ0Ž‘ÛÔ’º4®â=@²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý6\³Å@ôƒ ²5y-Uýä=@²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýËƵ¦e“F4™W8Pw}æ=²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý¹…T ŽeO‰®s`‹ nuiè=<²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ªÛÙÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýý¿²"BíIÐî–Í:ê=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýº™%Þ*kGᶌ²÷·É“ì=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýA*l4UŒOY–á—e>ÚÉî=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýܧD×K—¼’%ýìH 3ð=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýÎÅØ«UM|y9 ò=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý>,ø¿Jí± –ë1æ€[ô=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý5'ñµµ¶B•¶wo·‰Ð ºö=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý<úãò5Nñ¤XôS9ú—žø=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýn}!øA¢@Éj¼íŠÐú=²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý4™sÅqI»ˆûˆ`­äsÆü=:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýç6|IJ\Oº¢úq-Iï%þ=:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýÅ!>LnF¬š<±¶u7ò€>²œ q¨F{鮸'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ªÛÙÃÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine.bash ../Bash/named.sh appid1337execenv20ÜS7[AIF¬•pd± (ýö½KÊèéL‰„µôŽ4§ƒq‚><²œ q¨F{鮸'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýA¾Öøˆ[I…Œ Êoûç$„>@²œ q¨F{鮸'üvº‰oý©äÇU¤©A)Eǹ ªÛÙÃÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý0˱ç]XH–ê%º¡o†>²œ q¨F{鮸'üvº‰oý©äÇU¤©A)Eǹ ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +¸/"cK¨ê4kò»ˆ><²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýíÅžIÛ @c›’¦×ã8Š>@²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýqÑ•–9Cª½`I!b®üŒ>@²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý(02}ÖyF€ôì” ±üŽ>²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýшx¨0Aä°áŽõb<><²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8ªÛÙÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýÓYfD$Ká‡Ö6‰%’>2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¦ð:ÜOEFîˆï„*¥‹§”>2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý«&Y¹°H¾¬e«–>2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý/èUfˇI´ óþÞu¢åû˜>2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý0U¾RÔI†’ŠÉ\Áš>2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýI«¿¦ÀAe·X‘ å0‘œ>2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¾VŒ^’ÇN˦×þ¿÷Ëš^ž>2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÁUYVÆE´Á‚¥Úχ½ >2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý$9V]K€=h¨vgj¢>²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÙI„ aÁH°îà2,¤><²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8ªÛÙÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙŽÔú#Úª„¼ŒAý”wðtñͦ>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýeÔD>èD=–:c­ìQ‹¨>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýõåV²žBM7Ž'Ð Q¤Dª>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýr¹±¦D1³§=,Ádê¬>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýlpƪ@Æ™»í´˜;u®>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýO¬Ñý´’KÀ–™0ØeÙž°>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÍ]‚RGDi¾Åàß1iÙ®²>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¯àxFö‘C +±Øs’$´>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÞâ‘ìâà@è©Köyð¥`¶>²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÌøTÅêGÓ¾8Ü.»óã(¸><²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1ªÛÙÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýãªé©KÄOª´¿ªƒQjºQº>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý‚™œÔË!@)±~®QLõw¼>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý~·Äº'HDù¼ŠŽIa +ƒ¾>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý\¾W}\4A„½¦IO›µÀ>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýNjœj¿.Kë¸HÙgu ŸÂ>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý€€à`ØBƒªÿD<½X–çÄ>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýð¾–¥CHÒ«ìD/-¯Æ>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý_ï¼8/KG¥j‚ábàÈ>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý%ja]Á»G–•° ÒøzÊ>²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýâ>•ªÒ$Dï¼óÐîm§aÌ><²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ªÛÙÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý5ïîº~E“® Ž®ô­Î>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÅØKä -HR¶vï³çuÞÐ>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÊâvZp`Hjž'=ƒz-7Ò>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¼·9>—s@¦Á‡ãĈD Ô>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý5+| @0‡¨N0±"‰·Ö>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¢|Ù.UE)„!e°õ’Ø>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¥’Õ«KAÿ¹/µr…9¶Ú>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¤l?ÓðO‹¥p;.`°Ü>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÿÁ;®N­±tCì%#ÄBÞ>²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý*Z«¯üÇ@ ´M˜ð|´[(à>:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýèR@J`²M~”ušütícâ>:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý_=¾¤&XE‡°/NØÜÛä>:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýöñ«Û×A”(rDNŠæ>:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý ­ºié^N3¹z£/À‡è>:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýâ“VQFKº¾Fènfõ¾ê><²œ q¨F{鮸'üvºí( ö~R¶ ~{‚~¯/dev/ttyªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýà™É¥íBÎŽ-õ²|‰¤ì>²œ q¨F{鮸'üvºí( ö~R¶ ~{‚~¯ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý桨y<²œ q¨F{鮸'üvº8”HH}æT¦}d5Àx/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.shªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý£·îã=M6›èÊ„|u“ð>0²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýæéêe ON¢Ô®àÌðGžò>@²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýòSÌk2O +ÅL“i'Cåô>0²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýôcèFÉF —œoŒ‚A¥Dö>²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýõvDFFB‘¶ƒé¾)›Lø>"²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýr,õ$‘@`¡Šl÷Ddÿú>"²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýB…÷ol²Eï«·e6êqüü>0²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ývÏ¿¬*G˜³l×»ŸÏ>ˆþ>@²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_read¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýió’xJÉ¢ŽÇæeÓ€?0²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_lseekúhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýrAF{鮸'üvºÄq¨F{鮸'üvº°äÿ§®]vRS<„äB±ªÛÙÃÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý;_‰§Ì AE£é]hàýQ‚?$²œ q¨F{鮸'üvºrAF{鮸'üvºªÛÙÃÿð‹+aue_fork +arg_pid1378hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1378ppid1337execbash20ÜS7[AIF¬•pd± (ý(YÎZ~IVº1+ËËœ¯„?@²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_readBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýÛ†t(ÍH–™–³6Ɇ?0²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_lseekžhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýrLFF{鮸'üvºÆq¨F{鮸'üvº°äÿ§®]vRS<„äB±ªÛÙÃÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýw'Ô8˜Iw¢zóEìC cˆ?$²œ q¨F{鮸'üvºrLFF{鮸'üvºªÛÙÃÿð‹+aue_fork +arg_pid1379hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1379ppid1337execbash20ÜS7[AIF¬•pd± (ýq’*x CÔ–ºq«ˆœÂŠ?Öœ rAF{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1377execbash20ÜS7[AIF¬•pd± (ý×›=#~ßNÈ‘~x@×ߤZŒ?<Öœ rAF{鮸'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nullªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execbash20ÜS7[AIF¬•pd± (ýÊg¿ßH…æC0“zÎŽ?Öœ rAF{鮸'üvº3P ÓK€X‹Ó«·Ø€‘^ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execbash20ÜS7[AIF¬•pd± (ý½Ðl‡Ôç@-ªžc£@¡ËH?àœ rLFF{鮸'üvº8”HH}æT¦}d5À‚ëÕãÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1377execbash20ÜS7[AIF¬•pd± (ýdqR°¯”Eµ‰ÏáY>uûó’?àœ rLFF{鮸'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1‚ëÕãÃÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1377execbash20ÜS7[AIF¬•pd± (ý$*Cà ¾GΞHëû +áS”?<àœ rLFF{鮸'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf‚ëÕãÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý +°¼OhÅ‘¦V‘ÅÜö¶¦ß¥20 +ÜS7[AIF¬•pd± (ýFÀ­íQL¡·ëÖ#éÙ–?Öœ rAF{鮸'üvº°¼OhÅ‘¦V‘ÅÜö¶¦ß¥t/usr/home/user/ripe-prov-tests-master/Linux/./named_writer'ìAzX™¦}˜¹(/libexec/ld-elf.so.1‚ëÕãÃÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine ./named_writer appid1377execbash20ÜS7[AIF¬•pd± (ýñâ@’j#NáµQ|€ç[Õr˜?<Öœ rAF{鮸'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf‚ëÕãÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý—Õ²¼×ÙKÅ×R‘“š?@àœ rLFF{鮸'üvº‰oý©äÇU¤©A)Eǹ ‚ëÕãÃÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý†ØAI|½XÄÜ—¦Wœ?@Öœ rAF{鮸'üvº‰oý©äÇU¤©A)Eǹ ‚ëÕãÃÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý:Ê·nÎOߪåx¥Ù‚Öž?Öœ rAF{鮸'üvº‰oý©äÇU¤©A)Eǹ ‚ëÕãÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý”àÇ hLªî¶#ʹ– ?<Öœ rAF{鮸'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints‚ëÕãÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýá£D°Ä·G’ µ`¢?@Öœ rAF{鮸'üvºXꎩð®…\®ð@JÌ…¼â‚ëÕãÃÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý$×æ}X,C.¤J×:~Ó ¤?@Öœ rAF{鮸'üvºXꎩð®…\®ð@JÌ…¼â‚ëÕãÃÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýeëN© A0´— `T†PѦ?Öœ rAF{鮸'üvºXꎩð®…\®ð@JÌ…¼â‚ëÕãÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý» 3Ê2LšÇ“,bî¨?<Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7‚ëÕãÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýÛ'ŸljI¯Ó™«ì…ª?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý{R´O»²ŠÇNϬ?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ––üVZ*{]$K–¯Ü ‡aÓqÿ®?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý)“H8½I‚³*UßÓW„µ°?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýZ+:h×ðC(ƒ^8ô¶‚[²?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý"/°Vž½L¸›Î^÷IY n´?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýb«`ùùÆ@…w#)Gº¹¶?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýåä‰àÒ‡EQ“þH⥉•¸?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýNHãQÚN²œKàãßýbãº?Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýŽùó¥m$K¨‡ÚÖ2íCé¼?:Öœ rAF{鮸'üvº‚ëÕãÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýÑ.‹Á(I3gûõ¯µÔ¾?:Öœ rAF{鮸'üvº‚ëÕãÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýÈk[ÑDM„Ÿ¾ÙŠy“óÀ?bÖœ rAF{鮸'üvºí( ö~R¶ ~{‚~¯‚ëÕãÃÿð‹+aue_write6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý㟘O¬¸€7nV=Â?àœ rLFF{鮸'üvº‰oý©äÇU¤©A)Eǹ ‚ëÕãÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý¨™Þ2 AXš—ô%šÌñHÄ?<àœ rLFF{鮸'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints‚ëÕãÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ýíäØ^JT³-Êr€]¤Æ?@àœ rLFF{鮸'üvºXꎩð®…\®ð@JÌ…¼â‚ëÕãÃÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý;hp?ÆI¦ZZé°C:MÈ?@àœ rLFF{鮸'üvºXꎩð®…\®ð@JÌ…¼â‚ëÕãÃÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý:ŸM\mEržfÁ›43éÊ?àœ rLFF{鮸'üvºXꎩð®…\®ð@JÌ…¼â‚ëÕãÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377exec +sleep20ÜS7[AIF¬•pd± (ýÇ"úXa0A\§*D +§SãÌ?<àœ rLFF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7‚ëÕãÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ýÚ?îxu@”]°2U÷¥•Î?2àœ rLFF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý+*‘uMì«ú'|Gg_ÃÐ?2àœ rLFF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý‰”×69iCܨ’šbž¹’­Ò?2àœ rLFF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý½õ¼ç*qOî¢L)ó3sÛzÔ?2àœ rLFF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ýÆÚyƉ´Mç£ë˜Køö{iÖ?2àœ rLFF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý‚Ã&,­B†§$´`—A +Ø?2àœ rLFF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ýÖÞ×ÈEG¹ºKíx2lyÚ?2àœ rLFF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ýš¢”Y°!N§ùˆ¸¹Ü?0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UöÓÜïÇÿð‹+aue_lseekÎœ1hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4jðJe÷CÓ—ÈŒ}¨ÝZ¢Þ?àœ rLFF{鮸'üvºrLFF{鮸'üvºÜãø¯Ëÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1377exec +sleep20ÜS7[AIF¬•pd± (ýÐ_\™pQGœ²Š;Š[+Ò°à?<²œ q¨F{鮸'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.dbÜãø¯Ëÿð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý0VXMK0ºuQIv’õâ?@²œ q¨F{鮸'üvº–Ø%™wyïR¹wT’ï9Üãø¯Ëÿð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýO‰ÆgmJšˆ)Ì'QUKä?@²œ q¨F{鮸'üvº–Ø%™wyïR¹wT’ï9Üãø¯Ëÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý?ÓbIA^¬éóQίµóæ?@²œ q¨F{鮸'üvº–Ø%™wyïR¹wT’ï9Üãø¯Ëÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýªmWÑRH ¶EºÁ›Öè?²œ q¨F{鮸'üvº–Ø%™wyïR¹wT’ï9Üãø¯Ëÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýbVR&ÉhAø¬øãÍì Éê?@²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀÜãø¯Ëÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý2uF{鮹'üvºÈq¨F{鮸'üvº°äÿ§®]vRS<„äB±Üãø¯Ëÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýDGƒóÌ-F¹c\Ìn¿·ì?$²œ q¨F{鮸'üvº2uF{鮹'üvºÜãø¯Ëÿð‹+aue_fork +arg_pid1380hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1380ppid1337execbash20ÜS7[AIF¬•pd± (ýßû¢nÁÔE¤Ã2­YS©î?àœ 2uF{鮹'üvº8”HH}æT¦}d5ÀÜãø¯Ëÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1377execbash20ÜS7[AIF¬•pd± (ý +Ñ;“ná¢çV¢ácæ6ççÅ20 +ÜS7[AIF¬•pd± (ý´p“tDÉ¿Š£ŒwO<ð?àœ 2uF{鮹'üvºÑ;“ná¢çV¢ácæ6ççÅt/usr/home/user/ripe-prov-tests-master/Linux/./named_reader'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Üãø¯Ëÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./named_readerppid1377execbash20ÜS7[AIF¬•pd± (ýÖ&€yµ3Lâ«Ï°xÊ5(µò?<àœ 2uF{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÜãø¯Ëÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ý@òQ ÒJ¿jéT9=-ô?@àœ 2uF{鮹'üvº‰oý©äÇU¤©A)Eǹ Üãø¯Ëÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýŸsËOÃI°ªTpQf80‡ö?àœ 2uF{鮹'üvº‰oý©äÇU¤©A)Eǹ Üãø¯Ëÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýaïh‹PJ_”j¸ÿǶ|ø?<àœ 2uF{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÜãø¯Ëÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýj¶]K‰Š(°±!n)ú?@àœ 2uF{鮹'üvºXꎩð®…\®ð@JÌ…¼âÜãø¯Ëÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ý{gkõDB€„žxW†Óü?@àœ 2uF{鮹'üvºXꎩð®…\®ð@JÌ…¼âÜãø¯Ëÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ý¤m½²öNÞ¥ˆâ*Yþ?àœ 2uF{鮹'üvºXꎩð®…\®ð@JÌ…¼âÜãø¯Ëÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýð ¤ÓHzž6ÝëräòU€@<àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Üãø¯Ëÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ý‹Jì%Þ¦@ˆH «LVi™‚@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýDSµ‚¬BÚ§H[™:ß„@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýLƒºÞáE¨)ußì]PL†@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ý®ßz¸þO׉`h¶‚G ¯ˆ@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýƒÈÛZM¨Ôébg#¦ÎŠ@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýrüöÉ« IÚRÞÀù÷LŒ@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýCI¢è¬ÿGZ“M%×U¡®ÍŽ@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ý ]Ií­lKO‰!',ƒ-¾]@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýZÆûV…@wµ} ‰ê-«’@àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ý[³ñAÈqI¡šF—ªÞ ú”@:àœ 2uF{鮹'üvºÜãø¯Ëÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýצa¿ŸJL˜Ñ gº3Ö5–@:àœ 2uF{鮹'üvºÜãø¯Ëÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýM+.p•HÛ·ÕU6BwB˜@bàœ 2uF{鮹'üvºí( ö~R¶ ~{‚~¯Üãø¯Ëÿð‹+aue_write6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ý +êüöµßh_†ß!h™j20 +ÜS7[AIF¬•pd± (ýpµñêhOWy}ÃŒy¡¦š@<àœ 2uF{鮹'üvºêüöµßh_†ß!h™jh/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmpÜãø¯Ëÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ý +s' F{鮹'üvº20 +ÜS7[AIF¬•pd± (ý=Ž§/öÜI’Êô³Äȳœ@<Öœ rAF{鮸'üvºêüöµßh_†ß!h™jh/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmpÜãø¯Ëÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý +s' F{鮸'üvº20 +ÜS7[AIF¬•pd± (ýÍè-ð˜ÊL†½i2ᘻž@bÖœ rAF{鮸'üvºs' F{鮸'üvºÜãø¯Ëÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý…|'œJñO]¾$@åXÚ| @bÖœ rAF{鮸'üvºí( ö~R¶ ~{‚~¯Üãø¯Ëÿð‹+aue_write$hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý[-Û,NEè£ÛDÍe»žB¢@Öœ rAF{鮸'üvºêüöµßh_†ß!h™jÜãø¯Ëÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý ƒª3G[¬Cô041"ë¤@Öœ rAF{鮸'üvºrAF{鮸'üvºÜãø¯Ëÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýV†tÛšHNþÃiNÞ„ ¦@@àœ 2uF{鮹'üvºs' F{鮸'üvºÜãø¯Ëÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýI‚§GóHd§0xŠ"=T¨@àœ 2uF{鮹'üvºs' F{鮹'üvºÜãø¯Ëÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýss?þHŠEI€…ºøF?î#ª@bàœ 2uF{鮹'üvºí( ö~R¶ ~{‚~¯Üãø¯Ëÿð‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýHÁY0t×Cï¹û&BV¬@àœ 2uF{鮹'üvº2uF{鮹'üvºÜãø¯Ëÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýf(GÏTqOšœíœ$+£®@@²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀÜãø¯Ëÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýߥðl~L¾žŠRÖÍzf°@²œ q¨F{鮸'üvºq¨F{鮸'üvºÜãø¯Ëÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý{Þ‹§*ÍG©°À“JÛ¤Ž²@@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Üãø¯Ëÿð‹+aue_read¶ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýŠ¼„šê½I‹´M Eÿ_´@0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Üãø¯Ëÿð‹+aue_lseek¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý÷AF{鮹'üvºÊù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±Üãø¯Ëÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÿ¥HR{³N¼»¶ñ2Ôž=¶@$ªœ ù‹°âFzé®·'üvº÷AF{鮹'üvºÜãø¯Ëÿð‹+aue_fork +arg_pid1381hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1381ppid1282execbash20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ¢žûºE‘0A¯šmÙKûE„¸@0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢Æ¼Ïÿð‹+aue_lseeküè1hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈ/`±¨ô@&©žÜ‘†ïFÿº@<Þ› µxÏFzé®’'üvº €ja·*XYª·CÿùX?Ü/etc/cron.dÂò§‚Òÿð‹+aue_open_rwtc +flagsmodeè +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1execcron20ÜS7[AIF¬•pd± (ýòk£»®C¡ ‘À»ùn¼¼@Þ› µxÏFzé®’'üvº €ja·*XYª·CÿùX?ÜÂò§‚Òÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1execcron20ÜS7[AIF¬•pd± (ýˆ¿z|¯hCΪٱŽÊÿyž¾@0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_lseeküè1hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøs}Ç«öKz±¦µÔIèÂ@ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+20ÜS7[AIF¬•pd± (ý«éà*Þ½MV‰ÄœÓe¨À@@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0<4BUJ@‚Ý눕Æ@ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+20ÜS7[AIF¬•pd± (ý¢«‚Å?L7…z˜ÄBKÄ@@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉæ¿ñJ§Œg¡q™†Õ8Ê@ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+20ÜS7[AIF¬•pd± (ý÷õ„’=M‡°4Ãs1¯ó¹È@@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°Ô‹ÖroO¼²‰dÂLþÎ@ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+20ÜS7[AIF¬•pd± (ýã–yô—EÈ‚òP\¼¥Ì@@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšCšçAˉ¾Ep:vP‡Ò@ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+20ÜS7[AIF¬•pd± (ýóy”ðƒM—‘Ó¢«7úB^Ð@@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿ‡áMgEÆ’u®ÝûÔ@:‚œ Ê +ÙKFzé®›'üvºÆÜÉêÒÿð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœPzâŽÉAC² ňq¿º!Ö@@æœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñL°¬íúE7¡on1¿F;JØ@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýW¹JôõMDŒ„ª‘©ž]Ú@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadìLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèƒÖ¸MŒšÿ)Y-Ü@b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆÜÉêÒÿð‹+aue_writeÖMhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýIÃßFé‡ò¤rs2§:Þ@bæœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆÜÉêÒÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýže×=GÐB‹šq,Œœ•`à@@æœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdÉ 3 µBØ»çÄ/á–â@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýùG.iŒ‡D†»=";Çõà_ä@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadÊ>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCyQ>¿A€Ò™æŒ_5æ@b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆÜÉêÒÿð‹+aue_write´?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®N>dèmI(²}OBt˜è@bæœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆÜÉêÒÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|ƒðÒ,B5€æS…üê@@æœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýL8?¹çN£ÜŠ¥Tߟì@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—ÀBJJõ¾G¸÷ˆ¦¨Xî@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_pread¤NhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/ø`ÜD­Äæ²Hð@b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆÜÉêÒÿð‹+aue_writeŽOhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:ǺŽºC‰Ÿ°kEž‹ò@bæœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆÜÉêÒÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýüˆ²…F¹ O|~üô@@æœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJÔ°‰pDk„ÉD»º87hö@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-òé'@2“'?‡JØWLø@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_pread¦LhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýbº¸#pKNšeÁ `²ú@bæœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆÜÉêÒÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$ƒÞh[A/«§ø"Ÿ$À«ü@@æœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýq#¤fÓAmŽa®p>AöÈþ@Jæœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÆÜÉêÒÿð‹+aue_sendtoà +ret_msgid520hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂÄÉÌ«O[¬¥ôƒX58ó€ADê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆÜÉêÒÿð‹+aue_recvfromà ret_msgid520hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý]Ë0`zHSà‰fp\*d‚Abê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÆÜÉêÒÿð‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý(…ìgiAí‚0ò¼NöŠH„A²œ ÷AF{鮹'üvº÷AF{鮹'üvº´‡¯ôÒÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÖÁ[$ñÜD¢£DâàNÿ\†Abªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯´‡¯ôÒÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýø°`^»6B¨–sò7Òl¢ˆAbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯´‡¯ôÒÿð‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý¨‘F{鮹'üvºÌù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±´‡¯ôÒÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýä3¡GAÕKªŒé:<Ð ŠA$ªœ ù‹°âFzé®·'üvº¨‘F{鮹'üvº´‡¯ôÒÿð‹+aue_fork +arg_pid1382hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1382ppid1282execbash20ÜS7[AIF¬•pd± (ýî°5 @P¢L¯¹ÒŒA²œ ¨‘F{鮹'üvº¥µîgµÑUµg¨eµÑc'´‡¯ôÒÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +~ì[y*UVªy›#U´Q20 +ÜS7[AIF¬•pd± (ý|þÐFKɾŒ°§/1ŽA²œ ¨‘F{鮹'üvº~ì[y*UVªy›#U´Qn/usr/home/user/ripe-prov-tests-master/Linux/./shm_exfil'ìAzX™¦}˜¹(/libexec/ld-elf.so.1´‡¯ôÒÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./shm_exfil ppid1337execbash20ÜS7[AIF¬•pd± (ýaÕG¸ ¥«tëA<²œ ¨‘F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf´‡¯ôÒÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýÖW’K¬jA±¢Ë˜pOǬ"’A@²œ ¨‘F{鮹'üvº‰oý©äÇU¤©A)Eǹ ´‡¯ôÒÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýÛÈÞÕ­]L_»=¤ƒN´ÎÝ”A²œ ¨‘F{鮹'üvº‰oý©äÇU¤©A)Eǹ ´‡¯ôÒÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýŒûÌ9E‹ÁÆÄxn<£–A<²œ ¨‘F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints´‡¯ôÒÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ý›€ÍžNB’QM +©¤˜A@²œ ¨‘F{鮹'üvºXꎩð®…\®ð@JÌ…¼â´‡¯ôÒÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ý¦#O·ø4H²”ÜP¸=šA@²œ ¨‘F{鮹'üvºXꎩð®…\®ð@JÌ…¼â´‡¯ôÒÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýUL~GCEçŸÐ0­ì÷€œA²œ ¨‘F{鮹'üvºXꎩð®…\®ð@JÌ…¼â´‡¯ôÒÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ý;P¥ÕAž‰»ŽŠÞûBžA0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®…ðÿÖÿð‹+aue_lseekÀµ2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýý‚G]ïJL‡ü!IÙS2 Ab²œ ¨‘F{鮹'üvºí( ö~R¶ ~{‚~¯Öå’ÄÚÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ý,oØaÄFœ‘?ëžû<œ¢A²œ ¨‘F{鮹'üvº¨‘F{鮹'üvºÖå’ÄÚÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýÁúåŽ!B\“ÖçXn[ʤA@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Öå’ÄÚÿð‹+aue_read– hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýØ¿©N»Où‡Ajˆ´ø§¦A0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Öå’ÄÚÿð‹+aue_lseekˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýD¯ +F{鮹'üvºÐù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±Öå’ÄÚÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý6 +%Ì‹Dg‰†‚±¿ŠÛ¨A$ªœ ù‹°âFzé®·'üvºD¯ +F{鮹'üvºÖå’ÄÚÿð‹+aue_fork +arg_pid1384hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1384ppid1282execbash20ÜS7[AIF¬•pd± (ý¥ ¦Ž–Er°@¨Q¥åýªA²œ D¯ +F{鮹'üvº¥µîgµÑUµg¨eµÑc'Öå’ÄÚÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýX]$9KA˹HÙ=$Ôìz¬A²œ D¯ +F{鮹'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Öå’ÄÚÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýª%i¥'K¬1ꦧ˜Uî®A<²œ D¯ +F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÖå’ÄÚÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý‹šÒ0¨CL ËCìL¨6´°A@²œ D¯ +F{鮹'üvº‰oý©äÇU¤©A)Eǹ Öå’ÄÚÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýsÍ®N•FK‚|€ÓcÝ$²A²œ D¯ +F{鮹'üvº‰oý©äÇU¤©A)Eǹ Öå’ÄÚÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýTg³Ý´»Ož¨ùW¬JÕ´A<²œ D¯ +F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÖå’ÄÚÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýIú§ÎoL +K¤‚<$ƶA@²œ D¯ +F{鮹'üvºXꎩð®…\®ð@JÌ…¼âÖå’ÄÚÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýbîÙÿhÜLF“ÉpÚC]ée¸A@²œ D¯ +F{鮹'üvºXꎩð®…\®ð@JÌ…¼âÖå’ÄÚÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýëøiŠr®A³³eq9òžæóºA²œ D¯ +F{鮹'üvºXꎩð®…\®ð@JÌ…¼âÖå’ÄÚÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý™èXÐŒJ)F™xÄ/¼A<²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Öå’ÄÚÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý7ž#['Nµ…Äšíl_w¾A2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÊ1S4™žLÂŽ£+¢‹Õ³.ÀA2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý’‹¾86KWþ(g¦­ßÂA2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýócÒk†¦J‘L>ÇÏHN,ÄA2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýô´±³@KjŒñ„þfr›ÆA2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýûsÔ£RôH™·ê-ÌìéRÈA2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¶fê£pEϘó¦x@‹×ÊA2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýø›´Ã¨I|µG½uuYaÁÌA2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý›ý`R8Aí¿ ÷‚¯›¥ÎA²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÝì(C<EôA@èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+aue_pread†.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxÃs*½ H[»ËòV öAb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºžööÝáÿð‹+aue_writeð.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýëî×AiéÉ]ãdøAbèœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡ážööÝáÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýC„©Üh1NÆ… ë¹fQúA@èœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V žööÝáÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=•ûÝùiAd¿©6X'¢ÇúüAJèœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºžööÝáÿð‹+aue_sendtoà +ret_msgid521hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”·ß°¦¬Ižä^«äþADê› µ dôFzé®{'üvºµ CjFzé®{'üvºžööÝáÿð‹+aue_recvfromà ret_msgid521hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýNժâõA*µÄcs{ºm€Bbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKžööÝáÿð‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý{Ã鮜HÑŽ\öæå')G‚BD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºžööÝáÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[ áDÚJü›½ìóÓ€Õé„BD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºžööÝáÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´xy3ͲBP„µ”u‰åQ]†BD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÐ¼ùæáÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\ëÆí†AW®H:ù¶øûˆBD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÐ¼ùæáÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=ºcóAƨåzôu— ŠB²œ D¯ +F{鮹'üvºD¯ +F{鮹'üvº¬Ý²âÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý ¢ãVCb…ð¿… º¶ÈŒBbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¬Ý²âÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýµW0s³ƒL²¦g?zf¬ŽBbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¬Ý²âÿð‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýßµ¹F{鮹'üvºÒù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±¬Ý²âÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý“4·&!JE¡»Tá©B$ªœ ù‹°âFzé®·'üvºßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_fork +arg_pid1385hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1385ppid1282execbash20ÜS7[AIF¬•pd± (ýyÐÿ–†KºuÙŽ¢“U’B²œ ßµ¹F{鮹'üvº¥µîgµÑUµg¨eµÑc'¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +ýêÝ•ÓV•KóÆÓq20 +ÜS7[AIF¬•pd± (ý @¡@Ht”Sq3a ”B²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓqz/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¬Ý²âÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineJ/usr/bin/env bash ../Bash/signal.sh appid1337execbash20ÜS7[AIF¬•pd± (ýè¹½1­=I1½˜BÍÇés–B<²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýÿ@CjèÕI‰(lóaJŽþ˜B@²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý0”‹¥¹Gnž“­Õ‹˜­”šB²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýl¦F¢´[DŽŒkð(}$CüœB<²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýÓYxà-nMª“5Ý@@«> žB@²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýžÉAßLó»ÇA‰é[¨ B@²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýšß{'Š™B8™»ï)aïq¢B²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýõýÿ[â•J5š©=ˆ¶«¡·¤B<²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¬Ý²âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýÅ•ü¥H˜Fä…«]@­•¦B2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý‰V$$IACñ¿Ì:ÚoW¨B2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýÎá•ÜÚÝFµ‚W>OÄc˜ªB2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý{õÜÎôIw¦=PGRð}¬B2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýwRYDÛàM˜Š·Ÿæ$½®B2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý_/ÚÇsNP³befà]°B2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý!zGýNÙ•rÄó²B2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýw¾HnKp²uMÔ$”W%´B2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýgqÖpWI€›07Ú̱½¶B²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýME²ÎH@FÓ†<Ú@¤øíP¸B:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýÉÞø–@H¾'Š˜.{ÁºB:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýÎc#ÏnA «0acŽð¼B²œ ßµ¹F{鮹'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¬Ý²âÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine0bash ../Bash/signal.sh appid1337execenv20ÜS7[AIF¬•pd± (ýy`œ3k«E¿Ú .½¾B<²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýwªÒ!q£Bø• ýj¡îÀB@²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýZ§ÌƒÖÍDQ¶ŠBêØÂB²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýœ$pŠ0xJM¨r's³XÄB<²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýÈ»LÑL¶EB¸ 0ïbw„ÆB@²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý~ú)Ÿ­EJqµ×8ø»‰îŒÈB@²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¾á)Í"©@æ®*»` ýÔ ÊB²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý«#6¯ÅžC:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýCô3EýaÎ j„t C:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýøøµ0ØK’Ü^û~üó¢C:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýZpщdÄIÀˆ\«Ú×e÷Ž¤C:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýLC+P¬BA¿ŠŠÑ~„å'r¦C<²œ ßµ¹F{鮹'üvºí( ö~R¶ ~{‚~¯/dev/tty¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýc7J|äM‰”yQ8Í·oT¨C²œ ßµ¹F{鮹'üvºí( ö~R¶ ~{‚~¯¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýànŽ6‘°D™˜6\£XþìªC<²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓqz/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýHõ,h6@ê‰É{@ýó9i¬C0²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýå-XòùE´¶Š†óf….®C@²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý07·Q’tDõ¶\`wn—X°C0²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýqRÄNw˜!“gèJ²C²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýˆ zúHu®Ib9sÒåê´C"²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¯1;Þ€/Fœ5LèívÕ¨¶C"²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¿®uo³Jî€|ôª¸C0²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý·ëع¨&@¬®Ê€qlÒF ºC@²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_readÂhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý”[?ÜmžLy±¢ð¨þÜQM¼C0²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_lseekêhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýà‡çF{鮹'üvºÔßµ¹F{鮹'üvº°äÿ§®]vRS<„äB±¬Ý²âÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÈîüí1ÛN§’t¡T<¹Ø¹¾C$²œ ßµ¹F{鮹'üvºà‡çF{鮹'üvº¬Ý²âÿð‹+aue_fork +arg_pid1386hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1386ppid1337execbash20ÜS7[AIF¬•pd± (ýWüÐ’M«Ÿe¸¥6FöÀC@²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_readXhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý¹³"|}§@²¸ ðÀ)”äÂC0²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_lseekŽhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýà’„F{鮹'üvºÖßµ¹F{鮹'üvº°äÿ§®]vRS<„äB±¬Ý²âÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýôòï—ŠH²³Õcý[—£ÄC$²œ ßµ¹F{鮹'üvºà’„F{鮹'üvº¬Ý²âÿð‹+aue_fork +arg_pid1387hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1387ppid1337execbash20ÜS7[AIF¬•pd± (ý»ØÖ~O,Ž>$Ty#¶óÆCàœ à‡çF{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1385execbash20ÜS7[AIF¬•pd± (ýZH(ÊLGSœÒ¶»ÇEoÛÈC<àœ à‡çF{鮹'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/null¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execbash20ÜS7[AIF¬•pd± (ýu‹dLoH·¿RoG`IÊCàœ à‡çF{鮹'üvº3P ÓK€X‹Ó«·Ø€‘^¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execbash20ÜS7[AIF¬•pd± (ýæ5ËÁ#ËO4 æq-ÉÕÌCÖœ à’„F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1385execbash20ÜS7[AIF¬•pd± (ýSõÍÞD§·7M¤H…mÎCÖœ à’„F{鮹'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¬Ý²âÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1385execbash20ÜS7[AIF¬•pd± (ý¦0¯ ÇFû¢C‡ÍY{4æÐC<Öœ à’„F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ý»ÙÒ¥0õLb—±VÖCÒC@Öœ à’„F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýäÿŽtõJAï¥Ñh0ãÕðÔCÖœ à’„F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385exec +sleep20ÜS7[AIF¬•pd± (ý½•¡¸Aù‘geIç§ÖC<Öœ à’„F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýžHX2„D쎻ö°ô‡¤wØC@Öœ à’„F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýÊŽÝúóÑGè€üw{'ÐóÚC@Öœ à’„F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýñUðSçÛFá•#iâèYÃÜCÖœ à’„F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýIá]öåAK·“OZÕùW ÞC<Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¬Ý²âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýžbïn˜¶D¦cÙãnVàC2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýÓ]–8rB”;îù½M'âC2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýì‰1Ä›Ny¿p'غ!èäC2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ý~rò[†Oœ‚%èh2_^µæC2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýH•ŽÝ™Lª‚˜s–Ïâ¶yèC2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýÕö‹…j˜Gðª™nˆÚ¢êC2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýã.ˆK\Žo°Û>…ÌìC2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýç|¿#O¦­åð‰ð½:îC2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ý«³n¦B¸–Ç„7ûJ¸àðCÖœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385exec +sleep20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙŽŒü™9·™â‡DŽš[bwº:òC:Öœ à’„F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýÅ„&ºNÀG7±MjcaÖy]ôC:Öœ à’„F{鮹'üvºŽ£˜–âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385exec +sleep20ÜS7[AIF¬•pd± (ý +÷ˆ•1•®q^®•Ä­®q‡20 +ÜS7[AIF¬•pd± (ý.ÐVH¹·Ü÷¶.Ë®öCàœ à‡çF{鮹'üvº÷ˆ•1•®q^®•Ä­®q‡v/usr/home/user/ripe-prov-tests-master/Linux/./signal_server'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ž£˜–âÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./signal_serverppid1385execbash20ÜS7[AIF¬•pd± (ý¸åQ„ÌâDñ’éï-µ×šøC<àœ à‡çF{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confŽ£˜–âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý\çñ‹XãDz˜.M9ÆD/oúC@àœ à‡çF{鮹'üvº‰oý©äÇU¤©A)Eǹ Ž£˜–âÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýáäøFg³uÖÐçüCàœ à‡çF{鮹'üvº‰oý©äÇU¤©A)Eǹ Ž£˜–âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýY±6Þ$>CIµ«ö¾^+eiþC<àœ à‡çF{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsŽ£˜–âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýPb8`1H²²s¹r!NÏL€D@àœ à‡çF{鮹'üvºXꎩð®…\®ð@JÌ…¼âŽ£˜–âÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýl|:á,FCºÞ‰3L¶¨)‚D@àœ à‡çF{鮹'üvºXꎩð®…\®ð@JÌ…¼âŽ£˜–âÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýÐf‚iG¥¡³)£ã Æï„Dàœ à‡çF{鮹'üvºXꎩð®…\®ð@JÌ…¼âŽ£˜–âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý +†sya–„[–a½WÛ„jÙ20 +ÜS7[AIF¬•pd± (ý"Ø>Ò–’A£œzº †D<àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙ(/usr/lib/libc++.so.1Ž£˜–âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýYkíòÔD@­‚~1ÏéÔ‡ˆD2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ým”u‰"E8ŽÎ¿ b‡ËÑŠD2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýo‹g„’ºCi˜ ®B‘þG%ŒD2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýx¿Ž>ÙA…©Á^`ùÚcóŽD2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý#Ý"ÙíOZ¥dý”ÑôD2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€€Õ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýO[Ï#„ZB4´Žót8Ó’D2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€€Õ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý]28|#«FÁ»0] ÐóÏ”D2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€Àˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý£çò*B¸‹¼¨"Í–D2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€Àˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýÙû=@)J¼‘±9«ÇUw9˜Dàœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý +_Ì>m­R­>Á­ËP20 +ÜS7[AIF¬•pd± (ýóâ*;ÖD>§Új“'[ JšD<àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËP$/lib/libcxxrt.so.1Ž£˜–âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýªæÞtD…®­ +ÇžÕ3œD2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý±§áXF,ŽŒQjÜI¤¹žD2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý.~Sã8åDŒôþ%gau D2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýØ‚ m»DŠ¶uIѹ¤•²¢D2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý}Š?Z2w@Õ“6‘Jz6Á¤D2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýÇ3PºXL‘™/Û¡¸Á¦D2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý³“åKë@ùµ÷¤°÷²Ñ—¨D2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý×R¤ðéIý³–ß¹r„ÒªD2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýböaÍ;TA¬†‡ SŸ- +Ù¬Dàœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýÙ\Oªž›K•4rK<îz ®D<àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜/lib/libm.so.5Ž£˜–âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý,;pü¨M%²ñºU´D2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýËHLøLÿ„Ž•(áøá¶D2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýE'¬ÅüÜ@ö ßТ2߸D2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýÍÚ Nü«O/¼2±>ÅQ³õºD2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýu‰ öfXG±­L›<ѼD2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýyÀhŒbAd°ICÜîù—¾D2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýˆõöXò@Ùµ|IˆÆr•ÀDàœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý +§ÌÃq#DT£°5DmP20 +ÜS7[AIF¬•pd± (ýcü(šC¤§D킪ÂD<àœ à‡çF{鮹'üvº§ÌÃq#DT£°5DmP$/lib/libgcc_s.so.1Ž£˜–âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý\2&°ÇIkœ²Üâs×SõÄD2àœ à‡çF{鮹'üvº§ÌÃq#DT£°5DmPŽ£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý`št°Ø§Bø‹[”z#xSÆD0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uä­æÿð‹+aue_lseekô€5hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡6•.O¯†¬¨}Õ‡ÈDÖœ à’„F{鮹'üvºà’„F{鮹'üvº¸‰¸ãéÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385exec +sleep20ÜS7[AIF¬•pd± (ý@èKBýôM· Î¼á ÙÕçÊD<²œ ßµ¹F{鮹'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.db¸‰¸ãéÿð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýO4œMò vÓ5ýÂÌD@²œ ßµ¹F{鮹'üvº–Ø%™wyïR¹wT’ï9¸‰¸ãéÿð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýŸ !Ö‰@RŸsœã<ïQÎD@²œ ßµ¹F{鮹'üvº–Ø%™wyïR¹wT’ï9¸‰¸ãéÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýŒï tH ”Ú/¡‹ù˜ÐD@²œ ßµ¹F{鮹'üvº–Ø%™wyïR¹wT’ï9¸‰¸ãéÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýö¡¨³g/D–¯IOð±ÒD²œ ßµ¹F{鮹'üvº–Ø%™wyïR¹wT’ï9¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÑnN(âïI‚Š™¢¬ÑªJ`ÔD@²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¸‰¸ãéÿð‹+aue_read4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý|¾€F{鮹'üvºØßµ¹F{鮹'üvº°äÿ§®]vRS<„äB±¸‰¸ãéÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý‚K;“éîHôÞ™L¥©ª¹ÖD$²œ ßµ¹F{鮹'üvº|¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_fork +arg_pid1388hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1388ppid1337execbash20ÜS7[AIF¬•pd± (ý”ߊô«RBâµÃ×7aãØDÖœ |¾€F{鮹'üvºýêÝ•ÓV•KóÆÓq¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1385execbash20ÜS7[AIF¬•pd± (ý +td:Ñ7ø³V¸7Ç‹¶³EÒ20 +ÜS7[AIF¬•pd± (ýÀ—æ?öåD|“–0í.C}ÚDÖœ |¾€F{鮹'üvºtd:Ñ7ø³V¸7Ç‹¶³EÒv/usr/home/user/ripe-prov-tests-master/Linux/./signal_client'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¸‰¸ãéÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"./signal_client appid1385execbash20ÜS7[AIF¬•pd± (ý‘GönfG!’aKÀCJÜD<Öœ |¾€F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¸‰¸ãéÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýFÛ–gðJ¤§Z• ò€uBÞD@Öœ |¾€F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¸‰¸ãéÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýXéûe4LŒ£ÆÃÒþ‘vàDÖœ |¾€F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÛWNj6"H'¿´LŠq(ÄâD<Öœ |¾€F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¸‰¸ãéÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý'f¯@§¯­ÈŸ„ëبäD@Öœ |¾€F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¸‰¸ãéÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýR‹k€MóMMÐú'1>‘æD@Öœ |¾€F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¸‰¸ãéÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý‘"‹ÇE\ªoüwär©6èDÖœ |¾€F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýï\i¸ÊE[³uºgBŒRêD<Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ(/usr/lib/libc++.so.1¸‰¸ãéÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýßDûk¤F5¶­™Î"xìD2Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÅóÈ'(+F3‰íõÔœŸà0îD2Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÙ +TQG[¢8êÜûÑÔ€ðD2Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÁ»:OÁ£Õ©WŠ, òD2Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ†êúíW³ÞC>¤ÃË™ðòYqôD2Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_mmap€€Õ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýfêb:x@’éWöUÄöD2Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_mmap€€Õ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýê®àã(*A$§Q?YâÉ#øD2Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_mmap€Àˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýNÞÜ—Í3Oð´¾çïÆÖnúD2Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_mmap€Àˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý§D­hz+JD«Ç®:JfüDÖœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý™öC úÐB¬$Š N‚3:þD<Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP$/lib/libcxxrt.so.1¸‰¸ãéÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÉTzÇb.@–¨õÜàš€E2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýp§¥äúè@•µ$P¢¹‚E2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýù¿ÛÙÅIõ¢É!Pð­\Q„E2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýWC"÷CÓºF[g5¤§†E2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý$¸ÃQsžOuŸ&÷mÍ[×׈E2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý 5D†µF©†¨ªCC4ŠE2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý¼ %NG¦}ø‹ˆ±ŒE2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýä&ÉDµÿEO¯–t®xÔêŽE2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý:Ú#Å)Gí¥<ƈI{EÖœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýò°Ç°dmN£•û®ïßO’E<Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜/lib/libm.so.5¸‰¸ãéÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÞÜ6CF»ó/è£6s ”E2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýó÷Âs ØIfž«]-$¹l–E2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý[òs©£kAè·üE^ô½öG˜E2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÞ¸ôg ÎH„«'¹’¦IvšE2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý‚‘pƒeGð„ç?R¶éJœE2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý !‘×]ºAàžK”Dƒ¬žE2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý#<NÞN ³ÿd™„ +釠E2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÁÕ h HÜŠ ›xßÈn¢E2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý³K*ÎNâ…·¡Æ܈‡ï¤EÖœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýŽÂ-Ž¹¦BÜŽÇ$êÂG±‚¦E<Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP$/lib/libgcc_s.so.1¸‰¸ãéÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý5ãY8Ë‹M¤ ‡Hì׆ÖÞ¨E2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý`Æ¢Ä +EįŠÞÔº¿ªE2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýôaϹ ÞN{žvff›èM¬E2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýøýS +REq­eÓ.~á`®E2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý•ÂÄñ.Bw°žMH]àY°E2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€€¼ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÐ[ôCŽG³¿Nóû{܃²E2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€€¼ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýȯèÒC~¿+ôH¾Yù´E2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýBcs‚qŒL…¤gšL‰ 0¶E2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý·:%©:EW¡ DQÔPn¸EÖœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý§Þ†ü¼rJñˆ +Xú–? ºE<Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¸‰¸ãéÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý·ˆb˜LA—|Ìéy)n¼E2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýD5 8GȺÝø¹<­›¾E2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý©ðmÕAw±5üåÙ—FÀE2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€€Ä arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý› ³OA%OÅ‚µ¢j-DZÂE2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€€Ä arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýµYüça6DÛ—¿Õ«£†ÄE2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€€ƒ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýø<áƒyO\Ÿ±eƒ¦òÆE2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€€ƒ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý…ÄÌÚköDˆ1iF¼‘6\ÈE2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý‡v(©=@;‹â†ÈÏsÊE2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý˜Ö’ªD’ +¼Æ÷m¸ÌEÖœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýñ¼,ÞkeFÌ…ÇÑÕ›"ØÎE:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý­Ü±Wüs@ µ‘œ‚à­ÐE:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý6ÌHŸ7A뵉7k•rÒE:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý×=øy>B +ªóÂá7ÉhéÔE:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý5ü´ÉL˜˜0®ÎgÖE:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýˆþæ,eOš»L¡Þ,vÛ(ØE:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý +Ó‹IŸ_xUŸŸ€YExž20 +ÜS7[AIF¬•pd± (ýË¡½zÆHŸ¯6à»WöÉÚE<Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExžf/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp¸‰¸ãéÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýáp†DH"‡Ú_Þ{;ÆÜE@Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý–m 8þ@®†±V 4OíÉÞE@Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý¢“ÙƒžD5­mœ¶àE0Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýX»LÌí;M®Jgî»[âE0Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýBf¯Vï´‹œ»ŒF ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ýæ¥ø¥H ‚xQù(¹oŠF@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶6´61 KZ¨Œ­êÖT¸ßF ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ýU0k@åHq¢Ë_²¸z·ŽF@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?]Í÷E‘¤ñ5æµ/”F ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ý¹òFÚ8AX Ú’ÀCÒ’F@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄÏ׊³´HŒäÄl‚ÊF@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadŒGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýžÓ‚ZF€¾l´^jÈ®ÌFbêœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬ÀµÐðÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®u†dsNü‚÷4`íxqÎF@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýK¨Ù.ðJÕ±ðߌð6q„ÐF@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýKŒ'ÜtbA±Gú§öÜ\ÒF@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_pread¸BhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&l¸o4KœŽ1»FÑ÷‘ñÔFbêœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬ÀµÐðÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOæÇHj-Dzœ´¦v[õÖF@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1ÉN=K3¶ï*¢ú:ãØFJêœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¬ÀµÐðÿð‹+aue_sendtoà +ret_msgid526hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€sB_R)Jy BÛ~úMªÚFDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¬ÀµÐðÿð‹+aue_recvfromà ret_msgid526hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý…ö_CiWCq¨>÷mîä³;ÜFbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¬ÀµÐðÿð‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýø"Ö ON¾€qîý…1ÞFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«¿‹> I¹°‹ 8TÜ!™àFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿¼±.îºHú7Ù*w£5ÜâFb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_writeöFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1÷Žr\“Húæ¹>¡ÚäFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýt›ö¹ç%A‰ª Jšï?æFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…ÑOXSgMbŒ)¶*ÔAïèFb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_writeöGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽ4¹»1ˆK•CÂÀOêFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèÙ³ãðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýuÒ™¦¸F—v]áCyÖìFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèÙ³ãðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒ'ÒtšŒJší"[ŠöŠïîFb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèÙ³ãðÿð‹+aue_write¢ChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZ~u ÔÖNN Ø/Û15kðFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°©“íðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦= XÂŒFÂL§lì© ¼òFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°©“íðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›LþíO¬šaN_‘µ ÜôFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°©“íðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]>™[w£FF»hú¬7!Å·öFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°©“íðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.‘™qÈGt˜9Sß{ê}øFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŠÄðùðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýd„”KôF…—\6…NòÞúFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŠÄðùðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«‚‚œI¹±²<]“ؼüF²œ }þÄF{鮹'üvº}þÄF{鮹'üvºœýö¦ñÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýQ§ÍÇIÚ¡Ë!9®ÀþFbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯œýö¦ñÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýÌ ¯<ñJ\·h9½ïôê€Gbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯œýö¦ñÿð‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýðF{鮹'üvºÜù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±œýö¦ñÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý=§Ñ2êDY¢»iæþ\*‚G$ªœ ù‹°âFzé®·'üvºðF{鮹'üvºœýö¦ñÿð‹+aue_fork +arg_pid1390hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1390ppid1282execbash20ÜS7[AIF¬•pd± (ýü_P¤ËvJ½·¦‡u|u6„G²œ ðF{鮹'üvº¥µîgµÑUµg¨eµÑc'œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +d‘´Ú.#W®Ú›ÊÇ#”{20 +ÜS7[AIF¬•pd± (ý•K!÷k“O@„£»8–J†G²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{z/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1œýö¦ñÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineJ/usr/bin/env bash ../Bash/stream.sh appid1337execbash20ÜS7[AIF¬•pd± (ý•‘&¦ùÏBõ¿¸‚ÖшG<²œ ðF{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýP3ÍçähHû¸9ãžm‰c•ŠG@²œ ðF{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý/ûZ;€ÔJ™‰!4>VïŒG²œ ðF{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýÀ–Åþê@IúžÅJŸ¥ŽG<²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýW ¤}‰dO4–ø„.- Ô?G@²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ým02רÃF/†vfgØkÌ’G@²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý)A·~N €³á‡_Ä~Ø”G²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýHùî´†QHVƒn¶(P¶ˆË–G<²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7œýö¦ñÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýèÓJÐïHö¼õ3²Ô©˜G2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý‚ÍsýaDI‚ŒY›´>ãišG2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý½g0j,L ˆÙ‡ U˜%WœG2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ†Îú;¯i'7[L~‘ (ˆNYnZžG2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýJSkpXK¹µØl5 "-Æ G2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýƧ¤Ì£^MÌ …_·ˆþÅ«¢G2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý ¾ÎTGÇ¿oüO¸ª\n¤G2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý¯XkR†¡HÂŽ¥U–ÈÈ$¦G2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýõMˆÔ­0GSŽEßþäBꂨG²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý}`0vwMo•a)&¨ ZªG:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýmŒ¢Ÿ­:Ja˜Ägixó¬G:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýS£ï¦ÀKù”à U(”ŒÜ®G²œ ðF{鮹'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1œýö¦ñÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine0bash ../Bash/stream.sh appid1337execenv20ÜS7[AIF¬•pd± (ýõ¿•°»BoãÑK…qc_°G<²œ ðF{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý¤“3eûGÓˆrüt"£u²G@²œ ðF{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýøÕ :N2E­®î|6­Ñìð´G²œ ðF{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÎ:9 ¡M:©—÷…¾û¶G<²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý›Ô²F¥/vr@Õ£¸G@²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýžÊ‹èÝ-@®¥Ämw‹)ܺG@²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý+”þ¼í•Nñ’ˆm‚<謁G²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýî5ΰOëBì˜e¸E¦Ò¦O¾G<²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8œýö¦ñÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ým4ÇÝÛDVž¼>`¡AÃ’ÀG2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¼³š!íÞFT‘$ÿ6érŒÂG2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý«_X œIƒ¡Øô,ŸÄG2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý7BóAJ–@O½?ëª/©’¼ÆG2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý`P—ôÓL¦îçG¤mCÈG2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýty`íC‚EÚ²uèŸHžÊG2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýáÙRk1·J'µlYY‚X»åÌG2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÊ‘é©!K ¤àÒúø0*ÎG2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýc€Ý“HŒ¶èBŸfÊÐG²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÒ‹â ¬îAîœa+§ÖYXÍÒG<²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8œýö¦ñÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýàøÅÜ*CCt‘OÛ9ïçŸñÔG2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý§‘_¶ºJO‰/à¾ùUÖG2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýr+Š÷¥hCcªÄÔVG8ÅØG2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÏí‡9åªIí½kKŽsÖÖÚG2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý;`¨¢0ÕKkŽ,I(¼ðnÜG2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý GÔƒÌ'N¸Iù7'l‡ÞG2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý4‚ÿDF·³»›”:LöàG2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýE=Þ×ÇMY‹—«lÞ»ŒÛâG2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý-ÎÖ~wÕHE®–Tï®nNéäG²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý:t©]äFqºØöÇ +¶‚>æG<²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1œýö¦ñÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýÏŸºÀûxJ»šÂŽ…¿mnFèG2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý®ú%b B.“É9RvýêG2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýè™Z K•¯’…άÏ8…ìG2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýR¯š>Kg†r»=}šîG2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý\kü62HG 1hBïÁ9ñðG2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÞô¥°UMK£º|Ý®ÿǺTòG2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýP D;Iv‚þä9<ÀnâôG2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýôcéJô½NØšÔº éLAöG2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý€›ðõA.°H×Æu¬øG²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý,y¸†n4D=Š™eÞq¸žúG<²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7œýö¦ñÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý-F‹ÈCóµ9€ ‚(5õüG2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýøKŽÌÖEŽ¨“kÌ„qâþG2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýQvT3ª+F9ƒØÃ/ “;€H2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÂÉùüDt™HP"8s ï‚H2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¤À“WBh€ÅZ6ù„H2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý ä_C5šJâ!Å»ã†H2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýðÀ¦EiCŠ¦4%èI!ˆH2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý†ù‹#A„I\º©åC_6îùŠH2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý3â©àa/HЬîÙ“ûyîŒH²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýOÁD›êLGŒS_öò$ŽH:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý*O¤mƒG©¨.ü·6H:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý˜'ÈõsJ0‘Q 7Î@¹W’H:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý@ÖG&K߉iXûÕ‹ß”H:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý৥’@)ˆ1 3ã?(–H:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý›ÙʼJ §R£ïïÏ"m˜H<²œ ðF{鮹'üvºí( ö~R¶ ~{‚~¯/dev/ttyœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý¸¹õr¼Fߣž½m¹£ÜšH²œ ðF{鮹'üvºí( ö~R¶ ~{‚~¯œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýVJ_r}KìµÀ±¤nÉζœH<²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{z/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.shœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý¬ì—Ð&ÄN@«°B.>€ßžH0²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý÷T±W HL+œ’þ1½öô H@²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý3$çK•…írNçº)¢H0²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ–ÊúòíUëäGÁ¨ËmgŽê¤H²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¨°ŸŠO䨳 rY «¦H"²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¦ôŽñ\–HJ¢ƒÇBŠ¯¨H"²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýLÛÄoY Mņ(R«žMFªH0²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýbëØr‡@,…)1ÙaP¬H@²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_readÄhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýŸÐî„?Bòœ‰êþ"åþ®H0²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_lseek€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýÞF{鮹'üvºÞðF{鮹'üvº°äÿ§®]vRS<„äB±œýö¦ñÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý¦î´¸—=M ¾ \R•°H$²œ ðF{鮹'üvºÞF{鮹'üvºœýö¦ñÿð‹+aue_fork +arg_pid1391hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1391ppid1337execbash20ÜS7[AIF¬•pd± (ýÉÿ\KÃ.C`¦¾ôDÝ°Ë=²H@²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_readDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý2\E£cÖ@x‚¢ +¬Ï?e„´H0²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_lseek¤hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýè›F{鮹'üvºàðF{鮹'üvº°äÿ§®]vRS<„äB±œýö¦ñÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý’µc»œçM!¬I°á/»‹¶H$²œ ðF{鮹'üvºè›F{鮹'üvºœýö¦ñÿð‹+aue_fork +arg_pid1392hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1392ppid1337execbash20ÜS7[AIF¬•pd± (ý:¸«íT=M°’Jò£v˜¸Hàœ ÞF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1390execbash20ÜS7[AIF¬•pd± (ý_OSŒÎÀHO¢Œ +OæQºH<àœ ÞF{鮹'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nullœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execbash20ÜS7[AIF¬•pd± (ýßjrM¬'×Nx¼Hàœ ÞF{鮹'üvº3P ÓK€X‹Ó«·Ø€‘^œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execbash20ÜS7[AIF¬•pd± (ýD1Û¨¤VHª¸Áüp=Ri›¾HÖœ è›F{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1390execbash20ÜS7[AIF¬•pd± (ý#ôBÎfñO¶¡µ7Ošº¬ÀHÖœ è›F{鮹'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1œýö¦ñÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1390execbash20ÜS7[AIF¬•pd± (ýà¢J ¸°Kn ¥9¶ÂH<Öœ è›F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390exec +sleep20ÜS7[AIF¬•pd± (ý +²w”\·²mÄŒ”E‰20 +ÜS7[AIF¬•pd± (ýe£µ™Ç]E÷¦²7sùH}ÄHàœ ÞF{鮹'üvº²w”\·²mÄŒ”E‰v/usr/home/user/ripe-prov-tests-master/Linux/./stream_server'ìAzX™¦}˜¹(/libexec/ld-elf.so.1œýö¦ñÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"./stream_server appid1390execbash20ÜS7[AIF¬•pd± (ý9ÉúJXƒ˜¾'˜9 ÆH<àœ ÞF{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýc Ù25B>”Ž-xבÈH@Öœ è›F{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390exec +sleep20ÜS7[AIF¬•pd± (ýë •« H“³Ú—_êÊH@àœ ÞF{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý•ÿIöÇA­µi—ñlŽîSÌHàœ ÞF{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ýÝÔt:EûG –£Ö³/ŽÎH<àœ ÞF{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý{ï;±ÛJ¾šRÈÙ»HÐH@àœ ÞF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý)UÛ7ýêKÌ…díÚ!¨5ÒH@àœ ÞF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý:Ìo£ëªJBž/g mbÆÔHàœ ÞF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ýé2gäH|”åNÆÅÊDÖH<àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7œýö¦ñÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýD×åÙI8 Wª ÖIØH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý +DSXjIä“Æ©ëë@59ÚH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý¶}8Hà·EA–šÁp°…mÜH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýü žÛTH›°çTôl|i}ÞH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý‚JÈ ÊG:˜í¹éÁÿgàH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýJúxOõXFÒ«©rÇí¨mâH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýæ ¢£üÁKœ™ë}M”ÇšäH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýP㞘FLm¶Ÿƒ\Üé†æH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýÃñe´W”Ah‘U/ýO²üèHàœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ýWÞâ‹ß@»ì]'ËŠÇêH:àœ ÞF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ý¿tn8Ú^JË·røgå=JìH:àœ ÞF{鮹'üvº„ñÞ¯ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ý +H F{鮹'üvº20 +ÜS7[AIF¬•pd± (ýÅnhb÷ŸN؈{ÛWîAîHàœ ÞF{鮹'üvºH F{鮹'üvº„ñÞ¯ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ý +KÕF{鮹'üvº20 +ÜS7[AIF¬•pd± (ýºð*f-ÁF°˜1)¦Ÿ{WðHàœ ÞF{鮹'üvºKÕF{鮹'üvº„ñÞ¯ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ýO3×! îD'¤çéfÚTûòH0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uøõñæõÿð‹+aue_lseek¢ 8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQbö\ÀG〠vTïrÃôHÖœ è›F{鮹'üvºè›F{鮹'üvº¤›„óøÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1390exec +sleep20ÜS7[AIF¬•pd± (ý܃NñJmL"ž©¼–0¯§öH<²œ ðF{鮹'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.db¤›„óøÿð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý¶½øŸàÄG¨ „ÎÒÔ´møH@²œ ðF{鮹'üvº–Ø%™wyïR¹wT’ï9¤›„óøÿð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÐG5Á‰D›Sgtˆ!úH@²œ ðF{鮹'üvº–Ø%™wyïR¹wT’ï9¤›„óøÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýS8&ÕL‡I™1±X)üH@²œ ðF{鮹'üvº–Ø%™wyïR¹wT’ï9¤›„óøÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýl»Do‹îG±¶ÑÕº´/þH²œ ðF{鮹'üvº–Ø%™wyïR¹wT’ï9¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýe_ä—lqAöŽ^»°÷€I@²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{¤›„óøÿð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý²›=F{鮹'üvºâðF{鮹'üvº°äÿ§®]vRS<„äB±¤›„óøÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýé Ñ÷ðmD¦Ip—®n¤‚I$²œ ðF{鮹'üvº²›=F{鮹'üvº¤›„óøÿð‹+aue_fork +arg_pid1393hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1393ppid1337execbash20ÜS7[AIF¬•pd± (ý)åýG@Ñ­LöÚ‰£A5„IÖœ ²›=F{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1390execbash20ÜS7[AIF¬•pd± (ý +¬ø„( žuUž Üo¥u20 +ÜS7[AIF¬•pd± (ýÏìwgLú»á©hõH†IÖœ ²›=F{鮹'üvº¬ø„( žuUž Üo¥uv/usr/home/user/ripe-prov-tests-master/Linux/./stream_client'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¤›„óøÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./stream_clientppid1390execbash20ÜS7[AIF¬•pd± (ýr3ü Ô3Eu‰€dØŠ¹ˆI<Öœ ²›=F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¤›„óøÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý`ÐX7èOFªÇ)iüÙŠI@Öœ ²›=F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¤›„óøÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý­êûF5ža4tl?2ŒIÖœ ²›=F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ý›ØÙe.Hý‘êÖ,Gc¶ŽI<Öœ ²›=F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¤›„óøÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý¬ùÁ]Eª” wBQ™I@Öœ ²›=F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¤›„óøÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý¹Nžsk‹A¡¾ÿÔ€á +¡’I@Öœ ²›=F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¤›„óøÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýÉg¯@EF»¡kÕøH”IÖœ ²›=F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ýý;ÕÄŲM‹•-]ÎWTÕ–I<Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¤›„óøÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýû=½˜;@b¢üæÙÁ/E˜I2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý¼¦c¢1J‚»±S’ýÇšI2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý´¾v_VMQ P•,ì1g&œI2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýFl€)Y²Cx‰hÊE_IßžI2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýrQgÅžJX ¨}³5>° I2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýÂdE‡×FÀ¨&Î'C¿Þ&¢I2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý¨ŠDyOö‚Ãü.©Œ‰¤I2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý9™R-ˆjK¹–*×na|Q¦I2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý <#yrÇKšô!¶‹¨IÖœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ýABåŒg>B—¼{z9kb]ªI:Öœ ²›=F{鮹'üvº¤›„óøÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ²’üœ-šœ»qIw³´1VÊvάI:Öœ ²›=F{鮹'üvº¤›„óøÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ý +³ F{鮹'üvº20 +ÜS7[AIF¬•pd± (ý;Z_lE]¦ÙƒMôiLÅ®IÖœ ²›=F{鮹'üvº³ F{鮹'üvº¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ý +³4F{鮹'üvº20 +ÜS7[AIF¬•pd± (ý$ܱgØÙIöºñÆ‹[ól°IÖœ ²›=F{鮹'üvº³4F{鮹'üvº¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ý³ +×F{鮹'üvº0.0.0.1˜¤0.0.0.1Ä620ÜS7[AIF¬•pd± (ýO/F{鮹'üvº0.0.0.1Ä60.0.0.1˜¤20ÜS7[AIF¬•pd± (ý³¯F{鮹'üvº0.0.0.1Ä60.0.0.1˜¤20ÜS7[AIF¬•pd± (ýÄ8d!º Mæ¯*BÞf“½È²IÖœ ²›=F{鮹'üvº³ +×F{鮹'üvº¤›„óøÿð‹+aue_connecthostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390address::1port3490execstream_client20ÜS7[AIF¬•pd± (ýž‡O´ãM¿¼ z du4´IbÖœ ²›=F{鮹'üvºí( ö~R¶ ~{‚~¯¤›„óøÿð‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1390execstream_client20ÜS7[AIF¬•pd± (ýÇîW\­íH­‰»Ö¢è¶Iàœ ÞF{鮹'üvºO/F{鮹'üvº³¯F{鮹'üvº¤›„óøÿð‹+aue_acceptret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value4ppid1390address::1port +10508execstream_server20ÜS7[AIF¬•pd± (ý:߇¤³A_…ÿí´?ÂVñ¸Ibàœ ÞF{鮹'üvºí( ö~R¶ ~{‚~¯¤›„óøÿð‹+aue_write@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1390execstream_server20ÜS7[AIF¬•pd± (ý³'-F{鮹'üvºäÞF{鮹'üvº°äÿ§®]vRS<„äB±¤›„óøÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý¬ŒS!ô¯E’«`BŒ*œ?œºI$àœ ÞF{鮹'üvº³'-F{鮹'üvº¤›„óøÿð‹+aue_fork +arg_pid1394hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1394ppid1390execstream_server20ÜS7[AIF¬•pd± (ýÇFD±Ú³O·˜Ch­LÙ ¼IJìœ ³'-F{鮹'üvº³¯F{鮹'üvº¤›„óøÿð‹+aue_sendtohostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1391execstream_server20ÜS7[AIF¬•pd± (ý‚Oå§%DMÕ¹R=ÝVk7¾Ibìœ ³'-F{鮹'üvºí( ö~R¶ ~{‚~¯¤›„óøÿð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1391execstream_server20ÜS7[AIF¬•pd± (ý^ +ŠhЇM‹®´UÕm%î‡ÀIìœ ³'-F{鮹'üvº³¯F{鮹'üvº¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1391execstream_server20ÜS7[AIF¬•pd± (ý‘GÁAU^F{n%6ŸœVÂI0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜Ë¥ýÿð‹+aue_lseek’î8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[ å}ÁŒIÛ£{*R¤’ÄI0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®€’Äÿÿð‹+aue_lseek’î8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý> ÛZSIòžF +Ò;/ÈI ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U®€’Äÿÿð‹+20ÜS7[AIF¬•pd± (ýå²&vzCA¹N™)n¦ÑÆI@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®€’Äÿÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐ.cÈôC»ˆKíY¶I‰ÌI ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U®€’Äÿÿð‹+20ÜS7[AIF¬•pd± (ý©3¸äMi<•îI@îœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®€’Äÿÿð‹+aue_pread²IhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;ª÷¨%^Jò¿8Mä4¾}®ðIb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº®€’Äÿÿð‹+aue_writeœJhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýFtniÉJO™‚17ÜŽM9òIbîœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á®€’Äÿÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý49^BBM嶪Z„NU™ŸôI@îœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ®€’Äÿÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3­ÂÙøEi˜OUCú¢¡ÈöI@îœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®€’Äÿÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'œúGU²/hRžhZ‚øI@îœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®€’Äÿÿð‹+aue_pread¤?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæjY'REœ? 4Š`¨…úIb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº®€’Äÿÿð‹+aue_writeŽ@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®ú øÈA¿”~ÆTH?aPüIbîœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á®€’Äÿÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·ë_"åJ“œ˜t7kßPþI@îœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ®€’Äÿÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%·v<.®C¬ÚÇ"H£àc€J@îœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®€’Äÿÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýó‘l¡êCÈŸŸ¢Æ›×îQ‚J@îœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®€’Äÿÿð‹+aue_preadºLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýû³"Ó3H’•¯­~ÞCA„Jbîœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á®€’Äÿÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõÏlͽC#§òËEH÷†J@îœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ®€’Äÿÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­!ȱ +ˆI¶Ø½î"ÜÖˆJ@îœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®€’Äÿÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_J[KzC$œšv<´BŠJ@îœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®€’Äÿÿð‹+aue_preadèMhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœÞRRœG— + !Y¥LŒJbîœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á®€’Äÿÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýêÎNÂóE<‹%U‘X‡»ŽJ@îœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ®€’Äÿÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇ”;2ZD,ŽÐúf¤™$JJîœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº®€’Äÿÿð‹+aue_sendtoà +ret_msgid531hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýhµF ‘æIw»eÇÚ“„>’JDê› µ dôFzé®{'üvºµ CjFzé®{'üvº®€’Äÿÿð‹+aue_recvfromà ret_msgid531hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¢Y¥dylOgšh›·‰n”Jbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK®€’Äÿÿð‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý²$pù%M[…À êîÛ¦–JD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌžöÍÿÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýéX@€áAõ¤s7hºmÈi˜JD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌžöÍÿÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýꇻÞ1þBÿ¿™uŒEÖèšJb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌžöÍÿÿð‹+aue_write¤MhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýû>’WM?¬õL5 +Ñœ œJD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌžöÍÿÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýuÍ·£fG‹…AÚ]¬ÿöžJD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌžöÍÿÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýGeÄh`Kɤe‡Å„& Jb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌžöÍÿÿð‹+aue_writeÒNhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýO€°?ýNí’ðŒÅ² ‡ ¢JD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœïÞÖÿÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý® s³äûGƒ˜Ç¿¹Ä¯Ö¤JD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœïÞÖÿÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^LÓ™Dà‰-`„·î®¦JD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºà’Ýàÿÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙâÝøLù‚NS¼DÊ#רJD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºà’Ýàÿÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýW]ÒRP…G[¾'~·[E ªJD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ÝÓêÿÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý `Ýg)ÆMO„ñãÝIrþ¬JD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ÝÓêÿÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³{ØF{鮹'üvºæ°äÿ§®]vRS<„äB±hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý­búR†F‘¤ +s$Œ÷€ê®J²œ ³{ØF{鮹'üvº³{ØF{鮹'üvºº™Í¶€€ñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¹ÉÙ€G¼O:¼jÜÖ9°Jbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯º™Í¶€€ñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýN´|å3é@5‡ƒ¾ë)*Ò­²Jbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯º™Í¶€€ñ‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý LŸëF{鮹'üvºèù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±º™Í¶€€ñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý„~HmòÞM·»äw6yý¥‚´J$ªœ ù‹°âFzé®·'üvº LŸëF{鮹'üvºº™Í¶€€ñ‹+aue_fork +arg_pid1396hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1396ppid1282execbash20ÜS7[AIF¬•pd± (ý%. ëøŸB´„Š ¡*ó_¶J²œ  LŸëF{鮹'üvº¥µîgµÑUµg¨eµÑc'º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +ÉäAÀ|1V±|?š÷%20 +ÜS7[AIF¬•pd± (ýüaQ/A8°n`¸#yq¸J²œ  LŸëF{鮹'üvºÉäAÀ|1V±|?š÷%n/usr/home/user/ripe-prov-tests-master/Linux/./with_wget'ìAzX™¦}˜¹(/libexec/ld-elf.so.1º™Í¶€€ñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./with_wget ppid1337execbash20ÜS7[AIF¬•pd± (ý]¿ FŠzL÷‡±FͲ– ºJ<²œ  LŸëF{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý–„»8žEOÞx-P‰TÀɼJ@²œ  LŸëF{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýêA…òG#N9‚#DF3µšY¾J²œ  LŸëF{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý/¨ýsdOŸlZõû9'EÀJ<²œ  LŸëF{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý-E?C¢°HÔ—MjÌ×¥ÂJ@²œ  LŸëF{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýØa°ijH.ƒr'Š¦]žÄJ@²œ  LŸëF{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýŒlàÚIa‘Ÿ4Ôƒ ÿ¾ÆJ²œ  LŸëF{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýåf +ÎE&¿„Wºq=*ÈJ<²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7º™Í¶€€ñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý7¦öÌÔÃM ‚Ž9¹ 'š?ÊJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ¾üNÿ²ýnHX¦|`%SÌJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýÕ >ž)ÓD‰³¹­€£{z®ÎJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýøa9äJᆛZŠ *õiÐJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýv~› JR·H¦¸u˦ÒJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýÊ ¶SšOB’Wì!yÔJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýÜH¦ÐL€+¯ +‹­ÉÖJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý`ÒBV>O?…¶zš.]ØJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýœÀ¿´"E°&œð3•rÚJ²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý‰Ç“"€CŹ»æçE¡[ÜJ:²œ  LŸëF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýsÇÇDšÔD/’X¬®ë@lWÞJ:²œ  LŸëF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý LîF{鮹'üvºê LŸëF{鮹'üvº°äÿ§®]vRS<„äB±º™Í¶€€ñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÿaçÑÌN°ˆdÊþàJ$²œ  LŸëF{鮹'üvº LîF{鮹'üvºº™Í¶€€ñ‹+aue_vfork +arg_pid1397hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1397ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý +ó÷êßZyºU¹Zˆºä$20 +ÜS7[AIF¬•pd± (ýZñP˜>ÂJ± &›Æ²)âJÖœ  LîF{鮹'üvºó÷êßZyºU¹Zˆºä$/bin/sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1º™Í¶€€ñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineVsh -c wget http://www.google.com/index.htmlppid1396execwith_wget20ÜS7[AIF¬•pd± (ý +¤ö¶ØM÷±ìS šÒ͸äJ<Öœ  LîF{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1396execsh20ÜS7[AIF¬•pd± (ýéÕ.ûïiGT˜ o§7mwÅæJ@Öœ  LîF{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý†¤K¾c'D›‘2§¸õÖžèJÖœ  LîF{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1396execsh20ÜS7[AIF¬•pd± (ýðµØBM٨à åñÔû­êJ<Öœ  LîF{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1396execsh20ÜS7[AIF¬•pd± (ýožš˜~ÀKR4i"Š?cìJ@Öœ  LîF{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý/—¥`ÀB/W ø}¸wOîJ@Öœ  LîF{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýÃЦƒ¦#J²¤¿Ì¼¦£Ô^ðJÖœ  LîF{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1396execsh20ÜS7[AIF¬•pd± (ý +*‡qo&\¯q׬&¬Ÿ20 +ÜS7[AIF¬•pd± (ý%­ÒAçcJ7Œ·xhoܾðòJ<Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿ"/lib/libedit.so.7º™Í¶€€ñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1396execsh20ÜS7[AIF¬•pd± (ý7Ü'E‚éFœ¢ §£ûâ](ôJ2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýÊÀ6æ9 Lž¡ã!ÊËá†öJ2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýý ¶ËCL1 qí¶”·ŒøJ2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€À¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýw=f_e@烸ùd‘µ¼úJ2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€À¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýõ-•J1øGû¥®ú"œüVüJ2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€Àà arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýº.{•ÁºIH˜yjF†FfþJ2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€Àà arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýé$0¶’Mõ· +†ÆÛj€K2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýÈ”ì™ÜNØ” ðY¸aC΂K2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý‚½ÅÙë·E0’Öƒâ¡-„KÖœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1396execsh20ÜS7[AIF¬•pd± (ýXD¤Î9ÂI¬²¹Ñ( †K<Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7º™Í¶€€ñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1396execsh20ÜS7[AIF¬•pd± (ý?Ê4“àJY®¹»Ö¤"ìˆK2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý&‰Î;AÚšF|Çs·oîŠK2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýYš4‹ãL>¾Ó×xîZŒK2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€Ø arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý^UJC˜–†ž`ªTÿeŽK2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€Ø arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý»0 ¹Õ;@H¦ÂO)%˪K2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€— arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýçãåÿãþE‹ZM΄±¶’K2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€— arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýON8O‡M:ˆ—(§–ìââ”K2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À¹ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýj +*µ5¢AHŸÐ‹è`oΖK2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À¹ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýþËL2@•ºzÖ1•]„˜KÖœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1396execsh20ÜS7[AIF¬•pd± (ý¿‚kãÈIá­ÿôÑóXžÏšK<Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦*/lib/libncursesw.so.8º™Í¶€€ñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1396execsh20ÜS7[AIF¬•pd± (ýfíQšÐ5M”­K9vØ"pœK2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý¨ìn$@Ѥ—Û÷Æ‹wžK2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý§ç´rõmL–†BÐ凂Ë0 K2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€ÀÔ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý¸[¬˜{GT™¬¨vu¬¢K2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€ÀÔ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýîÝÄ6G Fp±‹œP½£¤K2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€é arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý3ÖÛò¦H7¨d€¸iBä¦K2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€é arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýûÎܺѼB§¡¬EðÒ¤ +ѨK2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€‚ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýGÇ›§¹iKø¥P?žl+ªK2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€‚ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýÌG¬+±qNæ—朎†>€¬KÖœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1396execsh20ÜS7[AIF¬•pd± (ýŽuü' +úF9ƒßÉ DÆ ®K:Öœ  LîF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1396execsh20ÜS7[AIF¬•pd± (ýúîÄö}J¤‹M(Ÿ°K:Öœ  LîF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1396execsh20ÜS7[AIF¬•pd± (ýãÁʘ‰dBW”—…ÒlŠ3²K:Öœ  LîF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1396execsh20ÜS7[AIF¬•pd± (ýJÚãCÿ‹ùg(®‹Ì´K:Öœ  LîF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1396execsh20ÜS7[AIF¬•pd± (ý- Ä@öCѼµßô¦¾ô·¶KbÖœ  LîF{鮹'üvºí( ö~R¶ ~{‚~¯º™Í¶€€ñ‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1396execsh20ÜS7[AIF¬•pd± (ý¸pâjn°Hm·UÙ§—I0¸KÖœ  LîF{鮹'üvº LîF{鮹'üvºº™Í¶€€ñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1396execsh20ÜS7[AIF¬•pd± (ý:¯–õÓMC¼^¤%<ºK²œ  LŸëF{鮹'üvº LŸëF{鮹'üvºº™Í¶€€ñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýùïipÛ€Hí‹«jÏÀb¼K@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'º™Í¶€€ñ‹+aue_readª hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýý4_ž”©Oψ¯"öàY}h¾K0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'º™Í¶€€ñ‹+aue_lseek”hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý Mr§F{鮹'üvºìù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±º™Í¶€€ñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýåÞÎCªŽã󦲉ÀK$ªœ ù‹°âFzé®·'üvº Mr§F{鮹'üvºº™Í¶€€ñ‹+aue_fork +arg_pid1398hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1398ppid1282execbash20ÜS7[AIF¬•pd± (ý +ªn5 +BP¥jÐVÊ®áÂK²œ  Mr§F{鮹'üvº¥µîgµÑUµg¨eµÑc'º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýHÅk·£™N‡‚Ã<ÁíÙC‹ÄK²œ  Mr§F{鮹'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1º™Í¶€€ñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ý¶=C;öM «—ºÒèÖ‘ÆK<²œ  Mr§F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý–¨|+h²FГ¥6ê&HCÈK@²œ  Mr§F{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý»\~u(DC“ñ»_òÊK²œ  Mr§F{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý§:ö::hGz·*ŒÄÀÑÌK<²œ  Mr§F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýêMãÚˆ.C´‚£‹Òw½NÎK@²œ  Mr§F{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýPØâ=ÇIŒ½°i—SqYÍÐK@²œ  Mr§F{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýêRSzïK,¯ÓLî |ÒK²œ  Mr§F{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙª¸û¶ÁÞñ[G2ºÛ€-ȱÔK<²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7º™Í¶€€ñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý“5W7þ9HU¾ºÔU<ùÖK2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýŠM"»BŸ+u2)e¼ØK2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýéÓ8CôŠOƒšZ†ËðÈ ÚK2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýü]þЬ´NV¥ ë‹Æ•ÝðÜK2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý3}&ô ÙD<‚púÈ¢òrTÞK2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý56Ë@‡Z‰‰¬æ°úŠL ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+20ÜS7[AIF¬•pd± (ýG"mŸ3ÈGº¯ÓXr‚™5ˆL@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýuÞG|%WMì§È–Å÷‡\ ŒL:‚œ Ê +ÙKFzé®›'üvºô“„¹Ž€ñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôV.¾šeL¤‚q>×”ÄL‹ŽL@ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ô“„¹Ž€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýgtð<‘ÛNƒ¿æe|SL@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂ'Dé2ðMœ«¥xéÓ’L@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadÎ?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³œ`ûˆÆJH©|sëfyÿ”Lb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºô“„¹Ž€ñ‹+aue_write¸@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸôž£qF¶’¤å +Qfƒ5–Lbðœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áô“„¹Ž€ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšÑBLS°yŒûñŻ˜L@ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ô“„¹Ž€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦Iv¡NBÿ½>Ήª’7šL@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõ²¦èÖC­˜Ž%1à\3 œL@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadŽKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬û¬ñ– Hô¬§Ád>¦…žLb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºþÕÀŽ€ñ‹+aue_writeøKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðJ-§œO¨¸¼@®E¶ ¥ Lbðœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áþÕÀŽ€ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýúÛI‘I+¿öÛäëäïó¢L@ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V þÕÀŽ€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwª‹7‘=K¯Š!yþyüæ¤L@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UþÕÀŽ€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{z€s#FL˜ç8PþT¶¦L@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UþÕÀŽ€ñ‹+aue_preadòDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:p'ádN¡òÖ̇Lˆó¨Lb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºþÕÀŽ€ñ‹+aue_writeÜEhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýBHÿ–WCRº8¼Y ÁHRªLD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Ú«ØŽ€ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýGÜ95SC½WÏê¥î¬LD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Ú«ØŽ€ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ým.¶‚uÑKf»SüœßL®LD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Ú«ØŽ€ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý߸œLr¦ýžû?+’)°LD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Ú«ØŽ€ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^öX6ΗF_”œq”¤9ú.²Lbðœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”Ú«ØŽ€ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼[:(,I´–<Þ ýÆÝ!´L@ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”Ú«ØŽ€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰8¢wQJRŒÜ:`cë¶L@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”Ú«ØŽ€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwØ¥m›E}‡²ü7¸L@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”Ú«ØŽ€ñ‹+aue_pread¦hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýj i5—E­2£æˆ†šºLb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¼Þæ㎀ñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’u:ùÖ{Hn«o_h JP¼Lbðœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¼Þæ㎀ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcZ:‹À/Cq†N O¯\Gó¾L@ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¼Þæ㎀ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]ª>wAIM¸n-ÃSÇIÀLJðœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¼Þæ㎀ñ‹+aue_sendtoà +ret_msgid532hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊ*´~—zEí—O¸Èâ¼™ÂLDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¼Þæ㎀ñ‹+aue_recvfromà ret_msgid532hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý ÑÙï>TI>ö:˜ÚP?mÄLbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¼Þæ㎀ñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýŒðÊÕMé£B´f¹þÆLD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ–à掀ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýuªx°KØŒWãñ›ùÉÈLD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ–à掀ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýá<wYõAv–?ÌÁ ΫÊLD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ–à掀ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×–Ï?»ÆCM’îÑÊýyR0ÌLD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ–à掀ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢\€aù€M rT¯70ÎL@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eŽŠÆ´‘€ñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýO˜LPÞ@ Œ±¢xÄ·ä¸ÐLJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŽŠÆ´‘€ñ‹+aue_sendtoÚ +ret_msgid533hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý^-Dl" N‡ƒ¯tG )ÆéÒLJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŽŠÆ´‘€ñ‹+aue_sendto˜ +ret_msgid534hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý&˼ƒ¦#Lv•Ÿóà]sÅÔLJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŽŠÆ´‘€ñ‹+aue_sendto¬ +ret_msgid535hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýìÕ& ÅŸO+ƒ\Sw%†fÖLJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŽŠÆ´‘€ñ‹+aue_sendto˜ +ret_msgid536hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¼ÏÛø[)E ­“¦x·ØLDê› µ dôFzé®{'üvºµ CjFzé®{'üvºŽŠÆ´‘€ñ‹+aue_recvfromÚ ret_msgid533hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÐÛœ¾”NÙ»ïgäžÏ]ÚL0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ßÖð•€ñ‹+aue_lseekÞ’;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýr£±¦CyªÏ —#q"ÙÜL0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+aue_lseekÞ’;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýRhê«^oH?‘­ËIÎ$=àL ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+20ÜS7[AIF¬•pd± (ý%ÿ~„®Dä‹^X]^áÞÞL@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<„UëùVI%œwPóЙ+"äL ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+20ÜS7[AIF¬•pd± (ýY(ÔÝEÏŽQÛý{™âL@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýq*€#¦EBžµøj¦j»1æL:‚œ Ê +ÙKFzé®›'üvº„ã窀ñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚƒÌP`M‚ô5&ú¼K2èL@òœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V „ã窀ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýî;¦°DÒ¹Žê7x™‚îêL@òœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£¡:ø"1OŒž‡°Ì¯ŠbìL@òœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+aue_pread°BhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!Hœ,ù[B«º~5´+KîLb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº„ã窀ñ‹+aue_writešChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý78ó‘ÆÍHˆ¿€Ú°±!/ŒðLbòœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á„ã窀ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšÖÙõ”B!Ÿ« *˜¤òL@òœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V „ã窀ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýzb*ˆ„BD“Òí•à?ë,ôLJòœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº„ã窀ñ‹+aue_sendtoà +ret_msgid537hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdZ¯·ƒE³¤tœíS‰öLDê› µ dôFzé®{'üvºµ CjFzé®{'üvº„ã窀ñ‹+aue_recvfromà ret_msgid537hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýî +µP Nø¥°ö ”ïIøLbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK„ã窀ñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÿ]РJ%ˆŠ&mE³GúL0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨Ýô³€ñ‹+aue_lseek ¬;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—7QÇÓF#‚ªþN¦v2üLD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨Ýô³€ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙðز¥d<^MÝ­~hÀ*„ÇþLD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨Ýô³€ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹”àìñoN^ž$MÙ \ No newline at end of file diff --git a/with_dlogd/cdm/sample1.cdm.json b/with_dlogd/cdm/sample1.cdm.json new file mode 100644 index 0000000..6138918 --- /dev/null +++ b/with_dlogd/cdm/sample1.cdm.json @@ -0,0 +1,5268 @@ +{"datum":{"Host":{"uuid":"dc53375b-4149-46ac-9570-64b1090f28fd","hostName":"cadets-bbn","ta1Version":"versionn_innfo:translator, 2019 Mar 4 15:33:16, 1833e058956186fe832c4cc2b027c65667a09bcd; ","hostIdentifiers":{"array":[]},"osDetails":{"string":"FreeBSD 13.0-CURRENT FreeBSD 13.0-CURRENT 5da4c1df8d5(HEAD) CADETS amd64"},"hostType":"HOST_DESKTOP","interfaces":{"array":[{"name":"em0","macAddress":"08:00:27:fc:76:ba","ipAddresses":{"array":["10.0.2.15"]}},{"name":"em1","macAddress":"08:00:27:f9:7a:ba","ipAddresses":{"array":["192.168.56.101"]}}]}}},"CDMVersion":"20","type":"RECORD_HOST","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Principal":{"uuid":"992c0c42-aaa2-5424-b584-06e4fd60da90","type":"PRINCIPAL_LOCAL","userId":"0","username":{"string":"root"},"groupIds":{"array":[]},"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_PRINCIPAL","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b50b64f4-467a-11e9-ae7b-080027fc76ba","type":"SUBJECT_PROCESS","cid":725,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"127cce4e-8947-4b3a-8be6-651c1871a2c2","sequence":{"long":0},"type":"EVENT_READ","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895034370801,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c1555c7c-d38e-9a58-8ed3-e319889a0469","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a05762d3-c38c-48d0-b22d-1d02cd6d1915","sequence":{"long":1},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"c1555c7c-d38e-9a58-8ed3-e319889a0469"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895034370801,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"86836dec-ed75-5552-b5ed-c25e1255414b","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c071821-df50-4e03-9a21-281b904a56fd","sequence":{"long":2},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895034370801,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"e393303b-721f-8457-9f72-2da477847b65","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b4fde811-467a-11e9-ae67-080027fc76ba","type":"SUBJECT_PROCESS","cid":605,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ba32fab-242c-44bb-8c67-37bf0c0f6b14","sequence":{"long":3},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"b693e0fc-467a-11e9-ae9b-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b971fc2-b5be-48dd-8625-ab4ba399bdae","sequence":{"long":4},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"351","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4dbb0ddb-a6b5-47f4-879f-7c989f1c8c7c","sequence":{"long":5},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"352","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a7df92e-d92f-44e4-ba9e-755ab81b5ab3","sequence":{"long":6},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"353","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e19bd2d-5f34-42ec-9107-39e9153c3ef6","sequence":{"long":7},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"354","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"b50b436a-467a-11e9-ae7b-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1171f0b-a3de-4542-9b27-3fc16788aa79","sequence":{"long":8},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"351","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f1f025f-c229-4a82-9ec4-bb7a6261114c","sequence":{"long":9},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"352","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14003dc0-9aed-4ba2-ae15-8c5183dfeb66","sequence":{"long":10},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"353","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"539eed52-dab2-4009-a0d4-83392eea760e","sequence":{"long":11},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"354","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c4673949-cad4-c653-94ca-ec5243c65b55","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ca0ad94b-467a-11e9-ae9b-080027fc76ba","type":"SUBJECT_PROCESS","cid":1242,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4f65611-a947-4d5e-a1db-a16e6a4d0d0f","sequence":{"long":12},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895933902951,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1578},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8af3c68-7fc3-42a3-a757-b40ec93195d7","sequence":{"long":13},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1578},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7fb9766-c578-4ef8-b21a-3b52ccb527d1","sequence":{"long":15},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffdd61b7-d61e-46b3-9128-42ba5262f078","sequence":{"long":14},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f31240e2-790d-4693-92c8-051c69a5dacc","sequence":{"long":17},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"047912c9-5092-453b-8ee3-bf7dafa90b4e","sequence":{"long":16},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"618a2253-ab6d-4288-990e-00b4dc34053a","sequence":{"long":18},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"825e9d78-8dfc-a257-bc8d-d06bd7a25609","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f949c7a9-f969-4129-9bea-ce84436ca688","sequence":{"long":19},"type":"EVENT_READ","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9fe8491-1e74-4727-8e25-8c0a461ed6bc","sequence":{"long":20},"type":"EVENT_READ","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cfe9f49-e6ad-4b79-aadb-f126c7c7e573","sequence":{"long":21},"type":"EVENT_READ","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1574},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a680644-8bb5-4edb-86c9-e3157deedf9e","sequence":{"long":22},"type":"EVENT_WRITE","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ca0be36d-467a-11e9-ae9b-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cdd073b-bcd0-4705-ac2c-b97a47ee78f3","sequence":{"long":23},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1627},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f28af1c7-4ec3-44dc-b0f3-23ee084bb57f","sequence":{"long":24},"type":"EVENT_READ","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"157cdea8-257e-428c-8751-333292fc9626","sequence":{"long":25},"type":"EVENT_SENDTO","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"355","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce8ed243-5fc4-43ae-a4bf-67aa8c361c6d","sequence":{"long":26},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"355","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05e674f3-c8a3-4737-a2bd-a7989e84e9cd","sequence":{"long":27},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6776600b-2bbb-42ec-81f2-408c2a4cb322","sequence":{"long":28},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896134203227,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a9f466e-d945-4eec-8d9b-d3b69631256a","sequence":{"long":29},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896134203227,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d918f9c4-9c38-4f57-912a-4e96617735e3","sequence":{"long":30},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896944139252,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":3413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60a41daa-9c70-401c-9642-2d3803955100","sequence":{"long":31},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582897954065555,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":3775},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0eb7583b-1cd2-48c3-a509-cb7af00f6c16","sequence":{"long":32},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":3775},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5e8ddf2-b35a-460f-a22d-1c890216a441","sequence":{"long":34},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a2ab674-7c17-48a3-bb7e-99ea1a1726bd","sequence":{"long":33},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99532c6c-9ab4-49d5-8e7b-dafab4abd4eb","sequence":{"long":36},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"289e63da-5720-43c3-9f89-1d642ce15dbf","sequence":{"long":35},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b77e39b4-ca95-4222-a66f-c2130e093f52","sequence":{"long":38},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c40cc1e-450a-43f5-8a4e-cf947e173106","sequence":{"long":37},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94941acc-7eb8-40f9-86b7-8ffc71032200","sequence":{"long":39},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4b8f0c1-50d0-4dbf-941b-2a6c7e36b8db","sequence":{"long":40},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"251e27a5-d3a1-4d50-b3dc-c94a22f2ccb4","sequence":{"long":41},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2ab9229-0563-465c-ab64-49098a08180c","sequence":{"long":42},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1831},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1f5c2fb-0c4a-45fd-bf4c-d9515a304b45","sequence":{"long":43},"type":"EVENT_WRITE","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a814862-cb82-49dc-8c13-d3948f949b2b","sequence":{"long":44},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1884},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a4c994e-a17a-4446-9877-a8c94b9effeb","sequence":{"long":45},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4626af8d-f324-4bcc-9d45-e00b2a549d67","sequence":{"long":46},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74926dda-8bad-4077-ad7c-214e8b354d21","sequence":{"long":47},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0816106b-fa50-4df1-bb2e-62031b56abb5","sequence":{"long":48},"type":"EVENT_WRITE","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c539da5d-db20-40e2-ad7f-2ac98facaa46","sequence":{"long":49},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce21c9f8-90de-49ab-851b-8973a31f2fc7","sequence":{"long":50},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e51b8318-4499-4135-96c0-072dc66dd27c","sequence":{"long":51},"type":"EVENT_SENDTO","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"356","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e41c4999-ffe2-401d-afff-84854c5d1add","sequence":{"long":52},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"356","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a67d4dc-04c5-450a-984c-0681bd4cacac","sequence":{"long":53},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b25169dc-e8dc-421f-bc3f-310e8a8fb0b4","sequence":{"long":54},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d068380a-a5ac-4fd1-8e28-234d8e1a7605","sequence":{"long":55},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd4c9af8-c954-423f-a76e-df16d900cdb7","sequence":{"long":56},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c26da7d9-a403-4d7d-af24-dd183c57d063","sequence":{"long":57},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff88c629-c207-498e-812a-d17e4df1f606","sequence":{"long":58},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdaf3c78-6527-4284-8de4-9a2cbdce8598","sequence":{"long":59},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"357","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9dfb998-8a0b-43e1-8d10-5630dc206671","sequence":{"long":60},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"358","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cde6a47c-4b65-4265-aec0-e6fdc4c0aa1b","sequence":{"long":61},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"359","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6778b102-6976-415f-b017-05fcc046330c","sequence":{"long":62},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"360","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a302a3f9-e8f3-460d-8602-027938ac6a5e","sequence":{"long":63},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"357","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6d6850c-e066-4522-9ef9-53e454b2c6e5","sequence":{"long":64},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"358","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74281562-28b6-4e5a-9527-2ed3c8ee4434","sequence":{"long":65},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"359","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80710019-417c-4e9c-b925-ca4f7d2787f4","sequence":{"long":66},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"360","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6028c4eb-94f2-4d3b-a2e4-b872f935746e","sequence":{"long":67},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898964841090,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":6972},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edf5165d-e4a2-4138-9323-9c82f6fc1dea","sequence":{"long":68},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582899973949516,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":7337},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"381d5072-61dd-4f67-8a95-28480a1dadc5","sequence":{"long":69},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":7337},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7770c29a-576a-480b-ac0b-a5b792f14d00","sequence":{"long":71},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"037e7ae8-0cf1-4314-b403-64f13037a5c4","sequence":{"long":70},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fce44a5b-2505-45ac-9c3e-c51242f09547","sequence":{"long":73},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65e32827-760b-4b23-af17-d31d78c392d2","sequence":{"long":72},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c81adfb-18bc-4fa2-994c-d462971ee315","sequence":{"long":75},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68ee3e78-bcf6-4c03-908f-73246a2ceeb5","sequence":{"long":74},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"102416e5-8c87-49ae-8271-0296c2eb16f7","sequence":{"long":76},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b233c3b7-adbf-4d53-b6d3-869e9e9330a9","sequence":{"long":77},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"553f06a0-1edf-427a-b636-a4c8b5fb7d35","sequence":{"long":78},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd8e89c8-1ca5-447e-a95c-befe68b2270a","sequence":{"long":79},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3193},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36c647d1-570a-410c-98ff-9fb732906166","sequence":{"long":80},"type":"EVENT_WRITE","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6da93da7-2efe-43f8-b7b7-fc5cc55a3771","sequence":{"long":81},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3246},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92bbe44d-a361-4a3f-9eaa-7ddd6e09235e","sequence":{"long":82},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2095106-d0bb-4978-9b70-cf446a8b73f5","sequence":{"long":83},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91d74583-49c2-4713-ac2b-c472a07e90fc","sequence":{"long":84},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c56d31f-d648-45ef-9622-db2d9f431394","sequence":{"long":85},"type":"EVENT_WRITE","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec92a3de-5f2e-43b3-a719-c3ce707054ce","sequence":{"long":86},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"458d4d11-6c06-46d2-989a-569e76b300d4","sequence":{"long":87},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dffc9e88-f374-4b64-929f-a7e4b8572cf5","sequence":{"long":88},"type":"EVENT_SENDTO","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"361","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2a5cec0-15ab-4b4d-b028-a43305cd5901","sequence":{"long":89},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"361","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecc22b0c-0071-4956-b06d-6a0af5bf9b83","sequence":{"long":90},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0e565ad-c3db-4bf2-baad-bb95e6e13c4d","sequence":{"long":91},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900134758205,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6093562-c4f1-4c33-b104-5030c70d8193","sequence":{"long":92},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900134758205,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bac4d89-df8f-4afc-bec2-5d1d042b177a","sequence":{"long":93},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900134758205,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ae92bcf-a79b-420d-9627-ac178dedf548","sequence":{"long":94},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900134758205,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"b54fd750-467a-11e9-ae92-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"192.168.56.101"},"localPort":{"int":22},"remoteAddress":{"string":"192.168.56.1"},"remotePort":{"int":61633},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"d66412b7-467a-11e9-aea7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"192.168.56.101"},"localPort":{"int":22},"remoteAddress":{"string":"192.168.56.1"},"remotePort":{"int":61633},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b54fadf6-467a-11e9-ae92-080027fc76ba","type":"SUBJECT_PROCESS","cid":1108,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb0f45cd-29ea-4261-8af7-e3e0048c4419","sequence":{"long":95},"type":"EVENT_ACCEPT","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"b54fd750-467a-11e9-ae92-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"d66412b7-467a-11e9-aea7-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_accept"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"5","ppid":"1","address":"192.168.56.1","port":"61633","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6d99bb2-c45b-43f9-9af0-001f13cff0b6","sequence":{"long":96},"type":"EVENT_FCNTL","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"6","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e8f0458-1e66-42d1-8a6f-0ed3ebb1eeda","sequence":{"long":97},"type":"EVENT_FCNTL","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d6641bd1-467a-11e9-aea8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d6641bd1-467a-11e9-aea7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"772a44fb-7156-5e27-b653-732212cd589d","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"d6641bd1-467a-11e9-aea7-080027fc76ba"},"uuid2":{"UUID":"d6641bd1-467a-11e9-aea8-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f33d4e8e-2ca8-4362-866b-1735f9bfb255","sequence":{"long":98},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"772a44fb-7156-5e27-b653-732212cd589d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","ret_fd2":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d6641df6-467a-11e9-aea8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d6641de9-467a-11e9-aea8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"2d87dac1-5f0f-5cfb-8d06-3554db4401a5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"d6641de9-467a-11e9-aea8-080027fc76ba"},"uuid2":{"UUID":"d6641df6-467a-11e9-aea8-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2494d3a-81b7-45bf-b061-562d6c83c95f","sequence":{"long":99},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"2d87dac1-5f0f-5cfb-8d06-3554db4401a5"},"predicateObjectPath":null,"predicateObject2":{"UUID":"d6641df6-467a-11e9-aea8-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_socketpair"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","ret_fd2":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d6642793-467a-11e9-aea8-080027fc76ba","type":"SUBJECT_PROCESS","cid":1278,"parentSubject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":1552582900834145195},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08ec9a5a-7a0c-40b8-8fea-ad0c2ef4eed0","sequence":{"long":100},"type":"EVENT_FORK","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1278","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1278","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"27ec417a-1419-0858-9914-a67d9808b904","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"8bdbf70c-2584-fe5b-8425-ffe24bfe3202","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b13bdc40-336d-4773-a708-485f4f3ebbb8","sequence":{"long":101},"type":"EVENT_EXECUTE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"8bdbf70c-2584-fe5b-8425-ffe24bfe3202"},"predicateObjectPath":{"string":"/usr/sbin/sshd"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582900834145195,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/sbin/sshd -R","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"17896ffd-a9e4-c755-a4a9-412945c7b90c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2af31322-7d3b-45ee-831b-45d39c749626","sequence":{"long":102},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36113f2f-cf33-45b2-8d9f-fd12ef3ad5df","sequence":{"long":103},"type":"EVENT_CLOSE","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"d6641de9-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a1c52cf-657a-4e5d-8a35-090cdbc2fdbb","sequence":{"long":104},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"58ea8ea9-f0ae-855c-aef0-404acc85bce2","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28e4edfa-8450-4e88-920a-9495c664b15e","sequence":{"long":105},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32d4dc76-2d8d-4478-8b33-045e7fcd41d2","sequence":{"long":106},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e895bdc1-78a8-44f2-8cff-d58745552dd6","sequence":{"long":107},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"20aa562e-78b1-685e-b178-e5904e689ef5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96b11c55-c8c4-4022-a648-c53e0c830bd8","sequence":{"long":108},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":{"string":"/usr/lib/libpam.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea00007a-0ded-4cee-861d-9bc28f630a8d","sequence":{"long":109},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4cdcd114-c4ad-0851-adc4-bacbc10874a4","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c377430b-b3f8-47ae-ada0-445fb49197df","sequence":{"long":110},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4cdcd114-c4ad-0851-adc4-bacbc10874a4"},"predicateObjectPath":{"string":"/usr/lib/libprivatessh.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70cbb4b8-45de-40d9-8a3c-49f19b1483ef","sequence":{"long":111},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4cdcd114-c4ad-0851-adc4-bacbc10874a4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"baa0d6f2-2588-45a1-acff-1e389582c15f","sequence":{"long":112},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cee273ea-973b-4a5b-856c-99f501ffe43c","sequence":{"long":113},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a59b768b-0c14-4c36-b1e6-cdad73e10675","sequence":{"long":114},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":{"string":"/usr/lib/libbsm.so.3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3746edcb-02e3-4611-9e0d-7a18074737fc","sequence":{"long":115},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"a1687d5a-9a65-045e-a59a-97b4fe04b3bf","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1858d269-f0aa-47cd-a789-56d6bbaf89e4","sequence":{"long":116},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a1687d5a-9a65-045e-a59a-97b4fe04b3bf"},"predicateObjectPath":{"string":"/usr/lib/libblacklist.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66ef2986-1556-46bf-9b37-7bc92ac38356","sequence":{"long":117},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a1687d5a-9a65-045e-a59a-97b4fe04b3bf"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"842f7c15-d3f8-6754-b8d3-e6077467aec3","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e091021-fd83-4138-b5bd-3138c632d669","sequence":{"long":118},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"842f7c15-d3f8-6754-b8d3-e6077467aec3"},"predicateObjectPath":{"string":"/usr/lib/libgssapi_krb5.so.10"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd1378c6-7115-461c-9aaf-2296266146e9","sequence":{"long":119},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"842f7c15-d3f8-6754-b8d3-e6077467aec3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6f98459d-6d2f-ff5f-af6d-07280fffd3cb","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f29f95a3-8366-42ef-b54e-c55cae9856c6","sequence":{"long":120},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6f98459d-6d2f-ff5f-af6d-07280fffd3cb"},"predicateObjectPath":{"string":"/usr/lib/libgssapi.so.10"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aeb36d61-6ac5-483e-bd9a-716dd31a2122","sequence":{"long":121},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6f98459d-6d2f-ff5f-af6d-07280fffd3cb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"3a5de0c0-3468-0e56-a834-3339660e07e7","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10ba8c7b-d051-4e00-ad5a-2597fb7b5248","sequence":{"long":122},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3a5de0c0-3468-0e56-a834-3339660e07e7"},"predicateObjectPath":{"string":"/usr/lib/libkrb5.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0b372ce-810e-4588-8bf2-a9fc9db14417","sequence":{"long":123},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3a5de0c0-3468-0e56-a834-3339660e07e7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"002f9f80-1361-7654-a113-52b9a4768b0c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"532539cd-676a-4e1d-b3e2-54ad5524be57","sequence":{"long":124},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"002f9f80-1361-7654-a113-52b9a4768b0c"},"predicateObjectPath":{"string":"/usr/lib/libwrap.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a833e91-9c75-4bfa-97aa-1c5cbb9f92b8","sequence":{"long":125},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"002f9f80-1361-7654-a113-52b9a4768b0c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"65a0c3e1-4df2-5355-b24d-52809553d9e2","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d273981-ff8a-46cc-9e11-1aa2f9c10fcf","sequence":{"long":126},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"65a0c3e1-4df2-5355-b24d-52809553d9e2"},"predicateObjectPath":{"string":"/lib/libcrypto.so.111"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9acd620-f8f0-47de-a2f8-fe0d6ab7fca0","sequence":{"long":127},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"65a0c3e1-4df2-5355-b24d-52809553d9e2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"de4160ec-95f8-cb51-b895-6278f1cb229c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9276327-6acb-454c-9c73-e0ca78f41e3a","sequence":{"long":128},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b1a4ce9-7c5d-4409-8733-e0f89fef5b9b","sequence":{"long":129},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"e6f4c6b4-7c40-ef56-807c-7da296efff27","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f4e12f7-003b-4936-a53c-6aeff4f273f2","sequence":{"long":130},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"e6f4c6b4-7c40-ef56-807c-7da296efff27"},"predicateObjectPath":{"string":"/usr/lib/libprivateldns.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3395dd02-d681-449b-99a3-7cc5e5c14c53","sequence":{"long":131},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"e6f4c6b4-7c40-ef56-807c-7da296efff27"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"361927fc-6969-1555-a969-68fff515170e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d81accc-d148-49ce-9dee-21fff52bfcdd","sequence":{"long":132},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":{"string":"/lib/libcrypt.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41693819-9c8f-4ce9-acfe-803d1c081971","sequence":{"long":133},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"a55fa421-3072-7451-b230-2012f174bff1","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbd13f4e-c941-4b8b-be9c-347bd935f148","sequence":{"long":134},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":{"string":"/lib/libz.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4dba2cf-497e-4872-acf0-d38244b0fed3","sequence":{"long":135},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c7381901-4ea2-b956-a24e-59a436b93c00","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b9c44ab-3b25-467d-a765-ea2e981e25be","sequence":{"long":136},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":{"string":"/lib/libthr.so.3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45f92972-75bc-48ea-b0dd-f34bfa5609c1","sequence":{"long":137},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d1c77a04-4c52-7253-924c-62b47372e504","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10e822ef-e229-4bdd-ab95-4b860082d340","sequence":{"long":138},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d1c77a04-4c52-7253-924c-62b47372e504"},"predicateObjectPath":{"string":"/usr/lib/libroken.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ce89a54-b5e4-4117-84ef-e7a2ec4eb55c","sequence":{"long":139},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d1c77a04-4c52-7253-924c-62b47372e504"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7b86e8f-5627-4668-bac1-7488262b9e28","sequence":{"long":140},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d"},"predicateObjectPath":{"string":"/usr/lib/libasn1.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79e9d94e-817c-4905-9b20-489a6f357912","sequence":{"long":141},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f3b68756-6263-9455-a362-0034d594ada7","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"822dce37-2bdc-41c9-a55f-15c16a93ded8","sequence":{"long":142},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f3b68756-6263-9455-a362-0034d594ada7"},"predicateObjectPath":{"string":"/usr/lib/libcom_err.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98dc2b9a-1580-4ab6-b9a4-5338089beda6","sequence":{"long":143},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f3b68756-6263-9455-a362-0034d594ada7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4a8576d1-4c86-4855-864c-eea21548af1c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f394a31f-66c1-494b-b7df-00b5a12c854b","sequence":{"long":144},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4a8576d1-4c86-4855-864c-eea21548af1c"},"predicateObjectPath":{"string":"/usr/lib/libhx509.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"621225f4-c33d-42f9-b0fc-7262935b3040","sequence":{"long":145},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4a8576d1-4c86-4855-864c-eea21548af1c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"037e1e72-8357-4133-a495-3a89c795a970","sequence":{"long":146},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5"},"predicateObjectPath":{"string":"/usr/lib/libwind.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16d4e0de-5fa8-4248-a9d7-cee80f9fa2f1","sequence":{"long":147},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"99fc3185-2025-565b-a520-dc0cab56462c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71073b52-40c7-4762-87a7-d6330fd022f0","sequence":{"long":148},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"99fc3185-2025-565b-a520-dc0cab56462c"},"predicateObjectPath":{"string":"/usr/lib/libheimbase.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fed61ba-b5cd-4124-bbd1-f66ab8f14547","sequence":{"long":149},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"99fc3185-2025-565b-a520-dc0cab56462c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"02a6c778-5410-d854-9054-fc1f24d8e4bd","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81f8b451-69c0-41c3-aa46-39ea0bdbf176","sequence":{"long":150},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"02a6c778-5410-d854-9054-fc1f24d8e4bd"},"predicateObjectPath":{"string":"/usr/lib/libprivateheimipcc.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b19e05f6-0939-4732-aee0-db4aec25fee7","sequence":{"long":151},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"02a6c778-5410-d854-9054-fc1f24d8e4bd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c0a44a27-28a6-d358-a628-06b288d3fd01","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cc7e2ad-dbc5-4536-a58f-9a9955a1631a","sequence":{"long":152},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"c0a44a27-28a6-d358-a628-06b288d3fd01"},"predicateObjectPath":{"string":"/usr/lib/libssl.so.111"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41f7b974-9253-4ca4-a695-38058a4373e3","sequence":{"long":153},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"c0a44a27-28a6-d358-a628-06b288d3fd01"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23d2306d-06c8-4fab-a8b1-2117739ff130","sequence":{"long":154},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06314110-113e-48f2-bcbb-604ada3733fa","sequence":{"long":155},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95dd0b64-e383-42e3-bc40-52531ce3748c","sequence":{"long":156},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fcb0bcd-3329-4756-a4a1-83cc47f2bea5","sequence":{"long":157},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dd77aca-b44e-44bd-9b08-cd7206becc84","sequence":{"long":158},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6aa785a-73eb-4e29-bde3-51314a933e06","sequence":{"long":159},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1299adad-5c68-488e-a3b6-306005667a35","sequence":{"long":160},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3359b02-f251-48ec-b61b-6c2db8944e16","sequence":{"long":161},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4137d9a8-0f6a-4366-90b5-1f4655de8d59","sequence":{"long":162},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aabf1fe7-5f3d-43e8-b965-4da91ad68b40","sequence":{"long":163},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02e41380-42a0-4f58-b736-213fc39bf176","sequence":{"long":164},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4f18fd4-f5a0-4fe4-a1bc-386d8e2453f3","sequence":{"long":165},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a09ec377-62ff-4e67-8282-9a97717032ab","sequence":{"long":166},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03c6c6d5-3b72-4b3c-90f5-eee22294c91d","sequence":{"long":167},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d06540b7-484b-4b02-9cb4-da8db9bf7c38","sequence":{"long":168},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f43924e4-a205-4bf3-b85f-d68e23536d6e","sequence":{"long":169},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac25020a-2ec4-47de-985d-dbae81dca58c","sequence":{"long":170},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1f3d746-179c-4b6a-b0ac-b0e02e10c2dd","sequence":{"long":171},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4bccabe-fbc1-4d71-93e2-b6f7896f07d6","sequence":{"long":172},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1197a61c-3e8b-4a8f-a127-02dd6fca567e","sequence":{"long":173},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4536ea90-509b-4099-952c-55bb80ed58d1","sequence":{"long":174},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab1cb71d-fb5a-4dae-869b-c6c191ea97da","sequence":{"long":175},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c2a3933-65f0-4609-a57a-d1e9d5486d37","sequence":{"long":176},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32ec3d1a-7127-4043-8036-878de6030fc9","sequence":{"long":177},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56724c1d-5496-4e11-9ff0-b49e7d7ac2b2","sequence":{"long":178},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"1633500b-d34b-8058-8bd3-abb7d880915e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"575c0e6d-0255-4b1c-b744-b2f5f21c495b","sequence":{"long":179},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93d69b33-a08e-40cd-a322-59404cb9f748","sequence":{"long":180},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f1503ba-99d9-4ef4-a65d-52d4ee9f05a1","sequence":{"long":181},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"65a0c3e1-4df2-5355-b24d-52809553d9e2"},"predicateObjectPath":{"string":"/lib/libcrypto.so.111"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfa64af9-1b95-4e96-a186-12855f773fa6","sequence":{"long":182},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"65a0c3e1-4df2-5355-b24d-52809553d9e2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"8a2ac349-5bae-1a5c-ae5b-70678c1aee0c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58d7f55a-f1b0-4347-8b72-957d9df970f0","sequence":{"long":183},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"8a2ac349-5bae-1a5c-ae5b-70678c1aee0c"},"predicateObjectPath":{"string":"/etc/ssl/openssl.cnf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"350d2fc0-4c99-46f9-8df8-c05ddd9c0688","sequence":{"long":184},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"8a2ac349-5bae-1a5c-ae5b-70678c1aee0c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d665e1f3-467a-11e9-aea8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea5a5a5e-8cbb-4f93-96f4-5d978a568321","sequence":{"long":185},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d665e1f3-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d665e5a7-467a-11e9-aea8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19e5bf47-ff3a-44cd-8b32-977b6a50b7c9","sequence":{"long":186},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d665e5a7-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5913a40e-2aee-40e2-b2cd-7cec2a723a91","sequence":{"long":187},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ebba93e-670b-4643-8520-f3f33e23b61c","sequence":{"long":188},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4f28ffc-4444-43e9-805b-be0914169e18","sequence":{"long":189},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab353c10-2b6b-49ad-ac95-5f06a6850a96","sequence":{"long":190},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00cc8548-a742-49ae-9c29-abd7b364809d","sequence":{"long":191},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ad037f9-6874-4f5c-a667-7ec8ba2e1ac7","sequence":{"long":192},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12a108b6-84aa-43a6-8e72-6517e8c0b456","sequence":{"long":193},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e430b068-937c-46a3-b14c-ce4328437db8","sequence":{"long":194},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0d6f6f4-cc76-475f-a1a3-0f52754e4a8c","sequence":{"long":195},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af8ae1f2-e64d-4562-b6bf-dfc6a10c52d9","sequence":{"long":196},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d5ee74f-819b-4bbb-a7c9-f1d48b8a7810","sequence":{"long":197},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f557c4fb-0733-436b-932b-f365cbeea981","sequence":{"long":198},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6c8822f7-64d2-8f57-9264-2ff0a78fab74","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2966a1b5-3251-4683-9943-5a93c40f6465","sequence":{"long":199},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c8822f7-64d2-8f57-9264-2ff0a78fab74"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_rsa_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f8d253e-852c-4d52-becf-d0f26f2ab6d6","sequence":{"long":200},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c8822f7-64d2-8f57-9264-2ff0a78fab74"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f1d8eef-fd8a-4f1c-8533-1d013e04964d","sequence":{"long":201},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c8822f7-64d2-8f57-9264-2ff0a78fab74"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_rsa_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e077d53-78c1-41d0-9799-6e23faa6639d","sequence":{"long":202},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c8822f7-64d2-8f57-9264-2ff0a78fab74"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d85dbf3f-8873-2550-b388-fc6420252c7c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fc2f3e0-486a-47a9-8253-b9b3212641ab","sequence":{"long":203},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d85dbf3f-8873-2550-b388-fc6420252c7c"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_rsa_key.pub"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6667d8b9-3692-4696-8e5a-e8f809472152","sequence":{"long":204},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d85dbf3f-8873-2550-b388-fc6420252c7c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"2e02cb3d-0826-5359-a608-18eeb9531fcb","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b997cb4a-9e50-40a9-8c94-d15881fe8f75","sequence":{"long":205},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2e02cb3d-0826-5359-a608-18eeb9531fcb"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ecdsa_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c356e2aa-5086-4e75-ba64-e7c73fc239c2","sequence":{"long":206},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2e02cb3d-0826-5359-a608-18eeb9531fcb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98e2c73f-2b66-4ee1-992c-fef648d87f18","sequence":{"long":207},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2e02cb3d-0826-5359-a608-18eeb9531fcb"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ecdsa_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf05a91c-58d2-4290-8f0e-3ee3dbe9b4e3","sequence":{"long":208},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2e02cb3d-0826-5359-a608-18eeb9531fcb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"3efd70ec-8129-a85e-a981-1a934ea8ee3c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df087153-b3ff-4791-a7f6-0ea2b074d3eb","sequence":{"long":209},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3efd70ec-8129-a85e-a981-1a934ea8ee3c"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ecdsa_key.pub"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88ea9b96-ac25-4575-9df2-def8329362b2","sequence":{"long":210},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3efd70ec-8129-a85e-a981-1a934ea8ee3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"9a762a17-c5f5-3250-b5c5-e86a20328528","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d709282-f474-44a2-842e-aae9f0613bf3","sequence":{"long":211},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"9a762a17-c5f5-3250-b5c5-e86a20328528"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ed25519_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0a6a076-1e19-47b7-bd7d-6dcec186b014","sequence":{"long":212},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"9a762a17-c5f5-3250-b5c5-e86a20328528"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf7372a5-2a2a-4a60-b695-686de301e527","sequence":{"long":213},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"9a762a17-c5f5-3250-b5c5-e86a20328528"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ed25519_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c74d790-e460-4757-9df1-a5f3d2641d00","sequence":{"long":214},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"9a762a17-c5f5-3250-b5c5-e86a20328528"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6eb7ebeb-1f96-1e57-961f-e755571e202c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4322a829-3b06-446c-b907-bed2504cdd71","sequence":{"long":215},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6eb7ebeb-1f96-1e57-961f-e755571e202c"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ed25519_key.pub"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ccf92d6-8017-489e-8deb-29953d31c598","sequence":{"long":216},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6eb7ebeb-1f96-1e57-961f-e755571e202c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e0fff81-b8b4-49d0-a45f-c264d914a589","sequence":{"long":217},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e908d83-92b6-4a1f-899e-e5e95ce83543","sequence":{"long":218},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"63","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"79047e1d-240e-be52-8e24-bdde62be883d","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_DIR","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8daa5291-52ad-4e65-bbbf-4736b54ce1e5","sequence":{"long":219},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"79047e1d-240e-be52-8e24-bdde62be883d"},"predicateObject2Path":{"string":"/"},"timestampNanos":1552582900843933382,"names":{"array":["aue_chdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce42978c-ee9a-4c7d-9368-8343eb85e278","sequence":{"long":220},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6641df6-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3b9239d-ea05-42cd-96be-3c8c194f06ad","sequence":{"long":221},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0006cbe-ad24-45ec-ae08-81c419b82c9c","sequence":{"long":222},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e7e7ebf-e58a-4698-96e7-cbc5bbcc2a6f","sequence":{"long":223},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05d7a1c8-7f32-41e4-8c11-700ac13bbafd","sequence":{"long":224},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"03614f72-3bf3-3753-b33b-4946a3373b97","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c747e0c-3e38-4fa8-a729-08cfd48ce1f1","sequence":{"long":225},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"03614f72-3bf3-3753-b33b-4946a3373b97"},"predicateObjectPath":{"string":"/etc/resolv.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"998981af-01de-43ba-a9ec-40f4eb986159","sequence":{"long":226},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"03614f72-3bf3-3753-b33b-4946a3373b97"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"35657c19-0d44-6554-840d-56131465bb07","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f29d0d50-40bc-486b-9ac3-45f7e47fc34a","sequence":{"long":227},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"35657c19-0d44-6554-840d-56131465bb07"},"predicateObjectPath":{"string":"/etc/gss/mech"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3a640a7-e4a4-452b-893e-38fbfed9507c","sequence":{"long":228},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"842f7c15-d3f8-6754-b8d3-e6077467aec3"},"predicateObjectPath":{"string":"/usr/lib/libgssapi_krb5.so.10"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"6","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04e3b3f6-e276-40ab-b255-807cb43c727c","sequence":{"long":229},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"842f7c15-d3f8-6754-b8d3-e6077467aec3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"16c3ea07-48df-ba58-9f48-087fd8bab643","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7b7a503-2dd3-4b26-bdd0-b12c35ee9dc6","sequence":{"long":230},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"16c3ea07-48df-ba58-9f48-087fd8bab643"},"predicateObjectPath":{"string":"/usr/lib/libgssapi_spnego.so.10"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"6","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3e99f90-3540-4280-84df-e2871067152b","sequence":{"long":231},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"16c3ea07-48df-ba58-9f48-087fd8bab643"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d59e71cf-f905-406f-b49d-91811de0801b","sequence":{"long":232},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6d131d3-3372-41cb-80f5-6a15aee73b58","sequence":{"long":233},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"35657c19-0d44-6554-840d-56131465bb07"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb8165c6-35e9-42f8-afcd-809940156bca","sequence":{"long":234},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901014716984,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":26345},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39abbfa9-d4b1-4127-8799-113cb0bf42d5","sequence":{"long":235},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5148f06-7818-4c25-abc2-d73d18d673c4","sequence":{"long":236},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40235112-df0b-4a70-a0e6-d5a2864a0e2e","sequence":{"long":237},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3275a5f-f84e-4f91-b685-c33af5451165","sequence":{"long":238},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c31b4a09-d791-49a1-ad33-207ca8835e3c","sequence":{"long":239},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8eee11a-66d9-418a-b5f1-1bd18b3d7fbd","sequence":{"long":240},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c3e715d-22ac-487c-9728-3ea0d5b4f7ac","sequence":{"long":241},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d9f520d-4dd6-400d-bfab-4d1b942877c8","sequence":{"long":242},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e963272c-63c5-41b6-9a5e-3ef40a389539","sequence":{"long":243},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe0a1c00-2487-4b85-b272-c9e116945072","sequence":{"long":244},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4d541c5a-9f32-1253-b29f-e21bd3128288","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55491fb2-cb6f-4861-bdae-2f9d70e5348e","sequence":{"long":245},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e2a1cb9-8222-40bf-a31d-7598ca4ce635","sequence":{"long":246},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"e1d2cd21-6a99-d55c-996a-4ae8bcd556d9","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63adcc23-82e0-4fc9-8c8c-08f13d7ebaf8","sequence":{"long":247},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"e1d2cd21-6a99-d55c-996a-4ae8bcd556d9"},"predicateObjectPath":{"string":"/etc/pam.d/sshd"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"7acb8e1a-7795-cf54-9577-7bb374cf7993","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3a55eae-57c0-4144-8fad-39c6c6512758","sequence":{"long":248},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":{"string":"/usr/lib/pam_opie.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db0e61bc-c34c-4095-9c87-dc50a1556536","sequence":{"long":249},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af8ed692-5362-4714-b502-6740cf02796a","sequence":{"long":250},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"731abae6-8f31-c05a-b18f-0bfe5ac06da8","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78bbdd3f-65fc-4090-b93d-a9d24e991555","sequence":{"long":251},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":{"string":"/usr/lib/libopie.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bffdefd-3f12-4152-8c18-d0c526ecce9b","sequence":{"long":252},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d92a625-3a20-44f7-8e3d-03c0e3cc6a1d","sequence":{"long":253},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":{"string":"/lib/libmd.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"906f2d2f-f378-448a-af87-7983bd808ff7","sequence":{"long":254},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a1f8e77-ebe3-4af1-9510-f2105683da3a","sequence":{"long":255},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0875fddc-2611-448b-910e-4c0d79f415dd","sequence":{"long":256},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91f3cdc2-cde5-4348-8e85-28e4d739aae5","sequence":{"long":257},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec1c1f01-b136-4947-824d-3bdb1e68a7a4","sequence":{"long":258},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4c76078b-0d74-bd50-b40d-548bf0bdcf31","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcd9a5f9-4caa-497f-a6bf-20baab69efff","sequence":{"long":259},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":{"string":"/usr/lib/pam_opieaccess.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d84895a-f1e1-441c-ae17-0056c622877f","sequence":{"long":260},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77a35287-9db7-4b3e-afa8-5121f8341d00","sequence":{"long":261},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c748ddf1-a9ac-40f4-ace3-cb8b5f7cb053","sequence":{"long":262},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e057b42c-b823-4c65-9868-8867f7a26d92","sequence":{"long":263},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"bd4f3750-1951-5c56-9119-d1a4d65c8c52","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1145bf29-7608-4e17-b913-cede2df1ff1f","sequence":{"long":264},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"445784a3-1dc4-4ac7-84ff-7c797e1e7801","sequence":{"long":265},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e68ec3e-16fa-4dca-b7da-5837ad51bffe","sequence":{"long":266},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"18eb50ef-3995-7f5e-9539-43795e7f5284","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4712d7a7-af71-43da-967b-b17e0a943e22","sequence":{"long":267},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":{"string":"/usr/lib/libypclnt.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c805eda1-86a4-46f5-8622-bdb0f9031e7d","sequence":{"long":268},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2edd8f98-adf8-43c4-9c29-a5c3d0e41994","sequence":{"long":269},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"248aab83-f7ee-44c1-8cea-d671ea20859c","sequence":{"long":270},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d535bd2a-3f8b-458f-b5d4-547b68e1788c","sequence":{"long":271},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"abf6fcaf-21ca-5a51-8a21-2a1e615a33b7","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17ffa222-ef75-4b3d-b36d-c7bdbfd8fa9c","sequence":{"long":272},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"abf6fcaf-21ca-5a51-8a21-2a1e615a33b7"},"predicateObjectPath":{"string":"/usr/lib/pam_nologin.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8ad114c-6030-489b-b807-f67b550d68df","sequence":{"long":273},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dbbc04f-784e-4eb0-b603-b126a4ddd5d6","sequence":{"long":274},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"abf6fcaf-21ca-5a51-8a21-2a1e615a33b7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80d054ac-3625-49da-bb41-5ab4b97b0606","sequence":{"long":275},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d0eeb9e-9a89-48cb-93c5-75811e66714c","sequence":{"long":276},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"abf6fcaf-21ca-5a51-8a21-2a1e615a33b7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"3c3bd098-e401-ae51-81e4-136b51aedffb","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19b8d9cc-5ef5-44e7-ae25-411818a84a15","sequence":{"long":277},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":{"string":"/usr/lib/pam_login_access.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9c0f9b5-9e07-41fc-b204-aaf5d5991bb2","sequence":{"long":278},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15f94daf-2926-44a6-9047-ca0dfc95e74d","sequence":{"long":279},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dce4836-c022-4fc4-b70e-d77bc5f79856","sequence":{"long":280},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"251b7718-9e88-470d-b8a3-7f5562308872","sequence":{"long":281},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7e3d444-b48b-4f0b-a249-0359d4d3eee1","sequence":{"long":282},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a3821f6-297f-4c67-a637-a6bd32037295","sequence":{"long":283},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"187fda5a-3a42-47f1-9ea2-827501cb50c0","sequence":{"long":284},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98eeb1b3-b502-4c45-88b1-f9fbc4addce8","sequence":{"long":285},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"223d8dc6-63c2-414f-be09-1d72ab7bf745","sequence":{"long":286},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"b1857442-6384-095d-8463-a0938d09e3b4","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3acfd6d-e3b0-4085-b2af-ef1dfbaabd15","sequence":{"long":287},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":{"string":"/usr/lib/pam_permit.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d12824e4-f100-48f0-9a49-52950adfc185","sequence":{"long":288},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9447caa-455f-42e8-b5a3-ab272e8089ec","sequence":{"long":289},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c36173f-8812-45a8-985e-ad86d0004e0c","sequence":{"long":290},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0f3c791-237e-4b74-8539-61cb58268667","sequence":{"long":291},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee218f01-3bca-4e38-bbc7-63084e43def8","sequence":{"long":292},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b09d0a2-5d3b-422c-b7a0-e3a741fcff05","sequence":{"long":293},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1274333-0b56-4416-a4e6-ec823f8b2305","sequence":{"long":294},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fea2017f-d1fe-47b3-8138-6ba785998424","sequence":{"long":295},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"800c0066-3c29-4940-8b3a-2d31773f473b","sequence":{"long":296},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f527ef9e-80eb-439f-92c0-b1ec5385c761","sequence":{"long":297},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"e1d2cd21-6a99-d55c-996a-4ae8bcd556d9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0776a573-9a1d-413f-b393-9e4eb957a373","sequence":{"long":298},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c26052d8-9a60-40b5-bf4d-68c79be0cc20","sequence":{"long":299},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d68855be-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b53ef38b-dbea-4687-b891-ca3471a59437","sequence":{"long":300},"type":"EVENT_CONNECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68855be-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","address":"/var/run/logpriv","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7132b5dd-efa3-4333-a54c-2683a6f8a82a","sequence":{"long":301},"type":"EVENT_SENDTO","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68855be-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"365","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0ede0cb-f987-49ee-bada-9c944cbbec29","sequence":{"long":302},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"365","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"aafb7a4a-d952-865d-92d9-3ff2ed86d364","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2b0dd69-5f6e-4d09-9b8c-7403e94d877f","sequence":{"long":303},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aafb7a4a-d952-865d-92d9-3ff2ed86d364"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":72},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"16","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af0e01f8-0123-4dac-a139-471e0f97f28e","sequence":{"long":304},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68855be-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a82b6364-820e-40ff-a5b2-f5afff8ef466","sequence":{"long":305},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcd54121-df79-4642-816b-a32095970c71","sequence":{"long":306},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d689a296-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1398b3b2-e603-4184-80cb-f37544159ba3","sequence":{"long":307},"type":"EVENT_CONNECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d689a296-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","address":"/var/run/logpriv","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08d43494-e648-4347-afc3-95188e2a2919","sequence":{"long":308},"type":"EVENT_SENDTO","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d689a296-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"366","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bdfcc38-a67d-4cdf-93a4-f614b025f7ab","sequence":{"long":309},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"366","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"066d9a17-87c6-4d2b-af3c-db5f9252e002","sequence":{"long":310},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d689a296-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"5a32b0cb-0331-045d-b103-151f6d0491a8","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a070c68-780e-469e-9a7c-42b75a7f0715","sequence":{"long":311},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8da5eaba-7378-4ac8-837c-da75c7a48c0d","sequence":{"long":312},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bc6ac2b-d826-4d9f-9dce-141fb78d572d","sequence":{"long":313},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dfe8ab2-45c1-42ac-8363-974aec7c3edf","sequence":{"long":314},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af097a8a-2a76-4e8e-bc0d-cf9dd03a33b3","sequence":{"long":315},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_setgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_gid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dd0842c-ec40-4a36-a750-68ee6f8d4d0e","sequence":{"long":316},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_setuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4217b766-ceea-43d5-8d85-5acc9e606f0e","sequence":{"long":317},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76c9bd2e-6c30-4279-bd11-23e222ace5c2","sequence":{"long":318},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Principal":{"uuid":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1","type":"PRINCIPAL_LOCAL","userId":"1003","username":null,"groupIds":{"array":[]},"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_PRINCIPAL","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2cb19f0-dca7-46f8-be21-8ea23ad06744","sequence":{"long":319},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_setuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2cb1f0e-8603-485f-a664-aa56b7fe362f","sequence":{"long":320},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_setgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_gid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"764338e7-cd3a-4356-aab5-83a562c0b1ba","sequence":{"long":321},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a059305d-849d-4e8e-83e2-a12795b8c249","sequence":{"long":322},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d68b229c-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2eb2de9a-2dfd-4ae8-96bc-7cb25d41a6d1","sequence":{"long":323},"type":"EVENT_CONNECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68b229c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","address":"/var/run/logpriv","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9eb57182-446b-4a9d-8938-96feb7532b6a","sequence":{"long":324},"type":"EVENT_SENDTO","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68b229c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"367","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b9a8efe-4249-4d97-9b5d-8d257054c352","sequence":{"long":325},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"367","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66345ed6-d527-43ca-9770-4659d838eb8e","sequence":{"long":326},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68b229c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d68b2f86-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d68b2f7e-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"451d2f4d-85e5-5e41-8e4d-3f4658210a34","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"d68b2f7e-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"d68b2f86-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a9127e7-e927-48db-96e7-4473279991d9","sequence":{"long":327},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"451d2f4d-85e5-5e41-8e4d-3f4658210a34"},"predicateObjectPath":null,"predicateObject2":{"UUID":"d68b2f86-467a-11e9-aea9-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_socketpair"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","ret_fd2":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d68b38c5-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1280,"parentSubject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":1552582901083905501},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06831220-3724-44f5-b978-7d1ade1c3a42","sequence":{"long":328},"type":"EVENT_FORK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1280","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1280","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22c574bb-b748-4b5c-9db0-435a53ca684a","sequence":{"long":329},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":{"string":"/etc/opiekeys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2111c07c-0380-49f0-865c-a4c913558c20","sequence":{"long":330},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":{"string":"/etc/opiekeys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"9","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ea29288-16a4-43a3-9ebb-3ab1abedf9f0","sequence":{"long":331},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddf7e276-70f4-49cb-93ea-f05b6639a6c3","sequence":{"long":332},"type":"EVENT_LSEEK","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d7123c4-1c38-4592-bc49-6c3ec2f96d51","sequence":{"long":333},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46b0480d-78c7-4b0e-ada6-fb250ef5dd82","sequence":{"long":334},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20d03e99-4a24-42f4-a212-b33a4c33afe8","sequence":{"long":335},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cad6407d-2d07-4a1d-9999-aeb105817c0b","sequence":{"long":336},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e87e3bb1-7b54-4021-b3ba-497b2712f8d1","sequence":{"long":337},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8dd2ec86-a7d4-4ef0-a770-5306689aad30","sequence":{"long":338},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92fd4808-65fe-4a09-9bc0-b763964e66be","sequence":{"long":339},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91a4f09f-5821-4ee3-b60b-2057498be933","sequence":{"long":340},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8738b380-e56b-451a-ae12-5265d75dd0c5","sequence":{"long":341},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adf8e0bf-679d-4d71-9605-bab74d214b85","sequence":{"long":342},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bd10aec-c141-4528-b95e-64bb31b1d244","sequence":{"long":343},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b25b9d1f-fa65-4b59-ad4b-846e019bb0a8","sequence":{"long":344},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":{"string":"/etc/opiekeys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8bc0bb8-8d4e-4a7e-ab9d-28f79c4ad9e1","sequence":{"long":345},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":{"string":"/etc/opiekeys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"9","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d25c23dd-5a7c-48b7-a54e-e2b2923d5adb","sequence":{"long":346},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af9b66f1-1de6-4c57-a8d4-fb4d14b5c4a7","sequence":{"long":347},"type":"EVENT_LSEEK","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89b3ffb1-51ef-48e8-bd95-34d083427de9","sequence":{"long":348},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa7fe6a4-a24a-442e-9d46-776f2f6427e1","sequence":{"long":349},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21cf62af-9e92-44ab-b50c-10ebf1db5663","sequence":{"long":350},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e102fd2c-8b00-4dd1-aa94-f2b99ab334df","sequence":{"long":351},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4565648-c33c-476d-a2f5-a812e192bf21","sequence":{"long":352},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e1e86ff-2532-4a72-9f88-c2a865abc925","sequence":{"long":353},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbef6bb6-225c-41ec-8c51-f3835a98cacb","sequence":{"long":354},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"388e300d-1e5f-4712-8415-948dfbe7939b","sequence":{"long":355},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb5b8f2e-f470-4bf2-89e4-7f7d574b0645","sequence":{"long":356},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20ea447a-3a19-4506-a36e-b358e2e6dae1","sequence":{"long":357},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8684b9de-09a4-48c8-85c8-ec5e23657f09","sequence":{"long":358},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8818f4a9-7acd-405a-839f-d758e2c6779e","sequence":{"long":359},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef57a3d1-030e-4aee-997c-0228ccd59db5","sequence":{"long":360},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7efd5624-dd43-4fac-bafa-a58d5c012367","sequence":{"long":361},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c16269e1-074a-48d5-8030-5bd9fcac23f9","sequence":{"long":362},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"368","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e56169b8-36b5-43e7-90fb-804d57eba751","sequence":{"long":363},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"369","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0341d373-e998-482d-8080-e3057702920a","sequence":{"long":364},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"370","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72e390d1-318d-43a3-8502-a99a20524bcf","sequence":{"long":365},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"371","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0337b81-5f91-4bf1-bbf6-f0d6cd582514","sequence":{"long":366},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"368","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64a55456-7c08-407d-865e-fb22bb04d20e","sequence":{"long":367},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902044028797,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":40841},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"629cf5c4-f945-41b8-9e14-fef14e0a0729","sequence":{"long":368},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":40841},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78be4d36-972f-4c39-b0c9-87f8577f1dcf","sequence":{"long":370},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3daa029-3d63-4e1a-a390-62d3f48b7bf0","sequence":{"long":369},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db6024e2-a0b2-456f-a4c3-e1deb75ef9ea","sequence":{"long":372},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60ac1b71-fbfb-4ea5-b5fe-b65935ba87c3","sequence":{"long":371},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8de5fd40-9a9e-4eb8-9f21-bbfc778df8b2","sequence":{"long":374},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b358fa45-aebb-44bd-9df3-b079d12823f1","sequence":{"long":373},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a2f1bb9-569b-45ee-ade0-a1e6f4f135cd","sequence":{"long":376},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"276f57c7-5245-4d00-82c7-9f6cad88419a","sequence":{"long":375},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86763354-6a8a-4a71-9b4f-55b487eaf2e4","sequence":{"long":378},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f9a7002-2bd7-40fc-81bc-83954bd89e03","sequence":{"long":377},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cdcec06-059e-40f0-96f9-c15fbcd91f80","sequence":{"long":380},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33cfccf9-7984-4bb2-a24c-c51d0b68840b","sequence":{"long":379},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe185077-bc39-4905-a6b3-8e2a3abf57de","sequence":{"long":382},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2e08d6f-e25d-4164-93a7-e5716e7fac66","sequence":{"long":381},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63f2fa76-a028-44bb-97e4-f3575ef9a9d8","sequence":{"long":384},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bee1db4f-a434-4d43-b698-3bea8f75d61b","sequence":{"long":383},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34bcdb3a-fc6f-4bad-a401-bce148c2e310","sequence":{"long":385},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c33c253e-d5f6-485b-b1bb-b17d632309b0","sequence":{"long":386},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"489add28-4bad-46a5-8a08-4fc83e65f78a","sequence":{"long":387},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2515ed62-3312-448e-828d-d7c37703c070","sequence":{"long":388},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4579},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3230bdb-b4a5-499c-b741-fc42683eb73c","sequence":{"long":389},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3220ff03-eba7-4436-afed-99c46959cd7e","sequence":{"long":390},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4632},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ec16b27-9a14-4bb1-9840-c03994b4c149","sequence":{"long":391},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d47409d-67e6-485a-82a9-fbd2a8f5a1ac","sequence":{"long":392},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21c5e9d2-574e-461f-8875-6abc617a2003","sequence":{"long":393},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5740},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20a6c54a-9f51-4ceb-a30b-577e8f53b5fa","sequence":{"long":394},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9864d8c7-c3f3-48d1-85ba-2b57020fc044","sequence":{"long":395},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5793},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f364c639-882c-4e69-955c-033eafda2266","sequence":{"long":396},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe512095-cddc-40aa-86dd-8dbe0d56b962","sequence":{"long":397},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16e3259d-e018-416a-ad94-98703a97af5c","sequence":{"long":398},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3817},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b793a00-e099-4bf1-952e-1ddd35e1d80a","sequence":{"long":399},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11ba8261-3f32-4906-b276-6239b5450e3d","sequence":{"long":400},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3870},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a54d977f-5004-4b7f-84be-7ce91b9e227d","sequence":{"long":401},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f0f3c74-5f0e-4096-9ac4-496bd2d93068","sequence":{"long":402},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc39e7ac-80ed-4914-ad07-892a86029200","sequence":{"long":403},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4856},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b85d1862-a9a7-4847-a25d-ba1b5e0fe6ac","sequence":{"long":404},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"239f10b1-8ea2-4df6-a9a7-3584a54dbe42","sequence":{"long":405},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bc454d7-e7ba-4963-8050-aadb762f69c1","sequence":{"long":406},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"496613d5-5fb6-4046-aa6e-532c7773d619","sequence":{"long":407},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5130},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8aae14a-4623-4a05-b1f5-27204cec9b66","sequence":{"long":408},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1af4f274-5f00-449a-a11e-ec0755681d0a","sequence":{"long":409},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fce8fb60-27c1-4a97-8df8-e95b682f3b0b","sequence":{"long":410},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8ddaaed-f5ba-48ec-a14c-0c7dba7b3487","sequence":{"long":411},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5263},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2200453-25d7-4c4b-9c76-b0a04af4d450","sequence":{"long":412},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f43d25b-f606-40f5-8a38-073a69ca3eb0","sequence":{"long":413},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6ea4042-e655-499a-bcf0-a3b5049b954f","sequence":{"long":414},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72991d7c-4dd6-4873-8bcb-99d3398ed6a5","sequence":{"long":415},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4091},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4dc568d-a12f-4699-a54e-9e4b99a98c6d","sequence":{"long":416},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a1fefa3-4c5b-4a52-8a04-04f04df043f0","sequence":{"long":417},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8162be12-2f09-4236-a07b-acf30fd8efe2","sequence":{"long":418},"type":"EVENT_SENDTO","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"372","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"071993f6-b687-4775-bf7e-8bb9a9d9ff3c","sequence":{"long":419},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"372","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06ccdb6a-1aa2-414e-a4b1-ccdb71706140","sequence":{"long":420},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e03ec178-8aae-4ba1-b232-dff5cadd0aab","sequence":{"long":421},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902134213067,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82f26359-fca0-4bd7-b890-f05fec943378","sequence":{"long":422},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902134213067,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c98d9472-3f61-4135-8357-e05dbbbab22a","sequence":{"long":423},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902134213067,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4909},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"584f6220-fb01-4a4a-b848-fd19d55b7436","sequence":{"long":424},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902134213067,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a71c57e-73ad-4532-9656-24d9c44eb998","sequence":{"long":425},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902134213067,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19758a49-8b66-48f9-bf6e-2648f5034473","sequence":{"long":426},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902143910395,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5183},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba157fbb-4bb8-45f2-b8b9-c13de3cb4788","sequence":{"long":427},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902143910395,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a29cda08-a43d-4839-99fa-e1401f289ebf","sequence":{"long":428},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902143910395,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9f4e104-408e-4873-8b69-7ddb5a342298","sequence":{"long":429},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902143910395,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5316},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f95d774-5098-4758-8556-ce6ea45496c4","sequence":{"long":430},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902153929763,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b7c3995-8564-4b0a-8f6a-33d7b8f82233","sequence":{"long":431},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902153929763,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e504386-ff54-4410-be36-74e80e77b7c4","sequence":{"long":432},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902153929763,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4144},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"052af949-5f29-40b9-a5ce-05506aaf5e7a","sequence":{"long":433},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902164461959,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84ad408c-d4fc-4779-9171-375132f6130e","sequence":{"long":434},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902164461959,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69a05fe0-cf01-40ed-91ce-11ddf4b68caa","sequence":{"long":435},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902164461959,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74b28478-7aa5-48b9-940f-48fcf77e8387","sequence":{"long":436},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902164461959,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca9047a1-5315-4eff-bace-d6d1ec76e690","sequence":{"long":437},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902173894545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"075bb5a5-563d-46f2-9fa7-35329d913f59","sequence":{"long":438},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902173894545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5a7bc64-5e87-450b-95d2-cddc36bea9d5","sequence":{"long":439},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce6013db-8b03-47fc-94e6-d5c31f0251ce","sequence":{"long":440},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"404ff917-f144-4add-9ed1-1a10ddd954fc","sequence":{"long":441},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2c0064c-ab17-41ba-a469-47f113af2a9e","sequence":{"long":442},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21335518-1755-498a-a701-f3c64a79b6de","sequence":{"long":443},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ab7014a-30d7-489f-bbad-c422da7aea28","sequence":{"long":444},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d16e4a00-89b2-4659-b72f-35e7a21c13c6","sequence":{"long":445},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"020da595-6abc-469c-9f5c-b0eee5bd2e8c","sequence":{"long":446},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"901d374d-8654-4251-b2c4-c27e65778d25","sequence":{"long":447},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07a55722-bddf-445c-ac0a-bae614af433b","sequence":{"long":448},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"656ce99e-b23e-40b5-8900-58e8d89771a9","sequence":{"long":449},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c8284a5-8ec3-47fc-a887-cb10781fa69e","sequence":{"long":450},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d38a73f1-9f17-6458-979f-93bf586467d6","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06378bf7-495b-481f-aa91-edc91ac2e584","sequence":{"long":451},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":{"string":"/etc/login.access"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f26d1918-2908-4998-9da6-28e3dbd236bb","sequence":{"long":452},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3affb60-14dc-4f3b-9ae7-156922bd133d","sequence":{"long":453},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2aed80e-be7a-4eff-8b28-6c5cd9ff1779","sequence":{"long":454},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06245a25-3f99-40d5-a647-a24510a2f91d","sequence":{"long":455},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e003b6fe-2646-4998-86ef-e1b5f5d9fb34","sequence":{"long":456},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f5aa224-805d-40d4-931a-a311d6aa1c8e","sequence":{"long":457},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87cc41a0-a613-40d8-a8c7-40f59aac3cfb","sequence":{"long":458},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8df72b4-8256-4d61-b432-61abaa61a6e5","sequence":{"long":459},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bed9613f-790b-4cfd-8c1a-ee4654f67ed2","sequence":{"long":460},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"170db1dc-8e03-42db-9f76-576dff452c76","sequence":{"long":461},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0249607-0a98-4bf9-bb85-195e37c6edae","sequence":{"long":462},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33dfd15d-7723-45da-b7a9-7188bd18cca7","sequence":{"long":463},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16af395b-d950-498c-9b2d-84ece53e684c","sequence":{"long":464},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53a1a961-195b-4e94-a395-bd30a6cb9007","sequence":{"long":465},"type":"EVENT_EXIT","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd706cfc-37c7-4c20-8760-723465392a3b","sequence":{"long":466},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68b2f7e-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Principal":{"uuid":"b6bafff7-aaf5-5f92-a862-aaf0a7ce63cc","type":"PRINCIPAL_LOCAL","userId":"22","username":null,"groupIds":{"array":[]},"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_PRINCIPAL","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d6767a33-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1279,"parentSubject":null,"localPrincipal":{"UUID":"b6bafff7-aaf5-5f92-a862-aaf0a7ce63cc"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5218c520-71c3-48da-b259-c921004f103e","sequence":{"long":467},"type":"EVENT_EXIT","threadId":{"int":100102},"subject":{"UUID":"d6767a33-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d6767a33-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d7b3f08d-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9baaa7dd-82f5-45f6-aaae-499da78fa70d","sequence":{"long":468},"type":"EVENT_CONNECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b3f08d-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","address":"/var/run/logpriv","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"225eb801-506a-4217-996a-8ace3427f552","sequence":{"long":469},"type":"EVENT_SENDTO","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b3f08d-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":140},"programPoint":null,"properties":{"map":{"ret_msgid":"373","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb9e65a8-a414-48d0-8768-d067e8d95f4a","sequence":{"long":470},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b3f08d-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d6766e84-467a-11e9-aea8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24fe5616-621d-45b9-bc6d-62d8394df3fe","sequence":{"long":471},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6766e84-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46e98cdd-95f2-4f94-8b0b-8a3f42e423ad","sequence":{"long":472},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6641bd1-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a29f367-75f5-4ea5-b03e-526d6d3e71be","sequence":{"long":473},"type":"EVENT_CLOSE","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"d6641bd1-467a-11e9-aea7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29098597-d681-45b0-b4af-1402ac2ab643","sequence":{"long":474},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":140},"programPoint":null,"properties":{"map":{"ret_msgid":"373","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab900d1e-91c0-4cfd-8034-8c6b9836b050","sequence":{"long":475},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aafb7a4a-d952-865d-92d9-3ff2ed86d364"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":66},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"16","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e53e54e-fe6a-4c63-ac04-144411058bac","sequence":{"long":476},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aafb7a4a-d952-865d-92d9-3ff2ed86d364"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":116},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"16","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"2d2507ac-3e04-4a51-843e-b086314a525f","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8249dd63-2d62-46dd-b03d-cb8590de9f57","sequence":{"long":477},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2d2507ac-3e04-4a51-843e-b086314a525f"},"predicateObjectPath":{"string":"/etc/security/audit_user"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"de49b29f-2171-c15f-b121-40390fc15206","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cfa2912-6e77-46dc-95bc-44aa2a66edd6","sequence":{"long":478},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":{"string":"/etc/security/audit_class"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97e42c7f-8f44-4abd-995d-cf6a6e64721c","sequence":{"long":479},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"dc2bb48d-13bc-c451-bc13-145141c492f2","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"739e2917-2a14-4dcd-ae64-6c2d88c4f2f0","sequence":{"long":480},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"dc2bb48d-13bc-c451-bc13-145141c492f2"},"predicateObjectPath":{"string":"/etc/security/audit_control"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"7","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"511c56af-dca4-4831-b63e-fe8ac9b92259","sequence":{"long":481},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2d2507ac-3e04-4a51-843e-b086314a525f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":27},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e91e580b-26f0-433c-8a1f-8d78b8150f7e","sequence":{"long":482},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2d2507ac-3e04-4a51-843e-b086314a525f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bfed555-ce64-4ab1-8520-4e5c3271a13f","sequence":{"long":483},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"dc2bb48d-13bc-c451-bc13-145141c492f2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e526acdb-4745-445a-8727-adb8f9874521","sequence":{"long":484},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"dc2bb48d-13bc-c451-bc13-145141c492f2"},"predicateObjectPath":{"string":"/etc/security/audit_control"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"7","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98fcbc9c-2fdb-41a4-9682-c9a82ad6ce26","sequence":{"long":485},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":{"string":"/etc/security/audit_event"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d51bd28-18a9-46bc-bff1-df6d379c7249","sequence":{"long":486},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74887e0c-7475-4f24-8eda-f3bd5169063a","sequence":{"long":487},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dda0bd8f-716c-4f5e-a5a5-567652b234f8","sequence":{"long":488},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":27878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d9e3805-7d25-4880-8fa8-9ff56adf42a3","sequence":{"long":489},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36a8a33a-6968-47ad-992b-cee034685f8b","sequence":{"long":490},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81399666-8368-4037-818f-ab225675e429","sequence":{"long":491},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d7b494bb-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d7b494b0-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"a70156ef-4174-5e87-b9cc-89c6de9cf2c0","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"d7b494b0-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"d7b494bb-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6f53973-b0c6-4bea-9758-20f6cd3a42e9","sequence":{"long":492},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a70156ef-4174-5e87-b9cc-89c6de9cf2c0"},"predicateObjectPath":null,"predicateObject2":{"UUID":"d7b494bb-467a-11e9-aea9-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_socketpair"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","ret_fd2":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eaa0f02d-9626-4549-97dd-84254a7cd785","sequence":{"long":493},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cedd44a3-1af1-4e9a-87a6-056d5944c3d6","sequence":{"long":494},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d7b4a9b3-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1281,"parentSubject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":1552582903033904685},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de3414c1-e56b-4803-9bca-2f6d52e15a87","sequence":{"long":495},"type":"EVENT_FORK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1281","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1281","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de9cc23d-ed5c-4d7c-97dc-656d7381c5f8","sequence":{"long":496},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_gid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bf05d2a-2ac8-446c-89d8-cb338b0ded59","sequence":{"long":497},"type":"EVENT_OPEN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3d44243-0d0b-40a1-a61b-88738feba6e6","sequence":{"long":498},"type":"EVENT_LSEEK","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e715c981-5e5b-4cf0-92c3-b217327d8711","sequence":{"long":499},"type":"EVENT_LSEEK","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edd9c9b4-2d79-4a34-ac15-1abc6837b247","sequence":{"long":500},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b63ddff-1552-4fd1-99a0-c901c3e58945","sequence":{"long":501},"type":"EVENT_LOGIN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setlogin"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","login":"user","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e352da6-8f1f-46d2-a3be-9b6533df7151","sequence":{"long":502},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbbea99f-b2da-456e-88ca-4e437adae1c7","sequence":{"long":503},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f81b3afb-00e8-4a12-b93c-b381df4a6f43","sequence":{"long":504},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9134f8d-3523-4e28-8a40-8ce1bc428a57","sequence":{"long":505},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4e78333-0af0-4c51-b427-e1da5e19ec94","sequence":{"long":506},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4ed02403-1761-215b-a117-fabcfb21c32e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58e18fca-9d73-4085-ac7f-b6f0f93db592","sequence":{"long":507},"type":"EVENT_OPEN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":{"string":"/home/user/.login_conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a3ef078-aaa3-4ec2-9d24-527a87a2c5ee","sequence":{"long":508},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcf795ea-8c42-43a0-977b-2431f25fa12b","sequence":{"long":509},"type":"EVENT_OPEN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e40e072-dd2e-4552-9d85-04aad1b8ca54","sequence":{"long":510},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08cb8c2f-b569-4185-9850-390028b67d66","sequence":{"long":511},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36ab949d-7576-4431-a49b-3699ebd819a6","sequence":{"long":512},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0da8aa1c-d76f-4351-92fa-d650b25e7b42","sequence":{"long":513},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ffb569a-5db9-4a0b-a300-9d00eca5b8d4","sequence":{"long":514},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5beda32c-0272-485d-9f63-e6df1ab1c4d0","sequence":{"long":515},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc8c80dc-f935-4046-af2f-0786b683d488","sequence":{"long":516},"type":"EVENT_OPEN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":{"string":"/home/user/.login_conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6230f854-20d6-49b1-8369-755273f40741","sequence":{"long":517},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57c06014-9174-41c7-88ad-f0fa2769ae64","sequence":{"long":518},"type":"EVENT_OPEN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"983d7bc8-830f-41fc-a74c-82f4f185c5e9","sequence":{"long":519},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4dd1bf50-7b87-44c0-9c02-a3e2c10b6d57","sequence":{"long":520},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4683f0af-45c2-4aaa-a797-508ba5ddcf70","sequence":{"long":521},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdc23cf6-ac18-44a3-a457-68732c9502ec","sequence":{"long":522},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d7b500ce-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d7b500cd-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"0f5606d4-74b0-5fe5-932d-ba013f81588c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"d7b500cd-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"d7b500ce-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b0a7703-06f9-4043-9b1f-42f82c62da04","sequence":{"long":523},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"0f5606d4-74b0-5fe5-932d-ba013f81588c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","ret_fd2":"11","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1981ee2e-3258-4dec-9d1d-df98e9ccca50","sequence":{"long":524},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7330e9dd-56c0-4c47-8892-65ea6eb55108","sequence":{"long":525},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fff309c-e2d1-4f4a-8c47-70b59075a2f9","sequence":{"long":526},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81751921-4c27-4dab-8ffc-f08c67769659","sequence":{"long":527},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b500cd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8edc98e1-d06f-462c-b32e-a5c1f140b59f","sequence":{"long":528},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7428a127-f506-4806-8700-fa5d1103d6b5","sequence":{"long":529},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b500ce-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbe9072d-eb5f-4a7c-9376-49d16aa47e38","sequence":{"long":530},"type":"EVENT_OTHER","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_posix_openpt"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ed281817-20f6-7e52-b620-7e7b827e05af","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63ca2bb9-703b-48f2-bc52-4d23195bcba1","sequence":{"long":531},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/pts/0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"11","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"11","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f85cf2f1-b0b4-457e-9860-53cbf1db7fd1","sequence":{"long":532},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6551a68e-6cc5-45de-bb65-1152a8a2dbaa","sequence":{"long":533},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab760bcc-c69f-4232-896b-a33acb8cc7bd","sequence":{"long":534},"type":"EVENT_MODIFY_FILE_ATTRIBUTES","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/pts/0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_chown"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"1003","arg_gid":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"581ec38a-fa85-4f55-bdd4-618be139faa5","sequence":{"long":535},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0f42bd0-4a11-4906-9386-7d9721d8e050","sequence":{"long":536},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2af55a4-21a8-4553-a430-41955cb75cca","sequence":{"long":537},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63b5a84c-24af-4cc2-bf89-94b6cddd159b","sequence":{"long":538},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"392e611e-0a03-40ba-b782-dc5884cd2beb","sequence":{"long":539},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47c520b1-2d8f-4f39-a46b-f112f34f5f02","sequence":{"long":540},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b0217a1-34bb-4c94-ae52-4c312f0be9fa","sequence":{"long":541},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a47640c7-b38c-4c12-957b-463706642148","sequence":{"long":542},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e17e910-313b-481c-af08-457dae636883","sequence":{"long":543},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85b3c6c8-8b71-4a58-9a4f-1012306550a2","sequence":{"long":544},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97d8043a-7144-4234-8879-8ace36de5031","sequence":{"long":545},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":{"string":"/var/log/utx.lastlogin"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6774d284-d74e-4d63-9f53-eb38da3dd94b","sequence":{"long":546},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e664b70b-f8b6-44f2-8250-9cb6a0e0589d","sequence":{"long":547},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2a9050c-aa6e-4018-b8e4-e3438e0bafff","sequence":{"long":548},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e734b1d-7c22-4a6a-a217-e82f187075ad","sequence":{"long":549},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82ca67a3-bb35-453d-8981-1bc282ebb287","sequence":{"long":550},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df0e7527-6c91-44a2-a41a-db7582c4c58b","sequence":{"long":551},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8943bba4-9aa5-450b-9c95-bc381a07447d","sequence":{"long":552},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cee5998-2744-4400-80e4-a759f4cef7ae","sequence":{"long":553},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39ac7cd8-e9da-40ff-a996-79784b1d56b2","sequence":{"long":554},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01da57d8-1a1d-42c7-8566-28979e5c6b67","sequence":{"long":555},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5156c3cc-0bcb-48ba-acc3-adbc86ebcdb5","sequence":{"long":556},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"97a20679-3a19-5355-993a-5a7f9553d88e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16c1d8b6-0407-4d55-85c5-2e04e980e792","sequence":{"long":557},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"97a20679-3a19-5355-993a-5a7f9553d88e"},"predicateObjectPath":{"string":"/var/run/utx.active"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00d1212f-4ece-42e2-a264-984eecf628fe","sequence":{"long":558},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"97a20679-3a19-5355-993a-5a7f9553d88e"},"predicateObjectPath":{"string":"/var/run/utx.active"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100222"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01a4"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"13","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17c5d7f4-9276-4fd3-b305-fe757eb50159","sequence":{"long":559},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"16386","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcf8620f-b539-4567-83d6-11cf8779e4c1","sequence":{"long":560},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"97a20679-3a19-5355-993a-5a7f9553d88e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05b43d44-8fa8-4b63-80a9-5c5fd3e8c32d","sequence":{"long":561},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":{"string":"/var/log/utx.lastlogin"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100222"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01a4"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"13","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2932888a-eb83-4c8f-b979-52556e86d43d","sequence":{"long":562},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"16386","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43c58ef8-ce4e-47f8-b961-a513075f9a5f","sequence":{"long":563},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":394},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1785b8d2-e352-4efe-ab51-abbbe4598c30","sequence":{"long":564},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":197},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a412d300-c4b2-4c3d-8c20-a50e13063132","sequence":{"long":565},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4516a868-a70c-915d-8ca7-5c9c1d91bbf9","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7f4fd97-db15-47ff-9a77-f13f120ff73a","sequence":{"long":566},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4516a868-a70c-915d-8ca7-5c9c1d91bbf9"},"predicateObjectPath":{"string":"/var/log/utx.log"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01a4"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"13","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0286064-348c-4a8d-bcb3-7c50298635e3","sequence":{"long":567},"type":"EVENT_WRITE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4516a868-a70c-915d-8ca7-5c9c1d91bbf9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":83},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"558b99a9-a554-4a93-b385-0f02ee43113e","sequence":{"long":568},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4516a868-a70c-915d-8ca7-5c9c1d91bbf9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bf39ced-e41b-4c6a-a347-d8a905ff39e8","sequence":{"long":569},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"97a20679-3a19-5355-993a-5a7f9553d88e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02bada3c-ef3f-4bbc-9c99-484e823b5ea5","sequence":{"long":570},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b246732d-6be1-47ea-b8f4-53d401431a2f","sequence":{"long":571},"type":"EVENT_SENDMSG","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b494bb-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_sendmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1663bf0e-4afe-4426-94d8-6172e4c1efef","sequence":{"long":572},"type":"EVENT_SENDMSG","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b494bb-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_sendmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b363cd2-b4d2-4069-bc23-13d18735c802","sequence":{"long":573},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10a527bb-79b8-4305-a59e-4a6dd6d0f457","sequence":{"long":574},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"11","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0433fa37-efcf-4951-bdd7-fcd75652f679","sequence":{"long":575},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":52},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf0c6008-7e48-4679-acf3-39ead5b58e23","sequence":{"long":576},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":133},"programPoint":null,"properties":{"map":{"ret_msgid":"374","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6db08f96-d265-463a-ab91-20b29d62d1de","sequence":{"long":577},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":133},"programPoint":null,"properties":{"map":{"ret_msgid":"374","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d63fd36a-2b40-402d-9235-0803f10ec97d","sequence":{"long":578},"type":"EVENT_RECVMSG","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b494b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5351c7c2-4734-4f48-866a-15d46f47587f","sequence":{"long":579},"type":"EVENT_RECVMSG","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b494b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d7b5a811-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1282,"parentSubject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582903044120595},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfc72035-2a5b-4eed-982b-685c858d57fa","sequence":{"long":580},"type":"EVENT_FORK","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1282","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1282","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13d184c4-e284-41cf-8926-a5709a602724","sequence":{"long":581},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da03e3e1-9488-4a54-95c0-2cec6ed20329","sequence":{"long":582},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9434fb9e-1e4b-45b2-868d-8bd1b34225a0","sequence":{"long":583},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"740782da-512f-463f-a395-c615ef41f2e8","sequence":{"long":584},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fa1eeba-8436-4a93-953e-ebafab29d3da","sequence":{"long":585},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b6ae2c2-a6a5-4d51-aed0-b3b04026c7c9","sequence":{"long":586},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"6","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38b5560f-8e77-4ca4-9931-a33dd4ca2aa9","sequence":{"long":587},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"375","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19a0ae1f-8aac-42d0-a3b6-9f12309ada2d","sequence":{"long":588},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"375","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba94e68d-ecf7-4f64-8e83-26965a2a2c1d","sequence":{"long":589},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/pts/0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"12","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88a43107-b539-4ff4-b8dd-d664e6da9000","sequence":{"long":590},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"319522c3-40e1-4d1c-b08a-a7e1c146ff9c","sequence":{"long":591},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"12","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0de9d27-30e9-4417-9512-6c220a95ed69","sequence":{"long":592},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16193494-183a-4f53-ad24-0adaecbec641","sequence":{"long":593},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a15aeb10-74aa-48b9-901e-8fbf2c02bb81","sequence":{"long":594},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"376","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"486c6601-e6db-432a-aa05-5970ddb796d3","sequence":{"long":595},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"376","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"fcf113a7-aa96-585f-96aa-757b7f5884e7","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e560a7c-7cde-4ea7-aa9d-891794110a3b","sequence":{"long":596},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fcf113a7-aa96-585f-96aa-757b7f5884e7"},"predicateObjectPath":{"string":"/etc/motd"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c09ad6cc-8fe4-40e8-b488-df197e3bc005","sequence":{"long":597},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fcf113a7-aa96-585f-96aa-757b7f5884e7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc23c5b4-ab42-4032-9977-36e92930d3d1","sequence":{"long":598},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ddb7a10-4af4-4e57-9903-5fee9730b089","sequence":{"long":599},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc047b19-f72c-40a7-a2da-3028a6ce82a5","sequence":{"long":600},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":{"string":"/home/user/.login_conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b59fb80-a936-40f4-be8a-4c7e03d5fea6","sequence":{"long":601},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9e4f98f-b4a6-49f4-ac93-5843f3dfa5cd","sequence":{"long":602},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d362ae1f-4fa1-49a5-b605-f0aa85986a5a","sequence":{"long":603},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21a749f3-ba14-40f7-bfc2-9d92e20047c8","sequence":{"long":604},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"998b6257-01df-4846-84da-6228805dc41c","sequence":{"long":605},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5759380c-4317-4340-b49d-22143bd340cd","sequence":{"long":606},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_closefrom"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"11","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"802da701-0471-305d-b104-2b472d304411","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_DIR","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8cae23f-a1c4-4129-b2bc-5ca945748e7a","sequence":{"long":607},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"802da701-0471-305d-b104-2b472d304411"},"predicateObject2Path":{"string":"/home/user"},"timestampNanos":1552582903044120595,"names":{"array":["aue_chdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3412eb2-d8f9-4d7c-be5a-6c896496677e","sequence":{"long":608},"type":"EVENT_EXECUTE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582903044120595,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"-bash","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce7bbf66-974e-4c7e-9453-d05038124df7","sequence":{"long":609},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8911075b-6b08-4152-930c-9f797a04883e","sequence":{"long":610},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25754a25-3452-465c-9f1e-7905d7310784","sequence":{"long":611},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0e9be0b-e461-4b23-9492-ba25dd6afdfe","sequence":{"long":612},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7494b34e-3faa-48ae-a8fd-4460c6a874d9","sequence":{"long":613},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d0b28b3-63da-4252-b89a-37ce50102e4f","sequence":{"long":614},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"234040e8-3e47-4552-9ad7-df609671fc65","sequence":{"long":615},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"daeb4278-2511-4fdf-a4d0-15537afba6b8","sequence":{"long":616},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb119f0a-c484-4613-849d-117d9ac839ac","sequence":{"long":617},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"584a4228-0bf7-4f6c-a867-75ed13cf9167","sequence":{"long":618},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bed566ac-edac-45cb-bf5b-8d8ca25062db","sequence":{"long":619},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d2744f2-8626-48db-a81c-90d6a1b95960","sequence":{"long":620},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d704d7c-0b17-4da0-ba9c-fcb88f30859c","sequence":{"long":621},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d422b402-31be-4aa0-9095-2b1e5127a3ea","sequence":{"long":622},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e842c3cf-7777-4b90-9e63-fb665360b55c","sequence":{"long":623},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4ba6c2d-dfc6-4f55-a56e-f6c32d6b38e0","sequence":{"long":624},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2227eaf7-bbd2-49e0-a38d-efa6d6d21dea","sequence":{"long":625},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"066d2f22-503b-3d5c-bb50-bda4ac3d505f","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fb4ee79-0e11-4fde-ad1c-fe9995fc18dd","sequence":{"long":626},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c73261cc-b30c-45f6-86e7-1ffc3c05e35f","sequence":{"long":627},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1827190c-9392-4ba4-a061-4e7fe0243ff3","sequence":{"long":628},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96836322-179f-46f5-b34b-7e654df62df2","sequence":{"long":629},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc2a9958-37aa-479b-b508-613d724614fc","sequence":{"long":630},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c01137d-58b8-4e43-ab75-d93cac8cc9a2","sequence":{"long":631},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca407f62-2667-489a-ac90-1f94ee239d20","sequence":{"long":632},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bafac26a-e9b1-4f1c-926c-6709d3e247fd","sequence":{"long":633},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5f6e868-99c9-4940-b55c-821ef7c6a736","sequence":{"long":634},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2d5df5e-8b7c-46b0-bbc5-e3be9111e86c","sequence":{"long":635},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e8f6680-17cf-4c75-a4b2-13dadf6e5b16","sequence":{"long":636},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ca9d64d-f667-4d7e-a9c5-45dbd1f3012e","sequence":{"long":637},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":66881},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"577ac4b1-65b0-48d7-bc73-d9c5335e2534","sequence":{"long":638},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"324dbc89-1b31-408b-b682-4679752d10ee","sequence":{"long":639},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70646d7f-b52e-4f67-808b-3908172bc75f","sequence":{"long":640},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a830b7e-47dd-4334-8da6-b24dd3cafbe2","sequence":{"long":641},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6b933d2-a14c-4c0b-a2e7-f57ac81d564f","sequence":{"long":642},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21e9ad75-1dcc-4d69-97c9-fd1ea04afaec","sequence":{"long":643},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2be5e9b-585d-4577-9053-89439add2d33","sequence":{"long":644},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51a0a867-c4ee-4704-a9fe-79e6f5711442","sequence":{"long":645},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24bea6d0-c6d8-411a-a517-ad8e98cd4467","sequence":{"long":646},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48112f42-1a00-4d15-81ed-46a1f53417c8","sequence":{"long":647},"type":"EVENT_MPROTECT","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d262b6f-b83b-497e-8178-8408a2221209","sequence":{"long":648},"type":"EVENT_MPROTECT","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc50844d-2564-4cf7-8ed6-ba244559d47f","sequence":{"long":649},"type":"EVENT_MPROTECT","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5664d4a-5ab5-4910-9558-9737243ba346","sequence":{"long":650},"type":"EVENT_MPROTECT","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"049bebd6-2c90-4352-8cc8-f9a853df885b","sequence":{"long":651},"type":"EVENT_MPROTECT","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0972c42b-5289-439e-9157-6b07875912f5","sequence":{"long":652},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97e17ba5-5223-4cc5-b382-5afe820cb4bd","sequence":{"long":653},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b60a9b35-db93-4909-963c-b9175afb49f5","sequence":{"long":654},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30725960-37f2-4bb4-8271-7307bfccacaa","sequence":{"long":655},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba921bcc-d05d-47d4-b7c2-3520a88415f7","sequence":{"long":656},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae4e8dbd-1645-4eda-8e12-9298d844129e","sequence":{"long":657},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d69bccde-b41d-45dc-9784-cc27284a4e4f","sequence":{"long":658},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":{"string":"/etc/pwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b2e5514-236a-4325-9fe9-061bf8315db7","sequence":{"long":659},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14210e09-bddd-4040-a725-e702c6b93535","sequence":{"long":660},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a0734eb-44c2-44c9-88c2-cc0ddfac741e","sequence":{"long":661},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b669cd9-2f48-4e62-9074-a5dbc8e22795","sequence":{"long":662},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"248a121f-91b6-41ee-9ed6-6584c205594e","sequence":{"long":663},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e791ad6b-788f-45ce-9456-30e1a5783b35","sequence":{"long":664},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b33d8bd-8487-40ba-ad21-c36fab76e845","sequence":{"long":665},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16223b68-3829-41b9-a59d-27edda960567","sequence":{"long":666},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c70fdfbc-bf41-47d9-8fb6-2deee9b97484","sequence":{"long":667},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45dc1961-985b-4822-84ad-2dd10629d4fa","sequence":{"long":668},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6cb4e35-dcc2-4846-99dc-0be6cb1d4922","sequence":{"long":669},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"377","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e6743b0-5c3e-4559-b6b0-550f8e29981b","sequence":{"long":670},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"377","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e002c773-498f-42a6-b50f-2195d78b4162","sequence":{"long":671},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97a2bcdc-6a19-406c-bad9-e060446dd2a1","sequence":{"long":672},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"96d82599-7779-ef52-b977-075492ef8d39","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"964adc24-d26d-4a7e-858c-c562c180db6d","sequence":{"long":673},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42fcdf3f-eb35-4674-a998-b62e2baa85c1","sequence":{"long":674},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e30a8ccb-3558-4aaf-9ee6-5ea7cd6bcadb","sequence":{"long":675},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"240adc79-822e-4b0e-a47d-83921a6e6e2f","sequence":{"long":676},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d811575-f525-480f-be62-c7caf9c62abe","sequence":{"long":677},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"cdc8911c-7575-ae53-b575-90e5c3ae1b34","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"579d0223-aeaa-48ac-9139-c82e4e26200e","sequence":{"long":678},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cdc8911c-7575-ae53-b575-90e5c3ae1b34"},"predicateObjectPath":{"string":"/etc/profile"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb6223ff-1d6c-4b66-b51e-711eba6f2bca","sequence":{"long":679},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cdc8911c-7575-ae53-b575-90e5c3ae1b34"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":562},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c3e3e66-4205-42a8-bc3a-746ad9b61de8","sequence":{"long":680},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cdc8911c-7575-ae53-b575-90e5c3ae1b34"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80f0700d-bca5-4fe5-baf5-6149843480e7","sequence":{"long":681},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3"},"predicateObjectPath":{"string":"/home/user/.profile"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3b0ad32-1568-4e49-bd69-e397e845ce0f","sequence":{"long":682},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":881},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8555ec15-48b0-4548-9d19-0077e7268a85","sequence":{"long":683},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d7c185e7-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1283,"parentSubject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582903124345395},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca2199a3-39b8-4f13-84fa-aeede34cee57","sequence":{"long":684},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1283","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1283","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"b003464c-20bc-2258-bc20-35a2f822aca3","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a01859c4-2f95-4c89-b697-7f1784000ee4","sequence":{"long":685},"type":"EVENT_EXECUTE","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b003464c-20bc-2258-bc20-35a2f822aca3"},"predicateObjectPath":{"string":"/usr/bin/resizewin"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582903124345395,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/resizewin -z","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1150f71f-87d6-4746-a230-1ec3a773f114","sequence":{"long":686},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"487dd2b9-8aa7-458f-8003-41345882c51c","sequence":{"long":687},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0367d3f-91a7-434c-88c8-3eab350c9bef","sequence":{"long":688},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"917b95e4-4a9e-445d-a592-414d6c1a74bd","sequence":{"long":689},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec24a1c6-947d-4227-b1ef-470e526afd3c","sequence":{"long":690},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db4841ac-1d94-4320-806f-f0912e522aa2","sequence":{"long":691},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f3f9200-6cad-4fc4-b082-283218eff55b","sequence":{"long":692},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"694cd80b-efc7-4e8a-8cd2-bac31e278bf0","sequence":{"long":693},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ce7a682-6222-45ef-b4f8-2d4b1d171428","sequence":{"long":694},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7af71c31-8ec8-48a6-81ba-bf06debe7403","sequence":{"long":695},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62c3b405-681b-4dd0-8c8e-11de22da0495","sequence":{"long":696},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6e9f3b4-4631-406e-ab6f-1eaf9a14961e","sequence":{"long":697},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6109d032-ccae-4537-8666-8976d34114a2","sequence":{"long":698},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"224e18ae-eb29-46d6-9e3e-dfc20d77b3fc","sequence":{"long":699},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f531d37-1260-4b41-b71c-dda1fb91b9e4","sequence":{"long":700},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56c8f880-71ab-4a0e-af5f-e5891a76fd7a","sequence":{"long":701},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37762088-67a7-43b9-a228-75adf0088a5d","sequence":{"long":702},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e889925f-a33e-4619-a3d2-dd6df9bd4749","sequence":{"long":703},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c799b7a-3052-4c4f-8cf8-6ac5aaea48f0","sequence":{"long":704},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1278179e-b9ae-46e4-a657-3d551fb16dd6","sequence":{"long":705},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d9d1e7c-f09e-4f60-a6e7-e5f34bcb97f9","sequence":{"long":706},"type":"EVENT_EXIT","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d7c2196c-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1284,"parentSubject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582903124345395},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df104b9a-a855-44b6-a599-d4e14b518eac","sequence":{"long":707},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1284","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1284","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"973ecfbf-e437-0451-b7e4-41ba11046147","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d879082-f098-4ebd-ab65-0f178445de13","sequence":{"long":708},"type":"EVENT_EXECUTE","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"973ecfbf-e437-0451-b7e4-41ba11046147"},"predicateObjectPath":{"string":"/usr/bin/fortune"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582903124345395,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/fortune freebsd-tips","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1d3365b-bfa6-4295-8b84-886c91bcea92","sequence":{"long":709},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"674c2f89-cbe8-49ce-a009-68bb2ac90236","sequence":{"long":710},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6f0ccac-3cdb-4b37-b8b6-89fd38b3caf8","sequence":{"long":711},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0119ddcf-0622-4b05-9245-2772fa7c972a","sequence":{"long":712},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e873088-3a1b-421e-8b18-6f1f097d4314","sequence":{"long":713},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c08e53a-3014-4b87-8087-48e4e86e81db","sequence":{"long":714},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a751726-cae7-4d42-86f3-b3fb78274c42","sequence":{"long":715},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"525ca0d9-73e0-4e9b-a490-adea07f1492a","sequence":{"long":716},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbe6ef12-bde8-4a28-a401-db98fa7a55b9","sequence":{"long":717},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2408448},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87f6e606-978c-412c-a1c4-f1bd5c61a44d","sequence":{"long":718},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2408448},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f01fac3a-5f2e-4338-9b7c-74bf6c22bdaf","sequence":{"long":719},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30710549-bbec-4609-8c1f-c7e8fa0c82cf","sequence":{"long":720},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1035277e-33f8-43c3-88ac-fd5d192527ca","sequence":{"long":721},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2928640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b76c93d6-d9f6-4c56-9895-4c7ce6f19d2d","sequence":{"long":722},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2928640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"512e5d3f-5d11-4ff5-8e72-20a90af1b07f","sequence":{"long":723},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4259840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7266d00-b00a-4796-b247-938bb62a5112","sequence":{"long":724},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4259840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e19e0ab-5c24-493a-bb4c-3d2d656e4936","sequence":{"long":725},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78b31b18-1f19-4e25-8ed3-79ad4230b289","sequence":{"long":726},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a5e604d-b6aa-4eb9-8b78-5e05004e3830","sequence":{"long":727},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6781392d-67c9-4afc-a670-3b854c6656da","sequence":{"long":728},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":75810},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f42fbe5-be3f-480e-a853-91e775e67c03","sequence":{"long":729},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":75810},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f28a0dce-1558-4ecb-8e92-3d8cfd927ae7","sequence":{"long":731},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c0f3222-2316-46a8-8244-bef583a6feb6","sequence":{"long":730},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c31cfae5-a20e-4890-856a-dc257c100b7a","sequence":{"long":733},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbb68bbb-c6a7-435c-96ec-8d0e8629c127","sequence":{"long":732},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0424a49-dd62-4f5a-851d-833f5036d7ba","sequence":{"long":735},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12f3737f-77f4-4dbb-96e3-6882de2c4564","sequence":{"long":734},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61e5d529-700c-4273-8348-adcb73a29288","sequence":{"long":737},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15a3536a-42d3-4113-87e9-6b3c6e6acbb8","sequence":{"long":736},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e8f4f13-f64f-4ee1-82ca-1b8f44f6dfda","sequence":{"long":739},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6abd1d5c-7ce0-49eb-bf73-e4970eb1ed56","sequence":{"long":738},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b57661f-3fb3-46e6-8c29-d782d843be41","sequence":{"long":741},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbe70290-84fd-451a-8180-80514d6c67c8","sequence":{"long":740},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b69e7e7-e249-42d2-ab89-c6f187cb13ea","sequence":{"long":743},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00004609-379a-4f45-aa73-96c77d838a8c","sequence":{"long":742},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dadb59b-6c8e-49bd-89ae-8df2c93541de","sequence":{"long":745},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57ccd7a6-6b31-4c03-bf73-f842a94bebf1","sequence":{"long":744},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70d5b242-2723-4570-8601-0ac488f0d755","sequence":{"long":747},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c89e5c2c-3a54-495c-a444-580e30c8f6cf","sequence":{"long":746},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3c338fd-a12d-4ceb-a3ac-f54903793526","sequence":{"long":748},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b771ba85-2184-47f0-a9db-a60da2497378","sequence":{"long":749},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ee89542-e40c-4523-b3be-3da98d79f9bc","sequence":{"long":750},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61107bfb-ad32-426d-bffe-a40e7fb268a2","sequence":{"long":751},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4102},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d214b7c8-3e32-48e5-b86d-69e1773be27e","sequence":{"long":752},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0e30645-3007-43a1-99da-004ebadf9e61","sequence":{"long":753},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4155},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ced2110-b375-472a-9b20-66dc36c288c2","sequence":{"long":754},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cfac473-551b-47ac-900b-6779df8fac06","sequence":{"long":755},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18191001-33b6-471c-a056-407888ebeba7","sequence":{"long":756},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3634},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87e8ae75-44c6-4d82-a8b8-1126f0c3dcf7","sequence":{"long":757},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23c10702-2cd4-44bd-b13b-ba7859d3b2b3","sequence":{"long":758},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3687},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"932cf848-2bd9-4480-84b7-d902b4652942","sequence":{"long":759},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea6cabd5-f2a1-4b12-b4be-fc1d543bb8aa","sequence":{"long":760},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6195f990-c49d-442b-9657-8757ae5bc380","sequence":{"long":761},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4553},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6b18bc3-3599-40cc-856e-2c1bc77c4c16","sequence":{"long":762},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59e8f903-16c1-47e2-ab7c-aa06c55f05dc","sequence":{"long":763},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4606},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb50008c-961b-4c58-b242-fc9c24d4685d","sequence":{"long":764},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb65a46a-eee1-458d-bb15-7ca8fe6d901e","sequence":{"long":765},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b815f7a8-172d-453a-9c38-27b17bf0141e","sequence":{"long":766},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4190},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"beb0412d-a460-4337-aa95-e47a505641cf","sequence":{"long":767},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c815cdee-3007-47bf-8224-82c7933a2420","sequence":{"long":768},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5b24319-9b56-411c-b3e6-aa74426657cd","sequence":{"long":769},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a61df874-570a-43bf-8e10-fa0e74f3cd5d","sequence":{"long":770},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4727},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb6ad4b1-61dd-40d8-b7ae-4a927fdda872","sequence":{"long":771},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edc1d8b6-fc4a-443d-83dc-02bc9e76f045","sequence":{"long":772},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6775c9a2-6924-4edb-8385-d94807a63670","sequence":{"long":773},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6505dcd7-0798-4b70-99cb-5cd6aa815fa1","sequence":{"long":774},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4810},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54a23297-219e-4950-bb15-f2a9bb77bf25","sequence":{"long":775},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"556b0503-c2f7-4608-b5bb-d68daf38805b","sequence":{"long":776},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85ef667b-3b32-452f-8bd3-7c648785fa2e","sequence":{"long":777},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05d0978a-5668-4487-a46e-8b2720b8293b","sequence":{"long":778},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4200},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cd0bada-dd0a-4d19-9dd5-db75f37cb8ff","sequence":{"long":779},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f427c82-8cf2-4eb9-9dfa-5fe1f368af2b","sequence":{"long":780},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1a6640c-7d45-4407-ac70-96fd31b97f59","sequence":{"long":781},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ed7d81f-4acc-49bb-b345-7b3608f78739","sequence":{"long":782},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4721},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bf4103f-32ed-42d2-80ca-2681558b36ad","sequence":{"long":783},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905153966888,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":79717},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b92e8ff-e769-4264-a22a-875b0850de76","sequence":{"long":784},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905304236022,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"340ea310-c150-4430-ba2a-015b981c47a4","sequence":{"long":785},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905304236022,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"540dee7c-099b-4b17-a0d9-90077e402997","sequence":{"long":786},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905304236022,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f27ed8c-d843-4530-8b94-6677d98972ea","sequence":{"long":787},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905304236022,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b583ceaf-467a-11e9-ae9b-080027fc76ba","type":"SUBJECT_PROCESS","cid":1229,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7924b988-af38-4435-b47f-b96fd1b2d53e","sequence":{"long":788},"type":"EVENT_EXIT","threadId":{"int":100074},"subject":{"UUID":"b583ceaf-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"b583ceaf-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1226","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b583c213-467a-11e9-ae9b-080027fc76ba","type":"SUBJECT_PROCESS","cid":1226,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"dfc2891a-d014-6a5f-94d0-76881f6a1fb0","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95480bbc-ab0c-48f2-a265-176940283d27","sequence":{"long":789},"type":"EVENT_EXECUTE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"dfc2891a-d014-6a5f-94d0-76881f6a1fb0"},"predicateObjectPath":{"string":"/usr/bin/nice"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582905743923559,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"nice -4 fsck -B -p","ppid":"1","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e04679d-de54-48f6-bbb5-2769834d509c","sequence":{"long":790},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebae0ab4-ad2b-412d-b434-7100ca5d1137","sequence":{"long":791},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bf3a230-e502-4489-8347-6042810566a6","sequence":{"long":792},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0ca51b8-d4ad-4cd5-9c30-1032b0a8c814","sequence":{"long":793},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"210d77ad-5b03-4523-be6f-fff06c62aab1","sequence":{"long":794},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4918ef4-fe1d-42b3-95f1-e4d52066ecd3","sequence":{"long":795},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b5e7794-7763-44c3-a101-30e4de33a7e1","sequence":{"long":796},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2b06d11-2734-4d6e-b31b-05542895af3c","sequence":{"long":797},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e810ae32-be65-4ff4-92d1-8f1cb3b3a26f","sequence":{"long":798},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aaf32da9-90b4-4450-8517-c8c91ae6ecec","sequence":{"long":799},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"044bbd01-f5b9-410b-8f3a-a9d06988f27c","sequence":{"long":800},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32a9e7a3-f3f7-49c4-8437-02c8e3e94450","sequence":{"long":801},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9d86897-9b46-4831-8ce4-24d524981108","sequence":{"long":802},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f3b4cbc-0928-4785-a7e9-ba20f90890e0","sequence":{"long":803},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a57d5f0-f859-4b8e-a0a4-85ba722835e1","sequence":{"long":804},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f568897-4eeb-459b-bdd7-3dae6af1d15d","sequence":{"long":805},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e7047b3-1c6f-43b9-a85a-8da511be8a74","sequence":{"long":806},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41ce6bec-99a3-4283-b794-1e352006135e","sequence":{"long":807},"type":"EVENT_MPROTECT","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bef4e387-5cdf-4e05-aea2-536e011b4ece","sequence":{"long":808},"type":"EVENT_MPROTECT","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"19a7640a-bde5-2058-a5bd-6734c820ce3a","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"194141a3-ee9c-4daf-a837-f7d02f62609f","sequence":{"long":809},"type":"EVENT_EXECUTE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"19a7640a-bde5-2058-a5bd-6734c820ce3a"},"predicateObjectPath":{"string":"/sbin/fsck"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582905743923559,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"fsck -B -p","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aff0b87c-36ef-475b-a08f-cea1b86f3d79","sequence":{"long":810},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f42bceb-814f-49f6-aaa6-47edf8e2e006","sequence":{"long":811},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02ef1048-9583-4265-9f2c-b75c820b64a5","sequence":{"long":812},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04f237ff-7d9e-41ff-9fec-764228f58bec","sequence":{"long":813},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"296aeafc-0fd2-43c6-a41b-6fbfdfce2a3f","sequence":{"long":814},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbab9c7c-dfcd-4d6f-bb64-d3d25e6fa23d","sequence":{"long":815},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"209507d3-f82a-4424-afb9-14e0ef2f415f","sequence":{"long":816},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08fae9e2-6845-4428-980a-0789e3659505","sequence":{"long":817},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e20fde9c-eb04-48a9-a38b-c66196e78412","sequence":{"long":818},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61ded496-cb83-427c-af8e-e784e451eb0d","sequence":{"long":819},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f23e99b-dab5-4a99-820b-9e31f5ac7df1","sequence":{"long":820},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2404352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90a030e2-3ff3-4960-8d66-894d62ecbef0","sequence":{"long":821},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2404352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8246c4c-c9b1-4e5e-b877-e10ab3294b47","sequence":{"long":822},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2920448},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94c19122-9eb7-4d74-a47b-915ab217e0a5","sequence":{"long":823},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2920448},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0b14052-e194-41d5-a138-28d017e58499","sequence":{"long":824},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4251648},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9856210-6caf-413b-8130-cea608dc26a0","sequence":{"long":825},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4251648},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff925eb4-3bd4-4122-b337-6a0ac8b03c4e","sequence":{"long":826},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8333837-a219-46e9-9e6c-8fd39ff53464","sequence":{"long":827},"type":"EVENT_MPROTECT","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"808b1a0d-e925-4533-88cb-9652928f8a7a","sequence":{"long":828},"type":"EVENT_MPROTECT","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"7ff6a25d-5b88-aa5f-885b-b000bfaae0f4","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61c59632-dfd1-4627-8b20-c96f5f46843f","sequence":{"long":829},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"7ff6a25d-5b88-aa5f-885b-b000bfaae0f4"},"predicateObjectPath":{"string":"/etc/fstab"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d61f89e7-c614-48ef-a6e1-532245417bb6","sequence":{"long":830},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"7ff6a25d-5b88-aa5f-885b-b000bfaae0f4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":200},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d952a902-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1285,"parentSubject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":1552582905743923559},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"952c3304-f182-4785-8c8a-4ce5354b3604","sequence":{"long":831},"type":"EVENT_FORK","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_vfork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1285","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1285","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"434858bb-406e-6156-ae40-962bc661e15f","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15a410bc-a4f2-4d7b-a97e-77de49e4a2f5","sequence":{"long":832},"type":"EVENT_EXECUTE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"434858bb-406e-6156-ae40-962bc661e15f"},"predicateObjectPath":{"string":"/sbin/fsck_ufs"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582905743923559,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"fsck_ufs -p -F /dev/ada0p3","ppid":"1226","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e8e2b80-eaa2-472a-8550-cf756d10458a","sequence":{"long":833},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b70af86-a359-4511-9c83-2d2893b6862c","sequence":{"long":834},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11d0bdc4-5bc8-45cd-a88c-e578d1b38277","sequence":{"long":835},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23d62579-e776-4e96-ad13-b581e8f841c7","sequence":{"long":836},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63f33c61-f8be-4e5b-8410-5e42b5893d43","sequence":{"long":837},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d84d7068-2a5b-4569-912a-4d8a08affff3","sequence":{"long":838},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a036b2f4-c4ac-449e-b962-0f1993c28ef3","sequence":{"long":839},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"705f2f64-9841-0e51-8198-9150c10e05a0","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34dadd4b-137f-4a7c-8627-d5e5b5e2723b","sequence":{"long":840},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":{"string":"/lib/libufs.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c975770-925d-46ad-9902-ef421b6ad7cf","sequence":{"long":841},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2531328},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0591056-a0f1-45ce-bfde-2d15a6ddbdfe","sequence":{"long":842},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2531328},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39e5a673-dac3-46ce-8cef-a217697b7719","sequence":{"long":843},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2535424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b73ebcfc-363b-4710-8f60-894b6cd8896e","sequence":{"long":844},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2535424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"baf46ef0-def7-4c2c-afec-0424433ed0ed","sequence":{"long":845},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2555904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e58c7d9e-93b7-4635-845b-697fd33d879b","sequence":{"long":846},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2555904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c99db295-f980-4ba3-9308-b2cf4b7928f2","sequence":{"long":847},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adc4f155-7895-47bc-8410-9537c42b0971","sequence":{"long":848},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a60c672f-016e-4f92-ae09-11d74438fc1a","sequence":{"long":849},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6f0f31d-e00b-415a-b047-cfd947cacedc","sequence":{"long":850},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"736d02f3-89fe-449e-8d09-06f7398e8994","sequence":{"long":851},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2531328},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9320486-0c4f-498b-8bd4-d007710bf444","sequence":{"long":852},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2531328},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f972575c-4ed3-4524-aa16-abfc88fa442e","sequence":{"long":853},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2580480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18c50991-d18b-4636-ab44-398e25c31a2b","sequence":{"long":854},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2580480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8a386d0-352b-40df-92ea-253422d10b25","sequence":{"long":855},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3096576},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0881e364-c444-4180-b2a2-ac5e7c8a8265","sequence":{"long":856},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3096576},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c81b5bbd-2f87-41e0-9d00-5cfd1ea3d7c5","sequence":{"long":857},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4427776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3dbdb75-f015-476a-8d9d-9e178ff0adf4","sequence":{"long":858},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4427776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"147dd7d3-48c0-42c9-b5e2-3e1c533615f9","sequence":{"long":859},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"484e0081-4bd4-4f86-a458-555715689ef3","sequence":{"long":860},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9839d174-244f-4206-b721-c6b7ed238db7","sequence":{"long":861},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"007ca4e1-1ecf-422e-b2bb-6f5872bbc053","sequence":{"long":862},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"50dc865a-db47-1c50-87db-7aecd01c5655","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bf03b39-aa04-4c8c-8056-0f84fa346d2c","sequence":{"long":863},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"50dc865a-db47-1c50-87db-7aecd01c5655"},"predicateObjectPath":{"string":"/dev/ada0p3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75497776-519f-40f9-806c-093cb1b3520c","sequence":{"long":864},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"50dc865a-db47-1c50-87db-7aecd01c5655"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8192},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bc75362-91eb-4c61-be3e-b1a8c5208bbd","sequence":{"long":865},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"50dc865a-db47-1c50-87db-7aecd01c5655"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"238ee201-cf2e-4409-a02e-1b67922a26fc","sequence":{"long":866},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"50dc865a-db47-1c50-87db-7aecd01c5655"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0153ba13-586e-44c8-a7ba-224573e87256","sequence":{"long":867},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"50dc865a-db47-1c50-87db-7aecd01c5655"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc7192f4-3e31-4a89-95ec-ba83c87a5126","sequence":{"long":868},"type":"EVENT_EXIT","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cc7006f-644f-4470-a6a3-b0ab25792f08","sequence":{"long":869},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"7ff6a25d-5b88-aa5f-885b-b000bfaae0f4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d0bad95-8f0a-4b6f-8ad7-c749bee108d6","sequence":{"long":870},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"7ff6a25d-5b88-aa5f-885b-b000bfaae0f4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d468795-e780-4513-a747-bb2e94b5741b","sequence":{"long":871},"type":"EVENT_EXIT","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b583c3cf-467a-11e9-ae9b-080027fc76ba","type":"SUBJECT_PROCESS","cid":1227,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da26b924-4cfb-46ab-9265-e6216d0b213a","sequence":{"long":872},"type":"EVENT_EXIT","threadId":{"int":100084},"subject":{"UUID":"b583c3cf-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"b583c3cf-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905794548453,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"logger"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea2a00b7-5716-4ab9-9e3f-f29390ad65c7","sequence":{"long":873},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906124611700,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":79717},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c303ffc4-345d-41d7-ad58-0ed11ff12705","sequence":{"long":875},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582906124611700,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"600c3d5a-0f66-4f02-9a79-bf9902aef093","sequence":{"long":874},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906124611700,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"daaa0093-2f4e-4779-992c-763f1a17cdbc","sequence":{"long":876},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906178054811,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":88685},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92b55cba-5e85-4273-88d6-71736126987a","sequence":{"long":877},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906283883081,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"702b52e5-8871-4cfc-a71e-ec14dab1f906","sequence":{"long":878},"type":"EVENT_SIGNAL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906293906646,"names":{"array":["aue_kill"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"pid"},"runtimeDataType":null,"valueBytes":{"bytes":"0502"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"signum"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1282","arg_euid":"1003","arg_ruid":"1003","arg_egid":"1003","arg_rgid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"270e877e-917b-481e-b2bc-a05491f0ab2a","sequence":{"long":879},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906293906646,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a208092-75c5-4f71-ab09-735ef5a947c3","sequence":{"long":880},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906293906646,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac4f2dc3-df47-4c41-b356-a1096baa200e","sequence":{"long":881},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906293906646,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":21},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"471d8624-b81b-430b-80b7-a47dc4ca769a","sequence":{"long":882},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906623959179,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42dd50b5-a74c-46c8-a378-cc439449b43b","sequence":{"long":883},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906623959179,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf421791-bc58-40cd-a461-87e25687218b","sequence":{"long":884},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906714285543,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1962b97-9e7d-4bb7-95a0-dc003b80558d","sequence":{"long":885},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906714285543,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"476127e9-f173-4475-b8f4-99cc19125578","sequence":{"long":886},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906843870856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0076a342-2e21-4512-aaa6-e460927bd247","sequence":{"long":887},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906843870856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c46805fb-6177-4698-9170-fa01f9141511","sequence":{"long":888},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906994149349,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5a95cd2-1f0b-45b5-818d-2803787ea041","sequence":{"long":889},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906994149349,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0819a393-4c19-4cf6-950d-44bd60494bc0","sequence":{"long":890},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907074986277,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc05c45c-7836-4f56-9b9b-a7ec9e366194","sequence":{"long":891},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907074986277,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a43dcf2-d9bf-4209-a8cb-437cd274143e","sequence":{"long":892},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907183946428,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":90319},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f6c4fd5-c6d1-47e3-8474-8682e2223ac3","sequence":{"long":893},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907226215093,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98088b9b-a328-4fcc-b0d6-8a7a1b61b07d","sequence":{"long":894},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"802da701-0471-305d-b104-2b472d304411"},"predicateObjectPath":{"string":"/usr/home/user/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907226215093,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"74a0"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2751f30e-0cef-4221-b283-5014b2e8b472","sequence":{"long":895},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"802da701-0471-305d-b104-2b472d304411"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907226215093,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a372b209-bb6a-4fbd-b6f2-963b69a693ea","sequence":{"long":896},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907226215093,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":21},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aabb31dc-30c3-426a-bc62-fb68828aae51","sequence":{"long":897},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cff1d4cf-1c53-482a-94e9-864dac3cb824","sequence":{"long":898},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"384","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cef91ed-ddbb-427d-b503-249d0b205c1d","sequence":{"long":899},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"385","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b281927b-83ea-40ff-9f3e-89cbe4f05553","sequence":{"long":900},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"386","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da406e1c-f44b-42f0-a83c-ad42f11247e3","sequence":{"long":901},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"387","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46ddc3ca-e0ac-47ed-b9a9-66d9fc3cb544","sequence":{"long":902},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"384","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b661cb66-f427-41ae-856b-cbd9e583a29a","sequence":{"long":903},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"385","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2452681-302a-4e64-9df8-6d98e6a5d040","sequence":{"long":904},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"386","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01186fcf-610b-4372-8ebe-5628279204e6","sequence":{"long":905},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"387","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"820ff788-6c0e-4cc4-be85-2d398967d316","sequence":{"long":906},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":90319},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d0694aa-3e85-4bd8-ba3f-25bb50414821","sequence":{"long":908},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ba02f23-44bd-45a6-bc04-b9e5d31785cd","sequence":{"long":907},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e720bc0-98f8-4569-94f7-fc4f798335f2","sequence":{"long":910},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"894dcb43-5686-434e-b1aa-c345b4e4f825","sequence":{"long":909},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a0df46e-8a60-45dd-87f8-ca6afa6b2529","sequence":{"long":912},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fd08ba7-fe8e-4f6f-9b06-f927dfd5742a","sequence":{"long":911},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db7cf4e2-f562-43a3-8307-0131c13377c1","sequence":{"long":914},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a1e3bf8-6f93-4eda-9a9a-53fd50838d6d","sequence":{"long":913},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4640235-30f4-4eaa-98c5-cbd400c9be2a","sequence":{"long":915},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b02a360-0699-4c56-8bbf-531cb1b8d5da","sequence":{"long":916},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"188647ad-16af-4240-b9f9-712ef04a4b53","sequence":{"long":917},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22714fce-739d-4760-9980-b217277c66a1","sequence":{"long":918},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4520},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cd2cb3e-ce90-4e95-81fc-d2b718839ba2","sequence":{"long":919},"type":"EVENT_WRITE","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15c468e3-69ff-48f4-9524-513f8ba9b97e","sequence":{"long":920},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4573},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a12ca1c-f850-4197-b04d-b1af57f963c8","sequence":{"long":921},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0c71a29-44f4-42f3-af78-2601b6227e0f","sequence":{"long":922},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f8970af-80ea-40bd-8f8f-6bdf5e5204cb","sequence":{"long":923},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4440},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b55523f0-499c-4eb3-a6fa-0d7af5b2e427","sequence":{"long":924},"type":"EVENT_WRITE","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef847125-9938-44a0-9879-3d204e61a70f","sequence":{"long":925},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4493},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca602b7d-4c0e-4c69-a7ff-9d407de6e3e0","sequence":{"long":926},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35fe8ded-27ac-42f0-aa06-ac679a134fe7","sequence":{"long":927},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d5d7b05-87d5-4549-8195-46671610eb1e","sequence":{"long":928},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1630},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59dfdc88-2d15-4417-a7fe-981663686bea","sequence":{"long":929},"type":"EVENT_WRITE","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5de6d4b0-4a0d-4a7e-80f5-3e14fe0eec97","sequence":{"long":930},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1683},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faa94a93-7343-4aa9-b42a-87a44e4062a3","sequence":{"long":931},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03c42db4-ea9e-42f3-a463-c433ff83fc47","sequence":{"long":932},"type":"EVENT_SENDTO","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"388","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fd5abd7-3a56-4eab-bc4c-37a4febd08cc","sequence":{"long":933},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"388","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b519ed18-0002-4914-8c37-0007ac559e4b","sequence":{"long":934},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1513a9ba-9591-43fc-b9b2-27b292439433","sequence":{"long":935},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14a2d457-247f-4664-99d2-5ee6f55ce5e5","sequence":{"long":936},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42d2556b-86a9-4061-a45f-d816e20fed39","sequence":{"long":937},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4047b673-06ff-474e-8696-306088aa8ee1","sequence":{"long":938},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de9f3268-a572-4d39-a46d-86a978ab392c","sequence":{"long":939},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60e938be-051c-452a-89f9-f28ef3539789","sequence":{"long":940},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85e4154f-f1cd-4868-b338-db06dda88e7e","sequence":{"long":941},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908194056284,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":94688},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d062022-249d-4add-a0fb-81cf208569d6","sequence":{"long":942},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908713861358,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52bf772d-5cd5-4e49-8488-00311aae24b8","sequence":{"long":943},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908713861358,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"119d5330-cf9b-44af-8d7e-708477907a5c","sequence":{"long":944},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908904072636,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d92c375-9065-4a92-a50e-b0f3937c7399","sequence":{"long":945},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908904072636,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d18d2a5-049a-414a-a779-0396c4371894","sequence":{"long":946},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909013925442,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"5b518504-be76-5653-b6be-34ff435661ed","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fac97b87-0bd1-4292-b87a-5d26fc439289","sequence":{"long":947},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5b518504-be76-5653-b6be-34ff435661ed"},"predicateObjectPath":{"string":"/home/user/ripe-prov-tests-master/"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909013925442,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00bed0"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fac3ce44-bc46-4580-9eba-59c791b8fa68","sequence":{"long":948},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5b518504-be76-5653-b6be-34ff435661ed"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909013925442,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a2a3d1b-04df-44b8-b987-8451bcfbc286","sequence":{"long":949},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909013925442,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"738640db-cbd2-4d8c-8107-437e218dfb5a","sequence":{"long":950},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909204168075,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":95840},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2589a77-7dad-4b8d-a16b-34c7579b6ac3","sequence":{"long":951},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909294044101,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4aa7e70-1e0e-4b94-b7fb-c12a0a44145f","sequence":{"long":952},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909294044101,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"1edee73d-9a38-a754-b89a-6d3944a71c62","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_DIR","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95583614-dbb5-433d-b8f3-2e64949ecd75","sequence":{"long":953},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObject2Path":{"string":"/home/user/ripe-prov-tests-master/Linux"},"timestampNanos":1552582909294044101,"names":{"array":["aue_chdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f82f1c61-84bc-4dca-b359-1eaf8c6703e3","sequence":{"long":954},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909294044101,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f86f7665-0655-4aa7-9fd5-7d72dd40acf8","sequence":{"long":955},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909294044101,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":50},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6fd126a-b8ca-43d1-b634-550caf005344","sequence":{"long":956},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":95840},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c00f4048-1548-4d50-83df-1d37408eb1fc","sequence":{"long":958},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19d5f8cd-e2a4-480c-9c30-d9acd9250943","sequence":{"long":957},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04f59b7a-1c57-44e1-82a2-d9dbafb86986","sequence":{"long":960},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ccb4eef-b210-4421-ac24-88139bf9e01f","sequence":{"long":959},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7949823c-ec6f-43d3-b573-04f60014f34b","sequence":{"long":962},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b33f486-a708-4a4b-a980-2f0e44da34db","sequence":{"long":961},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bee5bab3-eda7-414b-802c-fe49f0410be7","sequence":{"long":963},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b785ddb-df03-4ce1-b491-25e7c3942cd6","sequence":{"long":964},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"618cb243-835d-4f62-85ed-835b5d257609","sequence":{"long":965},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe05741c-4a78-45bb-909d-1aecd167cacb","sequence":{"long":966},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4365},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9380f9aa-5a6e-4c1d-bc59-6cafb224704e","sequence":{"long":967},"type":"EVENT_WRITE","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"635d1229-75ce-49df-879d-76bbc1baa90a","sequence":{"long":968},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4418},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27a070b7-2b9f-42a8-85fc-b84f6d483190","sequence":{"long":969},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45813faa-d1b9-420f-99f4-509442f46b27","sequence":{"long":970},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e868eab-6241-47f0-b34e-b9b948a47558","sequence":{"long":971},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1148},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d38af48-f9f6-4adc-98be-2b608851834d","sequence":{"long":972},"type":"EVENT_WRITE","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b0bdb19-b296-440d-ad38-44b4922fc90f","sequence":{"long":973},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1201},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26c69e92-7cd5-4b33-8169-64908b857fb5","sequence":{"long":974},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fdb8922-e6f7-4175-8d55-af5e68529551","sequence":{"long":975},"type":"EVENT_SENDTO","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"389","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53f838c0-bfc1-4028-8ed8-a443f2663915","sequence":{"long":976},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"389","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd996551-ec7a-4405-9ced-db6b96385040","sequence":{"long":977},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c8c91cf-7b32-4c38-8f1e-97ebb399a04d","sequence":{"long":978},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0227f0f3-1f57-482a-b13f-5f639ff87061","sequence":{"long":979},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d69cd5f0-c1be-4ddf-8439-bd28095e854e","sequence":{"long":980},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910133863566,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed9e39fd-e8a3-418d-9079-251251a30d3d","sequence":{"long":981},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910133863566,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6091f5c-3656-48f5-b96a-b2a55721e422","sequence":{"long":982},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910223880459,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":98904},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0d2932d-cd2b-4bc5-a717-7ca4e4df1bbf","sequence":{"long":983},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910364402487,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e878899-500b-40bf-83a1-8e45d127c7ae","sequence":{"long":984},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910364402487,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de0caab8-926c-41bb-9ffd-0ffce7bb9b38","sequence":{"long":985},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910364402487,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed92e23f-0549-44c3-85ec-d3c27a3dd4b5","sequence":{"long":986},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910364402487,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":32},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18af5d18-f170-4a21-843f-c74a21443281","sequence":{"long":987},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7136c2c-bdf7-4714-a87c-5d2c663bf7b5","sequence":{"long":988},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"390","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66f5dfb4-10d4-44ba-9457-99855ad9d79e","sequence":{"long":989},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"391","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8caeac32-3fe9-4433-be65-136e135988ad","sequence":{"long":990},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"392","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"659a8219-6cab-4222-a2ec-969c0b1b811b","sequence":{"long":991},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"393","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f74d1aca-e8f5-41fd-9911-1b7bf43940b9","sequence":{"long":992},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"390","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43329a80-c569-4abd-831a-dd38774d055b","sequence":{"long":993},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"391","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc738e2f-0d40-42ee-a5a6-993cd9e812cf","sequence":{"long":994},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"392","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f98fa2f-a6e3-4983-852e-2789a7f6b23f","sequence":{"long":995},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"393","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44f83866-1c32-4e67-b5ca-39ee9e74681f","sequence":{"long":996},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911233887268,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":100381},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Principal":{"uuid":"8b7f9bee-dd02-5c87-9e7d-06cbbf6379ea","type":"PRINCIPAL_LOCAL","userId":"123","username":null,"groupIds":{"array":[]},"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_PRINCIPAL","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b5358eab-467a-11e9-ae89-080027fc76ba","type":"SUBJECT_PROCESS","cid":1028,"parentSubject":null,"localPrincipal":{"UUID":"8b7f9bee-dd02-5c87-9e7d-06cbbf6379ea"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"dc9aef12-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":null,"localPort":null,"remoteAddress":{"string":"107.155.79.108"},"remotePort":{"int":123},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d069a2b-bbea-44e1-a62b-13d7a3b7f49b","sequence":{"long":997},"type":"EVENT_CONNECT","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"dc9aef12-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","address":"107.155.79.108","port":"123","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1784682-23a2-4331-bf3e-a11b27a3c31e","sequence":{"long":998},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"dc9aef12-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"b5434a9c-467a-11e9-ae89-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"10.0.2.15"},"localPort":{"int":123},"remoteAddress":{"string":"107.155.79.108"},"remotePort":{"int":123},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f0a182f-13d8-4597-9bd0-3619b3d48088","sequence":{"long":999},"type":"EVENT_SENDTO","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"b5434a9c-467a-11e9-ae89-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"ret_msgid":"394","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"22","ppid":"1","address":"107.155.79.108","port":"123","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"b541acd0-467a-11e9-ae89-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80b7b7b9-abd5-4b18-b007-fde4db07a53b","sequence":{"long":1000},"type":"EVENT_SENDTO","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"b541acd0-467a-11e9-ae89-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":102},"programPoint":null,"properties":{"map":{"ret_msgid":"395","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"b50b2110-467a-11e9-ae7b-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c226894-fc9d-49b9-9aaf-4d7321efcdb3","sequence":{"long":1001},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b2110-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":102},"programPoint":null,"properties":{"map":{"ret_msgid":"395","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b6361d0-8a28-42be-95cd-8f364c16e447","sequence":{"long":1002},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":100381},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c5ab7fc-7269-48a4-8dd8-f1a00d40d97b","sequence":{"long":1004},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5970d8b5-1b53-4174-8118-adb3b15f04d3","sequence":{"long":1003},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"099ec8e4-07ae-413b-ad7e-5e22965f2a1b","sequence":{"long":1006},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fad95a45-526f-4a35-a3b9-3370d63aafb4","sequence":{"long":1005},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9d10b6e-a945-487e-8419-8984cee133d9","sequence":{"long":1008},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1908182-01c3-4778-9b54-1f0676bd48d5","sequence":{"long":1007},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e81f256-adc1-46aa-93cf-6a1f42a3d08b","sequence":{"long":1009},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e148ca1b-68aa-4bd0-b635-0cd27b37ba19","sequence":{"long":1010},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b304d79c-e504-4f3f-b378-73a4aebfa4c3","sequence":{"long":1011},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bb3b360-5db2-48c3-97f2-a555c8b1c556","sequence":{"long":1012},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3060},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90643185-497c-4546-9439-8146026bc24e","sequence":{"long":1013},"type":"EVENT_WRITE","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d1cf07a-f76a-4925-9b11-d797c0ce03c9","sequence":{"long":1014},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3113},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b81bf4cc-ad4b-446e-92da-722119d267ac","sequence":{"long":1015},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"498fa080-e13f-45b8-a83e-a36b0816f27a","sequence":{"long":1016},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a440e187-cb18-40c5-900c-c79704ce23f0","sequence":{"long":1017},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1473},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a690bad-b8d9-4176-8cb0-87f1768e5306","sequence":{"long":1018},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1526},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ee5bfff-58c0-462a-96c6-647dc0c2b556","sequence":{"long":1019},"type":"EVENT_WRITE","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc33dd88-2fcc-4b2f-b210-71c2b4d9414f","sequence":{"long":1020},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3003a406-dcb4-4d37-9579-6c8f036a7f9e","sequence":{"long":1021},"type":"EVENT_SENDTO","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"396","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"514fa39e-6fd7-456a-9a2d-5d7f740e67e2","sequence":{"long":1022},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"396","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6298d976-f6af-49a2-adb2-373277ad6745","sequence":{"long":1023},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a36b9e5c-e85e-43c5-beda-9cd1959a30a4","sequence":{"long":1024},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00c05997-bae3-42b8-af2f-f549ade17870","sequence":{"long":1025},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df0d1f6c-cf81-4d22-a2c4-badb462027dd","sequence":{"long":1026},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91efae20-10c4-47b9-ba68-2c6620b95f81","sequence":{"long":1027},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd4d262c-7687-4d5b-a579-1563f339e199","sequence":{"long":1028},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912204256412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b164f45c-42ae-4951-9e71-bc05c90b59bc","sequence":{"long":1029},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912204256412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12e9a4f9-fa5f-4e40-a2e7-4dc55e9b1d66","sequence":{"long":1030},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912204256412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0890773f-ed72-4cdb-b522-2606c8788636","sequence":{"long":1031},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912204256412,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":37},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a5abcec-4191-44cf-af67-cf35a67df60d","sequence":{"long":1032},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912243951039,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":103965},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6979acd-91ef-4cff-979f-efc589c90b0d","sequence":{"long":1033},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb44fb01-2b64-40f8-aaed-03b596cdf1f6","sequence":{"long":1034},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a2479c8-529f-4451-ba28-25b836d489ab","sequence":{"long":1035},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f6c3a15-1582-4a73-a322-35bc04a0d634","sequence":{"long":1036},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a02db2b2-3465-4fe9-afca-727f689ba3fa","sequence":{"long":1037},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e391b3fd-0826-431e-a40e-58e33b1d93f1","sequence":{"long":1038},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb982eea-4aa4-4a9b-810f-edd8571b2deb","sequence":{"long":1039},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3ba68f3-7f41-479d-8ee2-45bd02ec804b","sequence":{"long":1040},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913254283039,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":104813},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e4118e4-029c-4d7e-b225-eb203c46f6a0","sequence":{"long":1041},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79201e32-bbf9-4805-b3d0-bb10bacd77bd","sequence":{"long":1042},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"397","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13f79059-acb9-495f-aa5e-6aa2125fb3a0","sequence":{"long":1043},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"398","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42ab1b17-d58e-405d-abd8-c3f4904b5ef0","sequence":{"long":1044},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"399","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8806777-83ec-43db-b641-a7b3957e788b","sequence":{"long":1045},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"400","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad7e36fa-aa49-4776-bc7b-f62c774cac5a","sequence":{"long":1046},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"397","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b583fe30-3317-4bab-9916-891c8e70e633","sequence":{"long":1047},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"398","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c094ea7-0ec6-4eb8-ab38-26727681a96a","sequence":{"long":1048},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"399","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f7406cf-cf38-41e6-9a07-71e729651f19","sequence":{"long":1049},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"400","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c815f25-d98a-46b9-a313-509953bf8c1c","sequence":{"long":1050},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":104813},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"974482b6-1698-471a-bdcb-ca8059561a67","sequence":{"long":1052},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"232bc848-3b15-43f6-9ab9-bfd8c1709ef0","sequence":{"long":1051},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3e2662d-7bfa-43a9-b211-15d887352b46","sequence":{"long":1054},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fb69f02-4f1c-4a85-9f8b-b359e9bf6adf","sequence":{"long":1053},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48eaa505-5d10-4d62-9040-0a3dfacebe21","sequence":{"long":1056},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"542f8a68-dcbe-4a8d-8cac-5a245dac19ea","sequence":{"long":1055},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bca3eae-0d6b-4e3e-b310-c4171daf0ff1","sequence":{"long":1057},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6bd080a-55a0-4fa6-b263-989ab7a13e98","sequence":{"long":1058},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c76c8b0-6162-45b1-9411-038717c92bdc","sequence":{"long":1059},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce5ef47a-bff2-4d39-973b-41113527b629","sequence":{"long":1060},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3580},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d21b3a2e-52d4-4204-bbc4-01a295648b9f","sequence":{"long":1061},"type":"EVENT_WRITE","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8885b4f1-9ac3-49d6-9eef-651bfe03f8df","sequence":{"long":1062},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3633},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"936396dd-6510-45e2-83c8-7e2559f76f68","sequence":{"long":1063},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee36af8d-a255-43d5-b84b-d3cc05e0ba03","sequence":{"long":1064},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3632589a-75e3-4973-9a07-972b0e276e60","sequence":{"long":1065},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":844},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2eaf5b9-326d-4bf0-8b54-319aec407ea7","sequence":{"long":1066},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":897},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88942d74-5027-4bd8-8c46-446c57374aef","sequence":{"long":1067},"type":"EVENT_WRITE","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e02c2a5-e3b3-454b-bf15-6d5fb0b585e1","sequence":{"long":1068},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff11927e-f18e-44d8-868a-e050a7829a81","sequence":{"long":1069},"type":"EVENT_SENDTO","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"401","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf6d16da-980f-41ac-91f4-c4d0dec4de29","sequence":{"long":1070},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"401","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1d5429a-ef0b-48d4-97fe-46ecea9c8168","sequence":{"long":1071},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4633aa17-663d-487b-a252-43e5961f6908","sequence":{"long":1072},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70f6787f-ee07-4b13-bb4c-9c717c1b6e4d","sequence":{"long":1073},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4dba1570-0a51-4926-8e64-1e1eb29c23ec","sequence":{"long":1074},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a036159b-65b2-449e-8ce9-a031614835db","sequence":{"long":1075},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9bb8272-1f5a-486c-b681-b6e0ffd095a0","sequence":{"long":1076},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914153936323,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5f4e2f6-3ac1-40c1-a23b-3e8f2850b9a1","sequence":{"long":1077},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914153936323,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"182312c2-b40e-49de-a950-8853858705e8","sequence":{"long":1078},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914153936323,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1135c750-c1e3-4ef7-881c-83a876040960","sequence":{"long":1079},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914153936323,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"face66c8-76c8-4308-8779-02fc541085a9","sequence":{"long":1080},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914264068977,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":108412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18dc5b1c-6b7e-4f53-9679-463d4d0ea364","sequence":{"long":1081},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582915273963131,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":108777},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb4d8e06-7c97-4819-b072-7aad524bbbe3","sequence":{"long":1082},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":108777},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47e82d67-649f-49ba-b88d-bc2bdeb73b34","sequence":{"long":1084},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21c28d8b-c45e-4865-bbee-ff8b9f333eca","sequence":{"long":1083},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1897d38f-8ba5-459d-b31c-9ace6d2bb7ee","sequence":{"long":1086},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cd8a3c2-696f-4d48-b078-5d96c97d7e17","sequence":{"long":1085},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c39f28df-3275-45f4-a3ce-610479b39240","sequence":{"long":1088},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d264d767-c680-4ef0-87e2-4fb45dfcfe74","sequence":{"long":1087},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b18289a-019b-42f9-9374-fa282e155838","sequence":{"long":1089},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74f052b3-d2e8-423a-a2f2-888d331f8d6a","sequence":{"long":1090},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db045836-f650-48a3-956d-10a18bb18e8b","sequence":{"long":1091},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"277b7d9a-6e51-4fd9-8954-8883acdaf201","sequence":{"long":1092},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3595},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e02e2b3-6e5c-4498-aad4-0b4200d16716","sequence":{"long":1093},"type":"EVENT_WRITE","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f386619b-4476-400c-8770-b646c37dd8c8","sequence":{"long":1094},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3648},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a32096fe-6a98-4988-a2e4-37bb766ac24c","sequence":{"long":1095},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e8bb4b6-4db5-43ba-8e3c-9ad4e982429c","sequence":{"long":1096},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41f4a2df-4022-46d9-8d9f-d48053ad67be","sequence":{"long":1097},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ef9939e-417f-4fe7-a059-3301ef6be668","sequence":{"long":1098},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0259762d-5f75-427d-92c0-ec0b5fae3789","sequence":{"long":1099},"type":"EVENT_WRITE","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2b06777-5251-4b62-82f7-a0ac9c2304c9","sequence":{"long":1100},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4696ec32-9af9-44d7-828e-8e4c771b2174","sequence":{"long":1101},"type":"EVENT_SENDTO","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"402","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79c53812-1b80-4f33-b90c-0df6f8b3c623","sequence":{"long":1102},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"402","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b01dc2e-b911-4255-8699-851b57cfd87a","sequence":{"long":1103},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"328b5cc6-0494-42e8-8f9b-07c7e1206ad2","sequence":{"long":1104},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a2214a2-695e-4b93-b7f3-f795cc94671e","sequence":{"long":1105},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"225ae452-e216-4fd0-a239-63453894bb32","sequence":{"long":1106},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6568e17f-7191-4f65-ba7b-61bfb0098e7c","sequence":{"long":1107},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff173ed8-5a1b-4610-a410-1c3c4096721b","sequence":{"long":1108},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b31499fa-df8f-4696-8a06-c1d74be1dc22","sequence":{"long":1109},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"df8637e6-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1286,"parentSubject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582916153873169},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea1c7bd3-5422-459d-a1c4-88b48472c46f","sequence":{"long":1110},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1286","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1286","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fdc7904-b123-4ac8-b510-9315086bdcbf","sequence":{"long":1111},"type":"EVENT_EXECUTE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./bash_commands.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582916153873169,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ./bash_commands.sh","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"818ca2cd-4f22-4e88-a47d-d28110062bfa","sequence":{"long":1112},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"583da1c3-ccdd-4d63-911f-8df3b907c1a3","sequence":{"long":1113},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c1f8c89-a487-43c2-8347-76799fbcbc3d","sequence":{"long":1114},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"838b4edb-3523-4c41-a0c9-cd759f0e1901","sequence":{"long":1115},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a80bbbb8-c68d-4f3a-9fdd-da0438047850","sequence":{"long":1116},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d201cb98-1096-4cb2-acda-80d4ee93bda0","sequence":{"long":1117},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74e41ce2-94e2-4d59-bab6-fb4c73d698eb","sequence":{"long":1118},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ca68364-9a96-40d5-aee0-223897957f4b","sequence":{"long":1119},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70556886-f188-49e3-bbc5-194d13d65802","sequence":{"long":1120},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f09e82d6-0096-4477-a76a-619216b0bbb7","sequence":{"long":1121},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3d9c801-3619-4c33-952d-979967c00221","sequence":{"long":1122},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92b1fc73-4c5c-4b80-abe6-3a55426a05c7","sequence":{"long":1123},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2adc9882-8b91-4ba3-8089-55f3117ba825","sequence":{"long":1124},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14757a8d-d58b-4b1f-af45-66f6df2a475d","sequence":{"long":1125},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eeb6a037-f340-412f-b20c-687320a5fc52","sequence":{"long":1126},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ba9292e-7b8f-49b3-be57-53267b7ccf23","sequence":{"long":1127},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1acd8950-4874-40f0-a748-032d925fff1d","sequence":{"long":1128},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3f08e9b-9be9-4c73-a279-d020d8e18462","sequence":{"long":1129},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d23dde6-5b6d-4e08-bb15-f3d1b1c9ef37","sequence":{"long":1130},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e7a71cc-1594-4f2f-a6b4-764cd5da1823","sequence":{"long":1131},"type":"EVENT_EXECUTE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582916153873169,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ./bash_commands.sh","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"472564f1-f59f-45d9-964f-23abeb74fcae","sequence":{"long":1132},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8de60ef-386b-4c0c-8893-8a2f41ccd050","sequence":{"long":1133},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7646034b-80e0-41b1-83a7-0191294e1340","sequence":{"long":1134},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fef2c33e-6ac9-4f2b-b3b8-9f4a40124a88","sequence":{"long":1135},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ffad75f-7e5f-41ca-9215-9b1e87727210","sequence":{"long":1136},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"402158c7-8c7b-45fd-8864-d59014d0fbf4","sequence":{"long":1137},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36e74387-6e6b-4ba6-9d08-866dceca9769","sequence":{"long":1138},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9814d40-52a8-4cba-9e3e-d076236e3c3f","sequence":{"long":1139},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"103325b7-2e79-47b0-93fa-3927165fa255","sequence":{"long":1140},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a063d6d-50ea-40e8-b4a9-9ef8a5a28d22","sequence":{"long":1141},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dfc3853-bf00-488c-9b98-b013bb2059ce","sequence":{"long":1142},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"461a1317-49d3-4480-88cc-5729ed4518c1","sequence":{"long":1143},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"250123f5-012c-4b6c-8f1f-6a9b4a9d410c","sequence":{"long":1144},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48ce78f8-5798-43bd-ae5d-09860cb936c9","sequence":{"long":1145},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97a6391e-de59-41d6-ac96-b0acc4715c79","sequence":{"long":1146},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d18e959b-125f-4732-a759-3e54cd151f19","sequence":{"long":1147},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae23755d-c11d-455b-873d-1d0a1273ca7a","sequence":{"long":1148},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6609d24d-f4f9-4ff0-b695-2902efaf4b08","sequence":{"long":1149},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea7fccd4-a944-4f7a-9ba6-4de68924514d","sequence":{"long":1150},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"906746b9-eee3-4faa-ac30-1605ec1a676b","sequence":{"long":1151},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f408dd75-5328-444d-85f7-eacda29fe690","sequence":{"long":1152},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13217354-ce2f-4f9d-9256-0d1d96897e90","sequence":{"long":1153},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef3508c1-1498-423d-b2b6-71257a00582c","sequence":{"long":1154},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c883c71d-ac7a-4ce3-aef5-3b66b00e4581","sequence":{"long":1155},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d7939a4-9880-41b3-9ba1-c44a3a9ca6e9","sequence":{"long":1156},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96730554-0f83-41f8-82b2-7812eb770c09","sequence":{"long":1157},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"858e49ec-8938-4302-84aa-fe9bc78031e7","sequence":{"long":1158},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0c108fc-df37-48d8-86c8-4683df6417cc","sequence":{"long":1159},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4cca20c-0977-4316-b7fe-e372c5b88717","sequence":{"long":1160},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92e15c27-6edb-4bd4-9ac7-bb5fe12208ce","sequence":{"long":1161},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"021eaad3-86fc-4f30-b5ff-e2f0497e064e","sequence":{"long":1162},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6297473d-8a6e-41da-917b-7107ecae4dd4","sequence":{"long":1163},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e602fda7-ff2c-4250-ba81-19ce384963eb","sequence":{"long":1164},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66d0f492-4a62-4c6b-9569-d1ec43555c13","sequence":{"long":1165},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c54fc487-089d-43fc-8469-433267de324d","sequence":{"long":1166},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"295e6afc-8332-4658-bd37-e0d0af5a3bda","sequence":{"long":1167},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d7daab0-aafc-4566-b413-442f67d2e2d3","sequence":{"long":1168},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3dbb755-e904-4b9e-b8c2-58348a7b9d21","sequence":{"long":1169},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09d539d8-3fbf-48f0-8602-46fb02981b8d","sequence":{"long":1170},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6e26cc9-0063-4f25-8a49-b35eb275473a","sequence":{"long":1171},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8be43174-d6e3-4952-8285-63bff5770490","sequence":{"long":1172},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67beed4c-bfb9-4e04-adfb-4cba4d468c01","sequence":{"long":1173},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67d1f6ba-734d-4db6-bb1d-11cfc4d6b3a5","sequence":{"long":1174},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"affb939d-ea1f-4072-a11e-0a848accdfc0","sequence":{"long":1175},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b291c9a-0051-4bfa-b2f3-f83fb5bf105f","sequence":{"long":1176},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916294130790,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":117711},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e93e0f99-86a5-4d28-b985-69b474e97eaa","sequence":{"long":1177},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e80d47d8-887b-4364-87eb-699fade5340c","sequence":{"long":1178},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"403","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3159b40f-a175-4d60-8cef-6e7f03b72b68","sequence":{"long":1179},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"404","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5cc62c3-f369-4200-942a-f992a2c3cc0a","sequence":{"long":1180},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"405","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e82909a8-a9bf-463d-a6b3-441325301c3c","sequence":{"long":1181},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"406","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a4c7ad2-703a-4f69-ac6e-7c60c31646a9","sequence":{"long":1182},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"403","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7453aea5-837c-4c17-8de8-dafdd1277cb5","sequence":{"long":1183},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"404","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1103df46-b10d-4a5c-a215-0b9438360a43","sequence":{"long":1184},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"405","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6b6335a-a0f4-49aa-a1c4-6fe13081dbc2","sequence":{"long":1185},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"406","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"df874ee9-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1287,"parentSubject":null,"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d8c9fe4-1d62-41e1-9204-8b2040e50533","sequence":{"long":1186},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"df874ee9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"df874ee9-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abef7644-837f-4246-a3bc-ff1e350592be","sequence":{"long":1187},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e50f6fa-e996-4ef1-81e2-1800f9c5584c","sequence":{"long":1188},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d77e412-05ce-4048-868a-ac2c1770902b","sequence":{"long":1189},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc8f887f-f402-4a51-a1b4-f6d555a22879","sequence":{"long":1190},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1bbb09a-caf0-4355-8772-21ef0da3aacb","sequence":{"long":1191},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54075749-591f-4760-a145-b474f1fa8174","sequence":{"long":1192},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":445},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c91839f-56ac-470a-9d7c-3ce0d5cbc55d","sequence":{"long":1193},"type":"EVENT_WRITE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":11},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"783f207e-f75c-4315-8061-242dc636ca09","sequence":{"long":1194},"type":"EVENT_WRITE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":11},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f29036a2-8863-4024-a007-ff205e36b608","sequence":{"long":1195},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":241},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e022ec76-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1288,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917183902486},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c49bf767-5cca-441f-abff-ddebdc642d97","sequence":{"long":1196},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1288","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1288","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b8b7192-1d79-472d-8d3d-7064275ac6be","sequence":{"long":1197},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"cf557f18-9d85-b95e-859d-95f6feb980dc","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4731e0ac-4f7e-4758-bdb7-e80fe1e0bac3","sequence":{"long":1198},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45c29d78-1bea-4888-8237-f4b59899e7fe","sequence":{"long":1199},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d1524fc4-3a5e-855b-9e3a-5d212b8581ed","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"629ada1e-59df-4ccd-b4f6-b1cc74c91907","sequence":{"long":1200},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d1524fc4-3a5e-855b-9e3a-5d212b8581ed"},"predicateObjectPath":{"string":"/usr/bin/whoami"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917183902486,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"whoami","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fd317cc-f962-43c0-bc29-7ccd88d38c5a","sequence":{"long":1201},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bb7992b-48e4-4218-9a67-0d8285016be7","sequence":{"long":1202},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be835dd6-db6e-4a50-a229-53334bda60d3","sequence":{"long":1203},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e55401e2-69d3-4264-b750-2770cbec4750","sequence":{"long":1204},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdb6ed3b-bedb-4333-bba2-f43dcc5d2570","sequence":{"long":1205},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"314afb4e-bc47-4234-b036-23f11110979f","sequence":{"long":1206},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9560d32f-a9ab-41de-a5ea-6d6e30cc5a6b","sequence":{"long":1207},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2644db8-48ef-49a5-bfed-7377d6547cd0","sequence":{"long":1208},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57b436b6-60bb-4011-a49f-55721ef8636f","sequence":{"long":1209},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7af9e1c-26a3-4f92-8509-c2d038d507c2","sequence":{"long":1210},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a113bb33-f270-4706-9e52-a88f7282f491","sequence":{"long":1211},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e95cded3-fcef-4607-82b0-f0b4e27524d1","sequence":{"long":1212},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"891a6f1e-7e11-4849-a3bf-fec7ae074700","sequence":{"long":1213},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86e5bca2-c03c-40c7-b1b4-f4815a0dbdad","sequence":{"long":1214},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7893ef5-1588-4f9b-a089-4c731740660d","sequence":{"long":1215},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9581f80d-3a1d-4b3c-9851-1ab473fbd840","sequence":{"long":1216},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d57b100-e5d8-46a7-aec9-b513e7629a89","sequence":{"long":1217},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2a8c976-e81b-4a59-959c-79c316541d6b","sequence":{"long":1218},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0df6ab7f-7d47-49dd-bc8d-0f09c2cf5800","sequence":{"long":1219},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41130518-131b-48df-948d-2fd37c10d02c","sequence":{"long":1220},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9c62658-6003-4d71-8878-df2ef5da90b1","sequence":{"long":1221},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6e50ed9-93d5-41c5-8650-22f56ad49654","sequence":{"long":1222},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43a81124-582f-4f27-828a-37ccd6fef2f0","sequence":{"long":1223},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0aa5fa9c-97da-47d4-a934-267f979a8cb3","sequence":{"long":1224},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":{"string":"/etc/pwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dec6fcf-c5b3-4378-a02c-9bd7c9a65ff4","sequence":{"long":1225},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14925bb1-0ab9-48ef-9463-62ece03cadaa","sequence":{"long":1226},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"484cf392-57cc-495f-9d61-884236109571","sequence":{"long":1227},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6705e5e-d7cd-4135-87c0-4b89e169872d","sequence":{"long":1228},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2393890f-e1f5-4f65-9bbf-3c4d7c88fdfa","sequence":{"long":1229},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfb524c9-51c1-438e-b690-a29715e62161","sequence":{"long":1230},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4af3c73d-8f87-4991-b4c0-fa14659da25a","sequence":{"long":1231},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2eb3326-8ca7-4b79-9c07-806045e34399","sequence":{"long":1232},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25101065-41ef-46fc-a454-dd0b98f5ad5b","sequence":{"long":1233},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39b43550-1133-4d17-8575-f5d63f300071","sequence":{"long":1234},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6078d2b-b0b4-4fa7-8261-ab8d9a428ba2","sequence":{"long":1235},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac5ada16-259f-4b41-a682-a33059a7207e","sequence":{"long":1236},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a9719d2-01ad-457f-8030-dd3b86c46a06","sequence":{"long":1237},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":351},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9547274e-a1dd-4970-a80d-708415876995","sequence":{"long":1238},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":270},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e023b7af-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1289,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917183902486},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2281a571-23b1-42d7-9e14-2b7dbf22f778","sequence":{"long":1239},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1289","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1289","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53dc99f3-0acb-43ef-8f7e-7bcc50bcebfd","sequence":{"long":1240},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a6696a0-408a-4948-b136-b725fe3ffe94","sequence":{"long":1241},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b04f8a63-c8f3-473f-9e20-dd47791896d6","sequence":{"long":1242},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ab57cf3a-f09d-cd5e-9df0-38f66ecdfb24","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1d0261e-a0fb-44c4-abea-732b20cb4029","sequence":{"long":1243},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ab57cf3a-f09d-cd5e-9df0-38f66ecdfb24"},"predicateObjectPath":{"string":"/usr/bin/netstat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917183902486,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"netstat -n -l","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c127a6a3-15fe-4629-8709-0e0bc2c955f8","sequence":{"long":1244},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45eb69a0-3587-493f-8d72-c198e529c262","sequence":{"long":1245},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"404ae959-eb89-4e8a-80d9-a850635f58e9","sequence":{"long":1246},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38b5319a-b46d-4c2b-b733-d76bf6bcea14","sequence":{"long":1247},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b527a178-0744-4154-9bcb-72c895c71595","sequence":{"long":1248},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6e37503-aabb-417f-85af-5efeacb0e588","sequence":{"long":1249},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2004ee0-be31-4dbf-8495-fafa4ba24a18","sequence":{"long":1250},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"fee1ef9b-e913-9457-93e9-db4a97946773","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e79670d-3c45-4f12-b385-2a563f2ccfd2","sequence":{"long":1251},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":{"string":"/lib/libkvm.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ac75cc4-3a14-4432-8d07-985db1b6daef","sequence":{"long":1252},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94fa063e-4b87-4002-9435-f5c7d1cc08ff","sequence":{"long":1253},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bdfdabd-7d67-4672-9694-2c46dc639e96","sequence":{"long":1254},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2555904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e77123a6-2fdc-4cc4-990b-bbaeaf77f626","sequence":{"long":1255},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2555904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c09c0b3-1606-49bc-8645-17ff0951e1d9","sequence":{"long":1256},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2580480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4e83c9d-8504-4c31-8fc1-a48d0dbb5673","sequence":{"long":1257},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2580480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ef1c8c5-ff91-4681-af12-73ef236c0291","sequence":{"long":1258},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a197f7ae-f560-4b78-9f26-599f46a3fdfd","sequence":{"long":1259},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ed0a87d-b232-47d7-8dcf-c73c5c7cfcd4","sequence":{"long":1260},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e498a737-706e-4ff8-9a8d-f024e73c3da1","sequence":{"long":1261},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":{"string":"/usr/lib/libmemstat.so.3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f62baf29-ceb7-4837-8b5d-7d2115d626b4","sequence":{"long":1262},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7186639-f161-4e42-a18e-6d96638ea2db","sequence":{"long":1263},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"281c6e68-dd96-4c46-92cb-2241b5017107","sequence":{"long":1264},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cc08a96-ca28-4ca8-a6ad-d10c652ac961","sequence":{"long":1265},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d2e2695-09c7-4852-bb37-c105edae972f","sequence":{"long":1266},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2641920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23ddcea9-c763-4e5a-92a8-6f8c7f7d0285","sequence":{"long":1267},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2641920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be579a12-5739-422e-8ab0-5126cde9995d","sequence":{"long":1268},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba78aeaf-b4c5-4442-9b38-6c263d479ff4","sequence":{"long":1269},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b09682ad-709a-42db-bc4c-2337e009d2d3","sequence":{"long":1270},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0e2da77-eb70-47a6-876c-9ea064de1ab0","sequence":{"long":1271},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":{"string":"/lib/libxo.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f837d5ba-643e-4e71-b3b2-cd32453cd462","sequence":{"long":1272},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa5b0661-4f63-4a85-97fc-b39e16a28cb5","sequence":{"long":1273},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"733a104d-24a7-4138-b2a1-a0158b992427","sequence":{"long":1274},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f34581aa-2bec-4439-9226-cd287a9f0685","sequence":{"long":1275},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c65fc50a-7eee-4ef0-ac60-13bfe1a7b777","sequence":{"long":1276},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06924e96-56aa-49a4-a0b4-16ccc47c84d6","sequence":{"long":1277},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4b036e6-9f4e-4970-94f2-5b4e2600e642","sequence":{"long":1278},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2777088},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa0e97fe-eedb-44c3-86f2-0f1ce04aad6a","sequence":{"long":1279},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2777088},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebb9ea89-8b87-4590-9d99-f08ea5957eb0","sequence":{"long":1280},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04e6757c-a58f-4369-8748-960de1797795","sequence":{"long":1281},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc097008-bb96-47d0-bc38-c50032cf952d","sequence":{"long":1282},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bbe2c8d-8a0d-4858-bd71-4069ca493891","sequence":{"long":1283},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab9ddbb8-b8e4-4ea3-a109-7e20f08001d5","sequence":{"long":1284},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f443cc6-66d2-4736-9386-1cb3708c61c1","sequence":{"long":1285},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcba76de-b054-4518-8d04-f805a7a6c8be","sequence":{"long":1286},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2822144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d99251c-4746-48d1-897d-eceeede4d73b","sequence":{"long":1287},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2822144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b9645bc-a29a-4cd3-9e40-12177bff5e8b","sequence":{"long":1288},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb5deed1-3cf8-456f-af07-7ce2c9fc0765","sequence":{"long":1289},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c67d1a8f-4ad1-4f04-b617-f7aeff81328b","sequence":{"long":1290},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"603b87e0-3252-8c5e-9232-acf89e8c9393","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"188c32ad-1632-4cbf-a3f6-89b689dd83c2","sequence":{"long":1291},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":{"string":"/usr/lib/libnetgraph.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da5d98ed-9761-4ac3-bb3e-ca35961640c7","sequence":{"long":1292},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a01d4fb5-4cf6-4467-bce5-af91c580e71b","sequence":{"long":1293},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a18bbb7-a2f0-4b59-baaf-2e3008aca472","sequence":{"long":1294},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2883584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48a12c91-1987-4744-b7f6-afe1b41f7171","sequence":{"long":1295},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2883584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e77b0f7-cf2a-4a0e-b971-1220f7b6aafa","sequence":{"long":1296},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2891776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa9055f4-86b1-4438-a4ed-ec6dc26cb4d0","sequence":{"long":1297},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2891776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ded1244-55a9-4839-8178-116de6952cdd","sequence":{"long":1298},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2899968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"220cfc3d-288c-4c26-9033-6c1eacf4a1bb","sequence":{"long":1299},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2899968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eaf91744-01ab-438c-a4f6-69f69aff57de","sequence":{"long":1300},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"668cf02f-6f89-4390-b9c6-b88f12103e8f","sequence":{"long":1301},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22a2ff80-658c-4be3-ab9e-927525845d5c","sequence":{"long":1302},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"767e0d56-46a3-4877-ba60-905eeed209a9","sequence":{"long":1303},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d3e4ef4-c312-45ec-99bd-84a401f70078","sequence":{"long":1304},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a80260e-6cd9-4f31-a01e-0a66cacf4643","sequence":{"long":1305},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8ce79ec-de18-46c0-b547-036328e4d10c","sequence":{"long":1306},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f21b7ca2-ca59-42d4-be91-6bda0865b565","sequence":{"long":1307},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7321417-8f42-4879-9d76-77bcf675d15e","sequence":{"long":1308},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"899aed6f-4a65-4bf1-a782-44e14eccae7d","sequence":{"long":1309},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8ca598c-b712-44fb-bf7f-9cb75b2ab7e0","sequence":{"long":1310},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"7f31dff6-afc8-9257-88af-4252e792cde7","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01017549-1d6a-4b05-9427-16138ed59776","sequence":{"long":1311},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":{"string":"/lib/libelf.so.2"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5d8a1f2-4fcc-434d-8bb5-34cfdb1d3a6c","sequence":{"long":1312},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f2e751b-064f-484f-9b3f-5cfc41122c56","sequence":{"long":1313},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d896d799-95c5-4162-868d-15fa03e424f6","sequence":{"long":1314},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7077888},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d36e3a7-2b5b-4566-a00f-af2c3627c809","sequence":{"long":1315},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7077888},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fafd448b-6c3e-4d2a-902e-86e1041a64d6","sequence":{"long":1316},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7106560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f9287f0-6ee3-478d-b4bc-fa1d778c7391","sequence":{"long":1317},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7106560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7009d691-2688-491f-9d5b-5b11334b5c9a","sequence":{"long":1318},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7176192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12deb20a-1628-40dc-bfce-95728b5546fe","sequence":{"long":1319},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7176192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cc70e16-999c-4931-a0c6-02ab7a32a8d2","sequence":{"long":1320},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"682bb599-c54a-41a8-9898-dd4235f28d6f","sequence":{"long":1321},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18c0db45-aa7f-4db1-b7f0-29d4e5470b27","sequence":{"long":1322},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1160e0e4-10e4-4f24-bb3e-6b26e4249874","sequence":{"long":1323},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94e5d0a6-4664-4533-97d8-208d219b9dff","sequence":{"long":1324},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79855403-fe11-48d8-aa93-48b1b6202718","sequence":{"long":1325},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95a5093f-dc3a-441a-b946-57ab09e3f808","sequence":{"long":1326},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3378af45-3ec0-445b-9597-bcd32b4d9111","sequence":{"long":1327},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff8cae9a-396f-4ff5-95c6-7d0bfc98c796","sequence":{"long":1328},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91252abd-566c-40a9-8cad-7f8ab38ce5af","sequence":{"long":1329},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3089},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b245c2a8-7ec2-45e1-ad60-a55135a52419","sequence":{"long":1330},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52641376-bee9-456d-9d59-41043dc4d26b","sequence":{"long":1331},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":322},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dede54c-51b5-4188-ae28-5abd8d4f6ac0","sequence":{"long":1332},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":303},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e024fd03-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1290,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917194287948},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80e681ea-d954-43cf-8576-dafc2b0f9558","sequence":{"long":1333},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1290","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1290","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c4d7c5c-3292-40ac-b034-866a7e7be68a","sequence":{"long":1334},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"123fdb0e-5609-4145-b3b6-37793b3fae44","sequence":{"long":1335},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8779a32f-7bd5-4037-8132-ef35304768b9","sequence":{"long":1336},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"de3a34c1-0b17-8152-970b-4c2cb281885f","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e8df0bf-7a1b-4882-8c4e-ead01ea555e3","sequence":{"long":1337},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de3a34c1-0b17-8152-970b-4c2cb281885f"},"predicateObjectPath":{"string":"/bin/cat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917194287948,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"cat /proc/cpuinfo","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e1c59e3-8b34-4d5f-8be0-3a7e94671972","sequence":{"long":1338},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f146089-fceb-4595-a554-957e89badb30","sequence":{"long":1339},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c07f241-9921-425c-aa04-c905d2591249","sequence":{"long":1340},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54b56456-aebd-4f53-82cc-ae51095e0021","sequence":{"long":1341},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6b89f33-3aef-4a59-a26f-25d819c7af42","sequence":{"long":1342},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cd2f48c-c11c-49ad-9b4b-b9f871c9164f","sequence":{"long":1343},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1fa184a-7e11-4ed1-afaf-fa14a2206f91","sequence":{"long":1344},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81fa2518-e648-4c18-aa00-64f5c1d67a35","sequence":{"long":1345},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf2fe16e-d764-4644-8842-15e670f052cf","sequence":{"long":1346},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73079162-942b-4509-9a5a-ae75ca53a10e","sequence":{"long":1347},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9410896c-e7d3-4df8-87c7-c169f0858c66","sequence":{"long":1348},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a4bdc23-2d7e-4fd8-b8a7-3e0598360f30","sequence":{"long":1349},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"825e5670-fce9-420a-89a8-d498d9edba97","sequence":{"long":1350},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d174817-b368-43f6-8a2c-a82d525079c1","sequence":{"long":1351},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8abb2e7-6395-445b-88a2-d0f8ea7017f3","sequence":{"long":1352},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"945d103a-ad66-437a-aa4f-d3c37f83319f","sequence":{"long":1353},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b52e24f-becc-401d-89ef-6202b8f3d582","sequence":{"long":1354},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7015618e-f37f-4752-bdd5-7136f7eaa53e","sequence":{"long":1355},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdc91ef0-fe11-4177-b85b-0281a396aa9b","sequence":{"long":1356},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"564e7fb9-d725-4573-a7c5-0e301614c359","sequence":{"long":1357},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb8969a2-8bcb-4f83-bc49-16532e47e6d9","sequence":{"long":1358},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"094485c9-9653-471a-bd76-cc8e5b0416b1","sequence":{"long":1359},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"655b8077-cd2f-430a-9751-c41fc4afb270","sequence":{"long":1360},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab961565-eaee-41f5-a8b6-bf8075b6be23","sequence":{"long":1361},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdfb54c7-44f0-4011-a0d3-19219eb6aee6","sequence":{"long":1362},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7df5176-0c93-4729-8126-43c2520df8f5","sequence":{"long":1363},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":289},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13de05f8-d8fa-4928-b539-5a0bc51c9e04","sequence":{"long":1364},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":336},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e02564b5-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1291,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917194287948},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"808170fa-cd8f-4c39-a66b-443513a181a7","sequence":{"long":1365},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1291","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1291","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecd723c8-df0d-42eb-b4dd-d0b1913bf7e2","sequence":{"long":1366},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92186779-2673-4e6d-b60f-e8c212ea481c","sequence":{"long":1367},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccb2f5fe-d6b7-4f57-bcca-bbff91a51e56","sequence":{"long":1368},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33b44168-f411-4406-8cb1-9baa92f7420c","sequence":{"long":1369},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de3a34c1-0b17-8152-970b-4c2cb281885f"},"predicateObjectPath":{"string":"/bin/cat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917194287948,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"cat /etc/networks","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9b5f832-b84a-4b78-b180-eac5cd9774c8","sequence":{"long":1370},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad4104ad-41e8-4b8e-bcbf-06e9ddaeb243","sequence":{"long":1371},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"061f7aac-3b4c-4af1-b099-09849d826caa","sequence":{"long":1372},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d377a7f8-76ac-438a-a951-b8d32f81a859","sequence":{"long":1373},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4572fc5b-cc93-4b67-849e-a66a449a91c3","sequence":{"long":1374},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e18c5bf-262d-4f59-a2f3-3ec3ba2dfe7e","sequence":{"long":1375},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99933121-3fd0-43d1-b5b8-64b27b82d9ab","sequence":{"long":1376},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61471c86-44a8-433d-b997-6422e5cdef8f","sequence":{"long":1377},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d78ca80a-0341-4cc6-a53f-d694c29d2c4e","sequence":{"long":1378},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f461f42-c8c9-4700-8631-5506331d91d2","sequence":{"long":1379},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9da7f95-0d04-4c8b-83d0-e98e5c12c5e2","sequence":{"long":1380},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7adf7be4-5556-45dc-8bb0-019f97e7eb1c","sequence":{"long":1381},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f61eba00-cda6-434b-a5ec-77229b2f3102","sequence":{"long":1382},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf09df00-8587-446e-8813-0c9b266293f5","sequence":{"long":1383},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d245ad40-e6ce-464b-9fe2-f2ef97e4c45a","sequence":{"long":1384},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adff7a67-e174-43da-84cd-6966fc9cf13c","sequence":{"long":1385},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b45d2616-0219-4ee2-af31-e75e93b9f7e0","sequence":{"long":1386},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9409642f-6678-45b3-86a4-702953c09835","sequence":{"long":1387},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"842bf235-d503-4dbd-9c0c-451c8141090a","sequence":{"long":1388},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c21b29ec-2630-1554-b026-2ba75415bafa","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5805fee1-2212-4697-9466-1a2e986d4ab6","sequence":{"long":1389},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":{"string":"/etc/networks"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b90cf553-cb43-411b-a4f3-e2fe12196991","sequence":{"long":1390},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":310},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa1fae2c-390c-4fc8-ae87-2fa1df56b395","sequence":{"long":1391},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":310},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"413b4383-881b-41a3-9b81-23511c377938","sequence":{"long":1392},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8363811-9bf1-49b5-9c5f-4c0e0843463a","sequence":{"long":1393},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90ee8242-b8db-4e32-ac23-09df9a85228e","sequence":{"long":1394},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15b74808-a1d6-4709-a2b5-4b0679ba14f5","sequence":{"long":1395},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6288c758-eaa9-40d1-a08d-c4b506c4c358","sequence":{"long":1396},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":256},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b05a450-81d3-45ec-adf1-aaf97b620946","sequence":{"long":1397},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e025c619-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1292,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917194287948},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84585ad2-4dd4-4747-a16b-6f02877ae0c6","sequence":{"long":1398},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1292","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1292","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d9ba7e5-2423-428b-b320-36d84b8d6c6b","sequence":{"long":1399},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bf6b914-47aa-4b5d-8f43-e78ef384568d","sequence":{"long":1400},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbf55a2a-0363-4487-b224-b3cee2681a02","sequence":{"long":1401},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"542d495d-cfb1-a954-b1cf-f79fd4a9303e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fb16c28-d191-41c6-8f9e-7be4cdf9031a","sequence":{"long":1402},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"542d495d-cfb1-a954-b1cf-f79fd4a9303e"},"predicateObjectPath":{"string":"/bin/ps"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917203895228,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"ps auxx","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b40ac80a-62ba-4940-92e6-28dcd64138fb","sequence":{"long":1403},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec7840d4-0cc5-4114-a45a-407b0e229b3e","sequence":{"long":1404},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04dd5c66-340b-43c6-afd6-ac75f86628a8","sequence":{"long":1405},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e93af212-fe11-4903-85ab-9f6d5bff0739","sequence":{"long":1406},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7e20575-2d89-4b46-82ea-4a26159e52dd","sequence":{"long":1407},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"709a8040-88e3-49ed-823d-a3873df14b85","sequence":{"long":1408},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f59c99ae-1e8d-4b01-a467-5c21f06094d8","sequence":{"long":1409},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4c04d3c5-3aee-7458-ae3a-ee0258746598","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d823d67a-77d8-4479-b533-0ed21c40f0d3","sequence":{"long":1410},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":{"string":"/lib/libm.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05c711a9-6bcc-411f-860e-785647a7260b","sequence":{"long":1411},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72642a10-6567-4e55-ba16-2ec9bd3d106d","sequence":{"long":1412},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c8c048c-bf1e-4755-b367-f6f84f8ef9a5","sequence":{"long":1413},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6d00a23-2e62-4f11-a17e-109a44b4c8bd","sequence":{"long":1414},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c19a0576-7a93-4b39-a570-64fd9fb6aa52","sequence":{"long":1415},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8b4968d-9e3e-437b-9c13-de26049fedb8","sequence":{"long":1416},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce52f3d2-e3ee-485d-ae37-548c71961a41","sequence":{"long":1417},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b8bd1f1-6266-4e71-b7b1-941f71416843","sequence":{"long":1418},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72ffeb03-30c3-4ec2-a113-e93638edc7a0","sequence":{"long":1419},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d96f3244-d30d-4c4d-b918-22646124617f","sequence":{"long":1420},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":{"string":"/lib/libkvm.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1250d40-dd76-4477-843b-c9652070b6b5","sequence":{"long":1421},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b726fc26-6bc2-4fbd-b398-7cccdd66dc21","sequence":{"long":1422},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"753154ca-cb75-48c6-8eb7-ea4fd581aa96","sequence":{"long":1423},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72cbcf94-a87e-489b-b345-442bdcffaa85","sequence":{"long":1424},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"793eb4ef-a14c-4e0c-bde3-d1eb928aa2d7","sequence":{"long":1425},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd35737a-0f7f-4f10-8fc1-719a2db6d827","sequence":{"long":1426},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01674aa6-389d-4908-8272-c8caf3808532","sequence":{"long":1427},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2699264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10ccba5b-9eac-478a-b292-37bfdfb011da","sequence":{"long":1428},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2699264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95305a7b-bf63-40bb-928a-5fe02ea5de72","sequence":{"long":1429},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"420c3f64-ea7b-43fd-b2db-9e7b87b0c92c","sequence":{"long":1430},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":{"string":"/lib/libjail.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b71fa502-fedb-4f8f-b1a9-d29430183ee9","sequence":{"long":1431},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f531d2e3-bebb-48db-91f1-4e6bf1592abd","sequence":{"long":1432},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4d375bf-8fea-41f2-b6fa-c4106b06100a","sequence":{"long":1433},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ce0fadb-f194-45d7-80b0-b3d02392806e","sequence":{"long":1434},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ede35a6d-ff5a-4d10-a11a-abfb3a54d3a1","sequence":{"long":1435},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5156fb42-16d7-48a2-856b-783152ca160e","sequence":{"long":1436},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"189e88d0-4050-423f-a27b-923ed51e0b4b","sequence":{"long":1437},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2736128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1638c90d-3957-4679-b9a0-37827d2c5fa2","sequence":{"long":1438},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2736128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2938085b-cc78-4c78-8b7a-58d094436fd9","sequence":{"long":1439},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cccc4ae-d12e-430b-8396-54e0283be5c8","sequence":{"long":1440},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":{"string":"/lib/libxo.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"320104d2-65ae-4473-8f6e-18f4a45a263d","sequence":{"long":1441},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16ed62a1-6d5b-493e-acb0-7e49b06a1503","sequence":{"long":1442},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cbf29e0-e677-49ed-baab-0605f39555fa","sequence":{"long":1443},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2748416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4681cb5a-15bf-4267-aedc-4147e9a39516","sequence":{"long":1444},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2748416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf418d1b-42ad-4567-8726-f7a9492cebdb","sequence":{"long":1445},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2781184},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0aee2e9-9239-4a2d-8982-66fc47fa2eca","sequence":{"long":1446},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2781184},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbbc918e-33ec-42e0-86bf-849926ee0a26","sequence":{"long":1447},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53c31620-8d10-4b8b-af71-b9c7f7dccabb","sequence":{"long":1448},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56a2c78c-536a-4fc0-9e59-b57d0441eed6","sequence":{"long":1449},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"310731d2-3911-415b-9c48-1edf5f37ed47","sequence":{"long":1450},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27c1d85b-ce65-4533-aed1-35304cc93262","sequence":{"long":1451},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9acbbae-bc8b-417d-bfe2-53f7709f3449","sequence":{"long":1452},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26c618bb-61e2-45d2-9511-f5f1e1135b97","sequence":{"long":1453},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2879488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e17c6fc-0321-42e0-a4fa-f6d8cd4bbce4","sequence":{"long":1454},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2879488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bfe770e-5afe-4b52-90bd-914e3898be7e","sequence":{"long":1455},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aeba5de8-fad8-46e9-8697-8515378c3552","sequence":{"long":1456},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e33de35-d8ed-4486-9218-175dfc3fd00b","sequence":{"long":1457},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4726784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a0b614c-10d7-4872-8c57-d59a39e83686","sequence":{"long":1458},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4726784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6c79c7f-1b2f-4fac-a670-c5bc8a7b3546","sequence":{"long":1459},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af9c7d28-f3de-470e-83dc-82b2a7cf2d14","sequence":{"long":1460},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":{"string":"/lib/libelf.so.2"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99e5e0ab-5dc6-4599-a86f-ec2116844f5a","sequence":{"long":1461},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6015a74a-7937-4e66-85d4-5a17654b2a1b","sequence":{"long":1462},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61f88ea7-2561-4993-a89e-1d69ced951ae","sequence":{"long":1463},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7045120},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9967180c-f620-483c-a64f-5ff5395ce687","sequence":{"long":1464},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7045120},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d525bde0-1f57-4905-92b1-ce9292872bcf","sequence":{"long":1465},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7073792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec9c0ada-9bf1-4d58-a9f3-109980a402f7","sequence":{"long":1466},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7073792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1feb086c-e34e-44be-88c7-6f7f271a93b5","sequence":{"long":1467},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7143424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27f57b87-9877-4f97-8941-1bd786600e74","sequence":{"long":1468},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7143424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"deaac9b3-494d-4908-89dc-fb5f1626ae9f","sequence":{"long":1469},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba118ed5-c7c1-41de-b4ae-c7e29ab8d0f5","sequence":{"long":1470},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"207350cb-a5ea-47f9-b91d-377a08e8223a","sequence":{"long":1471},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"566d2834-59e9-4599-afa2-e789f893cb2e","sequence":{"long":1472},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ce42b5d-51ac-49d8-a05f-268a97add484","sequence":{"long":1473},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0bc05b5-bbab-4da0-bd27-21fcf26ac2da","sequence":{"long":1474},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad3c7e7c-4b10-4f7b-a35b-b42281de2d9a","sequence":{"long":1475},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7184384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26fbdc80-359b-46fe-a3dc-9b4fed993f63","sequence":{"long":1476},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7184384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1381830c-facc-41e3-9df8-bce73e0258f1","sequence":{"long":1477},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7229440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"228f03b7-714d-46b6-9e44-6d98973da23e","sequence":{"long":1478},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7229440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b719c97e-5a53-47e1-8c4e-b6f64360defd","sequence":{"long":1479},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69b34586-82ef-4739-a5bb-156a32840770","sequence":{"long":1480},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e0ba595-4852-4bda-94a2-7492f29b321e","sequence":{"long":1481},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"687d1032-6165-4e86-a6df-4fc04bdce5be","sequence":{"long":1482},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c42b7a45-9f6f-4a56-b142-cae17c0ecfb8","sequence":{"long":1483},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cb6baf5-1baf-43e0-a5f4-cf1d39fade3e","sequence":{"long":1484},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22d9ea79-03ca-4237-a47f-6d00acf38c8a","sequence":{"long":1485},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9680918a-ed5e-4673-9625-625a0c42a15f","sequence":{"long":1486},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1161c65-9749-41b1-b7e0-e007b56a994f","sequence":{"long":1487},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4b72442-eb22-491f-b235-3e51aaa6afe1","sequence":{"long":1488},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79f8bf88-9393-4e0f-9d90-b7ae37a2c8a7","sequence":{"long":1489},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"4","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1efa1c0-6285-4bf2-bf63-325885f0d3a4","sequence":{"long":1490},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de9f78fe-49ee-4468-8e86-765e8b283c1a","sequence":{"long":1491},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66a1aba1-87ae-4606-afab-834fa69c474b","sequence":{"long":1492},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b25e5b3-8999-4584-a53c-5bd7543cab86","sequence":{"long":1493},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"527c23b7-5147-4db3-93ff-eebe7a328a02","sequence":{"long":1494},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":{"string":"/etc/pwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a5beebd-206b-4b3b-b6ed-4598df157533","sequence":{"long":1495},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64e536ea-5bd9-4645-8d07-2051628b8611","sequence":{"long":1496},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f83c03e6-14c3-4287-a323-1a938b2fef1d","sequence":{"long":1497},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"01aaae62-8a03-3b5f-838a-d6569f3b2a48","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c2159ca-17a0-4782-8005-ce495e306eea","sequence":{"long":1498},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/UTC"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"423b9553-840d-414d-b0f7-d3b972c0dd55","sequence":{"long":1499},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":118},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02eef01f-e155-43b3-aec3-391626c309d3","sequence":{"long":1500},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"52914756-cb96-445b-96cb-2e502b44f61b","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77a6cb72-ad2d-46cb-85ba-ecdc55c63cd0","sequence":{"long":1501},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/posixrules"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"6100"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f3f002d-4612-4bcf-8e87-0c97e09476fe","sequence":{"long":1502},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":3519},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15dfef45-a5a3-4692-aac6-e968cfec098e","sequence":{"long":1503},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"442196ce-4840-47dd-8a8e-2f8e2da5cb8b","sequence":{"long":1504},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e20e97b-ff4e-4f14-a7f5-2a34966acd7d","sequence":{"long":1505},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1297341d-a5c0-47e7-8cb4-0834710ee430","sequence":{"long":1506},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"517ca326-199c-4955-8075-ed2cc72de328","sequence":{"long":1507},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73704e2f-686f-4cb1-8d62-8dc13b0dff55","sequence":{"long":1508},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3080480e-c47e-4075-b4db-c7070ea51a1b","sequence":{"long":1509},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e67834a-dd00-4813-9899-fb09f20c0b93","sequence":{"long":1510},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4380},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f65b344-09d7-47b7-868c-23f0b3903e6e","sequence":{"long":1511},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f09a5ba-46ca-4b64-aa62-f0163d3e25f6","sequence":{"long":1512},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":233},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e026d50e-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e026d50d-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"1974e148-493a-5dde-b1ff-0c3352cfe2f9","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"e026d50d-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"e026d50e-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7617f56-1c06-47e0-a6a7-4753a2f228e3","sequence":{"long":1513},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1974e148-493a-5dde-b1ff-0c3352cfe2f9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d139bcc0-07de-42f7-8227-05739423fb07","sequence":{"long":1514},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":423},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e026da24-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1293,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917203895228},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01641ccd-c00b-42de-a527-34837cd0775d","sequence":{"long":1515},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026da24-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1293","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1293","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e026e0b0-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1294,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917203895228},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"518c4734-b581-4ec9-94ab-b57b78d2a820","sequence":{"long":1516},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1294","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1294","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e241c44b-7f17-42dd-881d-ee183b1aaab7","sequence":{"long":1517},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e026da24-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2ae469e-f84b-45bd-b581-b7112e8687d0","sequence":{"long":1518},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44727566-7966-4cef-87fa-e7c3b38f7826","sequence":{"long":1519},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e026da24-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026d50e-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e45e5fe-b210-4535-bb42-0d410d2bbe6e","sequence":{"long":1520},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e026da24-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026da24-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"3f4e2dec-9008-5a56-8890-4814765aa0ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"babcf79f-95dd-48a7-bdff-20660d0eb32b","sequence":{"long":1521},"type":"EVENT_EXECUTE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3f4e2dec-9008-5a56-8890-4814765aa0ba"},"predicateObjectPath":{"string":"/usr/local/bin/sudo"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917203895228,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sudo -S ls","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd4ad337-bdff-4dc6-ba4d-c0634a1c2de3","sequence":{"long":1522},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c43d4adb-2e00-46a7-a835-943c4c4fba46","sequence":{"long":1523},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25f775a3-238a-4523-bb96-966e4175ea9b","sequence":{"long":1524},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb8a319d-3a31-4e45-a624-f10f070816ec","sequence":{"long":1525},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bda8b1d-ebdc-4357-b6b1-797656e73610","sequence":{"long":1526},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c28676b-65f9-4f93-97b8-b133d91ce901","sequence":{"long":1527},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17e38feb-d567-43b4-a880-ab94b06ff446","sequence":{"long":1528},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77775bd5-39d7-44f4-bb96-b54b002c3d95","sequence":{"long":1529},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e74a939-82ef-4653-ac59-409fc39c6fd4","sequence":{"long":1530},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca43a8cc-4b34-44c6-bd8b-713d5208aaf7","sequence":{"long":1531},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e23c63d-a2ca-4565-8614-e8c18ed1d50a","sequence":{"long":1532},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2510848},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d68d9a24-9b29-4140-8e60-78517bdce766","sequence":{"long":1533},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2510848},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3cae938-4602-4bae-aecc-9cad6c677eb4","sequence":{"long":1534},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12826dda-19d1-4114-9017-aae244fcbaea","sequence":{"long":1535},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63a2fc03-4c39-4069-bb32-51a72b2aa23d","sequence":{"long":1536},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2588672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e266ecbc-c766-4c9c-9b21-b850da2706ed","sequence":{"long":1537},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2588672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dba689c-ab63-495a-86ec-e564d8e5ebf7","sequence":{"long":1538},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6318c23c-4c7f-9552-bf4c-2f482295e518","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8204e746-528a-42f5-a8cc-3c2947e1c787","sequence":{"long":1539},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":{"string":"/usr/local/libexec/sudo/libsudo_util.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"621c8c4c-042a-45b1-9581-43fca385c447","sequence":{"long":1540},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d273fb3-b898-4d5b-85af-53d0af1bd433","sequence":{"long":1541},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c05e8fda-0652-470c-a513-b62b461274a0","sequence":{"long":1542},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcc681d8-00f3-4f2c-a3e8-44cce0bc3203","sequence":{"long":1543},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"433fd958-5044-4381-98c3-ff9c10a4ff9b","sequence":{"long":1544},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2637824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ceb404ef-90b8-43b0-82ec-bf02fd256932","sequence":{"long":1545},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2637824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5069389b-9d6b-46da-b7f6-78ae4593de4a","sequence":{"long":1546},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e20aaecb-2d4b-48a2-b29e-ca52c5270e7f","sequence":{"long":1547},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"252fac48-4eaa-472d-8053-b7a94a265ba3","sequence":{"long":1548},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8920ecb2-9eca-48d8-b4d5-d2136e342fa7","sequence":{"long":1549},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e26682cc-aee0-4635-b66f-1338bb44f20d","sequence":{"long":1550},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fcede8d-a2c4-4db6-a74f-03fb5383ed9f","sequence":{"long":1551},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a1d7392-a7b7-470a-930d-359e65d20b33","sequence":{"long":1552},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2703360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c2fe8cc-c8ac-4234-98c2-754ccb27b197","sequence":{"long":1553},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2703360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90f4bc9f-c151-40ea-97e6-464cb5b3ec67","sequence":{"long":1554},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f4ee9b6-82b2-4301-859e-8f3244fd7aef","sequence":{"long":1555},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1404d4c7-7f4d-47d4-835f-f9f77113b0ba","sequence":{"long":1556},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2744320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a54e708-407e-4fdd-a592-d3d1b0df44a0","sequence":{"long":1557},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2744320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae10be10-c500-4027-a151-604243b0155a","sequence":{"long":1558},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d18d77d4-492a-4abc-bec9-e1e4b4d3688b","sequence":{"long":1559},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5abab28-13f7-43ec-ba04-92ac14707de2","sequence":{"long":1560},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7750911-33a0-45c0-8df7-e46f71e66782","sequence":{"long":1561},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43e72180-299b-4be8-9e70-9959fa656c5f","sequence":{"long":1562},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2756608},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d63c82ec-0e63-4d68-bcb3-df3cc7b980eb","sequence":{"long":1563},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2756608},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e36913d-976a-4392-b29d-78dbc5c00531","sequence":{"long":1564},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3272704},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e959f9d-6c39-4691-9bd9-b7e13a18ea2e","sequence":{"long":1565},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3272704},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"734b8f14-6aeb-44ec-95e6-98ec684cd065","sequence":{"long":1566},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4603904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a42e1981-167f-4313-a2c5-0cb5b685ed46","sequence":{"long":1567},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4603904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcf70228-562f-49a4-acbe-222e61676df9","sequence":{"long":1568},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90178184-d2c1-4334-af66-79caa93d00d3","sequence":{"long":1569},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"feb7750c-d24a-4eaf-8537-28254ca4d566","sequence":{"long":1570},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"047a2004-214d-45e9-b038-ec80363ecd7d","sequence":{"long":1571},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efdf8c09-2116-4745-b666-7511c2527e3e","sequence":{"long":1572},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e6763f2-c000-41fd-bb19-e9deafc061e6","sequence":{"long":1573},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b54727e2-cf90-4efa-8f7f-0fcbd145d971","sequence":{"long":1574},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79cd9f47-5937-4241-916f-6b249ff3c00f","sequence":{"long":1575},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8926f0d9-f243-41dd-b4af-70c54204228b","sequence":{"long":1576},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8d374d5-a640-4454-8552-759ea2a494bf","sequence":{"long":1577},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/UTC"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1a37435-b577-45bf-953a-179c6d0a71b8","sequence":{"long":1578},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":118},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1171a863-a27e-4b5e-b245-3c2d3f4549e7","sequence":{"long":1579},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63ebf369-24bc-4181-bf6b-83554b8ee0e0","sequence":{"long":1580},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/posixrules"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"6100"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bbb81a2-9d6b-4f10-b1f8-fbcbe227e878","sequence":{"long":1581},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":3519},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59332a2e-12a0-4cb5-85c2-50f6ab1ba8f4","sequence":{"long":1582},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a280c88a-0fa7-4139-881b-32e98d0d70e8","sequence":{"long":1583},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18ef05d9-ad67-4a29-bd4f-468ebcba2b75","sequence":{"long":1584},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba2facfe-df19-40e6-bf48-d42d02e2e3b9","sequence":{"long":1585},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3eb0c99a-eefb-4ae5-b640-ef27bf3f51bf","sequence":{"long":1586},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20a739c4-7440-4df3-beee-03cd7cfcb458","sequence":{"long":1587},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57360109-d9bb-486a-b55a-87c7f7ff27a1","sequence":{"long":1588},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8c65726-a4a6-481e-aace-fd18e5c0ef30","sequence":{"long":1589},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c3b9b2a-bb08-4b8f-9667-37c939d506cc","sequence":{"long":1590},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e86e6c52-2169-4f13-b5d7-4b877abba3b1","sequence":{"long":1591},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c4eebf5-9bb9-4ae2-b440-8844317cb5b6","sequence":{"long":1592},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75c59a5b-7f80-47ed-b86b-ba6f9e6d4cda","sequence":{"long":1593},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07f3bd1f-af1a-4de7-900f-003644a0533e","sequence":{"long":1594},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08617b13-1f31-4588-ac1d-7461574b97ca","sequence":{"long":1595},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f71278eb-2e83-4547-a64c-e44c8285febf","sequence":{"long":1596},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a842279-40d7-4fb7-8dcc-69936b2f2ca2","sequence":{"long":1597},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e064f16-e373-4db8-8ced-fbd2ccd215f6","sequence":{"long":1598},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0772024c-0f64-49b2-aeb1-5fcd90ad997e","sequence":{"long":1599},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ada3cce-3faa-4e11-8f6e-5b937bce2f45","sequence":{"long":1600},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80290d4b-6d28-47d6-be81-8240fd57fbaf","sequence":{"long":1601},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"2239233b-9622-735e-a296-89384e73935d","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d6dcffb-16eb-4059-aa8c-cd7d495ed0a2","sequence":{"long":1602},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":{"string":"/usr/local/libexec/sudo/sudoers.so"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c86f2b5b-ca64-4362-ab0d-54ddabd97a6d","sequence":{"long":1603},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cd4582e-a784-4c85-b0f1-d3b21aee0ab2","sequence":{"long":1604},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab28b0f5-5289-41ca-8250-74857f7dd621","sequence":{"long":1605},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7319552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24f21ea1-525b-4756-85b8-155589056275","sequence":{"long":1606},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7319552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67b633a0-d4ed-4a6f-b400-60b76db1452f","sequence":{"long":1607},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7434240},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f63db3aa-b25d-4a40-984d-bac24995cf0a","sequence":{"long":1608},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7434240},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42a9899c-c7b5-4081-b762-0ae79c4b93a0","sequence":{"long":1609},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7647232},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13cb51b1-effb-41d9-b1d0-f68d055bfc39","sequence":{"long":1610},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7647232},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"175e0964-cefb-400a-8698-90ae04dfbc4a","sequence":{"long":1611},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f878cb1-2bab-4943-993b-e0715b58a7d4","sequence":{"long":1612},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":{"string":"/usr/lib/libbsm.so.3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c4e8ca0-2652-4c09-b240-81361fc24924","sequence":{"long":1613},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1843231e-f233-45d9-b8ba-36969b8ba049","sequence":{"long":1614},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c24c5984-3ac6-4aab-b59d-5515ed4cba26","sequence":{"long":1615},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7667712},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"761346a2-d8e3-4789-9b7f-f0dff309d9af","sequence":{"long":1616},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7667712},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6576c874-ab7f-40bc-9c71-18307e9c2899","sequence":{"long":1617},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7708672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1418b54d-073e-462d-9c83-ae605c994981","sequence":{"long":1618},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7708672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7f177bc-d2ac-4d87-9ab9-b276d3bf51ec","sequence":{"long":1619},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7778304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11682446-726e-4eba-aa13-c521b2e0d521","sequence":{"long":1620},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7778304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af268d01-a1a3-4f6d-8585-02aad3b66797","sequence":{"long":1621},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e6ccbcd-d45f-40ed-9c72-731f8d437ba3","sequence":{"long":1622},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":{"string":"/usr/lib/libpam.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c99e1d6b-df87-4fc1-9c79-55ec24e32e1a","sequence":{"long":1623},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90f88020-49d1-4d4e-bebc-01044ad53417","sequence":{"long":1624},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5412930-b0d4-4d3f-8334-b72e08d089db","sequence":{"long":1625},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7790592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebb4a684-f309-4c6c-bc92-4afaed5e6296","sequence":{"long":1626},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7790592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8c12cff-f087-4c63-a4b0-d57ffddbc30b","sequence":{"long":1627},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7815168},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ede8c0f-f3a1-43ca-acae-7343ab38dd74","sequence":{"long":1628},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7815168},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"168283bf-e667-4d6e-a9b2-4991b6e6233c","sequence":{"long":1629},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7843840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d16c75c3-2bd8-451b-99d0-75ea647d7083","sequence":{"long":1630},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7843840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b483404-759c-4551-ac6c-c52b05f3841e","sequence":{"long":1631},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95c2e78d-a4f0-4dc1-a6bc-170df7db516b","sequence":{"long":1632},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":{"string":"/lib/libz.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9652250b-0bf8-4b71-acd9-41c8ded2814c","sequence":{"long":1633},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c2e739d-1138-4b87-9945-6af2be0dbefc","sequence":{"long":1634},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f50b10a4-28c0-464b-a9b5-6fac494345bd","sequence":{"long":1635},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7856128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ca5a84e-bc90-49f6-bebb-8ef13562009c","sequence":{"long":1636},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7856128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eac26139-3d19-4416-ad19-1515fd380101","sequence":{"long":1637},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7888896},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df954373-2968-48b1-923d-2452ee3adce3","sequence":{"long":1638},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7888896},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ebd38b7-d9c4-41c7-a7b0-5e2393464dcc","sequence":{"long":1639},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7958528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"390aca9a-de57-4d8b-8795-6e4fcdd702eb","sequence":{"long":1640},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7958528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f63ecf57-49b0-4f49-99e9-1ee914170162","sequence":{"long":1641},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5ce8170-9524-410c-932f-7c6bdd134a8e","sequence":{"long":1642},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42443f2f-eb8f-4aa5-8239-a45ce860f8c7","sequence":{"long":1643},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a13d396a-6191-4fcf-b5ab-9999c719cad8","sequence":{"long":1644},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8ce46af-2cd2-4361-93a9-980e98c9bb70","sequence":{"long":1645},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75894423-6011-4d2e-9b7a-635daf023aae","sequence":{"long":1646},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"0","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37510d16-0ff9-4627-9c4f-168cabe3ff33","sequence":{"long":1647},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa548aa4-c749-4c68-bd3a-380b64276ee8","sequence":{"long":1648},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"06078de3-2eda-d757-9a2e-abc657d728cd","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Principal":{"uuid":"8e122852-4e16-51ca-879a-eb4a80f67520","type":"PRINCIPAL_LOCAL","userId":"1","username":null,"groupIds":{"array":[]},"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_PRINCIPAL","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f94adc8f-3239-42a6-9810-4784d2902406","sequence":{"long":1649},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":{"string":"/usr/local/etc/sudoers"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ac3bfc5-ad29-4c83-ab4b-3ee20ce81f42","sequence":{"long":1650},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":3678},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd39c42b-e021-4eef-ad0c-14f6101ba7eb","sequence":{"long":1651},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":3678},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8dbee094-4cf3-40d7-8955-7b5255047cb4","sequence":{"long":1652},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e018e8b-37f0-4646-8e2c-3765a8d47556","sequence":{"long":1653},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"0","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b11f64f3-cd0f-48d9-9153-e59be53159f6","sequence":{"long":1654},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"-1","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3645adaa-3a35-49c7-b6bf-733e563dead7","sequence":{"long":1655},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"0","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cd82470-51e7-45a7-a91f-da3672d6023c","sequence":{"long":1656},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"382d9507-c88d-7556-8dc8-bb47e67533c4","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4ae7f0e-192f-4ca8-a2d8-ddbfadbb8c40","sequence":{"long":1657},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"382d9507-c88d-7556-8dc8-bb47e67533c4"},"predicateObjectPath":{"string":"/usr/local/etc/sudoers.d"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00ffff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f032ac3-a651-4b57-84fe-f1cb4c216fa4","sequence":{"long":1658},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"382d9507-c88d-7556-8dc8-bb47e67533c4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13a11f31-6898-435f-9f56-e803ebcf2f89","sequence":{"long":1659},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1205d5d4-10c5-4558-b1ec-68d3039e0b82","sequence":{"long":1660},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"1003","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fe341e5-ce76-4366-8cb0-2a2082726b22","sequence":{"long":1661},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b39b500-d62f-4715-9fb3-ab4178f38bb3","sequence":{"long":1662},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"243d4d6d-7d61-40cb-9e47-2f358932d309","sequence":{"long":1663},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a3cde22-9395-4d64-aba4-4fc672f8f356","sequence":{"long":1664},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ccf3f04-dda9-42a4-acf6-9c34923ba210","sequence":{"long":1665},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e137f34e-00c2-4ede-8607-564fb12441ec","sequence":{"long":1666},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9be9650-161d-4cde-98e4-6f6ee2bb26ab","sequence":{"long":1667},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef8409fc-8456-4403-a679-c9f2c4a6a11d","sequence":{"long":1668},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"130ae568-d171-4bb8-a649-e29ddde140bf","sequence":{"long":1669},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a5b9612-e08f-485f-982c-d438f69c181e","sequence":{"long":1670},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0573a656-0ee0-4106-86bc-d5a570d416d7","sequence":{"long":1671},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c6efefc-2b6d-45e5-b63a-214a1340940b","sequence":{"long":1672},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abfaad21-d279-4348-82aa-9e7b66843674","sequence":{"long":1673},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76d0f036-4e16-4f96-bb58-c775b8a454ee","sequence":{"long":1674},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfe721c1-91a9-44e1-9976-6c37213ebdbd","sequence":{"long":1675},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4e1ba52-ed7e-4512-acd8-982056b3c881","sequence":{"long":1676},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23eec2b9-c835-42b8-94aa-6ad2681ff6ad","sequence":{"long":1677},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"48de70ac-ab23-ae52-a3ab-f629e2ae3418","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28707335-a881-45c5-9192-7c551449e9b5","sequence":{"long":1678},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":{"string":"/usr/local/etc/pam.d/sudo"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eebb384d-5e93-41a0-96ce-92655f5e8c0f","sequence":{"long":1679},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":323},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77dfacc8-9b79-47e8-914b-a6690c6be1c2","sequence":{"long":1680},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":{"string":"/etc/pam.d/system"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2a1fc27-985c-46f1-b1d5-aa61b9c3b07a","sequence":{"long":1681},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":648},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f1c2bfe-b83c-4b93-a057-08370896314d","sequence":{"long":1682},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":{"string":"/usr/lib/pam_opie.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60af6ea9-ed16-42ad-aa27-61c5e609a8bb","sequence":{"long":1683},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8666cf03-ca2f-478c-af8b-fcfc38c9203d","sequence":{"long":1684},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d38629f-3df6-49ad-94b9-491b51e9eed3","sequence":{"long":1685},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6dce9cdc-4047-48ed-bdc4-7af8e2ec774c","sequence":{"long":1686},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8204288},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ae4d2bc-54cb-4c69-8141-a922e8a53ffd","sequence":{"long":1687},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8204288},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"368b83e5-928e-49ef-9a31-7e0137fc8863","sequence":{"long":1688},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8208384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0390ca5-fc93-4dd1-a44c-851e5d89c293","sequence":{"long":1689},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8208384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dac2e0c1-1259-44b6-b4a1-90bf7c72eb4b","sequence":{"long":1690},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8212480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f7c211a-b4d1-41a9-bab4-1e3c9364d035","sequence":{"long":1691},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8212480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"632610ec-f9c6-43f3-a054-701ee0d2faef","sequence":{"long":1692},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2929efe8-96cc-4a29-a2c7-dd1b6c6ffc95","sequence":{"long":1693},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":{"string":"/usr/lib/libopie.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de6b33e9-9cdc-47b5-bc26-794e11f650a4","sequence":{"long":1694},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbcba9ad-41b1-440c-8409-503aa1720a9c","sequence":{"long":1695},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3877cc4d-3a65-40f4-8210-6f8c947127df","sequence":{"long":1696},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8220672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bc72881-d703-4568-abc0-463cff8de3e6","sequence":{"long":1697},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8220672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9e75094-764a-4e53-993a-9eaaf8031439","sequence":{"long":1698},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8232960},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8462833-e6b4-4d86-aa11-f50ee6331a47","sequence":{"long":1699},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8232960},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"083e5ede-5932-41e2-8dac-6b6f98b165a9","sequence":{"long":1700},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8249344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1313a889-3e86-4c17-93dd-c273dbeb7151","sequence":{"long":1701},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8249344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91656541-1ad1-4f50-aa4e-0e25ef51f696","sequence":{"long":1702},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b9c2003-88b3-4d1b-9d82-f49442a2f561","sequence":{"long":1703},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":{"string":"/lib/libmd.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"564c50d7-f8c4-49d9-8289-b283c8f5180d","sequence":{"long":1704},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa736854-64ee-40f2-b337-606ddb249497","sequence":{"long":1705},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32ed86fa-f1f8-4a90-be72-b431e97ce9b7","sequence":{"long":1706},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14680064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a435054-36e0-4e8a-aeb4-a236065db3fe","sequence":{"long":1707},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14680064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70883f80-19e7-4942-b9d5-41da4efc47f5","sequence":{"long":1708},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14712832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43ea4b22-b83f-417d-badf-35b3c2feb8a7","sequence":{"long":1709},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14712832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55be236e-6bf3-404b-86f3-ffce730467cf","sequence":{"long":1710},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14794752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02ba7d7b-dc3e-42eb-b2a3-5a4c51c012a0","sequence":{"long":1711},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14794752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ad817de-4f57-4cde-adae-a4b8375ea337","sequence":{"long":1712},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4443a04-8031-40ed-b190-8f81172857a5","sequence":{"long":1713},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fc79139-70ca-4622-bfcc-4512c6ec3b5b","sequence":{"long":1714},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01706359-d29a-4a87-a463-095da544505c","sequence":{"long":1715},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffdc9590-a612-4f13-a2a3-256ffb00f983","sequence":{"long":1716},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"050e74c0-e142-4394-a38c-152f56566824","sequence":{"long":1717},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":{"string":"/usr/lib/pam_opieaccess.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77fd449e-29e1-471b-a0db-48e56385eaf2","sequence":{"long":1718},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"938b859a-3587-4559-a93f-b38c5c1fee06","sequence":{"long":1719},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7748002e-8d90-4a79-b64c-df91debe6651","sequence":{"long":1720},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b0c9b57-e790-42c5-a63c-4f317cd9f8cd","sequence":{"long":1721},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8269824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1b41137-a277-43eb-83a5-fe1c6f30951f","sequence":{"long":1722},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8269824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e257aa95-cf0d-4cda-b70d-08495db0bb14","sequence":{"long":1723},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8273920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39fa7b8f-aff9-4a0a-800a-63ca8679f29e","sequence":{"long":1724},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8273920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5452bc57-2fb8-47cd-a2b9-a77578d77194","sequence":{"long":1725},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8278016},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57747d7d-908d-4883-bdb4-cacca02f9027","sequence":{"long":1726},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8278016},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f131891-0a7c-4040-a8dc-a670ec00953a","sequence":{"long":1727},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8fc9109-4951-4320-9b90-82d5d1ac9cd0","sequence":{"long":1728},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c600bfbb-a678-4a6c-b713-49f33032707e","sequence":{"long":1729},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5f5b768-9778-4653-a964-d64e93b95f4f","sequence":{"long":1730},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc26700d-cbed-4df5-a26f-f037ffeb1038","sequence":{"long":1731},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c475ab6c-dc6b-4ae5-a186-92736c70622e","sequence":{"long":1732},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6b04a8d-451a-46ef-99c5-6443fba82ab5","sequence":{"long":1733},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"013f6f14-6768-4e24-9085-5572579ab5b2","sequence":{"long":1734},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8286208},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd027733-8c8d-4509-a6df-a6b0ae70bace","sequence":{"long":1735},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8286208},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57f0e811-117c-4723-9c77-6a4032da837a","sequence":{"long":1736},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8294400},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86b9fef4-b68e-4570-be84-b8bb906112ae","sequence":{"long":1737},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8294400},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a06e00a-cc41-4ea5-8b1f-8222cd5e8288","sequence":{"long":1738},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8302592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aad3248a-3b3d-4e0a-bfb5-a8b37d1c3f20","sequence":{"long":1739},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8302592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bee0fa9-69b5-4162-86ce-d72ef94f67f2","sequence":{"long":1740},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42afb8f2-b6b7-4ea6-9d04-55cb26f09ed3","sequence":{"long":1741},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":{"string":"/lib/libcrypt.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e04b6b9b-2ebf-4b2f-b570-e51594adb4ad","sequence":{"long":1742},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f62f62b-e9af-4ad9-9c66-7af70d1ff8e2","sequence":{"long":1743},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77056261-20bc-4e5d-9cd2-c10a21d10bcc","sequence":{"long":1744},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14938112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ac2e814-3530-4592-8c9e-646fc9a1816b","sequence":{"long":1745},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14938112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49a355f4-2201-432c-87fc-d51c8911eeed","sequence":{"long":1746},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14954496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1eb62418-0604-4fd0-a293-ff84bd447009","sequence":{"long":1747},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14954496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1ee381b-ca37-47c8-b5ef-b7825a7551ce","sequence":{"long":1748},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14995456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7abbcb9f-2431-4702-aba8-07024bc6bbd2","sequence":{"long":1749},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14995456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5d7dd79-ecd3-4b52-874b-a6493870cea5","sequence":{"long":1750},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"689fcce3-4c03-4f68-b202-7cf889d076bd","sequence":{"long":1751},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":{"string":"/usr/lib/libypclnt.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51243a03-8340-46c6-8f0c-8e5eeb0f59c1","sequence":{"long":1752},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58e4ef48-38f3-4c32-9980-af1c4d201bf4","sequence":{"long":1753},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dad4c86b-1e63-4b20-900b-e4c46aa73de5","sequence":{"long":1754},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8310784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de67e548-2e0d-4218-bca1-940455413509","sequence":{"long":1755},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8310784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a24620dd-7e3f-44eb-ba3d-b8808d79affe","sequence":{"long":1756},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8323072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"278b5ca9-44ad-4655-9691-2d91a3cdff61","sequence":{"long":1757},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8323072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acd10f22-2043-4360-9464-670f90bce8bb","sequence":{"long":1758},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8331264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1c9f9bc-355a-4b67-8d56-90a7cdf922c6","sequence":{"long":1759},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8331264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3a6c402-99d4-4b1b-b854-e887938ef779","sequence":{"long":1760},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"564e5258-cedd-4388-a254-fbc49f708683","sequence":{"long":1761},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"899c64cb-07e8-4f5e-85bd-253697086a2b","sequence":{"long":1762},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"750a6d11-0b4a-4d5b-b353-e113d431804c","sequence":{"long":1763},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1b7818c-ebde-4342-88b9-ebcd476bbf67","sequence":{"long":1764},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6521953a-6067-44be-afb2-009b0c9573da","sequence":{"long":1765},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bb9c34d-68f6-4e29-bf36-1aeeecf7bfdf","sequence":{"long":1766},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4225ac56-922e-4f22-8062-87c7e1131537","sequence":{"long":1767},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":{"string":"/etc/pam.d/system"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ecac706-c6df-4b39-bd74-7bb4d0e34fe3","sequence":{"long":1768},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":648},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b029f245-328a-45bf-85c7-88ce2f5ba6b1","sequence":{"long":1769},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":{"string":"/usr/lib/pam_login_access.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0ace12b-8262-45c9-9e4f-c5736220ff5c","sequence":{"long":1770},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec77de6c-a142-4108-bd8f-0831830f71b8","sequence":{"long":1771},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bb59495-01ab-4c6f-90e6-b5cca372bcc1","sequence":{"long":1772},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56c0ee42-018c-49e6-b55d-1200a4de832f","sequence":{"long":1773},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8343552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb27faa6-c14e-49f4-abd0-e45a40ff46be","sequence":{"long":1774},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8343552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d28f1d0-ada5-4bcb-834d-53391d4ad321","sequence":{"long":1775},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8347648},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ef4635c-8249-47ba-9ef4-0328a257a914","sequence":{"long":1776},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8347648},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4407129f-f7bb-4e13-8e15-7e7bf0c0d8fd","sequence":{"long":1777},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8351744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e2c1223-dbbb-4d04-a405-7a6b9bcbdd5b","sequence":{"long":1778},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8351744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bee0132-fece-49a9-be1e-c956f69725d3","sequence":{"long":1779},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2913dcd-bd36-4132-8916-e4159e42af1a","sequence":{"long":1780},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fca75bcc-ae5e-4bcc-a54f-d5ba98c28486","sequence":{"long":1781},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76de9626-11be-4b3b-bb52-2a64880d701e","sequence":{"long":1782},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5e76b7b-9304-437d-90ea-cb2e6e5e17d0","sequence":{"long":1783},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7a948b9-6136-4a85-ae9e-9fddd7d84bc8","sequence":{"long":1784},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1bd12c7-410c-414e-82e8-113303b02071","sequence":{"long":1785},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dffce267-8c66-4345-9a9f-18d212cc23a6","sequence":{"long":1786},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8359936},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78349c93-652c-449e-a3a8-f086412ed8fe","sequence":{"long":1787},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8359936},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70828d92-aea2-485d-8efb-c13e6155264b","sequence":{"long":1788},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8368128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa3644a7-f3e0-4895-a1c6-8d642a31f9bf","sequence":{"long":1789},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8368128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd240519-9730-47dc-aadd-f2e2ccc1a4c7","sequence":{"long":1790},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8376320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cd7f57a-b1ab-49c4-8d17-45d6e4ba4c16","sequence":{"long":1791},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8376320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d72095e-8dee-4582-bfb3-6799cc8601fd","sequence":{"long":1792},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a93e1294-d1a6-422b-825c-2a2e37b57910","sequence":{"long":1793},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb07d74a-8b8e-4e18-bd72-6142a7dd033c","sequence":{"long":1794},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cbc04ba-6809-4cdd-a04b-482fb0ccded7","sequence":{"long":1795},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73f46a7c-5209-417e-a551-774992b628c1","sequence":{"long":1796},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e44ca840-f3cc-4299-913c-b212e72f65a5","sequence":{"long":1797},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":{"string":"/usr/lib/pam_permit.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9af896bd-0190-4869-ad0b-220d1cde69ed","sequence":{"long":1798},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8dcc2772-97a9-4fcf-b3b8-1bfe78171453","sequence":{"long":1799},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76395768-a551-43c9-99a9-d8693eea4a0c","sequence":{"long":1800},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9edb6d84-8981-4687-ac0f-38432779a9aa","sequence":{"long":1801},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15077376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ee4ff4d-6f6f-492e-8746-f3c7bcf81ce6","sequence":{"long":1802},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15077376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72e09d8f-1639-4002-a62e-297a78641010","sequence":{"long":1803},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15081472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0043f40d-58fe-484b-8d04-6a124cc619b6","sequence":{"long":1804},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15081472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61c2b5d6-45bb-499d-89b7-d1febe1e6c2b","sequence":{"long":1805},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15085568},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4dab7e6c-8712-4dbc-be0b-d813bfe415ff","sequence":{"long":1806},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15085568},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4525efd-3851-4f24-9507-d34233db9791","sequence":{"long":1807},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38373b38-82be-4d6d-a98f-eb9cadbed9a0","sequence":{"long":1808},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a320cd69-8045-43e6-8e89-8fc0daaec616","sequence":{"long":1809},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33a0d834-8787-45d0-a371-e694bac12d68","sequence":{"long":1810},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":{"string":"/etc/pam.d/system"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f444b74-a430-449f-b410-13a532dfa33b","sequence":{"long":1811},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":648},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c731aa65-b264-45d0-a5b1-91219ad89f97","sequence":{"long":1812},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"073fd780-9da6-4993-be59-f751bcf0eda2","sequence":{"long":1813},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dde01657-087a-4e8f-b6de-f7d6d3c81cd1","sequence":{"long":1814},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a163dabc-280e-418c-97e4-a044b234b1b1","sequence":{"long":1815},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea56d466-f671-4fda-b0a9-fba27f5d0991","sequence":{"long":1816},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15093760},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26006dff-37e0-4222-8fac-7201b00b0dce","sequence":{"long":1817},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15093760},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a03c61b1-b94d-4cb3-a9a5-099fa1feb10b","sequence":{"long":1818},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15101952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4400ef75-7d21-41f8-9832-a6c6430530b5","sequence":{"long":1819},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15101952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12eadcb8-db4b-4d97-9db5-ffa0f76dca28","sequence":{"long":1820},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15110144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51783369-e60e-460b-9468-d17e87d9c0f9","sequence":{"long":1821},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15110144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a85b9fa-6a1b-450d-a923-0e29c9a0e295","sequence":{"long":1822},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db5b184b-4b5b-4f23-9561-1ac412f389db","sequence":{"long":1823},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e574fd0-347a-4ca4-aee2-828951624360","sequence":{"long":1824},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"908d1ad6-36e4-42bb-9e2f-cc46b1be3d4b","sequence":{"long":1825},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2388219e-8dd9-4242-bc00-d5ac17218222","sequence":{"long":1826},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75f98f7a-b882-4b25-b677-0d4ab6381790","sequence":{"long":1827},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"217c0a35-a809-4b4f-8c9d-2c7f4efcf670","sequence":{"long":1828},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9db15ac-a889-4bf0-af1f-26542ca4fdb6","sequence":{"long":1829},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":{"string":"/etc/login.access"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c7f7811-64a8-4d49-9308-2c448f2e68c7","sequence":{"long":1830},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1785},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"664f500f-6d60-442b-bae8-fefbda204664","sequence":{"long":1831},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d17eab04-0d63-4d1c-b7fa-e8f1c9833804","sequence":{"long":1832},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8763b6c3-ef54-43b6-8bbb-f6beb3f54aee","sequence":{"long":1833},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0720278-b017-4031-b270-9f111ab8091b","sequence":{"long":1834},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68343a63-9e96-43b2-a34a-4a17069b8ae6","sequence":{"long":1835},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1448898-6093-4c28-ac74-80930ca1d4a1","sequence":{"long":1836},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f92e526d-6218-7d5b-9862-69e68b7d7dcf","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8199991-6c63-46b3-a24d-5898ffc6e3d8","sequence":{"long":1837},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":{"string":"/etc/ttys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21317e1b-9caf-4ed3-9fe0-41ab11a1e2e7","sequence":{"long":1838},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2086},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fe2cee6-b828-4d00-91f7-a20677a7fccf","sequence":{"long":1839},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83385c2d-7875-4fba-be5b-4b070d962fb4","sequence":{"long":1840},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4ea4021-e845-40f8-b76a-83502bf76b4a","sequence":{"long":1841},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"0","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc8b2b3c-b369-4cc3-83cc-d5341675b2e2","sequence":{"long":1842},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"e02b4d2c-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4e4d769-eca3-4fa4-a162-e2e341b10c5d","sequence":{"long":1843},"type":"EVENT_CONNECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02b4d2c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","address":"/var/run/logpriv","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fd5dd04-be6c-414a-aa14-7725c8af24cd","sequence":{"long":1844},"type":"EVENT_SENDTO","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02b4d2c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":164},"programPoint":null,"properties":{"map":{"ret_msgid":"407","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b92713fc-6c50-42ff-82b0-af8339c1bffa","sequence":{"long":1845},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":164},"programPoint":null,"properties":{"map":{"ret_msgid":"407","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a631be56-f1ce-4c95-95fb-fb9c04d5e61d","sequence":{"long":1846},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aafb7a4a-d952-865d-92d9-3ff2ed86d364"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":140},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"16","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c35ee8e-c68e-447c-b2a5-7288e3bb1cd6","sequence":{"long":1847},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02b4d2c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ba9dde9-9c0e-480e-ac38-d4ac8ae6ca96","sequence":{"long":1848},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6511288c-34cb-4556-8394-a83f4050da01","sequence":{"long":1849},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"1003","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0c1bad6-b230-45d7-844e-7999d9b8e771","sequence":{"long":1850},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"503cc4d9-1dd3-40f6-92b9-92d49b6bdef0","sequence":{"long":1851},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":{"string":"/etc/security/audit_event"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c93ac76e-54da-4a41-9f0e-2725031d9a7b","sequence":{"long":1852},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":27878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9badf050-b222-4a48-b17d-2485225013fa","sequence":{"long":1853},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":{"string":"/etc/security/audit_class"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b961f130-2737-4ce6-b948-b60a4e93f5e4","sequence":{"long":1854},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c2d5c94-76bf-4577-b778-7678a347f799","sequence":{"long":1855},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b007862e-e0c7-4550-b68b-c108140a3c4f","sequence":{"long":1856},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce9893f7-6798-4f4a-aa4b-1f73e0645458","sequence":{"long":1857},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cca1296-b8c1-435a-807c-440b008f72d9","sequence":{"long":1858},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d4c6d03-2bb6-4fba-b011-4a5bf80f0a67","sequence":{"long":1859},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f400cf0-0b63-4eb4-9551-0cdcacfbf233","sequence":{"long":1860},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3c15190-e774-42a4-90bc-a2b9f2578e83","sequence":{"long":1861},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3a23c46-429e-42fc-9e8c-b510c5390ca0","sequence":{"long":1862},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee942450-e326-48a5-8cd9-4a3909e7a652","sequence":{"long":1863},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":27878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7af3a3b6-a387-4ef3-a8cb-4f029f263e62","sequence":{"long":1864},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"565cddb2-9bb4-4483-8e9c-8b47b161ed6d","sequence":{"long":1865},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":27878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d5832c3-19cc-4e42-984c-ba5eee1a218b","sequence":{"long":1866},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e7ae52e-90e8-4f5e-98c1-4ad687542746","sequence":{"long":1867},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2d55198-1cc8-42b9-9f76-25b3a4e17dcf","sequence":{"long":1868},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ccac75c-01d9-4fa4-baa6-ad430f91ae64","sequence":{"long":1869},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c25eea8-db09-4acd-8f76-33f6c77879c4","sequence":{"long":1870},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6866088e-7086-4d49-a921-685040289ce5","sequence":{"long":1871},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41528383-d514-4e0b-a9fa-8f02125c3b49","sequence":{"long":1872},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"148266dc-44ae-491d-8c61-11d925967736","sequence":{"long":1873},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"-1","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5c4b0f0-6d3e-4adf-af7e-612affc2d21c","sequence":{"long":1874},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6d38c09-18f3-436b-936f-0348c768de5f","sequence":{"long":1875},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a101e82d-611f-45d3-8d1a-4eb74e3338c3","sequence":{"long":1876},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"63","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d85f7ae4-0b83-439b-8fa7-36301c1c3e23","sequence":{"long":1877},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b14cbcbc-a5b2-47dd-8df2-1c8958969303","sequence":{"long":1878},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_gid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e02bec49-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e02bec48-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"b7ffa591-1b21-5b6c-ae6d-3b862ea46217","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"e02bec48-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"e02bec49-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4768aa35-4d4a-48de-b9f2-f232d9eba99b","sequence":{"long":1879},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b7ffa591-1b21-5b6c-ae6d-3b862ea46217"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","ret_fd2":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e02bf2bd-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1295,"parentSubject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":1552582917233945148},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f678d3f9-0309-482d-aa6d-f71ae638410c","sequence":{"long":1880},"type":"EVENT_FORK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1295","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1295","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e02bf8c7-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e02bf8c6-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"2d3c57a7-95ff-5f9f-b4b3-18d5eebe8057","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"e02bf8c6-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"e02bf8c7-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4a194df-fa73-4f6c-b862-ae0cb62fb37a","sequence":{"long":1881},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2d3c57a7-95ff-5f9f-b4b3-18d5eebe8057"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","ret_fd2":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9208ac27-875e-4c15-ab75-c9a733ddd933","sequence":{"long":1882},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78822731-1c82-44ef-88fc-20b4fdcdf3db","sequence":{"long":1883},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"0","arg_ruid":"0","arg_suid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27fb7057-4c74-4e5f-8cfb-4af5d6ef055d","sequence":{"long":1884},"type":"EVENT_FCNTL","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"1","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb9380ee-f2d9-4227-8a4f-9e1fef0abe3a","sequence":{"long":1885},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce944e90-4731-43e5-8d43-fda2e8a01be9","sequence":{"long":1886},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"792dc156-0408-420f-8403-94a0cae55d72","sequence":{"long":1887},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a62a52df-c618-4b07-a49b-d5caeb880ac5","sequence":{"long":1888},"type":"EVENT_FCNTL","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c46c9a16-c842-47f3-a69e-0ac632aa10e0","sequence":{"long":1889},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bec49-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":{"string":"/bin/ls"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917245561708,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"ls","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d9b6c41-2cf4-42b2-82cc-846c5478566c","sequence":{"long":1890},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bec48-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47406223-d2c7-4859-94b2-6eec7f07b34b","sequence":{"long":1891},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bec48-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9b8c85b-544f-44a1-8bc4-ee8a020f5c5c","sequence":{"long":1892},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51c19013-04a1-4679-a05f-a264b2684a03","sequence":{"long":1893},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed2581ea-ed09-4ad7-87cc-f12dfd002b26","sequence":{"long":1894},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c9fd16c-f0b1-46c9-baa3-b11c86230e4b","sequence":{"long":1895},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16fd40bb-26f9-4050-8824-73432a14bdf4","sequence":{"long":1896},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa9f25bb-836d-4e51-bc64-a2f15f26f0fe","sequence":{"long":1897},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fcf650d-960a-485b-b63a-e5bea86320ba","sequence":{"long":1898},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c054cabc-f417-40b3-a011-59d6ed1c0f94","sequence":{"long":1899},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3358529a-9e2d-4e58-a685-516d89a7e35f","sequence":{"long":1900},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecc04196-8dec-444c-8c77-e8550e57bd3c","sequence":{"long":1901},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cca956fa-afee-4cc2-9379-5833d333e1e3","sequence":{"long":1902},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2420736},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18e31b69-205f-4cdc-a08f-51709fa2e065","sequence":{"long":1903},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2420736},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8030e0ed-a03e-47ca-bdd6-41cb20a739f5","sequence":{"long":1904},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2453504},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5717fac-7d5a-433a-a712-dd4a7dfbd05e","sequence":{"long":1905},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2453504},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"116cfbaa-69a1-4a81-9f61-2121deed48f9","sequence":{"long":1906},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39e79db6-0d8e-478c-b391-c49b860fa4a4","sequence":{"long":1907},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd41ec10-9d5c-401a-bcfd-c2c55422aefe","sequence":{"long":1908},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"299c004c-4c41-4539-8aa8-53464bfe5b66","sequence":{"long":1909},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":{"string":"/lib/libncursesw.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"343c2a64-b9b9-48b1-97ab-c133131e014e","sequence":{"long":1910},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9a942e9-620b-4edd-969c-7a7dad2d5a45","sequence":{"long":1911},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"257d3f55-9e32-435d-ad65-9c52381107ce","sequence":{"long":1912},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2514944},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1ee8401-151b-4e48-bf13-b5439fb2b9a3","sequence":{"long":1913},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2514944},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be91e469-3e36-4268-bd63-4cdebcfd4d1c","sequence":{"long":1914},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2682880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6048d64-eabf-45be-9d68-d0e07fcb82bf","sequence":{"long":1915},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2682880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2badad94-4d5f-46b0-a075-389fdb259a1f","sequence":{"long":1916},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2887680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27ed3835-29f1-4650-8ee5-c0c7fdb549e3","sequence":{"long":1917},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2887680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5e10ca8-6d0a-4c49-838d-d4b40bf52665","sequence":{"long":1918},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b72fb848-3559-4d65-9888-6a4e714ae9ff","sequence":{"long":1919},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d68d9e0d-6e4e-4371-8e18-b71efa0a20cf","sequence":{"long":1920},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dafbd166-78b5-4c14-917a-ae19a119b228","sequence":{"long":1921},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6db0372e-b6c4-4e4c-b105-057b18733788","sequence":{"long":1922},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fee6d53-004d-428e-b93e-4aae871fb59c","sequence":{"long":1923},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44d7e4f4-12bf-4a89-9da1-89ee67d6e368","sequence":{"long":1924},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89add115-7bb9-4ae9-854f-08788263b058","sequence":{"long":1925},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d441fff-71b1-4f49-ba80-5ebc615f425e","sequence":{"long":1926},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a68b6f9-d33f-4588-a6c7-6b85e83373c8","sequence":{"long":1927},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"066cf108-cd7e-4ff7-be84-8b358db5e926","sequence":{"long":1928},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2a6b372-c4c4-46a6-8663-7d5955545028","sequence":{"long":1929},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"626083e8-8ed2-4198-ae64-e45b655fcbab","sequence":{"long":1930},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af060ae2-b265-4783-bcc4-44b5141b675d","sequence":{"long":1931},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa963e56-09c6-48e0-9e7d-135af9f2cceb","sequence":{"long":1932},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"881743d6-b9c6-4efb-8cc7-12e3d996bdff","sequence":{"long":1933},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64dc8a16-25b0-4973-a979-90e82b64a525","sequence":{"long":1934},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_fchdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bf0e68f-8cb1-4c85-b150-6e64d736a9b6","sequence":{"long":1935},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"361a3d58-3827-4edf-921b-15318a953ca4","sequence":{"long":1936},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab4bbedd-cab6-49cb-8c64-7990fb86ace1","sequence":{"long":1937},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4956a18e-0a35-48ec-896b-7db6de016596","sequence":{"long":1938},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_fchdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"119a0722-f291-41cc-8f04-a76894b56d54","sequence":{"long":1939},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7756cc2e-5076-4c88-bc6e-04a8465fe77e","sequence":{"long":1940},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":119},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67f10619-c35c-48b2-917d-214d4a0fad2c","sequence":{"long":1941},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":107},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c909a3f-a793-4740-b617-7296f7f16bd2","sequence":{"long":1942},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":103},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5c8b59e-5246-47e6-8d3b-2d8dcc77e7c1","sequence":{"long":1943},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27b74f8c-086c-4e1c-85e9-b51b784c2a4b","sequence":{"long":1944},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":104},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8f9e9f6-64d9-4a06-9b62-b77813d7a9c9","sequence":{"long":1945},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":94},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b365881-eb37-483f-bf4b-79476a6eb957","sequence":{"long":1946},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b1d0039-3896-4880-858a-d9c91dd9698b","sequence":{"long":1947},"type":"EVENT_WRITE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf8c7-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0a3aeab-a890-4fa5-b03e-4c91ff139e8e","sequence":{"long":1948},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf8c6-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4283663-739e-4b0b-8d94-2db6fa9d7429","sequence":{"long":1949},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf8c6-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37ccaab7-5a5c-4db8-8453-ba633c684a17","sequence":{"long":1950},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf8c7-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ca0c9f1-f34c-4799-a3ac-b25ac5d88f70","sequence":{"long":1951},"type":"EVENT_EXIT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac79fd0f-9ccc-4599-a8bd-50a5c39791fd","sequence":{"long":1952},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":169},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63918237-a60e-4770-b6f1-bce4a29efcb0","sequence":{"long":1953},"type":"EVENT_WRITE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3aacad67-b077-4fa6-94db-2668095c7aa6","sequence":{"long":1954},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":489},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e02d16f1-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1296,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917245561708},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67d42a2b-eb90-4c14-8414-382898462a64","sequence":{"long":1955},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1296","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1296","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfc4aeb9-3179-4532-afc4-84a41ef342fd","sequence":{"long":1956},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":103},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e1d9129-95e6-41ec-8717-5f408d2241bf","sequence":{"long":1957},"type":"EVENT_WRITE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e35bf8a-8fd9-4b6c-be9d-17ff748eb319","sequence":{"long":1958},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee7b9d98-094a-4f94-a80e-deeb00a168e6","sequence":{"long":1959},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8e8111e-61fd-4924-8daa-1ec929cafcbb","sequence":{"long":1960},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f59b0bd-6285-4b06-96a6-b6eb9dcc5404","sequence":{"long":1961},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":508},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e02d3b31-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1297,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917245561708},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"524a7e76-7c4a-4cdb-be99-ef9f6e47d9d6","sequence":{"long":1962},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1297","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1297","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cef09505-0433-40dc-95f2-17d8ba27f425","sequence":{"long":1963},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6ce4ece2-78d7-5951-9778-d00331594fca","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9faabb49-d112-4cd7-bd2f-a02bbec649df","sequence":{"long":1964},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917245561708,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d08fbf05-f5be-48dd-b263-a8b1f8baba30","sequence":{"long":1965},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a000621-5e0b-4c35-b40b-a3759eaa7541","sequence":{"long":1966},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"837f736e-063b-4928-9273-be524d2a587f","sequence":{"long":1967},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af8728be-5640-4397-873d-7e419a4ca008","sequence":{"long":1968},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e67107fd-3f44-4a2c-8298-48ae4eee933b","sequence":{"long":1969},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ec71824-e1b7-436d-b02a-5208ca4fae8f","sequence":{"long":1970},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f60b050b-c788-4231-abc3-3c2dd83a4f60","sequence":{"long":1971},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b737325-9ec8-4a91-b339-7fd1625b1e7c","sequence":{"long":1972},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"e7451145-d4d2-9753-92d4-25f153976db4","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17b875df-2356-4ba5-aef3-be4e4322becb","sequence":{"long":1973},"type":"EVENT_EXECUTE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e7451145-d4d2-9753-92d4-25f153976db4"},"predicateObjectPath":{"string":"/usr/bin/nc"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917245561708,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"nc -l 54321","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b838e7c3-4933-4ddd-b7bb-5c5576d1dba7","sequence":{"long":1974},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a58b1cf9-c6ea-414c-9d2d-0417c2ea5351","sequence":{"long":1975},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a6024ef-6973-4968-b67c-966777d4c350","sequence":{"long":1976},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a372e4ce-d46c-46d5-9bfe-bfb082d50890","sequence":{"long":1977},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c871f39-d81f-42ab-9ff1-5414ab45f1a2","sequence":{"long":1978},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"422dc533-159f-4557-b68a-35444f723de6","sequence":{"long":1979},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cd53b3d-7e42-4692-89ed-874d8ea23a98","sequence":{"long":1980},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15933a66-fa1f-40e9-8086-3f3370fcd4a6","sequence":{"long":1981},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":{"string":"/lib/libipsec.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79f1992c-1ee4-49e3-88b5-ce17173f9b35","sequence":{"long":1982},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a59ddee0-aedf-4f6a-ac93-6debd76bed8c","sequence":{"long":1983},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8050877-c74b-49ae-b27c-4c6ad347fbf5","sequence":{"long":1984},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917485712666,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":195593},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59c3a040-d84a-406e-a7b4-1db12c73bf14","sequence":{"long":1985},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":195593},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2df5eb1b-2bdf-423a-bd15-6922a4dd8eb9","sequence":{"long":1987},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9370a5e-bb88-44a4-8705-6c3b44a0f8d0","sequence":{"long":1986},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c644effc-8d92-4b6e-a72b-d1864b46f993","sequence":{"long":1989},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b13c9005-dec1-4785-9008-2ecbb37ad866","sequence":{"long":1988},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93da0843-2843-472a-84c3-407d457176e6","sequence":{"long":1991},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f97b37e2-f343-4d9d-a3dc-eda0300200b6","sequence":{"long":1990},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"434c7bd7-6aca-4e5c-b3ea-5bffc6a4f676","sequence":{"long":1993},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9ba9f4a-55c8-4262-bf97-17d382edae7a","sequence":{"long":1992},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4d44856-1dd6-4f2c-b675-6ce5460f6a51","sequence":{"long":1995},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb5d47df-d3c5-4314-8d44-5f357f69717e","sequence":{"long":1994},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac7d6d33-da3d-4d56-b3b2-402f0e5005eb","sequence":{"long":1997},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42ef3593-db65-4d34-bba1-c960cb788702","sequence":{"long":1996},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2d0e5d2-7d76-4978-8aaa-4886c78ec4e5","sequence":{"long":1999},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee964dad-8b75-40c2-a920-3655a68ed5b2","sequence":{"long":1998},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4481b8a2-c6c2-48c3-b895-fe2512a3036f","sequence":{"long":2001},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9dcb9aa-16c5-4ec9-a07a-93f626faeb81","sequence":{"long":2000},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57f91db9-86d6-4319-961c-312cb07bbe5a","sequence":{"long":2003},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"463cba11-db7a-4319-a045-4cca1f3fbfa4","sequence":{"long":2002},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8859da95-80e8-4f86-833c-80e4cd337ba5","sequence":{"long":2005},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ea71258-2a67-461a-827c-201b383435b3","sequence":{"long":2004},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e7b9f7c-c489-4911-a388-66d25b80df62","sequence":{"long":2007},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38743321-0724-4be2-b2e8-1e14f11afef9","sequence":{"long":2006},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0de9b885-cc2e-4bb0-a901-a27551252774","sequence":{"long":2009},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"775c5258-b188-4412-8d72-88c497d98daa","sequence":{"long":2008},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36ab5ac1-6bb6-4f18-8e3b-eedc16c6e3c8","sequence":{"long":2011},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f303f71-7484-4a25-803c-6df06696306d","sequence":{"long":2010},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b377d3d-546b-4306-ae08-f796b377823b","sequence":{"long":2013},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb6f4dd6-5a93-45d7-8887-837085b2c6af","sequence":{"long":2012},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93c1797f-3a09-43c3-812d-7f87fd9d8976","sequence":{"long":2015},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c13b5ee-b9a2-4be5-96a9-c9f2429f60f6","sequence":{"long":2014},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1121bbb5-b1a9-4062-816e-a850f44ac1b0","sequence":{"long":2017},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9d8b73f-9670-4bdb-ba94-5c71d973124f","sequence":{"long":2016},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe93a897-a369-4c15-8147-24930a58c54e","sequence":{"long":2019},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"029659d4-59bf-4ea7-aa79-524e0e33280f","sequence":{"long":2018},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43eaa027-b602-46f0-9e09-8563bdbbc0e7","sequence":{"long":2021},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d57cc87a-11cf-4fa8-ba1b-a6626f0edb97","sequence":{"long":2020},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb942e00-dc12-4608-bdec-02acd1950101","sequence":{"long":2023},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66ec0039-fa9e-4b8a-9dff-dcc9abe2f965","sequence":{"long":2022},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c736c1f-3fa1-4b5f-8e0c-e7dc44c8916a","sequence":{"long":2025},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c89fd1b-36c2-439e-b67c-87b8662759a7","sequence":{"long":2024},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a759a7e-56de-4b1a-aebc-3d14038e1440","sequence":{"long":2027},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2667ca3b-5b29-4b02-84f3-a17d104dc313","sequence":{"long":2026},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc329ea2-47c9-44bd-aaa8-56f22d98dd1c","sequence":{"long":2028},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea2ec8bb-c235-4bc4-9ec3-828ea3bef7b0","sequence":{"long":2029},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b59f85bb-8176-43b0-9815-fce64c45ed57","sequence":{"long":2030},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea8abf55-6724-4bf6-963d-a0bd822fff55","sequence":{"long":2031},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4628},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a96b89e3-a74f-4110-bb28-87be45e678ee","sequence":{"long":2032},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1578fc1-616a-4406-98e6-77611e791569","sequence":{"long":2033},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4681},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5213343f-027c-483c-bbe6-313fd40c5e87","sequence":{"long":2034},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3131cdd2-d7b0-4a39-ab46-e4c9de0d73ee","sequence":{"long":2035},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"178146a9-ef59-4ceb-965d-6b4c81a4d738","sequence":{"long":2036},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4298},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c89a709d-18d3-46cb-8bf0-3fb3fa63e7ee","sequence":{"long":2037},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4351},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1580b1c-d391-4679-ba24-56a80f50bd71","sequence":{"long":2038},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbaf6059-da7d-4041-bbda-39bfa79ab525","sequence":{"long":2039},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0b6fd72-d1de-4cad-82f5-ad5af55e5d79","sequence":{"long":2040},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29118dbd-e26c-4e24-8e38-493619e129d1","sequence":{"long":2041},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4787},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79600b1e-5c5e-4bc2-afc3-40b1e14289fa","sequence":{"long":2042},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4840},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f3b9093-dd27-4761-ab6c-fe24e0454a5a","sequence":{"long":2043},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4246b76-328a-49d7-9684-c99ca2baedf5","sequence":{"long":2044},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93a6a3ee-1e5c-4121-a2a5-8f8948efe4eb","sequence":{"long":2045},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8af5040-2c5f-4880-895c-4d75881686cd","sequence":{"long":2046},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4396},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9a5cf39-5f2d-4660-9baf-ae9b22678764","sequence":{"long":2047},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff14f567-eaf7-4cbe-90a2-5c390311089e","sequence":{"long":2048},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d755f27d-23f8-441f-9609-5d0808fea3c2","sequence":{"long":2049},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c8c96a1-36bc-485e-8a6d-dd014809516c","sequence":{"long":2050},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4087},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8133abaa-6163-4581-9c0b-1b7f0aff5d3e","sequence":{"long":2051},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd68d0cf-448f-46d7-b4d4-86110a6761a2","sequence":{"long":2052},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6896039b-ff0a-42ee-a10f-496219cb85e2","sequence":{"long":2053},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"912d1bcc-9461-4165-8cde-57f3c09dc140","sequence":{"long":2054},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4338},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dec0ba35-1872-470b-b873-5960b723c2c3","sequence":{"long":2055},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38dafbc5-7021-4ee1-83dd-3fa5b69b237a","sequence":{"long":2056},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f5fd2a1-d104-4733-957f-ca7de91e00d0","sequence":{"long":2057},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bb78627-821d-4fbb-8fff-8ed827e62721","sequence":{"long":2058},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4824},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d684aa1-cb6b-40fc-a3f2-16bc46a00973","sequence":{"long":2059},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d8bd953-aae7-4cbf-8c96-89b163de380d","sequence":{"long":2060},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5486330-4cc1-422d-a096-9a67d733bcd1","sequence":{"long":2061},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aeed818d-d761-4f0a-afd1-9016217ee051","sequence":{"long":2062},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4264},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1285ddc4-0eb9-451d-8458-1cf30d95eecc","sequence":{"long":2063},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93269374-3cad-4539-8e5f-dfb0a384c655","sequence":{"long":2064},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11b066f1-bfc0-48d3-9c5d-cbf03ec3d5df","sequence":{"long":2065},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ec87e1a-bfc6-400a-8403-c995f95d2ca5","sequence":{"long":2066},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3913},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9773e8b-c009-4ecc-8d81-cf2fdd1dc0ac","sequence":{"long":2067},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37e5fb02-cff1-48a0-b384-ee355151a510","sequence":{"long":2068},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4adda459-8e1a-4c21-8256-f46ddff9cb0e","sequence":{"long":2069},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2478ca4d-c4ae-4a1e-9b4b-101816800c15","sequence":{"long":2070},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4723},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6ab0493-279c-4049-b7c2-4b882f4e46b6","sequence":{"long":2071},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38e18879-30ab-4d4e-88e8-911c0f75c3d9","sequence":{"long":2072},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"244c77d9-0680-418e-b9d6-691117d99bb9","sequence":{"long":2073},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0308c9ff-7b83-4a22-af00-36c3f5263c6b","sequence":{"long":2074},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3899},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"286ba132-4d38-4d95-9c7f-d37d3a946cae","sequence":{"long":2075},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2257b968-82e1-494b-aa50-460b4cd17966","sequence":{"long":2076},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"218d66b3-d335-49e7-a4aa-c9861612a7cc","sequence":{"long":2077},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dd68bd7-7b66-4a70-9cb8-9973f26165de","sequence":{"long":2078},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4199},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5dc1c71-d83b-453d-b5a3-84fcd8a57b92","sequence":{"long":2079},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5eb4aa9-ca44-4d94-b50c-1312f7f9f85d","sequence":{"long":2080},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09a6c4ac-4925-4691-8c96-63ec140c3a70","sequence":{"long":2081},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50094256-aaa2-4381-878a-6ed414e26f6e","sequence":{"long":2082},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3977},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a119f77-bf45-48af-a4c9-5e63ea4772ca","sequence":{"long":2083},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"229716f8-eea3-4831-86df-87b75b8bf532","sequence":{"long":2084},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39d3558d-6bb9-4b7d-8cda-dc7bb5e2e1f0","sequence":{"long":2085},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07e7ba41-811f-4d19-8150-c2cc086b32a6","sequence":{"long":2086},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4245},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18db5935-2c1e-41a1-bcbb-b7b8a8071850","sequence":{"long":2087},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56cb418b-b805-4e43-b475-bbccb987a260","sequence":{"long":2088},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8af96034-5038-4904-8e49-0b8b791525e3","sequence":{"long":2089},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93bcaa09-b26e-40ee-8672-68dc26c96040","sequence":{"long":2090},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4214},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2f1394c-380d-459e-a074-be4bf4526fc0","sequence":{"long":2091},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcc64d9e-9fd2-4ffe-bf8e-da5981449883","sequence":{"long":2092},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db1656f1-3deb-4fef-9b87-84d00330f9a2","sequence":{"long":2093},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb40b542-f804-4f8c-b361-f0ad7258be6d","sequence":{"long":2094},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4299},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71b9ad33-453d-4d3b-b2cd-f18eea8536dc","sequence":{"long":2095},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f661f018-2cdf-4b14-a5f8-ddefa1dff4fb","sequence":{"long":2096},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7b4a97a-25c9-4ef7-8ffc-eef893eceaba","sequence":{"long":2097},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1a34efb-370e-41c5-801c-bd91a10bd135","sequence":{"long":2098},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4570},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3010d5ad-5881-4f42-bede-31d8bae9e087","sequence":{"long":2099},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74e8420f-27b0-4adf-b151-eccad3fc80f6","sequence":{"long":2100},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e55ca9d2-2639-4920-9a23-c56f496442ad","sequence":{"long":2101},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e008700-e2df-4b2d-84ca-00afef20a75b","sequence":{"long":2102},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4449},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30f943ad-eb77-4856-b130-b587f557a111","sequence":{"long":2103},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"026fbd4a-b38b-4cdd-8450-a586a01bf442","sequence":{"long":2104},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7107fdbf-30bf-49a6-955b-439ad96cd900","sequence":{"long":2105},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3945},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29f9bc96-30e0-4fd2-8175-384c85d6e978","sequence":{"long":2106},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01af5328-c2bd-4fef-be78-aae1d2f82b0e","sequence":{"long":2107},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34fa1b79-a37a-407b-96d2-eed79b5dd455","sequence":{"long":2108},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42b58416-2481-4ec5-bad7-22fe734a3d6d","sequence":{"long":2109},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4109},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffc3fabe-f6be-4b88-b25a-d14b640163eb","sequence":{"long":2110},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"920fc56f-31cc-499f-be48-353eade31b18","sequence":{"long":2111},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f61e7e3e-2db7-4344-9391-5b22e306b3ef","sequence":{"long":2112},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a30926f6-85c5-4c31-bb60-60d210029bcb","sequence":{"long":2113},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5021},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60ebafea-d42f-498c-a2a2-4cf35b9ee1c2","sequence":{"long":2114},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1620c85-3790-450a-acad-2fbc3a073b6c","sequence":{"long":2115},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b298650d-ca29-437d-bd1f-1c5aa5639d0b","sequence":{"long":2116},"type":"EVENT_SENDTO","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"408","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f170496-5363-4c5d-8018-23d187d25294","sequence":{"long":2117},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"408","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"031ba773-6912-4f6f-8760-c1c30c85564f","sequence":{"long":2118},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"914b9b1e-c1de-4673-ab9c-8deb5984e5e7","sequence":{"long":2119},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918144488663,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0f432ec-79c8-40c4-a945-41fadf7326b8","sequence":{"long":2120},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918144488663,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"492326ce-1806-4d80-a4cd-9259cf1a5521","sequence":{"long":2121},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918144488663,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4140},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a6dbc61-a354-404b-9754-3f2b03efe8fe","sequence":{"long":2122},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d3d9ed6-5d49-4895-9412-37072820195d","sequence":{"long":2123},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"154a2d1c-c863-4aeb-97ce-998be8c4fc03","sequence":{"long":2124},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4391},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f5c2e0c-9d08-4287-aba1-c1f112403880","sequence":{"long":2125},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a9db9d0-ae07-4dc1-a1bd-94dd4448b505","sequence":{"long":2126},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a13064f-5ff6-4d04-b2aa-d317341a4f99","sequence":{"long":2127},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4877},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5107dc7d-4b68-49fc-97f9-470e016d8b37","sequence":{"long":2128},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918167986826,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46bc3576-cbae-4a79-a1fa-8e869f00b0e1","sequence":{"long":2129},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918167986826,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b508e51e-13fc-4b58-a986-ce779e4f4842","sequence":{"long":2130},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918167986826,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4317},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9085eee9-59f7-42d7-90df-e2695efa80f2","sequence":{"long":2131},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2168a31d-54b1-4320-8e52-49153368bdcc","sequence":{"long":2132},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcb2eff2-17c6-4067-b953-d170d41a4fcf","sequence":{"long":2133},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3966},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c31e9b66-4d13-4686-8697-4b604f7f4121","sequence":{"long":2134},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94129f42-c78a-461f-9f74-d620d597f8ac","sequence":{"long":2135},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65f5c37d-153a-4730-9bf5-b5f195dec3b7","sequence":{"long":2136},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4776},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d212ab8-d981-451a-87ed-4d8a32ba260e","sequence":{"long":2137},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918188618677,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e13c809c-412d-4a44-95af-d8dd573d41f1","sequence":{"long":2138},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918188618677,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a1e5ea9-aea8-452d-b813-6ff0f7c60f55","sequence":{"long":2139},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918188618677,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3952},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21b3c929-5e61-42b0-9076-e9d9fd766577","sequence":{"long":2140},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ee9a45b-9272-457f-b1f4-0cda58f73643","sequence":{"long":2141},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6771328-546e-4dc9-bd44-fafd5b1bfed0","sequence":{"long":2142},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4252},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"983f8863-4388-4d2c-b259-242151706696","sequence":{"long":2143},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40c5516a-85eb-4d71-80ad-93b48e5583a0","sequence":{"long":2144},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a811dde9-3a66-40e6-81e1-bf7a34f00796","sequence":{"long":2145},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4030},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb44f3d6-9c49-4ba3-995b-3c4f4263b1dc","sequence":{"long":2146},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918204342280,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ace17878-67e0-47ee-95dd-a50138585fbe","sequence":{"long":2147},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918204342280,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f616e85-4bff-4ef8-ab24-b20c8fb58c57","sequence":{"long":2148},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918204342280,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4298},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b695a27e-6599-4da9-9ab8-0b0ed9c56796","sequence":{"long":2149},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918216018019,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13378764-a36c-4654-9204-f919658012aa","sequence":{"long":2150},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918216018019,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3f71f3e-c628-41dd-a226-c0331808834d","sequence":{"long":2151},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918216018019,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4267},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6817d1a3-ad88-405b-aa37-1117e0d2a9e4","sequence":{"long":2152},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42ebc3c6-19b0-4794-af19-230e3cb40b34","sequence":{"long":2153},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0456feac-bb05-4f68-add1-5acd642ae896","sequence":{"long":2154},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4352},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"135eef87-72be-4825-a22d-04c1c8cc0d5c","sequence":{"long":2155},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00ac0451-6478-4f01-b3e3-c68676f5f6d2","sequence":{"long":2156},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ef66b12-8c03-4fa2-ac9e-dea492104bc7","sequence":{"long":2157},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4623},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8cc1ccd-5cb4-4a6a-9d12-ca8889802212","sequence":{"long":2158},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918234217398,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93513b2b-f677-486b-83bb-267195e543be","sequence":{"long":2159},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918234217398,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"915fc9f7-0e00-4a3f-9949-720f76f83c13","sequence":{"long":2160},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918234217398,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3998},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"825c8bca-3d5a-48ce-bc30-b47c96e2de22","sequence":{"long":2161},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3bec9bd-851d-4833-8f7c-2a2f4c538c5e","sequence":{"long":2162},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bc46383-b09a-412a-aad8-131d71d43330","sequence":{"long":2163},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4162},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"049f6da8-1051-4c74-8f56-26f9a44a5660","sequence":{"long":2164},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e12d2684-fbd5-4c93-9c30-c70b0ecc1fcf","sequence":{"long":2165},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2e1e758-2b12-41a0-abeb-3545a57ee678","sequence":{"long":2166},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5074},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"901929bd-08cb-49a7-b608-5cedc549f1a1","sequence":{"long":2167},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918253911946,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16b16c88-9470-43d1-a846-1726e5bde4c8","sequence":{"long":2168},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918253911946,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe5845cc-c206-467d-8906-625338dab754","sequence":{"long":2169},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d18026c0-e51a-4642-8396-5ed4e74ac0f3","sequence":{"long":2170},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62dbafb1-c818-4677-8d4e-86322e5f8129","sequence":{"long":2171},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb548ac3-09b1-4580-97c6-aa8ed1878409","sequence":{"long":2172},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e0c81a42-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e0c81a41-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"d3a4ecf8-7a30-56cf-8498-3c77cacf4b5a","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"e0c81a41-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0722029d-1df7-4b8d-87ed-06479fe5fce7","sequence":{"long":2173},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d3a4ecf8-7a30-56cf-8498-3c77cacf4b5a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4b622e4-eb3a-49ec-983c-c28c8df2c7ff","sequence":{"long":2174},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":551},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e0c820b9-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1298,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582918266852861},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9a28b25-2253-40b1-9fd3-2ef4253ca8a5","sequence":{"long":2175},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1298","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1298","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e0c83648-467a-11e9-aeaa-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e0c83648-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"004d3ae2-cffc-5c32-a25f-5454b8736020","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"e0c83648-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"e0c83648-467a-11e9-aeaa-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90c6167a-db64-48e0-a3e5-894aed69d285","sequence":{"long":2176},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"004d3ae2-cffc-5c32-a25f-5454b8736020"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","ret_fd2":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e0c83aad-467a-11e9-aeaa-080027fc76ba","type":"SUBJECT_PROCESS","cid":1299,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582918266852861},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e502ff0-9f8b-43da-9b8d-a74874fb4145","sequence":{"long":2177},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1299","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1299","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e0c8424d-467a-11e9-aeaa-080027fc76ba","type":"SUBJECT_PROCESS","cid":1300,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582918266852861},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97b533b3-fe0c-414e-a30f-0b02200aaee4","sequence":{"long":2178},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1300","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1300","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4310d77-5d71-4168-825d-8a2e15eed96c","sequence":{"long":2179},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36883104-c029-4414-8690-70a6dc5d8df2","sequence":{"long":2180},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de3a34c1-0b17-8152-970b-4c2cb281885f"},"predicateObjectPath":{"string":"/bin/cat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582918266852861,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"cat EXFILTRATION_FILE.dat","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14e1f284-bae5-4337-a235-c592728c8986","sequence":{"long":2181},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"220a0998-b56f-43b6-aa9a-a4fd9b452066","sequence":{"long":2182},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3049f7f-6bb3-4db1-ad98-4238a5e350e0","sequence":{"long":2183},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea275730-fdf6-47da-add4-d9659c3822a6","sequence":{"long":2184},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e7451145-d4d2-9753-92d4-25f153976db4"},"predicateObjectPath":{"string":"/usr/bin/nc"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582918266852861,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"nc localhost 54321","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f05c24f-016d-44e5-ae45-ada9fa4f86d3","sequence":{"long":2185},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff5c0692-6f07-40f9-b76f-508afb4dcfa7","sequence":{"long":2186},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a64617f6-653e-49f5-b4f0-1623fd2a0ccd","sequence":{"long":2187},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4290ea21-3223-4ffc-8fe4-0018d793b38e","sequence":{"long":2188},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cb4851f-2724-42d5-add8-b815b2566407","sequence":{"long":2189},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66ef6c99-4fd6-4b90-a20e-cf9a353cda22","sequence":{"long":2190},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d96009e-ed32-47e3-b1c5-575cae9cff53","sequence":{"long":2191},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f185893-d583-4036-aee3-b4c43e7bbe4d","sequence":{"long":2192},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44e7e99b-f5fc-4af1-b90e-5039d0d6e996","sequence":{"long":2193},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d0a837c-72f6-47f4-b89b-0eed0e2dc7d2","sequence":{"long":2194},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10cfe09d-6cce-4b82-b88d-28fd3a958323","sequence":{"long":2195},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2d7f698-2cc5-47d5-886c-5beca84caa40","sequence":{"long":2196},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95bd3fc5-416a-401d-8f6a-91f20b968b66","sequence":{"long":2197},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfd50222-afa7-4e6b-b71b-da9975f32b37","sequence":{"long":2198},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06b754b9-2aa9-4233-abad-1ed32e6c0c64","sequence":{"long":2199},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ace69c7-b4d7-483d-be33-10b74167b22e","sequence":{"long":2200},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b045ecc8-15cb-4d30-a978-b19a58609e4a","sequence":{"long":2201},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b19a309-56e8-42cf-ada4-378feb93cc10","sequence":{"long":2202},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b9a508b-59de-4385-9afc-95d4573e9d60","sequence":{"long":2203},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57797b18-eb4d-4220-bd71-8d7dad9a64a7","sequence":{"long":2204},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2687a43-7708-40f7-80d5-16f82fb175ac","sequence":{"long":2205},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13abbbaf-ac6b-41a8-bfdb-6cd5b5efc024","sequence":{"long":2206},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a1244de-2517-4254-83b2-163fbf74472e","sequence":{"long":2207},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"395eba0c-bb96-44ae-9200-3ecb5d2169bc","sequence":{"long":2208},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"babeee0e-7026-4c97-8e86-cd8ef6e55531","sequence":{"long":2209},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45b9abe7-7383-4ba5-a356-ad9d5c9b7b91","sequence":{"long":2210},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6b6b139-57bf-4982-9914-34d52c3d4d24","sequence":{"long":2211},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39e20a60-53a0-4a73-b40e-e39b74945825","sequence":{"long":2212},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56773075-a3ee-4d64-bea1-4657a667fd12","sequence":{"long":2213},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"655c0256-e741-4f68-a552-366af90c6393","sequence":{"long":2214},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ac250ca-e873-4a65-bd84-f71981d5530a","sequence":{"long":2215},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad4ce02d-6310-4478-8f10-212992dfa4f3","sequence":{"long":2216},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3019547-1f16-4f21-9555-4374e7a87e12","sequence":{"long":2217},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fd942ea-9750-476c-bace-5f44d5ae24f0","sequence":{"long":2218},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00736449-898e-45f4-88ad-8f154f0a20a0","sequence":{"long":2219},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63456cde-7f1f-4ba8-a1d3-a17f94eb1360","sequence":{"long":2220},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7489b82-1466-40ba-a56f-ffc156136754","sequence":{"long":2221},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04141c67-e158-4428-9fc3-715e26803860","sequence":{"long":2222},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abf35e72-8b84-44e2-bb15-40a0ca614bf7","sequence":{"long":2223},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2416},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b349cc5f-1e80-4308-9ca2-81f1a6487e36","sequence":{"long":2224},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2416},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cd833d2-f973-47eb-bf83-58b975359987","sequence":{"long":2225},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0322b0aa-aad6-4ee6-bf7d-a93dc43d2732","sequence":{"long":2226},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91bd49f9-6176-4b34-85d2-12cfaba4fabf","sequence":{"long":2227},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54fa823d-7bf4-4031-92fb-e3323c6e55b4","sequence":{"long":2228},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ffd63e5-4369-4017-96f6-4385052f0ff3","sequence":{"long":2229},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb5eb7d9-7d92-48f5-8761-9e961d48f168","sequence":{"long":2230},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"519a87c1-c50d-4b8d-86f4-ff08420c4593","sequence":{"long":2231},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f457e1a-c8e5-4c52-aaed-7f9694a1dbac","sequence":{"long":2232},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79fac087-9259-4b04-b233-dba62a434a45","sequence":{"long":2233},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"371e734e-1e76-475b-a072-99cfe1cad3b4","sequence":{"long":2234},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"578e96be-82df-42ac-8854-bb9e1907552a","sequence":{"long":2235},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":{"string":"/lib/libipsec.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3f77505-833a-4036-8eea-286de09771ec","sequence":{"long":2236},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b9341c5-85df-44cf-89eb-ee6e869ab3cb","sequence":{"long":2237},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09c93977-e49d-48c0-8dd2-ffb699778470","sequence":{"long":2238},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cdb1241-09fe-48ec-841b-def93157a1e5","sequence":{"long":2239},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b5f92c8-3690-4e38-a7f1-6f805d15fff3","sequence":{"long":2240},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4020bae-2c51-4763-a0ea-9286901d5ce0","sequence":{"long":2241},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51b2d70c-fbff-417d-ab61-233090d1e08f","sequence":{"long":2242},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2912e5a-348e-40b7-afa7-cea34ec606b4","sequence":{"long":2243},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d33d50a6-110f-4724-a549-1a7f7a66b8b9","sequence":{"long":2244},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2449408},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbf1c186-911c-4c36-9bda-746c6e74cca5","sequence":{"long":2245},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2449408},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c508f47-b842-4cee-9b48-8ac283609720","sequence":{"long":2246},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfb740f1-7980-465c-9c13-afdf52cd728e","sequence":{"long":2247},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0331557a-14e8-46db-a24c-3ba02983806a","sequence":{"long":2248},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fa66fe7-254e-4092-8559-6f74b483592c","sequence":{"long":2249},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f04f43ba-f3dc-4759-92cc-f8b40e0207b3","sequence":{"long":2250},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2461696},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af01417e-dbfa-4a0e-8d67-56bb65e1cc49","sequence":{"long":2251},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2461696},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4841947-9809-4f69-a443-cb61e73bbc3b","sequence":{"long":2252},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2977792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6adad2e5-f13f-4c5a-9f55-2a7568d41c78","sequence":{"long":2253},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2977792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a872a996-7f41-4c0a-bef2-127239fd62d8","sequence":{"long":2254},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4308992},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fc7dd3b-0f64-43c7-b5dc-7a4293ef9ed2","sequence":{"long":2255},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4308992},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a70346c-3f1c-4996-9d65-8a8f29da0af4","sequence":{"long":2256},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa661f6d-3c83-40ea-9496-00153b956e73","sequence":{"long":2257},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8903d450-53b6-47b8-9cca-545d24ee1e87","sequence":{"long":2258},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71f255b3-3c78-4ff0-87c0-a6de154a9f68","sequence":{"long":2259},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b02f4dc2-a849-4f7d-a763-ec89d0b74303","sequence":{"long":2260},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5904349-1c9d-4f6a-b495-2199ba9d3f38","sequence":{"long":2261},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22970051-8546-4687-b5f2-bfe12f0dc5f2","sequence":{"long":2262},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa64551a-81f8-4b27-a018-2b5d5f2d54f4","sequence":{"long":2263},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35221279-12ee-492c-b752-d312ba8b9191","sequence":{"long":2264},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":{"string":"/etc/hosts"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68dfb905-2771-466d-af4c-c892235d978b","sequence":{"long":2265},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1031},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44865401-5c7f-4421-b722-981ff5231fd6","sequence":{"long":2266},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebce9013-0a2f-4d3f-a343-275d50438229","sequence":{"long":2267},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"e0c954e1-467a-11e9-aeaa-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":null,"localPort":null,"remoteAddress":{"string":"::1"},"remotePort":{"int":1},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b49d9c5-3690-4af3-967a-af2f5ec8cfb9","sequence":{"long":2268},"type":"EVENT_CONNECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e0c954e1-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","address":"::1","port":"1","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5994231-f136-403f-8c8f-ac67292b889c","sequence":{"long":2269},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e0c954e1-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"e0c95ac3-467a-11e9-aeaa-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":null,"localPort":null,"remoteAddress":{"string":"127.0.0.1"},"remotePort":{"int":1},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18f28e03-a2a6-46a7-b2e7-2fbea55f1e6a","sequence":{"long":2270},"type":"EVENT_CONNECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e0c95ac3-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","address":"127.0.0.1","port":"1","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"560cddb6-637a-4ef2-b2b8-1e9a7ce86ffc","sequence":{"long":2271},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e0c95ac3-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"e0c95f94-467a-11e9-aeaa-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"127.0.0.1"},"localPort":{"int":58335},"remoteAddress":{"string":"127.0.0.1"},"remotePort":{"int":54321},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"e02dc1a3-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"127.0.0.1"},"localPort":{"int":54321},"remoteAddress":{"string":"127.0.0.1"},"remotePort":{"int":58335},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"e0c96387-467a-11e9-aeaa-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"127.0.0.1"},"localPort":{"int":54321},"remoteAddress":{"string":"127.0.0.1"},"remotePort":{"int":58335},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6551233f-dbe2-44c3-a4e2-13cbfffe8ad9","sequence":{"long":2272},"type":"EVENT_CONNECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e0c95f94-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","address":"127.0.0.1","port":"54321","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6e45151-3afe-4b9a-8b8d-f62cff57276e","sequence":{"long":2273},"type":"EVENT_ACCEPT","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02dc1a3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"e0c96387-467a-11e9-aeaa-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_accept"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"4","ppid":"1286","address":"127.0.0.1","port":"58335","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f376b5f9-d92f-4235-ae3e-fd440ae27aba","sequence":{"long":2274},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4a7e215d-fecb-7d56-8bfe-3c48a67db43b","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"870557ce-06cd-46e9-973d-cd190fd41b71","sequence":{"long":2275},"type":"EVENT_EXECUTE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"4a7e215d-fecb-7d56-8bfe-3c48a67db43b"},"predicateObjectPath":{"string":"/usr/bin/gzip"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582918273899564,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"gzip","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73ebee37-e274-4c78-b6b0-218399237383","sequence":{"long":2276},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2cce926-c97e-4d37-9690-bcc8681abfec","sequence":{"long":2277},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fa15bdc-90a3-41c9-b8dc-703d2a67e4d9","sequence":{"long":2278},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0405e312-fbe3-4714-aed2-9cd6531a107e","sequence":{"long":2279},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65179ca8-a4d8-4f24-a6c0-a6c9a4589816","sequence":{"long":2280},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebd83288-3945-464c-83f2-5d7271506ffc","sequence":{"long":2281},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f55a9f8-6b26-4cc6-8e8e-c00a1f57886d","sequence":{"long":2282},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10212a27-aea3-4c07-910e-a501dd0cae34","sequence":{"long":2283},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":{"string":"/lib/libz.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d848d5b-f7de-4dda-a5ae-cf9e3ed3b005","sequence":{"long":2284},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c353efe6-1137-41c6-a0e3-e8e6d0d5ebf1","sequence":{"long":2285},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac864476-cece-4a9f-a5b6-0151e5d44bb0","sequence":{"long":2286},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06f11387-9fe8-4fc4-914e-96eb093cb418","sequence":{"long":2287},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c11df0aa-bd95-4d1c-90df-f16c719d7d3c","sequence":{"long":2288},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2465792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22a30695-d8cd-4ba5-a6ee-dfe2d01443aa","sequence":{"long":2289},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2465792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3119ec1-365c-467e-9faf-824dc89d6e74","sequence":{"long":2290},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2535424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74f5dba3-28a6-43fd-813b-de927b3c31e6","sequence":{"long":2291},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2535424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0d352ee-2c95-4432-aa6d-d97a866221fa","sequence":{"long":2292},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ae7093f3-2081-df5b-8120-61c30bdf0c57","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8776a83-d65e-4eaa-b8ae-c78125bdaf61","sequence":{"long":2293},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":{"string":"/usr/lib/liblzma.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2015c117-54b1-4b39-93aa-3e037bbd2f24","sequence":{"long":2294},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"917d703c-e0b2-4485-ad8b-6e552f581198","sequence":{"long":2295},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6dcaab85-319c-4f49-b27d-10b257d1b36c","sequence":{"long":2296},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1b94b04-e982-418a-9fea-ed8028ccaa7b","sequence":{"long":2297},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"568f3659-27ec-4fba-8eb4-a038276ae354","sequence":{"long":2298},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ceed910c-90db-40b2-b5c8-3c48f9fbd9b8","sequence":{"long":2299},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d31949a-0407-446c-ab1c-8a5a1a228032","sequence":{"long":2300},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5a17023-5dd7-485c-850c-d40ef48acd9c","sequence":{"long":2301},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50c0af86-95d2-423f-851d-98287dbc02b4","sequence":{"long":2302},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f18526b4-6913-ba55-9369-356b45ba4751","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"508f7aae-7a4b-4407-bc7a-a11aefdd05a9","sequence":{"long":2303},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":{"string":"/usr/lib/libbz2.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65432457-d3b1-45e6-8124-1fafa344f3ab","sequence":{"long":2304},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37f79aa4-d1c1-445b-82c6-99fe4db74c64","sequence":{"long":2305},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85cf25e3-5bb7-466f-804c-f75e6617de43","sequence":{"long":2306},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b8038db-b2d9-49d0-9a8c-e3e8872ab86c","sequence":{"long":2307},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"734444bf-97f9-4ec7-9b07-f01004bfce7b","sequence":{"long":2308},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2732032},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d6935e8-c4b9-4388-a691-bf863885038c","sequence":{"long":2309},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918573865723,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":224757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0849fde-4a41-417e-ac04-7c6d5b696065","sequence":{"long":2310},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e24dd0c-1bd0-4019-a47b-bc5d561082de","sequence":{"long":2311},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"409","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20a2fc69-a65b-44db-b9f0-60d365eb930b","sequence":{"long":2312},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"410","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be1f8321-7046-4899-b93b-64b8982f415e","sequence":{"long":2313},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"411","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0e0e011-1060-40ee-ab15-9f289eb070f1","sequence":{"long":2314},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"412","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff0e6f65-a6d5-46d1-9367-71604b21b5ab","sequence":{"long":2315},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"409","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00143784-3ffb-46d9-96f5-66d30eab506d","sequence":{"long":2316},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"410","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15bce905-f235-4948-a1d3-1ea044798ca6","sequence":{"long":2317},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"411","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"552d7f19-49e8-4914-a88c-234934a7e667","sequence":{"long":2318},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"412","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f6aab26-5332-4716-8729-ea514b88d46e","sequence":{"long":2319},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919584302803,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":225933},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"09806a61-b72a-5859-aab7-43fff9583fdc","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b57805cf-467a-11e9-ae92-080027fc76ba","type":"SUBJECT_PROCESS","cid":1141,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9895e974-1313-4ea2-8e1e-4c1a056720f5","sequence":{"long":2320},"type":"EVENT_OPEN","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":{"string":"/etc/cron.d"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920014838623,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00e808"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86e515cb-1dad-457b-83cc-d7e46bb77889","sequence":{"long":2321},"type":"EVENT_CLOSE","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920014838623,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78189548-5978-4b7f-a9e0-c0234b4bfb54","sequence":{"long":2322},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":225933},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ada0b1cd-9897-4f47-b377-b354dac8e516","sequence":{"long":2324},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f65fb0a2-c307-43c5-b0e1-96f60bb6292d","sequence":{"long":2323},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92e3f9a6-8782-40c0-8add-24e5b7ee9fad","sequence":{"long":2326},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73f11951-f96a-4e81-9332-8ffb2e180f78","sequence":{"long":2325},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37d741ff-7cd0-4432-81f5-76b168d998fa","sequence":{"long":2328},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4781e7f-f5d8-46a9-9c60-73edf16b8454","sequence":{"long":2327},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe46d710-0a96-411c-ad61-5624048f7374","sequence":{"long":2330},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e46c685-0829-456a-adc7-6e2560185cc3","sequence":{"long":2329},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2add298d-8302-409a-a988-f2cb03960b4d","sequence":{"long":2332},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fb7f142-b5cc-4597-8a43-f2cd26e6fe76","sequence":{"long":2331},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9b3a2ac-3e14-4783-8c34-0e17c36dc412","sequence":{"long":2334},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcf7c25d-2654-482d-b5a4-65e29c8db65e","sequence":{"long":2333},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d79d1ac1-fcb9-41db-a33e-9f7c53de497d","sequence":{"long":2336},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d2325e2-fc41-466c-8d48-628ad7b0b5b0","sequence":{"long":2335},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9aee3f41-5a21-4416-b2fd-4407d6a3b74a","sequence":{"long":2338},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"223312b6-5233-4d2e-aeee-e2b1edca2735","sequence":{"long":2337},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc660f10-bc82-4246-9828-13b9a6266040","sequence":{"long":2340},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf3253b9-769c-444f-bbba-0aafdb0b39f6","sequence":{"long":2339},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd77e71d-c31e-4a80-8ac9-4f43c960da95","sequence":{"long":2341},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"703dfffd-8e4d-4733-b9d0-71a932320298","sequence":{"long":2342},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f3742c1-2c78-4af4-8dde-7a05b7b74295","sequence":{"long":2343},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70a03f96-6a10-4c6a-a8ae-0b88126e0c35","sequence":{"long":2344},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3589},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a6fc2bf-b6cf-44cc-ad0f-66bb9a2f2281","sequence":{"long":2345},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5317beb-dff8-4845-be66-a0df2dd2eee8","sequence":{"long":2346},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3642},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"886a78d8-471d-4633-8d74-a58467ecc17e","sequence":{"long":2347},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"689a850e-c79e-4ba1-88a0-eebaf5948aca","sequence":{"long":2348},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37ff94b9-f205-45ab-b8ab-6984ab5a245a","sequence":{"long":2349},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3961},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0a86db3-e065-4699-96b5-5846faa0e96b","sequence":{"long":2350},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4014},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50b9a0d3-5d6d-463b-b4cf-25555e7cac10","sequence":{"long":2351},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"110b4d39-b233-4aa4-9067-0920b7196a94","sequence":{"long":2352},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"334811b0-07cd-4a2b-ad5e-6b6971c410fb","sequence":{"long":2353},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85b6b8c4-035f-40d2-b935-7333d4f12707","sequence":{"long":2354},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3861},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee9c1160-d41a-4d9c-9af1-d41ed41e9286","sequence":{"long":2355},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3914},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91fca111-ffac-4320-8faf-4d294369cb85","sequence":{"long":2356},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b944a520-9519-46c6-99ef-bbfe9f67a51b","sequence":{"long":2357},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84779978-37ca-4054-9026-851a2b584642","sequence":{"long":2358},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9738be3-9cfc-4866-b788-6562f8c75a2f","sequence":{"long":2359},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4183},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c5315d9-1fb2-4339-83f2-39cd1341e3be","sequence":{"long":2360},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a94e70e5-18c9-4bb5-8d28-c0ef992687b5","sequence":{"long":2361},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b163046b-8190-41ef-847c-99a0b981e27c","sequence":{"long":2362},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cad01a8-6ff8-4c8c-af5f-4bfaca22582b","sequence":{"long":2363},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4589},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adda395f-c7cf-49b5-a51d-1fc65956480e","sequence":{"long":2364},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f341cab-3c20-4437-a0a1-65d2a0123f25","sequence":{"long":2365},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc78e429-4d21-43a6-a3fb-606a0d2b0250","sequence":{"long":2366},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb02bce7-8359-4d74-a00c-7245cf6fc69f","sequence":{"long":2367},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4294},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51141473-d37a-4307-9fa2-28425921e531","sequence":{"long":2368},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54f9bb4c-fac3-4bb3-a7a9-57db439badc7","sequence":{"long":2369},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"948e5abb-a711-4a93-9639-832b8a0dc725","sequence":{"long":2370},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2824059d-affc-43f9-945a-b25231fec869","sequence":{"long":2371},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4659},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9947adab-6588-482f-9fa4-cbf8b10d7e50","sequence":{"long":2372},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"974e5cdb-d6bc-4538-b5df-1e6c8d2fb76f","sequence":{"long":2373},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8df46f31-072f-4a53-bd9b-0f9e982037c6","sequence":{"long":2374},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920594048818,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":230095},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1ad4878-1ce9-4a21-81c8-e8eff8b6bf0b","sequence":{"long":2375},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582921604408901,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":230461},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36cb4e14-2265-4644-bda2-7cd366cda934","sequence":{"long":2376},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":230461},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5611833f-d9f5-491b-b813-8ecce02e1e1d","sequence":{"long":2378},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c230bee-4336-4db3-aa13-77825041bbe6","sequence":{"long":2377},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9459f839-4a27-4a29-aa52-b1d148dc74a2","sequence":{"long":2380},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38087913-a1b6-486f-87e4-8415551e3e17","sequence":{"long":2379},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff9e9e11-bd6b-4255-877f-7a0370238873","sequence":{"long":2382},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05078e42-cf26-416a-8eda-553c1782041e","sequence":{"long":2381},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b88804d-1886-4bbe-9283-d0dd6263fc3f","sequence":{"long":2383},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fb99078-911e-4a15-b8a3-7da30c723212","sequence":{"long":2384},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a2d9916-be8c-46c7-a2e6-32565c24d4db","sequence":{"long":2385},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"000c6188-6a71-41df-9407-5cfe5a59cb49","sequence":{"long":2386},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4158},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50c87a7d-a310-4691-8db1-9712c9272e1c","sequence":{"long":2387},"type":"EVENT_WRITE","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fd2ead8-9957-42fa-8a15-6b4b554ede3e","sequence":{"long":2388},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4211},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fcc08e9-d558-4934-9fe9-48bd1d665190","sequence":{"long":2389},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79208386-9be6-44b1-a411-7c11e7a95bd2","sequence":{"long":2390},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c161c55c-6706-46ac-9d3d-2f7b6a4d333e","sequence":{"long":2391},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":362},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22306b49-6447-4e1d-86bb-bdd10afa77f0","sequence":{"long":2392},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":415},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"640502f5-9d53-4828-b34b-e80e6c59f42c","sequence":{"long":2393},"type":"EVENT_WRITE","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b1efd42-b55b-4e31-9e81-fa00da3ccf89","sequence":{"long":2394},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f609505-0412-49e7-a4e8-e665a347b1cb","sequence":{"long":2395},"type":"EVENT_SENDTO","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"414","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d01141e-9e09-42c0-a5fc-9af51e1d16d0","sequence":{"long":2396},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"414","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b336f83e-e51a-4988-80da-5fa0197040fd","sequence":{"long":2397},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee86e9e4-f51f-4d24-9ce9-4f5ae655a0da","sequence":{"long":2398},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922134392999,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ecea6d1-6b5d-4fb0-aacd-6b49e9dcdebd","sequence":{"long":2399},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922134392999,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2eaad48b-9af1-4467-a23c-34643a3207bb","sequence":{"long":2400},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922134392999,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbc4c4c5-89a1-46af-a88b-9d814ac97bf6","sequence":{"long":2401},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922134392999,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b723f745-2c6d-49ad-8d74-6ab4a28e837a","sequence":{"long":2402},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dc90922-d99f-4eab-a6b4-3e3b1ffe8e5a","sequence":{"long":2403},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"415","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d207b62e-2bac-4e22-a8b2-84dcd55ee1be","sequence":{"long":2404},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"416","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"318f8ef9-582a-413d-b89e-5f0a4f031352","sequence":{"long":2405},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"417","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"170cd721-eeba-4bc3-8ca3-8bdb076079bc","sequence":{"long":2406},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"418","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06339607-d64b-4bbf-8013-05e48e3592de","sequence":{"long":2407},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"415","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8231883-84cc-46a2-98a1-e8d2a38c4991","sequence":{"long":2408},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"416","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad82b385-2e43-4afb-99c8-d25378d990dd","sequence":{"long":2409},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"417","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fa54c80-65db-40e5-b930-d31f452aff80","sequence":{"long":2410},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"418","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0355196c-d1b0-4225-ac02-f430ed7c6ab1","sequence":{"long":2411},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922614154307,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":233683},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4cfe1b4-ceba-40b3-942e-c5186391bb83","sequence":{"long":2412},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582923626871472,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":234048},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6eab50a7-48bb-4564-bce4-dd6ecfcc1700","sequence":{"long":2413},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":234048},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e23a5522-9e07-457f-a1fd-72b9c0d80cf3","sequence":{"long":2415},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1033c45b-ea78-4010-85fb-e49dffc87916","sequence":{"long":2414},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef404953-cfa7-4bc1-a76e-2987f1e1b716","sequence":{"long":2417},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3e6854c-2ef0-4f8b-9f63-acc73642be01","sequence":{"long":2416},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7b292dc-107a-4d5e-954f-989f666ed105","sequence":{"long":2419},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1036eff2-6211-4ec4-92b2-26b79de6218c","sequence":{"long":2418},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20e79164-c1f3-48c6-a656-24399930afd8","sequence":{"long":2420},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"528b450a-a5f6-403a-9676-b71e22f57a9b","sequence":{"long":2421},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1aede2f6-1d88-4c67-813e-afe389b33ff2","sequence":{"long":2422},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e48cbbaa-ac87-4af0-85d5-46db7b2c6742","sequence":{"long":2423},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3218},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77bf444b-0bbe-48a1-a407-71a1037d2b88","sequence":{"long":2424},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3271},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a5ab117-89b4-4f3a-8251-48038164b72f","sequence":{"long":2425},"type":"EVENT_WRITE","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b1d4b2e-f9b5-4844-9174-c7833aa315ac","sequence":{"long":2426},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"929d69f5-58a7-4668-b18e-ed5398a25b5d","sequence":{"long":2427},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"264a03fa-1399-42f2-9431-3ee29c4003d7","sequence":{"long":2428},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"943a3d28-4040-487f-a5e2-24829687e250","sequence":{"long":2429},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb10410f-ddd8-4adb-9cb5-5c911020d1be","sequence":{"long":2430},"type":"EVENT_WRITE","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac0d106b-73d1-4004-89f9-050f08423f8a","sequence":{"long":2431},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fd05aae-9fb5-4794-a273-82152affb683","sequence":{"long":2432},"type":"EVENT_SENDTO","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"419","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c229f67-2eff-49a5-8118-d0875b1689b1","sequence":{"long":2433},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"419","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89ecb29b-7d0d-4cbe-a5f6-2c39c3f898ae","sequence":{"long":2434},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a8c3c2b-2070-4c3c-977b-201d462dc8f3","sequence":{"long":2435},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d4b823c-d5ad-4be7-babc-ce375e99f86a","sequence":{"long":2436},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d52d947-1463-4a3b-80f9-4148b85e8ab8","sequence":{"long":2437},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2ceb698-c8d8-44e5-985f-d758a2734aec","sequence":{"long":2438},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f123abc4-e9a8-4aa0-a1a3-2ad0e2b58754","sequence":{"long":2439},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924634267384,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":236454},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be022b94-7d6a-42d8-89f1-0ea82e11e7b2","sequence":{"long":2440},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ecd0d85-7888-4d59-8ea4-1cc2d9a6e513","sequence":{"long":2441},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"420","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9109f63-a8c7-47ba-b06a-a4fa53a010eb","sequence":{"long":2442},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"421","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27b4996c-bdd7-45c9-9e82-b4862523b9b1","sequence":{"long":2443},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"422","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"088a9990-9afe-43ff-8213-3c0129789c31","sequence":{"long":2444},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"423","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5acfd150-63d0-4400-9b53-3cdbf4c3620d","sequence":{"long":2445},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"420","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22d44bdd-1927-4220-b03e-7a0d6ee97990","sequence":{"long":2446},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"421","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83f63611-2cb4-46f7-b879-6c51138b7b6d","sequence":{"long":2447},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"422","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b40747a-b521-4cc0-8856-d0c978390217","sequence":{"long":2448},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"423","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c38a71f-2948-499f-aefb-10e30e1b0f63","sequence":{"long":2449},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925644157193,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":237625},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e21abf17-f747-4c00-aac0-91b9b16d12de","sequence":{"long":2450},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":237625},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d6c314f-f1b4-4863-ac4a-dee7f2d495c0","sequence":{"long":2452},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9acc94b4-c6a0-44ef-9d10-67301ec74561","sequence":{"long":2451},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebb304ac-b8c2-46a1-b274-fb6ae2019a3d","sequence":{"long":2454},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d6c6eed-1b35-44ba-a4a1-260aa0f19abb","sequence":{"long":2453},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85768b04-0041-4bc2-9c39-cc8cfe21eb13","sequence":{"long":2456},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a207416d-4590-4fa5-8f26-d699fd620a73","sequence":{"long":2455},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d3c3251-df18-435a-9fb1-4f19ff8f1051","sequence":{"long":2457},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4686b13-4843-49d5-9946-831885728f05","sequence":{"long":2458},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67c847a0-17c6-4350-8e2c-d78be7c60d08","sequence":{"long":2459},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9de4fe25-453c-43b3-938c-f6bc5972144f","sequence":{"long":2460},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2402},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6415c8e-ca3c-442e-b378-77e0889e843c","sequence":{"long":2461},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2455},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8d67e3a-e25d-45a0-9901-814a71967c02","sequence":{"long":2462},"type":"EVENT_WRITE","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43010a90-d27b-4e79-bd37-0c53aee7d007","sequence":{"long":2463},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"015d0f25-66be-42e8-9e03-40026cd40abf","sequence":{"long":2464},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3795ae99-1845-421a-aec0-15feff660a05","sequence":{"long":2465},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1167},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3259b42d-91a3-44f4-94f3-e0c695eaec75","sequence":{"long":2466},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1220},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05964f74-2986-49cb-8774-2f54e706c36f","sequence":{"long":2467},"type":"EVENT_WRITE","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74ce4a26-7249-475c-9e6a-3fe9e5c43b3a","sequence":{"long":2468},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65e15855-6894-46ee-b2f6-276489458ef0","sequence":{"long":2469},"type":"EVENT_SENDTO","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"424","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53a36407-b62c-4373-b8bf-e062b26cc0c1","sequence":{"long":2470},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"424","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a66f6808-6c97-4241-9be2-03dc7c2f574b","sequence":{"long":2471},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe4b53e1-4028-41b8-9f7a-f475e25765af","sequence":{"long":2472},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22feb498-3678-42b4-b4fa-2787fa83557d","sequence":{"long":2473},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7bd5fbd-c930-4e75-ab7a-0dea9872bd7c","sequence":{"long":2474},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69a39b8a-4e8b-4748-9861-511424f245a7","sequence":{"long":2475},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e336dcd-094f-437b-ad3f-f5c6a9030153","sequence":{"long":2476},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926684053300,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":240035},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db6e0e91-fa47-47b0-8e21-367f14ad2ba5","sequence":{"long":2477},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582927713020504,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":240399},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"202885be-e8fa-45c8-968b-b1f5e885d7a2","sequence":{"long":2478},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":240399},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e641e918-1ac6-421c-87a9-0da4e3072b53","sequence":{"long":2480},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d90810c7-7a0a-4e55-9b03-4c0048fc0a5b","sequence":{"long":2479},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a4edf41-78aa-49bb-8439-668a0eb88b18","sequence":{"long":2482},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25aeb0d9-0b57-4acd-b97d-bccc82189f2f","sequence":{"long":2481},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8efabaf6-d507-4115-9b76-a493b4d51bed","sequence":{"long":2484},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3365b6b9-df63-4a5f-96ed-1d76d1d5c0aa","sequence":{"long":2483},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cfb525e-1aaf-4836-b668-10ec19f349e4","sequence":{"long":2485},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43308cd9-4940-47f0-9399-f1f124e4029a","sequence":{"long":2486},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"351871c2-2975-4554-96c6-beb49ffafc36","sequence":{"long":2487},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"257a3672-de82-4dfe-9649-b7bac46011c3","sequence":{"long":2488},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2406},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20e0edbc-34c0-4fe6-9ba7-c1619425f15d","sequence":{"long":2489},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2459},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"264a21a1-e437-402d-8d3d-f07227e91d00","sequence":{"long":2490},"type":"EVENT_WRITE","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7cfa3f7-7ab5-43f9-bed4-15bc7dafeee6","sequence":{"long":2491},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee4d22fb-9e84-4745-99f0-7d6ee5aace3d","sequence":{"long":2492},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18db5492-1fd1-43bb-8aeb-7b96d9a34e0e","sequence":{"long":2493},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8c0f6a6-ac34-4474-8d67-1fa77b5d97d4","sequence":{"long":2494},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ff6f383-ad5b-43d9-98b3-46849f1399ad","sequence":{"long":2495},"type":"EVENT_WRITE","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7da20802-9057-4301-b2d4-be8c485b3d52","sequence":{"long":2496},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27b2c068-a25a-41e6-857e-05e78edcb062","sequence":{"long":2497},"type":"EVENT_SENDTO","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"425","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4339a595-9021-4bb8-8888-4967bef1037a","sequence":{"long":2498},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"425","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faf80ef2-e4db-406a-9ecb-e6982f6b39f1","sequence":{"long":2499},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"677ffd19-8f43-45b3-b647-94febaf32cb6","sequence":{"long":2500},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928134166897,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0dffc12-1a4d-41a9-8c42-752eac60f3f5","sequence":{"long":2501},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928134166897,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9abc9c1-1d93-4ba2-868d-d3e9b930e254","sequence":{"long":2502},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928134166897,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"297c6b1c-b842-4a6f-a0a4-024240f94adf","sequence":{"long":2503},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928134166897,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cd08da2-1027-43c6-b849-e1afc398a5a2","sequence":{"long":2504},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33f20db0-4d4d-492f-bc0d-c667bc10232b","sequence":{"long":2505},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"426","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4be913d2-25a8-4d6b-b425-7bdb0504b181","sequence":{"long":2506},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"427","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3a35356-ea61-48cf-b4fc-ec9bbe3f583e","sequence":{"long":2507},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"428","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8b50154-e4ec-4bd1-af2d-72f7ac9adad6","sequence":{"long":2508},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"429","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fd3bd80-8206-4f9f-8d9c-480e64f05a05","sequence":{"long":2509},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"426","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0f06518-9b38-4895-a7b9-c749c0a4e6da","sequence":{"long":2510},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"427","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93c83981-5ea4-4202-a88e-75c78011010d","sequence":{"long":2511},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"428","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b471858d-d704-4d7a-a559-ed4e154723f5","sequence":{"long":2512},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"429","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecb2d93b-b651-46a5-8fec-7fa6f0e0d5e2","sequence":{"long":2513},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928774225532,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":243606},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88df91b3-1cae-403d-81d7-c1ff10b9bcca","sequence":{"long":2514},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582929784157083,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":243971},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01c885ef-47a7-4274-b10c-80507a7d744a","sequence":{"long":2515},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":243971},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d320c42e-e4a3-4cd6-b47f-325a010fe577","sequence":{"long":2517},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52063346-daa1-4b6f-95e6-f79f2832d79a","sequence":{"long":2516},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83a3e14e-64b8-4a95-9ab2-af3dd82502fa","sequence":{"long":2519},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d22180bb-e405-4f58-9747-2583f34017fe","sequence":{"long":2518},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb97b7fe-595b-4fa3-8261-113502c44c6a","sequence":{"long":2521},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34662620-9b43-4e28-9a1e-c0f19ce09f49","sequence":{"long":2520},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76d6949d-46da-4b8a-b42c-51a89c3aa2a6","sequence":{"long":2522},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"614446c7-5314-4143-884e-3279ef46f42d","sequence":{"long":2523},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a5c4f7a-6231-48a7-ada7-adce1a57e966","sequence":{"long":2524},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7303254-3897-4679-9d08-899c196f11fa","sequence":{"long":2525},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3203},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f24c60b-9f09-4f86-8f64-08a43e7ca366","sequence":{"long":2526},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3256},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d4f5bdf-ff9d-4a81-b252-5183f5490724","sequence":{"long":2527},"type":"EVENT_WRITE","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"501bc29b-1e84-4765-b565-bd44000fb6a6","sequence":{"long":2528},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"380a865d-af7c-4852-9073-9aa191e8c690","sequence":{"long":2529},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cfb9ae5-cf90-4d59-aedd-f9fedffb8730","sequence":{"long":2530},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1a7d38c-e517-4791-8a81-eb2d030d419d","sequence":{"long":2531},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73e48793-a199-46a1-a43a-5bad1298755e","sequence":{"long":2532},"type":"EVENT_WRITE","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69216432-c554-40af-8b3c-2130b143b71f","sequence":{"long":2533},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7561f43f-c76e-4150-90f7-2fa292fedc7c","sequence":{"long":2534},"type":"EVENT_SENDTO","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"430","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31b7e4fa-c751-49ce-bbc8-401057101286","sequence":{"long":2535},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"430","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89763697-75bf-49c4-90cb-4ab25e737578","sequence":{"long":2536},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c321898e-2fa1-46a8-bd18-07ab22fdfc95","sequence":{"long":2537},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930164402700,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ab23149-4c54-470f-9693-de64a1baf49c","sequence":{"long":2538},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930164402700,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f06eb75-5b2e-49cd-b46c-28074036572f","sequence":{"long":2539},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930164402700,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b1d87a7-7610-40cf-b5a0-b818ff0681ad","sequence":{"long":2540},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930164402700,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ba92a6e-9e94-4792-b958-e41ec3c3d92a","sequence":{"long":2541},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930834131946,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":246392},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"018eeea6-f22a-4d6c-8e01-4521290cd264","sequence":{"long":2542},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5eb1dca-e05f-48d5-a752-cf05be03db53","sequence":{"long":2543},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"431","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0021c57-00f4-46ba-88cc-a6a52faf7e54","sequence":{"long":2544},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"432","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba6af415-8f7c-46ee-937a-f58fd3cc6874","sequence":{"long":2545},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"433","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c64076c6-6705-478c-87a6-46f0466fa6f8","sequence":{"long":2546},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"434","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd0c7628-6cef-4dee-9f00-3c88c93339ef","sequence":{"long":2547},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"431","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ebbfe28-f343-4a47-bd43-3d162d027767","sequence":{"long":2548},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"432","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e183f2a6-6514-42e0-be2c-455d85dc8fd5","sequence":{"long":2549},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"433","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fc87d03-1a5f-4350-b26c-0bab24988428","sequence":{"long":2550},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"434","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b89e3987-c06b-46be-9c83-2421010bb93d","sequence":{"long":2551},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931874490959,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":247570},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f26d7a6-3ef8-4313-a445-3bda68b23b01","sequence":{"long":2552},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":247570},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e3f4dba-7230-4324-8976-814e651b7e87","sequence":{"long":2554},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"979aee57-7c71-49fc-92f4-4484eb4da2fc","sequence":{"long":2553},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a51a0ae-093b-4f78-8b41-9e806d33b071","sequence":{"long":2556},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8f8608e-453d-4ee0-b3ac-43b3140a6f2c","sequence":{"long":2555},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72a7035c-7448-4436-9312-bc324d1ab234","sequence":{"long":2558},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48ca3ff0-0f41-4ea4-af57-a62db69643fc","sequence":{"long":2557},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca349ec7-7900-4d65-86e1-c39a0133ae39","sequence":{"long":2559},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2db729f9-b5a9-4953-be1b-afa08890b5db","sequence":{"long":2560},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f65ee93-83fe-4ebb-bdef-bb8dca2b399c","sequence":{"long":2561},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a807047-7ae1-4008-8086-40e244875f2d","sequence":{"long":2562},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2417},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00c9f5f6-f307-4bfe-9d66-97417d9dfe86","sequence":{"long":2563},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2470},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f4210e2-8935-4673-aabb-dc5c31bdc5a9","sequence":{"long":2564},"type":"EVENT_WRITE","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"152702db-2cea-4504-b714-39ca4aca14a5","sequence":{"long":2565},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e68f5f03-61d0-4283-9289-0a3859377189","sequence":{"long":2566},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"198d45ce-7caa-4a84-88e4-4077e7d340d7","sequence":{"long":2567},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1174},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"def8ccdd-e0b0-4493-a993-b972ebe06ea0","sequence":{"long":2568},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1227},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6083ab71-8819-42f0-a2a3-671fbff20389","sequence":{"long":2569},"type":"EVENT_WRITE","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4c689dd-2ac0-4339-b8d2-7bd5f52d0683","sequence":{"long":2570},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ab92a6f-1e2f-49fd-a70b-39634559dd03","sequence":{"long":2571},"type":"EVENT_SENDTO","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"435","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55830e2d-099f-4acc-9613-ffac77464151","sequence":{"long":2572},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"435","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1763d44-35e3-4f2e-9aaa-40e8e9e50b3b","sequence":{"long":2573},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c75e387-f3d8-47e2-8e2f-cf5f9ada07e6","sequence":{"long":2574},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932134613200,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9e39285-939c-498d-b76f-71a9154bb901","sequence":{"long":2575},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932134613200,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df5a2a54-6078-47cf-b929-aec862f54214","sequence":{"long":2576},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932170453790,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"debc4e5d-2e28-4121-abc6-f3b6d67a76e1","sequence":{"long":2577},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932170453790,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c76db5e7-4b70-4d48-bfec-714ad0d06dc8","sequence":{"long":2578},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c96387-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e707ec51-12d6-4ffa-a749-8e67381986c5","sequence":{"long":2579},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c96387-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"289320ea-b490-430a-af16-0acba5470de3","sequence":{"long":2580},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02dc1a3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b242654-2d03-4d7b-a725-84078be51231","sequence":{"long":2581},"type":"EVENT_EXIT","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8796cf3-af3c-4f96-ba40-5d72367639b7","sequence":{"long":2582},"type":"EVENT_SIGNAL","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_kill"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"pid"},"runtimeDataType":null,"valueBytes":{"bytes":"0506"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"signum"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1286","arg_euid":"1003","arg_ruid":"1003","arg_egid":"1003","arg_rgid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33a61928-5188-4e6c-8c2c-d2ddb5fccf90","sequence":{"long":2583},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07ea87e4-80ea-422e-a829-0cebe94fd54e","sequence":{"long":2584},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f15c223c-d0bc-4334-ae50-aaf2a1fb7a67","sequence":{"long":2585},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":50},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ab647b8-abce-43ae-a806-5dee35dd741f","sequence":{"long":2586},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932967496110,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":250819},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb4ccd0e-5ee9-4fce-87d2-24174e8a0c10","sequence":{"long":2587},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582933969545910,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":251183},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a9f111c-6155-48cc-addc-57b2e661d4bf","sequence":{"long":2588},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":251183},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a890251c-46a0-4da9-91e6-9f7b7675551c","sequence":{"long":2590},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8a79e1d-3b90-4180-8565-55cdb05af881","sequence":{"long":2589},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25f1280b-86af-4dcc-ba42-c775cbc73c92","sequence":{"long":2592},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a27b373-c405-4c5e-a765-f444c0465499","sequence":{"long":2591},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98d43094-a870-44e2-805d-75116220b481","sequence":{"long":2594},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e892e41-4200-4f9f-9a99-7d7c201fdc6f","sequence":{"long":2593},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3bb7a2e-4122-47d0-9e72-1d99705dedea","sequence":{"long":2595},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"570860c8-466f-49cb-b6bc-1be08b41d0f8","sequence":{"long":2596},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfaf07db-bd74-486a-86fc-b36d39057058","sequence":{"long":2597},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec041080-1231-439f-80b1-7be61dab996c","sequence":{"long":2598},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3245},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33320ced-aa88-4055-bea2-73620b536ccf","sequence":{"long":2599},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3298},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74f24043-cda6-4a08-9592-a6bfce0ee03b","sequence":{"long":2600},"type":"EVENT_WRITE","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe92ab19-70f5-48ec-b66c-0aa74d443221","sequence":{"long":2601},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2a545e6-1544-435b-9104-c0b007d903be","sequence":{"long":2602},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83581579-094d-41b7-94cb-85b192a42514","sequence":{"long":2603},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1858dc20-89f4-4578-b573-c8161912942f","sequence":{"long":2604},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"716ad3bc-262d-44cb-b9b8-174324e5a18a","sequence":{"long":2605},"type":"EVENT_WRITE","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9420c5e1-95b1-4620-a8e3-ff4878bcd40d","sequence":{"long":2606},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e33bcc2b-6d36-4f83-b928-3cf2bc3b0a1a","sequence":{"long":2607},"type":"EVENT_SENDTO","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"436","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7441dc40-3169-4a31-9311-83723c1580bc","sequence":{"long":2608},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"436","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca2b49e2-a072-436c-bad9-e78b45457b55","sequence":{"long":2609},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0e3b8bf-9055-452e-8f40-c6d211d712f4","sequence":{"long":2610},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934133927192,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d362edc0-21c9-4cb5-bac0-02f9389caed9","sequence":{"long":2611},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934133927192,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c163d67d-b1c1-4fe4-9ba1-9b3fb5b5c101","sequence":{"long":2612},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934133927192,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8754fac9-61cc-4802-b5a1-ed5d7cb08fb6","sequence":{"long":2613},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934133927192,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dc7dbca-30ef-41d0-808c-daaec6a24c10","sequence":{"long":2614},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faf75ace-98de-418b-9fce-31d031c0116b","sequence":{"long":2615},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"437","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5005d497-a6a6-4d94-a9fa-f088f39084b6","sequence":{"long":2616},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"438","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"029ee590-4a2d-463f-8d99-be300d42794a","sequence":{"long":2617},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"439","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0803d3cb-5de7-4977-a73a-2a6d3baf08da","sequence":{"long":2618},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"440","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3f00d66-1e32-49a0-bf50-f4e9c8050bb9","sequence":{"long":2619},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"437","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cc6e6c1-d309-4afb-82db-7d19400e7bac","sequence":{"long":2620},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"438","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c497e80-ca21-44c4-9dfc-42ebf27203ca","sequence":{"long":2621},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"439","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fe21414-2771-4c80-ba60-baebc7132f2e","sequence":{"long":2622},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"440","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1232745-e65d-4922-a621-fe8bd963912c","sequence":{"long":2623},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582935025523231,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":254399},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d976305-8d36-47a0-abb0-db4aac7e87c5","sequence":{"long":2624},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936033905299,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":254762},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efb1b654-4a9c-4cb9-9d85-b6d5340c46d2","sequence":{"long":2625},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":254762},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b2667ec-8a3d-4154-a79d-ec796a996c9f","sequence":{"long":2627},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1abaa3af-42f5-46df-98b2-d3584d160e65","sequence":{"long":2626},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"749e075e-a4b6-440c-97d1-a5960c31eec3","sequence":{"long":2629},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35bb7386-0c48-41c0-a27c-4552546d4514","sequence":{"long":2628},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89eafd6a-11d2-4a67-915e-9b787c84e798","sequence":{"long":2631},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"615e14fb-1d56-4bdb-bbc7-9fdceb4dfc10","sequence":{"long":2630},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd5cfb69-366c-4546-94df-bb25c933d2b8","sequence":{"long":2632},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64daacad-5926-4f8e-913e-a3cc2a5bbd16","sequence":{"long":2633},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af302e15-c312-4123-9a64-aa160a8d8973","sequence":{"long":2634},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8379aca5-e6ba-48c6-8dc5-a53a8d585d76","sequence":{"long":2635},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3212},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"662b70b5-7e4d-4e45-8fe1-5e2c752625a2","sequence":{"long":2636},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3265},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d59beaa-e633-4c4d-abf9-4d4b5dd6dbef","sequence":{"long":2637},"type":"EVENT_WRITE","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac095d12-9815-4ac8-af35-79b886597800","sequence":{"long":2638},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4307eb40-0100-4e1c-9284-69577c7dc3e6","sequence":{"long":2639},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"119be307-84dc-4d4b-ae30-8aedbe93a3dc","sequence":{"long":2640},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79d656bf-6c18-47aa-8987-5f61c77874e0","sequence":{"long":2641},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"903b7597-7bdb-4276-8981-315d36f43ff3","sequence":{"long":2642},"type":"EVENT_WRITE","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa072cc6-58d6-4236-8c29-4702cf87b078","sequence":{"long":2643},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1dd2a20-9b37-4adc-ac0d-09c542ebaede","sequence":{"long":2644},"type":"EVENT_SENDTO","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"441","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b54e218-14aa-427c-9e6a-482b36315537","sequence":{"long":2645},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"441","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c68e7dee-aa02-44b6-8ecd-3376b9ed90b2","sequence":{"long":2646},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5628a20a-9351-4834-af78-1cda492267ab","sequence":{"long":2647},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16e9db20-e5a5-4c91-8b3c-8c273ab329f9","sequence":{"long":2648},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e2aa7ae-07ab-44bf-834a-0f1c42c8bbdf","sequence":{"long":2649},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936133880472,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4aa0465-e044-4d44-b8ce-464766ecfb79","sequence":{"long":2650},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936133880472,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88319c5c-08f2-42f2-8f26-5020085732ea","sequence":{"long":2651},"type":"EVENT_READ","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582951268242273,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b0502b9-02ab-47e2-aebd-35ca2b958c81","sequence":{"long":2652},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"c1555c7c-d38e-9a58-8ed3-e319889a0469"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582951268242273,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"222638b7-1070-403e-8b14-c77948c30499","sequence":{"long":2653},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582951268242273,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69663086-e92b-46d5-86c8-32d3add285cf","sequence":{"long":2654},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952124549143,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":257176},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc5b275a-bd8e-4f3c-8db9-2e18fbc72240","sequence":{"long":2656},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582952124549143,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51d2f78c-af96-4eee-9246-fd9f544076d3","sequence":{"long":2655},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952124549143,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79d9dd65-0fd9-4bc1-a6f2-42ad846b4225","sequence":{"long":2657},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952194028767,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":258177},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd208626-4b18-4b0f-9688-0007d91cce17","sequence":{"long":2658},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5e7b3d7-f6a4-4374-893b-ab9b0bad98ef","sequence":{"long":2659},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"463","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86ca47f4-9c20-4ebb-a242-4a9f150b237f","sequence":{"long":2660},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"464","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8be261d5-3986-40f6-af83-8f1498f6348b","sequence":{"long":2661},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"465","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4e08634-0184-495f-9c7e-40d6f763ae0c","sequence":{"long":2662},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"466","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94a00e09-a9c8-4406-aafd-2f27ccec23ff","sequence":{"long":2663},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"463","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51800534-2513-4a0a-b275-8764c94de170","sequence":{"long":2664},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"464","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"619f99d2-c948-49d3-a430-8dd127359b75","sequence":{"long":2665},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"465","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90b62b18-f69a-4f22-a81f-dc89b2521107","sequence":{"long":2666},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"466","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d67ddbc-8bf1-45b4-8077-d3b6ca138071","sequence":{"long":2667},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952664295450,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"597f4adc-c38d-4ca1-8f19-f0bd1044cf5d","sequence":{"long":2668},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952664295450,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a0db014-9bb2-406c-8973-42081996d7ff","sequence":{"long":2669},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952664295450,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a63b6fb-bc65-4441-b176-c09d13a88c1a","sequence":{"long":2670},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952664295450,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dad2296c-395f-4812-964d-bc9270e5784d","sequence":{"long":2671},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582953204141200,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":259659},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21045aa4-3815-4ef1-88a8-046c9327c8a8","sequence":{"long":2672},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582953588138412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86d64ede-21eb-48e0-84b6-0893a0fe1794","sequence":{"long":2673},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582953588138412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"616574f0-02eb-4394-b0a0-72aed8b2188a","sequence":{"long":2674},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582953588138412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7a473a5-965c-40a0-9069-c4b62b9dafd0","sequence":{"long":2675},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582953588138412,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":21},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c60bd6eb-25f2-488e-8b65-f02387a4d7d3","sequence":{"long":2676},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":259659},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6be138d5-1632-45c3-956e-fbed3a45a3e4","sequence":{"long":2678},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d71f4675-0b70-4f3d-b7b1-b36fe03f5256","sequence":{"long":2677},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9041a9c2-ac70-47b0-b468-941874f69f3f","sequence":{"long":2680},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59f7fb5e-d338-4747-8928-8dbc3a21dd8f","sequence":{"long":2679},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e74e3d21-3421-44f4-9f88-243ff3922b07","sequence":{"long":2682},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe8a258e-12b9-42bd-8b06-43bcf971d3b9","sequence":{"long":2681},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d1e0f2e-e76f-4800-b65e-4a3e2a26d4fe","sequence":{"long":2683},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecdb0cab-de7e-4d2e-b6e6-aca375253318","sequence":{"long":2684},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"676127d3-413f-4ef6-8e13-41dfd9335271","sequence":{"long":2685},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac4b7c95-0659-49b9-8883-ec767b87bc51","sequence":{"long":2686},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":997},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37157d78-31a0-475f-b3fe-e61d93f7825e","sequence":{"long":2687},"type":"EVENT_WRITE","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d149277f-1b4e-4de6-bbb5-c4ea1589da9b","sequence":{"long":2688},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1050},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccd22c96-a86b-4740-b1c5-9d93696e29b4","sequence":{"long":2689},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27020f33-a408-49a9-b7cb-c6b48e654323","sequence":{"long":2690},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29fa5ffe-8b05-41a5-8727-2bde81c7a0f1","sequence":{"long":2691},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1478},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98cc1da8-16ed-4747-9598-00040d6f1d62","sequence":{"long":2692},"type":"EVENT_WRITE","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a9e7c6d-f13e-4d9c-a1cb-b56072e5fcbf","sequence":{"long":2693},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1531},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c630ab7b-bbb3-4a67-9f5c-5c110d8c38c9","sequence":{"long":2694},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7577bc73-8ec1-4f45-9fb4-8558d4ec7898","sequence":{"long":2695},"type":"EVENT_SENDTO","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"467","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c238a487-edf4-4f8a-87f3-e5f6d229923a","sequence":{"long":2696},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"467","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e75ad905-3b38-48a8-819a-b8d76494cdff","sequence":{"long":2697},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1501426d-129a-4b62-a4bd-e1c0a51330c1","sequence":{"long":2698},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89c68972-dabb-44ff-ac1d-306df7b46212","sequence":{"long":2699},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35781204-978d-486b-9ffc-ae0c524323ff","sequence":{"long":2700},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954133942560,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e4b33d0-9553-4498-960b-bb30a9d8114f","sequence":{"long":2701},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954133942560,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9aa8021c-1d0c-4afb-b3ff-a868780e5f73","sequence":{"long":2702},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954219192362,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":262471},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a9e3f34-6006-4f4a-a39a-91c120a49f46","sequence":{"long":2703},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954506555215,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5efe5bb-d55f-4488-a492-379fd34a9d25","sequence":{"long":2704},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954506555215,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36bf6c23-2c2a-4310-98e6-12426173bb2e","sequence":{"long":2705},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954506555215,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"443805dc-9d9e-420e-9b9d-c219597de880","sequence":{"long":2706},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954506555215,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":51},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8cb6467-d1b0-40f8-93b7-d31ac03f7021","sequence":{"long":2707},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955224328560,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":263158},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4caef286-6d2f-4dcc-b0b9-d4f7500e9aa9","sequence":{"long":2708},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955413909882,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87ff779d-4903-47aa-95a6-cd60b95ed028","sequence":{"long":2709},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955413909882,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f02f3b6e-8b7e-4d8f-86a5-fd7d3d834a31","sequence":{"long":2710},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955413909882,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19470794-a0bc-4147-b145-98c7f274d6e1","sequence":{"long":2711},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955413909882,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":37},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca0d09db-e2ee-44b8-835d-61346c8104d9","sequence":{"long":2712},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d85ec44-ba0f-4f53-91be-e497766f35c6","sequence":{"long":2713},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"468","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66c51409-de59-41b8-9cdd-6e27fa26bb17","sequence":{"long":2714},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"469","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfa4cc34-775c-449d-9225-9efa0a9a4c4d","sequence":{"long":2715},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"470","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"654ce9d6-dd45-47b4-aee5-370a2a2388a1","sequence":{"long":2716},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"471","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33189f8f-2e6f-4ec9-918d-f77be105d801","sequence":{"long":2717},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"468","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5430bf82-d906-4921-b0fb-4ca2d2dfc171","sequence":{"long":2718},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"469","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dc4b19c-f047-4925-9fe5-75ef0e4fb6b1","sequence":{"long":2719},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"470","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9aaadfbe-eb66-4a7f-af41-0d77b28a8c63","sequence":{"long":2720},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"471","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"053480f7-04aa-4497-92d9-2e3c174f12ba","sequence":{"long":2721},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":263158},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f5279f5-4e74-46bb-a685-e2b680178176","sequence":{"long":2723},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e124db3e-a1e0-4cbd-8491-543ce13498fc","sequence":{"long":2722},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6dcb6e86-a8d2-4b14-9e62-93581f0e5199","sequence":{"long":2725},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51b1c30a-34a2-40aa-9ad4-28b53678af3e","sequence":{"long":2724},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"057373a1-f0bc-4150-bfea-a87585fd7601","sequence":{"long":2727},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5362bf2b-5489-4ec0-b9df-ec7a66dbb314","sequence":{"long":2726},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85e900f5-0815-4079-b3ad-96dc57a18881","sequence":{"long":2728},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7433ce3-02b5-405f-88fe-c873e2afe77b","sequence":{"long":2729},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bbee074-5194-4a1a-b73e-430610fe8803","sequence":{"long":2730},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a811a979-bbe2-4ca6-b2be-2e85f769526d","sequence":{"long":2731},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2808},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21abc627-a147-48aa-89d0-78ddf8bffc8c","sequence":{"long":2732},"type":"EVENT_WRITE","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f0557fa-d25a-41cf-8547-9c13745d13f7","sequence":{"long":2733},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2861},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe503e4a-0ba7-41f9-ac48-e8266fed61b7","sequence":{"long":2734},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea2e9f20-675a-4076-9e74-36b4e5448a5b","sequence":{"long":2735},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f2a789a-3641-4c68-91e9-b323c274e2dc","sequence":{"long":2736},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":683},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e159fc9-3f10-41aa-8a2f-ea5df1a3ecdf","sequence":{"long":2737},"type":"EVENT_WRITE","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18687783-6774-4492-9541-b49a79d39610","sequence":{"long":2738},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":736},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c51e8027-2193-4b20-9116-e6fd98273f3e","sequence":{"long":2739},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9099e0fe-25c4-4448-91f4-3a3642a768de","sequence":{"long":2740},"type":"EVENT_SENDTO","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"472","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05d71e5e-a461-4044-b805-7ee470ee1b70","sequence":{"long":2741},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"472","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9db479b8-4cfc-43f8-83f0-fa0ac733f4b6","sequence":{"long":2742},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bb6b07f-db2e-46b2-820a-9296f3f7b653","sequence":{"long":2743},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e198211-5a46-4214-b72d-1355d4b9dbb9","sequence":{"long":2744},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cc9859d-bce8-4a43-89f7-363b6ea6b257","sequence":{"long":2745},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f67863a-1ebe-4ec5-bffe-71d6834262e5","sequence":{"long":2746},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4a553b9-ae0e-4748-8b71-f9752be80378","sequence":{"long":2747},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956233997606,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":266753},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4919154-f46f-4f07-a37b-a90fcaa62b7b","sequence":{"long":2748},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956334770993,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9bb1adc-a01b-41f2-ae06-79d7037ee87a","sequence":{"long":2749},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956334770993,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02551ac9-a259-481d-a824-39438a094f6f","sequence":{"long":2750},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956334770993,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab1638be-ff67-4cca-8999-be3a9f1973af","sequence":{"long":2751},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956334770993,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdbd4daf-8a88-4515-9609-6a04049807b8","sequence":{"long":2752},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582957249417963,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":267436},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ade99f8c-0202-478b-932b-c25e47c807ff","sequence":{"long":2753},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":267436},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce4a0ea9-499d-4b90-b387-88e4985fc722","sequence":{"long":2755},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d03213f-5a6c-42d7-9f49-9fe2ad04bf56","sequence":{"long":2754},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2982a67-922e-42ef-9899-4725a26fe22c","sequence":{"long":2757},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c56072d4-c386-4caa-a721-7ef32f779060","sequence":{"long":2756},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"670ccadd-7125-4779-85f8-bde8373b49a3","sequence":{"long":2759},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa3d45b0-a3ca-4279-9c94-96c1a99eed79","sequence":{"long":2758},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77ee6a26-fd90-427b-9d78-b468b1052131","sequence":{"long":2760},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e1dfea0-62a6-4133-854c-0bd6467a21c9","sequence":{"long":2761},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b1200ac-5bbe-4760-a3d5-22d58a63d7c8","sequence":{"long":2762},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca22ea2c-53af-4429-bea8-9cb9e6bc8903","sequence":{"long":2763},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3591},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74528191-32a9-484a-b7fb-defd1f7b88cc","sequence":{"long":2764},"type":"EVENT_WRITE","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"393d29ad-c769-40c4-bc80-ab8408c49d39","sequence":{"long":2765},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3644},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acdf0c1b-d5b5-46a3-ac98-dda367e20eaf","sequence":{"long":2766},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3e77949-1133-4d58-944e-f363bd4f54a0","sequence":{"long":2767},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a089bc3-a099-49a8-863f-6f062adcae1f","sequence":{"long":2768},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":679},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d8a2ae9-1d94-49b2-a70d-00e20ba43fef","sequence":{"long":2769},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":732},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afd39bcb-a8bc-4c9a-acea-f4e3dfb3e097","sequence":{"long":2770},"type":"EVENT_WRITE","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9efca26-4cbe-4dd3-974f-8ab507051336","sequence":{"long":2771},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65b9f483-ab89-4f1f-ba44-418a17ab6784","sequence":{"long":2772},"type":"EVENT_SENDTO","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"473","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbc31779-cb2f-4e41-aa0f-852db89205c7","sequence":{"long":2773},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"473","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"429c0ec8-8612-4613-a078-696f01dded82","sequence":{"long":2774},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a566e4d-7c4e-4019-83d2-121bb01bc542","sequence":{"long":2775},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d51dc19f-802b-4644-8347-0172c8b3d7b0","sequence":{"long":2776},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c826a8c-02bf-4377-b36c-a3f4b0c77485","sequence":{"long":2777},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f8f09a5-b584-4b83-ad58-ffc41f1b3b64","sequence":{"long":2778},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d6f1c19-c443-4f0b-aa52-23ad8559e008","sequence":{"long":2779},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958254271204,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":269844},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c125070-31d0-447e-a59e-2eb9acbb219c","sequence":{"long":2780},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6c5da21-2758-4536-ad30-21f5aee3c4c6","sequence":{"long":2781},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"474","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6268cc72-189a-484d-b7b9-0ba9a64b91c6","sequence":{"long":2782},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"475","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf6376ef-37a4-4d3d-a44a-ef5a632d0d9c","sequence":{"long":2783},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"476","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d739cb1c-c1b8-46f1-a76c-43cfafe3fd3b","sequence":{"long":2784},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"477","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba220720-0300-4379-8ff4-e5769c5081a6","sequence":{"long":2785},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"474","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55c3ccd8-3d72-425a-a299-e053c6edade2","sequence":{"long":2786},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"475","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05d11f86-513d-4662-a682-2b95eeb3095e","sequence":{"long":2787},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"476","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05fdf1af-b954-4e3e-90b6-b498bccd34c3","sequence":{"long":2788},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"477","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"535b947e-c863-48d5-83b1-8822ac3b422d","sequence":{"long":2789},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959264447168,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":271023},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19b90ca4-4fea-4812-b1c4-34b9227b02cb","sequence":{"long":2790},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f42603e7-5591-4c26-a678-690814fe6473","sequence":{"long":2791},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"f98bb0e2-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1337,"parentSubject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582959814384316},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ae8bfe8-9d45-4610-8ec4-0287f5538032","sequence":{"long":2792},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1337","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1337","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"a518b5ee-67b5-d155-b567-a865b5d16327","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c68679c-d367-4d3e-88ce-ac2a35431b72","sequence":{"long":2793},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582959814384316,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/all.sh","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"549e5789-2f6c-48c0-af81-0d4fc5a0dc43","sequence":{"long":2794},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ef24712-8a81-4cbf-b651-1e66861adb41","sequence":{"long":2795},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8d38f75-8387-4f7b-8219-37221cf0ace5","sequence":{"long":2796},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa2dd68c-cb73-4f3e-8a9c-1dde840dbdf2","sequence":{"long":2797},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6665d071-2e98-429d-bb75-99bb45ec73fb","sequence":{"long":2798},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8e35544-beee-4dd7-8287-94cef46bedea","sequence":{"long":2799},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"736fde15-dacd-49b9-ae1a-16a846802052","sequence":{"long":2800},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"984bc9cf-2bd0-4a6c-ba39-9064a2c4caa9","sequence":{"long":2801},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2114a52d-abcc-4a00-b2d7-8fb8892cea0c","sequence":{"long":2802},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be12326b-155a-488b-bf9d-577ab691a944","sequence":{"long":2803},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c481127-7163-4676-be1c-23094aa61dc4","sequence":{"long":2804},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97c7a619-32f8-406d-a01f-bfccb3cf5c17","sequence":{"long":2805},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd37f402-259a-4030-b13d-7808e1e6fc4e","sequence":{"long":2806},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2813a43a-474a-4473-83ca-b9c200d8ff9c","sequence":{"long":2807},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"524dc411-84e6-43c8-b2e6-1d1c74fc86f5","sequence":{"long":2808},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"160a1f2a-8ac7-454e-a6f5-0d47fc48e682","sequence":{"long":2809},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ae39752-ca00-4d6c-b473-11fabab465e8","sequence":{"long":2810},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d0e2f2a-e4c3-422d-9aab-653fbd9cea22","sequence":{"long":2811},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"402b6f4b-8fe6-4da8-bf70-f6ed38ab9f30","sequence":{"long":2812},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fe3ee9a-0617-4ccf-8d3c-d24e095730e6","sequence":{"long":2813},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582959814384316,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/all.sh","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8b2143e-2b53-496c-bd86-6da808566b59","sequence":{"long":2814},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c29b643b-1fb6-44c7-b407-da35c6f55e65","sequence":{"long":2815},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"182d46bc-42f9-4f20-bad0-fdaf3329a261","sequence":{"long":2816},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e223165d-9b6e-49af-9b0c-6bbfe3c3ba51","sequence":{"long":2817},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80cf2280-2926-4ba6-80fa-d88fd6de0a0d","sequence":{"long":2818},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b666212-ac28-473f-a0d7-d55128ca7a4f","sequence":{"long":2819},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c624dc7-4bbb-4344-9579-8c790b7500d3","sequence":{"long":2820},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56e75019-e2e4-48f0-9306-c629bd1fe6e9","sequence":{"long":2821},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6540a36f-6dab-4a6d-a56d-d6e2d52e8fbd","sequence":{"long":2822},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7136c20c-0d2f-436e-ad5e-1e74b579296f","sequence":{"long":2823},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1585e9fc-1e30-4d37-9725-7852fffd9885","sequence":{"long":2824},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b79b4dd5-9f30-49ed-bdef-164fe478265f","sequence":{"long":2825},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d77e87c6-2dd0-4fef-bd60-3902fc6aa08e","sequence":{"long":2826},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"664bac30-7bb9-48fd-816b-e900b37740a7","sequence":{"long":2827},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6327c000-fb57-40b2-a932-23e461c4bce2","sequence":{"long":2828},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c175f7fe-3f44-4b15-8c85-5c362a1b9e10","sequence":{"long":2829},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18e7fcd1-752a-4aac-bb56-389dcdd70581","sequence":{"long":2830},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecb53d59-4831-42ba-ad34-46658b9502a6","sequence":{"long":2831},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ac5f276-897c-45e4-b7ec-e14f8658978d","sequence":{"long":2832},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a2f619b-3dcd-4c58-9237-d0d044c4aecb","sequence":{"long":2833},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed14277b-9281-448d-a10f-8d2c2f364622","sequence":{"long":2834},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ff47530-41da-4912-9d9c-0af399a20ebb","sequence":{"long":2835},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aebb88f7-95fa-4a9b-b9d8-6c83664a138e","sequence":{"long":2836},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91a97973-b611-4d93-880d-2369bc5ad736","sequence":{"long":2837},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b504971-d94b-40b6-90b4-1652c0d7aff1","sequence":{"long":2838},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9efe47d8-adc2-49e8-afc0-7e73f1fd8e6f","sequence":{"long":2839},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a708c03-08b9-4999-af7f-2ca1fb340777","sequence":{"long":2840},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15e1a007-b8b2-41c6-bf95-1e4981373b00","sequence":{"long":2841},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5c246b6-ba81-414c-98f8-899e606b1519","sequence":{"long":2842},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f05bb168-717c-4f74-9d18-8ffdbbb1269f","sequence":{"long":2843},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f647fd1-5812-46e0-8e11-305877f6c191","sequence":{"long":2844},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"050253b9-acef-44cc-a588-0c42f252c6d7","sequence":{"long":2845},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76073ee4-2a2e-4a27-aa50-a98c240b28d2","sequence":{"long":2846},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56629964-4c19-49e8-b832-30066fe620a0","sequence":{"long":2847},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"091077be-7fd6-4847-8d03-2ae41217d833","sequence":{"long":2848},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aafcc503-b9d4-46d4-93e3-cbcb44ddbf53","sequence":{"long":2849},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59fc0fb8-15c9-4bea-ba29-67fdd2136db4","sequence":{"long":2850},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af6ae5d0-f55a-4d60-bbc1-0660dd596622","sequence":{"long":2851},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b540a9c-a3ea-48dd-b916-c8a65d7aa5ce","sequence":{"long":2852},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c953179f-741c-49bd-a52a-fe4fd83a654b","sequence":{"long":2853},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44ddb4b7-263e-4a17-a86c-e6045504753c","sequence":{"long":2854},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fd41245-dd82-4de7-bdfd-256e690cab07","sequence":{"long":2855},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e26e5e3d-7d63-4a81-962a-7beb12ef845b","sequence":{"long":2856},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45334108-be37-479d-88a2-578e3e2649c7","sequence":{"long":2857},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f7a4cb1-abc1-4387-90f6-e61e25d245b4","sequence":{"long":2858},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7310f887-bfec-4070-ac15-2360d13dc64e","sequence":{"long":2859},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7d6d468-0a46-426e-a974-c96def3e9fab","sequence":{"long":2860},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"109f7952-c21d-47ae-8803-49c6e0c1915f","sequence":{"long":2861},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4881b10d-7bc3-44f3-be34-5a715b19dc70","sequence":{"long":2862},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbe4a562-d088-432e-99c5-42a62212bbe6","sequence":{"long":2863},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5291b7b1-30e6-4ee5-8ee0-9a8b493dc7cf","sequence":{"long":2864},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1f08210-4368-42ca-a449-4ce96a08c14d","sequence":{"long":2865},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c5cd558-c51f-41c2-8120-bc141d85a055","sequence":{"long":2866},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eaefb6ce-dae1-48b4-9281-c27a9f5313ca","sequence":{"long":2867},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ac31ffc-a26c-4437-b729-6aba09c24357","sequence":{"long":2868},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9290deba-f0c9-407c-9213-9f4b8bb17fe9","sequence":{"long":2869},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af8c87e6-37c1-48cd-aa69-3f62c20e6791","sequence":{"long":2870},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50ab103d-05f1-464b-be00-4d3eabbd5f90","sequence":{"long":2871},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74c926ce-9144-49c4-9911-48df170b10e8","sequence":{"long":2872},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b464009e-9b78-4aeb-b363-2147eccd326a","sequence":{"long":2873},"type":"EVENT_FCNTL","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53a1cbc2-0742-4389-af75-0db28674d43b","sequence":{"long":2874},"type":"EVENT_FCNTL","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbc0e855-a8ed-4a06-810f-8d372bda03a4","sequence":{"long":2875},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"929b991d-ab3b-4561-bc71-38264b2f38f5","sequence":{"long":2876},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1884},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06380dcd-0a2e-4477-a6ed-256ee467f6ed","sequence":{"long":2877},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":516},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"f98d2634-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1338,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582959814384316},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"934d0130-ae0a-443c-87f5-0d9deb364a10","sequence":{"long":2878},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"f98d2634-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1338","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1338","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80e91897-bf1a-42a1-b0aa-37207abd89bb","sequence":{"long":2879},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"f98d2634-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959824307368,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1007db4-9704-4d2e-8511-a26621a574b1","sequence":{"long":2880},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960284294164,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":279988},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"431a6cbd-f721-4030-9dbf-ae12a2f9c8e3","sequence":{"long":2881},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"f98d2634-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"f98d2634-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6c18122-9609-4ab0-8db2-39023d03f54f","sequence":{"long":2882},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4e0ae51-b1a1-4ea0-920b-9c7e4420c9c4","sequence":{"long":2883},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c99ac59d-20ce-4fc7-b50a-b81467056133","sequence":{"long":2884},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f261dbc1-2f6d-4a87-a71c-e301a6e80bec","sequence":{"long":2885},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"444c820c-582d-4b97-aa68-8453cdcc26ce","sequence":{"long":2886},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"162baef7-c989-441d-b3f7-ee5864f721c3","sequence":{"long":2887},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a492dfb6-766f-42b2-acbc-9faddc214291","sequence":{"long":2888},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":34},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fa277e30-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1339,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582960834837726},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca435491-c2f7-4806-b21c-7d2428195886","sequence":{"long":2889},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1339","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1339","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f2a692b-8024-4a88-b56b-fe06ea94faee","sequence":{"long":2890},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"56ecc1ae-1878-7b59-b818-6135097b8030","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64879d85-f5fd-4349-88a1-0cc7e29f3051","sequence":{"long":2891},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"56ecc1ae-1878-7b59-b818-6135097b8030"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./change_file_permissions"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582960834837726,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./change_file_permissions ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe38646a-8c4f-490f-801c-0ec4af145dcd","sequence":{"long":2892},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63f389ab-a665-42e1-9849-77a264ec092f","sequence":{"long":2893},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dd4af89-b196-44fb-9969-55787cb03160","sequence":{"long":2894},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"839dfb91-98f1-412c-9eb0-834b5bcdd0dc","sequence":{"long":2895},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccdc28e8-863f-4ac2-990f-e7b28c8a9ffc","sequence":{"long":2896},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28c43449-2903-42f4-ad33-be285d96d8ac","sequence":{"long":2897},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04fd647e-250a-40e7-8487-cfbb5a7c52b6","sequence":{"long":2898},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2507833-5f39-4124-b6c2-cc36027e6996","sequence":{"long":2899},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fc41a7e-54aa-4fc6-b4f7-5b8f6ad4ba86","sequence":{"long":2900},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6de25df0-1054-4dc4-ad22-b559fd9b4699","sequence":{"long":2901},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4868cd6-a155-4817-9197-26b93d5b1cc8","sequence":{"long":2902},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f660728-9378-45d3-a43e-11a903746473","sequence":{"long":2903},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09f37acb-47f3-4b4d-87c5-22b79439dc0e","sequence":{"long":2904},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a99974ce-9da1-4b09-a9c4-8d4e7c4949bd","sequence":{"long":2905},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a4b8870-8957-4979-bb05-b6a0cb8657d9","sequence":{"long":2906},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07c7b98f-75b6-44b7-b1db-b3b1b68384e2","sequence":{"long":2907},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8711b8c7-1f90-4d27-9d8e-631d65884701","sequence":{"long":2908},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8de37014-00cd-4675-aac2-bd76df6a1ceb","sequence":{"long":2909},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f1789c4-d2ec-469e-8ca2-98f1d8226bf5","sequence":{"long":2910},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be392b80-2e1b-4fe5-8658-3f3f1d858875","sequence":{"long":2911},"type":"EVENT_MODIFY_FILE_ATTRIBUTES","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/README.md"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_chmod"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c06da52a-bab1-4d0e-a40c-ae4466a66d99","sequence":{"long":2912},"type":"EVENT_MODIFY_FILE_ATTRIBUTES","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/README.md"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_chmod"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b7"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2ea1b01-68e3-460a-8339-beecdde16a78","sequence":{"long":2913},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebfe4a1a-be5b-43ef-af93-dad7db922afb","sequence":{"long":2914},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1368},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1a28a3f-e6fd-4e1e-926b-756a51cbab99","sequence":{"long":2915},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":532},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fa27d8bf-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1340,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582960834837726},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"196e7f6e-32eb-4aed-b571-9895dfc8790e","sequence":{"long":2916},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1340","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1340","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0de2a940-e64e-4769-b6a2-ea3b216e3f2b","sequence":{"long":2917},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c56bc989-87d2-4ef8-9993-febca02a7e35","sequence":{"long":2918},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582960834837726,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"634a508c-8d01-4ee7-9924-1e32e6a20dd2","sequence":{"long":2919},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2f1d313-8456-495c-80a5-436de58ff4f7","sequence":{"long":2920},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9d321ef-566c-48bc-9346-d50f7917bb10","sequence":{"long":2921},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3a7ed41-e960-4800-9588-3d0c18ca966a","sequence":{"long":2922},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab5a4047-e377-4c0a-bfe9-d6e4775e1e7b","sequence":{"long":2923},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef54413d-4470-4dfc-96c9-b91081e01ace","sequence":{"long":2924},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4249044a-d53e-4290-b365-e10cb82b0d71","sequence":{"long":2925},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"241d41a8-cf35-42a7-9f4b-a8211a64e9e7","sequence":{"long":2926},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961304776512,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":284908},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98681106-adaf-4f82-874a-9b9969b936fc","sequence":{"long":2927},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a4fd342-d240-4869-b2c6-0abddca81d17","sequence":{"long":2928},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"479","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2becbfd3-e840-4c3f-8f51-2bb4d85b5a6a","sequence":{"long":2929},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"480","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a748ef6-f67f-419f-92a6-b40bc777a10b","sequence":{"long":2930},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"481","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c27ebe30-b99f-44dc-b12f-224adf2c579e","sequence":{"long":2931},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"482","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30761efa-9279-496b-981d-c735cb634f52","sequence":{"long":2932},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"479","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b06bd01-1ebb-4557-a981-872792c4779e","sequence":{"long":2933},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"480","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ce7b251-c805-46c5-ba3f-514d4bd3f23b","sequence":{"long":2934},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"481","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab1bf980-02d2-43b6-a9dc-7a7f069cb662","sequence":{"long":2935},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"482","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cf50e18-2b7a-4ee7-889e-840041821913","sequence":{"long":2936},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b03fbc5f-abcc-4e67-99e4-23959a5de8d9","sequence":{"long":2937},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0122f26-b25c-4d04-b36b-44cc69822d26","sequence":{"long":2938},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fac2e97d-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1341,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582961854200266},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dfd2686-f1ba-413d-87f0-3c51a7a74aeb","sequence":{"long":2939},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1341","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1341","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41580699-15b9-44a1-b7fc-ef3f7daf5dc3","sequence":{"long":2940},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"0609dc59-7cb8-de5b-b87c-35aeebded4bf","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43bf1ee7-8afb-43fe-9623-2a96537b65c5","sequence":{"long":2941},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0609dc59-7cb8-de5b-b87c-35aeebded4bf"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_file"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582961854200266,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_file ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d431400e-5b2b-4745-8ed2-349bed69b584","sequence":{"long":2942},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38e28f0d-1637-4a55-b074-0e5034a713bf","sequence":{"long":2943},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e35854a6-f3f1-46bc-9d36-dccb008486fc","sequence":{"long":2944},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f275795d-cfdd-456f-87a6-a8291f1edce1","sequence":{"long":2945},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7668c731-6594-415a-8f38-83e269730039","sequence":{"long":2946},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d754796-2321-40da-80a7-3a4526387026","sequence":{"long":2947},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30eaa8fe-2cde-4da1-b22f-6bf2c54fd061","sequence":{"long":2948},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c82f7ba1-3ade-486d-9101-950dba4479c5","sequence":{"long":2949},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"513ac560-7e70-4de1-9deb-e50c4bf71378","sequence":{"long":2950},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"777e3705-433f-4915-b9bf-d60d0808fe42","sequence":{"long":2951},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dc2eb78-d615-43d4-adf7-92e505261b90","sequence":{"long":2952},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26998324-8076-40ea-a73b-06e6f16157b8","sequence":{"long":2953},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9d25f62-18b5-45f5-8554-d0a868062f14","sequence":{"long":2954},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75fbf90b-e6f8-4281-b13a-9f476b3c0d09","sequence":{"long":2955},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68abe46a-7c03-4376-ac33-10b3f30b1885","sequence":{"long":2956},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d45d4cde-a11e-4818-a6f2-f45b42cc5631","sequence":{"long":2957},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c0968f3-2c48-45eb-9122-9c0db381c235","sequence":{"long":2958},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8aed1354-08b0-4437-ae2b-22c63794c835","sequence":{"long":2959},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ced45b25-d4be-421d-8f16-ad7d4eab0b8c","sequence":{"long":2960},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98e0bb0a-5423-42e8-8d27-2252e8065df7","sequence":{"long":2961},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/README.md"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"745458ec-83ee-b052-ae83-2efb22b0cb41","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e736216-7035-4992-981f-54ef885abe8d","sequence":{"long":2962},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"745458ec-83ee-b052-ae83-2efb22b0cb41"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/out.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70efe47d-3410-4e3f-ad4d-77e57b9c562a","sequence":{"long":2963},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2498},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"784d7784-8825-469e-bde9-d1f112b44e71","sequence":{"long":2964},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0c47656-cf0a-422d-8218-bccd124e9f71","sequence":{"long":2965},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"581bba15-b90c-4e61-a676-1f4a51a0d2b5","sequence":{"long":2966},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17ea4f02-5abd-47b8-887f-1220ab3f28cc","sequence":{"long":2967},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da1b70dd-cd1a-4847-9657-736b5a0f8c2c","sequence":{"long":2968},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e42d181-1f78-4834-896d-f28e7685a021","sequence":{"long":2969},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"745458ec-83ee-b052-ae83-2efb22b0cb41"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2498},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b090e258-c23a-4db2-9874-ad4f8973a26d","sequence":{"long":2970},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"745458ec-83ee-b052-ae83-2efb22b0cb41"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9720921-c825-4b57-bd5c-25c1b91b4515","sequence":{"long":2971},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d14ec4ef-799e-4ce6-892d-cf818d6cdff7","sequence":{"long":2972},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1352},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73579158-c1a1-4104-b723-06d0499f8b72","sequence":{"long":2973},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":554},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fac368df-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1342,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582961854200266},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e585519-ad9c-4f79-92ec-bbaa01749d28","sequence":{"long":2974},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1342","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1342","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad459643-27aa-46d7-9c67-0202d2bf16cb","sequence":{"long":2975},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35e03c41-ebfd-4424-a014-25143f78d018","sequence":{"long":2976},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582961854200266,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b2939c3-5f2e-437f-bf32-8263ded850dd","sequence":{"long":2977},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73f70375-5d94-409b-b8f3-d7956ff62f52","sequence":{"long":2978},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c7e01a5-c139-45c7-b8bc-05dca71a4231","sequence":{"long":2979},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5f35885-4701-4982-847b-dd3aa865bced","sequence":{"long":2980},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5be3f59c-ae74-4de6-bb17-73fa1825d311","sequence":{"long":2981},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"534f8545-c123-49fa-9ca2-9fbdaa2593c3","sequence":{"long":2982},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6963c8ad-e8c5-4270-99e7-dc5c54bbf585","sequence":{"long":2983},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"299563f7-61d4-4709-bce6-92c52a8876ab","sequence":{"long":2984},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb54d2a5-ffa0-40f3-86dc-b70b266aa7bd","sequence":{"long":2985},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e91ef27-b206-48ab-a9d1-08cd37306c44","sequence":{"long":2986},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c9b4d2a-5a96-4200-87c2-bd19087376ce","sequence":{"long":2987},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7ba09af-dd2d-4600-b32e-05d389d6e602","sequence":{"long":2988},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4a1c048-6c57-4205-9f41-d95cdc335f06","sequence":{"long":2989},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ea7d830-b366-4371-afa8-a3c034713b66","sequence":{"long":2990},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45ea9e1d-4f83-4653-bb61-6bc88153a15b","sequence":{"long":2991},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"410bb0c7-26ab-4ecb-8933-5aa246ad85e1","sequence":{"long":2992},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79bdb800-9ee9-4d6d-976a-7e9af2be50d6","sequence":{"long":2993},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3664d16-e3bc-42b1-b72d-880358abfdec","sequence":{"long":2994},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"850a720d-0c9e-4f51-a0b0-f3dfb7b0d326","sequence":{"long":2995},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad883e7c-ebf7-4717-9bf5-65ab8247ae01","sequence":{"long":2996},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":284908},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7e4be27-5478-4510-91fa-2508fbb87ce6","sequence":{"long":2998},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d35d9a6b-c84a-4f35-8294-196ac39a7e15","sequence":{"long":2997},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4656cd1-0568-4360-a6f6-a5b749c18979","sequence":{"long":3000},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2f2d9db-b577-4802-bc99-bb911589155d","sequence":{"long":2999},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cd0f63a-8d17-4062-800d-39620c5f1dfd","sequence":{"long":3002},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e03e6e3-c51f-43ab-8a98-bffe83575659","sequence":{"long":3001},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9786fc2-9089-4174-b011-83f4a63a1de3","sequence":{"long":3004},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"224bd684-2ad9-4d32-9489-2da8121735b0","sequence":{"long":3003},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db864b34-541f-40ac-8f7a-bd4a032b6dd5","sequence":{"long":3005},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"320e8218-920c-47f4-b61d-1a91b1d0ba60","sequence":{"long":3006},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0898964e-67df-4523-945b-4aefce6d35c0","sequence":{"long":3007},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21014ef4-f612-4cec-8a3a-fe62c05508b1","sequence":{"long":3008},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4799},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8a8668b-8098-475e-b492-302448856562","sequence":{"long":3009},"type":"EVENT_WRITE","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b327b017-abc9-4441-92c6-88f4f839eda2","sequence":{"long":3010},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4852},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0360f789-3c23-482f-aa18-1cad9f0fe7d0","sequence":{"long":3011},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31f24ab2-a319-4e5b-89a5-d99005b8e61b","sequence":{"long":3012},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20953b87-5132-46fa-ad4d-e2fb02a7ea50","sequence":{"long":3013},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4158},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47ce46cc-b356-4d9d-a3d9-44781fa8c90f","sequence":{"long":3014},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4211},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbebbbad-4553-47bc-8738-579cfa1e3252","sequence":{"long":3015},"type":"EVENT_WRITE","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1399ad36-b97e-4630-992f-3c7a9954b13e","sequence":{"long":3016},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"431551af-cb86-447d-a3a0-393bd13dac3d","sequence":{"long":3017},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"009ad2f3-fd5b-484f-97be-15bc6c0ce73a","sequence":{"long":3018},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4916},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88b0a14e-e3f4-4b0b-9156-74e22a767d27","sequence":{"long":3019},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4969},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78c2630f-2917-4741-a824-5000b42c3f1f","sequence":{"long":3020},"type":"EVENT_WRITE","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d77a7dec-3b1e-41ee-85e7-dbf043773b1f","sequence":{"long":3021},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11eccb15-aa28-45ec-9028-c631a4f6c0c3","sequence":{"long":3022},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962316591861,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":294069},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bba5493d-7544-43ba-8eef-dc4060b6a6ff","sequence":{"long":3023},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8cc7dbf-57bf-4f59-a5d5-9c2e9fc0c877","sequence":{"long":3024},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d354e1e4-3085-4ac3-a6d3-d52768bd4fa0","sequence":{"long":3025},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fb5d222d-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1343,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582962864346154},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a168b60-11df-46fd-8559-fd312451903c","sequence":{"long":3026},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1343","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1343","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a2ce90a-24f5-4dd3-87b8-55a36405a0f4","sequence":{"long":3027},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"0f7e034a-4539-ea5b-b945-2560fbea7185","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3d62f58-1b7f-4a13-bcd0-ec01af22e507","sequence":{"long":3028},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0f7e034a-4539-ea5b-b945-2560fbea7185"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582962864346154,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_buf ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f95ce4f-37ee-4ca4-8561-5590a9a7e94c","sequence":{"long":3029},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c78c9f1-cdfc-4b6a-abf5-43e4014bc173","sequence":{"long":3030},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56789a13-1b63-48ee-b6a0-8913f49ee2b5","sequence":{"long":3031},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf30ade7-a1ed-43e5-b035-ea364ec3fc56","sequence":{"long":3032},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"319d296b-72d6-43d6-a1ee-66358bfa442e","sequence":{"long":3033},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b0fbadf-ac24-461b-8187-e76a073c0600","sequence":{"long":3034},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15a08f9f-2699-44a4-a264-30a42a07f7bd","sequence":{"long":3035},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a663982-ab4a-4b89-972f-fc33cb7d922f","sequence":{"long":3036},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45c6c180-9988-497c-9134-fc7cefc31372","sequence":{"long":3037},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7291b87d-81da-4817-9e8c-960b84b50820","sequence":{"long":3038},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"685c34af-f94f-4b03-8964-3f64ea4b6f37","sequence":{"long":3039},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"084d52f9-9d8b-49f0-a5b8-5f8e5afb9e73","sequence":{"long":3040},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba4a3d6e-99f4-4da9-94f5-a242b2552a3e","sequence":{"long":3041},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bde3718e-37be-4732-9f54-40baf220b0a1","sequence":{"long":3042},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd44c801-c1dc-4c5a-b452-de258f4474ce","sequence":{"long":3043},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e471d5f4-875a-41fd-aead-faf14f539ad0","sequence":{"long":3044},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e78e4c32-2ed6-462e-983d-5219dd94e287","sequence":{"long":3045},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5d51381-34de-4712-b13c-aede5b0e522c","sequence":{"long":3046},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c7d578a-b43e-4ed9-8555-c902d46ac6f9","sequence":{"long":3047},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4520e71-1e59-4430-9027-65cfa61479bf","sequence":{"long":3048},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"499d2bff-2407-40d7-9cf0-2760d03bbf57","sequence":{"long":3049},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1330},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e17ae07-a2b5-49e5-8afd-4f45ef3a6fd7","sequence":{"long":3050},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":588},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fb5d782c-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1344,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582962864346154},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0f21a0f-465f-4c40-85d4-e58bfa89eec2","sequence":{"long":3051},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1344","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1344","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d15a8428-d81c-49c0-81e9-8a8c63098ab2","sequence":{"long":3052},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8f679bc-2132-4340-96f3-21b97d2f31e6","sequence":{"long":3053},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582962864346154,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41f26984-7f23-42f2-992f-98d3014b82cb","sequence":{"long":3054},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24181324-74c0-4169-a608-663d38ec7792","sequence":{"long":3055},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22fb9e26-66a0-4ecb-ac9a-a7816cd5181e","sequence":{"long":3056},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b22f736-8333-4751-9c05-43fb51b71a71","sequence":{"long":3057},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e3811d8-4f9e-4d8a-89ea-5cc9734ba93a","sequence":{"long":3058},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6126693-94b9-4698-9209-f267e665156b","sequence":{"long":3059},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f10aa9b1-449d-4e5b-8f36-4837078690d9","sequence":{"long":3060},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bbb9679-1ff9-43e9-a76b-591088c66b0d","sequence":{"long":3061},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6853e9ad-0406-4926-a529-12d30c5f3817","sequence":{"long":3062},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be012b6c-d81f-429a-b42d-071f8ecf04d8","sequence":{"long":3063},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"318ee52a-477d-4f3d-9e7d-f7700e501d95","sequence":{"long":3064},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e553b4ce-1d39-4835-9adb-271fa687d82e","sequence":{"long":3065},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e77c524d-959d-4ac2-88ba-438b56c0193e","sequence":{"long":3066},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2882a68e-b0a7-47f1-ab76-c437b8a41995","sequence":{"long":3067},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3c00c0d-0e5c-482f-8ca0-e5ffaca57c0c","sequence":{"long":3068},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963333887767,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":298938},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f40d3ce7-9bd3-4a36-aa8d-36c0200dee05","sequence":{"long":3069},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bbba851-8065-4589-8bc5-f8b2552076f9","sequence":{"long":3070},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f3dfd9c-02bb-486a-8096-9d590b1cbc4a","sequence":{"long":3071},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":38},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fbf7369e-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1345,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582963874413329},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"177345be-c009-4216-bb2c-ea2fc6c9a614","sequence":{"long":3072},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1345","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1345","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c1c6cb7-7fd2-4cfc-afcc-028c8f353c2d","sequence":{"long":3073},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"8d001f29-417a-805e-ba41-cecf5e804caf","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79521c82-8102-48f1-9fc0-dc49d35303f1","sequence":{"long":3074},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"8d001f29-417a-805e-ba41-cecf5e804caf"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_stack_frame"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582963874413329,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_buf_stack_frame ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b293e3f-978b-4a42-965e-8503e3d96b0d","sequence":{"long":3075},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db743a2e-dc88-4188-ac17-db01c8cc45de","sequence":{"long":3076},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a1f5aa5-d30b-4989-8782-fc6d4a86d691","sequence":{"long":3077},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c878c2c9-7c82-42c2-bef9-3f0140af5ad0","sequence":{"long":3078},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6297e6a-be6b-4082-925a-05161ac290e6","sequence":{"long":3079},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"761a87b3-949c-4a62-a149-24686be96e28","sequence":{"long":3080},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f45825a5-daf5-4d82-ad04-43ae76386aa3","sequence":{"long":3081},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"952f8bdc-8a68-4bab-8905-c56a31e506a4","sequence":{"long":3082},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4890ea4d-e962-468b-86a3-7e939fdb2b44","sequence":{"long":3083},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8acfb9ba-6b05-4b0a-b922-7f0680a5e6ae","sequence":{"long":3084},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d3b7943-6d83-420c-afc8-2487c80c9ec6","sequence":{"long":3085},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"710e4540-0ffd-4824-8974-11f01461be4f","sequence":{"long":3086},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b415ce3b-65c5-4f3d-9292-2b9381e9d9e8","sequence":{"long":3087},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26616313-756a-48e4-9e2f-0619f77de4c1","sequence":{"long":3088},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37a8620d-ca57-4f56-8ac3-e4b4ef47841d","sequence":{"long":3089},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d01e41e2-34da-4d06-9679-f60118057551","sequence":{"long":3090},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbef5de0-c882-4b2d-9d47-618281c8d633","sequence":{"long":3091},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e80cc7c6-5897-4826-8004-fbdaea9f12f5","sequence":{"long":3092},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ac91dab-b5c3-46ad-84ff-036081e527ef","sequence":{"long":3093},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b16345d6-2815-4733-b19f-2d8a807bd9bd","sequence":{"long":3094},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"370ce23c-6726-4c08-bd38-eb6380bf3759","sequence":{"long":3095},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1296},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90383792-6b1f-4a65-9cf5-bfe3d0f7c354","sequence":{"long":3096},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":617},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fbf7b574-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1346,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582963874413329},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e176dfe6-ae87-4fb4-8650-8366b6973911","sequence":{"long":3097},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1346","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1346","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3120ff4-0774-464d-9765-41c8e89d505b","sequence":{"long":3098},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d376a17-e437-4148-94ac-796b0c769691","sequence":{"long":3099},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582963874413329,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3633098d-dae2-49cb-8dd9-650cfb163cbb","sequence":{"long":3100},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a9c3a65-4ada-40da-8d07-48f76fd7938b","sequence":{"long":3101},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83ca9622-205c-4ea6-a7fb-45fa8637c388","sequence":{"long":3102},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ae0f1c9-d84b-440b-a49a-d321dce9fc5f","sequence":{"long":3103},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cdacb9a-64f4-41ff-b0d8-0dfd1e7178ce","sequence":{"long":3104},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f83188d-9652-4eb1-a725-f7e40c76b8d6","sequence":{"long":3105},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19c1a444-c08d-4e42-ba63-058dfba7a3ed","sequence":{"long":3106},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f3191f2-c4ab-4980-b553-0c293dd4cd53","sequence":{"long":3107},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f336d0bc-8772-4aa2-8f32-3d0deae8dc94","sequence":{"long":3108},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7034970c-9d3d-40f1-b886-05b8e2f86dae","sequence":{"long":3109},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8993c5a-e2df-4c1d-bc8b-142a47dceec0","sequence":{"long":3110},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4ac4436-c038-4f06-9a63-65445b538595","sequence":{"long":3111},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ba547a4-5886-42d9-aace-f4ae00af7170","sequence":{"long":3112},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bac19b57-146a-4f4d-8d10-1aa9cd554f13","sequence":{"long":3113},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f152c1d-f26a-4b4c-b0c1-7b1122925e0d","sequence":{"long":3114},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964344364848,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":303803},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"903fe999-614e-45be-bc22-d022868506a2","sequence":{"long":3115},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7468691-346e-47fd-8347-2e9a8a273ce0","sequence":{"long":3116},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"485","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c36cdd4f-07f1-4d5e-a01c-bb0975547048","sequence":{"long":3117},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"486","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13b3b4c0-6d1e-4737-ba3e-43e060eb29bd","sequence":{"long":3118},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"487","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d553d9ce-9d59-4fad-a044-8188e383f4f6","sequence":{"long":3119},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"488","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0d9a88c-4104-4b71-9401-6a8ef486834f","sequence":{"long":3120},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"485","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b811457-90a9-4714-adb9-14a9179d4bf3","sequence":{"long":3121},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"486","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a0e5896-bd5e-4bac-bb4c-42fd87dd5bec","sequence":{"long":3122},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"487","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28b06cdd-50bf-4a81-8fe7-33a264b47cfd","sequence":{"long":3123},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"488","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b258afc7-222e-427f-8959-02228ad93874","sequence":{"long":3124},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34f42ee9-6f69-40aa-a38b-a098df75fe9a","sequence":{"long":3125},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8442793-3911-4eed-a3b5-6ece46d30545","sequence":{"long":3126},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fc92c880-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1347,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582964894021958},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a21be7e8-314a-4cd5-9c77-bfb91d214eaa","sequence":{"long":3127},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1347","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1347","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fddf48f-df1f-4833-9089-b81d386720e5","sequence":{"long":3128},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"656c7084-7a51-2d53-917a-60f4832de58f","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13df54c8-2680-4be1-8064-9c4c94ef517c","sequence":{"long":3129},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"656c7084-7a51-2d53-917a-60f4832de58f"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_string"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582964894021958,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_buf_string ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd8ebd4a-beff-4fae-889f-22c3c2eb7a43","sequence":{"long":3130},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce4e0664-481a-48b4-a3f4-6c99471cfd13","sequence":{"long":3131},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec34123e-aabd-4a83-abf3-f9fca9a3133b","sequence":{"long":3132},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43d391bd-4805-4dad-a7fa-e58039152685","sequence":{"long":3133},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6ecd61f-a64c-4e8d-b825-c1f8a7ca178b","sequence":{"long":3134},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d123463c-2f30-4df8-bb69-4ec2022babde","sequence":{"long":3135},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec917fbc-770e-45b0-8b8e-f2b0ae3032df","sequence":{"long":3136},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"655dc547-463b-4b54-b2d0-91eff1c39c81","sequence":{"long":3137},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ec2f019-2eeb-4220-8f1d-da58bf0e8f44","sequence":{"long":3138},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e67e76b-7d14-48e0-bcef-be3b0d5aa8bb","sequence":{"long":3139},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72967104-3213-40a7-9e37-3e2f578571d3","sequence":{"long":3140},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"037afbc5-dd94-4c86-b2b4-f4a1a9514e11","sequence":{"long":3141},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de9d4e4b-641a-4be8-80ac-5783bfba73f8","sequence":{"long":3142},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55eafba6-455b-4926-97f6-08510c13d0ff","sequence":{"long":3143},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6957bbab-524e-4900-a682-43e5c1b6ddd1","sequence":{"long":3144},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"452e24f4-68d4-49d0-92ba-6af0f50ab3df","sequence":{"long":3145},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c54e0d3f-cb3a-419c-9dcb-9c4c0205c373","sequence":{"long":3146},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4687c99-6ff2-4f84-b46d-11017b4d0545","sequence":{"long":3147},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"131eb0e8-05a6-48a1-8bc6-9c9e30a8ae3e","sequence":{"long":3148},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd86c25c-f106-44bd-9445-a771b58508d3","sequence":{"long":3149},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc20484e-8ec9-4fe5-b86b-b0dad38475bb","sequence":{"long":3150},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1895ac5c-6d5d-4910-a1ff-250b40af8b80","sequence":{"long":3151},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1267},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3877ec6-0ecb-4b5f-b70c-3a5bbe326d37","sequence":{"long":3152},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":644},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fc932cb1-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1348,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582964894021958},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29062ebc-4788-4d0d-aea7-3cbfd84d5cdd","sequence":{"long":3153},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1348","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1348","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1018568d-bf98-4591-b56c-8d833c6efe80","sequence":{"long":3154},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8935131-18b3-45a3-ad07-3306bb4f1def","sequence":{"long":3155},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582964894021958,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29c19af3-1e18-43bb-a54d-8df39699dac1","sequence":{"long":3156},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b405342-9861-40fc-bc53-a0b40887c3d6","sequence":{"long":3157},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b0b32cb-a337-4964-bed3-dbcf079805a9","sequence":{"long":3158},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"352936d4-3c05-4f19-bb60-22c59e232a40","sequence":{"long":3159},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e1e4142-35a1-4c64-885c-d00fe686dec8","sequence":{"long":3160},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965354116724,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":308830},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6e79033-ce3a-4c4c-8e4a-5ba3f1215b36","sequence":{"long":3161},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c649efe-6e18-4935-b691-0b1c481bd8ff","sequence":{"long":3162},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91774b76-1ef3-40f6-b510-496c1832018d","sequence":{"long":3163},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":31},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1349,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582965904301107},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3621a493-6b55-4edd-acf0-52cea89b5590","sequence":{"long":3164},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1349","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1349","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72825886-9584-4af3-bc2f-35b387ea53b6","sequence":{"long":3165},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"a40cfc78-90a1-075c-a190-f4d7ac07bd69","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1564624-0e4a-466a-92a4-ae576460b327","sequence":{"long":3166},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a40cfc78-90a1-075c-a190-f4d7ac07bd69"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_heap_buf"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582965904301107,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_heap_buf ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"298a1ae4-4dee-438c-bd31-48e86b759bdd","sequence":{"long":3167},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b7c445d-7d26-4b11-bfb7-8235f3eef2a6","sequence":{"long":3168},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81066ebe-e53f-4c22-947e-fb5ec4f84bad","sequence":{"long":3169},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec5d09ba-dc85-4bbd-bd2a-221a7b7d224f","sequence":{"long":3170},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a93acb33-9e50-4713-b0ff-7f87297f123f","sequence":{"long":3171},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46483bf6-fb9b-4b7a-8998-c7af7b8f737a","sequence":{"long":3172},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af43b596-9b5b-4aca-b22d-b526f5bf0081","sequence":{"long":3173},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d31085e4-8b05-4a93-871b-1003ee8f2250","sequence":{"long":3174},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d86fd061-4326-411e-9864-47aeac766ffe","sequence":{"long":3175},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a7d870a-9d2c-43e6-87f5-0e7fe30f3961","sequence":{"long":3176},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fa564bd-3ef9-44ea-be0d-6b9d5e8b911c","sequence":{"long":3177},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0202a185-8847-477e-81d4-a518c34109d9","sequence":{"long":3178},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a21cf05-fd00-47c0-a3f4-02e14fba81fc","sequence":{"long":3179},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e3993bb-c7a1-4432-9d41-13628fad64ea","sequence":{"long":3180},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fff4ea9a-a1a6-4689-b7ee-e419907f8319","sequence":{"long":3181},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2278833a-49b3-4701-8f75-23cb29aad621","sequence":{"long":3182},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5f5b0f4-2e57-4563-ae57-2431ce3ceec1","sequence":{"long":3183},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03b44d22-902d-4b4b-a1fa-e2f2e53bb629","sequence":{"long":3184},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a5ca601-7422-4c53-9f00-e2e4aaed1ca7","sequence":{"long":3185},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7866f294-224b-4213-a91f-8ea4c088b4b3","sequence":{"long":3186},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"743d4bfe-fa24-461c-8820-6a932f35543a","sequence":{"long":3187},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1240},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42b1e2cd-c207-453d-ace7-f187ae26a071","sequence":{"long":3188},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":663},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1350,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582965904301107},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8ff256d-759f-4190-9318-341d1c423997","sequence":{"long":3189},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1350","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1350","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12db2a2e-7f54-4dc4-ad91-f225c56cbfcf","sequence":{"long":3190},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd26796f-ae2d-477f-9702-34169d1adb3b","sequence":{"long":3191},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582965904301107,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94fa95d5-8b35-47b7-ad8e-c906dede169d","sequence":{"long":3192},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c3b75d8-1ee1-417b-9cce-c9330affa063","sequence":{"long":3193},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1405c9a1-3019-45fc-bd1f-3421588ca8b4","sequence":{"long":3194},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa7dcba1-06e3-4b1f-80bc-565340140ee0","sequence":{"long":3195},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59d60a53-a7d9-41c6-9fb7-681fcd411cac","sequence":{"long":3196},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3dd02a94-7614-41e1-940b-5f16b6e4f90e","sequence":{"long":3197},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d8316f8-dda3-47b2-a1b6-79701a3d8a2e","sequence":{"long":3198},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b97a1c73-3ad9-4dc3-81fd-9cd34657a194","sequence":{"long":3199},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be998de2-75ad-4358-9a46-d8771ca322c9","sequence":{"long":3200},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec2d6630-d1ca-4b55-a55d-a06eade56cd9","sequence":{"long":3201},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87694e21-fcad-4b02-abc2-f86a029ab059","sequence":{"long":3202},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c504bd89-c158-4cc3-88b1-8c06dde1b863","sequence":{"long":3203},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23e6590c-fd5e-40d3-a041-f79276700db2","sequence":{"long":3204},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37bef9c5-d076-4cef-ac63-56065995fd27","sequence":{"long":3205},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffd6e50d-ab00-4351-9d79-668b5aa69d72","sequence":{"long":3206},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966373962760,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":313695},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d1b48e0-baef-4b97-aa2e-ee44a2379055","sequence":{"long":3207},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5159909e-1fb0-470a-9c1d-672c4720c9f6","sequence":{"long":3208},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9ca4235-b371-4ac5-a693-b90d6192d806","sequence":{"long":3209},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":23},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fdc88672-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1351,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582966924213856},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4223a25-65ba-435d-8f97-febf1e583fbb","sequence":{"long":3210},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1351","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1351","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"956da72d-401d-4c00-a013-60d93081bbc9","sequence":{"long":3211},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"1bca75f7-71d4-1553-9471-f02cd31597be","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c748b506-c940-4c9d-9a96-e12b2de1515f","sequence":{"long":3212},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"1bca75f7-71d4-1553-9471-f02cd31597be"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./fork_process"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582966924213856,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./fork_process ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd2f8318-a208-4564-8172-3fdf8ee244c0","sequence":{"long":3213},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c890411-6272-4bca-a194-608d22bcda06","sequence":{"long":3214},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"175c6efa-8a25-42fc-815a-3257183a2475","sequence":{"long":3215},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c913af15-8082-4092-ba4e-11e390e0c145","sequence":{"long":3216},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a64a0b9f-cbbd-40b9-9de6-745c8311f473","sequence":{"long":3217},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"537db34b-0a1d-4dcf-a2dc-85f6aaf3e692","sequence":{"long":3218},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0160daa-fc9c-4eef-b433-21e31a31f39f","sequence":{"long":3219},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7910158d-6c05-4169-8874-f34cee3c2cce","sequence":{"long":3220},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9727c523-3e8e-41b9-ab58-18294dcd73d7","sequence":{"long":3221},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a954a1c-9570-435a-909d-d2ee5944c4c1","sequence":{"long":3222},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c56e06ff-bc41-4dc5-b426-7cf0e713d67e","sequence":{"long":3223},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"530158e0-8c2c-48a8-9b68-ee1399920d7c","sequence":{"long":3224},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6caf92d-901f-4541-9052-bae03c6aed6b","sequence":{"long":3225},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4a605e4-1a19-4018-8514-8649f61553f9","sequence":{"long":3226},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abbda06d-6783-4bec-8375-32975c3b6266","sequence":{"long":3227},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ef68231-5183-4190-85dc-0327a3776cca","sequence":{"long":3228},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26eb8162-eca5-4940-ab34-1b2d7760a962","sequence":{"long":3229},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2042735f-18d4-4ac0-b9dc-0750cc24bdea","sequence":{"long":3230},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2b36908-9829-4b54-9860-54f7b170386a","sequence":{"long":3231},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fdc8d004-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1352,"parentSubject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582966924213856},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2652b9f-b3f0-4023-abde-d92d814b51b0","sequence":{"long":3232},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc8d004-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1352","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1352","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d3a08cb-19e0-4963-8766-85cf2696e4ab","sequence":{"long":3233},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7bdd68d-93e2-4f5f-acaf-51ca42fcad13","sequence":{"long":3234},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bb39e6d-d11b-4fff-974a-917eb2f16ac5","sequence":{"long":3235},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"fdc8d004-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b38472e-bc27-4645-a1a8-48aea3cc5d6c","sequence":{"long":3236},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1221},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c341eb5-312e-4615-8b71-053b0ccf77d7","sequence":{"long":3237},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":677},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fdc941e4-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1353,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582966924213856},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"baa7747d-dab9-4a40-91f0-f6a207f18dd4","sequence":{"long":3238},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1353","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1353","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"931a2083-7457-475a-b0c9-d9480c312a04","sequence":{"long":3239},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"fdc8d004-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc8d004-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e9101f4-eae5-4b75-97d0-49e4d64e138c","sequence":{"long":3240},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa276e79-9f1b-428b-beb8-28ac541b217f","sequence":{"long":3241},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582966924213856,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db3e3bb0-bdd8-47b6-bb78-119f68c9cc30","sequence":{"long":3242},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf43791b-b0ae-4241-aa35-3a1cc7643eae","sequence":{"long":3243},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01996fb9-200d-4d5f-939d-7f1d5c4075aa","sequence":{"long":3244},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"959d315c-f45a-467f-9e84-7adf0b3966a9","sequence":{"long":3245},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac531758-8324-41bc-9722-eadf34d0fcad","sequence":{"long":3246},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52422484-27e9-45e6-8e39-3d3fb0f2b6ea","sequence":{"long":3247},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9a15c4b-b55b-47dc-9c26-4926855a5196","sequence":{"long":3248},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"853cd9e5-6772-4f40-bb5c-b2360a06b844","sequence":{"long":3249},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dab4e5b-12c8-4812-960b-0d903e7bc409","sequence":{"long":3250},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1646f45d-dc70-4eb6-b0c9-81c2ee9f68ca","sequence":{"long":3251},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"feaaa217-9e4c-4b94-9961-86af2da7bc99","sequence":{"long":3252},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967394080897,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":318788},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09068930-4a90-4a6b-9930-6a4f0c4b9270","sequence":{"long":3253},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d90d1959-88c9-4aec-afc5-fa443c3aca5f","sequence":{"long":3254},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"490","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8a7ebc6-5da4-4ec8-8344-d7c7d10d8564","sequence":{"long":3255},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"491","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96c8a20c-ba99-4c03-b19e-3296049a9dd8","sequence":{"long":3256},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"492","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ef3e24a-f7eb-4ae0-9476-1cb94dd17302","sequence":{"long":3257},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"493","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21fbadba-bd57-417d-ac47-0c10db2ce868","sequence":{"long":3258},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"490","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67ab72d0-256c-4955-96e1-25871508b694","sequence":{"long":3259},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"491","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f229aa99-a343-4fd4-b0b3-86016d6cbf09","sequence":{"long":3260},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"492","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0974beb-559f-4c94-a08e-ffd7290436fc","sequence":{"long":3261},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"493","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52d64102-1ae5-4c76-9d6a-68af31d73d58","sequence":{"long":3262},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28443df7-8966-4f54-99aa-ac3cf1f332cc","sequence":{"long":3263},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e59a82f-0f88-4f3f-ac4f-f05ff66251db","sequence":{"long":3264},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":18},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fe646b69-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1354,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582967944522023},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"789dd70f-9ec9-43ae-8e3e-30a2d4affd03","sequence":{"long":3265},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1354","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1354","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1598fee6-27ec-4b35-a01e-aec1a32e79fd","sequence":{"long":3266},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"2e1f69d8-d3e4-2950-a4d3-829bb0298789","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db1fbc3d-091c-40f6-94ad-3161de7a9096","sequence":{"long":3267},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2e1f69d8-d3e4-2950-a4d3-829bb0298789"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./listdir"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582967944522023,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./listdir ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f04829dd-bace-4464-bbf3-a722323b76d4","sequence":{"long":3268},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22c95925-4325-4d16-9902-8aa7a602efed","sequence":{"long":3269},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"670242fb-03d3-4076-b797-a01ef15579cb","sequence":{"long":3270},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6dac8c1e-1d31-48b7-8068-bcb13ca03926","sequence":{"long":3271},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f017ad76-f97d-45f5-b05e-12bee3707f7f","sequence":{"long":3272},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"205e5e16-4b11-4cc5-a0b3-67cc322aa5c2","sequence":{"long":3273},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8d31e36-ee01-4707-a360-e9482bb0ddde","sequence":{"long":3274},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0c6d173-316b-4ade-98e0-e520244bcfbc","sequence":{"long":3275},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3465b58-6f1d-406f-9060-60cd9d7919e5","sequence":{"long":3276},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68a8f804-711a-4301-93ed-c8b6d25d4a28","sequence":{"long":3277},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80a91ac0-1b7c-4aac-823b-5f83a537f3fe","sequence":{"long":3278},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a27767a8-b5fd-4cf8-9254-00af094bfeb3","sequence":{"long":3279},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"337d8517-6337-461c-883d-192639b2b025","sequence":{"long":3280},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d56a739-e92b-4503-86b2-07ed9d44e8af","sequence":{"long":3281},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c85372da-639a-45f4-b456-e83e666ccd87","sequence":{"long":3282},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f62cf3ad-e09c-4874-a611-673d9370907a","sequence":{"long":3283},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efdf84de-b0ad-463c-adba-04088c470b26","sequence":{"long":3284},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fff9d24f-4590-4af9-ba0b-5b4342be51d7","sequence":{"long":3285},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e504f591-1697-481f-ab3a-95ecdbed5e42","sequence":{"long":3286},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"974fc47b-12e0-4300-9296-85927c386f69","sequence":{"long":3287},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00eb50"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63a7b339-90b2-46a0-beb0-d43090f6044f","sequence":{"long":3288},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"134400a9-8d20-49de-b892-d822f336345a","sequence":{"long":3289},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b79b355-da2c-4c93-81eb-faf853de4585","sequence":{"long":3290},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1a3e3a5-86fc-4259-a78e-5575f010fea5","sequence":{"long":3291},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad9f20f0-f0a5-42ce-a4b6-acddf6e4c086","sequence":{"long":3292},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":9},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e70358b0-da6e-45b7-98b1-923816a2748b","sequence":{"long":3293},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"574c3c1e-54db-44a6-90f7-cb1d149fadbe","sequence":{"long":3294},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f678bf99-e0c0-4679-9f2f-eb29ea5d3789","sequence":{"long":3295},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40912a64-4fbb-43cc-b1cf-3de60145125d","sequence":{"long":3296},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65cc8bf7-ee81-48b6-a43c-fb494cb0f480","sequence":{"long":3297},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4181128-1b56-41d9-b2f9-2457a391bddc","sequence":{"long":3298},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1c18477-7cec-4364-8906-ae5c7606dfae","sequence":{"long":3299},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":24},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7cfc2d1-ec0b-47a7-b270-e80ddf1745d6","sequence":{"long":3300},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"799dbb10-12b6-40bb-94e0-ad7a5c4fddd9","sequence":{"long":3301},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc29841f-89fd-4976-bc20-539d41dcbb4a","sequence":{"long":3302},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"892ae66c-bd48-4358-aaa8-22d736779c55","sequence":{"long":3303},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6690161-7abd-4465-a769-86be0b2bbd25","sequence":{"long":3304},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":23},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f8668f1-256d-483b-b317-25cf5bd541b3","sequence":{"long":3305},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":21},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99c39ecb-7c62-4157-a3ed-b1a2c66ebf24","sequence":{"long":3306},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eef15eca-c29f-42a9-bfca-f02e9e587a89","sequence":{"long":3307},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a48171d-7b49-4194-ae25-01d0318b202b","sequence":{"long":3308},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":23},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bfd6193-554f-4f18-87e3-5f8c1f9bf78b","sequence":{"long":3309},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":24},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd55479d-90aa-4b5f-8c20-93e0d2b0e399","sequence":{"long":3310},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"962b7215-e08e-419f-aa56-5a11eb0242d1","sequence":{"long":3311},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba4d0cc4-abb5-4d68-a01d-c5722f5df6ee","sequence":{"long":3312},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4493c568-5533-4645-9464-efb00d545c4f","sequence":{"long":3313},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8de654fb-a245-4305-8a37-7c381d0dac9d","sequence":{"long":3314},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e84478d1-9e24-41f8-8280-d60b9c215a81","sequence":{"long":3315},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9cd274c-51ad-4680-be94-fd731f787463","sequence":{"long":3316},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb4ad717-a230-45b1-b918-a373cfc67e81","sequence":{"long":3317},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c81e586b-09f4-4b57-88b1-56f705abe469","sequence":{"long":3318},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"795e93a1-f480-4c7a-96d9-6a88f013c8da","sequence":{"long":3319},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a5dcc14-aaa1-46b1-87ba-c3b26661cbd0","sequence":{"long":3320},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc5ba976-eb7e-4ee6-817a-bed6217b624b","sequence":{"long":3321},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7782b136-ad78-4570-9156-c250844f8eb6","sequence":{"long":3322},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"502b1970-d9e9-40be-99db-7571011f131e","sequence":{"long":3323},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c4168f4-1988-44e4-9d03-30de9d0cf8ee","sequence":{"long":3324},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":9},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"987480bf-39d0-4e00-915f-8cbac2def417","sequence":{"long":3325},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aea843b1-9f62-4c97-b64f-10ea16906074","sequence":{"long":3326},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"864a6897-6c19-4fa7-832b-1a5a143be152","sequence":{"long":3327},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4f1119d-0991-46f3-9402-9da5227efa6f","sequence":{"long":3328},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7129f0d-f5b7-40b7-9a46-c76f1c6faaae","sequence":{"long":3329},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11cda614-ef12-43cd-b28b-928fa432954a","sequence":{"long":3330},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72ab2d57-db72-4deb-a082-58e22397c7a0","sequence":{"long":3331},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f105e2a-a1a1-4515-9ab3-969f303f8ea1","sequence":{"long":3332},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1207},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39d390ae-e565-4045-9fc2-ac273cee5ace","sequence":{"long":3333},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":698},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fe654cca-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1355,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582967944522023},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01d91027-68c4-4609-bf53-782b23b702e8","sequence":{"long":3334},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1355","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1355","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ccb0ec5-61b3-4bf8-a799-1ea9bbdde833","sequence":{"long":3335},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1664206e-e86f-46ad-8120-0b32973b8352","sequence":{"long":3336},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582967944522023,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2a2ef05-402a-4b23-80c6-0faefd04eefb","sequence":{"long":3337},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"781bc790-5b57-425a-bff8-3a07b4d7e20b","sequence":{"long":3338},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0141723e-8160-435f-b880-19e51d00829d","sequence":{"long":3339},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"feca519e-aabe-40ac-ab98-904f0e4d3ab2","sequence":{"long":3340},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffb422a7-ea3c-4ad4-9d86-750c49d61c8a","sequence":{"long":3341},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64cc6902-4771-423a-bb99-eb075b2d7678","sequence":{"long":3342},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f316435-1e8a-4257-b62d-d3b6d9203bd7","sequence":{"long":3343},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89ae7f6b-e80c-4afb-89c9-b7097267ce75","sequence":{"long":3344},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968418492202,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":326677},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"651df828-f1be-4b10-877a-51954605093e","sequence":{"long":3345},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb7964d2-56b6-4240-849c-4c40a75475a8","sequence":{"long":3346},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c4ff9e1-a563-4133-9f9c-e421e9a74625","sequence":{"long":3347},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":25},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"feff028b-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1356,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582968958047837},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b2f0322-75b5-457b-b8ae-c5df07f12c07","sequence":{"long":3348},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1356","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1356","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f82aa865-a827-491b-83e7-391d168d2dbc","sequence":{"long":3349},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"cbeb200e-1746-3e58-8617-b743583e4f59","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdc2a72c-008e-4c58-bbc2-526cc23b50fa","sequence":{"long":3350},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"cbeb200e-1746-3e58-8617-b743583e4f59"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./make_directory"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582968958047837,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./make_directory ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9911e0b6-d30e-43cd-9293-2988949210d3","sequence":{"long":3351},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d4bcce3-70bc-4fdd-ae12-4520d59bb138","sequence":{"long":3352},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a432f12-b1a6-417c-a2ea-f1a9b71175b4","sequence":{"long":3353},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8677cd8d-d3c0-4860-bcda-02a2bcced4b2","sequence":{"long":3354},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"811df296-b123-4450-a6f4-4292b2ecf46e","sequence":{"long":3355},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aab36bfb-9210-49b5-94c0-52ca11423a1a","sequence":{"long":3356},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a55e4b6c-018b-4f02-a8e8-6bf7f6517ee7","sequence":{"long":3357},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0d6b176-681c-4ab3-8340-cc1fdf813375","sequence":{"long":3358},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d510187a-0ffd-47ee-8757-0ade5d08f520","sequence":{"long":3359},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e51070be-d3c6-43a8-8953-6e48522b6c1e","sequence":{"long":3360},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db0c1de2-c792-43f5-8ba6-2f1ae267c8f8","sequence":{"long":3361},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34256bd4-7861-4ac6-9bbf-2f0c8192d798","sequence":{"long":3362},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ab20ee6-1481-46d0-bf63-64a304d74062","sequence":{"long":3363},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a494d71d-f1e7-4dd5-8250-d433435a30fd","sequence":{"long":3364},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47facd00-b2c1-4968-87de-e7c9c9382a61","sequence":{"long":3365},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a8be347-5865-45c9-a12b-2cd2a1d91eed","sequence":{"long":3366},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41f4253b-8e2b-46e5-b4b6-3c9d712a18a6","sequence":{"long":3367},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"788c0147-c32c-47f7-b8a6-fe864df71722","sequence":{"long":3368},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bca76fc8-0331-4c28-81f1-484679a3af4a","sequence":{"long":3369},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ef2077a9-1b4f-685b-8f1b-6859ab685e9f","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_DIR","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a710f81-6c9c-4227-a6ff-2c83e98e1ee1","sequence":{"long":3370},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ef2077a9-1b4f-685b-8f1b-6859ab685e9f"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/temporary"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mkdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2587e3a1-e244-483e-97f5-edb88d14a67e","sequence":{"long":3371},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61a74422-636c-4e90-9989-5eeac26077cb","sequence":{"long":3372},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1186},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73f71ab4-c2bb-4018-b586-9f0a61d6d57a","sequence":{"long":3373},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":727},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"feff8c39-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1357,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582968958047837},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2088b5b-aafa-4cc8-a49a-ae23cb99c532","sequence":{"long":3374},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1357","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1357","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de99c6e0-521d-4e19-ae3a-0a696a322390","sequence":{"long":3375},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8560c5b-edc6-49ef-a502-4ef95b72e410","sequence":{"long":3376},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582968958047837,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdd8d402-1920-4aff-9bc9-10482f027c61","sequence":{"long":3377},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3822c7f6-7810-4d8d-92b3-f5b19eb5a7d6","sequence":{"long":3378},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a825c77-183d-4b4e-81e8-c1c7611fab79","sequence":{"long":3379},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abf8c381-9cf8-4ec2-9ea9-bb41a877fadd","sequence":{"long":3380},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df01ff6c-0cd2-41c2-9de9-ecf5f77de680","sequence":{"long":3381},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c2fdefb-6d59-4542-a4c4-df96265740b0","sequence":{"long":3382},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c22abf3d-e082-48f8-9a45-89d0815b3b56","sequence":{"long":3383},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"165ab9ca-7e71-4b7c-8af3-628021a07257","sequence":{"long":3384},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7343ad6e-d917-4378-91fa-17a001837f64","sequence":{"long":3385},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6402bf3-822b-498e-a047-57af155c783a","sequence":{"long":3386},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3cf5f24-400a-4cfc-ab49-6403fa82342d","sequence":{"long":3387},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e42773f2-0766-4774-bdfe-1673fd2126ea","sequence":{"long":3388},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6c5f73a-8ad7-4459-8b2f-9a6b6f62dfaa","sequence":{"long":3389},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fe86379-942c-4e4e-99dc-4806d5779159","sequence":{"long":3390},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969434831514,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":331677},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6739e55-bf28-4b7a-91aa-d18181e0afb3","sequence":{"long":3391},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc489832-f8b2-4965-8fb5-febe8aeeba22","sequence":{"long":3392},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6482bfc9-87fa-4b0b-8d7c-8a042285123b","sequence":{"long":3393},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ff99fb10-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1358,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582969974290865},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86ab9165-9f3f-4015-a9f1-39c5a3e12ce4","sequence":{"long":3394},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1358","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1358","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73bad758-cfd9-44e6-80c4-c19e17af066e","sequence":{"long":3395},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6741c59f-8ce3-8e50-a38c-f0d1808ea1c5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"677db597-fdce-4e93-98f7-f0d853eb310c","sequence":{"long":3396},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6741c59f-8ce3-8e50-a38c-f0d1808ea1c5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_multi_write"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582969974290865,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./multi_read_multi_write ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b19a2e21-4064-4a1e-8f99-9ab3893fd9ad","sequence":{"long":3397},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6890e64-8937-4ba3-923f-9fc81bb6a21d","sequence":{"long":3398},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f90f90b7-f916-4719-8706-d0365fe763dc","sequence":{"long":3399},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08f73bdf-8d68-4331-b2a5-f3d7c676f329","sequence":{"long":3400},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86bfc6f1-ccfc-4f24-9115-db6ca660d093","sequence":{"long":3401},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2164f86-473b-4c73-bbdb-debc59c78922","sequence":{"long":3402},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af67d216-3d3b-43b4-99fc-679892ebc3da","sequence":{"long":3403},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf631988-0ff2-4bff-b0d5-32f7e058799c","sequence":{"long":3404},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36dd3851-73c8-4d5b-9ac6-15ced170014f","sequence":{"long":3405},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08273fb2-fc4c-4c26-b94f-ca16a399e2d2","sequence":{"long":3406},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa265355-d56b-40ec-99d5-2f258b6af228","sequence":{"long":3407},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf2a6444-ad65-41d8-af1a-3fe8af0e137c","sequence":{"long":3408},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88f75e4f-386f-4e69-9d6c-60d6de652644","sequence":{"long":3409},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd440e00-271d-4f5f-b3fb-78c9529b213f","sequence":{"long":3410},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86419757-7053-4299-ba3c-d4fa04e247fe","sequence":{"long":3411},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c45bd60-49ba-45e3-8730-b3be42ef406a","sequence":{"long":3412},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47e9e94b-d9d8-48f7-8dac-dfe209c77382","sequence":{"long":3413},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dae8d186-3398-4381-96e0-9d4b08ff98a7","sequence":{"long":3414},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d20c9f58-eb08-4125-97ba-035c8fc555d6","sequence":{"long":3415},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"66902a05-711e-db5e-9e71-61fe3edb93c1","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a716bd7-b5ff-4765-bc9e-ad682c6e2b52","sequence":{"long":3416},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d31407ef-7ab5-4cea-85d5-be0c1cd38a6a","sequence":{"long":3417},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"9679d39e-c74a-3855-8ac7-3e3be538a626","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cd0ecad-9e24-412d-8006-1105e106aa22","sequence":{"long":3418},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"9679d39e-c74a-3855-8ac7-3e3be538a626"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/output_file1.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"95dea952-8b38-a659-b88b-355249a60651","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2b0bc3b-7499-4eca-bac7-c9d2ba6237ca","sequence":{"long":3419},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"95dea952-8b38-a659-b88b-355249a60651"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/output_file2.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8fcd95e-ae9c-40b2-aa31-5aa2ff474717","sequence":{"long":3420},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":209},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66422d97-2172-4008-9912-56fc394b94a9","sequence":{"long":3421},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":382},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"294e561b-8d22-49ab-86e1-3b8388ae071c","sequence":{"long":3422},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0de895ce-9b67-4661-a7b7-aceebe6f5fff","sequence":{"long":3423},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8e3181c-a339-4834-81cb-6658c4e98347","sequence":{"long":3424},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"9679d39e-c74a-3855-8ac7-3e3be538a626"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":191},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d728da70-a537-4bb8-b30d-3a32869350e4","sequence":{"long":3425},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"9679d39e-c74a-3855-8ac7-3e3be538a626"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"484cbd9f-a2ef-40a7-80f6-136c7e403659","sequence":{"long":3426},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"95dea952-8b38-a659-b88b-355249a60651"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":187},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70c383c7-637f-4d6b-a7fe-44f8faf8e404","sequence":{"long":3427},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"95dea952-8b38-a659-b88b-355249a60651"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a60cd94-9fb2-445e-9471-580cca9fdca6","sequence":{"long":3428},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62ae36c6-79ec-45db-b5c0-74523e82f583","sequence":{"long":3429},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1157},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a010b0e-9632-46fa-8ea1-02b4ab5a497b","sequence":{"long":3430},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ff9aa18e-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1359,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582969974290865},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f711835b-fe94-4466-aa9f-63b068f3822f","sequence":{"long":3431},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1359","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1359","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b9dd0cb-e997-4add-b9ea-dd1a0dd104a3","sequence":{"long":3432},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7d82ef9-e45d-4bc9-b80b-b8245ccc9e8d","sequence":{"long":3433},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582969974290865,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d04d2b60-d8a9-4ab7-b3c0-f38d3409f20c","sequence":{"long":3434},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8258e63-fda8-4bbb-b4da-33c5eeee4262","sequence":{"long":3435},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba1ee2bd-e037-4bee-8cbe-62af0286048c","sequence":{"long":3436},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7e37411-248b-4ae1-b068-c1b9eae6d5b6","sequence":{"long":3437},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"055bb27f-477f-4e22-903f-1532d03617b9","sequence":{"long":3438},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b8940cd-095d-49d4-9262-190eb90873bc","sequence":{"long":3439},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"402a435e-3d74-4c32-8f0e-421ffc445e7a","sequence":{"long":3440},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fe5903a-322b-4559-8376-d2f9945dc22c","sequence":{"long":3441},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0413cf9a-70bc-4d4f-8da1-a79eae4af253","sequence":{"long":3442},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdaae51f-6cdf-4c8f-9c29-49987b3771e0","sequence":{"long":3443},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a18ba172-6570-452c-bd58-fcd7d85621f7","sequence":{"long":3444},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14e3861f-14d2-4382-b189-f3ff3dc0d1f8","sequence":{"long":3445},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d279978f-7507-4341-b84c-7a6d8646672e","sequence":{"long":3446},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a67e971-93b7-4423-a2d5-ee4821998592","sequence":{"long":3447},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81e49f59-9778-4bd7-9005-f1d3ac8d3083","sequence":{"long":3448},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94bcae5e-ea76-4285-a1ba-be4cd04cef8b","sequence":{"long":3449},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7d87bf0-ce88-4814-839e-4cffd835f52d","sequence":{"long":3450},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06e02463-9213-4e0d-af57-50f85fd95a70","sequence":{"long":3451},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e28f52d8-1fd9-40d3-823c-080bf588f938","sequence":{"long":3452},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dc3c6bd-9956-47f6-b6a4-60a3f033d218","sequence":{"long":3453},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":331677},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e667cb4e-bcd6-46ce-8e0c-6a8323ba6e5c","sequence":{"long":3455},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f17ce6f6-f260-4712-8855-debe5a110d62","sequence":{"long":3454},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cb7f3c2-a38f-459c-b7eb-812de7440af8","sequence":{"long":3457},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af780aed-1229-45b2-bce6-933ce7752e27","sequence":{"long":3456},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f09aad8b-9201-4fc5-9908-fbd854647c1d","sequence":{"long":3459},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f1b807b-7d6a-414a-87dd-65447c645673","sequence":{"long":3458},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4918117a-c0a3-4aa7-9894-c647164be3be","sequence":{"long":3461},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58dae352-48b8-4038-84c2-52822eb8e902","sequence":{"long":3460},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a11c6113-0312-472f-85a7-4ae006d5ee80","sequence":{"long":3462},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5e26d82-a94e-49ec-87ef-4d6af698515d","sequence":{"long":3463},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59be41b0-a11a-476d-8056-e685c7d7ebd8","sequence":{"long":3464},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6022e30-1e9b-44f4-9786-f941d1bf828b","sequence":{"long":3465},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4432},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e23de0f5-095b-458e-8ca4-46799a51cf85","sequence":{"long":3466},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4485},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82f9d4ea-25f9-4a67-83da-b6d58058b051","sequence":{"long":3467},"type":"EVENT_WRITE","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a7c4f3a-723a-48e2-b8ac-68edb04ff56a","sequence":{"long":3468},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"161c853c-99bd-4725-b78e-ea7c432b2b74","sequence":{"long":3469},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e831e10d-aea4-4937-8062-b915aae68b98","sequence":{"long":3470},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3449},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec2a7552-0e1b-4667-a288-b95de72d9ac6","sequence":{"long":3471},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3502},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3948ad9c-af11-48aa-a1a6-34e114560169","sequence":{"long":3472},"type":"EVENT_WRITE","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc1ea6e0-de73-48b4-a83e-e5d208d449f1","sequence":{"long":3473},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d19ce374-10e6-4bbd-8e69-5b4a84495158","sequence":{"long":3474},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44459ee5-a5a4-4a11-ba2f-c8f5d30c321a","sequence":{"long":3475},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4996},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"087de15c-fc8c-40c3-bc74-843598633d74","sequence":{"long":3476},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5049},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c499033-96fa-4577-8765-a3ee3f3bd95d","sequence":{"long":3477},"type":"EVENT_WRITE","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10ce3934-d25b-4fe9-bade-d5478866e3aa","sequence":{"long":3478},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df2e761f-e739-409f-9e84-5425a00ed44e","sequence":{"long":3479},"type":"EVENT_SENDTO","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"495","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33ce020d-7318-4b45-be7c-0142b5e2df8e","sequence":{"long":3480},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"495","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51fe43e0-9b3c-460d-b657-a76484cecfb9","sequence":{"long":3481},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3cf4d96-5201-45f9-b2df-406d09f0cafe","sequence":{"long":3482},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970133899473,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88d7ffbf-e225-4816-a31c-dfe27c302c8a","sequence":{"long":3483},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970133899473,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd9ad2b9-c8e2-4f8c-90aa-4ab482a518d3","sequence":{"long":3484},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970133899473,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a192b18c-7f50-4cde-9a00-4bca5f460e6f","sequence":{"long":3485},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970133899473,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94cc81fc-dfa2-40a6-8e01-fa70ddee7b33","sequence":{"long":3486},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970464025726,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":341125},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86a39df0-e5e8-4ccb-b67c-0dd2262b3337","sequence":{"long":3487},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22c8966a-a34f-43ce-8161-5e3bec570cad","sequence":{"long":3488},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"496","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e475362b-8c3c-42cb-8a85-50488a532bf3","sequence":{"long":3489},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"497","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4521695-a9e2-437a-8948-e290697869eb","sequence":{"long":3490},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"498","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc8f565c-2f91-420c-b13e-a045e57c9707","sequence":{"long":3491},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"499","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6a81f38-5b89-4b0f-b208-87e32e968acf","sequence":{"long":3492},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"496","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6c70038-b894-4b37-b24f-429afc659d37","sequence":{"long":3493},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"497","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec0b6d0f-dd9e-4f1f-b099-278b090f5181","sequence":{"long":3494},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"498","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb922052-ae6b-4018-babf-a25175eebef7","sequence":{"long":3495},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"499","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff1d7403-2bd1-4439-a204-de98f33181d8","sequence":{"long":3496},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f95a90bb-8a3a-409b-9984-0f699468f191","sequence":{"long":3497},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b16b749-e5a3-48d6-836a-898c7c0d1fa1","sequence":{"long":3498},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":34},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"00359f92-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1360,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582970993939804},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19c91ac0-da50-4a43-a9e1-ebdbfc02537a","sequence":{"long":3499},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1360","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1360","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcb6e38b-4db9-4ee9-b2f8-9083a8cb1451","sequence":{"long":3500},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d8b8f561-1e30-f858-b01e-d3c3b8f82fe5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adcbdf32-b90a-4dae-973e-b755800d8df9","sequence":{"long":3501},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"d8b8f561-1e30-f858-b01e-d3c3b8f82fe5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_single_write"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582970993939804,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./multi_read_single_write ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e98335e-2823-405e-9a55-688ba7f7d38a","sequence":{"long":3502},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73f8635f-67aa-4550-adcd-c9bdbea383bd","sequence":{"long":3503},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ce60e7d-dd7c-4a35-91b0-7b4fb39be8c4","sequence":{"long":3504},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d286af0c-94d2-489a-af0c-2773c3a9942f","sequence":{"long":3505},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0e1de22-d2a1-4add-a6b7-3d9d61039234","sequence":{"long":3506},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee9d9e5f-ad08-47a1-a737-337cc5da1736","sequence":{"long":3507},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8c38095-6803-4890-8202-8eda9faf1b7f","sequence":{"long":3508},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"329612d2-fbb9-4610-8a63-48784b090382","sequence":{"long":3509},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48b20eaf-3d14-48c8-8ca2-dde0fdb35dbf","sequence":{"long":3510},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5fe0cb6-16f6-4e7e-9603-0be632124e0d","sequence":{"long":3511},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc34f52f-b04e-4e29-a4b0-f6fa76814843","sequence":{"long":3512},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59730b59-c94e-47c5-a070-0b78c641f2a1","sequence":{"long":3513},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"133c3b22-fa49-4a64-9eeb-07ec52d6dd19","sequence":{"long":3514},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"940c4316-a004-46bf-8981-261e5d8959e9","sequence":{"long":3515},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ea89a82-dde3-4f1b-aa5d-abdf5a8da977","sequence":{"long":3516},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee77847a-e607-43fc-8ae8-39b4cc6a4858","sequence":{"long":3517},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0458e2e6-14c6-4132-b5e7-c6040455408b","sequence":{"long":3518},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"228ab818-2ee3-40cd-a36b-a4171cdd9b1b","sequence":{"long":3519},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2b2b802-35d9-4d7e-8b2d-ccfd8f4a7e1a","sequence":{"long":3520},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49fcf986-2073-4f62-8424-cb073576b24d","sequence":{"long":3521},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52332a9e-a4b6-49d2-ad5d-93bbd542b6f5","sequence":{"long":3522},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"93a7558e-de2a-0550-aade-8f47a0052450","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ce0dbc7-2ab3-48b8-90b1-5b37eafe6196","sequence":{"long":3523},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"93a7558e-de2a-0550-aade-8f47a0052450"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/merged_file.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cac7264-9c4c-4008-8538-34f3929f200c","sequence":{"long":3524},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":209},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe704402-2e49-49f6-81f5-ff8814d12230","sequence":{"long":3525},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":382},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e8957bb-6d2a-42f8-94c8-bf001bef480c","sequence":{"long":3526},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f74b4c49-b549-472d-975b-2de8224e38b1","sequence":{"long":3527},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6ab36e8-606e-4578-9c2a-c3236036852c","sequence":{"long":3528},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"93a7558e-de2a-0550-aade-8f47a0052450"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":378},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03cdc5f5-4fb1-4361-81ea-7957c02708e6","sequence":{"long":3529},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"93a7558e-de2a-0550-aade-8f47a0052450"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99e5dfac-2bff-415a-8036-a5c36b540ed4","sequence":{"long":3530},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d8bd137-2bfa-488d-9a14-7dddbe4f157e","sequence":{"long":3531},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1127},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b968c91c-d6ae-4e6f-ac06-9133363b310d","sequence":{"long":3532},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582971483913741,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":345981},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"00360eca-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1361,"parentSubject":null,"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de82d4dc-32bd-4de1-a5cf-1613ca825858","sequence":{"long":3533},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"00360eca-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00360eca-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e9f4b18-d8b2-4b55-abac-a2accacc44de","sequence":{"long":3534},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c976969-1c95-4f52-b3d2-2fd6d261ffb4","sequence":{"long":3535},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":27},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"00d0b0a5-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1362,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582972009613134},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc53c15d-505f-426e-a21c-227db09216f4","sequence":{"long":3536},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1362","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1362","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3963848c-e644-4e09-a3b4-068631dcb0a6","sequence":{"long":3537},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6afebb5e-412d-d25c-ad41-600cfcd2423e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca0dea4c-4d05-4b18-937f-9bf23de10089","sequence":{"long":3538},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6afebb5e-412d-d25c-ad41-600cfcd2423e"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./remove_directory"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582972009613134,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./remove_directory ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de862795-a2b6-4e42-bf58-5c6923d04769","sequence":{"long":3539},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae364096-cc8d-4d83-b2fb-07a04c6d5e95","sequence":{"long":3540},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0693dcf6-3b0d-4f73-87b7-c457f736e791","sequence":{"long":3541},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed7a0da1-55ff-4fab-813e-5d7c282b441f","sequence":{"long":3542},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afcfedd4-b066-48cb-b24b-d40479bc79bf","sequence":{"long":3543},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"566f3879-11eb-41ac-a58c-46c1d1902be6","sequence":{"long":3544},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e5832a7-cda3-451a-baf9-2af72782bd2b","sequence":{"long":3545},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3f1bbae-87ec-4380-b16e-1355eed0bfdd","sequence":{"long":3546},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d07960e-21a7-4475-a85c-df89f16cba03","sequence":{"long":3547},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"521f3744-d465-4bcf-8ea7-420dcb5b011a","sequence":{"long":3548},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acffba8b-e1bf-42b5-aead-78e46d79c3ff","sequence":{"long":3549},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b20ef3b0-3c65-4d2c-adc2-3c0ced274e8d","sequence":{"long":3550},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f110cbcc-b157-4247-a1e1-a3a3b03a0592","sequence":{"long":3551},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21f9c844-0986-42ac-8210-1b32343667b8","sequence":{"long":3552},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"387072a7-8710-4c6a-ad59-dbe604fc62d9","sequence":{"long":3553},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5584a2dc-ab5d-4661-92c3-da15776a3855","sequence":{"long":3554},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce76e463-8558-4a39-bc87-e05e1fcdb36e","sequence":{"long":3555},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b83b486-cd74-4de2-ae1d-4ba1a8c75461","sequence":{"long":3556},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dc9def1-9d11-441e-a0b4-250b8b7e0474","sequence":{"long":3557},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62a1cfba-0334-465f-98a0-7298e45cdbe2","sequence":{"long":3558},"type":"EVENT_UNLINK","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ef2077a9-1b4f-685b-8f1b-6859ab685e9f"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/temporary"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_rmdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ae0b9da-cac4-44b0-8545-a91c85b7008c","sequence":{"long":3559},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78ea63a7-63ac-4632-8e35-4fff95fc7160","sequence":{"long":3560},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1104},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"985ae1d1-ee8e-4b77-8f9e-093c6314ec48","sequence":{"long":3561},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":798},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"00d10d10-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1363,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582972009613134},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"352bbc67-ce12-4e92-ae7d-78d766412d63","sequence":{"long":3562},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1363","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1363","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2612ebc8-b16f-4e04-a48b-64c1fab6a8c0","sequence":{"long":3563},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc3fbd7e-4959-41d2-a98f-67d2f521ef80","sequence":{"long":3564},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582972009613134,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06ee7b40-616a-41cc-81d5-54cd2c523a52","sequence":{"long":3565},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c1d2686-1e1f-4e0c-a8b0-a49ce38d6645","sequence":{"long":3566},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33e4d96c-6e7a-4dca-a031-6edced1ba81f","sequence":{"long":3567},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1171d507-5890-4352-af71-cd41a280e6f9","sequence":{"long":3568},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa2bfd09-276f-439c-8ca6-996ea87e4762","sequence":{"long":3569},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f387d4f-461a-4e56-89e8-d85c31e6f7e4","sequence":{"long":3570},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f215380-a2bf-4d40-844d-14e4907e96fe","sequence":{"long":3571},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc398432-6ebf-4ab2-b441-49ea8992e410","sequence":{"long":3572},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"985474ae-ffd8-4672-b7ac-1a940e9fc288","sequence":{"long":3573},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afec92e8-ecf4-4369-99d3-9b3cdca703cb","sequence":{"long":3574},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a4af56c-64fd-4424-a6f7-003e4c88b870","sequence":{"long":3575},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ff29e5f-ffd4-488f-a1dd-65a8f5e62fac","sequence":{"long":3576},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6303db70-cc16-47d1-aca5-0e8874a12a02","sequence":{"long":3577},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de6c7097-99ad-4503-a7cf-b55df1072927","sequence":{"long":3578},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972504128832,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":350970},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1fb5f0b-6893-4052-8f66-3417dca61626","sequence":{"long":3579},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64151149-1915-4178-9040-8416c4d83ec9","sequence":{"long":3580},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f3a8eb7-b44a-4369-b4c4-582b0460b902","sequence":{"long":3581},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"016b62c2-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1364,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582973023921563},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbe092a5-7dbc-4a35-8ee9-37d523179f2a","sequence":{"long":3582},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1364","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1364","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4feb309a-6444-4c8b-b8dd-930c2bf502b3","sequence":{"long":3583},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fb8b291-afc0-424c-b7ba-ca6b4c7466b8","sequence":{"long":3584},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"5b518504-be76-5653-b6be-34ff435661ed"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./remove_file"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582973023921563,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./remove_file ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cc2fd79-7619-4b7a-826e-f5909bb760d9","sequence":{"long":3585},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c707cd0-e94b-436b-b97d-b1d67eafddfd","sequence":{"long":3586},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35f22f7b-67ce-47fd-8a0e-148cb418a650","sequence":{"long":3587},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12450e42-7cae-4d54-9b95-12b0b51cd706","sequence":{"long":3588},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec938c16-98c9-4f0d-a4b9-44644f6a3809","sequence":{"long":3589},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be11ad03-6b68-4f9f-b004-08bddaedfd97","sequence":{"long":3590},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd735e63-093a-4535-bf1a-0659e117eb84","sequence":{"long":3591},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83413a34-6c32-4a0f-b6e3-371a6532c8b2","sequence":{"long":3592},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78b0be57-0ee3-49c7-8777-86ad7b06e70a","sequence":{"long":3593},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49ea37b6-1610-4e30-8ff5-9447eac81ca5","sequence":{"long":3594},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b94f62e-23b1-4c56-bc4d-cd64d3b072a3","sequence":{"long":3595},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3ba0a54-0ccf-4217-8890-23bf8752c7be","sequence":{"long":3596},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"731c5297-c8bd-464b-b568-4e0242173424","sequence":{"long":3597},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"556da310-d197-427c-aa7e-61ba58b790c8","sequence":{"long":3598},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e875f2f4-802f-4337-9cf2-11bebaccdce2","sequence":{"long":3599},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8363c3b7-06cc-4f37-abef-5f3e8549dba1","sequence":{"long":3600},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3db10d85-9e49-4a82-8910-34802548bcdd","sequence":{"long":3601},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa90700b-e1f3-4080-8a8c-9d6e79ccdade","sequence":{"long":3602},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"007d06cf-b1d8-4edc-b0d3-d466b5580d3a","sequence":{"long":3603},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e034af9-68e8-42b3-8197-1489676f3d4b","sequence":{"long":3604},"type":"EVENT_UNLINK","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"745458ec-83ee-b052-ae83-2efb22b0cb41"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/out.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_unlink"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"deb00fe7-13e6-48b6-9952-730b374463d1","sequence":{"long":3605},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d87400e4-ac54-49db-a153-03e0ac00424f","sequence":{"long":3606},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1086},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21c14ae8-cbc8-403c-b646-77034cc1ba04","sequence":{"long":3607},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":872},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"016bc3ec-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1365,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582973023921563},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2c85aa8-3df4-4cba-befd-0524efd84dc8","sequence":{"long":3608},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1365","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1365","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec0111ac-93e2-483d-8705-ec4df1992706","sequence":{"long":3609},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84504d8d-778c-46fc-a61d-a3e6e525026d","sequence":{"long":3610},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582973023921563,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4fa0be9-80ec-406d-aebe-db912c4a042a","sequence":{"long":3611},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2102fec2-cfd2-4c0a-a755-8d848f8ca5b8","sequence":{"long":3612},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b3df212-ebf5-4802-8a58-e91edd8c280a","sequence":{"long":3613},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13092f34-9a5e-426b-b173-d49feba30084","sequence":{"long":3614},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2cf0fa2-cb20-456e-a95c-b56da467e3a6","sequence":{"long":3615},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c021dc7e-e26f-4e40-8d44-ebc01cbe24cc","sequence":{"long":3616},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81a47a91-11a7-400d-8d72-77653629a7ba","sequence":{"long":3617},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"957dc32b-a3b3-48d7-9ee8-74f07b1ada57","sequence":{"long":3618},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7e2703e-ade7-4d45-9399-37afa1138274","sequence":{"long":3619},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d17c457-7c11-46d1-b53f-93c9f689eee9","sequence":{"long":3620},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57eb697c-144c-4e78-88d9-508d56137ae9","sequence":{"long":3621},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acf78d7a-139c-4abe-8c56-8032257baa2e","sequence":{"long":3622},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d61c224-f052-46ec-8cb5-7b98209afe84","sequence":{"long":3623},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ef88d07-b197-49df-ae68-6ef60c0e3bec","sequence":{"long":3624},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":356013},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95d07463-d709-407e-9819-0489026e1661","sequence":{"long":3625},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"058c4b1e-8f10-4b9f-892b-9e702119f9c4","sequence":{"long":3626},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"501","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e913294-a183-4688-84ed-1eda3ca8e981","sequence":{"long":3627},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"502","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e805b72-25ce-418f-a4e1-35d5399014b4","sequence":{"long":3628},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"503","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e51953f-fc8b-427b-b003-a28a6bd0f4ad","sequence":{"long":3629},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"504","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aab6ace8-19af-477c-b3b9-458db287f5cb","sequence":{"long":3630},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"501","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b4a97b5-69b1-49fd-bb65-3b5839c6ae9a","sequence":{"long":3631},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"502","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26a8fb22-44c7-4c45-a136-46f506f7ba54","sequence":{"long":3632},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"503","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8582107-e7dd-40d4-9cb8-dc6c917361a8","sequence":{"long":3633},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"504","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a3730a6-9b10-46a9-b434-117b51e8c7c6","sequence":{"long":3634},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff511d0e-c9e5-4ae6-82d9-3417a85038e1","sequence":{"long":3635},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2c534cb-21e2-4932-8ba9-08402051db25","sequence":{"long":3636},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"0205a2c5-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1366,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582974034219849},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"556050c6-5bb4-4736-bfee-eb65a12aff6e","sequence":{"long":3637},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1366","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1366","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f45cd223-64c6-4188-83fe-805907a7c7d6","sequence":{"long":3638},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5c71540-2472-4c2b-9aeb-4e2467f42799","sequence":{"long":3639},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"5b518504-be76-5653-b6be-34ff435661ed"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copied_pipe"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582974034219849,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copied_pipe a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5260e04d-055b-422c-a05d-29b8cb7297e9","sequence":{"long":3640},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f17bb64-c976-4d40-a69e-07fb606fba94","sequence":{"long":3641},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"137bbe08-83c8-4031-a340-9a801a8fbd7a","sequence":{"long":3642},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7b44e4a-3e85-423f-8109-3a6bf9039a4a","sequence":{"long":3643},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7952779e-cd6a-4f8d-b002-679a6f912eb0","sequence":{"long":3644},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b3f050c-4313-4dd5-a525-c46276b4c0c6","sequence":{"long":3645},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"045264ea-7be6-4e80-a7d0-ec3ae3de3857","sequence":{"long":3646},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ea0d315-a2de-4e26-ada4-9bac9cca5dd3","sequence":{"long":3647},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a170f4ee-4b9b-44fc-b87f-570232afec0d","sequence":{"long":3648},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c265341f-3b21-4040-8770-3ff5c6ac1f7c","sequence":{"long":3649},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39b98fd7-03ba-446b-84e3-15d4c01000e5","sequence":{"long":3650},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d41c24be-3825-4466-8914-c1dcbafe7f5f","sequence":{"long":3651},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1022c9d-5b14-455b-9e94-474ad535216a","sequence":{"long":3652},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f92dace-eaad-4ff3-b5b1-a5acbda40a1a","sequence":{"long":3653},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae544fe7-fc62-478d-8918-ad2b10d7fdb8","sequence":{"long":3654},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e85747d-1775-487f-a1b2-63edf5d2609b","sequence":{"long":3655},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7eb9898b-8510-45c4-b68b-1f0a3e6b84f9","sequence":{"long":3656},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0460d09-f466-4f7a-b022-b09793590604","sequence":{"long":3657},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccc29cec-c09c-4cb4-b6e9-174bfd179ac2","sequence":{"long":3658},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"0205e82f-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"0205e82e-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"7846f689-00d6-5d8d-9ded-f91f3e48e00e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"0205e82e-467b-11e9-aeb7-080027fc76ba"},"uuid2":{"UUID":"0205e82f-467b-11e9-aeb7-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d385362b-31a8-492a-b82c-fe2a639dba23","sequence":{"long":3659},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"7846f689-00d6-5d8d-9ded-f91f3e48e00e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"0205eb21-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1367,"parentSubject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582974034219849},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6141c8c6-75c5-4309-8926-39a6e342ce73","sequence":{"long":3660},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205eb21-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1367","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1367","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c206fc74-76b6-4452-9d5b-0d550e430ad6","sequence":{"long":3661},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"0205eb21-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1366","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea1ea01a-ddff-43ce-9463-b9639cd249db","sequence":{"long":3662},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"0205eb21-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205e82f-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1366","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72798c87-c3ef-49ef-ac44-d524a25ccfa3","sequence":{"long":3663},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"0205eb21-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205eb21-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1366","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb9fab3f-7c73-45ae-a290-d497efcb96a5","sequence":{"long":3664},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205e82e-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"758bb48d-9c13-4dc5-8585-f6127df2953a","sequence":{"long":3665},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f28e3fa5-326b-4971-9f5b-1791b0b89e40","sequence":{"long":3666},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"794bd67d-9679-47df-bbfd-eeff1d40349b","sequence":{"long":3667},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1012},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"421716c5-6398-4430-abfb-b533547f6977","sequence":{"long":3668},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974534337270,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":360849},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"0206281d-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1368,"parentSubject":null,"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4012b0ca-f8bd-4614-a2c4-dffb323f1b71","sequence":{"long":3669},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"0206281d-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0206281d-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dff0389c-13b2-4d25-8c3c-3cc72466c2f5","sequence":{"long":3670},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b98d322f-7d71-47b0-85a4-93a5de9a64af","sequence":{"long":3671},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"029fc20e-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1369,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582975044355157},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c58595f4-b537-4e88-8fcd-9ca9d7f1168d","sequence":{"long":3672},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1369","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1369","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28fd3a42-6e2e-4727-91bd-0e49d2c30271","sequence":{"long":3673},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"38903a1a-040d-3c53-8d04-93e6a33cb671","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09a2c3e8-0a7f-42d5-8a29-46d4dcaa04f1","sequence":{"long":3674},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582975044355157,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/datagram.sh a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1eccdaec-e6c4-4c56-ab8d-91ea1d0818de","sequence":{"long":3675},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cd8c5de-c16f-456f-96c6-ee759e302d84","sequence":{"long":3676},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2001108c-cd33-472c-8f15-6665e849dee5","sequence":{"long":3677},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0351cba-aba4-447c-bf55-cadd9736e864","sequence":{"long":3678},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"371efd5e-e983-428c-8ec4-8011006ea218","sequence":{"long":3679},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c88d670a-c261-46b4-ba2f-43ed6c69fee7","sequence":{"long":3680},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9856e6d-e41f-4afd-a556-d271fb31f287","sequence":{"long":3681},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b18a4aed-9587-4169-bda0-49e2f2905c79","sequence":{"long":3682},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"333ff434-6ac1-4eaf-ba1f-b27785a97f7a","sequence":{"long":3683},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43a6d824-79a8-4f2b-a3b7-eeffc6727a2f","sequence":{"long":3684},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3fb202c-1988-4994-b5b2-637155eb7f27","sequence":{"long":3685},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb475f6e-e69b-4a29-96de-3be3c4348a41","sequence":{"long":3686},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44b65f7c-7687-4b4c-8e4f-27202c42763b","sequence":{"long":3687},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79491a79-4619-454f-9cc9-2d92302466d1","sequence":{"long":3688},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9440864c-e48a-4a24-a169-880919e54d26","sequence":{"long":3689},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f82954a7-503d-430c-97e7-3d9eae82d2ad","sequence":{"long":3690},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e15de0f-e7f9-4e7b-a868-d8a45487f032","sequence":{"long":3691},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52201d78-f0c2-47a1-b373-b74f0ebdfbb2","sequence":{"long":3692},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"daa17ac1-bf8a-488f-938e-acc3032d9192","sequence":{"long":3693},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d238b712-e825-4dc5-b84c-8e8e3084072d","sequence":{"long":3694},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582975044355157,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/datagram.sh a","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"045892b6-8b0f-4537-b794-a0e642018bfd","sequence":{"long":3695},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d474c101-f4f3-4c49-a618-02474cb4bbda","sequence":{"long":3696},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c167e37-c927-48fd-869b-10f0c6927a8c","sequence":{"long":3697},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4ef28f7-de0e-41c9-aec4-fa0f1029f693","sequence":{"long":3698},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e63f92c-5b0d-4490-abd2-3b1186d10b93","sequence":{"long":3699},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad3daca4-c9aa-4702-a9ff-32161eb43de6","sequence":{"long":3700},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6e634e7-43e4-4ca0-a053-67da608a226c","sequence":{"long":3701},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20effbbe-88f8-43f0-9a6c-46733f3bfef4","sequence":{"long":3702},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bd0b3e9-d56b-4c24-a89a-9e93d1ef1477","sequence":{"long":3703},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7311529a-4210-42e1-9a3c-36b8fcda36a1","sequence":{"long":3704},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fec1ce6-9318-4bf7-8912-59079982ef3e","sequence":{"long":3705},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a3e95ff-3799-421e-be7b-a585c5b7bb0b","sequence":{"long":3706},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79c606f5-f396-45d6-a98f-26762c5238e1","sequence":{"long":3707},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b824f703-4ce0-4ceb-ab33-6ab045c73b7b","sequence":{"long":3708},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6307d231-a794-4753-ba3d-d3b313bcbfa9","sequence":{"long":3709},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f060b2bc-f8a0-450a-a562-015305eb5144","sequence":{"long":3710},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb1625c9-c774-4b8a-9d48-976fefe6e015","sequence":{"long":3711},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21861ce2-e6b1-44b0-86a2-3ff39924576a","sequence":{"long":3712},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"400296a9-3a4f-4951-ade2-d27446381e5b","sequence":{"long":3713},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40e82e49-4a0b-41b0-86e7-45ab08de0485","sequence":{"long":3714},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10389811-dd58-4c58-a2b0-16ff52dddd72","sequence":{"long":3715},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88dc1228-aa0a-4947-b9f8-ef10007be5a3","sequence":{"long":3716},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9711ea5d-9254-4e09-8373-0a9db31415da","sequence":{"long":3717},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54b895a8-643d-45dd-8e12-f3d88dffc576","sequence":{"long":3718},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03a5ae2b-4bbd-4326-aa1b-ac7ff242e4aa","sequence":{"long":3719},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2e827d2-8946-4109-aeb2-ec8fc5ff023e","sequence":{"long":3720},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a5aea62-c2d3-44e9-a767-d8640fbf7428","sequence":{"long":3721},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f96a0ba3-e9f6-4345-876b-228d77c0cb11","sequence":{"long":3722},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f11715d-4388-46e5-bf5a-016360faf923","sequence":{"long":3723},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59be61e0-10e7-425c-86bb-d281383f785a","sequence":{"long":3724},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f13d1471-13c4-4faf-afdd-67e495b1bed3","sequence":{"long":3725},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65e47c27-da09-4ce0-8c28-95ada373b2e5","sequence":{"long":3726},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83d02950-f66d-49cf-ac1e-23062e00f6a0","sequence":{"long":3727},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e59f797-1abb-499c-af0a-865ad64962c5","sequence":{"long":3728},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5efbc7cc-1d80-43d2-9ae4-c3f353db4862","sequence":{"long":3729},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"208f0c15-4315-4f8d-a93a-67bd4da5cf2f","sequence":{"long":3730},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7902a1e-a182-491f-be22-b9e1114740cd","sequence":{"long":3731},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9a87fde-275e-4007-84d8-b9121348d469","sequence":{"long":3732},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65d308a8-0e04-44d0-b23a-1f7f24e54192","sequence":{"long":3733},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fde0eef-70c9-416a-8b57-bd0b4cdad6c8","sequence":{"long":3734},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbdc5b01-93bc-47c9-be27-65749e2bf480","sequence":{"long":3735},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"936cc9b5-af2b-433a-a3d5-ad8f2a7253de","sequence":{"long":3736},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be4770c9-21ce-47a2-a196-faabf2b68c24","sequence":{"long":3737},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f11a60b4-0c97-47e0-9ad7-058780959797","sequence":{"long":3738},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f761bc1-b36f-4e1a-becd-bb052e8ec336","sequence":{"long":3739},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73efeee7-fe4d-4db6-8c19-fc02a771439b","sequence":{"long":3740},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"691b25e7-5741-4b78-abbb-6454a50d410e","sequence":{"long":3741},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2229d096-4011-46d3-9186-08df00a67e84","sequence":{"long":3742},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ca8b2f5-7049-41bc-a003-d95dc5803de0","sequence":{"long":3743},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66bb111e-7e6e-4789-83a4-7a4e1cc485ff","sequence":{"long":3744},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7f8a222-cc27-4f96-be72-69dbc69c8fb8","sequence":{"long":3745},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7c4e843-0b95-4eea-8a84-1e74e29c39c8","sequence":{"long":3746},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2152a63-6a02-4333-8e34-2bba1b62292c","sequence":{"long":3747},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c54bb9a7-8f42-42c6-a444-fd166fc171ef","sequence":{"long":3748},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14a33440-1ad2-46cb-b1fe-eb465e5707a3","sequence":{"long":3749},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bd1aa7a-4ce7-4d0d-a546-5fb573a47033","sequence":{"long":3750},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16ed8a16-a8a2-4dd0-9c00-87c47c6d4ec2","sequence":{"long":3751},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e31e3c5-fa37-4455-87b0-d3cf1196c0ca","sequence":{"long":3752},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e51aebd0-4fc7-4874-8748-762e687b1471","sequence":{"long":3753},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5734b746-d344-4d79-bc9c-7935d65a6031","sequence":{"long":3754},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"333acba8-a24a-437e-8562-3e9aa7071c1f","sequence":{"long":3755},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f9f9b76-16d5-494f-b363-1a38ef3203c5","sequence":{"long":3756},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fd9a6ed-59f4-45fe-9ca8-9202117ec198","sequence":{"long":3757},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":296},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0129ff07-f7ee-4c95-878d-bc39f5b8066a","sequence":{"long":3758},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":250},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"02a0949b-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1370,"parentSubject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582975044355157},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0462878c-410a-4502-9163-d7127eae138c","sequence":{"long":3759},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1370","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1370","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c6a3da4-65e4-4d71-a4f1-7ded476b153f","sequence":{"long":3760},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"994e1913-da10-484e-a913-64798e670f43","sequence":{"long":3761},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":268},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"02a09f07-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1371,"parentSubject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582975044355157},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2245ae5a-0f85-49c8-b683-edb254a8b4c5","sequence":{"long":3762},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1371","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1371","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"deafedc1-9961-4df3-ab61-4834014f2808","sequence":{"long":3763},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3fdd1cf-d9b5-4441-bd0b-fa061b7cf5a2","sequence":{"long":3764},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54e1eafe-2306-4928-a226-5a0e3984ec9a","sequence":{"long":3765},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a366a58-6669-43b2-b140-3877ad3abafb","sequence":{"long":3766},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9898ce56-f57a-4345-94ad-4f3a9d9cba3d","sequence":{"long":3767},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582975044355157,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91966279-a17c-4ce4-b4e5-4f5fe3ddf45b","sequence":{"long":3768},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"373ba8a7-d481-4f5a-81d4-177fea4f8ab6","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ace85190-cae6-4399-be81-fccca2238eda","sequence":{"long":3769},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"373ba8a7-d481-4f5a-81d4-177fea4f8ab6"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./datagram_server"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582975044355157,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./datagram_server","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10e24950-5f33-4698-8252-8b0b1bdd6a13","sequence":{"long":3770},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6e6a1cb-0f95-41f8-a278-5667774f45c9","sequence":{"long":3771},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25e6ea3b-fe93-4d35-9f9d-ebe006d19b28","sequence":{"long":3772},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4c71156-e7e7-4bc6-b3ca-eab5ce3496d4","sequence":{"long":3773},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7754cbbb-665b-4c9f-9475-f7eb3860100d","sequence":{"long":3774},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"223984a4-046b-4820-9be5-5a0db8895821","sequence":{"long":3775},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"221c63bc-b4c4-42e7-878a-d6f5a59d0ae6","sequence":{"long":3776},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"193a30a5-ff89-4b9e-85e6-800a6e1b7e49","sequence":{"long":3777},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"271c92e3-8a9e-4b90-bf05-deced32836a8","sequence":{"long":3778},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad816182-01f1-46ad-8ca0-0a0a294667ff","sequence":{"long":3779},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbe1fda6-76c8-4760-914c-3f9a69dd18a5","sequence":{"long":3780},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e36bad6-7964-4880-9bc6-da5916919f8c","sequence":{"long":3781},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba778069-655d-4cdf-afa6-2ba6cbab27aa","sequence":{"long":3782},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c76a96e-7330-480a-af48-7da7b4704e5c","sequence":{"long":3783},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab4dba15-0efb-4b2b-97f9-707e677f9220","sequence":{"long":3784},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da1cf746-bcd7-4363-b61e-f0a983561abd","sequence":{"long":3785},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee1929da-8f21-41a6-b6f6-170ef4bc323d","sequence":{"long":3786},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d3532f0-b1e1-4f52-8f94-356f74a647fd","sequence":{"long":3787},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce7db037-873f-4f5a-a2ee-03bec2b08613","sequence":{"long":3788},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"428ca74d-794d-4125-b57d-2968f5327d90","sequence":{"long":3789},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"002dc158-e2a9-45b1-8ad1-0283b832110c","sequence":{"long":3790},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2badbe63-901b-4b3d-864d-fea3187e58e3","sequence":{"long":3791},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1742a38c-69c6-4dea-a9dd-1f3b79e3fbbe","sequence":{"long":3792},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8114871f-d47f-4a74-876a-bb186a5da969","sequence":{"long":3793},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8598e0f9-3630-43a3-8618-f8686214f99d","sequence":{"long":3794},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0377038-6159-48d9-a71a-cadc5e2fec26","sequence":{"long":3795},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bfb7076-9e62-40d3-81de-7747d37462b0","sequence":{"long":3796},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bc9ea4e-305f-4c01-adc1-074d1fcccf8c","sequence":{"long":3797},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44147f69-c0c1-44fd-bd31-9a9590eb440b","sequence":{"long":3798},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"337905e1-d17e-43a3-bae7-120db209de66","sequence":{"long":3799},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"172f4e80-ea35-49b6-9906-176610e48352","sequence":{"long":3800},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75865a16-c2f2-417e-807c-6d09a75d4320","sequence":{"long":3801},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8d0bf8d-81b9-4bed-ac1b-15a1a20869ea","sequence":{"long":3802},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94d0774d-8a05-4edf-bda3-2a7f656b625e","sequence":{"long":3803},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d343326f-0b8f-4a41-b7a9-0859b9638af9","sequence":{"long":3804},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975573954964,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":374757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e149e92e-be20-4177-b35a-44db56b45944","sequence":{"long":3805},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9a77767-ae32-44fe-9b89-69825b7ed3c5","sequence":{"long":3806},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a95ac314-0218-4099-bf52-e84a9ae1960d","sequence":{"long":3807},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19f89487-d8c9-441e-b9f2-f4e9ddba11a1","sequence":{"long":3808},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cdec90b-5f66-4f6a-9f5d-198410a9d390","sequence":{"long":3809},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f76d22ea-90d4-4aea-8013-ed4ed070db38","sequence":{"long":3810},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52b624fb-11e1-43a3-bc98-50b4d0a1d347","sequence":{"long":3811},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"033a9f30-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1372,"parentSubject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582976058898304},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5628f97e-0312-4f28-82e3-4dcac60435fd","sequence":{"long":3812},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1372","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1372","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64b9762d-d1f5-4fd2-803f-2ad94c1f87e3","sequence":{"long":3813},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ffa1f988-cf0d-7f5b-8dcf-910bcb7fb68e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ffbc209-8e49-46ec-b8ea-1b87e100ce22","sequence":{"long":3814},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ffa1f988-cf0d-7f5b-8dcf-910bcb7fb68e"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./datagram_client"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582976058898304,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./datagram_client a","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41e30e82-2176-41e6-898d-142f198b88db","sequence":{"long":3815},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d314db36-646d-41ad-a57e-7270f233f020","sequence":{"long":3816},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85bb7a6e-3975-4d7b-829b-d7bc66de3d59","sequence":{"long":3817},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fbaa4e0-8f7b-4b22-8147-ff4e03fcf429","sequence":{"long":3818},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b64b0d67-a67a-4863-9384-55334a43ab72","sequence":{"long":3819},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9406aa60-1807-439c-a681-1f02fc101542","sequence":{"long":3820},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ab8fa86-cf95-465f-86f4-aa31554a14c1","sequence":{"long":3821},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53d12249-9b13-4050-9dd9-b5bf93dda513","sequence":{"long":3822},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c846c59-3c4f-45f1-b28c-0856ee468877","sequence":{"long":3823},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6b2ebcd-a1c1-4e10-bc91-8e5ad672822e","sequence":{"long":3824},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"995d6b6e-3a71-4007-a69a-e06b04a8257f","sequence":{"long":3825},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bbda8d1-24e5-46f0-8ae8-a4837c75b19b","sequence":{"long":3826},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cbbaf87-0daa-4ee3-b0bc-0d199645209e","sequence":{"long":3827},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00ba5cd7-e81e-409a-9e9b-b0e50b675cc9","sequence":{"long":3828},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a18d48b-a053-4f50-853d-e63effd7e73e","sequence":{"long":3829},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8026060b-240b-4bb1-ba11-82c18dcba36e","sequence":{"long":3830},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d1e6127-d773-42f5-b842-8e91dec57a65","sequence":{"long":3831},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53281bed-96f1-4f10-8477-2d3d57138f95","sequence":{"long":3832},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92589182-0707-4666-90c0-beb9a0e8ca3d","sequence":{"long":3833},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"033af1f1-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7782aa1c-3b08-4d13-90f5-7b5e7c6ef2d4","sequence":{"long":3834},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033af1f1-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"033af5b2-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd7ef3a3-283f-4305-b389-46b679898c83","sequence":{"long":3835},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033af5b2-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f4c5920-4945-4aba-b297-a18244ff19e9","sequence":{"long":3836},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"033b00cc-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"::1"},"localPort":{"int":61810},"remoteAddress":{"string":"::1"},"remotePort":{"int":4950},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"02a14724-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"::1"},"localPort":{"int":4950},"remoteAddress":{"string":"::1"},"remotePort":{"int":61810},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18eeb016-cc5f-4723-9d23-628124e7228d","sequence":{"long":3837},"type":"EVENT_SENDTO","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b00cc-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"ret_msgid":"506","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","address":"::1","port":"4950","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf225b85-7b35-4317-960b-d0af34f4c35f","sequence":{"long":3838},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b00cc-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"033b06bf-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"127.0.0.1"},"localPort":{"int":29583},"remoteAddress":{"string":"127.0.0.1"},"remotePort":{"int":4950},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f0dd798-1779-4a02-a32c-08c1a5c5fb57","sequence":{"long":3839},"type":"EVENT_SENDTO","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b06bf-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"ret_msgid":"507","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","address":"127.0.0.1","port":"4950","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dc4f15a-4f3b-4cb1-a89c-78edcb4eaef4","sequence":{"long":3840},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b06bf-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"469589b7-fe6c-44dd-ab1b-9d65b6fdb341","sequence":{"long":3841},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12c6cc09-ff22-482d-893f-1b88ffa4e729","sequence":{"long":3842},"type":"EVENT_RECVFROM","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a14724-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"ret_msgid":"506","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","address":"::1","port":"61810","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f055b37b-d189-4878-9579-b62b9651810f","sequence":{"long":3843},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":31},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27a4b49f-8197-405c-9a9d-6bf487194a81","sequence":{"long":3844},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40b4344b-4877-4da1-9da6-926bca11008d","sequence":{"long":3845},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a14724-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47c4f1bb-0ecd-4694-ab03-353598b85f89","sequence":{"long":3846},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54840e50-6eb3-4c89-9e94-31365d7b0c53","sequence":{"long":3847},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5ec68e8-1cd7-4eb6-93c2-ed9d706e4fe5","sequence":{"long":3848},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2932a1e7-5c98-4dc3-b740-25f999f24d39","sequence":{"long":3849},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":961},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8fa3bb1-285c-48fb-ad0a-ef0c3f3b8fe3","sequence":{"long":3850},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":974},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"033b3c9f-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1373,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582976063965319},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"988eeb9a-9e05-4f0d-b981-933b8796c1e8","sequence":{"long":3851},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1373","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1373","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04f8a3c3-dbce-42f3-a6ef-ed9b14dd36a9","sequence":{"long":3852},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7249e41b-9f4c-4db8-88ab-b4ec872560b2","sequence":{"long":3853},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582976063965319,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20bc80e7-bcbd-45c0-a4e6-032ee8f2fe08","sequence":{"long":3854},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a736ab37-6873-4c58-96d2-6d5db26a636e","sequence":{"long":3855},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a2413c3-823c-47f0-8770-a8dfd936ddf7","sequence":{"long":3856},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dfb39f2-a61a-4718-bdc9-d7c2b2450f04","sequence":{"long":3857},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfa904e2-7778-4234-89d0-b7dc6b8e6879","sequence":{"long":3858},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d826490f-6b91-4e6d-8c40-012cea40e0db","sequence":{"long":3859},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d649340b-d7f6-4b80-827e-ae1693bab75c","sequence":{"long":3860},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8df8e8cf-91ba-48d4-b52f-7c0dd406e1f4","sequence":{"long":3861},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f95da4e-7327-42cd-93eb-094cbb99e871","sequence":{"long":3862},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cda46812-f8fd-4608-859c-094de051bc8f","sequence":{"long":3863},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bef2f6ab-c6c6-463a-8b54-756b26777daf","sequence":{"long":3864},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f03130c-8e57-4139-972e-b3e6af7cd81a","sequence":{"long":3865},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0f875c5-e47c-40ed-9438-f69d4db76f85","sequence":{"long":3866},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3b2beca-5ab9-46ed-af88-8ef7b5d64bc3","sequence":{"long":3867},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e81852b0-cc10-4585-a49d-7d848c65bbc6","sequence":{"long":3868},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eca59f12-b287-4235-8f4e-de15f29affa0","sequence":{"long":3869},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7980508e-1b7b-4b87-95f3-221b058f945f","sequence":{"long":3870},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba343e14-9b94-47c4-90ca-27c070783913","sequence":{"long":3871},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1733baeb-e491-4f25-b72f-35cc295cecdc","sequence":{"long":3872},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17e25dbb-5d1b-4920-b91c-ee4064e3a002","sequence":{"long":3873},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":374757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fae80984-f5cb-4005-89e6-14216abf479b","sequence":{"long":3875},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a78407b7-37c8-4f8b-a97b-100dc86c09c4","sequence":{"long":3874},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cbc126f-0be8-4c6b-b17e-65205be5a120","sequence":{"long":3877},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d6ecfe4-ac90-4ce3-9dda-43203a0fd9df","sequence":{"long":3876},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"774bfcd9-6aa1-40fe-ab76-b5ad292526ea","sequence":{"long":3879},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea6f017a-3aff-4e40-9424-6135b715a849","sequence":{"long":3878},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9d39c9f-535e-4977-a03c-8ce7bb2ea8c9","sequence":{"long":3881},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91ee125d-a033-4f02-b653-53b6e4295a4e","sequence":{"long":3880},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74e01892-c672-4986-97c6-6cd5234625cb","sequence":{"long":3883},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3914393d-cdb7-4205-9c72-cf5f3440b134","sequence":{"long":3882},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3dedfc0-e1a6-4a4f-b95a-287ec7c3c6f9","sequence":{"long":3884},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2791cb13-0963-4467-93fe-cbbf7e04de77","sequence":{"long":3885},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c59efb4-ef0a-4cca-bdad-d3c25fe1032b","sequence":{"long":3886},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee58134a-618e-4140-b414-b7f8764ef79b","sequence":{"long":3887},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4832},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd7eb27d-e2a6-429b-8d65-87e6e53c2849","sequence":{"long":3888},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4885},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c540547-8f93-4075-b995-6d5ddbc45305","sequence":{"long":3889},"type":"EVENT_WRITE","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c19d3e3e-1cee-478b-87cd-28d6120087f6","sequence":{"long":3890},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"915fd9d7-a1b8-410f-942c-c1d20b3664bc","sequence":{"long":3891},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1cf5ed5-3125-4ce8-9bc4-f98ed55b6112","sequence":{"long":3892},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4939},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06d57080-1f0a-4400-959b-aecc751de67d","sequence":{"long":3893},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4992},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5fc5031-b325-4e5f-ac4b-b3ee8a8f56ce","sequence":{"long":3894},"type":"EVENT_WRITE","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79db7218-767b-482d-a29d-0d6df2db0920","sequence":{"long":3895},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9661c295-4773-4ff6-9b94-86ee85e50609","sequence":{"long":3896},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976605249234,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":384214},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c0e0489-d7a7-43f2-b25e-69553beba2cd","sequence":{"long":3897},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21982f3a-5ecf-46ca-8027-7fe909805c47","sequence":{"long":3898},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"342f2b80-6533-4821-8ded-819089f30f3f","sequence":{"long":3899},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"03d617c8-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1374,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582977078937143},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10dd1d80-41cf-465d-9d8b-de06310850e2","sequence":{"long":3900},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1374","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1374","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fd3ea15-5962-45c8-8d5f-b25d8c385639","sequence":{"long":3901},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f5cca548-4198-c65d-9841-9bcbadc62d45","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8be1cee6-952f-4564-bc58-6f8b3c21c32e","sequence":{"long":3902},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"f5cca548-4198-c65d-9841-9bcbadc62d45"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./direct_pipe"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582977078937143,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./direct_pipe a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea37666f-7330-415a-87d8-716bf7698f34","sequence":{"long":3903},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71e2732b-21b7-4b14-b645-69ffd883291e","sequence":{"long":3904},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b676010-dd02-489b-a863-57f91b2c5f9e","sequence":{"long":3905},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"689fca8e-306e-4763-825e-9bf462a47028","sequence":{"long":3906},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e71548b-ccc8-48a2-a42c-84c2d49491b7","sequence":{"long":3907},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9ebaf3d-82f1-437f-9ab8-6adcc23fb13d","sequence":{"long":3908},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"429923ad-6ed6-4f73-809a-edcb3394e959","sequence":{"long":3909},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9eac9a3e-a6c2-410d-94b5-6062a5c77b64","sequence":{"long":3910},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3a303d7-d4fd-466a-bf18-93fa8f7f2c90","sequence":{"long":3911},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c53132a-dd0a-41a4-b8b3-20086362a2a8","sequence":{"long":3912},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"461c6f30-de4b-49e0-9d84-8d7f99aa963b","sequence":{"long":3913},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29e699ee-eb73-441a-9878-cdbf1457263b","sequence":{"long":3914},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e18bdf26-aacb-4100-aedc-a00a2426da05","sequence":{"long":3915},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"252318ca-db83-4312-ba0b-d20440857eca","sequence":{"long":3916},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb2d5dcb-27d5-4380-92d2-f549edd83262","sequence":{"long":3917},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4e384e4-5cbc-4ffe-b70e-ddf7329090c7","sequence":{"long":3918},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d265f84-9bd7-40ad-a1b8-da9c375ea3c1","sequence":{"long":3919},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9184b6b-64b7-48aa-a748-3d07fd6e069f","sequence":{"long":3920},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"379a518b-7ddf-427b-81ad-400d93ae704f","sequence":{"long":3921},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"03d65a83-467b-11e9-aeb8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"03d65a83-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"2271a522-92b8-5944-8a03-11aa3f1291c1","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"03d65a83-467b-11e9-aeb7-080027fc76ba"},"uuid2":{"UUID":"03d65a83-467b-11e9-aeb8-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"109a390f-e5ed-4173-94cb-a46d8433f7da","sequence":{"long":3922},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2271a522-92b8-5944-8a03-11aa3f1291c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"03d65d8b-467b-11e9-aeb8-080027fc76ba","type":"SUBJECT_PROCESS","cid":1375,"parentSubject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582977078937143},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cf9e843-9d05-4920-8b0e-a67dc611251d","sequence":{"long":3923},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1375","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1375","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bfc7f72-ae3e-40e2-bc4f-84cbea951789","sequence":{"long":3924},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1374","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbfdb5b1-80a0-4f6d-ad06-2634f02d778c","sequence":{"long":3925},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"03d65a83-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1374","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2058de4-0437-4fe2-9798-51b6122f341c","sequence":{"long":3926},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1374","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"613cd61f-75ac-4f2f-bdf5-7636e1628443","sequence":{"long":3927},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1374","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6efe736-3d28-4e4a-9081-9afa664e085a","sequence":{"long":3928},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"03d65a83-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58b5feb1-992a-4ac6-8ac8-b77b5f1ed4da","sequence":{"long":3929},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dd5e44c-679f-4d20-80b6-6d714feed3db","sequence":{"long":3930},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24cfeb4e-d907-41c5-931f-432a3fb27f13","sequence":{"long":3931},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72cfd39b-9df5-4c07-991e-b7a84b39877e","sequence":{"long":3932},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":910},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c4bfd62-fcb6-4418-b0dd-542df657f35f","sequence":{"long":3933},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1025},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"03d69d45-467b-11e9-aeb8-080027fc76ba","type":"SUBJECT_PROCESS","cid":1376,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582977078937143},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d08c536d-4955-4767-b2ee-0d86173c8d67","sequence":{"long":3934},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1376","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1376","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a098e6a-c2a3-488a-b1b1-1a8877db4b03","sequence":{"long":3935},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd30b587-80b1-4ff5-b7fe-c48866dfa9f0","sequence":{"long":3936},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582977078937143,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73f0576f-aec8-40af-8f57-26baa8f59244","sequence":{"long":3937},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d5e1b60-0e1b-4cdc-8a73-f30816d17e21","sequence":{"long":3938},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebf2887e-e3bf-4bc6-8585-c4c0e3edbbdc","sequence":{"long":3939},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20bf57d8-42a1-41b3-922f-025c6778382d","sequence":{"long":3940},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"019da8b3-cce0-4902-9945-dbe1b6e66977","sequence":{"long":3941},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5660504b-27dc-42b4-b818-688b32d5dba8","sequence":{"long":3942},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977614240236,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":389294},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c5ab2fc-aaba-4bce-9cdd-3759a5fee135","sequence":{"long":3943},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"091700f7-4cf9-4d93-9029-88079e89da2f","sequence":{"long":3944},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb37289c-dc2e-4144-802b-76811f8730d5","sequence":{"long":3945},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":25},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"047114a8-467b-11e9-aeb8-080027fc76ba","type":"SUBJECT_PROCESS","cid":1377,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582978093935240},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28fe5396-bf4b-40a4-b400-edc5f0f7d050","sequence":{"long":3946},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1377","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1377","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33150f41-9aa0-424f-8de7-186d0a3ad72d","sequence":{"long":3947},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"38944848-7de6-8d54-a67d-1217648d35c0","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a4f76dd-2f97-4cd0-8eff-683ec5452bef","sequence":{"long":3948},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582978093935240,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/named.sh a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfda3187-df52-4e0b-ad57-3b4e2eb48ff5","sequence":{"long":3949},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ca1ff2c-90c9-493b-9075-55a72679017d","sequence":{"long":3950},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c7ea0ff-cde0-480d-a0e7-07baeff71d75","sequence":{"long":3951},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14a280ec-2309-4ed0-b4f4-d4fe90471faa","sequence":{"long":3952},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c25fccf5-d1f1-4a30-8e91-dbd492ba34ae","sequence":{"long":3953},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"365cb305-16c5-40f4-8309-b235792d55fd","sequence":{"long":3954},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbc6b5a6-6593-4634-9957-38131b50777d","sequence":{"long":3955},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b985540c-8e65-4f89-ae73-608b206e7569","sequence":{"long":3956},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd1905bf-b222-42ed-8f49-d0ee0196cd3a","sequence":{"long":3957},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba9925de-2a6b-47e1-b68c-b2f7b71ac993","sequence":{"long":3958},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"412a6c34-558c-4f59-96e1-9790653edac9","sequence":{"long":3959},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dca78144-90d7-4b97-bc92-25fdec480b33","sequence":{"long":3960},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cec5d818-ab55-4dee-b5b6-0e7c7916390d","sequence":{"long":3961},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e012cf8-17bf-4aed-b120-96eb31e6805b","sequence":{"long":3962},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3527f1b5-b5b6-4295-b677-6fb789d00dba","sequence":{"long":3963},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c11fae3-f235-4ef1-a458-f45339fa979e","sequence":{"long":3964},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e7d21f8-41a2-40c9-9d6a-0fbced188ad0","sequence":{"long":3965},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15349973-c571-49bb-88fb-8860ade473c6","sequence":{"long":3966},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7367cc4-b25c-4f13-baa2-fa712d49ef25","sequence":{"long":3967},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c50e213e-4c6e-4681-ac9a-3cb1b67537f2","sequence":{"long":3968},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582978093935240,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/named.sh a","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6bd4bca-e8e9-4c89-84b5-f48e34a78371","sequence":{"long":3969},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41bed6f8-885b-4985-8c17-0cca6ffbe724","sequence":{"long":3970},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30cbb1e7-5d58-4812-960e-ea25baa1006f","sequence":{"long":3971},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ab8132f-2263-4b01-a8ea-0e346bf213bb","sequence":{"long":3972},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edc59e49-db20-4063-9b92-a6d77f12e338","sequence":{"long":3973},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7105d195-9639-43aa-bd60-492162ae06fc","sequence":{"long":3974},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2830327d-d679-4681-80f4-ec15940cb1fc","sequence":{"long":3975},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1880778-a830-41e4-b01b-e1038ef5623c","sequence":{"long":3976},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3599066-4424-4be1-8711-d61036892519","sequence":{"long":3977},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6f03adc-4f45-46ee-88ef-842aa58ba706","sequence":{"long":3978},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab2659b9-b00e-4801-be1c-150719ac65ab","sequence":{"long":3979},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fe85566-cb87-49b4-a0f3-fede75a2e5fb","sequence":{"long":3980},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3055be17-52d4-4986-8f1d-1b928ac95cc1","sequence":{"long":3981},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"491cabbf-a6c0-4165-b758-910de59d3091","sequence":{"long":3982},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be568c5e-92c7-4ecb-a6d7-febff7cb9a5e","sequence":{"long":3983},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1550659-56c6-45b4-8fc1-82a5dacf87bd","sequence":{"long":3984},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24390400-565d-4b06-803d-68a81176676a","sequence":{"long":3985},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9498409-61c1-4804-b0ee-e01a14322c01","sequence":{"long":3986},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23daaa84-bc8c-41fd-947f-77f074f112cd","sequence":{"long":3987},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65d41844-3ee8-443d-963a-63adec518b8f","sequence":{"long":3988},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5e556b2-9e42-4d37-8e27-d0209051a444","sequence":{"long":3989},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72b981b1-90a6-4431-b3a7-3d2cc11264ea","sequence":{"long":3990},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c701ec6-aa14-40c6-99bb-edb4983b7515","sequence":{"long":3991},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4facd1fd-b492-4bc0-9699-7f30d865d99e","sequence":{"long":3992},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd5d8252-8147-4469-bec5-e0df3169d9ae","sequence":{"long":3993},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afe07846-f691-430a-b111-d8730f92240f","sequence":{"long":3994},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dee291ec-e2e0-40e8-a94b-f60179f0a560","sequence":{"long":3995},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccf85418-c5ea-47d3-be38-dc2ebbf3e328","sequence":{"long":3996},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3aae9a9-4bc4-4faa-b4bf-aa83516aba51","sequence":{"long":3997},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82999cd4-cb21-4029-b17e-ae514cf50677","sequence":{"long":3998},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7eb7c4ba-2748-44f9-bc8a-8e49610d2b83","sequence":{"long":3999},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cbe577d-5c34-4184-bd11-a6494f049bb5","sequence":{"long":4000},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e6a9c6a-bf2e-4beb-b848-d90e6775099f","sequence":{"long":4001},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"800380e0-60d8-4283-aaff-443cbd5896e7","sequence":{"long":4002},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f018be96-a543-48d2-ab0f-ec442f2daf02","sequence":{"long":4003},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fef9dbc-382f-4b47-a59d-6a82e16204e0","sequence":{"long":4004},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"256a615d-c1bb-4796-95b0-1fa0d2f87a04","sequence":{"long":4005},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e23e95aa-d224-44ef-bc9d-f3d0ee6da761","sequence":{"long":4006},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35efeec2-ba7e-4593-ae09-8e90aef4ad08","sequence":{"long":4007},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5d84be4-202d-4852-b676-ef9db3e775de","sequence":{"long":4008},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cae2765a-7060-486a-9e27-3d837a2d3781","sequence":{"long":4009},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcb7393e-9773-400f-a6c1-87e3c4884420","sequence":{"long":4010},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08352b7c-0b09-4030-87a8-4e30b12289b7","sequence":{"long":4011},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a27cd914-2e55-4529-8421-65b0f5929d1d","sequence":{"long":4012},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a592d508-ab4b-41ff-b92f-b572850f39b6","sequence":{"long":4013},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a46c3fd3-f00f-4f8b-a570-3b2e11607fb0","sequence":{"long":4014},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b8fffc1-3bae-4ead-b174-43ec2523c442","sequence":{"long":4015},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a5aabaf-fcc7-4020-b44d-98f07cb45b28","sequence":{"long":4016},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e852404a-60b2-4d7e-9475-9afc741bed63","sequence":{"long":4017},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f3dbea4-2658-4587-b02f-4ed8dc1e90db","sequence":{"long":4018},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f603f1ab-dbd7-41c2-9428-7203444e038a","sequence":{"long":4019},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09adba69-e95e-4e33-b97a-a32f1dc08700","sequence":{"long":4020},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2909356-7f51-464b-babe-46e86e66f5be","sequence":{"long":4021},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e01099c9-a5ed-42ce-8e2d-f5b2047c89a4","sequence":{"long":4022},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6a1a879-173c-4bd3-890e-dc79be44a78c","sequence":{"long":4023},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3b7ee05-e33d-4d36-9be8-ca14847c7593","sequence":{"long":4024},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6e98fea-650b-4f4e-a2d4-aee0ccf0479e","sequence":{"long":4025},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f253cc6b-1b32-4f0a-81c5-4c93692743e5","sequence":{"long":4026},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f46314e8-46c9-460b-979c-6f8c8241a544","sequence":{"long":4027},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5764446-1946-4291-b605-83e9be299b4c","sequence":{"long":4028},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10722cf5-2491-4060-a18a-6cf7441464ff","sequence":{"long":4029},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4285f76f-6cb2-45ef-abb7-6536ea71fc17","sequence":{"long":4030},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b76cfbf-ac2a-4798-b36c-d7bb9fcf3e88","sequence":{"long":4031},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":286},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"690108f3-9278-4ac9-a28e-c7e68d6515d3","sequence":{"long":4032},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":253},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"04724181-467b-11e9-aeb8-080027fc76ba","type":"SUBJECT_PROCESS","cid":1378,"parentSubject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582978093935240},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b5f89a7-cc20-4145-a3e9-5d68e01ffd51","sequence":{"long":4033},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1378","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1378","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2859ce1d-5a7e-4956-ba31-2bcbcb0f9caf","sequence":{"long":4034},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db867428-cd04-4808-9606-99967fb336c9","sequence":{"long":4035},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":271},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"04724c46-467b-11e9-aeb8-080027fc76ba","type":"SUBJECT_PROCESS","cid":1379,"parentSubject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582978093935240},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"770627d4-3898-4977-a27a-f345ec43a063","sequence":{"long":4036},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1379","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1379","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71922a8f-78a0-43d4-96ba-710eab889cc2","sequence":{"long":4037},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d79b3d23-7edf-4ec8-917e-7840d7dfa45a","sequence":{"long":4038},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca67bfdf-1f18-4885-90e6-433093817ace","sequence":{"long":4039},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdd06c87-d4e7-402d-aa9e-63a340a1cb48","sequence":{"long":4040},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"647152b0-af94-45b5-89cf-e1593e75fbf3","sequence":{"long":4041},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582978104376001,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"242a43e0-09be-47ce-9e48-ebfb0ae15315","sequence":{"long":4042},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"b0bc4f68-c591-a656-91c5-dcf6b6a6dfa5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46c0ad12-ed51-4ca1-b704-ebd623e918d9","sequence":{"long":4043},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"b0bc4f68-c591-a656-91c5-dcf6b6a6dfa5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./named_writer"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582978104376001,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./named_writer a","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1e24092-6a23-4ee1-b551-7c80e75bd572","sequence":{"long":4044},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97d5b2bc-d7d9-4b17-8fc5-1118d7529193","sequence":{"long":4045},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"001386d8-1141-497c-bd58-13c4dc97a657","sequence":{"long":4046},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"083acab7-6ece-4fdf-aae5-78a5d99d82d6","sequence":{"long":4047},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94e0c709-6818-4c13-aaee-b62303cab996","sequence":{"long":4048},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1a344b0-c4b7-4719-9206-0d1505b56081","sequence":{"long":4049},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24d7e67d-582c-432e-a404-4ad73a7ed320","sequence":{"long":4050},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65eb4ea9-0c0b-4130-b497-a060548650d1","sequence":{"long":4051},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb0d3306-ca32-4c7f-9a19-c7932c0362ee","sequence":{"long":4052},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db279f1e-6c6a-4901-afd3-9903abec8d85","sequence":{"long":4053},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"171a7b12-52b4-4fbb-81b2-10c28ac74ecf","sequence":{"long":4054},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"565a2a7b-5d24-4b96-afdc-0b8761d371ff","sequence":{"long":4055},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d299348-38bd-4982-b32a-55dfd35784b5","sequence":{"long":4056},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a2b3a68-d7f0-4328-835e-3811f4b6825b","sequence":{"long":4057},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"222fb056-9ebd-4cb8-9bce-5ef74959096e","sequence":{"long":4058},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62ab60f9-f9c6-4018-8577-23294707bab9","sequence":{"long":4059},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5e489e0-d287-4551-93fe-488fe2a58995","sequence":{"long":4060},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e48e301-51da-4eb2-9c4b-e0e3dffd62e3","sequence":{"long":4061},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ef9f3a5-6d24-4ba8-87da-d632ed1543e9","sequence":{"long":4062},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d12e8bc1-2881-4933-9067-fbf5afb51ed4","sequence":{"long":4063},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dc86b5b-d144-4d84-9f1f-bed98a7993f3","sequence":{"long":4064},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":27},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12e30f9f-980f-4fac-b880-376e1956813d","sequence":{"long":4065},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a899de10-320b-4158-9a97-f4259accf148","sequence":{"long":4066},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ede404d8-1e5e-4a54-b306-2dca72805da4","sequence":{"long":4067},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"143b6870-3fc6-49a6-815a-5ae9b0433a4d","sequence":{"long":4068},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a9f4d15-5c6d-4572-9e66-c19b3433e908","sequence":{"long":4069},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c722fa58-6130-415c-a72a-44110aa753e3","sequence":{"long":4070},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ada3fee-7875-4005-945d-b03255f7a595","sequence":{"long":4071},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c022b2a-9175-4dec-abfa-277c47675fc3","sequence":{"long":4072},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8994d736-3969-43dc-a892-9a629eb992ad","sequence":{"long":4073},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdf5bce7-2a71-4fee-a24c-29f33373db7a","sequence":{"long":4074},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6da79c6-89b4-4de7-a3eb-984bf8f67b69","sequence":{"long":4075},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82c32605-2cad-4286-a724-b46097410a0f","sequence":{"long":4076},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6ded7c8-4590-4703-b9ba-4bed78326c79","sequence":{"long":4077},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9aa29459-b021-4e15-8fa7-f9070e88b8b9","sequence":{"long":4078},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978653885691,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":403239},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"346af04a-65f7-43d3-97c8-8c7da8dd5aa2","sequence":{"long":4079},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d05f5c99-7051-479c-b28a-3b8a5b2bd2b0","sequence":{"long":4080},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30565807-4d7f-4b30-ba75-5149761d92f5","sequence":{"long":4081},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f891bc6-676d-4a9a-8829-cc271f51554b","sequence":{"long":4082},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f8fd362-491c-415e-ace9-f351ceafb5f3","sequence":{"long":4083},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa6d57d1-0052-480d-b645-bac106059bd6","sequence":{"long":4084},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62565226-c968-41f8-acf8-e3cdec0c05c9","sequence":{"long":4085},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"050e3275-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1380,"parentSubject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582979123878126},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"444783f3-cc2d-4613-b963-5ccc1e6ebfb7","sequence":{"long":4086},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1380","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1380","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dffba26e-c1d4-4515-a4c3-1732ad5953a9","sequence":{"long":4087},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d13b936e-e1a2-e756-a2e1-63e636e7e7c5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4701a93-7413-44c9-bf8a-a38c774f153c","sequence":{"long":4088},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"d13b936e-e1a2-e756-a2e1-63e636e7e7c5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./named_reader"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582979123878126,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./named_reader","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6268079-b533-4ce2-abcf-b078ca3528b5","sequence":{"long":4089},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40f251a0-d20e-4a9d-bf6a-e954393d2d81","sequence":{"long":4090},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f73cb1d-4fc3-49b0-aa54-705166383087","sequence":{"long":4091},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d61ef68-8b50-4a5f-946a-b8ffc7b6117c","sequence":{"long":4092},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a180fb6-005d-4b89-8a28-13b0b1216e29","sequence":{"long":4093},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b670e6b-90f5-4442-8015-849e785786d3","sequence":{"long":4094},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a46dbd03-b2f6-4ede-a588-1d8de22a5913","sequence":{"long":4095},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1af00b0c-a4d3-487a-9e36-ddeb72e4f255","sequence":{"long":4096},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b4aec25-dea6-4081-8848-20ab4c566999","sequence":{"long":4097},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"445317b5-82ac-42da-a748-055b993a02df","sequence":{"long":4098},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c831eba-dee1-45a8-8129-75dfec5d504c","sequence":{"long":4099},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9daedf7a-b8fe-4fd7-8960-68b6824720af","sequence":{"long":4100},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1683c8db-045a-4d8d-a8d4-e9626723a6ce","sequence":{"long":4101},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72fcf6c9-ab0c-49da-9052-dec0f9f74c12","sequence":{"long":4102},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4349a2e8-acff-475a-934d-25d755a1aecd","sequence":{"long":4103},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b5d49ed-ad6c-4b4f-8921-272c832dbe5d","sequence":{"long":4104},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ac603fb-5685-4077-b57d-0b89ea2dab7f","sequence":{"long":4105},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bb3f141-c871-49a1-9a46-97aa15de0cfa","sequence":{"long":4106},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7a661bf-9f05-4a4c-98d1-2067ba33d635","sequence":{"long":4107},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d2b2e05-7095-48db-b7d5-551736427742","sequence":{"long":4108},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":27},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"eafcf6b5-df06-685f-86df-21037f68996a","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70b5f1ea-0068-4f57-9079-7dc38c79a1a6","sequence":{"long":4109},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"eafcf6b5-df06-685f-86df-21037f68996a"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"04732720-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d8ea72f-f6dc-4903-92ca-f4b3c40fc8b3","sequence":{"long":4110},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"eafcf6b5-df06-685f-86df-21037f68996a"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"04732720-467b-11e9-aeb8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cde82df0-98ca-4c18-86bd-6932e19803bb","sequence":{"long":4111},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"04732720-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"857c279c-4af1-4f5d-be24-40e558da7c1e","sequence":{"long":4112},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":18},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b2ddb2c-104e-45e8-a3db-44cd65bb9e42","sequence":{"long":4113},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"eafcf6b5-df06-685f-86df-21037f68996a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"098183aa-3307-475b-ac43-f430343122eb","sequence":{"long":4114},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"568674db-9a48-4efe-8dc3-694e1cde8409","sequence":{"long":4115},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04732720-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"498215a7-47f3-4864-a712-30788a223d54","sequence":{"long":4116},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04732720-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73733ffe-488a-4549-8085-baf8463fee23","sequence":{"long":4117},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48c15930-74d7-43ef-b91c-fb2642561e1a","sequence":{"long":4118},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"662847cf-5471-4f9a-9ced-9d9c9d242ba3","sequence":{"long":4119},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05dfa5f0-6c7e-4cbe-9e03-8a52d6cd7a66","sequence":{"long":4120},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bde8ba7-2acd-47a9-b0c0-934adba41b8e","sequence":{"long":4121},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":859},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8abc849a-eabd-497f-8bb4-4d0b45ff5f03","sequence":{"long":4122},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1041},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"050ef741-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1381,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582979123878126},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffa54852-7bb3-4ebc-bbb6-f11932d49e3d","sequence":{"long":4123},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"050ef741-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1381","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1381","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba459130-8f1e-41af-9a6d-d99d4bfb4584","sequence":{"long":4124},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979673936273,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":408126},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c82f60b1-a8f4-4026-a99e-dc9186ef46ff","sequence":{"long":4125},"type":"EVENT_OPEN","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":{"string":"/etc/cron.d"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980015553697,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00e808"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17f26ba3-bbae-43a1-a091-c00fbbf96ebc","sequence":{"long":4126},"type":"EVENT_CLOSE","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980015553697,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88bf7a7c-af68-43ce-aad9-b18ecaff799e","sequence":{"long":4127},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":408126},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8737dc7-abf6-4b7a-81b1-a6b5d44912e8","sequence":{"long":4129},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abe9e02a-debd-4d56-89c4-9cd3657f13a8","sequence":{"long":4128},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06303c34-4255-4a40-9007-82ddeb880895","sequence":{"long":4131},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2ab82c5-083f-4c37-8d85-7a1698c4424b","sequence":{"long":4130},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9161ae6-bff1-4aa7-8c67-a1719986d538","sequence":{"long":4133},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7f58492-3d1b-4d87-b034-c37331aff3b9","sequence":{"long":4132},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0d48bd6-726f-4fbc-b289-1d64c24c02fe","sequence":{"long":4135},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e39679f4-971a-45c8-82f2-161a505cbca5","sequence":{"long":4134},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"179a0643-9ae7-41cb-89be-45703a765087","sequence":{"long":4137},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3790194-f083-4d97-91d3-a2ab37fa425e","sequence":{"long":4136},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff87e14d-7f67-45c6-9275-aeddfb030408","sequence":{"long":4138},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c507ae2-8ec9-4143-b220-c58871bfba21","sequence":{"long":4139},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f14cb0ac-edfa-4537-a16f-6e31bf463b4a","sequence":{"long":4140},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57b94a0f-f4f5-4d44-8c84-aa9117a99e5d","sequence":{"long":4141},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4918},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e88314d6-b808-4d8c-9aff-29119011592d","sequence":{"long":4142},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4971},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4990c301-df12-46e9-87f2-a4727332a73a","sequence":{"long":4143},"type":"EVENT_WRITE","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e65d73d-47d0-428b-9a71-042c8c9c9560","sequence":{"long":4144},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64c90b33-0bb5-42d8-bbe7-01c42fe19d96","sequence":{"long":4145},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9472e69-8c87-4486-bb3d-223bc7f5e05f","sequence":{"long":4146},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4005},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f437951-3ebf-4180-8181-d299e68c5f35","sequence":{"long":4147},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4058},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae4e3e64-e86d-4928-b27d-4f0242749881","sequence":{"long":4148},"type":"EVENT_WRITE","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c83f006-d22c-4235-80e6-538517071cfc","sequence":{"long":4149},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c383fb9-9de7-4e1e-a3dc-8aa51454df9f","sequence":{"long":4150},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97c01042-104a-4af5-be47-b8f788a6a858","sequence":{"long":4151},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5010},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14032ff8-60dc-4400-90ad-1fc4e690b248","sequence":{"long":4152},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5063},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a3ac7ba-8eba-4389-9fb0-6b19459e8b19","sequence":{"long":4153},"type":"EVENT_WRITE","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc1188b2-0485-461c-b90d-1a1f4f7c7efc","sequence":{"long":4154},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ad4b089-701c-446b-84c9-44bbba383768","sequence":{"long":4155},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2df20ee9-2717-4032-9327-3f874ad8574c","sequence":{"long":4156},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4883},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9062bab8-2370-4b4e-9a1d-8d65c10d60b2","sequence":{"long":4157},"type":"EVENT_WRITE","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"240583de-685b-412f-aba7-f8229f24c0ab","sequence":{"long":4158},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"711f23a4-66d3-416d-8e61-ae703e41f6c8","sequence":{"long":4159},"type":"EVENT_SENDTO","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"520","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2c4c9cc-ab19-4f5b-aca5-f483583538f3","sequence":{"long":4160},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"520","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dcb3019-607a-4853-81e0-8966705c2a64","sequence":{"long":4161},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"280185ec-6769-41ed-8230-f2bc4ef68a48","sequence":{"long":4162},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"050ef741-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"050ef741-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6c15b24-f1dc-44a2-a344-e2e07f4eff5c","sequence":{"long":4163},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8b0605e-bb36-42a8-9673-f21637d26ca2","sequence":{"long":4164},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"05a8917f-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1382,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582980135150042},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e433a147-41d5-4baa-8ce9-3a3cd00c030e","sequence":{"long":4165},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1382","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1382","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cee0fb0-350b-4050-a204-4cafb9d20511","sequence":{"long":4166},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"7eec5b1a-792a-5556-aa79-9b231655b451","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c03fe1b-d046-4bc9-be11-8cb01ca72f31","sequence":{"long":4167},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"7eec5b1a-792a-5556-aa79-9b231655b451"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./shm_exfil"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582980135150042,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./shm_exfil ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b618d8f-1bd5-4716-b809-15a5ab7405eb","sequence":{"long":4168},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d657924b-ac6a-41b1-a2cb-98704fc7ac22","sequence":{"long":4169},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbc8ded5-ad5d-4c5f-bb3d-a4834eb4cedd","sequence":{"long":4170},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c90fbcc-1539-4519-8bc1-c6c4786e3ca3","sequence":{"long":4171},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b80cd9e-8d4e-420f-9251-4d0a1da99da4","sequence":{"long":4172},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6234fb7-f834-480f-b294-10dc1e50b83d","sequence":{"long":4173},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"554c0e7e-4743-45e7-9fd0-0230adecf780","sequence":{"long":4174},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b507f08-a5d5-419e-89bb-8e8a17defb42","sequence":{"long":4175},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980684087639,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":413024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd82475d-ef4a-4c1e-87fc-2149d9530332","sequence":{"long":4176},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c6fd861-c49d-469c-913f-81eb9efb3c9c","sequence":{"long":4177},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1fae58e-211a-425c-93d6-e7580e6e5bca","sequence":{"long":4178},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":843},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8bfa94e-9dbb-4ff9-9d87-416a88b4f8a7","sequence":{"long":4179},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1092},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"0644af0a-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1384,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582981158328683},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"360a25cc-8b9d-4467-8986-82b1bf038adb","sequence":{"long":4180},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1384","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1384","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a519a0a6-8e96-4572-b040-a85115a5e5fd","sequence":{"long":4181},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"585d0f24-394b-41cb-b948-d93d24d4ec7a","sequence":{"long":4182},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582981158328683,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa2569a5-7f27-4b7f-ac31-eaa6a79855ee","sequence":{"long":4183},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b9ad203-30a8-434c-a0cb-43ec4ca836b4","sequence":{"long":4184},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73cdae4e-1095-464b-827c-80d363dd2403","sequence":{"long":4185},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5467b3dd-b4bb-4f9d-9ea8-f957ac814ad5","sequence":{"long":4186},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49fa0fa7-ce6f-4c0a-8d4b-a404823c24c6","sequence":{"long":4187},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62eed9ff-68dc-4c46-93c9-70da435de965","sequence":{"long":4188},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebf8698a-72ae-41b3-b365-7139f29ee6f3","sequence":{"long":4189},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99e80458-d08c-4a29-8d46-997815c42f07","sequence":{"long":4190},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37119e23-5b27-4eb5-85c4-089aed6c5f77","sequence":{"long":4191},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca315334-999e-4cc2-8ea3-2ba28bd5b32e","sequence":{"long":4192},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"928bbe38-3600-4b57-8dfe-2867a6ad04df","sequence":{"long":4193},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f363d26b-86a6-4a06-914c-3ec7cf484e2c","sequence":{"long":4194},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4b402b1-b340-4b6a-8cf1-84fe0766729b","sequence":{"long":4195},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb73d4a3-52f4-4899-b7ea-2dccec1ee952","sequence":{"long":4196},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b666ea1f-a370-45cf-98f3-a61178408bd7","sequence":{"long":4197},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f89bb4c3-a808-497c-b547-bd75755961c1","sequence":{"long":4198},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"179bfd60-5238-41ed-bf00-0bf782af9ba5","sequence":{"long":4199},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddec2843-3c3c-4891-ab78-c0ae59a1cf08","sequence":{"long":4200},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb242684-233c-4fa5-abeb-ca33cd46a2cd","sequence":{"long":4201},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6495483d-f884-47ef-930a-02161f0328e7","sequence":{"long":4202},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981694131361,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":415975},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5e1b3ed-73cd-46c8-8dee-d2eae30118aa","sequence":{"long":4203},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":415975},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73b2941a-e087-4d63-8967-476adbefa0c6","sequence":{"long":4205},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44e836ba-c28b-478f-ad6b-7e056d5dad97","sequence":{"long":4204},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b030c07-1a3c-4b19-aa4a-50bd4d560ef4","sequence":{"long":4207},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53d12b5d-ca02-4397-b2d3-1e772e6334f9","sequence":{"long":4206},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ead26348-cc37-47ff-9c24-d59b41801742","sequence":{"long":4209},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"962b5ab8-4736-4ed1-b4c5-e42183d997d5","sequence":{"long":4208},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09b7be93-3d37-4560-8640-a9350d0e9866","sequence":{"long":4210},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4770f234-379f-4b00-9477-35a8dad3f1fa","sequence":{"long":4211},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81f96cfc-f6cd-4678-b8cf-82dd2e42deaf","sequence":{"long":4212},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"038153a0-b8be-4cb3-beab-d9a919da5f9c","sequence":{"long":4213},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4894},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e186a67a-f86d-4e6e-b975-bd8507fcc0f0","sequence":{"long":4214},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4947},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"849442f0-c88c-4aa1-a2ed-0d1b1ffd7f86","sequence":{"long":4215},"type":"EVENT_WRITE","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b4acb60-ae14-44e3-9fd9-e7f31e701010","sequence":{"long":4216},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3c91bbd-f102-4c7a-947e-e1abbf95a95c","sequence":{"long":4217},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea9091c9-7af6-4be5-ba2c-b1d8e63e1145","sequence":{"long":4218},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2947},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78c3732a-bd20-485b-bbcb-f20f90561e0c","sequence":{"long":4219},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3000},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"188f13eb-eed7-4169-9de9-13c95d16e364","sequence":{"long":4220},"type":"EVENT_WRITE","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4384a9dc-6831-4ec6-85a0-ebb966519d81","sequence":{"long":4221},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d95fbdd-f969-4164-bfa9-365827a2c7fa","sequence":{"long":4222},"type":"EVENT_SENDTO","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"521","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94b7dfb0-a6ac-491e-9e81-e45e03abe418","sequence":{"long":4223},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"521","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ed5aac3-a2f5-412a-b5c4-1e63737bba6d","sequence":{"long":4224},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b1cc3e9-ae9c-48d1-8e5c-f6e6e5272947","sequence":{"long":4225},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b0ce144-8dda-4afc-9bbd-ecf3d380d5e9","sequence":{"long":4226},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4787933-cdb2-4250-84b5-947589e5515d","sequence":{"long":4227},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982134345512,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c8debc6-ed86-4157-ae48-3af9c2b6f8fb","sequence":{"long":4228},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982134345512,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3dba0f63-9df3-41c6-a8e5-7af475972001","sequence":{"long":4229},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1606a0a2-e356-4362-85f0-bf8509bab6c8","sequence":{"long":4230},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5573073-b383-4cb2-a667-193f7a6617ac","sequence":{"long":4231},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"06dfb5b9-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1385,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582982174660438},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9334b726-214a-45a1-bb54-1e8de1a97f1c","sequence":{"long":4232},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1385","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1385","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79d0ff96-1c86-4b18-ba75-d98ea2931d55","sequence":{"long":4233},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"fdea8fdd-1295-d356-9512-4bf3c6d37104","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"204004a1-1d40-4874-9453-131f71336120","sequence":{"long":4234},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582982174660438,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/signal.sh a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8b9bd31-ad3d-4931-bd98-42cd12c7e973","sequence":{"long":4235},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff40436a-e8d5-4981-8928-6cf3614a8efe","sequence":{"long":4236},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e30948b-a5b9-476e-9e93-add58b98ad94","sequence":{"long":4237},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ca646a2-b45b-448e-8c6b-f0287d2443fc","sequence":{"long":4238},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d35978e0-2d6e-4daa-9335-dd4040ab3e0b","sequence":{"long":4239},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e05c941-df0e-4cf3-bbc7-410089e95ba8","sequence":{"long":4240},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9adf7b27-8a99-4238-99bb-ef1c2961ef71","sequence":{"long":4241},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5fdff5b-e295-4a35-9aa9-3d88b6aba1b7","sequence":{"long":4242},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c595fca5-4898-46e4-85ab-5d19401dad95","sequence":{"long":4243},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89562424-4941-43f1-bfcc-3ada6f1b571f","sequence":{"long":4244},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cee195dc-dadd-46b5-8257-3e4fc4630398","sequence":{"long":4245},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bf501dc-cef4-4977-a63d-5047529df07d","sequence":{"long":4246},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77525944-dbe0-4d98-8ab7-1f9f1de624bd","sequence":{"long":4247},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f2f8dda-c773-4e50-b362-6566e05d811c","sequence":{"long":4248},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"217a4701-15fd-4ed9-9572-1014c40116f3","sequence":{"long":4249},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7707be48-006e-4b70-b275-4dd424945725","sequence":{"long":4250},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67719dd6-7057-4980-9b30-3710daccb1bd","sequence":{"long":4251},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d45b2ce-4840-46d3-863c-da40a4f8ed50","sequence":{"long":4252},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c90fdef8-9617-4048-be27-8a98162e7bc1","sequence":{"long":4253},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11ce6323-cf6e-41a0-ab30-138161638ef0","sequence":{"long":4254},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582982174660438,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/signal.sh a","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79609c33-6bab-459d-bf1d-da0c2e07bd81","sequence":{"long":4255},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77aad221-71a3-42f8-950c-fd6ac2a1ee0f","sequence":{"long":4256},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5aa7cc83-d6cd-4451-b613-128a42ead806","sequence":{"long":4257},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c24708a-3078-4a4d-a872-1d2773b31b58","sequence":{"long":4258},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8bb4cd1-4cb6-4542-b80c-1830ef627784","sequence":{"long":4259},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7efa299f-ad45-4a71-b5d7-38f8bb89ee8c","sequence":{"long":4260},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bee129cd-22a9-40e6-ae2a-bb600dfdd40b","sequence":{"long":4261},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab23363c-73df-4fa4-876e-7e4ee023708d","sequence":{"long":4262},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"472dc35c-63ba-4197-8825-8ad3eb3b5a22","sequence":{"long":4263},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6876ac4-8825-42ae-a3ab-a48429fce605","sequence":{"long":4264},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"671f7248-4bc5-4f69-8eb3-87a7a4e764bb","sequence":{"long":4265},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29a1978c-ea60-45e0-a6c6-7c196da1993d","sequence":{"long":4266},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bdf731f-7d47-464e-a98d-04bf1b91880e","sequence":{"long":4267},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cc232b5-d0c1-40b4-806f-f4466eab58be","sequence":{"long":4268},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8cf8311-b536-43e3-b1fd-3f5e8fbab683","sequence":{"long":4269},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4123ca2d-2147-4829-901b-ebdc29ae7d26","sequence":{"long":4270},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb381427-5dc4-4947-9076-6e1c5d51bfab","sequence":{"long":4271},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a48865a-b0bb-4fdb-8b97-6699b0aeeab4","sequence":{"long":4272},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b31bd839-c724-4d9f-957c-6413739b9e19","sequence":{"long":4273},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dadd27f-1a46-4449-a133-8d461c864abe","sequence":{"long":4274},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19cd7098-6922-49c4-a646-02793a4624fd","sequence":{"long":4275},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52b6c121-cc4e-4443-9019-e978ea5ea3f6","sequence":{"long":4276},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4e773ee-b570-4e47-941c-1e043c0d6f67","sequence":{"long":4277},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d495c278-c835-4865-9d36-b58e5c5f4b23","sequence":{"long":4278},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d0fe12f-a414-4470-920d-70a9cbe0e46a","sequence":{"long":4279},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9230c935-72e0-40c4-93df-baf54205cebe","sequence":{"long":4280},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a17ea987-c198-4934-a8d8-dccfc8640c3f","sequence":{"long":4281},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd7d3943-9d9f-4da5-9f07-79681405dfa6","sequence":{"long":4282},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd0c7ff8-48c1-4dcb-b331-af3d18abcdbc","sequence":{"long":4283},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"831ddb73-5bd5-4b69-86b9-fb65a759e5ad","sequence":{"long":4284},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ce87d85-d1d9-4437-81b5-5dc46e52eeef","sequence":{"long":4285},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a20d7da-9b1d-4b10-9e1e-ec86cf83b6fa","sequence":{"long":4286},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5940003-58a3-4206-b29d-dcd249f0fa75","sequence":{"long":4287},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcbfee9b-c8d0-4d9d-aa67-56eca5c06469","sequence":{"long":4288},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0e46725-9999-4d64-93c2-897925538957","sequence":{"long":4289},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"310294ff-3573-47bf-9a1d-6caa13b0c06d","sequence":{"long":4290},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d7493a7-a448-4066-abd0-40888f5f1549","sequence":{"long":4291},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"585ad139-b02e-4435-8a76-34987163eac4","sequence":{"long":4292},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2397bc38-6f93-48f5-8748-3d4bd714b819","sequence":{"long":4293},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ec7af9c-42c0-419d-b7f1-df6e6638fef1","sequence":{"long":4294},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb16f958-2e7b-4bd9-8424-39c0a012c9b5","sequence":{"long":4295},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79a54a52-2334-4969-b648-53397e186465","sequence":{"long":4296},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee95f6ac-aa66-4190-9936-2b72c1b260e7","sequence":{"long":4297},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f6792c0-d803-4f8b-8d40-759e08447b3c","sequence":{"long":4298},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76e0f372-8249-4474-aa11-cee93d67b82f","sequence":{"long":4299},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f93d869-e3ac-4b18-bab7-2a152c22dcf8","sequence":{"long":4300},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a53a84b1-8421-4b88-a0c8-6614a0e2ad7f","sequence":{"long":4301},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01daa9b2-0792-4bf0-9495-310c3b9b95c3","sequence":{"long":4302},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a23e599-a986-4f22-9bca-363eaf041ec5","sequence":{"long":4303},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"438df433-9d19-4512-8dfd-61ce0d6a8474","sequence":{"long":4304},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08f8f8b5-30d8-4b1e-921f-dc5efb7efcf3","sequence":{"long":4305},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a70d189-64c4-49c0-885c-abdad765f78e","sequence":{"long":4306},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c432b50-ac42-41bf-8a8a-d17e84e52772","sequence":{"long":4307},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"631e374a-7ce4-4d89-9479-5138cdb76f54","sequence":{"long":4308},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e06e8e36-91b0-4499-9816-365ca358feec","sequence":{"long":4309},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48f59d2c-6836-40ea-89c9-7b40fdf33969","sequence":{"long":4310},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5122d58-f2f9-45b4-b614-8a86f366852e","sequence":{"long":4311},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3037b751-9274-44f5-b65c-6077116e9758","sequence":{"long":4312},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7152ef93-88c4-4e77-9821-1293670ee84a","sequence":{"long":4313},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16880b7a-19fa-4875-ae49-623973d2e5ea","sequence":{"long":4314},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af313bde-802f-469c-8d35-4ce8ed76d5a8","sequence":{"long":4315},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfae7504-6fb3-4aee-809d-7cf49d8daa1b","sequence":{"long":4316},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7ebd8b9-a826-40ac-aeca-80716cd24620","sequence":{"long":4317},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":289},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"945b3fdc-6d9e-4c79-b1a2-f0a8fedc514d","sequence":{"long":4318},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":245},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"06e087e7-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1386,"parentSubject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582982174660438},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8eefced-31db-4ea7-9274-a1543cb9d8b9","sequence":{"long":4319},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1386","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1386","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5712fcd0-9217-4dab-9f65-b8a53646f600","sequence":{"long":4320},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":44},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9b3227c-7da7-40b2-b8a0-f01fc02994e4","sequence":{"long":4321},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":263},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"06e09284-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1387,"parentSubject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582982174660438},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4f27fef-978a-48b2-b3d5-0763fd5b97a3","sequence":{"long":4322},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1387","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1387","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbd8d67f-197e-4f2c-8e3e-24547923b6f3","sequence":{"long":4323},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"085a4828-ca4c-4753-9cd2-b6bbc7456fdb","sequence":{"long":4324},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"758b644c-076f-4814-b7bf-17526f476049","sequence":{"long":4325},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e635cbc1-23cb-4f34-a0e6-12712dc9d51e","sequence":{"long":4326},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53f58dcd-de7f-44a7-b737-4da44811856d","sequence":{"long":4327},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582982174660438,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a630af81-0cc7-46fb-a243-87cd597b34e6","sequence":{"long":4328},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbd9d2a5-30f5-4c62-97b1-1856d61e4304","sequence":{"long":4329},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4ff8e74-f54a-41ef-a5d1-683012e3d5f0","sequence":{"long":4330},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fbd9508-a1b8-41f9-9167-651a4905e7a7","sequence":{"long":4331},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e481d58-3284-44ec-8ebb-f6b0f487a477","sequence":{"long":4332},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca8eddfa-f3d1-47e8-808d-fc777b27d0f3","sequence":{"long":4333},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f155f053-e7db-46e1-957f-2369e2e859c3","sequence":{"long":4334},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49e15df6-e50e-414b-b793-4f5ad5f9570c","sequence":{"long":4335},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e62ef6e-98b6-44a6-8d63-d9e36e1f5616","sequence":{"long":4336},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d35d1496-3872-4202-9402-3beef9bd4d27","sequence":{"long":4337},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec8931c4-9b14-4e79-bf70-2711d8ba21e8","sequence":{"long":4338},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e0872f2-5b86-4f9c-8225-e868325f5eb5","sequence":{"long":4339},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1548958e-dd99-4caa-8298-7396cfe2b679","sequence":{"long":4340},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5f68b85-6a98-47f0-aa1f-990f6e88daa2","sequence":{"long":4341},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"010fe32e-881b-4b5c-8e6f-b0db3e85cc13","sequence":{"long":4342},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e77cbf23-151c-4fa6-ade5-f0c289f0bd3a","sequence":{"long":4343},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abb36e1f-a606-42b8-96c7-8437fb4ab8e0","sequence":{"long":4344},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9939b799-e287-448e-9a7f-905b6277ba3a","sequence":{"long":4345},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c58426ba-4ec0-4737-b14d-6a6361d6795d","sequence":{"long":4346},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f7889531-95ae-715e-ae95-c4adae711987","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e01d000-8d56-48b9-b719-dcf7b62ecbae","sequence":{"long":4347},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"f7889531-95ae-715e-ae95-c4adae711987"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./signal_server"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582982183880903,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./signal_server","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8e55184-cce2-44f1-9206-e9ef2db5d79a","sequence":{"long":4348},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ce7f18b-58e3-447a-982e-4d39c6442f6f","sequence":{"long":4349},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1e417f8-0e9d-4667-b375-d6d001e79d17","sequence":{"long":4350},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59b136de-243e-4349-b5ab-f6be5e2b6569","sequence":{"long":4351},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50623860-3114-48b2-b273-b972214ecf4c","sequence":{"long":4352},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c1c7c3a-e12c-4643-bade-89334cb6a829","sequence":{"long":4353},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15d00366-8269-47a5-a1b3-29a3e320c6ef","sequence":{"long":4354},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"86731679-6196-845b-9661-bd57db846ad9","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22d83ed2-9692-418f-a31a-1e9c7aba0c08","sequence":{"long":4355},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":{"string":"/usr/lib/libc++.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"596bedf2-d444-40ad-827e-31cfe9d40787","sequence":{"long":4356},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"136d9475-8922-4538-8ece-bf096287cbd1","sequence":{"long":4357},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f8b6784-92ba-4369-980d-ae4291fe4725","sequence":{"long":4358},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78bf8e3e-03d9-4185-a9c1-5e60f9da63f3","sequence":{"long":4359},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23dd22d9-1eed-4f5a-8da5-64fd94d117f4","sequence":{"long":4360},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f5bcf23-845a-4234-b48e-f31574381dd3","sequence":{"long":4361},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d32387c-23ab-46c1-bb30-5d0dd002f3cf","sequence":{"long":4362},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ba307e7-f22a-42b8-8bbc-1a8da822cd1b","sequence":{"long":4363},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9fb3d40-2901-4abc-91b1-39abc7557739","sequence":{"long":4364},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"11055fcc-3e6d-ad52-ad3e-07c112adcb50","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3e22a14-3bd6-443e-a7da-6a93275b204a","sequence":{"long":4365},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":{"string":"/lib/libcxxrt.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aae6de1e-0174-4485-aead-0ac70f9ed533","sequence":{"long":4366},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11b1a7e1-0858-462c-8e8c-516adc49a4b9","sequence":{"long":4367},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e7e53e3-38e5-441f-8cf4-fe1525676175","sequence":{"long":4368},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8820b6d-01bb-448a-b675-49d1b9a495b2","sequence":{"long":4369},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d8a3f5a-3277-40d5-931f-36914a7a36c1","sequence":{"long":4370},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7013350-ba58-4c91-992f-dba1b890c11d","sequence":{"long":4371},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01b393e5-4beb-40f9-b5f7-a4b0f7b2d197","sequence":{"long":4372},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d75211a4-f0e9-49fd-b306-96dfb97284d2","sequence":{"long":4373},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62f661cd-3b54-41ac-8687-09539f2d0ad9","sequence":{"long":4374},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d95c4faa-9e9b-4b0f-9534-724b3cee7a0c","sequence":{"long":4375},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":{"string":"/lib/libm.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c3b1e70-fca8-4d25-8d3c-495c62e1b86d","sequence":{"long":4376},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa24f3a1-79f2-4b23-925a-66e4b4c74ae7","sequence":{"long":4377},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c889f75a-fa4b-43b4-8e8f-1e3eb2f1ba55","sequence":{"long":4378},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0890cb48-4cf8-4cff-8413-8e9528e1f8e1","sequence":{"long":4379},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4527acc5-fcdc-40f6-810b-dfd0a232dfc2","sequence":{"long":4380},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdda0b4e-fcab-4f2f-bc32-b13ec551b3f5","sequence":{"long":4381},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"758920f6-6658-47b1-ad01-4c169b0e3cd1","sequence":{"long":4382},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7903c068-8c62-4164-b049-8d43dceef997","sequence":{"long":4383},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88f5f658-f212-40d9-b57c-4988c6729501","sequence":{"long":4384},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"a7ccc371-8123-4454-a381-b03504446d50","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d63fc28-119a-4390-a4a7-44ed038211aa","sequence":{"long":4385},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":{"string":"/lib/libgcc_s.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c3226b0-c77f-496b-9cb2-dce273d753f5","sequence":{"long":4386},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"609a74b0-d8a7-42f8-8b5b-18947a237853","sequence":{"long":4387},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982744802290,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":434234},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8736188d-952e-4f16-af86-aca87d15d587","sequence":{"long":4388},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40e84b42-fdf4-4db7-a0ce-bce1a0d9d5e7","sequence":{"long":4389},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f0e8d34-149c-4df2-a08f-76d335fd05c2","sequence":{"long":4390},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f0d21d6-8900-4052-9f17-739ce33cef51","sequence":{"long":4391},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e008cef-0b74-4809-94da-2fa1818bf998","sequence":{"long":4392},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6a1a8b3-672f-4496-9d0f-02af494ff0b1","sequence":{"long":4393},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d16e4e28-e2ef-4982-8a99-a2acd1aa4a60","sequence":{"long":4394},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"077cbe80-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1388,"parentSubject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582983204405852},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"824b3b93-e9ee-48f4-8fde-994ca5a9aab9","sequence":{"long":4395},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1388","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1388","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94df8af4-ab52-42e2-b5c3-d70e376103e3","sequence":{"long":4396},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"74643ad1-37f8-b356-b837-c78bb6b345d2","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c097e63f-f6e5-447c-9396-3004ed2e437d","sequence":{"long":4397},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"74643ad1-37f8-b356-b837-c78bb6b345d2"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./signal_client"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582983204405852,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./signal_client a","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9147f66e-1b66-4721-9261-17154bc0434a","sequence":{"long":4398},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e46db96-67f0-4aa4-a75a-950cf2807542","sequence":{"long":4399},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"581ce9fb-6534-4c8c-a3c6-c300d2fe9176","sequence":{"long":4400},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db574e6a-3622-4827-bf07-b44c8a7128c4","sequence":{"long":4401},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1127660f-af81-40a7-afad-c89f84ebd8a8","sequence":{"long":4402},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"528b6b80-4df3-4d4d-8fd0-fa27313e1091","sequence":{"long":4403},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91228b15-04c7-455c-aa6f-fc77e472a936","sequence":{"long":4404},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef8f5c69-b8ca-455b-b306-75ba67428c52","sequence":{"long":4405},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":{"string":"/usr/lib/libc++.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df44fb6b-a418-4635-b610-ad0099ce2278","sequence":{"long":4406},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5f3c827-282b-4633-89ed-f5d49c9fe030","sequence":{"long":4407},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90d90a8d-5451-475b-a238-eadcfbd1d480","sequence":{"long":4408},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1bb3a12-7f13-4fc1-a3d5-08a9578a2c0d","sequence":{"long":4409},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed578d00-b3de-433e-a4c3-cb99f0f25971","sequence":{"long":4410},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66ea7f62-3a78-4005-9204-e957f655c411","sequence":{"long":4411},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eaaee0e3-282a-4124-a751-3f1459e2c923","sequence":{"long":4412},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ededc97-cd33-4ff0-b4be-e714efc6d66e","sequence":{"long":4413},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a744ad68-7a2b-4a44-ab7f-c7ae3a4a1c66","sequence":{"long":4414},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99f6430d-fad0-42c2-ac24-8a0b4e82333a","sequence":{"long":4415},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":{"string":"/lib/libcxxrt.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9547ac7-622e-4096-a8f5-dce00519069a","sequence":{"long":4416},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70a7a5e4-fae8-401c-95b5-241350a205b9","sequence":{"long":4417},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9bf08db-d9c5-49f5-a2c9-2150f0ad5c51","sequence":{"long":4418},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57437f02-22f7-43d3-ba46-5b6735a404a7","sequence":{"long":4419},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24b8c351-739e-4f75-9f26-f76dcd5bd7d7","sequence":{"long":4420},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"201a3544-86b5-46a9-86a8-aa430f8f4334","sequence":{"long":4421},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13bc090b-1425-4e47-a614-7df8818b88b1","sequence":{"long":4422},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e426c944-b5ff-454f-af96-740fae78d4ea","sequence":{"long":4423},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a15da23-c529-47ed-a516-3cc68849057b","sequence":{"long":4424},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2b0c7b0-646d-4ea3-95fb-14aeefdf024f","sequence":{"long":4425},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":{"string":"/lib/libm.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de1005dc-3643-467f-bbf3-2fe8a3367309","sequence":{"long":4426},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3f7c273-0bd8-4966-9e90-ab5d2d24b96c","sequence":{"long":4427},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bf273a9-a36b-41e8-b7fc-455ef4bdf647","sequence":{"long":4428},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"deb8f467-09ce-4884-ab27-b99216a64976","sequence":{"long":4429},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"821c9170-8365-47f0-84e7-3f5217b6e94a","sequence":{"long":4430},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b2191d7-5dba-41e0-9e10-4b94440483ac","sequence":{"long":4431},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"238d3c06-4ede-4e0d-b3ff-6499840ae987","sequence":{"long":4432},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05c1d520-680c-48dc-8a20-9b1878dfc86e","sequence":{"long":4433},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3054b12-2ace-4ee2-85b7-a1c6dc8887ef","sequence":{"long":4434},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ec22d8e-b9a6-42dc-8ec7-24eac247b182","sequence":{"long":4435},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":{"string":"/lib/libgcc_s.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35e35938-cb8b-4da4-a087-48ecd786d6de","sequence":{"long":4436},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6012c6a2-c40a-45c4-90af-8a03ded4babf","sequence":{"long":4437},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f461cfb9-0cde-4e7b-9e76-0566669be84d","sequence":{"long":4438},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3600384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19f8fd53-0a52-4571-ad65-d32e7ee16007","sequence":{"long":4439},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3600384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95c200c4-f12e-4277-b09e-4d15485de059","sequence":{"long":4440},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3637248},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d05bf443-138e-47b3-bf4e-f3fb7bdc831d","sequence":{"long":4441},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3637248},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c81dafe8-08d2-437e-bf2b-f448be59f902","sequence":{"long":4442},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3690496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42637382-718c-4c85-a467-9a4c89091630","sequence":{"long":4443},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3690496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b71a3a25-a93a-4557-a109-4451d4506e01","sequence":{"long":4444},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7de86fc-bc72-4af1-880a-8158fa963f0c","sequence":{"long":4445},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90b7887f-6298-4c41-977c-10cce979296e","sequence":{"long":4446},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"447f350b-0838-47c8-badd-f8b93c12ad9b","sequence":{"long":4447},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06a9f08f-6dd5-4177-b135-fce5d9974615","sequence":{"long":4448},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3702784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b09b34f-4125-4fc5-82b5-a26a2d44105a","sequence":{"long":4449},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3702784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b559fce7-6136-44db-97bf-8d03d5aba386","sequence":{"long":4450},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4218880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f83ce183-0e79-4f5c-9fb1-65830fa619f2","sequence":{"long":4451},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4218880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85c4ccda-6bf6-4488-9d31-6946bc91365c","sequence":{"long":4452},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5550080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87761128-a93d-403b-8b14-81e286c8cf73","sequence":{"long":4453},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5550080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98d61e92-18aa-4412-920a-bcc61af76db8","sequence":{"long":4454},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1bc2cde-6b65-46cc-85c7-d1d59b22d81c","sequence":{"long":4455},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"addcb157-fc73-40a0-b591-9c1b82e018ad","sequence":{"long":4456},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1036cc48-9f37-41eb-b589-37156b950172","sequence":{"long":4457},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d73d08f8-793e-420a-aaf3-c2e137c968e9","sequence":{"long":4458},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"151935fc-b4c9-4c1c-9801-987f30aece67","sequence":{"long":4459},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88fe08e6-2c65-4f9a-bb4c-a1de2c76db28","sequence":{"long":4460},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"14d38b49-9f5f-7855-9f9f-80594578129e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cba1bd7f-7ac6-489f-af36-e0bb57f612c9","sequence":{"long":4461},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01e17003-8644-4822-87da-5fde7b3bc617","sequence":{"long":4462},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96116d09-38fe-40ae-86b1-5609344fedc9","sequence":{"long":4463},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08a293d9-839e-441c-8135-0fad6d9c81b6","sequence":{"long":4464},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58bb4ccc-ed3b-4dc2-ae4a-189067eebb5b","sequence":{"long":4465},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c55cfbc-540c-48d4-b600-abe9611d22a4","sequence":{"long":4466},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c98c296-9ce0-4df6-a7dd-8ff26925a48a","sequence":{"long":4467},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e50177cf-18ac-4907-b4db-06dcdbe679cf","sequence":{"long":4468},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3fa5ef7-dca9-4d35-b9fa-b9818ae2fbf8","sequence":{"long":4469},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54fc91ed-4c86-4eef-a015-188efed7aeb5","sequence":{"long":4470},"type":"EVENT_UNLINK","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_unlink"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bcc1378-77fd-4f16-842d-288635e6507e","sequence":{"long":4471},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ae341fc-c75f-4cce-9546-341e3f4c356b","sequence":{"long":4472},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2a525e7-92c9-4f84-acf7-f73a462202c0","sequence":{"long":4473},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f09e2d66-dd0a-40ec-a85f-2966c61a9d82","sequence":{"long":4474},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"deed16a3-45f8-4e12-b858-60d4986eea63","sequence":{"long":4475},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":792},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11760142-f77e-4018-9dd7-bb474f5aa18a","sequence":{"long":4476},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1143},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"077dfec4-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1389,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582983204405852},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86b0e40b-8402-44b7-ab7b-4e71f374b548","sequence":{"long":4477},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"077dfec4-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1389","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1389","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e7ac4f5-0617-4b6f-841a-10fd88049c0a","sequence":{"long":4478},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"077dfec4-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0741ca08-42ed-47cd-b14f-aabcea6eff2b","sequence":{"long":4479},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983773878145,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":443044},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01321267-e88a-48a5-af8c-e8dcdda04591","sequence":{"long":4480},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":443044},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4bd41ea-12b7-4f2d-8fa3-494438541528","sequence":{"long":4482},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"798fe9e0-b302-46f6-b814-9c4b626e3005","sequence":{"long":4481},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36daca43-0231-4c17-bffb-c485cb4de276","sequence":{"long":4484},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5f1d278-483d-4abf-ae7c-3de9da2f0c4e","sequence":{"long":4483},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"903de18c-543e-4266-af56-efb48b9cbb16","sequence":{"long":4486},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6a518f8-1da5-4820-8278-51f928b9816f","sequence":{"long":4485},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b636b436-31a0-4b5a-a88c-adead654b8df","sequence":{"long":4488},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0155306b-40e5-4871-a2cb-035fb2b87ab7","sequence":{"long":4487},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f5d1612-cdf7-451a-91a4-0ef135e6b52f","sequence":{"long":4490},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9f246da-1d38-4158-a0da-920801c043d2","sequence":{"long":4489},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4cfd78a-b3b4-487f-8ce4-c46c82813c6f","sequence":{"long":4492},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc0ab244-776b-4f5e-89b8-63c3f4b722b9","sequence":{"long":4491},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac291db9-6104-40b7-a40a-43fdb5adec06","sequence":{"long":4494},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e4aa158-ed94-4fcf-8b0f-1c42bc378b78","sequence":{"long":4493},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"272985e1-bf28-411f-9cdb-fedc848ca32e","sequence":{"long":4495},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21ee638f-4848-4741-8417-962b6f87a19e","sequence":{"long":4496},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b56967c5-8c81-4f46-a2f4-c8b49374add8","sequence":{"long":4497},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c47e684-fdb3-4a0a-abee-02eef84ef9db","sequence":{"long":4498},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4726},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6e5840f-2579-4be3-a3b0-6b40828477c2","sequence":{"long":4499},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4779},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5434585-74ac-44f6-95ae-ba07c99326dc","sequence":{"long":4500},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6998f64d-f7bc-4164-bb8b-f144f02f0481","sequence":{"long":4501},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b5c5e70-431e-4f5d-a5e0-34ffd7074dba","sequence":{"long":4502},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75a13af3-1435-415f-8318-14c467bcd1bd","sequence":{"long":4503},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4336},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27a59805-803d-442d-8157-fe7a63eb346c","sequence":{"long":4504},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4389},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7db3b336-fcac-4971-af55-0de767e5d79d","sequence":{"long":4505},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e676d5d-fefe-46c5-987b-4c1f0192395a","sequence":{"long":4506},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4be18688-1c26-422c-8748-bd85936e96ca","sequence":{"long":4507},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a63fb20b-d9ae-43cc-a124-65e0581d91ce","sequence":{"long":4508},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4695},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca673d43-8f9e-4018-bb12-d979912ee915","sequence":{"long":4509},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4748},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"235cca7b-cdcb-4857-ab7c-819795fcf41b","sequence":{"long":4510},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"358aa0b1-c8c6-48cf-b4fd-c49741d1b4b2","sequence":{"long":4511},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0a44653-586c-4002-8388-bf708af835d8","sequence":{"long":4512},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73dfe7b6-626f-4879-9312-eee01553fbb5","sequence":{"long":4513},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4486},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7f00f15-e5fd-4ac4-b8d9-bf5ee9994d5b","sequence":{"long":4514},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f17e6095-f85d-4977-9cad-62f671a36ad0","sequence":{"long":4515},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9c58cb3-9bf1-4d5d-bf3f-84b9ffed0c44","sequence":{"long":4516},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4313f9b5-6312-4ca7-8323-005f56e7d23e","sequence":{"long":4517},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4550},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"119d9ed3-825a-4680-be6c-b45e6ac8ae8d","sequence":{"long":4518},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae758664-7310-4efc-82f7-3460ed780f71","sequence":{"long":4519},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ba8d90e-2ef0-4ad5-b1f0-df8cf0367184","sequence":{"long":4520},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b8c27dc-7462-4103-b147-17faa7f6dc5c","sequence":{"long":4521},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4252},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"266cb86f-1834-4b9c-8e31-bb46d1f791f1","sequence":{"long":4522},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fe6c748-6a2d-447a-9cb4-8da6765bf506","sequence":{"long":4523},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"020231c9-4e3d-4b33-b6ef-2aa281fa3ae3","sequence":{"long":4524},"type":"EVENT_SENDTO","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"526","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8073425f-5229-4a79-a042-db7e02fa4daa","sequence":{"long":4525},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"526","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85f65f43-6957-4371-a83e-f76deee4b33b","sequence":{"long":4526},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8002215-d6a0-4f4e-be80-7190eefd8531","sequence":{"long":4527},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abbf8b3e-040c-49b9-b08b-0c3854dc2199","sequence":{"long":4528},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfbcb12e-eeba-48c3-ba37-d92a77a335dc","sequence":{"long":4529},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4539},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31f78e72-5c93-48fa-90e6-81b9903ea1da","sequence":{"long":4530},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"749bf6b9-e725-4189-aa0e-0c024a9aef3f","sequence":{"long":4531},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85d14f58-5367-4d62-8c29-b62ad41041ef","sequence":{"long":4532},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4603},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e34b9bb-3188-4b04-9543-9019c201c04f","sequence":{"long":4533},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984143894132,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75d29913-a6b8-4600-9776-5de14379d60f","sequence":{"long":4534},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984143894132,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8327d274-9a8c-4a0e-9aed-225b8af68aef","sequence":{"long":4535},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984143894132,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4305},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a7e750b-d4d6-4e4e-a0d8-2fdb31356b15","sequence":{"long":4536},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984154114648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a63d0958-c28c-46c2-904c-a76ceca909bc","sequence":{"long":4537},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984154114648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d189b4c-feed-4fac-9a61-4e5f91b5a0dc","sequence":{"long":4538},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984154114648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d3e995b-77a3-4646-bb68-faac3721c5b7","sequence":{"long":4539},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984154114648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e919971-03c8-4774-9839-0453df7bea7d","sequence":{"long":4540},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984167461125,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64849417-4bf4-4685-975c-3616854ef2de","sequence":{"long":4541},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984167461125,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab82829c-1b13-4918-b9b1-b23c5d93d8bc","sequence":{"long":4542},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"077dfec4-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"077dfec4-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0751a7cd-c77f-49da-a1cb-211c39aec019","sequence":{"long":4543},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc810daf-3cf1-4a5c-b768-3903bdeff4ea","sequence":{"long":4544},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"081702f0-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1390,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582984214699854},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d07a7d1-32ea-4459-a2bb-69e6fe5c2a07","sequence":{"long":4545},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1390","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1390","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc5f50a4-cb76-4abd-b7a6-87757c753611","sequence":{"long":4546},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"648191b4-da2e-2357-aeda-9bcac723947b","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"954b21f7-6b93-4f40-84a3-bb173814964a","sequence":{"long":4547},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582984214699854,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/stream.sh a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"959126a6-f9cf-42f5-bf1b-b882d604c391","sequence":{"long":4548},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5033cde7-e468-48fb-b839-e39e6d896395","sequence":{"long":4549},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ffb5a3b-80d4-4a08-9989-2190343e56ef","sequence":{"long":4550},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c096c5fe-ea40-49fa-9e02-c57f4a9fa581","sequence":{"long":4551},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"570ba47d-8964-4f34-96f8-842e2d0dd43f","sequence":{"long":4552},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d3032d7-a8c3-462f-8676-666706d86bcc","sequence":{"long":4553},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"294104b7-7e15-4e0d-80b3-e1875fc47ed8","sequence":{"long":4554},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48f9eeb4-8651-4856-836e-b62850b688cb","sequence":{"long":4555},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e80ed34a-d0ef-48f6-bc1a-f53313b2d4a9","sequence":{"long":4556},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82cd73fd-6144-4901-828c-599bb43ee369","sequence":{"long":4557},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd67307f-6a2c-4c20-88d9-870c55982557","sequence":{"long":4558},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3baf6927-375b-4c7e-910d-28884e596e5a","sequence":{"long":4559},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a536b70-589d-4bb9-b5d8-6c350c222dc6","sequence":{"long":4560},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6a7a4cc-a35e-4dcc-a085-5fb788fec5ab","sequence":{"long":4561},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"161e0bbe-ce54-47c7-bf6f-fc4fb8aa5c6e","sequence":{"long":4562},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af586b52-86a1-48c2-8ea5-551396c8c824","sequence":{"long":4563},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f54d88d4-ad30-4753-8e45-dffee442ea82","sequence":{"long":4564},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d176030-7677-4d6f-950f-612926a8205a","sequence":{"long":4565},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d8ca29f-ad3a-4a61-98c4-9007676978f3","sequence":{"long":4566},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53a3ef1c-a6c0-4bf9-94e0-205528948cdc","sequence":{"long":4567},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582984214699854,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/stream.sh a","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5bf95b0-bb1b-426f-9de3-d14b8571635f","sequence":{"long":4568},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4939d33-65fb-47d3-8872-12fc7422a375","sequence":{"long":4569},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8d5093a-4e32-45ad-aeee-7c36add1ecf0","sequence":{"long":4570},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fce3a39-09a1-4d3a-a997-f7859dbe1afb","sequence":{"long":4571},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03199bd4-13b2-4619-a52f-767240d5a31c","sequence":{"long":4572},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9eca8be8-dd2d-40ae-a5c4-6d77148b29dc","sequence":{"long":4573},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b94febc-ed95-4ef1-927f-886d823cefaa","sequence":{"long":4574},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee35ceb0-4feb-42ec-9865-b845a6d2a64f","sequence":{"long":4575},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d34c7dd-db0f-4456-9ebc-3e60a141c392","sequence":{"long":4576},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcb39a21-edde-4654-9124-18ff36e9728c","sequence":{"long":4577},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab5f580c-9c8f-4983-a106-8104d8f42c9f","sequence":{"long":4578},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3742f341-4a96-404f-bd3f-ebaa2fa992bc","sequence":{"long":4579},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60501a97-f4d3-4c01-a6ee-e7479da46d43","sequence":{"long":4580},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"747960ed-4382-45da-b29d-75e89f48199e","sequence":{"long":4581},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1d9526b-31b7-4a27-b56c-59598258bbe5","sequence":{"long":4582},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca91e9a9-211f-4b20-a4e0-d214faf8302a","sequence":{"long":4583},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"630380dd-8d93-4808-8cb6-e8429f6614ca","sequence":{"long":4584},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d28be2a0-acee-41ee-9c61-2ba7d65958cd","sequence":{"long":4585},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0f8c5dc-2a43-4374-914f-db39efe79ff1","sequence":{"long":4586},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a791045f-b6ba-4a4f-892f-e01417bef955","sequence":{"long":4587},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"722b8af7-a568-4363-aac4-d4569d4738c5","sequence":{"long":4588},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfed8739-e5aa-49ed-bd08-6b4b8e73d6d6","sequence":{"long":4589},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b60a8a2-30d5-4b6b-8e2c-4928bc14f06e","sequence":{"long":4590},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d47d483-cc27-4e81-b849-f90137276c87","sequence":{"long":4591},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f8f3482-16ff-4446-b7b3-bb9b943a4cf6","sequence":{"long":4592},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"453dded7-18c7-4d59-8b97-ab6cdebb8cdb","sequence":{"long":4593},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dced67e-77d5-4845-ae96-54efae6e4ee9","sequence":{"long":4594},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a0774a9-5de4-4671-bad8-f6c70ab6823e","sequence":{"long":4595},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf9fbac0-fb78-4abb-9ac2-8e85bf6d6e46","sequence":{"long":4596},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2aefa25-620b-422e-9311-c9391c5276fd","sequence":{"long":4597},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8998f90-5aa0-4b95-af92-85ceaccf3885","sequence":{"long":4598},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52af059a-3e0e-4b67-8672-03c2bb3d7d9a","sequence":{"long":4599},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c8d6bfc-3632-4847-a031-6842efc139f1","sequence":{"long":4600},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"def4a5b0-554d-4ba3-ba7c-ddaeffc7ba54","sequence":{"long":4601},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5019120c-443b-4976-82fe-e4393cc06ee2","sequence":{"long":4602},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f463e94a-f4bd-4ed8-9ad4-baa0e91c4c41","sequence":{"long":4603},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e809bf0-f518-412e-b01f-4817d7c675ac","sequence":{"long":4604},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c79b886-6e34-443d-8a99-65de0871b89e","sequence":{"long":4605},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d7f468b-c805-43f3-b539-8020822835f5","sequence":{"long":4606},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f84b8ecc-d690-458e-a893-6bcc848f71e2","sequence":{"long":4607},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51765433-aa2b-4639-83d8-c3022f0c933b","sequence":{"long":4608},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2c9f912-0efc-4474-9948-502238730cef","sequence":{"long":4609},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4c0938f-5718-4268-8180-1ac55a360ff9","sequence":{"long":4610},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"200e81e4-5f01-4335-9a4a-e221c5bb1de3","sequence":{"long":4611},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0c0a645-1d69-438a-a634-1b25e849210e","sequence":{"long":4612},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86f98b23-4184-495c-baa9-e5435f36eef9","sequence":{"long":4613},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33e2a9e0-612f-48d0-acee-1dd993fb79ee","sequence":{"long":4614},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fc1449b-ea4c-4711-8c0e-535ff6f21124","sequence":{"long":4615},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a184fa4-6d83-47a9-a82e-fc1101b7368d","sequence":{"long":4616},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"981027c8-f573-4a30-9151-0937ce40b957","sequence":{"long":4617},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40d64715-1226-4bdf-8969-58fbd5128bdf","sequence":{"long":4618},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e012a7a5-920e-4029-8831-0b33e3113f28","sequence":{"long":4619},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b16d9ca-07bc-4a09-a752-a3efefcf226d","sequence":{"long":4620},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b812b9f5-72bc-46df-a316-9ebd6db9a3dc","sequence":{"long":4621},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"564a5f0e-727d-4bec-b5c0-b1a46ec9ceb6","sequence":{"long":4622},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acec97d0-26c4-4e40-abb0-422e103e80df","sequence":{"long":4623},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f754b157-0d48-4c2b-9c92-08fe31bdf6f4","sequence":{"long":4624},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10331c01-24e7-4b95-85ed-724ee703ba29","sequence":{"long":4625},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2ed5517-ebe4-47c1-a8cb-6d678e0f1bea","sequence":{"long":4626},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15a8b09f-1e8a-4fe4-a8b3-0d1a72590bab","sequence":{"long":4627},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6f48ef1-5c96-484a-a283-c70042178aaf","sequence":{"long":4628},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cdbc46f-590c-4dc5-8628-521fab9e4d46","sequence":{"long":4629},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62eb1bd8-7287-402c-9085-2931d9615004","sequence":{"long":4630},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":290},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fd0ee84-3f1d-42f2-9c89-ea11fe22e5fe","sequence":{"long":4631},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":256},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"0817de1c-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1391,"parentSubject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582984214699854},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6eeb4b8-973d-4d0c-bea0-8d5c52951103","sequence":{"long":4632},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1391","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1391","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9ff5c4b-c32e-4360-a6be-f444ddb0cb3d","sequence":{"long":4633},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":34},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"325c45a3-63d6-4078-82a2-0aaccf3f6584","sequence":{"long":4634},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":274},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"0817e89b-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1392,"parentSubject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582984214699854},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92b563bb-9ce7-4d21-ac49-b0e12f01bb8b","sequence":{"long":4635},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1392","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1392","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ab8abed-543d-4db0-924a-9df29da37698","sequence":{"long":4636},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f4f538c-cec0-484f-a28c-200a4fe6511b","sequence":{"long":4637},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df036a13-7204-4d02-ac18-270412d74e78","sequence":{"long":4638},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4431dba8-a456-48aa-b8c1-fc703d52699b","sequence":{"long":4639},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23f442ce-66f1-4fb6-a1b5-374f049abaac","sequence":{"long":4640},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582984214699854,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0a24a09-b8b0-4b7f-9d6e-1f20a539b60e","sequence":{"long":4641},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"eeac9f12-b277-945c-b7b2-6dc48c944589","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65a3b599-c75d-45f7-a6b2-3773f9487d10","sequence":{"long":4642},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"eeac9f12-b277-945c-b7b2-6dc48c944589"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./stream_server"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582984214699854,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./stream_server a","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"031c39c9-19fa-4a58-8398-be27981e390d","sequence":{"long":4643},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06630dd9-3235-423e-948d-0e8e2d78d791","sequence":{"long":4644},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb0d95ab-02a0-4893-b3da-9714135fea90","sequence":{"long":4645},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95ff49f6-1ec7-41ad-b569-97f16c8eee53","sequence":{"long":4646},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddd4743a-45fb-4720-9606-1aa3d6b32f8e","sequence":{"long":4647},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bef013b-b1db-4abe-9a0e-52c8d9bb488f","sequence":{"long":4648},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2955db37-fdea-4bcc-8564-edda0121a835","sequence":{"long":4649},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3acc6fa3-ebaa-4a42-9e2f-67096d62c386","sequence":{"long":4650},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9320367-00e4-487c-94e5-4ec386c5ca44","sequence":{"long":4651},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"441bd7e5-d902-4938-81a0-5708aa0cd649","sequence":{"long":4652},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a445358-6a90-49e4-93c6-a9ebeb403539","sequence":{"long":4653},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b67d3848-e0b7-4541-969a-c11c70b0856d","sequence":{"long":4654},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fca09edb-5402-489b-b0e7-54f46c7c697d","sequence":{"long":4655},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"824ac8a0-ca10-473a-98ed-b9e9c111ff67","sequence":{"long":4656},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4afa784f-f558-46d2-aba9-72c7eda81a6d","sequence":{"long":4657},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e609a2a3-fcc1-4b9c-99eb-7d4d941fc79a","sequence":{"long":4658},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50e39e07-9846-4c6d-b69f-835cdc05e986","sequence":{"long":4659},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3f165b4-5794-4168-9155-2f81fd4fb2fc","sequence":{"long":4660},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5705dee2-8bdf-4005-8dbb-ec5d27cb8ac7","sequence":{"long":4661},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf746e38-da5e-4acb-b772-f86708e53d4a","sequence":{"long":4662},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984223939650,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"0818480c-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c56e6862-f79f-4ed8-8890-7b00db57ee41","sequence":{"long":4663},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"0818480c-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984223939650,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"08184bd5-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"baf02a66-2dc1-46b0-9831-29a69f7b579d","sequence":{"long":4664},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08184bd5-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984223939650,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f33d721-0cee-4427-a4e7-e966da7f54fb","sequence":{"long":4665},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984818638204,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":460817},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5162f65c-07c0-47e3-8020-765417ef72c3","sequence":{"long":4666},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1390","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc834ef1-4a6d-4c22-9ea9-bc961630afa7","sequence":{"long":4667},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6bdf89f-e0c4-47a8-8fa0-84ced2d4b46d","sequence":{"long":4668},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d04735c1-1889-4414-9b53-677488102119","sequence":{"long":4669},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53382608-d512-4c87-9d49-8f9931b15829","sequence":{"long":4670},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cbb446f-8bee-47b1-b6d1-d5ba7fb4082f","sequence":{"long":4671},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"655fe497-6c71-41f6-8e5e-bbb005f71f9d","sequence":{"long":4672},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"08b29b3d-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1393,"parentSubject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582985234024146},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e90cd1f7-f06d-4406-a649-7097ae006ea4","sequence":{"long":4673},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1393","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1393","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8129e501-fd47-40d1-ad4c-f6da89a34135","sequence":{"long":4674},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"acf88428-0c9e-7555-9e0c-dc6fa5750416","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf05ec77-6700-4cfa-bbe1-901aa968f548","sequence":{"long":4675},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"acf88428-0c9e-7555-9e0c-dc6fa5750416"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./stream_client"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582985234024146,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./stream_client","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7233fc0b-d433-4575-8980-1364d88a14b9","sequence":{"long":4676},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60d05837-e84f-46aa-90c7-298169fcd91b","sequence":{"long":4677},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b11adea-10fb-4635-9e61-34740e6c3f32","sequence":{"long":4678},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bd8d965-0e2e-48fd-91ea-d69d2c4763b6","sequence":{"long":4679},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac08f9c1-145d-45aa-9420-77427f510099","sequence":{"long":4680},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b94e9e73-6b8b-41a1-beff-d480e10d2ba1","sequence":{"long":4681},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c90867af-4045-46bb-a16b-1ad51cf8481c","sequence":{"long":4682},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd3bd5c4-c5b2-4d8b-952d-5dce5754d50e","sequence":{"long":4683},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bfb3dbd-983b-4062-a2fc-e6d9c11d2f45","sequence":{"long":4684},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bca663a2-311f-4a82-bb81-b11c5392fdc7","sequence":{"long":4685},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4be765f-561a-4d51-a050-952cec316726","sequence":{"long":4686},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"466c8029-59b2-4378-8968-ca455f49df03","sequence":{"long":4687},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72115167-c59e-4a58-a0a8-7db335143eb0","sequence":{"long":4688},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2644587-d712-46c0-a826-ce2743bfde26","sequence":{"long":4689},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8018a44-791d-4ff6-82c3-fc2ea98c891c","sequence":{"long":4690},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3999522d-886a-4bb9-962a-d7026e617c51","sequence":{"long":4691},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d3c2379-72c7-4b7f-9af4-211408b68b9d","sequence":{"long":4692},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4142e58c-673e-4297-bc7b-7a396b12625d","sequence":{"long":4693},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c2d9a9c-bb71-4977-b3b4-315690ca76ce","sequence":{"long":4694},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"08b3030d-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b5a5f6c-8d1e-455d-a6d9-834df4694cc5","sequence":{"long":4695},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b3030d-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"08b30734-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24dcb167-d8d9-49f6-baf1-c68b5b8ff36c","sequence":{"long":4696},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b30734-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"08b30ad7-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"0.0.0.1"},"localPort":{"int":10508},"remoteAddress":{"string":"0.0.0.1"},"remotePort":{"int":3490},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"08184f2f-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"0.0.0.1"},"localPort":{"int":3490},"remoteAddress":{"string":"0.0.0.1"},"remotePort":{"int":10508},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"08b310af-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"0.0.0.1"},"localPort":{"int":3490},"remoteAddress":{"string":"0.0.0.1"},"remotePort":{"int":10508},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4386421-ba09-4de6-af2a-42de6693bdc8","sequence":{"long":4697},"type":"EVENT_CONNECT","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b30ad7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","address":"::1","port":"3490","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e874f14-b4e3-4dbf-bc0c-7a190b647534","sequence":{"long":4698},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7ee575c-aded-48ad-89bb-13d6a29de805","sequence":{"long":4699},"type":"EVENT_ACCEPT","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08184f2f-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"08b310af-467b-11e9-aeb9-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_accept"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"4","ppid":"1390","address":"::1","port":"10508","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3adf0187-a4b3-415f-85ff-edb43fc256f1","sequence":{"long":4700},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":32},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"08b3272d-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1394,"parentSubject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582985234024146},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac8c5321-f4af-4592-ab60-428c2a9c3f9c","sequence":{"long":4701},"type":"EVENT_FORK","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b3272d-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1394","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1394","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c74644b1-dab3-4fb7-9843-68ad4cd90c20","sequence":{"long":4702},"type":"EVENT_SENDTO","threadId":{"int":100150},"subject":{"UUID":"08b3272d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b310af-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1391","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"824fe5a7-2544-4dd5-b900-523ddd566b37","sequence":{"long":4703},"type":"EVENT_WRITE","threadId":{"int":100150},"subject":{"UUID":"08b3272d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1391","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e0a8a68-d087-4d8b-aeb4-55d56d25ee87","sequence":{"long":4704},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"08b3272d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b310af-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1391","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9147c141-555e-467b-8f6e-25369f9c569d","sequence":{"long":4705},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985823904780,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":465801},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b0be57d-c18c-49db-a37b-2a1a5212a492","sequence":{"long":4706},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":465801},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e0b17db-5a53-49f2-9e46-020ad21b3b2f","sequence":{"long":4708},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8de5b226-767a-4341-b94e-997f296ea6d1","sequence":{"long":4707},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fd02e63-c8f4-43bb-884b-ed5913b64989","sequence":{"long":4710},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a933b8e4-4d3c-4f33-a22d-978cc64231bb","sequence":{"long":4709},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efe15e14-b1dd-48f6-bb5f-6d00bd5db0de","sequence":{"long":4712},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"250c62a6-e789-4c11-b9f9-3b6e99d1a923","sequence":{"long":4711},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f6c7ac8-c664-4405-a4cc-98f457c02872","sequence":{"long":4714},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a704462f-4f96-447c-bf0c-4617c22a99c5","sequence":{"long":4713},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"854cf4af-77b2-4c67-a01b-3a5bb7844c4a","sequence":{"long":4716},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63498638-10fe-4db6-ae08-ac1ca286f56d","sequence":{"long":4715},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16512cb1-62f5-4cce-a09b-8ea97a07beec","sequence":{"long":4718},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01c3c641-b983-4b66-addf-b9dcc37f0ea0","sequence":{"long":4717},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1a925f0-e473-4e05-bbe5-f37c033df5ef","sequence":{"long":4719},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"252b730c-a4e5-4271-ab7e-3d82346c703c","sequence":{"long":4720},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"259f6b38-51e4-436d-a170-f703f8bf75d9","sequence":{"long":4721},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f3adc84-08d3-4f28-93f7-961a8092bba1","sequence":{"long":4722},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4117},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0ff445e-3c32-4901-8a66-93cfa1d8a979","sequence":{"long":4723},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4170},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d57d7cec-1765-4b26-baa8-f68f9207638a","sequence":{"long":4724},"type":"EVENT_WRITE","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cd7eab6-e5ca-4636-afea-246733c5ddd7","sequence":{"long":4725},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aff804f8-c73f-4a47-a4c6-9ef4c8df62e0","sequence":{"long":4726},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bd0ed55-5499-48b2-a0f9-e03e693c1d95","sequence":{"long":4727},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4697},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3baaf7a8-255e-4af2-bf38-4de434be7dae","sequence":{"long":4728},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4750},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46746e69-c99d-4a4f-9982-3137dc8e4d39","sequence":{"long":4729},"type":"EVENT_WRITE","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34395e42-427f-4de5-b6aa-5a844e55999f","sequence":{"long":4730},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d33adc2-d9f8-4569-984f-5543faa2a1c8","sequence":{"long":4731},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eea78a27-9cfa-4755-b22f-68529e685a82","sequence":{"long":4732},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4050},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6036a59-2752-4503-9c3f-0b348a60a885","sequence":{"long":4733},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4103},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05aefa0d-f8c8-41bf-947e-c654483f6150","sequence":{"long":4734},"type":"EVENT_WRITE","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7eb5f22-e502-4a1e-939c-9874376bdf50","sequence":{"long":4735},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25b7763c-2eae-431b-acda-c72248a3e063","sequence":{"long":4736},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3916ca1-14ea-43c8-9f9f-a2c69bd7ee51","sequence":{"long":4737},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4893},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14fbb322-d333-4892-95af-ad147ede4341","sequence":{"long":4738},"type":"EVENT_WRITE","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5cf6ccd-bd07-4323-a7f2-1bcb814548f7","sequence":{"long":4739},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad21c8b1-0a88-4901-b6d8-bdee221adcd6","sequence":{"long":4740},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f5f4a5b-4b7a-4324-9c9a-9d76133cb442","sequence":{"long":4741},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4980},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cde1752-529c-4712-970a-0f0c2159a54c","sequence":{"long":4742},"type":"EVENT_WRITE","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eace4e90-c2f3-453c-8b25-5500915887bb","sequence":{"long":4743},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c71b943b-325a-442c-8ed0-fa6616a49924","sequence":{"long":4744},"type":"EVENT_SENDTO","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"531","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68b54620-91e6-4977-bb65-c7da931d843e","sequence":{"long":4745},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"531","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a259a564-796c-4f67-9a1e-689bb7896e19","sequence":{"long":4746},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b22470f9-1025-4d5b-85c0-0dea1aeedba6","sequence":{"long":4747},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9584080-e119-41f5-a473-3768ba6dc869","sequence":{"long":4748},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea87bbde-31fe-42ff-bf99-758c45d6e88d","sequence":{"long":4749},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4946},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3bb3e92-5701-4d3f-acf5-4c350ad19c09","sequence":{"long":4750},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75cdb713-a366-478b-8541-15da5dacfff6","sequence":{"long":4751},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4765c468-6005-4bc9-a416-658711c58426","sequence":{"long":4752},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5033},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f8019b0-3ffd-4eed-92f0-8cc5b220870d","sequence":{"long":4753},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986143882190,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae0973b3-e4fb-4783-98c7-bfb9c4afd612","sequence":{"long":4754},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986143882190,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e4cd300-1699-44e0-9d89-2d6084b7eeae","sequence":{"long":4755},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986154353840,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9e201dd-f801-4cf9-824e-53bc44ca23d7","sequence":{"long":4756},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986154353840,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"575dd252-5085-475b-be27-7e81b75b4520","sequence":{"long":4757},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986164762457,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2060dd67-29c6-4d4f-84f1-e3dd4972fe15","sequence":{"long":4758},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986164762457,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"08b37bd8-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1395,"parentSubject":null,"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad62fa52-8618-4691-a40a-73248cf780ea","sequence":{"long":4759},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"08b37bd8-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b37bd8-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b906c9d9-0080-4716-bc4f-3abc6adcd639","sequence":{"long":4760},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4eb47ce5-33e9-4035-8783-beeb292ad2ad","sequence":{"long":4761},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"094c9feb-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1396,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582986244400733},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"847e486d-f2de-4db7-bbe4-773679fda582","sequence":{"long":4762},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1396","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1396","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"252e0ceb-f89f-42b4-848a-0da12a8ff35f","sequence":{"long":4763},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c9e441c0-7c31-1a56-b17c-3f9a061af725","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1107fc61-512f-4138-81b0-6e60b8237971","sequence":{"long":4764},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"c9e441c0-7c31-1a56-b17c-3f9a061af725"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./with_wget"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582986244400733,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./with_wget ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dbf2046-8a7a-4cf7-87b1-46cd02b2960c","sequence":{"long":4765},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9684bb38-9e45-4fde-8f78-2d508954c0c9","sequence":{"long":4766},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea4185f2-4723-4e39-8223-444633b59a59","sequence":{"long":4767},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fa8fd03-7364-4f9f-906c-5af5fb392745","sequence":{"long":4768},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d453f43-a2b0-48d4-974d-6accd716a51d","sequence":{"long":4769},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d81b61b0-696a-482e-8313-72278aa65d9e","sequence":{"long":4770},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08058c6c-e0da-4961-919f-34d483a0ffbe","sequence":{"long":4771},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e515660a-1cce-4526-bf84-57ba71153d2a","sequence":{"long":4772},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37a6f6cc-d4c3-4d0d-828e-39b90b279a3f","sequence":{"long":4773},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4eff0fb2-fd6e-4858-a61b-7c60251d531f","sequence":{"long":4774},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d50d3e9e-29d3-4489-b3b9-ad80a37b7aae","sequence":{"long":4775},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8180761-39e4-4ae1-869b-5a8a0b2af569","sequence":{"long":4776},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"769d7e9b-0b1b-4a52-b748-a6b875c38ba6","sequence":{"long":4777},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca0d02b6-539a-4f42-920e-57ec12032179","sequence":{"long":4778},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11dc0048-a6d0-4c80-8f2b-af0a1f8badc9","sequence":{"long":4779},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a60d242-563e-4f3f-85b6-7a9a1f2e5d18","sequence":{"long":4780},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cc0bf1e-b422-4505-b026-1a9cf0339572","sequence":{"long":4781},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89c70693-2280-43c5-b9bb-8de6e745a15b","sequence":{"long":4782},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73c7c744-9ad4-442f-9258-acaeeb406c57","sequence":{"long":4783},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"094cee03-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1397,"parentSubject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582986244400733},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fff61e7-d1cc-4e1f-b088-811964cafe19","sequence":{"long":4784},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_vfork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1397","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1397","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f3f7eadf-5a79-ba55-b95a-881315bae424","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5af15098-3ec2-4a81-b10b-15269bc6b229","sequence":{"long":4785},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"f3f7eadf-5a79-ba55-b95a-881315bae424"},"predicateObjectPath":{"string":"/bin/sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582986244400733,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sh -c wget http://www.google.com/index.html","ppid":"1396","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0aa4f6b6-01d8-4df7-b1ec-53a09ad2cdb8","sequence":{"long":4786},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9d52efb-ef69-4754-98a0-6fa7376d77c5","sequence":{"long":4787},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86a44bbe-6327-449b-9132-a7b8f5d69e14","sequence":{"long":4788},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f01403b5-d842-4dd9-a8c3-0de5f1d4fbad","sequence":{"long":4789},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f9e9a98-7ec0-4b52-8f34-1f69228a3f63","sequence":{"long":4790},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f1197a5-60c0-422f-8d57-09f87db8774f","sequence":{"long":4791},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3d0a683-a623-4ab2-a4bf-ccbca6a3d45e","sequence":{"long":4792},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"152a8717-716f-265c-af71-11d7ac26ac9f","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25add241-e763-4a37-8cb7-78686fdcbef0","sequence":{"long":4793},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":{"string":"/lib/libedit.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37dc2745-82e9-469c-a20d-a7a3fbe25d28","sequence":{"long":4794},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cac036e6-390d-4c9e-a1e3-21cacbe1868d","sequence":{"long":4795},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd0cb6cb-4315-4c31-a071-edb694b7108c","sequence":{"long":4796},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"773d665f-657f-40e7-83b8-f9026491b5bc","sequence":{"long":4797},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f52d954a-31f8-47fb-a5ae-fa229c01fc56","sequence":{"long":4798},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba2e7b95-c1ba-4948-9879-086a46864666","sequence":{"long":4799},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9240530-b692-4df5-b70a-86c6db036a13","sequence":{"long":4800},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c894ec81-99dc-4ed8-940c-f059b86143ce","sequence":{"long":4801},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82bdc5d9-ebb7-4530-9211-d61b83e2a12d","sequence":{"long":4802},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5844a4ce-39c2-49ac-b2b9-d106280d8d12","sequence":{"long":4803},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b3fca34-93e0-4a59-aeb9-bb0fd6a422ec","sequence":{"long":4804},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"260089ce-3b13-41da-9a46-7cc773b76fee","sequence":{"long":4805},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59189a34-8be3-4c3e-bed3-d77811ee165a","sequence":{"long":4806},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2818048},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e55044a-1108-4398-9686-9e60aa54ff65","sequence":{"long":4807},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2818048},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb3020b9-d53b-4048-a6c2-4f292513cbaa","sequence":{"long":4808},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3334144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7e3e5ff-e3fe-4516-8b5a-4dce0f84b1b6","sequence":{"long":4809},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3334144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f4e1738-4f87-4d3a-8897-28a796ece2e2","sequence":{"long":4810},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4665344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a0a2ab5-35a2-4148-9fd0-8be8601e6fce","sequence":{"long":4811},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4665344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fecb174c-329d-4095-ba06-7ad631955d84","sequence":{"long":4812},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf826be3-1dc8-49e1-adff-f4d1f3589ecf","sequence":{"long":4813},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":{"string":"/lib/libncursesw.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66ed519a-d035-4d94-ad4b-3976d8162270","sequence":{"long":4814},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a80300ec-6e24-40d1-a497-dbf7c61e8b77","sequence":{"long":4815},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7e7b472-f56d-4c96-8642-d0e58782cb30","sequence":{"long":4816},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6983680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fb85bac-987b-4754-99ac-a8761d751fac","sequence":{"long":4817},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6983680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eeddc436-470c-4670-b18b-1e9c50bda302","sequence":{"long":4818},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33d6dbf2-a614-4837-a819-6480b86942e4","sequence":{"long":4819},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbcedcba-d1bc-42a7-a1ac-45f0d2a40ad1","sequence":{"long":4820},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7356416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47c79ba7-b969-4bf8-a550-033f9e6c2b04","sequence":{"long":4821},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7356416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc47ac2b-b171-4ee6-97e6-9c058e863e80","sequence":{"long":4822},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e75fc27-0afa-4639-83df-c9a044c60020","sequence":{"long":4823},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa8feec4-f67d-4a08-a48d-1c9d8b4d289f","sequence":{"long":4824},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3c1ca98-8964-4257-9490-9785d26c8a33","sequence":{"long":4825},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a0305da-19e3-43ff-8bf9-1a6728ae8bcc","sequence":{"long":4826},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d2001c4-40f6-43d1-bcb5-dff4a6bef4b7","sequence":{"long":4827},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b870e26a-6eb0-486d-b707-55d9a7974930","sequence":{"long":4828},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a19af96-f5d3-4d43-8f16-13bc5ea4253c","sequence":{"long":4829},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9ef6970-db80-48ed-8bab-6a1a0ecfc062","sequence":{"long":4830},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":725},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd345f9e-94a9-4fcf-88af-22f6e0597d68","sequence":{"long":4831},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1866},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"094d72a7-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1398,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582986244400733},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81e50502-dece-4304-aa8e-e31bf3a6b289","sequence":{"long":4832},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1398","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1398","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0aaa026e-350a-4250-a56a-18d056caaee1","sequence":{"long":4833},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48c56bb7-a399-4e87-82c3-3cc1edd9438b","sequence":{"long":4834},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582986244400733,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b63d8143-3bf6-4d09-ab14-97bad2e8d691","sequence":{"long":4835},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96a87c2b-68b2-46d0-93a5-1636ea264843","sequence":{"long":4836},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb5c907e-7528-4443-9093-f1bb5ff2018d","sequence":{"long":4837},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a73af63a-3a68-477a-b72a-8cc41601c0d1","sequence":{"long":4838},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea4de3da-882e-43b4-82a3-028bd277bd4e","sequence":{"long":4839},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50d8e214-3dc7-498c-bdb0-6997537159cd","sequence":{"long":4840},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea52531f-7aef-4b2c-afd3-8d4ceea07c9d","sequence":{"long":4841},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b601c1de-f15b-4732-badb-802d12c80fb1","sequence":{"long":4842},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93355737-fe39-4855-be05-bad4553cf98f","sequence":{"long":4843},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a044d22-06bb-4216-9f2b-0675322965bc","sequence":{"long":4844},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9d33843-f48a-4f83-9a5a-86cb90f0c8a0","sequence":{"long":4845},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc5dfed0-acb4-4e56-a520-eb8bc695ddf0","sequence":{"long":4846},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"337d26f4-a0d9-443c-8270-fac8a2f27254","sequence":{"long":4847},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f3c76df-e514-4dbc-a25f-47ced0061d2b","sequence":{"long":4848},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18b8b629-6f77-4a94-adc1-55b4d09e5f7b","sequence":{"long":4849},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987074157366,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":479100},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04137eb4-e1c6-4a2b-84fe-db65e8575ae0","sequence":{"long":4850},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15d977a7-ecaa-4827-93ec-0aa3f74234cf","sequence":{"long":4851},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":18},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e81c86c-c54e-4c0d-b55c-8e31d2657504","sequence":{"long":4852},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c15b27d5-67b7-4a0f-aa1b-fdb90a13ee00","sequence":{"long":4853},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"008ec592-7072-4d0d-875f-9a47ae7edf24","sequence":{"long":4854},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b64f612-c248-4497-aa94-5d390ebe971a","sequence":{"long":4855},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1870d20-1252-4d18-931f-0d6197d7dd5d","sequence":{"long":4856},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbc45609-d0f2-4e86-afd7-235d637410fa","sequence":{"long":4857},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":50},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"313aad91-e048-4156-9801-0989e495988b","sequence":{"long":4858},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988115532463,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":480275},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"001827ae-01d8-4c57-b0c7-43be42e026a4","sequence":{"long":4859},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":480275},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0b8e7b8-c708-4a71-9168-80221e51958d","sequence":{"long":4861},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e18aae91-b054-44f4-80f2-10f1c483e944","sequence":{"long":4860},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0aa4b2da-f9b6-4346-a12b-f9b9229d373d","sequence":{"long":4863},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9baa10b-59df-42b5-83a0-2de12ed56306","sequence":{"long":4862},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb159d81-1e3f-4282-98d9-025e7c9b0ea8","sequence":{"long":4865},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b226aa93-0da5-4500-8506-b629b0e11d02","sequence":{"long":4864},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b60686a-296e-45fe-b498-1664deef34a0","sequence":{"long":4867},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90e7b906-3fde-47f6-81c0-0f193c7b5530","sequence":{"long":4866},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8faa3e35-36cb-4001-875a-8989ace6b0fa","sequence":{"long":4869},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47226d9f-33c8-47ba-af0e-d35872829935","sequence":{"long":4868},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75de477c-2557-4dec-a7c8-96c5f7875c0b","sequence":{"long":4870},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4562ebe-9a65-4ca4-8271-3ed794c44c8b","sequence":{"long":4871},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6774f03c-91db-4e83-bfe6-657c1e141453","sequence":{"long":4872},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c22744e9-32f0-4d9c-aba5-7f78e9d31117","sequence":{"long":4873},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4071},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b39c60fb-88c6-4a48-a97c-73eb6679ff1d","sequence":{"long":4874},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4124},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ff49e1d-a371-46b6-92a4-e50a51668335","sequence":{"long":4875},"type":"EVENT_WRITE","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ad18115-4205-4c53-b079-8cfbf1c5bbc2","sequence":{"long":4876},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a64976a1-4e0e-42ff-bd3e-08ce89aa9237","sequence":{"long":4877},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12f5b2a6-e8d6-43ad-988e-2531e05c330d","sequence":{"long":4878},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4807},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acfbacf1-960b-48f4-aca7-c1643ea68515","sequence":{"long":4879},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4860},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f04a2da7-009c-4fa8-b8bc-40ae45b6a0a5","sequence":{"long":4880},"type":"EVENT_WRITE","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ffa06db-4991-492b-bff6-dbe4ebe4eff3","sequence":{"long":4881},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77aa8b37-913d-4baf-8a04-2179fe79fce6","sequence":{"long":4882},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b7a8073-2346-4c19-98e7-1c3850fe54b6","sequence":{"long":4883},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4409},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a7027e1-1964-4e1f-a1f2-d6cc874c88f3","sequence":{"long":4884},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4462},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4248ff13-9657-4352-ba38-bc590bc14852","sequence":{"long":4885},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f47dc39-3553-43c2-bd18-57cfea0ea5ee","sequence":{"long":4886},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d2eb682-75d1-4b66-bb53-fc9c001cdf4c","sequence":{"long":4887},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10df811d-b89c-4c72-a6fd-9efb3f2b9229","sequence":{"long":4888},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ef65836-ce97-465f-949c-7194a439fa2e","sequence":{"long":4889},"type":"EVENT_WRITE","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00bc5b3a-282c-49b4-963c-de20fdc6dd21","sequence":{"long":4890},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8938a21d-7751-4a52-908c-05dc3a6063eb","sequence":{"long":4891},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77d8a56d-9b00-457d-8704-b2119d06fc37","sequence":{"long":4892},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1171},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a0c6935-1597-4510-ad32-a3e68886079a","sequence":{"long":4893},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1224},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92753af9-d67b-486e-ab6f-5f1168204a50","sequence":{"long":4894},"type":"EVENT_WRITE","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"635a3a8b-c02f-4371-864e-094faf5c47f3","sequence":{"long":4895},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5daa053e-7741-494d-b86e-2dc353c70149","sequence":{"long":4896},"type":"EVENT_SENDTO","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"532","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca2ab47e-977a-45ed-974f-81b8c8e2bc99","sequence":{"long":4897},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"532","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cd1d9ef-3e54-493e-90f6-3a98da503f6d","sequence":{"long":4898},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cf0011d-cad5-4de9-a304-42b466b9fe0f","sequence":{"long":4899},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988173936046,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75aa7819-b005-4bd8-8c57-e317f19bf9c9","sequence":{"long":4900},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988173936046,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e13c1877-59f5-4176-963f-ccc109ceab14","sequence":{"long":4901},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988173936046,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d796cf3f-bbc6-434d-92ee-d1cafd795230","sequence":{"long":4902},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988173936046,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a25c8061-f980-4d0c-9d02-1a7254af3730","sequence":{"long":4903},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f984c06-50de-400b-8cb1-a278c4b7e4b8","sequence":{"long":4904},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"533","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e2d446c-2209-4e87-83af-7447a029c6e9","sequence":{"long":4905},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"534","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26cbbc83-a623-4c76-959f-f3e05d1d73c5","sequence":{"long":4906},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"535","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecd5260c-c59f-4f2b-835c-531b77258666","sequence":{"long":4907},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"536","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bccfdbf8-5b29-4519-a0ad-93a68178b78f","sequence":{"long":4908},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"533","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0db9cbe-941a-4ed9-bbef-67e49ecf055d","sequence":{"long":4909},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582989123868619,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":484527},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a0172a3-b1a6-4379-aacf-0c97237122d9","sequence":{"long":4910},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":484527},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5268eaab-5e6f-483f-91ad-cb0e49ce243d","sequence":{"long":4912},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25ff7e84-ae1b-44e4-8b5e-581f5d5ee1de","sequence":{"long":4911},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c8455eb-f956-4925-9c77-50f3d0992b22","sequence":{"long":4914},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"599d28d4-dd08-45cf-8e51-1ddbfd0e7b99","sequence":{"long":4913},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"712a8023-10a6-4542-9eb5-f86aa66abb31","sequence":{"long":4915},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da83cc50-8d60-4d17-82f4-3526fabc4b32","sequence":{"long":4916},"type":"EVENT_READ","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10ee3ba6-b018-44d2-b98e-ea37789982ee","sequence":{"long":4917},"type":"EVENT_READ","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3a13af8-2231-4f8c-9e87-b0ccaf8a6290","sequence":{"long":4918},"type":"EVENT_READ","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4248},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21489c2c-f95b-4290-abba-7e35b42b4b06","sequence":{"long":4919},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4301},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3738f391-c6cd-4888-bf80-dab0b1212f8c","sequence":{"long":4920},"type":"EVENT_WRITE","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ad6d9f5-9407-4221-9fab-a09d2a981da4","sequence":{"long":4921},"type":"EVENT_READ","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"147a622a-8884-4244-93d2-ed95e03feb2c","sequence":{"long":4922},"type":"EVENT_SENDTO","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"537","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"645aafb7-8303-45b3-a474-9ced9d530489","sequence":{"long":4923},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"537","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee0ab590-5009-4ef8-a5b0-90f6a094ef49","sequence":{"long":4924},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dff5d02-d0a0-4a25-888a-266d0145b347","sequence":{"long":4925},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990133892948,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":486160},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97375102-c7d3-4623-82aa-fe4e1ea67632","sequence":{"long":4926},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990133892948,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8b2a564-3c5e-4ddd-ad7e-7f68c02a84c7","sequence":{"long":4927},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990133892948,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} diff --git a/with_dlogd/cdm/sample2.cdm.bin b/with_dlogd/cdm/sample2.cdm.bin new file mode 100644 index 0000000..0a9d5ac --- /dev/null +++ b/with_dlogd/cdm/sample2.cdm.bin @@ -0,0 +1,23351 @@ +Objavro.codecnullavro.schema„¯{"type": "record", "name": "TCCDMDatum", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": [{"type": "record", "name": "Host", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": {"type": "fixed", "name": "UUID", "namespace": "com.bbn.tc.schema.avro.cdm20", "size": 16}, "name": "uuid", "doc": "universally unique identifier for the host"}, {"type": "string", "name": "hostName", "doc": "hostname or machine name"}, {"type": "string", "name": "ta1Version", "doc": "* For debugging and analysis, the TA2 and TA3 teams would\n * like to have the TA1 version number included in the CDM\n * output. This string gets populated from the contents of a\n * well known file, either /etc/tc-version or\n * \\Windows\\System32\\drivers\\etc\\tc-version. This file\n * contains a date timestamp (down to second granularity) and\n * hash (that incorporates all components of the system\n * including configs and translator)."}, {"type": ["null", {"type": "array", "items": {"type": "record", "name": "HostIdentifier", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "string", "name": "idType"}, {"type": "string", "name": "idValue"}], "doc": "Host identifier, such as serial number, IMEI number"}}], "name": "hostIdentifiers", "default": null, "doc": "list of identifiers, such as serial number, IMEI number"}, {"type": ["null", "string"], "name": "osDetails", "default": null, "doc": "OS level details revealed by tools such as uname -a"}, {"type": {"type": "enum", "name": "HostType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["HOST_MOBILE", "HOST_SERVER", "HOST_DESKTOP", "HOST_OTHER"], "doc": "* HostType enumerates the host roles or device types"}, "name": "hostType", "doc": "host's role or device type, such as mobile, server, desktop"}, {"type": ["null", {"type": "array", "items": {"type": "record", "name": "Interface", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "string", "name": "name"}, {"type": "string", "name": "macAddress"}, {"type": ["null", {"type": "array", "items": "string"}], "name": "ipAddresses", "default": null}], "doc": "Interface name and addresses"}}], "name": "interfaces", "default": null, "doc": "names and addresses of network interfaces"}], "doc": "* Hosts represent a host/machine/node in a network."}, {"type": "record", "name": "Principal", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "A unique id for the principal"}, {"type": {"type": "enum", "name": "PrincipalType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["PRINCIPAL_LOCAL", "PRINCIPAL_REMOTE"], "doc": "* PrincipalType identifies the type of user: either local to the\n * host, or remote users/systems."}, "name": "type", "default": "PRINCIPAL_LOCAL", "doc": "The type of the principal, local by default"}, {"type": "string", "name": "userId", "doc": "The operating system identifier associated with the user"}, {"type": ["null", "string"], "name": "username", "default": null, "doc": "Human-readable string identifier, such as username (Optional)"}, {"type": ["null", {"type": "array", "items": "string"}], "name": "groupIds", "default": null, "doc": "The ids of the groups which this user is part of"}, {"type": ["null", {"type": "map", "values": "string"}], "name": "properties", "default": null, "order": "ignore", "doc": "* Arbitrary key, value pairs describing the entity.\n * NOTE: This attribute is meant as a temporary place holder for items that\n * will become first-class attributes in the next CDM version."}], "doc": "* A principal is a local user\n * TODO: extend to include remote principals\n * TODO: what happens when the user information changes (are we tracking versions?)\n * TODO: Authentication mechanisms: are TA1s providing that information and how?"}, {"type": "record", "name": "ProvenanceTagNode", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "tagId", "doc": "Tag ID for this node *"}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "flowObject", "default": null, "doc": "* The UUID of the source or sink object associated with this\n * tag. (Optional)\n *\n * This attribute is optional because if the\n * ProvenanceTagNode is simply joining two existing\n * provenances (e.g., when two values are added together), there\n * is no flow object associated with that definition.\n *"}, {"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "subject", "doc": "Subject that is performing the src/sink action *"}, {"type": ["null", "string"], "name": "systemCall", "default": null, "doc": "System call that read/wrote the data *"}, {"type": ["null", "string"], "name": "programPoint", "default": null, "doc": "The program point where the event was triggered (e.g., executable and line number), (Optional)"}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "prevTagId", "default": null, "doc": "The previous tag for this value *"}, {"type": ["null", {"type": "enum", "name": "TagOpCode", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["TAG_OP_UNION", "TAG_OP_ENCODE", "TAG_OP_STRONG", "TAG_OP_MEDIUM", "TAG_OP_WEAK"], "doc": "* The tag opcode describes the provenance relation i.e., how multiple sources are combined to\n * produce the output. We identify the following provenance relations"}], "name": "opcode", "default": null, "doc": "Tag operation that resulted in the tagId of this ProvenanceTagNode *"}, {"type": ["null", {"type": "array", "items": "com.bbn.tc.schema.avro.cdm20.UUID"}], "name": "tagIds", "default": null}, {"type": ["null", {"type": "enum", "name": "IntegrityTag", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["INTEGRITY_UNTRUSTED", "INTEGRITY_BENIGN", "INTEGRITY_INVULNERABLE"], "doc": "* The integrity tag may be used to specify the initial integrity of an entity,\n * or to endorse its content after performing appropriate checking/sanitization."}], "name": "itag", "default": null, "doc": "The integrity tag may be used to specify the intial\n * integrity of an entity, or to endorse it content after\n * performing appropriate checking/sanitization."}, {"type": ["null", {"type": "enum", "name": "ConfidentialityTag", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["CONFIDENTIALITY_SECRET", "CONFIDENTIALITY_SENSITIVE", "CONFIDENTIALITY_PRIVATE", "CONFIDENTIALITY_PUBLIC"], "doc": "* The confidentiality tag may be used to specify the initial confidentiality of an entity,\n * or to declassify its content after performing appropriate checking/sanitization."}], "name": "ctag", "default": null, "doc": "* The confidentiality tag may be used to specify the initial\n * confidentiality of an entity, or to declassify its content\n * after performing appropriate checking/sanitization."}, {"type": ["null", {"type": "map", "values": "string"}], "name": "properties", "default": null, "order": "ignore", "doc": "* Arbitrary key, value pairs describing the entity.\n * NOTE: This attribute is meant as a temporary place holder for items that\n * will become first-class attributes in the next CDM version."}], "doc": "* A provenance tag defines source dependence on specific data sources (inputs).\n * A tag identifier is typically bound to a source and used by the tracking system to\n * capture dependence on this source input.\n *\n * ProvenanceTagNode defines one step of provenance for a value\n * (i.e., one read from a source or write to a sink), a reference\n * to the previous provenance of the value (if any), and the tag\n * operation that resulted the tagId of this ProvenanceTagNode"}, {"type": "record", "name": "UnknownProvenanceNode", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "upnTagId", "doc": "Tag ID for this node *"}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "subject", "default": null, "doc": "the subject that generated this UnknownProvenanceNode, optional"}, {"type": ["null", "string"], "name": "programPoint", "default": null, "doc": "The program point where the node was created\n (e.g., executable and line number), (Optional)"}, {"type": ["null", {"type": "map", "values": "string"}], "name": "properties", "default": null, "order": "ignore", "doc": "* Arbitrary key, value pairs describing the entity.\n * NOTE: This attribute is meant as a temporary place holder for items that\n * will become first-class attributes in the next CDM version."}], "doc": "* An UnknownProvenanceNode communicates that a Value (of an\n * Event) has unknown provenance. This record can be used anywhere\n * a ProvenanceTagNode can be used. \n *\n * Example use cases from the ClearScope team: During the early\n * stages of device boot we are not tracking; files are written\n * during these stages, and when they are later read, we would\n * like to report the (earliest) provenance as unknown. Also, for\n * some processes we do not have our full-precision tracking\n * enabled, and we would like to communicate to the TA2 analyses\n * that a Value has unknown provenance, but that the value was\n * generated by a particular program, possibly at a particular\n * program point.\n * \n * Semantically, if a Value is tagged with an\n * UnknownProvenanceNode with a Subject, this means that the Value\n * could have any provenance generated by that Subject up to the\n * point the UnknownProvnenanceNode was generated.\n *\n * If a Value is tagged with an UnknownProvenanceNode with no\n * subject, it should be conservatively interpreted as meaning the\n * value could have any \"provenance\" defined by the system up to\n * the point the UnknownProvenanceNode was created."}, {"type": "record", "name": "Subject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "universally unique identifier for the subject"}, {"type": {"type": "enum", "name": "SubjectType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["SUBJECT_PROCESS", "SUBJECT_THREAD", "SUBJECT_UNIT", "SUBJECT_BASIC_BLOCK", "SUBJECT_OTHER"], "doc": "* SubjectType enumerates the types of execution contexts supported.\n *\n * SUBJECT_PROCESS, process\n * SUBJECT_THREAD, thread within a process\n * SUBJECT_UNIT so far we only know of TRACE BEEP using this"}, "name": "type", "doc": "the subject type"}, {"type": "int", "name": "cid", "doc": "Context ID: OS process id for type process, thread id for threads"}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "parentSubject", "default": null, "doc": "* parent subject's UUID. For a process, this is a parent\n * process. For a thread, this is the process that created the\n * thread. Only optional because in some cases the parent may not\n * be known; null value indicates that the parent is unknown."}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "localPrincipal", "default": null, "doc": "* UUID of local principal that owns this subject This\n * attribute is optional because there are times when\n * the owner of the subject may not be known at the time the file\n * object is reported (e.g., missed open call). Otherwise,\n * the local principal SHOULD be included."}, {"type": ["null", "long"], "name": "startTimestampNanos", "default": null, "doc": "* The start time of the subject\n * A timestamp stores the number of nanoseconds from the unix epoch, 1 January 1970 00:00:00.000000 UTC.\n *\n * This attribute is optional because there are times when the\n * subject's start time may not be known. This happens when\n * the subject was started before TC instrumentation software\n * was started. Otherwise, the timestamp SHOULD be included."}, {"type": ["null", "int"], "name": "unitId", "default": null, "doc": "unit id for unit based instrumentation (Optional)"}, {"type": ["null", "int"], "name": "iteration", "default": null, "doc": "iteration and count are used for distinguishing individual \"units\" of execution (Optional)"}, {"type": ["null", "int"], "name": "count", "default": null}, {"type": ["null", "string"], "name": "cmdLine", "default": null, "doc": "Process command line arguments including process name (Optional)"}, {"type": ["null", {"type": "enum", "name": "PrivilegeLevel", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["LIMITED", "ELEVATED", "FULL"], "doc": "* Windows allows Subjects (processes) to have the following\n * enumerated privilege levels."}], "name": "privilegeLevel", "default": null, "doc": "Windows allows processes to have different privilege levels (Optional)"}, {"type": ["null", {"type": "array", "items": "string"}], "name": "importedLibraries", "default": null, "doc": "* imported libraries. (Optional). Lists the libraries that\n * are expected to be loaded, but may not necessarily\n * correspond 1-to-1 with actual load library events because\n * some libraries may already be loaded when this event\n * occurs."}, {"type": ["null", {"type": "array", "items": "string"}], "name": "exportedLibraries", "default": null, "doc": "exported libraries. (Optional)"}, {"type": ["null", {"type": "map", "values": "string"}], "name": "properties", "default": null, "order": "ignore", "doc": "* Arbitrary key, value pairs describing the entity.\n * NOTE: This attribute is meant as a temporary place holder for items that\n * will become first-class attributes in the next CDM version."}], "doc": "* Subjects represent execution contexts and include mainly threads and processes. They can be more granular and\n * can represent other execution boundaries such as units and blocks if needed."}, {"type": "record", "name": "FileObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "Universally unique identifier for the object"}, {"type": {"type": "record", "name": "AbstractObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": ["null", {"type": "fixed", "name": "SHORT", "namespace": "com.bbn.tc.schema.avro.cdm20", "size": 2}], "name": "permission", "default": null, "doc": "Permission bits defined over the object (Optional)"}, {"type": ["null", "int"], "name": "epoch", "default": null, "doc": "* Used to track when an object is deleted and a new one is\n * created with the same identifier. This is useful for when\n * UUIDs are based on something not likely to be unique, such\n * as file path."}, {"type": ["null", {"type": "map", "values": "string"}], "name": "properties", "default": null, "order": "ignore", "doc": "* Arbitrary key, value pairs describing the entity.\n * NOTE: This attribute is meant as a temporary place holder for items that\n * will become first-class attributes in the next CDM version."}], "doc": "* Objects, in general, represent data sources and sinks which\n * could include sockets, files, memory, and any data in general\n * that can be an input and/or output to an event. This record\n * is intended to be abstract i.e., one should not instantiate an\n * Object but rather instantiate one of its sub types (ie,\n * encapsulating records) FileObject, UnnamedPipeObject,\n * RegistryKeyObject, NetFlowObject, MemoryObject, or\n * SrcSinkObject."}, "name": "baseObject", "doc": "The base object attributes"}, {"type": {"type": "enum", "name": "FileObjectType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["FILE_OBJECT_BLOCK", "FILE_OBJECT_CHAR", "FILE_OBJECT_DIR", "FILE_OBJECT_FILE", "FILE_OBJECT_LINK", "FILE_OBJECT_PEFILE", "FILE_OBJECT_UNIX_SOCKET"], "doc": "* These types enumerate the types of FileObjects"}, "name": "type", "doc": "The type of FileObject"}, {"type": ["null", "int"], "name": "fileDescriptor", "default": null, "doc": "The file descriptor (Optional)"}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "localPrincipal", "default": null, "doc": "UUID of local principal that owns this file object. This\n * attribute is optional because there are times when \n * the owner of the file may not be known at the time the file\n * object is reported (e.g., missed open call). Otherwise,\n * the local principal SHOULD be included."}, {"type": ["null", "long"], "name": "size", "default": null, "doc": "* The file size in bytes (Optional). This attribute reports\n * the file size at the time the FileObject is created. Since records\n * are not updated, changes in file size is trackable via the events\n * that changed the file size."}, {"type": ["null", "string"], "name": "peInfo", "default": null, "doc": "* portable execution (PE) info for windows (Optional).\n * Note from FiveDirections: We will LIKELY change this type for engagement 3"}, {"type": ["null", {"type": "array", "items": {"type": "record", "name": "CryptographicHash", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": {"type": "enum", "name": "CryptoHashType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["MD5", "SHA1", "SHA256", "SHA512", "AUTHENTIHASH", "SSDEEP", "IMPHASH"], "doc": "Cryptographich hash types"}, "name": "type", "doc": "The type of hash used"}, {"type": "string", "name": "hash", "doc": "The base64 encoded hash value"}], "doc": "* Cryptographic hash records represent one or more cryptographic hashes for\n * an object, typically, a FileObject."}}], "name": "hashes", "default": null, "doc": "(Optional) Zero or more cryptographic hashes over the FileObject"}], "doc": "* Represents a file on the file system. Instantiates an AbstractObject."}, {"type": "record", "name": "IpcObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "Universally unique identifier for the object"}, {"type": "com.bbn.tc.schema.avro.cdm20.AbstractObject", "name": "baseObject", "doc": "The base object attributes"}, {"type": {"type": "enum", "name": "IpcObjectType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["IPC_OBJECT_PIPE_NAMED", "IPC_OBJECT_PIPE_UNNAMED", "IPC_OBJECT_SOCKET_ABSTRACT", "IPC_OBJECT_SOCKET_PAIR", "IPC_OBJECT_SOCKET_PATHNAME", "IPC_OBJECT_SOCKET_UNNAMED", "IPC_OBJECT_WINDOWS_ALPC", "IPC_OBJECT_WINDOWS_MAILSLOT", "IPC_OBJECT_SOCKET_NETLINK"], "doc": "* These types enumerate the types of IpcObjects"}, "name": "type", "doc": "The type of IpcObject"}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "uuid1", "default": null, "doc": "* If flow is unidirectional, then source is UUID1/fd1 and\n * destination is UUID2/fd2."}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "uuid2", "default": null}, {"type": ["null", "int"], "name": "fd1", "default": null}, {"type": ["null", "int"], "name": "fd2", "default": null}], "doc": "* Represents an IPC. Instantiates an AbstractObject."}, {"type": "record", "name": "RegistryKeyObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "Universally unique identifier for the object"}, {"type": "com.bbn.tc.schema.avro.cdm20.AbstractObject", "name": "baseObject", "doc": "The base object attributes"}, {"type": "string", "name": "key", "doc": "The registry key/path"}, {"type": ["null", {"type": "record", "name": "Value", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "int", "name": "size", "default": -1, "doc": "The size of the value: the number of elements of type valueDataType; -1 for non-arrays"}, {"type": {"type": "enum", "name": "ValueType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["VALUE_TYPE_SRC", "VALUE_TYPE_SINK", "VALUE_TYPE_CONTROL"], "doc": "* A value type is either source, sink, or control This is for\n * Event parameters to distinguish source/sink values vs control\n * parameters (such as a file descriptor)."}, "name": "type", "doc": "The type indicates whether it's a source, sink, or control value"}, {"type": {"type": "enum", "name": "ValueDataType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["VALUE_DATA_TYPE_BYTE", "VALUE_DATA_TYPE_BOOL", "VALUE_DATA_TYPE_CHAR", "VALUE_DATA_TYPE_SHORT", "VALUE_DATA_TYPE_INT", "VALUE_DATA_TYPE_FLOAT", "VALUE_DATA_TYPE_LONG", "VALUE_DATA_TYPE_DOUBLE", "VALUE_DATA_TYPE_POINTER32", "VALUE_DATA_TYPE_POINTER64", "VALUE_DATA_TYPE_COMPLEX"], "doc": "* A value data type is one of the primitive data types. A string is treated as a char array"}, "name": "valueDataType", "doc": "The actual datatype of the value elements, e.g., int, double, byte, etc. (Optional)\n * Strings are treated as char[] so type=CHAR\n * String[] is a COMPLEX value whose components are the string values (each modeled as a char[])\n * Complex composite objects comprising of primitive values use the COMPLEX type"}, {"type": "boolean", "name": "isNull", "default": false, "doc": "Whether this value is null, needed to indicate null objects (default: false)"}, {"type": ["null", "string"], "name": "name", "default": null, "doc": "the name of the Value, string. (Optional)"}, {"type": ["null", "string"], "name": "runtimeDataType", "default": null, "doc": "The runtime data type of the value (Optional); For example, an object of dataType=COMPLEX, can have\n * a runtime data type of say \"MyClass\""}, {"type": ["null", "bytes"], "name": "valueBytes", "default": null, "doc": "* The actual bytes of the value in Big Endian format, e.g.,\n * an int is converted to a 4 byte buffer (Optional)\n *\n * Strings are represented as an array of UTF32_BE encoded\n * characters (i.e., 4 bytes per char)"}, {"type": ["null", {"type": "array", "items": {"type": "record", "name": "ProvenanceAssertion", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "asserter", "doc": "Which Subject is making this assertion?"}, {"type": ["null", {"type": "array", "items": "com.bbn.tc.schema.avro.cdm20.UUID"}], "name": "sources", "default": null, "doc": "Object(s) that this Value's data came from."}, {"type": ["null", {"type": "array", "items": "com.bbn.tc.schema.avro.cdm20.ProvenanceAssertion"}], "name": "provenance", "default": null, "doc": "* Further provenance assertions within this assertion.\n\t * For example, to describe a situation in which X asserts that\n\t * Y asserts that Z asserts that V came from {p,q}:\n\t *\n\t * ```\n\t * Event {\n\t * subject = X,\n\t * parameters = [\n\t * Value (V) {\n\t * provenance = [\n\t * ProvenanceAssertion {\n\t * asserter = UUID of X,\n\t * sources = [ UUID of p, UUID of q ],\n\t * provenance = [\n\t * ProvenanceAssertion {\n\t * asserter = UUID of Y,\n\t * provenance = [\n\t * ProvenanceAssertion {\n\t * asserter = UUID of Z,\n\t * },\n\t * ],\n\t * },\n\t * ],\n\t * },\n\t * ],\n\t * },\n\t * ],\n\t * }\n\t * ```\n\t * Z should have a provenance assertion\n\t * e.g.,\n * \"X asserts that Y asserts that Z comes from {p,q}\"."}], "doc": "* An assertion about the provenance of information"}}], "name": "provenance", "default": null, "doc": "* Assertions about the provenance of this value\n * (e.g., the file that data is claimed to come from).\n *\n * This is a direct assertion about provenance for systems that don't\n * use tags to track data flows."}, {"type": ["null", {"type": "array", "items": {"type": "record", "name": "TagRunLengthTuple", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "int", "name": "numValueElements", "default": 0}, {"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "tagId"}], "doc": "* This record is a single tuple in a run length encoding of tags"}}], "name": "tag", "default": null, "doc": "* The value's tag expression describing its provenance (Optional)\n * Since value could be an array, the tag can use run length encoding if needed."}, {"type": ["null", {"type": "array", "items": "com.bbn.tc.schema.avro.cdm20.Value"}], "name": "components", "default": null, "doc": "A complex value might comprise other component values if needed (Optional)"}], "doc": "* Values represent transient data, mainly parameters to\n * events. Values are created and used once within an event's\n * execution and are relevant mainly during fine-grained tracking\n * (such as with tag/taint propagation). Values have tags\n * describing their provenance. Sometimes the actual value's value\n * is reported in addition to the value's metadata\n *\n * The size of the value is the number of elements of type\n * valueDataType. This should be -1 for primitive and complex\n * types. For arrays, the size is the array length. i.e., if\n * size >= 0, then this value is an array. A complex value (such as\n * an object) can contain other values (primitives or other\n * complex values) within it, as components.\n *\n * Examples:
\n *\n * an integer will have size=-1 and valueDataType=INT, and\n * valueBytes.length=4 bytes
\n *\n * an int[4] will have size=4 and valueDataType=INT, and\n * valueBytes.length=16 bytes (4*4)
\n *\n * a string s=\"abc\" has size=3 and valueDataType=CHAR, and\n * valueBytes.length=12 bytes (UTF32_BE encoding; 4 bytes per\n * char)
\n *\n * an MyClass obj has size=-1, valueDataType=COMPLEX,\n * runtimeDataType=\"MyClass\", valueBytes=
"}], "name": "value", "default": null, "doc": "The value of the key"}, {"type": ["null", "long"], "name": "size", "default": null, "doc": "The entry size in bytes (Optional)"}], "doc": "* Represents a registry key. Instantiates an AbstractObject."}, {"type": "record", "name": "PacketSocketObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "Universally unique identifier for the object"}, {"type": "com.bbn.tc.schema.avro.cdm20.AbstractObject", "name": "baseObject", "doc": "The base object attributes"}, {"type": "com.bbn.tc.schema.avro.cdm20.SHORT", "name": "proto", "doc": "Physical-layer protocol"}, {"type": "int", "name": "ifIndex", "doc": "Interface number"}, {"type": "com.bbn.tc.schema.avro.cdm20.SHORT", "name": "haType", "doc": "ARP hardware type"}, {"type": {"type": "fixed", "name": "BYTE", "namespace": "com.bbn.tc.schema.avro.cdm20", "size": 1}, "name": "pktType", "doc": "Packet type"}, {"type": "bytes", "name": "addr", "doc": "Physical-layer address"}], "doc": "* Represents a packet socket. Instantiates an AbstractObject."}, {"type": "record", "name": "NetFlowObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "Universally unique identifier for the object"}, {"type": "com.bbn.tc.schema.avro.cdm20.AbstractObject", "name": "baseObject", "doc": "The base object attributes"}, {"type": ["null", "string"], "name": "localAddress", "default": null, "doc": "* The local IP address for this flow. Optional for when not\n * obtained initially."}, {"type": ["null", "int"], "name": "localPort", "default": null, "doc": "* The local network port for this flow. Optional for AF_UNIX\n * sockets (unnamed and abstract), or for when not obtained\n * initially."}, {"type": ["null", "string"], "name": "remoteAddress", "default": null, "doc": "* The remote IP address for this flow. Optional for binds\n * that are a listening action and not a full connection, or\n * for when not obtained initially."}, {"type": ["null", "int"], "name": "remotePort", "default": null, "doc": "* The remote network port for this flow. Optional for binds\n * that are a listening action and not a full connection. Also\n * optional for AF_UNIX sockets (unnamed and abstract) and for\n * when not obtained intially."}, {"type": ["null", "int"], "name": "ipProtocol", "default": null, "doc": "The IP protocol number e.g., TCP=6"}, {"type": ["null", "int"], "name": "initTcpSeqNum", "default": null, "doc": "* The initial sequence number for a TCP connection (use the\n * SYN from the initiator). This is to correlate flows across\n * hosts for improved cross-host tracking."}, {"type": ["null", "int"], "name": "fileDescriptor", "default": null, "doc": "The file descriptor (Optional)"}], "doc": "* Represents a network flow object. Instantiates an AbstractObject."}, {"type": "record", "name": "MemoryObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "Universally unique identifier for the object"}, {"type": "com.bbn.tc.schema.avro.cdm20.AbstractObject", "name": "baseObject", "doc": "The base object attributes"}, {"type": "long", "name": "memoryAddress", "doc": "The memory address"}, {"type": ["null", "long"], "name": "pageNumber", "default": null, "doc": "(Optional) decomposed memory addressed into pageNumber and pageOffset"}, {"type": ["null", "long"], "name": "pageOffset", "default": null}, {"type": ["null", "long"], "name": "size", "default": null, "doc": "The entry size in bytes (Optional)"}], "doc": "* Represents a page in memory. Instantiates an AbstractObject.\n * TODO: is memory really an object (with permissions and so on) or is it a transient data?"}, {"type": "record", "name": "SrcSinkObject", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "Universally unique identifier for the object"}, {"type": "com.bbn.tc.schema.avro.cdm20.AbstractObject", "name": "baseObject", "doc": "The base object attributes"}, {"type": {"type": "enum", "name": "SrcSinkType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["SRCSINK_ACCELEROMETER", "SRCSINK_TEMPERATURE", "SRCSINK_GYROSCOPE", "SRCSINK_MAGNETIC_FIELD", "SRCSINK_HEART_RATE", "SRCSINK_LIGHT", "SRCSINK_PROXIMITY", "SRCSINK_PRESSURE", "SRCSINK_RELATIVE_HUMIDITY", "SRCSINK_LINEAR_ACCELERATION", "SRCSINK_MOTION", "SRCSINK_STEP_DETECTOR", "SRCSINK_STEP_COUNTER", "SRCSINK_TILT_DETECTOR", "SRCSINK_ROTATION_VECTOR", "SRCSINK_GRAVITY", "SRCSINK_GEOMAGNETIC_ROTATION_VECTOR", "SRCSINK_GPS", "SRCSINK_AUDIO", "SRCSINK_SYSTEM_PROPERTY", "SRCSINK_ENV_VARIABLE", "SRCSINK_ACCESSIBILITY_SERVICE", "SRCSINK_ACTIVITY_MANAGEMENT", "SRCSINK_ALARM_SERVICE", "SRCSINK_ANDROID_AUTO", "SRCSINK_ANDROID_RADIO", "SRCSINK_ANDROID_TV", "SRCSINK_ANDROID_VR", "SRCSINK_AUDIO_IO", "SRCSINK_AUTOFILL", "SRCSINK_BACKUP_MANAGER", "SRCSINK_BINDER", "SRCSINK_BLUETOOTH", "SRCSINK_BOOT_EVENT", "SRCSINK_BROADCAST_RECEIVER_MANAGEMENT", "SRCSINK_CAMERA", "SRCSINK_CLIPBOARD", "SRCSINK_COMPANION_DEVICE", "SRCSINK_COMPONENT_MANAGEMENT", "SRCSINK_CONTENT_PROVIDER", "SRCSINK_CONTENT_PROVIDER_MANAGEMENT", "SRCSINK_DATABASE", "SRCSINK_DEVICE_ADMIN", "SRCSINK_DEVICE_SEARCH", "SRCSINK_DEVICE_USER", "SRCSINK_DISPLAY", "SRCSINK_DROPBOX", "SRCSINK_EMAIL", "SRCSINK_EXPERIMENTAL", "SRCSINK_FILE", "SRCSINK_FILE_SYSTEM", "SRCSINK_FILE_SYSTEM_MANAGEMENT", "SRCSINK_FINGERPRINT", "SRCSINK_FLASHLIGHT", "SRCSINK_GATEKEEPER", "SRCSINK_HDMI", "SRCSINK_IDLE_DOCK_SCREEN", "SRCSINK_IMS", "SRCSINK_INFRARED", "SRCSINK_INSTALLED_PACKAGES", "SRCSINK_JSSE_TRUST_MANAGER", "SRCSINK_KEYCHAIN", "SRCSINK_KEYGUARD", "SRCSINK_LOCATION", "SRCSINK_LOWPAN", "SRCSINK_MACHINE_LEARNING", "SRCSINK_MBMS", "SRCSINK_MEDIA", "SRCSINK_MEDIA_CAPTURE", "SRCSINK_MEDIA_LOCAL_MANAGEMENT", "SRCSINK_MEDIA_LOCAL_PLAYBACK", "SRCSINK_MEDIA_NETWORK_CONNECTION", "SRCSINK_MEDIA_REMOTE_PLAYBACK", "SRCSINK_MIDI", "SRCSINK_NATIVE", "SRCSINK_NETWORK", "SRCSINK_NETWORK_MANAGEMENT", "SRCSINK_NFC", "SRCSINK_NOTIFICATION", "SRCSINK_OVERLAY_MANAGER", "SRCSINK_PAC_PROXY", "SRCSINK_PERMISSIONS", "SRCSINK_PERSISTANT_DATA", "SRCSINK_POSIX", "SRCSINK_POWER_MANAGEMENT", "SRCSINK_PRINT_SERVICE", "SRCSINK_PROCESS_MANAGEMENT", "SRCSINK_QUICK_SETTINGS", "SRCSINK_RECEIVER_MANAGEMENT", "SRCSINK_RCS", "SRCSINK_RPC", "SRCSINK_SCREEN_AUDIO_CAPTURE", "SRCSINK_SERIAL_PORT", "SRCSINK_SERVICE_CONNECTION", "SRCSINK_SERVICE_MANAGEMENT", "SRCSINK_SHORTCUTS", "SRCSINK_SMS_MMS", "SRCSINK_SPEECH_INTERACTION", "SRCSINK_STATUS_BAR", "SRCSINK_SYNC_FRAMEWORK", "SRCSINK_SYSTEM_UPDATE", "SRCSINK_TASK_STACK", "SRCSINK_TELEPHONY", "SRCSINK_TEST", "SRCSINK_TEXT_SERVICES", "SRCSINK_THREADING", "SRCSINK_TIME_EVENT", "SRCSINK_UI", "SRCSINK_UID_EVENT", "SRCSINK_UI_AUTOMATION", "SRCSINK_UI_MODE", "SRCSINK_UI_RPC", "SRCSINK_USAGE_STATS", "SRCSINK_USB", "SRCSINK_USER_ACCOUNTS_MANAGEMENT", "SRCSINK_USER_INPUT", "SRCSINK_VIBRATOR", "SRCSINK_WAKE_LOCK", "SRCSINK_WALLPAPER_MANAGER", "SRCSINK_WAP", "SRCSINK_WEB_BROWSER", "SRCSINK_WIDGETS", "SRCSINK_IPC", "SRCSINK_UNKNOWN"], "doc": "* There are many types of sources such as sensors. The type of a\n * sensor could be base (close to hardware) or composite. This is\n * mostly (only?) applicable to the Android platform. See\n * https://source.android.com/devices/sensors/index.html for\n * details."}, "name": "type", "doc": "The type of the object"}, {"type": ["null", "int"], "name": "fileDescriptor", "default": null, "doc": "The file descriptor (Optional)"}], "doc": "* Represents a generic source or sink on the host device that is can be a file, memory, or netflow.\n * This is the most basic representation of a source or sink, basically specifying its type only."}, {"type": "record", "name": "Event", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "uuid", "doc": "A universally unique identifier for the event"}, {"type": ["null", "long"], "name": "sequence", "default": null, "doc": "* A logical sequence number for ordering events relative to\n * each other within a subject's execution context\n *\n * This attribute is only optional for inferred events, such\n * as an object's attribute change that was observed without\n * an explicit event or system call."}, {"type": {"type": "enum", "name": "EventType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["EVENT_ACCEPT", "EVENT_ADD_OBJECT_ATTRIBUTE", "EVENT_BIND", "EVENT_BLIND", "EVENT_BOOT", "EVENT_CHANGE_PRINCIPAL", "EVENT_CHECK_FILE_ATTRIBUTES", "EVENT_CLONE", "EVENT_CLOSE", "EVENT_CONNECT", "EVENT_CORRELATION", "EVENT_CREATE_OBJECT", "EVENT_CREATE_THREAD", "EVENT_DUP", "EVENT_EXECUTE", "EVENT_EXIT", "EVENT_FLOWS_TO", "EVENT_FCNTL", "EVENT_FORK", "EVENT_LINK", "EVENT_LOADLIBRARY", "EVENT_LOGCLEAR", "EVENT_LOGIN", "EVENT_LOGOUT", "EVENT_LSEEK", "EVENT_MMAP", "EVENT_MODIFY_FILE_ATTRIBUTES", "EVENT_MODIFY_PROCESS", "EVENT_MOUNT", "EVENT_MPROTECT", "EVENT_OPEN", "EVENT_OTHER", "EVENT_READ", "EVENT_READ_SOCKET_PARAMS", "EVENT_RECVFROM", "EVENT_RECVMSG", "EVENT_RENAME", "EVENT_SENDTO", "EVENT_SENDMSG", "EVENT_SERVICEINSTALL", "EVENT_SHM", "EVENT_SIGNAL", "EVENT_STARTSERVICE", "EVENT_TRUNCATE", "EVENT_UMOUNT", "EVENT_UNIT", "EVENT_UNLINK", "EVENT_UPDATE", "EVENT_WAIT", "EVENT_WRITE", "EVENT_WRITE_SOCKET_PARAMS", "EVENT_TEE", "EVENT_SPLICE", "EVENT_VMSPLICE", "EVENT_INIT_MODULE", "EVENT_FINIT_MODULE"], "doc": "* EventType enumerates the most common system calls. Since there\n * are hundreds of possible system calls, enumerating all of them\n * and managing the list across OS versions is a\n * challenge. EVENT_OTHER is the catch all for events not enumerated here. Any events\n * that are expected to be of importance, should be included in this list."}, "name": "type", "doc": "The type of the event"}, {"type": ["null", "int"], "name": "threadId", "default": null, "doc": "* The thread id to which this event belongs. Required for\n * all events, except the EVENT_ADD_OBJECT_ATTRIBUTE and\n * EVENT_FLOWS_TO event."}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "subject", "default": null, "doc": "* UUID of Subject that generated this event. The subject is\n * required for all events, except the\n * EVENT_ADD_OBJECT_ATTRIBUTE and EVENT_FLOWS_TO event."}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "predicateObject", "default": null, "doc": "* UUID of Object/Subject this event acts on. For events that\n * have two arguments, this attribute contains the first\n * argument (following the argument order in the underlying\n * system call). This attribute is optional because it may not\n * be relevant for some events."}, {"type": ["null", "string"], "name": "predicateObjectPath", "default": null, "doc": "If applicable, the object's absolute file path (Optional)"}, {"type": ["null", "com.bbn.tc.schema.avro.cdm20.UUID"], "name": "predicateObject2", "default": null, "doc": "* Optional UUID of Object/Subject for events that take two\n * arguments (e.g., link, rename, etc). This attribute\n * contains the second argument (following the argument order\n * in the underlying system call)."}, {"type": ["null", "string"], "name": "predicateObject2Path", "default": null, "doc": "If applicable, the second object's absolute file path (Optional)"}, {"type": "long", "name": "timestampNanos", "doc": "* The time at which the event occurred. Timestamps allow\n * reasoning about order of events on a host when the same\n * clock is used. A timestamp stores the number of nanoseconds\n * from the unix epoch, 1 January 1970 00:00:00.000000 UTC.\n *\n * TODO: When different clocks are used on a host or across\n * hosts, we need to also define a clock source\n *\n * NOTE: When an object update is inferred without an explicit\n * system call event, TA1s may not have an accurate timestamp\n * of when the object was updated. In that case, the timestamp\n * used in the update event is the same as the timestamp used\n * in the next system call event that uses the updated object."}, {"type": ["null", {"type": "array", "items": "string"}], "name": "names", "default": null, "doc": "* Event names (Optional). Multiple names may be provided to\n * allow for reporting many parameterless system calls in a\n * single Event record."}, {"type": ["null", {"type": "array", "items": "com.bbn.tc.schema.avro.cdm20.Value"}], "name": "parameters", "default": null, "doc": "Event parameters represented as values, see Value (Optional)"}, {"type": ["null", "long"], "name": "location", "default": null, "doc": "Location refers to the location of the data affecting the event\n * (e.g., the read offset in the file for the read system call event). (Optional)"}, {"type": ["null", "long"], "name": "size", "default": null, "doc": "Size refers to the size of the data affecting the event\n * (e.g., the number of bytes read from the file for the read system call event). (Optional)"}, {"type": ["null", "string"], "name": "programPoint", "default": null, "doc": "The program point where the event was triggered (e.g., executable and line number). (Optional)"}, {"type": ["null", {"type": "map", "values": "string"}], "name": "properties", "default": null, "order": "ignore", "doc": "* Arbitrary key, value pairs describing the entity.\n * NOTE: This attribute is meant as a temporary place holder for items that\n * will become first-class attributes in the next CDM version."}], "doc": "* Events represent actions executed by subjects on data objects\n * or other subjects. Events are generally system calls, but\n * could also include function calls, instruction executions, or\n * even more abstract notions. Events are the core entity in the\n * data model and they are the main abstraction for representing\n * information flow between data objects and subjects."}, {"type": "record", "name": "UnitDependency", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "unit"}, {"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "dependentUnit"}], "doc": "* This record captures a relationship edge between two units, one\n * dependent on the other. This relationship is inferred from a\n * combination of underlying events."}, {"type": "record", "name": "TimeMarker", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "long", "name": "tsNanos", "doc": "Timestamp in nanoseconds"}], "doc": "* TimeMarker records are used to delineate time periods in a data\n * stream to help consumers know their current read position in the\n * data stream."}, {"type": "record", "name": "EndMarker", "namespace": "com.bbn.tc.schema.avro.cdm20", "fields": [{"type": "int", "name": "sessionNumber", "doc": "session number in the corresponding StartMarker"}, {"type": {"type": "map", "values": "string"}, "name": "recordCounts", "order": "ignore", "doc": "* Reports countc of each record type that has been published\n * since the the start of the data stream."}], "doc": "* EndMarker records marks the end of a data stream."}], "name": "datum"}, {"type": "string", "name": "CDMVersion", "default": "20"}, {"type": {"type": "enum", "name": "RecordType", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["RECORD_HOST", "RECORD_PRINCIPAL", "RECORD_PROVENANCE_TAG_NODE", "RECORD_UNKNOWN_PROVENANCE_NODE", "RECORD_SUBJECT", "RECORD_FILE_OBJECT", "RECORD_IPC_OBJECT", "RECORD_REGISTRY_KEY_OBJECT", "RECORD_PACKET_SOCKET_OBJECT", "RECORD_NET_FLOW_OBJECT", "RECORD_MEMORY_OBJECT", "RECORD_SRC_SINK_OBJECT", "RECORD_EVENT", "RECORD_UNIT_DEPENDENCY", "RECORD_TIME_MARKER", "RECORD_END_MARKER"], "doc": "*"}, "name": "type", "doc": "The type of record in the union"}, {"type": "com.bbn.tc.schema.avro.cdm20.UUID", "name": "hostId", "doc": "unique identifier of the host publishing this record"}, {"type": "int", "name": "sessionNumber", "doc": "sequence number that monotonically increases each time the system is started"}, {"type": {"type": "enum", "name": "InstrumentationSource", "namespace": "com.bbn.tc.schema.avro.cdm20", "symbols": ["SOURCE_ANDROID_JAVA_CLEARSCOPE", "SOURCE_ANDROID_NATIVE_CLEARSCOPE", "SOURCE_FREEBSD_OPENBSM_TRACE", "SOURCE_FREEBSD_DTRACE_CADETS", "SOURCE_FREEBSD_TESLA_CADETS", "SOURCE_FREEBSD_LOOM_CADETS", "SOURCE_FREEBSD_MACIF_CADETS", "SOURCE_LINUX_SYSCALL_TRACE", "SOURCE_LINUX_NETFILTER_TRACE", "SOURCE_LINUX_PROC_TRACE", "SOURCE_LINUX_BEEP_TRACE", "SOURCE_LINUX_THEIA", "SOURCE_WINDOWS_DIFT_FAROS", "SOURCE_WINDOWS_PSA_FAROS", "SOURCE_WINDOWS_FIVEDIRECTIONS", "SOURCE_WINDOWS_MARPLE", "SOURCE_PVM_CADETS"], "doc": "* InstrumentationSource identifies the source reporting provenance information."}, "name": "source", "doc": "What source generated this record?"}], "doc": "* A record representing either a vertex or an edge. This is the top level record that allows\n * us to easily mix the vertices and edges defined above on the wire.\n *\n * Host records delineate system (re)starts in a data\n * stream. i.e., A data stream MUST start with a Host record and a\n * new session number. TCCDMDatum records that contain a Host\n * record define the Host UUID in the Host record, and MUST also\n * include the same UUID in the TCCDMDatum record's hostId field."}ìÂ\\{ü©Ý/ 6V"ÀÐúÜS7[AIF¬•pd± (ýcadets-bbn´versionn_innfo:translator, 2019 Mar 4 15:33:16, 1833e058956186fe832c4cc2b027c65667a09bcd; ’FreeBSD 13.0-CURRENT FreeBSD 13.0-CURRENT 5da4c1df8d5(HEAD) CADETS amd64em0"08:00:27:fc:76:ba10.0.2.15em1"08:00:27:f9:7a:ba192.168.56.10120ÜS7[AIF¬•pd± (ý +ªa݈ˌûWŒË=ûŠ³20 +ÜS7[AIF¬•pd± (ý™, Bª¢T$µ„äý`Ú0root20ÜS7[AIF¬•pd± (ýµ dôFzé®{'üvºª ™, Bª¢T$µ„äý`ÚhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý¶k¢FÉP@¼Šð¤^"ø@ê› µ dôFzé®{'üvºªa݈ˌûWŒË=ûŠ³â«øíØúð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1execsyslogd20ÜS7[AIF¬•pd± (ý +ÁU\|ÓŽšXŽÓ㈚i20 +ÜS7[AIF¬•pd± (ýt¿Œ'¡!K¢ÅxeÅ–4Šbê› µ dôFzé®{'üvºÁU\|ÓŽšXŽÓ㈚iâ«øíØúð‹+aue_writev`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1execsyslogd20ÜS7[AIF¬•pd± (ý +†ƒmìíuURµíÂ^UAK20 +ÜS7[AIF¬•pd± (ýákÉIéH¡µ¥®kÚ'fTbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKâ«øíØúð‹+aue_writev`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý +ã“0;r„WŸr-¤w„{e20 +ÜS7[AIF¬•pd± (ý´ýèFzé®g'üvºº ™, Bª¢T$µ„äý`ÚhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÔÔÏt¼¯BT™êЫÇLn@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eš¾þÛúð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý +¶“àüFzé®›'üvº 20 +ÜS7[AIF¬•pd± (ýw7U˜wBI«ªÆò8‹üÐJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºš¾þÛúð‹+aue_sendtoÚ +ret_msgid351hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý·HUC$£½õ*1.“Ñ +JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºš¾þÛúð‹+aue_sendto˜ +ret_msgid352hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýç[“vO¹ÂDg<œŽ JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºš¾þÛúð‹+aue_sendto¬ +ret_msgid353hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý×Ë?ÛœùL6“Ûd‹‹g'œJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºš¾þÛúð‹+aue_sendto˜ +ret_msgid354hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý +µ CjFzé®{'üvº 20 +ÜS7[AIF¬•pd± (ýÉdF¤^¿¯¢QqDê› µ dôFzé®{'üvºµ CjFzé®{'üvºš¾þÛúð‹+aue_recvfromÚ ret_msgid351hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¯³¾X§¶Lý•-âÔt«}Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºš¾þÛúð‹+aue_recvfrom˜ ret_msgid352hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýár-ŒLS_PÎ9%¿áDê› µ dôFzé®{'üvºµ CjFzé®{'üvºš¾þÛúð‹+aue_recvfrom¬ ret_msgid353hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý„&KÍÃJ1¨ríô"¬Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºš¾þÛúð‹+aue_recvfrom˜ ret_msgid354hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý +Äg9IÊÔÆS”ÊìRCÆ[U20 +ÜS7[AIF¬•pd± (ýÊ +ÙKFzé®›'üvº´™, Bª¢T$µ„äý`ÚhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý…:K3ÇE½¨¾Ô:ª´0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÁæÇßúð‹+aue_lseekÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåJ3( ÆOש¡ÄTQõ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U íÚýàúð‹+aue_lseekÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýy库üB³†?XjAŒ] ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U íÚýàúð‹+20ÜS7[AIF¬•pd± (ý°ÙUyVO]šºÐeÝó©@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U íÚýàúð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~6Êš€fC‘¶Žˆeµ†" ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U íÚýàúð‹+20ÜS7[AIF¬•pd± (ý˜¥n2vkIJ™Cë† pˆ¨ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U íÚýàúð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£Øh‚¿C¶¨'î29:›I$:‚œ Ê +ÙKFzé®›'üvº íÚýàúð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +‚^xü¢W¼Ðk×¢V 20 +ÜS7[AIF¬•pd± (ýó’ðz²AK¤Î:”hÂÔ&@œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V  íÚýàúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨ŒØ1ØO~­0þÂoÑiV(@œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U íÚýàúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +^ø\ÁN]„:=V|4“*@œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U íÚýàúð‹+aue_preadÌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +À‹õ)ä±ëQ±äîoë‡á20 +ÜS7[AIF¬•pd± (ýד24+Ek«œpí9H,bœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á íÚýàúð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +Ê ãmFzé®›'üvº20 +ÜS7[AIF¬•pd± (ý·þÖØ/üOÁµ'½ö*6àÝ.b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº íÚýàúð‹+aue_write¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýô¸I2mKâ! ðVå› 0@œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V  íÚýàúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +Ê +oËFzé®›'üvº 20 +ÜS7[AIF¬•pd± (ýô±buÄìDר˜xc¦±å2Jœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº íÚýàúð‹+aue_sendtoÜ +ret_msgid355hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýªãŠ*dE©‡•õƒÍÐ4Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº íÚýàúð‹+aue_recvfromÜ ret_msgid355hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýiÛ‚R¦BN¡Û¼ŽX Òw6bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK íÚýàúð‹+aue_writev¬hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý mÆ–õÛM?¬Ç""ù°8D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¶é†áúð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑ—´tLõ¹¦H·Vµ`Î:D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¶é†áúð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýD°ìÈ÷G÷¬€Ê¥“tl+<0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U诞‹çúð‹+aue_lseekª5hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýì¹[i^%IÁ—&»oœÃ>0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦²°Îîúð‹+aue_lseekþ:hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý í1OxJ*³[”Ê°|Š@0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_lseekþ:hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýS_4=·°CQ’QaZ4íÿôD ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+20ÜS7[AIF¬•pd± (ý +n¤H¸››õSPZ›B@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„Eôî±H¤Ž@ Op´¶²H ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+20ÜS7[AIF¬•pd± (ýKoDR:B¥A”Ú@k ZF@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýXHh‘HËG+°6tÍÂŵL ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+20ÜS7[AIF¬•pd± (ý4íÍËŠ0@Ë’ÍúIÚ; J@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýSÏ]/ŽlNò¹ƒƒRÍÊWN:‚œ Ê +ÙKFzé®›'üvº°•Úðïúð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý g³‘=K¾†Vµ/`¼úP@’œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V °•Úðïúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!€Ä¤mEOš èØ!šuÂR@’œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-Jj¿6B;¸»)ëÑ­ÀæT@’œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýØÄÑHDËFˆ®[\fÍw‰Vb’œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á°•Úðïúð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+xýxuAè}«à>¬Xb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°•Úðïúð‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿ù_I ¬B蹈‚™Ï•5”Z@’œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V °•Úðïúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖ¬\9„@8“þ^²öj€\@’œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáüÁ…µgAÍŸÂIl/xü^@’œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadÌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýW$ãsý¯LDŽ(â¥ñ ÷`b’œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á°•Úðïúð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœ²"#«Eù®ÔCÉ9 abb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°•Úðïúð‹+aue_write¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³piê#C±ž©›±žÛd@’œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V °•Úðïúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý \…%F¨‰ËëTÃMfJ’œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº°•Úðïúð‹+aue_sendtoÜ +ret_msgid356hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýq^`Îÿ÷LK¿ž†Ò”eÝhDê› µ dôFzé®{'üvºµ CjFzé®{'üvº°•Úðïúð‹+aue_recvfromÜ ret_msgid356hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýí:Ià¥ÖK¥?Uà{Xå¨jbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK°•Úðïúð‹+aue_writev¬hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýf$öHÖ‡3_Ò Ë£ÏlD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°•Úðïúð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎü{¿E!‘ ®‰ßíÂonD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°•Úðïúð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘Î>o/¢@Á¨B÷©€¬QpD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°•Úðïúð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý힧JÁ™º._QùrD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°•Úðïúð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5ü_ÌvO͇@:÷$m÷àt@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e””“¬òúð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý’Þ…áÔN°ƒÌª¤ËÿvJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº””“¬òúð‹+aue_sendtoÚ +ret_msgid357hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýõÖgG³‰Ëé†}=§xJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº””“¬òúð‹+aue_sendto˜ +ret_msgid358hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý=/M[Mä˜ö1å¶uà(zJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº””“¬òúð‹+aue_sendto¬ +ret_msgid359hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýì}Ï N‰–­“’¿nW|JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº””“¬òúð‹+aue_sendto˜ +ret_msgid360hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýò¤“ˆÛdCâuw¾Ôât~Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº””“¬òúð‹+aue_recvfromÚ ret_msgid357hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý9dP…A¬™…w9Vý(€Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº””“¬òúð‹+aue_recvfrom˜ ret_msgid358hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýs|SòBË‹S§ž…†‚Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº””“¬òúð‹+aue_recvfrom¬ ret_msgid359hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý½þCöEBƾ_UmXtçÞ„Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº””“¬òúð‹+aue_recvfrom˜ ret_msgid360hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý ~¿ªb”œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤‹Øãþúð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±Ç9‹ºNƒ:Y~º˜r¬b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¤‹Øãþúð‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþE»7íK¡¢± oË®@”œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤‹Øãþúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-™X…0ñL¨ºÕÔ9áKÄ°J”œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¤‹Øãþúð‹+aue_sendtoÜ +ret_msgid361hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæÅx$A~I¾šÝ„¸Ñô®²Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¤‹Øãþúð‹+aue_recvfromÜ ret_msgid361hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýmƒe´JRˆI„ß]—Ä›´bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¤‹Øãþúð‹+aue_writev¬hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýn¡^i¾ÅN¸ÅΓÔú?¶D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºúœ†îþúð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢4¿Fœ;OɯéõÙ›¶ßç¸D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºúœ†îþúð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýE‰Ðßž»G-HóéßQ¹ºD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºúœ†îþúð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæOÍ–kVJÑ8uÌ}A]@¼D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºúœ†îþúð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµO×PFzé®’'üvº192.168.56.101,192.168.56.1‚Ã20ÜS7[AIF¬•pd± (ýÖd·Fz鮧'üvº192.168.56.101,192.168.56.1‚Ã20ÜS7[AIF¬•pd± (ýµO­öFzé®’'üvº¨™, Bª¢T$µ„äý`ÚhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÃĉõèvLEŽÆ¤¸f½Å¾ò› µO­öFzé®’'üvºµO×PFzé®’'üvºÖd·Fz鮧'üvºÖ΄‰„ûð‹+aue_acceptret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value5ppid1address192.168.56.1port +61633execsshd20ÜS7[AIF¬•pd± (ýèŒÚœÛ@¢–R˲W{î×À"ò› µO­öFzé®’'üvºÖ΄‰„ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value6ppid1execsshd20ÜS7[AIF¬•pd± (ýÏ@Í»Ž±MT’NšèwéGVÂ"ò› µO­öFzé®’'üvºÖ΄‰„ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execsshd20ÜS7[AIF¬•pd± (ýÖdÑFz鮨'üvºô20ÜS7[AIF¬•pd± (ýÖdÑFz鮧'üvºô20ÜS7[AIF¬•pd± (ý w*DûqV^'¶Ss"ÍXÖdÑFz鮧'üvºÖdÑFz鮨'üvº20 ÜS7[AIF¬•pd± (ýUû*·Jnš‚›ï$fšÜÄò› µO­öFzé®’'üvºw*DûqV^'¶Ss"ÍXÖ΄‰„ûð‹+aue_pipe ret_fd16ret_fd27hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execsshd20ÜS7[AIF¬•pd± (ýÖdöFz鮨'üvºô20ÜS7[AIF¬•pd± (ýÖdéFz鮨'üvºô20ÜS7[AIF¬•pd± (ý -‡ÚÁ_\û5TÛD¥ÖdéFz鮨'üvºÖdöFz鮨'üvº20 ÜS7[AIF¬•pd± (ýËR¦1øLð¸7¥]˜Æ¿Æò› µO­öFzé®’'üvº-‡ÚÁ_\û5TÛD¥ÖdöFz鮨'üvºÖ΄‰„ûð‹+aue_socketpair ret_fd18ret_fd29hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execsshd20ÜS7[AIF¬•pd± (ýÖd'“Fz鮨'üvºüµO­öFzé®’'üvº™, Bª¢T$µ„äý`ÚÖ΄‰„ûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý]Û–¬U(D‡€\6ƒø2÷¶È$ò› µO­öFzé®’'üvºÖd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_fork +arg_pid1278hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1278ppid1execsshd20ÜS7[AIF¬•pd± (ý +'ìAzX™¦}˜¹20 +ÜS7[AIF¬•pd± (ý +‹Û÷ %„þ[„%ÿâKþ220 +ÜS7[AIF¬•pd± (ýÝAŠNˆØ§æ¡U:ÊŠœ Öd'“Fz鮨'üvº‹Û÷ %„þ[„%ÿâKþ2/usr/sbin/sshd'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ö΄‰„ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"/usr/sbin/sshd -Rppid1108execsshd20ÜS7[AIF¬•pd± (ý +‰oý©äÇU¤©A)Eǹ 20 +ÜS7[AIF¬•pd± (ý)¼aöH¤¸JÇ5JîõÌ<Šœ Öd'“Fz鮨'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÖ΄‰„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýPh7k™DžŽ&éÿì6Îò› µO­öFzé®’'üvºÖdéFz鮨'üvºÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1execsshd20ÜS7[AIF¬•pd± (ýàûŒâJ±­†…Ÿøà vЊœ Öd'“Fz鮨'üvº‰oý©äÇU¤©A)Eǹ Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Xꎩð®…\®ð@JÌ…¼â20 +ÜS7[AIF¬•pd± (ý)g?´áÃH‘†Áæò@´íyÒ<Šœ Öd'“Fz鮨'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÖ΄‰„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý òk ôK¡žØ‘Bí^Ô@Šœ Öd'“Fz鮨'üvºXꎩð®…\®ð@JÌ…¼âÖ΄‰„ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ý™S"ã^Dè£ù±âq¦ÑÖŠœ Öd'“Fz鮨'üvºXꎩð®…\®ð@JÌ…¼âÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý + ªV.x±h^±xåNhžõ20 +ÜS7[AIF¬•pd± (ý¨ˆâÓf?CÏ¡<£B{UcØ<Šœ Öd'“Fz鮨'üvº ªV.x±h^±xåNhžõ(/usr/lib/libpam.so.6Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýd½X5G³·ø éÚŠœ Öd'“Fz鮨'üvº ªV.x±h^±xåNhžõÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +LÜÑÄ­Q­ÄºËÁt¤20 +ÜS7[AIF¬•pd± (ýÍÝêÌkˆB§“HX"QýÊÜ<Šœ Öd'“Fz鮨'üvºLÜÑÄ­Q­ÄºËÁt¤6/usr/lib/libprivatessh.so.5Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý|SBkªu!š7¨©WÞŠœ Öd'“Fz鮨'üvºLÜÑÄ­Q­ÄºËÁt¤Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +5‹s{¯lœZ¬¯ª}Zœµj20 +ÜS7[AIF¬•pd± (ýzÎ6á¶JU¾\c¤£/Èà<Šœ Öd'“Fz鮨'üvº5‹s{¯lœZ¬¯ª}Zœµj"/lib/libutil.so.9Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýD %üx~IÓ‹E/p°¦âŠœ Öd'“Fz鮨'üvº5‹s{¯lœZ¬¯ª}ZœµjÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +öâÜ-ŽTš-æTŽ¹20 +ÜS7[AIF¬•pd± (ýºëè?îI˜öËœÍÐóýä<Šœ Öd'“Fz鮨'üvºöâÜ-ŽTš-æTŽ¹(/usr/lib/libbsm.so.3Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÝÌ·ø|bAË“ ó"\çç 抜 Öd'“Fz鮨'üvºöâÜ-ŽTš-æTŽ¹Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +¡h}Zše^¥š—´þ³¿20 +ÜS7[AIF¬•pd± (ý†··×z D³œÊQ%+ÅG¼è<Šœ Öd'“Fz鮨'üvº¡h}Zše^¥š—´þ³¿4/usr/lib/libblacklist.so.0Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý†4ϦÁOô¨@ã?0 Sꊜ Öd'“Fz鮨'üvº¡h}Zše^¥š—´þ³¿Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +„/|ÓøgT¸Óætg®Ã20 +ÜS7[AIF¬•pd± (ýÆÙ±OÜ.Bó´à¥›*ùáì<Šœ Öd'“Fz鮨'üvº„/|ÓøgT¸Óætg®Ã:/usr/lib/libgssapi_krb5.so.10Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÝ°îym"@p™×cëÕKˆîŠœ Öd'“Fz鮨'üvº„/|ÓøgT¸Óætg®ÃÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +o˜Em/ÿ_¯m(ÿÓË20 +ÜS7[AIF¬•pd± (ýň-T/Kè³G$ªÏ†©ð<Šœ Öd'“Fz鮨'üvºo˜Em/ÿ_¯m(ÿÓË0/usr/lib/libgssapi.so.10Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý¯f‘QNE²ºFê®M ÅòŠœ Öd'“Fz鮨'üvºo˜Em/ÿ_¯m(ÿÓËÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +:]àÀ4hV¨439fç20 +ÜS7[AIF¬•pd± (ý]sôæHA$8ÅnÊS(Æô<Šœ Öd'“Fz鮨'üvº:]àÀ4hV¨439fç,/usr/lib/libkrb5.so.11Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý6ÉóÅfbJ˜´X8·7ÞeöŠœ Öd'“Fz鮨'üvº:]àÀ4hV¨439fçÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +/Ÿ€avT¡R¹¤v‹ 20 +ÜS7[AIF¬•pd± (ý‘8ÀN‘Å~?c;Gø<Šœ Öd'“Fz鮨'üvº/Ÿ€avT¡R¹¤v‹ */usr/lib/libwrap.so.6Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýǾ;£ÎaE!‰È+žs— +úŠœ Öd'“Fz鮨'üvº/Ÿ€avT¡R¹¤v‹ Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +e ÃáMòSU²MR€•SÙâ20 +ÜS7[AIF¬•pd± (ý·\]AþFl‹ÐÒnÓ”ü<Šœ Öd'“Fz鮨'üvºe ÃáMòSU²MR€•SÙâ*/lib/libcrypto.so.111Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý¾6ÑeìK†‘Ž5QðÇþŠœ Öd'“Fz鮨'üvºe ÃáMòSU²MR€•SÙâÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ÞA`ì•øËQ¸•bxñË"œ20 +ÜS7[AIF¬•pd± (ý5^¶öééDˉ’\ò}ÛJ`€<Šœ Öd'“Fz鮨'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÎüì¸ÈHXc°!©Ñª ‚Šœ Öd'“Fz鮨'üvºÞA`ì•øËQ¸•bxñË"œÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +æôÆ´|@ïV€|}¢–ïÿ'20 +ÜS7[AIF¬•pd± (ý‰¬ÈšHC›9GQ·¡„<Šœ Öd'“Fz鮨'üvºæôÆ´|@ïV€|}¢–ïÿ'8/usr/lib/libprivateldns.so.5Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý¢*o­G,Cï³êØTÆ× †Šœ Öd'“Fz鮨'üvºæôÆ´|@ïV€|}¢–ïÿ'Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +6'üiiU©ihÿõ20 +ÜS7[AIF¬•pd± (ýŽ™Wa´N°\XN1UÔHˆ<Šœ Öd'“Fz鮨'üvº6'üiiU©ihÿõ$/lib/libcrypt.so.5Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý#ÒõQÁùLÚ‹éúЇ8ŠŠœ Öd'“Fz鮨'üvº6'üiiU©ihÿõÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +¥_¤!0rtQ²0 ñt¿ñ20 +ÜS7[AIF¬•pd± (ýwß-®Ï©M;¿â¼e”„fQŒ<Šœ Öd'“Fz鮨'üvº¥_¤!0rtQ²0 ñt¿ñ/lib/libz.so.6Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý•å”ÆýDd€ä ¨€Q=ŽŠœ Öd'“Fz鮨'üvº¥_¤!0rtQ²0 ñt¿ñÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Ç8N¢¹V¢NY¤6¹<20 +ÜS7[AIF¬•pd± (ý¦Æ70ýFʘƒ_Yæ<Ö<Šœ Öd'“Fz鮨'üvºÇ8N¢¹V¢NY¤6¹< /lib/libthr.so.3Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýiš@É?DÑ’‚ðºH6˜’Šœ Öd'“Fz鮨'üvºÇ8N¢¹V¢NY¤6¹<Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ÑÇzLRrS’Lb´srå20 +ÜS7[AIF¬•pd± (ý)õþÃI©Hˆ„PÕƒè.8Ò”<Šœ Öd'“Fz鮨'üvºÑÇzLRrS’Lb´srå./usr/lib/libroken.so.11Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý+ÚZˆ=YD™¸!BÐ8óI–Šœ Öd'“Fz鮨'üvºÑÇzLRrS’Lb´sråÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ý[æ§ê%œ_¥êCÝOœY]20 +ÜS7[AIF¬•pd± (ýpîáBnH®©Ÿp±ŸË/˜<Šœ Öd'“Fz鮨'üvºý[æ§ê%œ_¥êCÝOœY],/usr/lib/libasn1.so.11Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý®nã¤O^¤JPÂV¾Ý\šŠœ Öd'“Fz鮨'üvºý[æ§ê%œ_¥êCÝOœY]Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ó¶‡Vbc”U£b4Õ”­§20 +ÜS7[AIF¬•pd± (ý8{ÃßÚIÆš ±9W²ÅBœ<Šœ Öd'“Fz鮨'üvºó¶‡Vbc”U£b4Õ”­§0/usr/lib/libcom_err.so.5Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýt†ƒñ!B÷ i> +)¨žŠœ Öd'“Fz鮨'üvºó¶‡Vbc”U£b4Õ”­§Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +J…vÑL†HU†Lî¢H¯20 +ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬àü°è,bEk›a-IÑð¬ <Šœ Öd'“Fz鮨'üvºJ…vÑL†HU†Lî¢H¯./usr/lib/libhx509.so.11Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý­Ú8¤“Nâ‚S1!7IÛž¢Šœ Öd'“Fz鮨'üvºJ…vÑL†HU†Lî¢H¯Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +lfª«ãÂZ£«øŸºÂÄÅ20 +ÜS7[AIF¬•pd± (ý‚tÐEC¾míϤâ¤<Šœ Öd'“Fz鮨'üvºlfª«ãÂZ£«øŸºÂÄÅ,/usr/lib/libwind.so.11Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýƒ_¿ÜŸÐB™ˆuÏRµï*³¦Šœ Öd'“Fz鮨'üvºlfª«ãÂZ£«øŸºÂÄÅÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +™ü1… %V[¥ Ü «VF,20 +ÜS7[AIF¬•pd± (ý²È`‡W#Hp™—¢3o^`Š¨<Šœ Öd'“Fz鮨'üvº™ü1… %V[¥ Ü «VF,4/usr/lib/libheimbase.so.11Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýæ^„¯QBãš› ¬Uy§ªŠœ Öd'“Fz鮨'üvº™ü1… %V[¥ Ü «VF,Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +¦ÇxTØTTü$Øä½20 +ÜS7[AIF¬•pd± (ý¦8C2ëéMÀ™6z/ì¹no¬<Šœ Öd'“Fz鮨'üvº¦ÇxTØTTü$Øä½B/usr/lib/libprivateheimipcc.so.11Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÝLB^ý1L˜ÇÊǃÃ*®Šœ Öd'“Fz鮨'üvº¦ÇxTØTTü$Øä½Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +À¤J'(¦ÓX¦(²ˆÓý20 +ÜS7[AIF¬•pd± (ýÒ``w¿×NdŽ#MFO:Ó°<Šœ Öd'“Fz鮨'üvºÀ¤J'(¦ÓX¦(²ˆÓý,/usr/lib/libssl.so.111Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýb®º¼¥ËC˜°²½©\ùY²Šœ Öd'“Fz鮨'üvºÀ¤J'(¦ÓX¦(²ˆÓýÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýaÿ¼ÃEŒ€ à7»Ñ + ´:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýò%ºÕšH1ˆ`:ÚŒê˱¶:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¤+Ï7HŸv¤¸—Zy¸:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýªªFbØKÁ´dÉ@tÀpº:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýè†ìJKG@£s½´‚Z:Þ¼:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýG= _/L‹ ÈOú]¾:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý”1"&ŠOµL$àÕÀ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýOõÖÍ2ÂFºšQ{š¬ÈÂ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýeÃ÷Oë¢ó¢ÛNÖìÄ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý7†Â{×@õ‘¿„ŠÅñbÆ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýí'¥Y“EåŸü©Ó0šÈ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý(ŸÊˆ@^¤Ch·x(¥Ê:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý±9¡ÀU”K{£ß'\-üc<Ì:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý||Wé0E%§ÁåûüâµÎ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýœo^¨õVJz²UB[ñ¬h Ð:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýé—Ô*T‹De˜mÃ[_YÒ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý‹+¦éüMʘb4Ûc®§Ô:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýóúÍ6ÇI?„—ϤpͤJÖ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÊo<žBð¿ô*ßÛ%‡Ø:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÀæ#îßMâ–ý¹¡ÿ˜Ú:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÌÀb:aN{”Bƈx>ÿÜ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýMéXzC@B´±Ñ¹Ûl%œÞ:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÇ«LÓìèDh¦U(¦ý—¬à:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¸Ð͵‡L@•Ž¤ò™{ëâ:Šœ Öd'“Fz鮨'üvºŒ»¯’„ûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý„å7Y§Kö¥až±ì|ä:Šœ Öd'“Fz鮨'üvºŒ»¯’„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +3P ÓK€X‹Ó«·Ø€‘^20 +ÜS7[AIF¬•pd± (ýo¹ó× Já­@æ ~ÇÒæ<Šœ Öd'“Fz鮨'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nullŒ»¯’„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýlÝo‹uIΦ"ø¹œxSS芜 Öd'“Fz鮨'üvº3P ÓK€X‹Ó«·Ø€‘^Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý.v«!T7D£úiýðê<Šœ Öd'“Fz鮨'üvºe ÃáMòSU²MR€•SÙâ*/lib/libcrypto.so.111Œ»¯’„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý2î—Ø +C ˆKë'Ê^Á¼ìŠœ Öd'“Fz鮨'üvºe ÃáMòSU²MR€•SÙ⌻¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Š*ÃI[®\®[pgŒî 20 +ÜS7[AIF¬•pd± (ýÁ®!˳M­µ3ýÒ7Ö3î<Šœ Öd'“Fz鮨'üvºŠ*ÃI[®\®[pgŒî (/etc/ssl/openssl.cnfŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý,ÕîœDEhšÎü[bŒðŠœ Öd'“Fz鮨'üvºŠ*ÃI[®\®[pgŒî Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ÖeáóFz鮨'üvº20 +ÜS7[AIF¬•pd± (ý+% +î#M ¨¢Û3¶ˆ&òŠœ Öd'“Fz鮨'üvºÖeáóFz鮨'üvºŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Öeå§Fz鮨'üvº20 +ÜS7[AIF¬•pd± (ýº?|`BÀ‰ ÖÙQ‹œôŠœ Öd'“Fz鮨'üvºÖeå§Fz鮨'üvºŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ÜN½Ëê¯+^¯êZ£®+V20 +ÜS7[AIF¬•pd± (ý`*Ó#dLj¸÷ÖvºÊUAö<Šœ Öd'“Fz鮨'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.confŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýFÔ¹RÏ.Eæªkn$cÀ•*øŠœ Öd'“Fz鮨'üvºÜN½Ëê¯+^¯êZ£®+VŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ôì{M6N?^Ž6%â?>g20 +ÜS7[AIF¬•pd± (ýz:{sp+E÷°UÜÝú0héú<Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbŒ»¯’„ûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýn@òSðHu¢g‡Å‘ù|ü@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ý£Å³¦FsŒ£ziì±€þ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ý±#æ&Ö'Mô¬.z»d/ €@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ý›!: JPG"ŠÜ¡"ä—>ò‚@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÏe»ƒI€Æ+ì¶"u„@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ý†' ír²FWµÖH_¤( l†@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ýNzE¿fAy¦Ù¡ÕîŸöˆ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ýЀ;ö“KG¦CKÊ— Š@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ý¾¡«?´ýG™¹S+ŽQ{Þ¨ŒŠœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +lˆ"÷dÒW’d/ð§«t20 +ÜS7[AIF¬•pd± (ý¬;š®ŠCIÉ£Ôî›gý¤Ž<Šœ Öd'“Fz鮨'üvºlˆ"÷dÒW’d/ð§«t2/etc/ssh/ssh_host_rsa_keyŒ»¯’„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýùWOjýO<£Kí˜Õ‡bŠœ Öd'“Fz鮨'üvºlˆ"÷dÒW’d/ð§«tŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¨/Ì wE¬ –G/’<Šœ Öd'“Fz鮨'üvºlˆ"÷dÒW’d/ð§«t2/etc/ssh/ssh_host_rsa_keyŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý©Äy¿TJ„°Éé© Çm”Šœ Öd'“Fz鮨'üvºlˆ"÷dÒW’d/ð§«tŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Ø]¿?ˆs%P³ˆüd %,|20 +ÜS7[AIF¬•pd± (ýÐý\ý Kô¯Êñ†¾ªP;–<Šœ Öd'“Fz鮨'üvºØ]¿?ˆs%P³ˆüd %,|:/etc/ssh/ssh_host_rsa_key.pubŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýDêRÇÔFŸ¬„´.¯2Œ˜Šœ Öd'“Fz鮨'üvºØ]¿?ˆs%P³ˆüd %,|Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +.Ë=&SY¦î¹SË20 +ÜS7[AIF¬•pd± (ýþ€?v¡Oõ’KLˆ¢›š<Šœ Öd'“Fz鮨'üvº.Ë=&SY¦î¹SË6/etc/ssh/ssh_host_ecdsa_keyŒ»¯’„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýꋶ ÈyK«<Âó;‡1SœŠœ Öd'“Fz鮨'üvº.Ë=&SY¦î¹SËŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÿFèuG_–v^…#Š¸ž<Šœ Öd'“Fz鮨'üvº.Ë=&SY¦î¹SË6/etc/ssh/ssh_host_ecdsa_keyŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýƒlªŒÛLÜ  z›åtdé Šœ Öd'“Fz鮨'üvº.Ë=&SY¦î¹SËŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +>ýpì)¨^©“N¨î<20 +ÜS7[AIF¬•pd± (ý} |”oJ͹ËLºT*¢<Šœ Öd'“Fz鮨'üvº>ýpì)¨^©“N¨î<>/etc/ssh/ssh_host_ecdsa_key.pubŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýX\YÙÂN«œÜvzØ| +¤Šœ Öd'“Fz鮨'üvº>ýpì)¨^©“N¨î<Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +šv*Åõ2PµÅèj 2…(20 +ÜS7[AIF¬•pd± (ý±)Í]@L´aåÃñ™ê¦<Šœ Öd'“Fz鮨'üvºšv*Åõ2PµÅèj 2…(:/etc/ssh/ssh_host_ed25519_keyŒ»¯’„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý%@$FA¡­H¼Ð¾fHi¨Šœ Öd'“Fz鮨'üvºšv*Åõ2PµÅèj 2…(Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¼3ãkUÉOê„Véóò‚-ÊÙÙÆ<Šœ Öd'“Fz鮨'üvº5e| DeT„ Ve»/etc/gss/mechŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý:H&dé¹IߤïÛ¬„‡x­È<Šœ Öd'“Fz鮨'üvº„/|ÓøgT¸Óætg®Ã:/usr/lib/libgssapi_krb5.so.10Œ»¯’„ûð‹+aue_openat_rwtc +flags0mode ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value6ppid1108execsshd20ÜS7[AIF¬•pd± (ýbŽ(žöD €º:ÓhRJÊŠœ Öd'“Fz鮨'üvº„/|ÓøgT¸Óætg®ÃŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ÃêHߺXŸHغ¶C20 +ÜS7[AIF¬•pd± (ýRÈl)&jO“ý¿ÇZíÌ<Šœ Öd'“Fz鮨'üvºÃêHߺXŸHغ¶C>/usr/lib/libgssapi_spnego.so.10Œ»¯’„ûð‹+aue_openat_rwtc +flags0mode ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value6ppid1108execsshd20ÜS7[AIF¬•pd± (ýÇâutSMD¤–$],Âì‡ÎŠœ Öd'“Fz鮨'üvºÃêHߺXŸHغ¶CŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýŒÃ¼ÿ@m‘åÑ“>ôÈmÐ:Šœ Öd'“Fz鮨'üvºŒ»¯’„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÜ{ML‹¿wžàiÁTÒŠœ Öd'“Fz鮨'üvº5e| DeT„ Ve»Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý;ŽÊ…eA ƒÎÈo.qÆÔ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UðˆŸµ…ûð‹+aue_lseekÒ›hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:þ¯9MeEx²üJѺwÁÓÖ<Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g/etc/spwd.db†¤šä…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ýr€øÉFï³,Åö¬XØ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýló%2^F›Àn)Þ¨VÚ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý{šŽÝÄPNs“]KCú†ÈÜ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýñþ×Â%-Gz„©€›èËY¥Þ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý¢½‰"A˜‡Æ¸t?ø#„à@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýíâ +´ Õ@»µº•` â@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý¬jGlA>E§³8v±Í*úä@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý®N;»-HM¨w~9ƒÀoæ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýqfß¼06B+‹U-›ãÄM芜 Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +MTZŸ2S²ŸâÓ‚ˆ20 +ÜS7[AIF¬•pd± (ý$ß“d±{F؃gL·‚ê<Šœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.conf†¤šä…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý ò|@눣¦çÈÈ슜 Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +áÒÍ!j™Õ\™jJè¼ÕVÙ20 +ÜS7[AIF¬•pd± (ýc`§N«@­ˆty!•Ùî<Šœ Öd'“Fz鮨'üvºáÒÍ!j™Õ\™jJè¼ÕVÙ/etc/pam.d/sshd†¤šä…ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý +zËŽw•ÏT•w{³tÏy“20 +ÜS7[AIF¬•pd± (ýz3-½BE.§l>©–ó\ð<Šœ Öd'“Fz鮨'üvºzËŽw•ÏT•w{³tÏy“,/usr/lib/pam_opie.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ýô W/ LÖ²™¤Phò"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýê¯ )ŽNç—ïý‚(2¬ŒôŠœ Öd'“Fz鮨'üvºzËŽw•ÏT•w{³tÏy“†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +sºæ1ÀZ± þZÀm¨20 +ÜS7[AIF¬•pd± (ýH/óôù‘B]±lÆ(¾°ÌAö<Šœ Öd'“Fz鮨'üvºsºæ1ÀZ± þZÀm¨*/usr/lib/libopie.so.8†¤šä…ûð‹+aue_openat_rwtc +flags0mode ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ý,⮩¦-I· +WÜœênUøŠœ Öd'“Fz鮨'üvºsºæ1ÀZ± þZÀm¨†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +¤×†eo'ŠQ§o{ö¡Šé20 +ÜS7[AIF¬•pd± (ý.¦RébâA½ãë1%s»ú<Šœ Öd'“Fz鮨'üvº¤×†eo'ŠQ§o{ö¡Šé/lib/libmd.so.6†¤šä…ûð‹+aue_openat_rwtc +flags0mode ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýK¸c¸Â¨EF}×ÚFyjküŠœ Öd'“Fz鮨'üvº¤×†eo'ŠQ§o{ö¡Šé†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¼lãħFð‹ÈðŽÎ©äþ:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý”Av®Eå¥ ínÏ:«s€:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýQ¾¬¶E±­e´8º®‚:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý ´Pþ@–¹‘‹D8°Al„Šœ Öd'“Fz鮨'üvºzËŽw•ÏT•w{³tÏy“†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Lv‹ t½P´ T‹ð½Ï120 +ÜS7[AIF¬•pd± (ýÖ"(f0ÖG%½ÇäA1¸‹Ø†<Šœ Öd'“Fz鮨'üvºLv‹ t½P´ T‹ð½Ï18/usr/lib/pam_opieaccess.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ý4û)ðAïÙ+攘ˆ"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýë@³z¾O•†8û†„¬%oŠŠœ Öd'“Fz鮨'üvºLv‹ t½P´ T‹ð½Ï1†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýŸ'GxbJ2¾y!F¨„úŒ:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¼P£w»@*’ºÁÔdÑÿHŽŠœ Öd'“Fz鮨'üvºLv‹ t½P´ T‹ð½Ï1†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +½O7PQ\V‘ѤÖ\ŒR20 +ÜS7[AIF¬•pd± (ýBŽ;£¹L…ždâ-;¢<Šœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR,/usr/lib/pam_unix.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ý…¶Ùœ”oF£f§ªÊ6Ö¦’"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýï ’hKLи+ÁÝ߶I¸”Šœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ëPï9•^•9Cy^R„20 +ÜS7[AIF¬•pd± (ýV‡¯ IãŸç4!ÈDpœ–<Šœ Öd'“Fz鮨'üvºëPï9•^•9Cy^R„./usr/lib/libypclnt.so.4†¤šä…ûð‹+aue_openat_rwtc +flags0mode ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýÚú®&¹¸Bê§d4AàªÈ˜Šœ Öd'“Fz鮨'üvºëPï9•^•9Cy^R„†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýYz*šÎL7”{A‰ÐÍÙš:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýsßãÜèLñ¯ê„9 b9œ:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¸‚…€ß¿M¿—î£ø2œ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +«öü¯!ÊZQŠ!*aZ3·20 +ÜS7[AIF¬•pd± (ýï~£ZcB՘˞öSGªT <Šœ Öd'“Fz鮨'üvº«öü¯!ÊZQŠ!*aZ3·2/usr/lib/pam_nologin.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ý‚vµnO˜ÙsrwÆ¢"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýê ’“jÃKƒ¾¢òZ¤Šœ Öd'“Fz鮨'üvº«öü¯!ÊZQŠ!*aZ3·†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý‡rh”ŒG–¢ðC[Øúïs¦:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý3”hªC&Êëìä û¨Šœ Öd'“Fz鮨'üvº«öü¯!ÊZQŠ!*aZ3·†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +<;Иä®QäkQ®ßû20 +ÜS7[AIF¬•pd± (ý¨„*âKU¯û˜Ñiç^£ª<Šœ Öd'“Fz鮨'üvº<;Иä®QäkQ®ßû.¯®Šœ Öd'“Fz鮨'üvº<;Иä®QäkQ®ßû†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÈçÂ{§H¡|wßYÇÝ°:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýaŠ¾GÂIÀ³£æŸ­f²Šœ Öd'“Fz鮨'üvº<;Иä®QäkQ®ßû†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý<2$íhgG…ƒË×–ÕØï´<Šœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR,/usr/lib/pam_unix.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ýŒN1-¿ÀFA™O#HÆ®Á¶"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ý†îšqG/Ÿ†âO*R3¸Šœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýhG $JMÁ†à¹ò3ý×èº:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬´ü"xSà-Bžƒ8^êÞp"¼Šœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +±…tBc„ ]„c “ ã´20 +ÜS7[AIF¬•pd± (ýþ‘ú 8@e°S ­ µ¾<Šœ Öd'“Fz鮨'üvº±…tBc„ ]„c “ ã´0/usr/lib/pam_permit.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ýyRlÒ‚B@¯dG/ض’IÀ"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýÄß²¿IBÉ¡F‹ Ù(öøŠœ Öd'“Fz鮨'üvº±…tBc„ ]„c “ ã´†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýL§ïš²™A¶¦§xƒÅÚçÄ:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÔÈq߯FŒºÄÌ(sA`ÛÆŠœ Öd'“Fz鮨'üvº±…tBc„ ]„c “ ã´†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýKî‘KÜDV¢"×Ñ4@"È<Šœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR,/usr/lib/pam_unix.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ý¹³,½Ì°O-® ÆIZ÷õLÊ"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýŹâæªKŽ²JEhÄ +UÌŠœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýVùaŒmNÿ³gŽÚW"цÎ:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¼æSn@–­Xä„Æ'Њœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýê碜DMd«ïÈå5'…ÒŠœ Öd'“Fz鮨'üvºáÒÍ!j™Õ\™jJè¼ÕVÙ†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýD~ÜÇ lMs¾‡°ÞPìÔ<Šœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.conf†¤šä…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ýÇÄu'øöLœ½fECè°JÖŠœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ÖˆU¾Fz鮩'üvº 20 +ÜS7[AIF¬•pd± (ýñÁíê­ðK·”àQ¾¸I’ØŠœ Öd'“Fz鮨'üvºÖˆU¾Fz鮩'üvº†¤šä…ûð‹+aue_connect hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108address /var/run/logprivexecsshd20ÜS7[AIF¬•pd± (ý zYÈ@\E<ºÅüÓ¦‹–ÚJŠœ Öd'“Fz鮨'üvºÖˆU¾Fz鮩'üvº†¤šä…ûð‹+aue_sendtoÀ +ret_msgid365hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýPFüTÉO¦®‘ÇÊ„¾ÏÜDê› µ dôFzé®{'üvºµ CjFzé®{'üvº†¤šä…ûð‹+aue_recvfromÀ ret_msgid365hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý +ªûzJÙR†]’Ù?òí†Ód20 +ÜS7[AIF¬•pd± (ýTuTùÄI½‘SšË†u(WÞbê› µ dôFzé®{'üvºªûzJÙR†]’Ù?òí†Ód†¤šä…ûð‹+aue_writevhostHdc53375b-4149-46ac-9570-64b1090f28fdfd16ppid1execsyslogd20ÜS7[AIF¬•pd± (ý cüQG,N3—ÖqØ7êÁ‘àŠœ Öd'“Fz鮨'üvºÖˆU¾Fz鮩'üvº†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýQ*‹:U5OZ„÷¥ +]ü¢qâ<Šœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.conf¸ð†î…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ýÊŠ,Ã¥GDÕ“så%ï“È䊜 Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ¸ð†î…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Ö‰¢–Fz鮩'üvº 20 +ÜS7[AIF¬•pd± (ýísàS<“Mü„ÿÊšH?抜 Öd'“Fz鮨'üvºÖ‰¢–Fz鮩'üvº¸ð†î…ûð‹+aue_connect hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108address /var/run/logprivexecsshd20ÜS7[AIF¬•pd± (ý5gþQ¨H@ç®Î—Ì…ËèJŠœ Öd'“Fz鮨'üvºÖ‰¢–Fz鮩'üvº¸ð†î…ûð‹+aue_sendtoÀ +ret_msgid366hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý4èç ÑJæ„w2ÅíÉfêDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¸ð†î…ûð‹+aue_recvfromÀ ret_msgid366hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý.ÿH°ðDD…®•cüy„¯ìŠœ Öd'“Fz鮨'üvºÖ‰¢–Fz鮩'üvº¸ð†î…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Z2°Ë1]±m‘¨20 +ÜS7[AIF¬•pd± (ýÅB’I1C\´¬rµ‡œrfî<Šœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨/etc/group¸ð†î…ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ýdº‹Â1àC,šñ³9úêJ.ð0Šœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨¸ð†î…ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýk ÿ*ú]F/¡ƒŽolóéÁò0Šœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨¸ð†î…ûð‹+aue_lseekðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýe"ž:dOÑ´ßÒÆnöÿôŠœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨¸ð†î…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý®S!?óÝLº¾ËéW™ô¬Yö +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_setgidgidë +arg_gid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý|ƒzÄ=¥E‰üyÝ6&æâø +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_setuiduid +arg_uid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýGÌ2e«@ÿÊm^£OÂú +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÀ1NòµH¨Š}Â${¾ü +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý°äÿ§®]vRS<„äB±100320ÜS7[AIF¬•pd± (ý‰æž!¤I&škmÈRuþ +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_setuiduid +arg_uid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý–“™‚šv@²¤®:⎖€ +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_setgidgidë +arg_gid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýaÎ#+òùG®‹YnШg*‚<Šœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confº÷œ÷…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ýÁO440Dfµ}ÿ®f‘|G„Šœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆº÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Ö‹"œFz鮩'üvº 20 +ÜS7[AIF¬•pd± (ý 9ãxœMÚ‰um‚ñ†Šœ Öd'“Fz鮨'üvºÖ‹"œFz鮩'üvºº÷œ÷…ûð‹+aue_connect hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108address /var/run/logprivexecsshd20ÜS7[AIF¬•pd± (ýžYî{ UKù•×NÔÓ ˆJŠœ Öd'“Fz鮨'üvºÖ‹"œFz鮩'üvºº÷œ÷…ûð‹+aue_sendtoÀ +ret_msgid367hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýþ€ ŒJ¿¹©•V~ÿŠDê› µ dôFzé®{'üvºµ CjFzé®{'üvºº÷œ÷…ûð‹+aue_recvfromÀ ret_msgid367hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýõ!Ò©;ŠA:˜Ù1ypÅŒŠœ Öd'“Fz鮨'üvºÖ‹"œFz鮩'üvºº÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÖ‹/†Fz鮩'üvºô20ÜS7[AIF¬•pd± (ýÖ‹/~Fz鮩'üvºô20ÜS7[AIF¬•pd± (ý E/M…å^AŽM?FX! +4Ö‹/~Fz鮩'üvºÖ‹/†Fz鮩'üvº20 ÜS7[AIF¬•pd± (ýäy§ÌMõ±(“]—¤üpŽŠœ Öd'“Fz鮨'üvºE/M…å^AŽM?FX! +4Ö‹/†Fz鮩'üvºº÷œ÷…ûð‹+aue_socketpair ret_fd14ret_fd28hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÖ‹8ÅFz鮩'üvº€Öd'“Fz鮨'üvº™, Bª¢T$µ„äý`Úº÷œ÷…ûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýч·áÏèAr–¶}ÚÞL@V$Šœ Öd'“Fz鮨'üvºÖ‹8ÅFz鮩'üvºº÷œ÷…ûð‹+aue_fork +arg_pid1280hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1280ppid1108execsshd20ÜS7[AIF¬•pd± (ý +O«–Ì¿ZŒ–²×¿u­20 +ÜS7[AIF¬•pd± (ýͯÄÖ‹›L@·áÝg5 MX’<–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­/etc/opiekeysº÷œ÷…ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ýJˆÅZ‡@AUˆq›íÖÏ,”<–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­/etc/opiekeysº÷œ÷…ûð‹+aue_openat_rwtc +flagsmode ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value9ppid1278execsshd20ÜS7[AIF¬•pd± (ýI­8¸¦8H&¼~ö%ñÒªN––œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýëýáºmuBŒ•ôñO')˜0–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÈVX£ÝILªxÜ5ù¯èš–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýÝÂ?q•žJ€´º—¶¸Ýœ<–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbº÷œ÷…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ý‚úµcþžK£¦J„gLBž@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý\û\fLavVëÙ¼õ  @–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÀÌ[4ÈOŸ·9¨®'3°¢@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýCõ#kdeKO–e¥£ãN¤@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýG‹­ÓLTE‹7Âe:ã!f¦@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýš"ZªUEó›È¤ƒ¥ÅÃY¨@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýdµ<Û¤…AųÌê>Vö·ª@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý¯“>Ö¼KD½Þ×Éïúݬ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÑ”üô.@ô¯’Į惮–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ývéÞ˜U]Fx¨Nþò ˆþ°<–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­/etc/opiekeysº÷œ÷…ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ýYH¼~>xFð r¢²‘¨í²<–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­/etc/opiekeysº÷œ÷…ûð‹+aue_openat_rwtc +flagsmode ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value9ppid1278execsshd20ÜS7[AIF¬•pd± (ýEågm´Jro{"ÿìÞ´–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý䂹rîlJÄ›Ù9Õï.P¶0–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý<ò¹ºÃØD—Ògó@Q¸–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýÓwÕ’Ã_LU¡ÎÜÀ`·º<–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbº÷œ÷…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ýþÖ­¼FE ¦îÑÓ JÒ3¼@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýû1>>´|K˜TÂö{yž¾@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýrG5?H{Šþ-ÞGÜœ À@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý¤®U-LÁ«“ª©Ä¸Â@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý–‚MrºJÅAAÐæÄ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÔmKÔCy¢V½›„“ûõÆ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý¾"5bÒB„òcÀñ½lpÈ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýŽ(i5¸€HŠ$ӥČˆÊ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý#ƒØ2¿I ­ä·†>!uÌ–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý;Ède3I¿QY °ï2œÎ<–œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confº÷œ÷…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"°Ìû†OÊE/AU¨ÈÏTûKÍЖœ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆº÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýðãFÒ@šºÂ0fÆË}áÒ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e´ðÃ؈ûð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýDBò@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»æƒ€ŠG@ p²OzìÖ°ø ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+20ÜS7[AIF¬•pd± (ý#UhúYH¾Nðó$Æö@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +¹"¸2H²ã⤱SsÙü ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+20ÜS7[AIF¬•pd± (ýªö}¦Šj@)…Ô}f ñ5ú@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:‚XÆKu·»utwJ€ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+20ÜS7[AIF¬•pd± (ýÕd¶¬ƒOB¿hÏã…3Œþ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙ +Y5MAâ•‚á¼R¦ ‚:‚œ Ê +ÙKFzé®›'üvº”·ò×ûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|zíñO£H¹¬B,s’_.~„@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~ĤvNe¯~pRΆ@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýØ)UJÝåGù½þVU/ ˆ@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadÆGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxBªñH~ŠÚƒìŠb˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»3 {RËGX„ € +ümKŒb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”·ò×ûð‹+aue_write°HhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõeÜeÎ_B•º- +DØfŽ@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýª®¢»¿K Í†ßdÆík@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡Ý‡æÈMÀ—"ºŽ€âÂ’@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadØYhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€~G]\pB ¡V{€’Ù¬ê”b˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßžªWüåJ7’ØÎ*7³l–b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”·ò×ûð‹+aue_writeÂZhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñž´3|BVQ0èm¡lá˜@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýh]üÞAL4#õúÙŒš@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1²Oä7Ü °ïŒœ@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadÒ;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*2=e}¤Nœ Ì¹±c÷¶žb˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûšGÆKµz…ðÉS4 b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”·ò×ûð‹+aue_write¼<hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýè~wÜMºV³Š?åË¢@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊH‚›[BŽ¾L›#?mw¤@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýjKÉÛ%C\³Ü {9Uý¦@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadðKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýü ¤TUNpPmÌm‡±3¨b˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýHºwÈIÈ«ÚðÁ1 tˆª@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝ5îMBª^JõÆH4¬@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&ž–0¢@¨^ꕪz À®@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_pread”PhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚§øNE…4!`Äì°b˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄFpXsE Wó®‹))ý²@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?øaýï]DÓ&¨8Œ +ð´@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@  øOâG—¸µ@øsÒL‡¶@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadžRhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞ^ð¶ÝA²¨OÊ[—⎸b˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýg^øyrN†¾«NÖÒh£º@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”Ì„:S/E¡N ²ÒPó¼@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{ÃîÐ'ML¨p5ò+¾@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadö?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@êÔ¬èJÝ°@ß-Ê©Ù Àb˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§‡ 0A¦µä]ã»FØÂ@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚ úD4ºË "ú¹iÄJ˜œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº”·ò×ûð‹+aue_sendtoÞ +ret_msgid372hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©b½®¿êDX½ÖÕ¿†«ÆDê› µ dôFzé®{'üvºµ CjFzé®{'üvº”·ò×ûð‹+aue_recvfromÞ ret_msgid372hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÊãõæ)HÔ¤bõLo£-ÀÈbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK”·ò×ûð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýú`m[TñL÷§ê/žðÝÐÊD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§ðàûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæÙˆ úLO  Ç&lÌD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§ðàûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸´ ã L¡²CôòÓdñÎb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§ðàûð‹+aue_writeÚLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇ~ídÐŒL# +®êKòÆÐD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§ðàûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýükbü]ÍEc•ç/iÖ ÃÒD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§ðàûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0·±€ ¥@~Ÿì§-o-Ôb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºö‡êûð‹+aue_writeþPhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõ@‚Q›×MþµÐ@áñÖD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºö‡êûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,r£Üè J9¡E#Æfò[ØD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºö‡êûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸMÓÏ•B¦p$¶§¾Úb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºö‡êûð‹+aue_writeˆShostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáªÌøŸÚJ<³%ž$ênÜD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ×óûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸÚkwDÏÁÂx¢³ÞD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ×óûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýtÂâ6•JϸXi¦ÅNÜàb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ×óûð‹+aue_writeà@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀ© ÐFŠªyk©“. âD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŽæÜýûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý 'ö©Eº›öÉ~äD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŽæÜýûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýiçD}áCÒºz% „^¹”æD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŽæÜýûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽ\Zm§Lº²ò®ÕA~èD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŽæÜýûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýpßP\Ò€N‘’)CŽàEÑêD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¢žÜ†Žûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/†î(H™Ÿ 0' JøQìD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¢žÜ†Žûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqzYœëC#º|F@eú<î<–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbúËÛ±”ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ý ²fíA¥€H +/„ð@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÀ¿EÄÖPL·ºe–ŸcjÂò@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýôqvÜ€FÄ”p”( mðô@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý?jQÛÔÛKu·aÙaHXyö@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý‹-vÞ½@,‡ašv}ÿVø@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýò ´ŠE™´¬ +Áfé>Ûú@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý2Çɤe“EУém? 5ü@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý¢²ºÊÄ+M‰#Q¾è +ÐÏþ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®Øü@žGªôOã·†º†¢vWB€–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý¾A©Ù¶M—‘Âå} Ô®ö‚<–œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confúËÛ±”ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ýf¹f +Œ£Hâ§lq•Ùö2‘„–œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆúËÛ±”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý +ÓŠsñŸdX—Ÿ“¿XdgÖ20 +ÜS7[AIF¬•pd± (ýð‘v–@ÒŸýE0@•¨v†<–œ Ö‹8ÅFz鮩'üvºÓŠsñŸdX—Ÿ“¿XdgÖ"/etc/login.accessúËÛ±”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ý˧‰Þ”Oäç#¸dÇ刖œ Ö‹8ÅFz鮩'üvºÓŠsñŸdX—Ÿ“¿XdgÖúËÛ±”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýqA¡€{ITˆ_…u9ÿŠ<–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbúËÛ±”ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ýp0ÿâ€ÿCŸÉLàNú*Œ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý†ûQÿïA¦ŸC6œW{XŽ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý¦Á¤ÚÙO”QMìr‡¦@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÕï‰óý”O5Ñ^kZsߢ’@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý™3©BEá« 8óƒÚ >”@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý”Ö¿¼dLÂ¥O‹´±|2–@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýe+·îúO™¿\ãÌ4ܘ@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýíqgZ|ØJ_¼ÒÝM‡ŒŸš@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÑøàÍåA?ºn­ï/º÷œ–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý‘¡PÈîCs–ó>L‰Ë…ž<–œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confúËÛ±”ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ý…´*A¶–Ùa²Â’ç –œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆúËÛ±”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýUù€aÝ3Id’±ìØÎç梖œ Ö‹8ÅFz鮩'üvºÖ‹8ÅFz鮩'üvºúËÛ±”ûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýaøVRuK±ŸðAæÔ¹´Š¤Šœ Öd'“Fz鮨'üvºÖ‹/~Fz鮩'üvºÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¶ºÿ÷ªõ_’¨bªð§ÎcÌ2220ÜS7[AIF¬•pd± (ýÖvz3Fz鮩'üvºþ¶ºÿ÷ªõ_’¨bªð§ÎcÌhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý³  DœlåÑ¡ª +¦Œœ Övz3Fz鮩'üvºÖvz3Fz鮩'üvºÚøñº”ûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý +׳ðFz鮩'üvº 20 +ÜS7[AIF¬•pd± (ý4‚À€³OW’5øŒÉUÜרŠœ Öd'“Fz鮨'üvº׳ðFz鮩'üvºÚøñº”ûð‹+aue_connect hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108address /var/run/logprivexecsshd20ÜS7[AIF¬•pd± (ýËô÷^ òDV¾¼þf*Ç&ªJŠœ Öd'“Fz鮨'üvº׳ðFz鮩'üvºÚøñº”ûð‹+aue_sendto˜ +ret_msgid373hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýÝŽ%õ¦CX¶e‚Äj¥WÚ¬Šœ Öd'“Fz鮨'üvº׳ðFz鮩'üvºÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Övn„Fz鮨'üvº20 +ÜS7[AIF¬•pd± (ý刓š2OBIŸVhk Öd'“Fz鮨'üvºÖvn„Fz鮨'üvºÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý~~|ñ.I¢€eäLÚ… ù°Šœ Öd'“Fz鮨'üvºÖdÑFz鮨'üvºÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý†…‹¿ùM)‰Êé¢ðn[IJò› µO­öFzé®’'üvºÖdÑFz鮧'üvºÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1execsshd20ÜS7[AIF¬•pd± (ýûRkV'Njœ r²´Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÚøñº”ûð‹+aue_recvfrom˜ ret_msgid373hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý™§½fÖHŒÉüà”¡æ¶bê› µ dôFzé®{'üvºªûzJÙR†]’Ù?òí†ÓdÚøñº”ûð‹+aue_writev„hostHdc53375b-4149-46ac-9570-64b1090f28fdfd16ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÝÖí`£ Oj† ÿŒ›Þ뙸bê› µ dôFzé®{'üvºªûzJÙR†]’Ù?òí†ÓdÚøñº”ûð‹+aue_writevèhostHdc53375b-4149-46ac-9570-64b1090f28fdfd16ppid1execsyslogd20ÜS7[AIF¬•pd± (ý +-%¬>JQ„>°†1JR_20 +ÜS7[AIF¬•pd± (ý—Ÿ)£ò,Dï’½¹j@Vº<Šœ Öd'“Fz鮨'üvº-%¬>JQ„>°†1JR_0/etc/security/audit_userÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ÞI²Ÿ!qÁ_±!@9ÁR20 +ÜS7[AIF¬•pd± (ý†“¶qsôL£+ÑoÿS¦c¼<Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁR2/etc/security/audit_classÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1108execsshd20ÜS7[AIF¬•pd± (ýàÂi§Gd¨åTœñ†Ë¾0Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁRÚøñº”ûð‹+aue_lseekàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Ü+´¼ÄQ¼QAÄ’ò20 +ÜS7[AIF¬•pd± (ýƒ§IîcC5™ÂÀóN¾âóÀ<Šœ Öd'“Fz鮨'üvºÜ+´¼ÄQ¼QAÄ’ò6/etc/security/audit_controlÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value7ppid1108execsshd20ÜS7[AIF¬•pd± (ýâX/Š$J½™YÙkŸQÂ0Šœ Öd'“Fz鮨'üvº-%¬>JQ„>°†1JR_Úøñº”ûð‹+aue_lseek6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýÜÍK%¿M…†’Ë ¹ïÄ0Šœ Öd'“Fz鮨'üvº-%¬>JQ„>°†1JR_Úøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý}z ŠÑêG¶˜Q®MðÅÓÆŠœ Öd'“Fz鮨'üvºÜ+´¼ÄQ¼QAÄ’òÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÿAHŠÃÆG̯vºµôþ¨ÈÈ<Šœ Öd'“Fz鮨'üvºÜ+´¼ÄQ¼QAÄ’ò6/etc/security/audit_controlÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value7ppid1108execsshd20ÜS7[AIF¬•pd± (ý +‘Oè´¼s>W³¼AÑ7>í<20 +ÜS7[AIF¬•pd± (ý&.¯Må@¿P£;F™Ê<Šœ Öd'“Fz鮨'üvº‘Oè´¼s>W³¼AÑ7>í<2/etc/security/audit_eventÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ýü`ã$ËM­–Ó¿“dÁÌ0Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁRÚøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1108execsshd20ÜS7[AIF¬•pd± (ý÷ž­n‚L&·ù˜@Dµ\Î0Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁRÚøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1108execsshd20ÜS7[AIF¬•pd± (ý;N¦ïcKA¯QŠ1Ià™Ð0Šœ Öd'“Fz鮨'üvº‘Oè´¼s>W³¼AÑ7>í<Úøñº”ûð‹+aue_lseek̳hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1108execsshd20ÜS7[AIF¬•pd± (ý)ÑJ+ÕIU´0χ7€™„Ò0Šœ Öd'“Fz鮨'üvº‘Oè´¼s>W³¼AÑ7>í<Úøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1108execsshd20ÜS7[AIF¬•pd± (ý`€‡Ï¹‰A׈€#!(Ô0Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁRÚøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1108execsshd20ÜS7[AIF¬•pd± (ýÀ­Ùí7òB¦ëht01;Ö0Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁRÚøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1108execsshd20ÜS7[AIF¬•pd± (ý×´”»Fz鮩'üvºô20ÜS7[AIF¬•pd± (ý×´”°Fz鮩'üvºô20ÜS7[AIF¬•pd± (ý §VïAt^‡¹Ì‰ÆÞœòÀ×´”°Fz鮩'üvº×´”»Fz鮩'üvº20 ÜS7[AIF¬•pd± (ý] 7Ô‘@x¼ÐeÌ^ bõØŠœ Öd'“Fz鮨'üvº§VïAt^‡¹Ì‰ÆÞœòÀ×´”»Fz鮩'üvºÚøñº”ûð‹+aue_socketpair ret_fd19ret_fd210hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý‰I2ÌÏqA²}¡çŠÚ"Šœ Öd'“Fz鮨'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý÷3ííMR†ÎkÏVdËÜ"Šœ Öd'“Fz鮨'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý×´©³Fz鮩'üvº‚Öd'“Fz鮨'üvº™, Bª¢T$µ„äý`ÚÚøñº”ûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý–øNjKMI¢Ö,w²ø»Þ$Šœ Öd'“Fz鮨'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_fork +arg_pid1281hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1281ppid1108execsshd20ÜS7[AIF¬•pd± (ýö‘Š±üÇF¯®nêV:ÆBà +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setgidgidë +arg_gid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýiPxùIp‚ªR’‘Öâ<Œœ ×´©³Fz鮩'üvºZ2°Ë1]±m‘¨/etc/groupÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd110hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value10ppid1278execsshd20ÜS7[AIF¬•pd± (ý©ÀŸ{#Ft®í¸hcuBlä0Œœ ×´©³Fz鮩'üvºZ2°Ë1]±m‘¨Úøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd10ppid1278execsshd20ÜS7[AIF¬•pd± (ýAUÿ‹& IOˆ’™”Güñæ0Œœ ×´©³Fz鮩'üvºZ2°Ë1]±m‘¨Úøñº”ûð‹+aue_lseekðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd10ppid1278execsshd20ÜS7[AIF¬•pd± (ý N〬æJ¹ž¿«E¨{茜 ×´©³Fz鮩'üvºZ2°Ë1]±m‘¨Úøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd10return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý&Ã8½,ÛG¯¢‡Þ]<;7ê,Œœ ×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setlogin +hostHdc53375b-4149-46ac-9570-64b1090f28fd +loginuserreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýø<Ì]ÝOÞyÄõ2ûçì6Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1278execsshd20ÜS7[AIF¬•pd± (ýÈõH³Em¤ƒ,!âMî6Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1278execsshd20ÜS7[AIF¬•pd± (ýñ©Oº7C[£«óó™O²íð +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setuiduidë +arg_uid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý Çú]©XBcˆt÷Mcjò +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýÀöW@Aµ¡é …×H£ô +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý +NÐ$a![¡ú¼û!Ã.20 +ÜS7[AIF¬•pd± (ý€VÐ ƒNú™à¤}Ó'Zö<Œœ ×´©³Fz鮩'üvºNÐ$a![¡ú¼û!Ã.,/home/user/.login_confÚøñº”ûð‹+aue_open_rwtc +flagsmode +ret_fd110hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value10ppid1278execsshd20ÜS7[AIF¬•pd± (ý&I ð>—O€›(D°‹h'øŒœ ×´©³Fz鮩'üvºNÐ$a![¡ú¼û!Ã.Úøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd10return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý ¯Û›â°I+·âf`ú<Œœ ×´©³Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confÚøñº”ûð‹+aue_open_rwtc +flagsmode +ret_fd110hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value10ppid1278execsshd20ÜS7[AIF¬•pd± (ýë€Y7.ÞL–ü"xsüŒœ ×´©³Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd10return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýÃË£9MÓš;ú~ +0þ +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýš!M¿O ¹_†f:j¨a€ +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýH¨Þ/Bp‘»W)ùã‚6Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1278execsshd20ÜS7[AIF¬•pd± (ý 0qâOßš´]´þŽºž„ +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý=¢ÑE@H¾#B™¯y>F† +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý*ŸÜO•¤Ü‡ö +«kkˆ<Œœ ×´©³Fz鮩'üvºNÐ$a![¡ú¼û!Ã.,/home/user/.login_confÚøñº”ûð‹+aue_open_rwtc +flagsmode +ret_fd110hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value10ppid1278execsshd20ÜS7[AIF¬•pd± (ý¢ÑÖéÂÂFܾ¤ã$òÊŠŒœ ×´©³Fz鮩'üvºNÐ$a![¡ú¼û!Ã.Úøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd10return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýwÑ…ë¢ÇN’•’óPm‡Œ<Œœ ×´©³Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confÚøñº”ûð‹+aue_open_rwtc +flagsmode +ret_fd110hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value10ppid1278execsshd20ÜS7[AIF¬•pd± (ýp7jhJñNùŽ¥Ë+ˆ·Þ㎌œ ×´©³Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd10return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý:@Ð+*õHIµ¯ž=Ð÷ +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ªøý©Oö)Z¦D®–&¾Æ¡¥…’ +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý… m[ ïC+¿ÂtîÊ'ó”6Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1278execsshd20ÜS7[AIF¬•pd± (ý×µÎFz鮩'üvºô20ÜS7[AIF¬•pd± (ý×µÍFz鮩'üvºô20ÜS7[AIF¬•pd± (ý VÔt°_å“-º?XŒ×µÍFz鮩'üvº×µÎFz鮩'üvº20 ÜS7[AIF¬•pd± (ý!>-(SIÚ‡›=åÎ?ž–Œœ ×´©³Fz鮩'üvºVÔt°_å“-º?XŒÚøñº”ûð‹+aue_pipe ret_fd110ret_fd211hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý›!jä‰O,´KÜT¯BM¬˜"Œœ ×´©³Fz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýÅ›æ&H¡ŒÀý¡PEš"Œœ ×´©³Fz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýѸ4¼]ÛEꋼzá| 9Ñœ"Œœ ×´©³Fz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1278execsshd20ÜS7[AIF¬•pd± (ý¦ˆùuî¶HŽªa_VPpÊž"Œœ ×´©³Fz鮩'üvº×µÍFz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýb]V9eAZ¥VçaDÍ "Œœ ×´©³Fz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1278execsshd20ÜS7[AIF¬•pd± (ýù8ŽLø¦Q?Ë3“Ái¢"Œœ ×´©³Fz鮩'üvº×µÎFz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý沈 ÜEš»Ñp‚¾,ä>Šœ Öd'“Fz鮨'üvºÚøñº”ûð‹+ aue_posix_openpt +ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ý +í( ö~R¶ ~{‚~¯20 +ÜS7[AIF¬•pd± (ýZŒ8}åMy®Þ–µ`¯˜¦<Šœ Öd'“Fz鮨'üvºí( ö~R¶ ~{‚~¯/dev/pts/0Úøñº”ûð‹+aue_openat_rwtc +flagsmode ret_fd111hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value11ppid1108execsshd20ÜS7[AIF¬•pd± (ýGÍ­:=ÒJã˜5žÀŒ [¨<Šœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨/etc/groupÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1108execsshd20ÜS7[AIF¬•pd± (ýÊ®NrƒüKË€ëéZàÒõŪŠœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÓc^±@éN§ÊÇDu'l¬4Šœ Öd'“Fz鮨'üvºí( ö~R¶ ~{‚~¯/dev/pts/0¦€ÑÄ”ûð‹+aue_chownuidëgid arg_uid1003arg_gid4hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¨Æèl–Dã¬4êÒÝ}©®<Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g/etc/spwd.db¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1108execsshd20ÜS7[AIF¬•pd± (ýîFÓÂg¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýfÚ*xKƒ¶õ<—^?4²@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý Ï‘ÔHŒ¸ÿLQjcR´@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý*Ð÷í@ô¯(t´9òú¶@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý’ë–JsGÓ‚¬ RoKȸ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýý¶lNmAE, Þné§âfº@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý‘”BœûÇNX³êK¼@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý”¾Ã¡Š‡CYªêSm ʾ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý#^Åq›ÇE˜D1oJÙÀŠœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +‹»Äñþ^ñVE®þ;À20 +ÜS7[AIF¬•pd± (ýS“56I%™œ¼ëAD|Â<Šœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À,/var/log/utx.lastlogin¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1108execsshd20ÜS7[AIF¬•pd± (ý8…·3¡'D—7QÆf~– ÄŠœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý{[?ÞÞBr’ó(y¦¤ÑÆ<Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g/etc/spwd.db¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1108execsshd20ÜS7[AIF¬•pd± (ý%$1ŠýC7²Ì4èl U{È@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý‡ámvAY†u§´™iÑÁÊ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý\³9 ØAX‚$)„In«6Ì@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý ZȾGÉ·ÂVâ˜ÞÎ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýE†ü^G_ŒnÈ+ ÿÐ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý²O0^°F“¡C³6Ä\YÒ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýÐ6¨I'§‘Ú­{ ýÔ@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý‡É 7âDØ´ÂFKå!Ö@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý•óÎ'qH€… &x¡˜Ë‹ØŠœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +—¢y:SU™:Z•SØŽ20 +ÜS7[AIF¬•pd± (ý›ðZE…C0ŸÑôªò*Ú<Šœ Öd'“Fz鮨'üvº—¢y:SU™:Z•SØŽ&/var/run/utx.active¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1108execsshd20ÜS7[AIF¬•pd± (ýeRð2#E< É{¹Ëhý8Ü<Šœ Öd'“Fz鮨'üvº—¢y:SU™:Z•SØŽ&/var/run/utx.active¦€ÑÄ”ûð‹+aue_open_rwtc +flags"mode¤ +ret_fd113hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value13ppid1108execsshd20ÜS7[AIF¬•pd± (ýþk˜g,Gò2!JÌéÞ"Šœ Öd'“Fz鮨'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value +16386ppid1108execsshd20ÜS7[AIF¬•pd± (ý +Ë•\N9»çZž`¹ +àŠœ Öd'“Fz鮨'üvº—¢y:SU™:Z•SØŽ¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÇ0ôOI¶3wŒÝ–êâ<Šœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À,/var/log/utx.lastlogin¦€ÑÄ”ûð‹+aue_open_rwtc +flags"mode¤ +ret_fd113hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value13ppid1108execsshd20ÜS7[AIF¬•pd± (ýãëä^Ny¥mÖx'¹ä"Šœ Öd'“Fz鮨'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value +16386ppid1108execsshd20ÜS7[AIF¬•pd± (ýz*ó4BЩÏD«`Ì<æ0Šœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À¦€ÑÄ”ûð‹+aue_lseek”hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13ppid1108execsshd20ÜS7[AIF¬•pd± (ý•4OZAs¸Í eT!(è0Šœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À¦€ÑÄ”ûð‹+aue_lseekŠhostHdc53375b-4149-46ac-9570-64b1090f28fdfd13ppid1108execsshd20ÜS7[AIF¬•pd± (ýð$ì*úGCᤞCÜíÝ(cꊜ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý +E¨h§ ‘]Œ§\œ‘»ù20 +ÜS7[AIF¬•pd± (ý†(7‹²îGu•èq"GéÀì<Šœ Öd'“Fz鮨'üvºE¨h§ ‘]Œ§\œ‘»ù /var/log/utx.log¦€ÑÄ”ûð‹+aue_open_rwtc +flags mode¤ +ret_fd113hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value13ppid1108execsshd20ÜS7[AIF¬•pd± (ýuxW¡Ô_L"¢ ± 6zîbŠœ Öd'“Fz鮨'üvºE¨h§ ‘]Œ§\œ‘»ù¦€ÑÄ”ûð‹+aue_writev¦hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13ppid1108execsshd20ÜS7[AIF¬•pd± (ýyî;ÇBÚ¾õʵgðŠœ Öd'“Fz鮨'üvºE¨h§ ‘]Œ§\œ‘»ù¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýž’¹z:…KE‘ (2I¤®òŠœ Öd'“Fz鮨'üvº—¢y:SU™:Z•SØŽ¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýãи|F;¢Làîh¯‹¥ôŠœ Öd'“Fz鮨'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd0return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÍ"Úæƒ/BÇŸâfï‹$ÊMöLŠœ Öd'“Fz鮨'üvº×´”»Fz鮩'üvº¦€ÑÄ”ûð‹+aue_sendmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd10ppid1108execsshd20ÜS7[AIF¬•pd± (ýªRE}’TCY•œë‹røLŠœ Öd'“Fz鮨'üvº×´”»Fz鮩'üvº¦€ÑÄ”ûð‹+aue_sendmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd10ppid1108execsshd20ÜS7[AIF¬•pd± (ýyÍ*›¦ÐO1¢ø÷³uÒ8ýú<Šœ Öd'“Fz鮨'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/null¦€ÑÄ”ûð‹+aue_openat_rwtc +flagsmode ret_fd10hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý…úKnHDH›PÉXÃöüŠœ Öd'“Fz鮨'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd11return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÈpÕŸèIÍ¿Æ[Š‘0?æþ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¦€ÑÄ”ûð‹+aue_readhhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýg4µÊJ„ +¹íš‰Á€ JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦€ÑÄ”ûð‹+aue_sendtoŠ +ret_msgid374hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý©]Ís''Cýé‡bú@ß‚ Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦€ÑÄ”ûð‹+aue_recvfromŠ ret_msgid374hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÒLÜ )qMF†Ð•1kF„ FŒœ ×´©³Fz鮩'üvº×´”°Fz鮩'üvº¦€ÑÄ”ûð‹+aue_recvmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1278execsshd20ÜS7[AIF¬•pd± (ý*a®a’ãK®CËmc9ÆÛ† FŒœ ×´©³Fz鮩'üvº×´”°Fz鮩'üvº¦€ÑÄ”ûð‹+aue_recvmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1278execsshd20ÜS7[AIF¬•pd± (ý×µ¨Fz鮩'üvº„×´©³Fz鮩'üvº°äÿ§®]vRS<„äB±¦€ÑÄ”ûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýeRµk8@õ¸ x­Qcˆ $Œœ ×´©³Fz鮩'üvº×µ¨Fz鮩'üvº¦€ÑÄ”ûð‹+aue_fork +arg_pid1282hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1282ppid1278execsshd20ÜS7[AIF¬•pd± (ýojEÛxNF–3Ý?Š Œœ ×´©³Fz鮩'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýƒwUa®Fþ‚»@×T˜" Œ "Œœ ×´©³Fz鮩'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýffíÒùCI–!Z=þDŽ "Œœ ×´©³Fz鮩'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý‡, àHâ‹DŒ"> "Œœ ×´©³Fz鮩'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1278execsshd20ÜS7[AIF¬•pd± (ýáä³>„ÿEC‰[%ІŒ’ "Œœ ×´©³Fz鮩'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýÒH'C‘Jt„È7btêfO” "Œœ ×´©³Fz鮩'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value6ppid1278execsshd20ÜS7[AIF¬•pd± (ý «»…Ký«¼âÝêÃ3– JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦€ÑÄ”ûð‹+aue_sendto˜ +ret_msgid375hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýуնNŠ‰6¨«®À³®˜ Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦€ÑÄ”ûð‹+aue_recvfrom˜ ret_msgid375hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýy}ùã C:mƒÊ‘Çš <–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯/dev/pts/0¦€ÑÄ”ûð‹+aue_openat_rwtc +flagsmode ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value12ppid1281execsshd20ÜS7[AIF¬•pd± (ýÖ¼©KÉBTÖZ—Â7žTœ –œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýÈR8Jµ‹mŠ[Ež <–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯/dev/tty¦€ÑÄ”ûð‹+aue_openat_rwtc +flagsmode ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value12ppid1281execsshd20ÜS7[AIF¬•pd± (ý”q•¶·M‡À™k€ò  –œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýRD‰QcH­Š´0ÅÉ>˜¢ –œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýž•D¯FA¸ˆNÇÎ?n+¤ JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦€ÑÄ”ûð‹+aue_sendto¬ +ret_msgid376hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÞ 2pEº–Áðúü{¦ Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦€ÑÄ”ûð‹+aue_recvfrom¬ ret_msgid376hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý +üñ§ª–X_–ªu{X„ç20 +ÜS7[AIF¬•pd± (ýàÊO冿HD‡ͤG€Òï¨ <–œ ×µ¨Fz鮩'üvºüñ§ª–X_–ªu{X„ç/etc/motd¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1281execsshd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"–ÔúÝ5Ü*-˜L ’æ.Óøö³ª –œ ×µ¨Fz鮩'üvºüñ§ª–X_–ªu{X„禀ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýX‰`"¡ŸAß¾FP¨áCc5¬ +–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº¦€ÑÄ”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýŠãÔØO9MS£qùÂè÷ô&® +–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº¦€ÑÄ”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýs'Ô(ùMãºÓÁÕ'íÀ° <–œ ×µ¨Fz鮩'üvºNÐ$a![¡ú¼û!Ã.,/home/user/.login_conf¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1281execsshd20ÜS7[AIF¬•pd± (ýØ$Ѫí>M°½ñŠZqÅñ² –œ ×µ¨Fz鮩'üvºNÐ$a![¡ú¼û!Ã.¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýãZ™0H¼CP¯U)‚´ <–œ ×µ¨Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.conf¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1281execsshd20ÜS7[AIF¬•pd± (ýh’¢tŸE_ªzDÿÓ/õ±¶ –œ ×µ¨Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý¼~ycçCË‹`ã¹¼fL¸ +–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº¦€ÑÄ”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý„–ƒJ§‰(!ßœ‚ݺ +–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº¦€ÑÄ”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýô½ä»­Où£èÂÌ»¥¼ –œ ×µ¨Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<¦€ÑÄ”ûð‹+aue_closefrom +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd11return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý +€-§q0]±+G-0D20 +ÜS7[AIF¬•pd± (ý²üª€ÜG.›ÚTêAR¾ 6–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº€-§q0]±+G-0D/home/user¦€ÑÄ”ûð‹+aue_chdirhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý +쀡ùÊ_¹¡Zy?ʹ20 +ÜS7[AIF¬•pd± (ýPõŒ'_F:Œ V¦¡2’À –œ ×µ¨Fz鮩'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¦€ÑÄ”ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine +-bashppid1281execsshd20ÜS7[AIF¬•pd± (ýÛþUëþG¤£%Äu—~ <–œ ×µ¨Fz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¦€ÑÄ”ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýøþY¾í[Az·Ý€9"ü»Ä @–œ ×µ¨Fz鮩'üvº‰oý©äÇU¤©A)Eǹ ¦€ÑÄ”ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýÌ +.cñeM.„“*“5ªh†Æ –œ ×µ¨Fz鮩'üvº‰oý©äÇU¤©A)Eǹ ¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýkÈTi¿D$°£6„?ÑÈ <–œ ×µ¨Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¦€ÑÄ”ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýKá—'Lh¢9Q7êà ëÊ @–œ ×µ¨Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â¦€ÑÄ”ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýŸë“•ÑBû€#Wœ¡|²Ì @–œ ×µ¨Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â¦€ÑÄ”ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý˜Ú-Ó~H¬†¤~Ðc!Î –œ ×µ¨Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý +âpÑ +m.×W®mAs××¼›20 +ÜS7[AIF¬•pd± (ýoÎv·&iLŠ)ô·Ãõ˜Ð <–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8¦€ÑÄ”ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýá³h¡GW”#•÷ä2êÒ 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý HrhòK…Q®kn{¤Ô 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýÉ«fó´pLŃªÖµ}³LÖ 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýl˜£¦À@FƒÌ3\“3ÀØ 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýš¶ÒÛIGb‡ú_Íè”Ú 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý‡{?Ü1áE©«J×M¨ Ü 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýæCÜë&O8“í:dx6¬‚Þ 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý²Èœ(OƒL)pôÞƒ«5à 2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý‹re±JŒŸÕJtÃÃ4 â –œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý +m/"P;=\»P½¤¬=P_20 +ÜS7[AIF¬•pd± (ý&SÛdžKk¢´ad';ä <–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8¦€ÑÄ”ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý8®žbI6D™ ƒ@ñ±ÑÃæ 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý—Y˜(ÌI‰€ª9ÿJ!vè 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýxãˆïB6¿þ +£Ë÷Dê 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýc|Cï$N[G—c†M»ì 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý͘QŽ+ºGØ‹ðÃô”oØ°î 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý߬Z.ªH¤‹øè àðdð 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý花ÛN›CSX#ò 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý>*CAd—Ì"Q2®Ïô 2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýkôÎØO’º@uóBC;ö –œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý +"‘ûŽdkÇ[«d.µ[ÇÕ20 +ÜS7[AIF¬•pd± (ý/¾½T¨Cö˜å¦[rò|ø <–œ ×µ¨Fz鮩'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1¦€ÑÄ”ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý:lßglM¥üS¾ÆRËæú 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´Ø÷ˆ•ûð‹+aue_lseek‚•hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³†6IK·—QøàÌ8üü 2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý¼¥ÙjƒëAF‹QE»€JÍ`þ 2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýDåøoû«J°±¡§ôjÌ€ +2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýîÖjKJ)F.‚†›™šŠzV‚ +2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý=«ý@F­Š­-¡»õA„ +2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý8ødk¢A(¡fí>ÜV¹† +2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýÚ«¦FJg¦y´ŠÓÂ<éˆ +2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýjÚO©YD¶·3 “Š +2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýsF‡HÍL—Qϸ9™ÐOŒ +–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý.mXð‡Cç“#Ò3ëË«.Ž +:–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý[,C@NGi‡|Û©ô¸®˜ +:–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýÏÕ‘¹ùòIе +<$c“y’ +:–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý×äA‚5´G?¸°Ú÷lpØ” +:–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýÈõ¼mJ¸ob ­³– +:–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýû EÉPôDίñG!{9º¢˜ +<–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯/dev/tty´Ø÷ˆ•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý9,+J×ODÓƒ9ìú×Ljš +–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý1:CmÞ+M€ªs¾€Í*éœ +<–œ ×µ¨Fz鮩'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.conf´Ø÷ˆ•ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýªzå+H »ô•½–О +@–œ ×µ¨Fz鮩'üvºÜN½Ëê¯+^¯êZ£®+V´Ø÷ˆ•ûð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý,s6êöB¼”ˆØ A@  +@–œ ×µ¨Fz鮩'üvºÜN½Ëê¯+^¯êZ£®+V´Ø÷ˆ•ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý×|²>\NrŒcpæ¥Ò[¢ +–œ ×µ¨Fz鮩'üvºÜN½Ëê¯+^¯êZ£®+V´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý +fš Ž_è^ŸŽkèþ–20 +ÜS7[AIF¬•pd± (ý¹ª8àÅGêƒù5T4?:¯¤ +<–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–/etc/pwd.db´Ø÷ˆ•ûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýHUPí€CN”Zßä&÷ç¦ +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýÆ=-—ËbLp€Æk‘çܤj¨ +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýßriÑè$Mð˜çÀ]XÊÅ4ª +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýæn y–BJ˜Ò?âV×9¬ +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýÙ±ïoCÄ¥û’Þï«Òu® +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýîµ`ÛàH¡(m“Ü!| ° +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýËÕׄqmE ¼ÏàA‚ÝëF² +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"œ¾ûl¥(ÌêFÀ‘&°ôf{¿í´ +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýg*ÔÅœ5Kܱ‰xŸµåç¶ +@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýUUˆ«ÞáBä–ÓW10¸ +–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýéCÂ!n%Fƒs]Ï>#öغ +JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº´Ø÷ˆ•ûð‹+aue_sendto˜ +ret_msgid377hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýOòÿΓ F½€¼6dørÛß¼ +Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº´Ø÷ˆ•ûð‹+aue_recvfrom˜ ret_msgid377hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýˆÁfú +ûK<³8xÀª_¾ +–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý`€ªgòBɪÍhN^$çÀ +"–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý +–Ø%™wyïR¹wT’ï920 +ÜS7[AIF¬•pd± (ý2¡É]5jG‘áÖ¡ï·±) +<–œ ×µ¨Fz鮩'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.db´Ø÷ˆ•ûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý¹‹àF8—>lÙ›)ÛÄ +@–œ ×µ¨Fz鮩'üvº–Ø%™wyïR¹wT’ï9´Ø÷ˆ•ûð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýj¥?åTŒLGŒT ¢®——Æ +@–œ ×µ¨Fz鮩'üvº–Ø%™wyïR¹wT’ï9´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý"¯`Ó¹D׃I˜çÿT¹%È +@–œ ×µ¨Fz鮩'üvº–Ø%™wyïR¹wT’ï9´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýçÚÏ:þO¹­iØÒ 4ü4Ê +–œ ×µ¨Fz鮩'üvº–Ø%™wyïR¹wT’ï9´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý +ÍÈ‘uu®Sµuåî420 +ÜS7[AIF¬•pd± (ýa"-l;@ð£"‰ï‡sQÌ +<–œ ×µ¨Fz鮩'üvºÍÈ‘uu®Sµuåî4/etc/profile´Ø÷ˆ•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý§…„Y@.¾qЇ"'Œ5Î +@–œ ×µ¨Fz鮩'üvºÍÈ‘uu®Sµuåî4´Ø÷ˆ•ûð‹+aue_readähostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý³0hß«¸B\±åëÀ%k^Ð +–œ ×µ¨Fz鮩'üvºÍÈ‘uu®Sµuåî4´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý +ö"УîêZ›îÀÀªê&ã20 +ÜS7[AIF¬•pd± (ýÍ|_ê¨ôGxµƒ ÿš³§õÒ +<–œ ×µ¨Fz鮩'üvºö"УîêZ›îÀÀªê&ã&/home/user/.profile´Ø÷ˆ•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý^ ÂÄ@Ø!¥<*8Ô +@–œ ×µ¨Fz鮩'üvºö"УîêZ›îÀÀªê&ã´Ø÷ˆ•ûð‹+aue_readâ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý…{­wHr´}RkEº}Ö +–œ ×µ¨Fz鮩'üvºö"УîêZ›îÀÀªê&ã´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý×Á…çFz鮩'üvº†×µ¨Fz鮩'üvº°äÿ§®]vRS<„äB±戒‘•ûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý lÝÆq¤Kùœ_ó—ÍæØ +$–œ ×µ¨Fz鮩'üvº×Á…çFz鮩'üvºæˆ’‘•ûð‹+aue_fork +arg_pid1283hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1283ppid1281execbash20ÜS7[AIF¬•pd± (ý +°FL ¼"X¼ 5¢ø"¬£20 +ÜS7[AIF¬•pd± (ý'b(ˆO­î:t¡c{Ú +šœ ×Á…çFz鮩'üvº°FL ¼"X¼ 5¢ø"¬£$/usr/bin/resizewin'ìAzX™¦}˜¹(/libexec/ld-elf.so.1戒‘•ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine*/usr/bin/resizewin -zppid1282execbash20ÜS7[AIF¬•pd± (ý#ÊísíAM¨§E®ÜJ]ÚÂÜ +<šœ ×Á…çFz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf戒‘•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execresizewin20ÜS7[AIF¬•pd± (ý'þ1x4Kª‡­(.ÁÜ;Þ +@šœ ×Á…çFz鮩'üvº‰oý©äÇU¤©A)Eǹ 戒‘•ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ý¦ hjMáº)˜þ 5-là +šœ ×Á…çFz鮩'üvº‰oý©äÇU¤©A)Eǹ 戒‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ý.ÿ±aKË©ÞµtÚp?â +<šœ ×Á…çFz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints戒‘•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execresizewin20ÜS7[AIF¬•pd± (ý¡IdNÒ¥NO´Ûºçî’÷Úä +@šœ ×Á…çFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýÌ(U «mKœ²ÈÐé§Nfæ +@šœ ×Á…çFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýç‘~=#@“†¥<ág¦§è +šœ ×Á…çFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ýʈÇì×C–ZÝ¥”G^ê +<šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7戒‘•ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execresizewin20ÜS7[AIF¬•pd± (ý€ö;-½M¾… /µ”L¨ì +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýöU œ! D•¹UÍJÒÇ°î +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýã uRí@Uµè—ÖiWð +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýbîKª JK¢âÊÖÀoËò +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýØFÖìÂWJ,¢&œðQºQô +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýÐw¡°&vL‡ºäâI8ö +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ý—2á¥LÁœ:çw;»(aø +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýŒƒå/JÙ‡<¡^}{ú +2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýÚÚ•Œ +ƒLZ‰=Wåõõ½ü +šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ýî€n3yGBpª”ˆ[¥õÅþ +:šœ ×Á…çFz鮩'üvºæˆ’‘•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ý¬¢†% @|•hà3©È‹N€ :šœ ×Á…çFz鮩'üvºæˆ’‘•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ýDÖ*<ëLš“Ô´|ä]Ž‚ <šœ ×Á…çFz鮩'üvºí( ö~R¶ ~{‚~¯/dev/tty戒‘•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýlw>›B‰ñsÝH”„ šœ ×Á…çFz鮩'üvº×Á…çFz鮩'üvºæˆ’‘•ûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ý×ÂlFz鮩'üvºˆ×µ¨Fz鮩'üvº°äÿ§®]vRS<„äB±戒‘•ûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýTÒÑò.AL¹ÖØ%êmL† $–œ ×µ¨Fz鮩'üvº×ÂlFz鮩'üvºæˆ’‘•ûð‹+aue_fork +arg_pid1284hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1284ppid1281execbash20ÜS7[AIF¬•pd± (ý +—>Ï¿ä7Q·äAºaG20 +ÜS7[AIF¬•pd± (ý>oÍ[kN•&Ð!T&ƈ šœ ×ÂlFz鮩'üvº—>Ï¿ä7Q·äAºaG /usr/bin/fortune'ìAzX™¦}˜¹(/libexec/ld-elf.so.1戒‘•ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine:/usr/bin/fortune freebsd-tipsppid1282execbash20ÜS7[AIF¬•pd± (ý áAö¼sM¢´U°g¼øÕúŠ <šœ ×ÂlFz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf戒‘•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execfortune20ÜS7[AIF¬•pd± (ýMò¬_@H‹rËk'tŒ @šœ ×ÂlFz鮩'üvº‰oý©äÇU¤©A)Eǹ 戒‘•ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ý¹Í£¤òL´Õu2»sPŽ šœ ×ÂlFz鮩'üvº‰oý©äÇU¤©A)Eǹ 戒‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execfortune20ÜS7[AIF¬•pd± (ý½›þi½F˜2hâ8£ŽF <šœ ×ÂlFz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints戒‘•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execfortune20ÜS7[AIF¬•pd± (ý•ûÝ(cpK­©ÒÂÄ#Œ’ @šœ ×ÂlFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ý¼mUhËOº¬^{m/WÚ” @šœ ×ÂlFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýM5˜ (†G0£¤}ló…渖 šœ ×ÂlFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execfortune20ÜS7[AIF¬•pd± (ý +Pª!YÂI©±/i‚ +û^˜ <šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7戒‘•ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execfortune20ÜS7[AIF¬•pd± (ýcdÌvIšSpMqõÔš 2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ý~4‰oßIBn¢hd€2$稜 2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýó÷¡ÌÊPH.³g´‡‘E©ž 2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýÞ…ó.iwGk½äýùú  2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýOƒç·äC7Ùß$Ï*¢ 2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€Àå arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýBG7¾Y;Ff¿z“ÕC?i¤ 2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€Àå arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ý›'¿HhCP¨‡tW€c¤A¦ 2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€ˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ý3OÔ–_ŠDÁ¨¯µñÒ¨ 2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€ˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ý¾`Š¾ŽNã…$_úb)Pª šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execfortune20ÜS7[AIF¬•pd± (ý´yÃ+}KK(¢Í^}ÌP T¬ :šœ ×ÂlFz鮩'üvºæˆ’‘•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execfortune20ÜS7[AIF¬•pd± (ýÓänôäFê™nî}«0Yp® :šœ ×ÂlFz鮩'üvºæˆ’‘•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execfortune20ÜS7[AIF¬•pd± (ý’ÏÚÊ…=B#¡Öw5>Úè¿° 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+aue_lseekÄ  hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾Ó¾‰¦O;…Àm9-º² 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+aue_lseekÄ  hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$iÂùΘµbá´ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýDKÓ©L~@Q‡»”ÒdL`öº ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+20ÜS7[AIF¬•pd± (ýgúèÃÈ&D¬¹à—™¿ôj¸ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýð4NÌi@õ• p^Ñ€n¾ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+20ÜS7[AIF¬•pd± (ýñɡºFª”5†½gŒµ@¼ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ým0íÚÃM€’µAü‹ž ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¨‚ûX…Öï¿Ilž¨L§»2LàÀ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæ¨XÕêáHí‡0¾ÚúœÏñÆ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+20ÜS7[AIF¬•pd± (ý¾µ:ÁƒJÖŠäŸà:)Ä @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢ÔŽn‘]C§˜€Š‹íPÛÊ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+20ÜS7[AIF¬•pd± (ý +µ®]Š®I€•ia?ÇñÊØÈ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎð¼ðV°BµT?²I ÆéÎ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+20ÜS7[AIF¬•pd± (ý*7Þ——HšhÎÿ|Ì @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€­VyI[—à8G!Œ:Ò ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+20ÜS7[AIF¬•pd± (ý—²æ¬ÆkFeºätAíknÐ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕ´qf±æI‚ 4Ø=x´Ö ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+20ÜS7[AIF¬•pd± (ýo4×îíE„‡ŠûÅö•[ÚÔ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊM¯qoA¸4š·+œ¹Ø :‚œ Ê +ÙKFzé®›'üvºÒèÁÝœûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™ŠšJœ‚ž§õ<²nÚ @œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈÊÆOs˜F…´\~›²hÜ @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~¤ÕÉÞYAc°ÕÍô˜.þÞ @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadŒ@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷Œ2ÌÕVLà¼ùNº»à bœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýA#“pmN:”¦°Ô›æìâ b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÒèÁÝœûð‹+aue_writeö@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—».aÅÇLΞå¬o­ä @œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýlT +ÌÜM3¦ FV™|æ @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»¨*”Eyµ'þj”|ÉÒè @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadä8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇCqpyšF†ÐÚþÅŸoê bœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4µxa³…Nå¢Hžjääåì b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÒèÁÝœûð‹+aue_writeÎ9hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”Ã¥øfDõ¨ÈnŸ KˆPî @œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýº. +ù0As äqf¢]¨rð @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ÒoMEK"•°rçeRRò @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_pread’GhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýØ4ÙÝON³FûGéô bœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬è_n]H¦Ñ5ÖCQBö b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÒèÁÝœûð‹+aue_writeüGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwIK(ÂLõ‘ßOa9»&[ø @œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀY"ð¡\O%®€¿ƒfÞú @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýžîtê @ ¹Ñº¤ü @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_pread¼AhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|¶U«bAÉ›§¨È&*èþ bœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞéPMSM±­Êc-þ&¶é€ @œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁ›Ü™HØ–N]›ó@³‚ @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõ eÛ°äOK†•í¸¤±³Ú„ @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadîIhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·rà£Aå®îæÉ­€† bœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdÕu¥ +TKÞ8'ô ,=ˆ @œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”}h“ÏJÖž^¡»hÔ.Š @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýh[ŽÔE¿J¬ªŸû÷ÈèeGŒ @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_pread”KhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŒ[ uÅGœ‘¸¨Â\ø€JŽ bœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýFå¿ŸsfN±·ÁŽuoµ @œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýTÖ³iÔ3HÔ“4©Õs±’ @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0² ŒsKlbÝ:-"” @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadÐAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°³S ù+Nd‘o¦»=ò– bœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥Z¢\IÐG׫w„Y—ô3ö˜ @œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýîƒÐOÄŽ'©Êuš @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.·ÚƒÔCò¨,U”Àœãœ @œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadâIhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýó{:M½LI´‚þ\øsAËTž 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÐÌÞ ¤ûð‹+aue_lseekÊÝ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&ÌŸé»×JÜš'ƒÔ…  @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ìÿ…°¥ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý™û8¡hOV™s{±»¢ @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ìÿ…°¥ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý=•È2-’E™¡¡£2.¤ @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ìÿ…°¥ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý:C%PpKiŸ¢„˜:M‡¦ b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ìÿ…°¥ûð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýµƒÎ¯Fzé®›'üvºš™, Bª¢T$µ„äý`ÚhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýdXŒºüG8ª¯¾ËŽéñ¨ Ô› µƒÎ¯Fzé®›'üvºµƒÎ¯Fzé®›'üvºÎå®Ó¨ûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1226exec +sleep20ÜS7[AIF¬•pd± (ýµƒÂFzé®›'üvº”™, Bª¢T$µ„äý`ÚhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý +߉Ðj_”Ðvˆj°20 +ÜS7[AIF¬•pd± (ý5£×¾åBÀ¡iN¤Ã:Ÿéª Λ µƒÂFzé®›'üvº߉Ðj_”Ðvˆj°/usr/bin/nice'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Îå®Ó¨ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine$nice -4 fsck -B -pppid1execsh20ÜS7[AIF¬•pd± (ý_6Nh¿,H•¿'@+Dë/%¬ <Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execnice20ÜS7[AIF¬•pd± (ýÛšÁÌïO²¹6Tˆ]jÞd® @Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ý‰ªªãóE‘¤5:6€õuG° Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execnice20ÜS7[AIF¬•pd± (ý£;kÏG»GìIs8 17/² <Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execnice20ÜS7[AIF¬•pd± (ýFžÌ”C1LQ Ë+Wè´ @Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýÁ;ëaë@ò•n0rÿˆ;%¶ @Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ý²åØ[êL,½-$l?ä¸ Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execnice20ÜS7[AIF¬•pd± (ý¢Æƒô~HÑ­¢¡²¡Ú¢º <Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Îå®Ó¨ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execnice20ÜS7[AIF¬•pd± (ýÆkñ,;øD^Ž±”')‰Ú ¼ 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýññ>¡æJhÝÃ]û±·+¾ 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýbÔL-ÄNA +’”r?ÈHÅ/À 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ý‘ÓêiCAX¸¼/{@ôË 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ý íÄ I –ÆèIvtÄ 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýC)¢wŸYFÏš¬àÁ|Æ 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýГ4ÇWK¦‰"l)7ºÈ 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýçfüA­OŽ²k%%Jú„Ê 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýÔrÓª¤-C½B ¶y",Ì Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execnice20ÜS7[AIF¬•pd± (ý|äW~c¦B!‘X„áÎî©Î :Λ µƒÂFzé®›'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execnice20ÜS7[AIF¬•pd± (ý¿:Ñ+„aM¸–„ÙÚP¶ +Ð :Λ µƒÂFzé®›'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execnice20ÜS7[AIF¬•pd± (ý +§d +½å X¥½g4È Î:20 +ÜS7[AIF¬•pd± (ýæð*M@˜ææôIÔÒ Λ µƒÂFzé®›'üvº§d +½å X¥½g4È Î:/sbin/fsck'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Îå®Ó¨ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinefsck -B -pppid1execnice20ÜS7[AIF¬•pd± (ýn’HßÈžA™“UmWóÖf°Ô <Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execfsck20ÜS7[AIF¬•pd± (ýø5ÎYL­’ôô[ÍرÖ @Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýZ¶¤·ƒD–mø’9o˜Ø Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execfsck20ÜS7[AIF¬•pd± (ý"/.ëQVLÈŽ¶ÁX±£ Ú <Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execfsck20ÜS7[AIF¬•pd± (ý¢ƒSx¤b@”¦ü·4;(«TÜ @Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý•½vÙÌÖI#³"l­š^Þ @Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý›NàÅND0¬ k^abã`à Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execfsck20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"˜Âû˜rÊÀ}xN×%"Ú?Ââ <Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Îå®Ó¨ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execfsck20ÜS7[AIF¬•pd± (ýÅ,¶.â–Orœ xîM4æ¯ä 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýƒW|öEæ“$Š_ÖoCæ 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýpçÿÚMG±ƒJI¬¶nSè 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýÿ-¢éHù»5º&ZUJê 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý?&ýUþEë¨ØcG=Ÿ¦rì 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€Àä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý3ñ72º’H¦”͹ 0óî 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€Àä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýj+EŒ6œKG¡¦æg«œˆð 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€‡ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýŸ¤âþF絛ì,(îò 2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€‡ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýÞ«êÖ…E`±.Mãµ1Ðô Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execfsck20ÜS7[AIF¬•pd± (ýÅ—Í*ðKQŠæÙ(›åôCö :Λ µƒÂFzé®›'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execfsck20ÜS7[AIF¬•pd± (ýþõPXÃYLæ€kG²¤Ÿƒø :Λ µƒÂFzé®›'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execfsck20ÜS7[AIF¬•pd± (ý +ö¢][ˆª_ˆ[°¿ªàô20 +ÜS7[AIF¬•pd± (ý „·¾BŒ‚ÞÏCš†7ãú <Λ µƒÂFzé®›'üvºö¢][ˆª_ˆ[°¿ªàô/etc/fstabÎå®Ó¨ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1execfsck20ÜS7[AIF¬•pd± (ýû:<KçgÕ"RSXDü @Λ µƒÂFzé®›'üvºö¢][ˆª_ˆ[°¿ªàôÎå®Ó¨ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýÙR©Fz鮩'üvºŠµƒÂFzé®›'üvº™, Bª¢T$µ„äý`ÚÎå®Ó¨ûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýËÁ·Dâ­a-»ó©þ $Λ µƒÂFzé®›'üvºÙR©Fz鮩'üvºÎå®Ó¨ûð‹+aue_vfork +arg_pid1285hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1285ppid1execfsck20ÜS7[AIF¬•pd± (ý +CHX»@naV®@–+Æaá_20 +ÜS7[AIF¬•pd± (ýè݇¾C×¹ÞíÚ³€qX€ šœ ÙR©Fz鮩'üvºCHX»@naV®@–+Æaá_/sbin/fsck_ufs'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Îå®Ó¨ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine4fsck_ufs -p -F /dev/ada0p3ppid1226execfsck20ÜS7[AIF¬•pd± (ý,Áà3±ŸElµ`¾XÏhf„‚ <šœ ÙR©Fz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý“¨y±¥Gá„àmhÄÀU„ @šœ ÙR©Fz鮩'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý† ²é\ìL+¿ü5øVƒ† šœ ÙR©Fz鮩'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýÊJ ýjI£·O e•Úˈ <šœ ÙR©Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý`“Ó¡³KdŸÃŒÛÐû +ëŠ @šœ ÙR©Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýß¿zŒîKL¤ØÁ™e#Œ @šœ ÙR©Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý.݉’2Mšìûܾ½îŽ šœ ÙR©Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý +p_/d˜AQ˜‘PÁ 20 +ÜS7[AIF¬•pd± (ý¸òVX^œA]šï2_ Œ <šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ  /lib/libufs.so.7Îå®Ó¨ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýédAð;Be²N—>ðá\†’ 2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€€µ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý²´„!Bk¥ùLÞÀ¢ñ” 2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€€µ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý™8›MnŽ7î%úêQè– 2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€Àµ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýäšdE.µÓ½ÞÈw¨˜ 2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€Àµ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý.Ú°TYÐM0³Ã +àÙOlš 2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€€¸ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý¤"¨ŸI‰òOª–ä—=œ 2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€€¸ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý›AÞœ%@6Ÿ¿0¿aŸ–ž 2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€À¹ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýQîa@IÀ¼­+ɸý  2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€À¹ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýÐ4—'K¸Š=±ž *Œo¢ šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý'ƒ¹ñæEW¹LÄÈ{·\†¤ <šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Îå®Ó¨ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýXQÿ“vAÛ™j㬤 +¦ 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€µ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýhœ¸( ûB^ŒË¡Ò#óò¦¨ 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€µ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý;³êÞNŒ#<܃}uª 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€» arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý»6–ÚFªñ9gâh’¬ 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€» arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýÇLc_\L­îgîr¬8]® 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€ú arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý¬§r³ÔôI°”²#ˆÄCh° 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€ú arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýù¼¡À vA‹ºø·1þ~² 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€Àœ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýd¡a$~ÂDz¸ƒG ð½Ï´ 2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€Àœ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýì³PªÕ‰Dm™-¨$ÃTEŽ¶ šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý Öág-LW²’!ª¼V]l¸ :šœ ÙR©Fz鮩'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýÑŽ lŒ(I2ªHù¾¨ŒYº :šœ ÙR©Fz鮩'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý\_Ä‘ç´Mã˜jø>©<†¼ :šœ ÙR©Fz鮩'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý +P܆ZÛGP‡ÛzìÐVU20 +ÜS7[AIF¬•pd± (ýž=¾ +–CW¸ðÆ×€C_é¾ <šœ ÙR©Fz鮩'üvºP܆ZÛGP‡ÛzìÐVU/dev/ada0p3äؽިûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýÿ©ª ªJǤç- ýG¢À @šœ ÙR©Fz鮩'üvºP܆ZÛGP‡ÛzìÐVUäؽިûð‹+aue_pread€€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýcêvÛäGö¸u' @šœ ÙR©Fz鮩'üvºP܆ZÛGP‡ÛzìÐVUäؽިûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý3ZÊ%Å*F­þºF¨eÔÄ @šœ ÙR©Fz鮩'üvºP܆ZÛGP‡ÛzìÐVUäؽިûð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý%1/qCM¥‡êïXW‰Æ šœ ÙR©Fz鮩'üvºP܆ZÛGP‡ÛzìÐVUäؽިûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýÁ”~†ø©AlŒ,ÊZB¦ ‚È šœ ÙR©Fz鮩'üvºÙR©Fz鮩'üvºäؽިûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý„êm‚eMZ¤Õõv©BIÊ @Λ µƒÂFzé®›'üvºö¢][ˆª_ˆ[°¿ªàôäؽިûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýœRáÇA¼H®¯xIÛð…ÄÌ Λ µƒÂFzé®›'üvºö¢][ˆª_ˆ[°¿ªàôäؽިûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execfsck20ÜS7[AIF¬•pd± (ýÃ/¬¦ÓCIŠEãß« žÎ Λ µƒÂFzé®›'üvºµƒÂFzé®›'üvºäؽިûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execfsck20ÜS7[AIF¬•pd± (ýµƒÃÏFzé®›'üvº–™, Bª¢T$µ„äý`ÚhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý’qŸ*4ËKé›ÜØ÷Ð è› µƒÃÏFzé®›'üvºµƒÃÏFzé®›'üvºÊËÒƒ©ûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec logger20ÜS7[AIF¬•pd± (ýzkŽ¶ÎLw·x@~ä«ÊÒ 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UèÁµ¾«ûð‹+aue_lseekÊÝ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖ’BoŒC€«èôgŠœ^Ö ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UèÁµ¾«ûð‹+20ÜS7[AIF¬•pd± (ýýD÷–ŸFo¿q­+}ê¿Ô @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UèÁµ¾«ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊÆÜãœ*K©É“8ß.BãØ 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶ª±ñ«ûð‹+aue_lseekÚé +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙ†[Ù ¹EÍï¾Qã½éÚ b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯’é§Ö¬ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý–f¾8ÑN`›hš„Y/±Ü R–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº¬³ï߬ûð‹+aue_killpid signumarg_pid1282arg_euid1003arg_ruid1003arg_egid1003arg_rgid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýx¨.©F…°´%êšvÞ b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¬³ï߬ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýGr£XüK&±멪ãîâà "–œ ×µ¨Fz鮩'üvº¬³ï߬ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1281execbash20ÜS7[AIF¬•pd± (ý?ÿJ·ßxDÑ™¦ï”HÕʲâ b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¬³ï߬ûð‹+aue_write*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýH2ÒC^}@£¯ºY÷Hä @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯–‚Ñš¯ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýý|âì™J¥±Â66³‰Aæ b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯–‚Ñš¯ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý7{ÄϨC'¿ñ¾;À^¼è @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Î—ãð¯ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýi®Ãè@HJ™´ñ(v£ê b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Î—ãð¯ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýè"¢FA ‘¥wïcK^Úì @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú­ì°ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"°Œü8‡öÀ¶ÅLͦƒG®CŒ+î b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú­ì°ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý4E ‘6ºGFµœÅí/Bïð @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÊŸÖû±ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýetLºF†r¤ºÊ^xò b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÊŸÖû±ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý £K®–±Lµš¢£»`¨ÆÀô @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ê„âȲûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýEk X(œM¿†¢ö˜&}´Íö b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ê„âȲûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÁX°üŒOL飗̒yø 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UøêÖ°³ûð‹+aue_lseekžƒ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤¨ŽøDx·ß“wa?Øú @–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯êÊþسûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý7Ê­¿)@Û†ÕŸ‡ùFü <–œ ×µ¨Fz鮩'üvº€-§q0]±+G-0D /usr/home/user/.êÊþسûð‹+aue_open_rwtc +flagsmodet  +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýiVÖgD“±iQµ'†“²þ –œ ×µ¨Fz鮩'üvº€-§q0]±+G-0DêÊþسûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýi ±h°QH9­ìö4„!€b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯êÊþسûð‹+aue_write*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý–°„uD‰–‰¿Ýƒ‚@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eʲµûð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýbð߯êLC®ŸÒÈ"j'„JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊ²µûð‹+aue_sendtoÚ +ret_msgid384hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý°ëÀúMº!㫘!††JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊ²µûð‹+aue_sendto˜ +ret_msgid385hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý›ó²`åM¸pÐV›¶øNˆJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊ²µûð‹+aue_sendto¬ +ret_msgid386hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý͵9šKz¼J&¤¸(KŠJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊ²µûð‹+aue_sendto˜ +ret_msgid387hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýŽGâÐdC¿‘òˆ;çXŽŒDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ²µûð‹+aue_recvfromÚ ret_msgid384hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý2ÎM:MŽC,„“™á¶&ˆŽDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ²µûð‹+aue_recvfrom˜ ret_msgid385hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýØsÀWªOû‰%ÔÿÂɸDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ²µûð‹+aue_recvfrom¬ ret_msgid386hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýoC±l3E¿°Ÿ·J‡‰›’Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ²µûð‹+aue_recvfrom˜ ret_msgid387hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýý,ÑŠ`Lϯ¡ ÜýYÏ”0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_lseekžƒ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûuTÀFJ”ˆ7uh™ðX›˜ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+20ÜS7[AIF¬•pd± (ý?¡¹§sA£_:¤´G><–@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóÞX üßB6ª±N Œ:œ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+20ÜS7[AIF¬•pd± (ýøÞ-rQ“H¬¢â]'¨«Tªš@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýF-VŠ™Hó¢Š]ïHRTÞ  ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+20ÜS7[AIF¬•pd± (ý𱟙OÏ Í*,ôõp¥ž@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýGƒ5骗Mþ¦ï6Õ1N›¤ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+20ÜS7[AIF¬•pd± (ýŽo‘œžôM>·ˆ½7¬C–¢@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýö>ÛšI°“äº}‘¹6¦:‚œ Ê +ÙKFzé®›'üvºÖë챺ûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®3JòX¢Oª­1OƒÞ–'¨@ œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Öë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½éuØäF„‹*•ä¤ž+ª@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞð_£K캡¨œ#aCæ¬@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadÐFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýú¨Ø[B:I‰ˆ4 #,LCä®b œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÖë챺ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý& €ÑÞF}¥“šº¬ªî¼°b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÖë챺ûð‹+aue_writeºGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'ì3|ÂBõµB +mŽFæ²@ œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Öë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙ8¤xD¯¯ö¬–úÇäR´@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5›Û <(C8ƒj.´tÈF¶@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_pread°EhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³Á'r“*Ll³u2Õ¡0è¸b œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÖë챺ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdØS8·xM +¤U3=Û ºb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÖë챺ûð‹+aue_writešFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýúd9å!G“¯Ù¹€§t[¼@ œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Öë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßó[&`ñ@¢´zÖâSu!¾@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšd¬ÉLiCGŒz+PÀXýÀ@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_pread¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+8Ö¥ØIî±:‡ÖdàyI6–­ XœâA!ÔD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§Õººûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿHS *bC:¦ g"…@K•ÖD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§Õººûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAŒ-ßBJ‡­ +,$,ØAÐØD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§Õººûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~©ÕØnÿB’Ÿ^ü* Š\ŒÚ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸¡ÿóºûð‹+aue_lseekÀÇ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠK¿ûyAœ›k2“Ø÷Ü@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÜƒÜã¾ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÁå[IŠ¦ØÐ^÷ôtÖÞb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÜƒÜã¾ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý™Ù©ÜØO§@³Rn´)wà@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ø–™Àûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýXt+VÄ×IÌ¢ó¿BfÙ6âb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ø–™Àûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ým-­~ªcGù±àP–ÀpQåä@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯„ùðÁûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý +[Q…¾vVS¶¾4ÿCVaí20 +ÜS7[AIF¬•pd± (ý™æ-wBe¼÷¤f¼½kæ<–œ ×µ¨Fz鮩'üvº[Q…¾vVS¶¾4ÿCVaíD/home/user/ripe-prov-tests-master/„ùðÁûð‹+aue_open_rwtc +flagsmode¾Ð +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýþ›Œ·}N“ R0ßKâè–œ ×µ¨Fz鮩'üvº[Q…¾vVS¶¾4ÿCVaí„ùðÁûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý7]Ló…ÚcÍ3? ³ÀžJ¢œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº´è…¥Éûð‹+aue_sendtoÞ +ret_msgid389hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýíÉÌ¿¶I?ŠžC®\Ï Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº´è…¥Éûð‹+aue_recvfromÞ ret_msgid389hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÓ‘ECušÚX¾Â’Ä¢bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK´è…¥Éûð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýewo¶ +C4¸Rle³DXŤD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº´è…¥Éûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶$ëóA˜t[첿¦D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº´è…¥Éûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåAöZCm…«0ב¨D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ’ø­Éûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýè>ËÑ1gKdŒ28EL]ôüªD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ’ø­Éûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|ïöC¦A¼± ˆpæ#)T¬0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ÄäƒÊûð‹+aue_lseek°‰ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý15Û<²E/¸sRÅž&G£®@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯îŒæ‰Ëûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýïôº‰9Oº¾ +ª–ÉŠ¯²°@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯îŒæ‰Ëûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý(ZämåÍJÏ£{aC§`ØZ²@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯îŒæ‰Ëûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý5yšnWN…‡c*\Q >´b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯îŒæ‰Ëûð‹+aue_write@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýB·eøŽI’I>H`Ÿ´¶@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e€ßŸßËûð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÊæ +÷;=@VŠNxÑ;?¸JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ßŸßËûð‹+aue_sendtoÚ +ret_msgid390hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýn¦Ü„Lù€>H3ö2lºJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ßŸßËûð‹+aue_sendto˜ +ret_msgid391hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÍ`ˆ1ÒH‡h[¨ŠÚ‰²¼JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ßŸßËûð‹+aue_sendto¬ +ret_msgid392hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýƒÍ}B’J©%¿ä^s¾JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ßŸßËûð‹+aue_sendto˜ +ret_msgid393hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý`9sNH@Ñ¢º%O#@VÀDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ßŸßËûð‹+aue_recvfromÚ ret_msgid390hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÒ +Z¥Eט ICÕ߯ÂÂDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ßŸßËûð‹+aue_recvfrom˜ ret_msgid391hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‡v«§ÄDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ßŸßËûð‹+aue_recvfrom¬ ret_msgid392hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý) €EÖõHÆ…Pµ"Ôƒ#.ÆDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ßŸßËûð‹+aue_recvfrom˜ ret_msgid393hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý“®œ¥ +@0·Ù'¤–ÛÈ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈ°€ÇÑûð‹+aue_lseekº  hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹›îÝ\‡ž}Ë¿cyê12320ÜS7[AIF¬•pd± (ýµ5Ž«Fz鮉'üvºˆ‹›îÝ\‡ž}Ë¿cyêhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÜšïFz鮩'üvº107.155.79.108ö20ÜS7[AIF¬•pd± (ý)ŠÌÛõNñªÝîñl+^Êø› µ5Ž«Fz鮉'üvºÜšïFz鮩'üvºÌˆÃàÑûð‹+aue_connecthostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1address107.155.79.108port123execntpd20ÜS7[AIF¬•pd± (ýo¥çÃ"ÙI&žä?-ï¾ôòÌø› µ5Ž«Fz鮉'üvºÜšïFz鮩'üvºÌˆÃàÑûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ýµCJœFz鮉'üvº10.0.2.15ö107.155.79.108ö20ÜS7[AIF¬•pd± (ýIŸ€{óL¦¶CÁËjVV‚ÎJø› µ5Ž«Fz鮉'üvºµCJœFz鮉'üvºÌˆÃàÑûð‹+aue_sendto`ret_msgid394hostHdc53375b-4149-46ac-9570-64b1090f28fdfd22ppid1address107.155.79.108port123execntpd20ÜS7[AIF¬•pd± (ý +µA¬ÐFz鮉'üvº 20 +ÜS7[AIF¬•pd± (ý'K¨'*C +«ïÒ¨[åNBÐJø› µ5Ž«Fz鮉'üvºµA¬ÐFz鮉'üvºÌˆÃàÑûð‹+aue_sendtoÌ +ret_msgid395hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execntpd20ÜS7[AIF¬•pd± (ý +µ !Fzé®{'üvº 20 +ÜS7[AIF¬•pd± (ýÆ'ùxCrœJY)ÆŽÒDê› µ dôFzé®{'üvºµ !Fzé®{'üvºÌˆÃàÑûð‹+aue_recvfromÌ ret_msgid395hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý™IT¦— KhŠ ÍxYß½&Ô0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_lseekº  hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?%*Æ8L¤Wáú/­ã#Ø ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+20ÜS7[AIF¬•pd± (ý\O©EEž¤; }d>¢Ö@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿ=9ˆ™F^]ù—òXÜ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+20ÜS7[AIF¬•pd± (ýüÈ=“^UCD•<8Mé¿Ú@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýD÷Þ~4Eè¦$‰Á˜Úà ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+20ÜS7[AIF¬•pd± (ýªÛ¨J™Í·%UªkÞ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý莇YËMÈ”¦Ñ†Ø«Ì^â:‚œ Ê +ÙKFzé®›'üvºöâá—Øûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×QnÁòGN¾©hCtÙ/´#ä@¤œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V öâá—Øûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèe—]¥wO¾¢çÙén±æ@¤œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýPÒAyegFµ«HQ/`è@¤œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadè/hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;Ù9µN̨ÅAÈYǪÆêb¤œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áöâá—Øûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJÅøמÀDG×7qáêëìb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_writeÒ0hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûÈöÀ‡ú@k¹ÕÕµ ý_î@¤œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V öâá—Øûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýPw8 'øLŠSfGqÌûð@¤œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊUzc"L„U­C)T¤üDê› µ dôFzé®{'üvºµ CjFzé®{'üvºöâá—Øûð‹+aue_recvfromÞ ret_msgid396hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýP5†\°C•„Ò¯gXç£þbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKöâá—Øûð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý,/Wå^JôŠœc­Õ€D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóÌ":ûßL–‚XXÎV‚D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýz^ßÇ›CôµçÚØ€W¾„D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýàJF³f€BîŒ ík°NІD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYÐ>EEv•9zzƒŒåˆ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¸ÒµäØûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý¿‚ôRM¡Ž“L ^*Š@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¸ÒµäØûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýø +âsìŽHã¬G»ÚÚŒ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¸ÒµäØûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý:#(ÑD@U’>Ì2hcí·Žb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¸ÒµäØûð‹+aue_writeJhostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý Æ8zÝE 5Åò›ËR~0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ–£ŠÙûð‹+aue_lseekºØ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8[ºW„~K¾in·åˆy×’@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý>È%FDZ³ývz€˜ó°”@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý[לó~Fb—Ás/Ÿ5~–@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý`œÍ²lýH/z~ºž¹˜b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý7ÔC½,=Oç¢Q› Üš@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý¶ŒQsK#E ¥)iyµ˜W‹œ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýñ¨L1\KÔžÖPÕîË»ž@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý©ú3ªB–·KeÌPaîX 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾ÜæÍàûð‹+aue_lseekÚå hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ¬l,8•E˜¸§ayn¿ q¢@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e’ðÂŒâûð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý3Aýæ©Oݦ­ûø³$¤JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’ðÂŒâûð‹+aue_sendtoÚ +ret_msgid397hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý<à2»œH‚»¤÷nÉâŸË¦JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’ðÂŒâûð‹+aue_sendto˜ +ret_msgid398hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý^“»þgBÛ O²Í—Øð¶¨JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’ðÂŒâûð‹+aue_sendto¬ +ret_msgid399hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýmnÔ5%©N•ùBG§|åªJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’ðÂŒâûð‹+aue_sendto˜ +ret_msgid400hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý@›}׶F·Å•!ý@ø¬Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’ðÂŒâûð‹+aue_recvfromÚ ret_msgid397hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýœá²-°°ôØ°Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’ðÂŒâûð‹+aue_recvfrom¬ ret_msgid399hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýJ)é§7@ö”áxA”2^²Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’ðÂŒâûð‹+aue_recvfrom˜ ret_msgid400hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýúÈ“œäEð iP$œBS´0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uܥʋçûð‹+aue_lseekÚå hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâIðä CÓ‘ÒwßÃ,!¸ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uܥʋçûð‹+20ÜS7[AIF¬•pd± (ý¸pñÆìK³²YØŒã1d¶@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uܥʋçûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýùÆp_[Lt˜= XÉÍ?ȼ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uܥʋçûð‹+20ÜS7[AIF¬•pd± (ýúg$—,ñK®–©¹&m¯¹Iº@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uܥʋçûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýɇwkC­Ÿß8­ðøÀ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uܥʋçûð‹+20ÜS7[AIF¬•pd± (ýzPÃ!" +Oo¢O&Ta¬Ï¾@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uܥʋçûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¢ºúÄW_‡çjA§‡›¤Ë©²]&Â:‚œ Ê +ÙKFzé®›'üvºÜ¥Ê‹çûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸV›ìœòK-ŒÑ+à-¹Ä@¦œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ܥʋçûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@»cR;Cƒîå=¯Íî{Æ@¦œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uܥʋçûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'.®­²IG·+Ñù‘ W0È@¦œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uܥʋçûð‹+aue_preadø7hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@zÞ&ÁC‹‚}ªVËmÊb¦œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áܥʋçûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿOÌk¿gN0˜lékÌb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ¥Ê‹çûð‹+aue_writeâ8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[ŽTÿFEk‡¬: 8šÎ@¦œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ܥʋçûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýä›~ù]DŠ“ª')ŽÐ@¦œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uܥʋçûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=¡\Y5I¾?%f6_VWÒ@¦œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uܥʋçûð‹+aue_pread˜ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýsœ@ ¹5@+ïS~%pÔb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ¥Ê‹çûð‹+aue_write‚hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕo4LåTEGµ 0 +]Ÿ Öb¦œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áܥʋçûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýá|äÌÝâFO“·Òu<+­Ø@¦œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ܥʋçûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹±–­ÆMƒ+\k0‹zÚJ¦œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÜ¥Ê‹çûð‹+aue_sendtoÞ +ret_msgid401hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýeó°9VC'¸I[1¶­¬«ÜDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÜ¥Ê‹çûð‹+aue_recvfromÞ ret_msgid401hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýª†%XçG¶Ä½Ô÷DàÞbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKܥʋçûð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý–j¾AIۄ1êAÓàD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ¥Ê‹çûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®<0¡ED¼ºº +3¡DÁâD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ¥Ê‹çûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýɪÐÊ>AŸµ>¨üE©OäD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ¥Ê‹çûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´öÒ%!¹IT¿ÐJg²æD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ¥Ê‹çûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýLäµl>úM2Žìv?iè@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯†×ã§çûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýµæ5²rÄB +‰,€×Íõê@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯†×ã§çûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý2Ó“÷bLu¸§•¸k¨‚ì@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯†×ã§çûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÅ­ÆJêSB‡¡m:-¦A~îb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯†×ã§çûð‹+aue_write`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýŽó îùfBÈ­v´mŽw lð0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâÍçèûð‹+aue_lseekø hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$“a’^C†™Q…¡øFBò0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UöÙõÓïûð‹+aue_lseekÒ£ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýn+®ˆÂBY°í•¨þâTPô0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_lseekÒ£ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂài¨l+AKªç‡BÌÁ?¤ø ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+20ÜS7[AIF¬•pd± (ýð°±g# D†„¦ÄäI ö@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAB„úKIZ¤ô2àéWîÔü ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+20ÜS7[AIF¬•pd± (ýç•ŒFà¿¡cÓàô"ú@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýE¥-óML|›2,wÓXP€ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+20ÜS7[AIF¬•pd± (ý‡i¾AÂJµ€m0TRÃdþ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñIî'߯FûºKr˜q–Èœ‚:‚œ Ê +ÙKFzé®›'üvºÌäÀþõûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆê|sH³ &yÌL„@¨œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÌäÀþõûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýDtùóËKEº Ÿ·Md:†@¨œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”âìœjBß‚Ej¦ ’¥Xˆ@¨œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_pread–8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýª8ù^}.Kñ˜),S7´½ºŠb¨œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÌäÀþõûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×YȃðM—š¢KPò‚¯Œb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_write€9hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“>›ÞBK†–cŸí^¢ Ž@¨œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÌäÀþõûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýiÝ畈H›’¾ª-1]Ù)@¨œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýúL@M.¦IŸ-¯’@¨œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨ +6¥žCYˆf±,0ÄÅ”b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýl{áÔ`ÐGıõ`Уîê–b¨œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÌäÀþõûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýe¹ýqIñ”õh!qc<ǘ@¨œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÌäÀþõûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýN–(ÕxOD³© /ÓãëšJ¨œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÌäÀþõûð‹+aue_sendtoÞ +ret_msgid402hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwÄ•m áC½ƒ¸›8Q^»_œDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÌäÀþõûð‹+aue_recvfromÞ ret_msgid402hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý7AO3°ÁE\’µ¨TwH:Yžbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÌäÀþõûð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýŒŸbϲ=NV¯Bž'tÝ› D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´™¬]É0L˧¨¡‚ú º¦¢D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸ—#«SFr…NçïÃWÙù¤D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»,S¸öÕA_‘1„Ìt;¦D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;  TÞVF{†'×û#Ã>a¨@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¢Ìˆ›öûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÚ9i$gMŽrÓrõ\ªb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¢Ìˆ›öûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý߆7æFz鮩'üvºŒ×µ¨Fz鮩'üvº°äÿ§®]vRS<„äB±¢Ìˆ›öûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýåßØÔ®[FŠ×Sßr“ï#¬$–œ ×µ¨Fz鮩'üvº߆7æFz鮩'üvº¢Ìˆ›öûð‹+aue_fork +arg_pid1286hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1286ppid1281execbash20ÜS7[AIF¬•pd± (ý +€ËâÞ +K¹‰?÷œÂ\8¾<šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¢Ìˆ›öûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execenv20ÜS7[AIF¬•pd± (ý½èÁ¾©MŠEh+2³òÀ2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý¡…™ÌGËDÈ©bÊZ_wËÄÂ2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý¿+²Ë("Fؤ %XÁõ(¤Ä2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýÕeÍ0Ù›Dõ¼£}f Õ›Æ2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýzó˜±îÉIª2%´üÈ2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý Ú¢ÿOv¥ý; 4%1Ê2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý=’åÜFô@;½Æ!YÎëÌ2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý7Zz B¾33(••ÿ¨Î2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý7'ì:ÊqLž·òÃ~­RØTКœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýÁþ}Lˆ¼M•¯®ýÿ)éÒ:šœ ߆7æFz鮩'üvº¢Ìˆ›öûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýƒO×æK¤<c:kuÔ:šœ ߆7æFz鮩'üvº¢Ìˆ›öûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýa‘ï™^ K¤†•n€óhHÖšœ ߆7æFz鮩'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¢Ìˆ›öûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine.bash ./bash_commands.shppid1282execenv20ÜS7[AIF¬•pd± (ý›b´¿ÙAí’ˆ8ä=_ÉØ<šœ ߆7æFz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¢Ìˆ›öûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýËQ´±ýùG¹¢oäôÎØ£Ú@šœ ߆7æFz鮩'üvº‰oý©äÇU¤©A)Eǹ ¢Ìˆ›öûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýjM¿y¾FH¸à¬dq|ŸPÜšœ ߆7æFz鮩'üvº‰oý©äÇU¤©A)Eǹ ¢Ìˆ›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýþó|oÝ!H†³i§{u)!Þ<šœ ߆7æFz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¢Ìˆ›öûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"’øýîÕ4µCé­yÑõ±Ñ€Pà@šœ ߆7æFz鮩'üvºXꎩð®…\®ð@JÌ…¼â¢Ìˆ›öûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýïN º¢©OḒÐÁ>º/â@šœ ߆7æFz鮩'üvºXꎩð®…\®ð@JÌ…¼â¢Ìˆ›öûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý-±Õ8AmŸÆ45 –äšœ ߆7æFz鮩'üvºXꎩð®…\®ð@JÌ…¼â¢Ìˆ›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýѳŠ‡;Gv¨8YÒO}æ<šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8¢Ìˆ›öûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýÌsw«Q±Ik•tNi˜è2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý‹ßÒ‚×C"„˜L¿Ïx§ê2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýa©´»M!ƒ R¶âÕ\zì2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý0›šivOïªk$‚<#ÊØî2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýh.XGÑ Ö j¸®Žð2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýb%KK`eF€¡­ìë™X]ò2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý VY¬{Nš·¦ƒ »ùÔô2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÍFq;@Aðœ &c&v¶©ö2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý3®ÎS™A%©‘¹4ë¶þøšœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýž-YG¹[Dh„…p_ˆ£/žú<šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8¢Ìˆ›öûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýˆó½þv·Lm‚ +~§=l¢ü2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý’=ĬÌÃF =/Ù´ºüþ2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý9Lw!IÎM€¿mê¥Z:€2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýl²ʼ¿H„š¢¤ëŸuÕ‚2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýæ÷†z…G½T¿ˆ‡ô±„2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÄMcñOÎ… ‘Z«§·4†2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýYÍJûÇ/O½Œð.Cëˆ2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý’Ã;œ2ûJï % BæÚÁ´Š2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý7ïûž]ýG}“¬ÓAú‚æ#Œšœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý}IÃ%½ÛAÙ¶a³é>í|ZŽ<šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1¢Ìˆ›öûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýX|v¹ÍgIÓ…3TÞm"£}2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý†œlÀFx‡»œžÌÎíD’2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýƵ³‘ÎÃB¥[úH +c±‡”2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý(úòO…©EΦ@âßf"¦–2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¥pÙË¡BÆŸ]6e‡ú ˜2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý>ÉìõaNÏŒåDŠI êMš2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¾ê Þ1ZH˜í„àQ!Sœ2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýç(lÈRLøŒE'j„±èjž2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý%¾vy-AŒ{àù{f šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýá?f¿óLDF•¾ƒž)¦¢<šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¢Ìˆ›öûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý¢_“”'O{¤Æ~ªÖW®°¤2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýW¸쮶N “ÿµ‰ªµxù¦2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý-`´L>±K‡ÉXóÃ].O¨2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýWaÁªpN*šé+¹=·†‘ª2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýƒÓëü½«MñŠÚï‡<éŒ(¬2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýöó4z¿C±7Û ·ê£®2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýl„™ý ò@ྞOHŠÈ°0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌñé ÷ûð‹+aue_lseekž¯hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·}LÐdGª‘ºÓ‚5ȳ²@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¦Éݹøûð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýZ5°d°šF/‰çœzf¤´JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦Éݹøûð‹+aue_sendtoÚ +ret_msgid403hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýz¸ËBƒ‘à¡´oV—á¬0šœ ߆7æFz鮩'üvº€ËâÞ +'+Nø׷VFyþÂ@ªœ à#·¯Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â¬Ì°ñýûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÄ©ð|SA3‰dAcþúĪœ à#·¯Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â¬Ì°ñýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý +þáï›é”W“éÛJ—”gs20 +ÜS7[AIF¬•pd± (ý©ñd¨ C«»€ÊÚMm¿Æ<ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs /lib/libkvm.so.7¬Ì°ñýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÿ½ ÿùFͼ¨·"hªÖ>È2ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýé@Ò´:œJ©¢Ûm.1RßuÊ2ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý.ñ)€ôLÚ£«ýU’þº~Ì2ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_mmap€€¸ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýDí=ˆ›E«Ô€ÛPÃaÎ2ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_mmap€€¸ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý÷0ŠŽ|RD«³ž€ÝÓÖ²Ð2ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_mmap€€» arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý ¤dG`cC–t1¯l¹`Ò2ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_mmap€€» arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýµ¸æp«@¬©§„uãÛ$Ô2ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_mmap€€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýèîüDžÕO¤Œ¯âeáÿÂrÖ2ªœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_mmap€€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ým˜[ +âæLø·ÅÝ­¥6تœ à#·¯Fz鮩'üvºþáï›é”W“éÛJ—”gs¬Ì°ñýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý +yõÔÑC¼,_¼Cðgß,òE20 +ÜS7[AIF¬•pd± (ýA89Ø®AWŠ£mëm,o“Ú<ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE0/usr/lib/libmemstat.so.3¬Ì°ñýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýû81}[NE¼Ë}Ð…¡_Ü2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý¨,ÊúJ|°»¾#(äÞ2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý—ÂÔÁLÞªg¦5ÏÂà2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€ÀÁ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýü=4ª‰L׸5þ2ëG¡uâ2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€ÀÁ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýAZqtU—Jó¢ÕïˆÜ<—Žä2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€À arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý¢) ß5G“ˆûiã«ßæ2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€À arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýý{4:_K0ŠÑóÊ8è2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýe¡²¡©üCƒ‡¸/™$škê2ªœ à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýº‚M«KØNŽ³––÷oðo쪜 à#·¯Fz鮩'üvºyõÔÑC¼,_¼Cðgß,òE¬Ì°ñýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý +AÑúÚ¹ËNU‹¹Êì…NNœ20 +ÜS7[AIF¬•pd± (ý‘ѺMBÆ–¸W%“Xæpî<ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ/lib/libxo.so.0¬Ì°ñýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýµ|ïA/s^Ÿ*£D±”Eî00ì%‘ô2ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_mmap€ÀÄ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý?|wýE«0uõ¤ÏŽö2ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_mmap€ÀÄ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýQë# MßJîF#Øk Tø2ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_mmap€ÀÈ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýàÔª¾§SH`žÌ +Èì%ê­ú2ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_mmap€ÀÈ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý¢„˜ƒ¸Jþ²ªQ‹{Üü2ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_mmap€€Ó arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý1ÑosKî©%ÐD¥Ñ+Äþ2ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_mmap€€Ó arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý¤–ô§oAªŠÌ=>Ë~¯Û€ªœ à#·¯Fz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¬Ì°ñýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýhÙˆRE† {€‰q(–<ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““2/usr/lib/libnetgraph.so.4˜­¤ûýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý|&C|*Høª™P„š½´µ˜2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý±°íQH>›Íà ÈzFš2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý&œ÷«}J7‹Nø@ò/½œ2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýoÊN¡ÔÑI¼ó{¢b+ +ž2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýïô­³Lþ‚ŒiTÖÖ° 2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€á arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý,ÊPž­•L±®g}Þ·¡®r¢2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€á arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÉ|(†ßìB°´JÀWy>=¤2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€â arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýr»%ÛDq•%KÜHuܦ2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€â arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý¿’RS LȤ¾êQŽ}@¨ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýjôjUTaJÔ¸c[zÄð×)ª<ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7˜­¤ûýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý¼®¨ÈI᜗±I?:ج2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý{:ªYÀC?•'ZO½iRj®2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýVëŠ&6O#“éê´ £/B°2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýùÆæL3ˆû‘_÷T²2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýGÓ1óJh¢¸W @“´2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýí'ÿ–éB—‘sǧ1dds¶2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýMæ8o^N º ÕGø0ƒK¸2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý©1µ‹iPB¿šs2É*C¿º2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý?žIg”ËßÃó’­Q¼ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý +1ßö¯È’Wˆ¯BRç’Íç20 +ÜS7[AIF¬•pd± (ýBÚÁRÅiL¸ÕAúm›ï¾<ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Íç /lib/libelf.so.2˜­¤ûýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý#>ßj#›E𬘛QH"]àÀ2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÜbùG˜Ë ÃþÂ2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý_Ùt³YF5—ù}®xº°Ä2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýFÝtäÜäI¿wëÿYÆ2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý‹»P[#CNJ°0W™µ©È2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€Àã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÉx’*¶ŒOÛ¡GcòZ¼ Ê2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€Àã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý+5´P'ZN¬ŽÁ7ßrÎÜaÌ2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€€ì arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÜ"2úfLŠ•ý`?‹"Î2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€€ì arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý Ë«Fc¼/ ŸZE“wЪœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýŠ¸›Ù€ÍEõ‘•ÉGÄÒ:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýDÑ(0˜—Bªõciô1G”Ô:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýaDra@²L[ ƒ»è-‡Ö:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýv¹òö/@ƒ’‡b€WØ:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýU´öò†KÞœÞ^t;}}Ú:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýæ³?8(¢C§“¢“ÒÅTÜ:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýh™ðB±Iz°ŒUzò{²ƒÞ:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý¨;*qØEµ±9ßµ‰LHà:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý¹UðFAªMºêb6k$âbªœ à#·¯Fz鮩'üvºÏU…¹^…•öþ¹€Ü˜­¤ûýûð‹+aue_write¢0hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execnetstat20ÜS7[AIF¬•pd± (ýªk¦EÇF@„Ÿª±STYw\䪜 à#·¯Fz鮩'üvºà#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÇ ø! cMJ ®Üž3³ƒæ@šœ ߆7æFz鮩'üvº€ËâÞ +鯘Òå‚ê$šœ ߆7æFz鮩'üvºà$ýFz鮩'üvº˜­¤ûýûð‹+aue_fork +arg_pid1290hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1290ppid1282execbash20ÜS7[AIF¬•pd± (ýwz9u{&O]¿ð÷lå¿Ý4쪜 à$ýFz鮩'üvº€ËâÞ +Î_Y`ˆ2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýßñ CŒ¯G‚c™éèeü Š2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýßÂÙ#l¡Jd°eò÷ Ú¨kŒ2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý/* ðTK“ÙTç­é…Ž2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýK¦PÒÔD×¢rT+ 8Wê2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý|b´óD +°'µ}ÐÙJ’2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýŠáK%ÏKw“þ wK+ ”ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýø’oÈÎ_Fþ¤çöPúÓÖ:ªœ à$ýFz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýøPeÈ8½DF™ñð[ãCç ˜:ªœ à$ýFz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýõôlÒâJ"¯½ålÞ1Hšbªœ à$ýFz鮩'üvºí( ö~R¶ ~{‚~¯˜­¤ûýûð‹+aue_write +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1286execcat20ÜS7[AIF¬•pd± (ý{‘Àk}@mµ!rÈYغáœbªœ à$ýFz鮩'üvºí( ö~R¶ ~{‚~¯˜­¤ûýûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1286execcat20ÜS7[AIF¬•pd± (ýš8[u†rK¸‰³Ù€Eožbªœ à$ýFz鮩'üvºí( ö~R¶ ~{‚~¯˜­¤ûýûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1286execcat20ÜS7[AIF¬•pd± (ýÔ/"T¼Dƒšck +×ÇM bªœ à$ýFz鮩'üvºí( ö~R¶ ~{‚~¯˜­¤ûýûð‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1286execcat20ÜS7[AIF¬•pd± (ýdÄ( +€AJ{‘y Ræ\Ïa¢ªœ à$ýFz鮩'üvºÏU…¹^…•öþ¹€Ü˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý¡î1~XK÷²Ýžoˆ ”C¤ªœ à$ýFz鮩'üvºà$ýFz鮩'üvº˜­¤ûýûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý ¾åÒyH àÆ‚§*¦@šœ ߆7æFz鮩'üvº€ËâÞ +èxÚ<ªœ à%dµFz鮩'üvºÂ)ì&0T°&+§Tºú/etc/networks˜­¤ûýûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execcat20ÜS7[AIF¬•pd± (ý«‚¯å'HŸ±kT4Í|9Ü@ªœ à%dµFz鮩'üvºÂ)ì&0T°&+§Tºú˜­¤ûýûð‹+aue_readìhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýe¥ÁWY K–®¡Àã@UÞbªœ à%dµFz鮩'üvºÏU…¹^…•öþ¹€Ü˜­¤ûýûð‹+aue_writeìhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýŠòêÉÂ`I#¨ÃN7Ez?Ñà@ªœ à%dµFz鮩'üvºÂ)ì&0T°&+§Tºú˜­¤ûýûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý –"äN‡ŽU|³!x*⪜ à%dµFz鮩'üvºÂ)ì&0T°&+§Tºú˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý¾øêÌhCÙŠó͇Q~/䪜 à%dµFz鮩'üvºÏU…¹^…•öþ¹€Ü˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý5X —Jص–a"ró:檜 à%dµFz鮩'üvºà%dµFz鮩'üvº˜­¤ûýûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý²TÝ‚åG™¿M&ˆ¦è@šœ ߆7æFz鮩'üvº€ËâÞ +‚IJ¹™£"ŽM´ì$šœ ߆7æFz鮩'üvºà%ÆFz鮩'üvº˜­¤ûýûð‹+aue_fork +arg_pid1292hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1292ppid1282execbash20ÜS7[AIF¬•pd± (ýwÇÏ™¬O¼€Œb8fu à%ÆFz鮩'üvº€ËâÞ +žF¸òªœ à%ÆFz鮩'üvºÏU…¹^…•öþ¹€ÜøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execbash20ÜS7[AIF¬•pd± (ý +T-I]ϱ©T±Ï÷ŸÔ©0>20 +ÜS7[AIF¬•pd± (ý¨—®w«K:„nqà¤X¯Œôªœ à%ÆFz鮩'üvºT-I]ϱ©T±Ï÷ŸÔ©0>/bin/ps'ìAzX™¦}˜¹(/libexec/ld-elf.so.1øŽ¹„þûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineps auxxppid1286execbash20ÜS7[AIF¬•pd± (ýÈØ‘†’¨N” a†÷ Lö<ªœ à%ÆFz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conføŽ¹„þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ý¨Ah<ÓXC~Š4ê[—ÌQõø@ªœ à%ÆFz鮩'üvº‰oý©äÇU¤©A)Eǹ øŽ¹„þûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýUÝ 0X¥E3ŸJ/ˆÜTIúªœ à%ÆFz鮩'üvº‰oý©äÇU¤©A)Eǹ øŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýLBÁs°$I¬?ÕÓîGÀ"ü<ªœ à%ÆFz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsøŽ¹„þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýuôFWZÒB"ª½P.ÌÀ?§þ@ªœ à%ÆFz鮩'üvºXꎩð®…\®ð@JÌ…¼âøŽ¹„þûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÕ²/¶¦OÝœ`ñ9iÜÅý€@ªœ à%ÆFz鮩'üvºXꎩð®…\®ð@JÌ…¼âøŽ¹„þûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýŸ »ügN½¹{kã›3‚ªœ à%ÆFz鮩'üvºXꎩð®…\®ð@JÌ…¼âøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý +LÓÅ:îtX®:îXte˜20 +ÜS7[AIF¬•pd± (ý™¢(4&GAô‡*ú´ã÷ø„<ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜/lib/libm.so.5øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"„†ýžiTÆËA4°S-tü;†2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýïj–D±„¼O£(¬bˆ2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýQI{)HŒ3Z õDð™Š2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý½!‰;@š‹o¿&×W_YŒ2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý +FÄñËòL_µ²Š¡Ôe…Ž2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýå3ê¦nKŸ‰ +˜\‘¶x•2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýu .-\¤Bº¯°ý ’a\Ã’2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý¤:„‚ô±OLª+ÍXJy®`”2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý…gÕ«£èOÅ–©wËT–ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýµ¸sT|G9VB¨ Þüþ˜<ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gs /lib/libkvm.so.7øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýÓ¬uÊè€Oi‹¹{¤-lÞ¢š2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýP±$o èKù­.ªXŸ·QŽœ2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý‰nlqgJh€ºüT½ÇËž2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÁ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýý]MÒW@,•LÍPù%b 2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÁ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÞå©t;¿Kômÿ„v™Ž¢2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÄ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý üì/J5 .Uø¯%¸Q¤2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÄ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý +²jö6O²W‰“:¢tq¦2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÉ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÜÚ7èE/ NræWx ¨2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÉ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý5JÛÖ@O,Ÿ8[‰Žø0:ªªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý +]¸&g [ gÃo{„£20 +ÜS7[AIF¬•pd± (ýšpÒ6ì·F¤¸ÅwY÷fPm¬<ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£"/lib/libjail.so.1øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýÈǽÙGÅC§:¯®2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý/“ì‚Œ•C­‚WÐímõ¤=°2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýzè…Š®ÛG©<ôE¼âïj²2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Ë arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýžƒ&û bH™‚.^/¦K´2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Ë arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý¡Ù‡M[²2çÌ{Zž½¶2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Ì arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýJ¾`%èëN£ kû *f¸2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Ì arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýñëýávBâ”a¸Л8Cº2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Î arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÓ`<ßF¨“¥®áჼ2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Î arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýwŸ(õÒBÛ—§4»ZæI¾ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýÒ'ùFIB¨›Wà$‹À<ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ/lib/libxo.so.0øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ý'ãj&bMõª Bj¢ëÂ2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý ‰?Ò7õKŠ¥£Yàï;Ä2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý}ýmgÎ;EåŽE½HyáÆ2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€ÀÏ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý¬´¾=2[Hg¡s¢ÖË­Ä—È2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€ÀÏ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýnw?¦†O¼¤×l¸‰äöQÊ2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€ÀÓ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýHýÍá:@›äÙ·w·Ì2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€ÀÓ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýçMa]ÐD…¬ü0ôFÄÎ2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€€Þ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýè H?Œ1Fp M“8[ÕÐ2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€€Þ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý—~Rê2D ®’3®s‚Òªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýLxÇ@"E‰ùÆ€'Ô<ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ý:³]¸VF4ŽV=Q|·Ö2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýMë·mƒJ;“]GK8YêØ2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýràŸ¢L…¼ÑÇœ”E Ú2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€Àß arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýõq_w’2Eî‹Iu0PÿcÜ2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€Àß arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýøËžRôI³@® ;qÞ2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€Àž arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýF'¼cåK0§ AÊB%+õà2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€Àž arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý¿» ÜdÙB°7Y¤Ñ÷3â2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€€Á arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýíÒýµÙA²nêp^ãä2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€€Á arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý¸Õx¸æC¾q|3ÜÕ檜 à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý—¾}&CxDœGQÝDè<ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’Íç /lib/libelf.so.2øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýL¼v4ÓD-˜z’6³½Lmê2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý5º¦©!Gä€)à¾5Pì2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý©‹[õªÚBÿ„n ÐË$Û+î2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€Ü arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÅp*·3Aã±Ñֻ͈…að2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€Ü arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý©ÄÃRL@i® gŒ5ÎÈò2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€Àß arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýú{¹cE¸žfs'{B´ô2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€Àß arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý*<]ÅiCM¼„êß‹ºzö2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€è arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý./æÿìmLû•¯z¬¡ÜÃ*ø2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€è arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÐ\XÑäLT†¤ÐEI­±úªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý[ôæ#üAêµùOH3a_ü<ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj"/lib/libutil.so.9øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýQ.Ÿ5>J»hÃkbúþ2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýIZŸMBÓI—§Ôˆ"-‡€2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý¦Ù,„AdI–•ÿ &S‡¹‚2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýQ‰I”9[Bn¯8й4„2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÿ£°#ÚBU‘á@@UY†2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€í arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V" žýNÎ5ÞkOü‹Æ#¿n£éNˆ2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€í arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýë^š=/Nˆ¹$mTëŠ2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€Àò arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýsŽl‘'Mä•ìZ·cf£Œ2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€Àò arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÙ÷€ÁšE3¡Ž%µ…VSöŽªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý/?â`ÛPFŸ I”ýž.À:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ýþÿCé¥:™ÂÕÕú’:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ýQóäFI¨Š¾1Œ7k†‚”:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ý·id´HҤÀЖ:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ýç³c•c:@8“Ž·«æ“¸˜:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ýÓ·üÜfJ9›a&« ¶‡Èš:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ý ìˆëOANN¸X=ÿYaR^œ:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ýàéû«­ED¸ˆ¯0ƒ›`õž:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ýé+*‚ÐZK‚þì…Sêw! <ªœ à%ÆFz鮩'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nulløŽ¹„þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýפÅ× *O5³è¤c ½o¢<ªœ à%ÆFz鮩'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nulløŽ¹„þûð‹+aue_openat_rwtc +flagsmode ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value4ppid1286execps20ÜS7[AIF¬•pd± (ýuÎ âL÷œH7^¼ç¦j¤<ªœ à%ÆFz鮩'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.conføŽ¹„þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1286execps20ÜS7[AIF¬•pd± (ý·F†w¯ÀE>¤Ôðl·=‚¹¦@ªœ à%ÆFz鮩'üvºÜN½Ëê¯+^¯êZ£®+VøŽ¹„þûð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ý%zÀV£MÚ­0× •Ù¨@ªœ à%ÆFz鮩'üvºÜN½Ëê¯+^¯êZ£®+VøŽ¹„þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ýÏmV[@Bƒèå:2‚úÞªªœ à%ÆFz鮩'üvºÜN½Ëê¯+^¯êZ£®+VøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýg”½Õ#–@Š¡·ÎÄGv¬<ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–/etc/pwd.dbøŽ¹„þûð‹+aue_open_rwtc +flagsmode +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1286execps20ÜS7[AIF¬•pd± (ý. ž§DµH¶æ„ß.(®@ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–øŽ¹„þûð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ý¸¨ìÔxÅI‘Ù}ËÅqSg°@ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–øŽ¹„þûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ý3ª–ÊŠ Ex¢ŠFÕ󃈲@ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–øŽ¹„þûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ý +ª®bŠ;_ƒŠÖVŸ;*H20 +ÜS7[AIF¬•pd± (ýÿsÄÐø*I¡fù ñ½©Õ´<ªœ à%ÆFz鮩'üvºª®bŠ;_ƒŠÖVŸ;*H./usr/share/zoneinfo/UTCøŽ¹„þûð‹+aue_open_rwtc +flagsmode +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1286execps20ÜS7[AIF¬•pd± (ýù¹;)œGã¤^«¶®g³¶@ªœ à%ÆFz鮩'üvºª®bŠ;_ƒŠÖVŸ;*HøŽ¹„þûð‹+aue_readìhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execps20ÜS7[AIF¬•pd± (ýxIŠy)9J%…¬O ÙÈ‚l¸ªœ à%ÆFz鮩'üvºª®bŠ;_ƒŠÖVŸ;*HøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý +R‘GVË–D[–Ë.P+Dö20 +ÜS7[AIF¬•pd± (ýF;°}F œÇ¤h^Ò1º<ªœ à%ÆFz鮩'üvºR‘GVË–D[–Ë.P+DöéÉž2¬œ à&à°Fz鮩'üvºm/"P;=\»P½¤¬=P_Ä•‰Žþûð‹+aue_mmap€€² arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýìD°j¼KB‘¤Ìƒâ )× 2¬œ à&à°Fz鮩'üvºm/"P;=\»P½¤¬=P_Ä•‰Žþûð‹+aue_mmap€€Ê arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýVg‹ ÕD¥¸ž´Ù@»ö¢2¬œ à&à°Fz鮩'üvºm/"P;=\»P½¤¬=P_Ä•‰Žþûð‹+aue_mmap€€Ê arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý/áAZN*‘º„ûɾ¤2¬œ à&à°Fz鮩'üvºm/"P;=\»P½¤¬=P_Ä•‰Žþûð‹+aue_mmap€€Ì arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý Ô ý‡AF‚…}Lbúž¦2¬œ à&à°Fz鮩'üvºm/"P;=\»P½¤¬=P_Ä•‰Žþûð‹+aue_mmap€€Ì arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý—D<­‚ðJθ` O6A-¨2¬œ à&à°Fz鮩'üvºm/"P;=\»P½¤¬=P_Ä•‰Žþûð‹+aue_mmap€€Ï arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýuñyT<H¬• +±0uª2¬œ à&à°Fz鮩'üvºm/"P;=\»P½¤¬=P_Ä•‰Žþûð‹+aue_mmap€€Ï arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýðrÙ[ F%¿Ç΋q0³G¬¬œ à&à°Fz鮩'üvºm/"P;=\»P½¤¬=P_Ä•‰Žþûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¥`yO5¢gטÍxS®<¬œ à&à°Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Ä•‰Žþûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execsudo20ÜS7[AIF¬•pd± (ý!xœŠëA/£¬aˆðj¢°2¬œ à&à°Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÄ•‰Žþûð‹+aue_mmap€€² arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý÷—C[ +ÁBµ¯dí²2¬œ à&à°Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÄ•‰Žþûð‹+aue_mmap€€² arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýs>(“èF~•ÕãpTyÈ´2¬œ à&à°Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÄ•‰Žþûð‹+aue_mmap€ÀÐ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý£˜¼@D¤¼.϶4à’|¶2¬œ à&à°Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÄ•‰Žþûð‹+aue_mmap€ÀÐ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýL˜HµB“N’lY…„õ¸2¬œ à&à°Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÄ•‰Žþûð‹+aue_mmap€À arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý§N:Hä¼I£·±€Þbç`º2¬œ à&à°Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÄ•‰Žþûð‹+aue_mmap€À arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý»++i÷¼Hý$‚„¢-Æ«¼2¬œ à&à°Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÄ•‰Žþûð‹+aue_mmap€€² arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý¼“µÌ–çD¾™›N/Π¾2¬œ à&à°Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÄ•‰Žþûð‹+aue_mmap€€² arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý§ë¤4õHz‰)k8³TAÀ¬œ à&à°Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÄ•‰Žþûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý`¯â¸fœJ%¸"Ä#ÛœÂ:¬œ à&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýV YÖŒêAÀ‚;á$Óëí)Ä:¬œ à&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý,cØ2Jj™d* 0…Æ:¬œ à&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýhØ{mºE¶–¸õÍÈ:¬œ à&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¥P +e}Oó£þ …š.wÊ:¬œ à&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýRAÛA«ªhIcÞ°Ì"¬œ à&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1286execsudo20ÜS7[AIF¬•pd± (ý„éÉwÍDN¿Pu:ÍÿQ*Î"¬œ à&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1286execsudo20ÜS7[AIF¬•pd± (ý|±œ ºØFVˆæLL•âïcÐ"¬œ à&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1286execsudo20ÜS7[AIF¬•pd± (ýj]qúÿÔJ}Žfšg„Ò<¬œ à&à°Fz鮩'üvºª®bŠ;_ƒŠÖVŸ;*H./usr/share/zoneinfo/UTCÄ•‰Žþûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1286execsudo20ÜS7[AIF¬•pd± (ýà zÓèG\¸»I\^IÔ@¬œ à&à°Fz鮩'üvºª®bŠ;_ƒŠÖVŸ;*HÄ•‰Žþûð‹+aue_readìhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýÐÕ 6Oæ±>»4…ÝóÖ¬œ à&à°Fz鮩'üvºª®bŠ;_ƒŠÖVŸ;*HÄ•‰Žþûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýLiÞHSÏLAŽpx7’'Ø<¬œ à&à°Fz鮩'üvºR‘GVË–D[–Ë.P+Dög/etc/spwd.dbÄ•‰Žþûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1286execsudo20ÜS7[AIF¬•pd± (ýV>e¨¹E>¸£ »JÝMvè@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýåOkD“L»»óX7?OŽê@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýܘD=ÞCN˜Ÿºó/Qkì<¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨/etc/groupÄ•‰Žþûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ý¢ßÝ¥\’A¹ÏÖøJ—ùBu°×É·HÇ ð¬œ à&à°Fz鮩'üvºí( ö~R¶ ~{‚~¯Ä•‰Žþûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¹oÀP4J¶´T¼³pbOò@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýüÖØG¶¦ëÈ[­‡3ô@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý v!¶NM¼©¥±r—ö@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý[›øÌg¬B”£*× ®Ûwìø@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýÌ+¡SOB¥ØŠÚ?öÁ&ú@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýEk^[áD´‚²ÚK +Juü@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý\œJàA2€Ý2díþ@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýCNÁ¾Z.@;«ß,»_ÇÝ€6¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1286execsudo20ÜS7[AIF¬•pd± (ý¤¶!HÌ…ó‚6¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý +"9#;–"s^¢–‰8Ns“]20 +ÜS7[AIF¬•pd± (ýÍkiþ×æH¶gOŽRT8ê„<¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]D/usr/local/libexec/sudo/sudoers.soÄ•‰Žþûð‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÞH +ŽL¦”àâ4E³v÷†2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÚ˜ÞöÃLƒ-%ÊEå8ˆ2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÊ6¢ ¥K†Ž¥AÛÜ” Š2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€Àý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý9¬GvŽAÅ…Õ:ù1 eŒ2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€Àý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý>ˆÀ²€‡C^‚²_›—úåŽ2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€À‹ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýVDrüÒ3@´²w\´¿¡B€2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€À‹ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý„çî[ƒFÍ»8éRJØHý’2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýQå÷ݳ"E'ˆ®~óµ­ˆI”2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýhª<ù·`E’‚ñÚ¼›«–¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÿÓÚN^½D~‡Ššë±Mö͘<¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹(/usr/lib/libbsm.so.3Ä•‰Žþûð‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ýï‡ä‹¯ðMŠê«#'CŒ–š2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý¾ÂÍ‘ÞBÀ¶~ó»9ÆMÑœ2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýTb…9\E·¼ñ8©¸`£?ž2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýŠZS½Jû¢]p:ˆ (ª 2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ŽÊû@LïR F“A_ýõƼ«¢2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€­ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý%S<>A@õ›¼ˆÑšl¤2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€­ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýðobŒD‘¶ͬQ¦2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€Àµ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý¸Lƒý”öAü§€¨â +€¨2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€Àµ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý'Ì’!Dzº’j·^>|!ª¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý´]¹¸Aý‡¬]fö‘߬<¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ(/usr/lib/libpam.so.6¤ŽÛ—þûð‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÏx§VÏCo½·+zsyJ®2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý¨ˆ:5 MgŸ°M‰rpÖ°2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÞªMj$×NŠ«Á”%'=Ú²2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýgs {Gh­ú¬•ÓY +Ÿ´2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýoZøu‚tLÝ‚¯¤ñÅ…ÓW¶2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€º arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý.„‚# &Næ¢k,—p‘¸2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€º arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý@\¿¤–CP¹qúC)òp̺2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€À½ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý€QŠ‹j™L¢‘›rI&ÃV^¼2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€À½ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýŽ‰‚:Nº“&)êw¯¥¾¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý½(IÉ"Nÿ¡ôSÝì©»½À<¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ/lib/libz.so.6¤ŽÛ—þûð‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ýZ`¤ýâÐBbŠû%òD;8Â2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÇ#æÀÅLX¨`›GÑ­`Ä2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýƒé?ódI]¤Ñú¨ˆ²Æ2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€¿ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýüš31ŠÄB0¦|;E4Ð*(È2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€¿ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý¿¢ SþKê– ï!–³çÊ2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€Ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý!¬ôLµXEs¸BæÁ›­¨ Ì2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€Ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýûî|ëÿØE¦‘†RÄA0YôÎ2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€ÀË arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý—A«5@µ¶9B~Ó$iÐ2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€ÀË arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÐÕÌé°G—S™ÈÊÅÒ¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÎX$ioÑDî ÷µž2šÔ:¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¬ç®‡s£@¯¸Sxë=×wYÖ:¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýa¬âCYItºù€½¶¡áØ:¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¯¬°}OäŽÞ<ä,ÏäÚ:¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý&i1 LF)”èû~@CÜ:Ü +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduideuidÿsuidÿarg_euid-1arg_ruid0arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý]ÉbÌl@.“#Hœp/¿;Þ +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresgidgidÿegidsgidÿarg_egid0arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýºÐåݸ¿D_´vôòh èà +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduidÿeuidsuidÿarg_euid1arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý +ã.Ú×Wš.«ÆW×(Í20 +ÜS7[AIF¬•pd± (ýŽ(RNQʇšëJ€öu 120ÜS7[AIF¬•pd± (ýèö7¢ DΙhÒü5)¦â<¬œ à&à°Fz鮩'üvºã.Ú×Wš.«ÆW×(Í,/usr/local/etc/sudoers¤ŽÛ—þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ý¹„ût:FM³°ð"Z ä@¬œ à&à°Fz鮩'üvºã.Ú×Wš.«ÆW×(ͤŽÛ—þûð‹+aue_read¼9hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýnëþ-+æMž’ò?ê8A6æ0¬œ à&à°Fz鮩'üvºã.Ú×Wš.«ÆW×(ͤŽÛ—þûð‹+aue_lseek¼9hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý“Ì +²Ë¶CF«å4ÕÖb˜è"¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý7Þl–UM¹­Ø°s>h¬ê +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduidÿeuidsuidÿarg_euid0arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýœ’ç°ö@-·‚t¢È«ìì +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresgidgidÿegidÿsgidÿarg_egid-1arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý{ª\ïµZE‹äfI|à¨î +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduidÿeuidsuidÿarg_euid0arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÀ˜xO=C¹…Ë÷êÞs&ð@¬œ à&à°Fz鮩'üvºã.Ú×Wš.«ÆW×(ͤŽÛ—þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý +8-•ÈuVÈ»Gæu3Ä20 +ÜS7[AIF¬•pd± (ýí1”ù*N9Ž7bzµ1ÿò<¬œ à&à°Fz鮩'üvº8-•ÈuVÈ»Gæu3Ä0/usr/local/etc/sudoers.d¤ŽÛ—þûð‹+aue_open_rwtc +flagsmodeÿÿ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1286execsudo20ÜS7[AIF¬•pd± (ýÐaìBñ’@‚¾Ì`rŸÒô¬œ à&à°Fz鮩'üvº8-•ÈuVÈ»Gæu3ĤŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÄ:eûEP‹áJØá\ö +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresgidgidÿegidësgidÿarg_egid1003arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýj} û®F–¹ #Ç¢ˆÖ^ø +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduidëeuidÿsuidÿarg_euid-1arg_ruid1003arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¾[¨j bC²©‘Cž +ê0ú +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresgidgidÿegidsgidÿarg_egid0arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýž’°VF_¥è£Ps÷Îü0¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýó“ÞD—§z¤‰µ¨˜ƒþ0¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýÆKççòC°¾i+%A?§ €@¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_readðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý‘\„i»0F[¬ßiwEÈ‚@¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýF¢o뵎Dm‚ç^„(ù]„¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý£ÎÜÅ-N²dî:E9àö† +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresgidgidÿegidësgidÿarg_egid1003arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý’…¨ˆG9– y5ƒmˆ +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduidÿeuidÿsuidÿarg_euid-1arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý@ˆ1Ûƒ A‘˜¸!A^v£Š +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresgidgidÿegidsgidÿarg_egid0arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÔÓã±d²IiŒ ¢Z:µ0Œ<¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨/etc/group¤ŽÛ—þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ý4K'•þa®3„Ö³Ž@¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_readðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý±#í»`eG¯£+›ý:?ÿ¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýv2u!²òHÍ€N'ò—ñ¹’<¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨/etc/group¤ŽÛ—þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ýòw¦órRAL’,ÑNL¸–”@¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_readðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý‘—|º¥WJG€wJN'Þy–¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýTëTæôAsŸ+¦›ŒG(˜ +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresgidgidÿegidësgidÿarg_egid1003arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýF%=œ3@!©^ RûZ\ýš +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduidÿeuidÿsuidÿarg_euid-1arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý +HÞp¬«#®R£«ö)â®420 +ÜS7[AIF¬•pd± (ý½±=Hœ¦¦Ø> áYŒœ<¬œ à&à°Fz鮩'üvºHÞp¬«#®R£«ö)â®42/usr/local/etc/pam.d/sudo¤ŽÛ—þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ýn"àJAÓ¤¢yT°Wž@¬œ à&à°Fz鮩'üvºHÞp¬«#®R£«ö)â®4¤ŽÛ—þûð‹+aue_read†hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý +À‹kB¼Ñ^¼B<.Ñë,20 +ÜS7[AIF¬•pd± (ý ç딨}O¾“ÏœþžV¨¾ <¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,"/etc/pam.d/system¤ŽÛ—þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1286execsudo20ÜS7[AIF¬•pd± (ýìZÀ¬&ú@‰‹ƒ_®¤îú¢@¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,¤ŽÛ—þûð‹+aue_read +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execsudo20ÜS7[AIF¬•pd± (ýê–¬è§8Htí7ÆÕ´’¤<¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“,/usr/lib/pam_opie.so.6¤ŽÛ—þûð‹+aue_openat_rwtc +flagsmode ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value7ppid1286execsudo20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"„²üZ Hù<ŠLD›ù¯ =s*_¦"¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_fcntlcmd ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ýwïïU<þG¦Š,ƒÉ–ª¨2¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“¤ŽÛ—þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýH(¼‰ÑÎHò²Ë=y$ãàª2¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“¤ŽÛ—þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýÑD5¶L6»T^Úf®¬2¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“¤ŽÛ—þûð‹+aue_mmap€Àé arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýP<‹á'O€­à~w[JbË®2¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“¤ŽÛ—þûð‹+aue_mmap€Àé arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý5]•taO„ã¥ÏºÇ °2¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“¤ŽÛ—þûð‹+aue_mmap€€ê arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýQFóÏ=I¥œB×Wto²2¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“¤ŽÛ—þûð‹+aue_mmap€€ê arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý™)zªc M¾†RKÓÞâ:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÅK Ç%HiºkðüWÒNšä:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý5#·?‚AE†9Ū2ȇæ:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý€»öµ}ÃLJ¾ºž‡ñ謜 à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý‹  *|£HŠ€åEi¹«m¦ê<¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï18/usr/lib/pam_opieaccess.so.6ø¨¡þûð‹+aue_openat_rwtc +flagsmode ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value7ppid1286execsudo20ÜS7[AIF¬•pd± (ýÑp$Ξ@F+†Aí¨s(ì"¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_fcntlcmd ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ý'¿Ž¬©öMb¼Rt‚’BWî2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý_öÈ=uAćAvÔìð2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýñÆË€­Bú´‹… 挨Åò2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€Àñ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý?QYÍñIf±PCuí uô2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€Àñ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýìx–ÝPO–¼<ŒÁH68}ö2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€€ò arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý”“N·œO ‘9L´Æåø2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€€ò arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý“] Šj¼H¹›ù¿PØ‚ú2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€Àò arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý•€tVØ O}˜!mì'=`ü2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€Àò arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýY„úÏ°|Br´m[Ïþ²Ìpþ¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýd‚‰+Ce‘v™œö@”€:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÒ׋LóJN©Ô¢à˜s(É‚¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý† ŒY’8N=¬šÿ³1›„<¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒR,/usr/lib/pam_unix.so.6ø¨¡þûð‹+aue_openat_rwtc +flagsmode ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value7ppid1286execsudo20ÜS7[AIF¬•pd± (ýú»z |+F°dÄQvùc†"¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_fcntlcmd ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ý›ÀjÍD¸‡½6T‹èN0ˆ2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýM-[_‚õD#¡šÚl›c +Š2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý›Æœ8’¨@µª¹i 4!,Œ2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àó arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýò‚ÂM\‚Ez—gY°U‡¤bŽ2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àó arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýŽ–e?ŸM ­i¥‡à–ç2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àô arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýƒd-0ôfM¼>ëÔÁ›)ñ’2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àô arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýo<=žA§ª¿®!›™”2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àõ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý‘™w\q“I·Ì85ÖÌ£y–2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àõ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýmePPbC¸nnŒzðI˜¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý #ˆß½ÝC¤ $i@Ÿ{š<¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõ$/lib/libcrypt.so.5ø¨¡þûð‹+aue_openat_rwtc +flags0mode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ýÜ•šL¿ÖôÚ–.¿$œ2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýA;Ô:#\ßž2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý£í¤HËC(¶‘„*xÞÝ 2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€ÀŸ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý!T¼ÛçE°7Hì¨ËK¢2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€ÀŸ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý+QC@HiŽ2A†¡öR¤2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€À¡ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý= +4ؘC½ÚP¥M÷ª"¦2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€À¡ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýu –×m&Nµt#È`ˆÞ¨2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€À¦ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ˆŽúh°âvöE[¹ž¦ Ö¬ª2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€À¦ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý>„‚-I`ƒ5&©állq¬¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý×¹ úsN*¤:ã¯W´/®<¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„./usr/lib/libypclnt.so.4ø¨¡þûð‹+aue_openat_rwtc +flags0mode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ý@ÆZLàÀFÇŸ™!‘¢‘@°2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýié)°†©O“…ñq1ŽZ˜²2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý2¶¨!G¿­õZPÆ™´2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€Àö arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýEYg¹Fl¾¨q°¼Ö¶2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€Àö arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýÑôÐ+`Nâ±’¿|é¯Pð¸2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€€ø arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý^Ôñ[HL¼·“’hpKáº2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€€ø arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýYtˆr…G ŸGâ~È•(Ú¼2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€€ù arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýûh@wµÏ±9J¾2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€€ù arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýg`K'-A(±™x×W«À¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý:"–OÓEê¦ùÿ]€@Â:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý…¾b²Gˆ˜¬ÌgƒÄ:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýkJKµvA%¼YÊXâ°Æ:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýy·©?A”¢ÊšpÑæùȬœ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýéG´•¥¹F ³ôªu8þ.ˆÊ@¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,ø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execsudo20ÜS7[AIF¬•pd± (ýfìZߤL±Š•¶a%N̬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý´*3TUGv ïÖø[…õ”Î<¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,"/etc/pam.d/systemø¨¡þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1286execsudo20ÜS7[AIF¬•pd± (ýN`P|ðˆKŒjˆÂä£Ð@¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,ø¨¡þûð‹+aue_read +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execsudo20ÜS7[AIF¬•pd± (ýG0zçþêIª—D¨tEiÍÒ<¬œ à&à°Fz鮩'üvº<;Иä®QäkQ®ßû M¬†²A:Bé2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýP‡™½à€G¾-‡5K5‹¦’2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€À° arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ý}åÍÇK©„¯Pî + ”2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€À° arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýkÐëüÇJ²±z¼nr£•–2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ý×òüøÓjAV‡f»¦…«¨˜2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýi͸°íAÚ†F +ÝóÒöš2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€À± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýœ·wä K»É›yúUÎGœ2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€À± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýE°>SGùšòõ+ßež¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýqq>Ö²”OÔ¨¨wH2€£* :¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýôÅ*=žH8¯i +õ·‚¢¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý£ý‰ù©Owµú7Æ@¬œ à&à°Fz鮩'üvºHÞp¬«#®R£«ö)â®4ø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý槽’j@Б€$Ó‰û2–Ȭœ à&à°Fz鮩'üvºHÞp¬«#®R£«ö)â®4ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýüH,¼FS‡ÖÝöìi«Ê<¬œ à&à°Fz鮩'üvºÓŠsñŸdX—Ÿ“¿XdgÖ"/etc/login.accessø¨¡þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ýzÁÏlaXKZ’¤1{ìCjÌ@¬œ à&à°Fz鮩'üvºÓŠsñŸdX—Ÿ“¿XdgÖø¨¡þûð‹+aue_readòhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýz¿b†Nâ óVW"íÎ@¬œ à&à°Fz鮩'üvºÓŠsñŸdX—Ÿ“¿XdgÖø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý|îä–KI †IàÑ4‘ ©Ð¬œ à&à°Fz鮩'üvºÓŠsñŸdX—Ÿ“¿XdgÖø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¶ÇJ5ÔJW‹>oüÞ.<ÐÒ<¬œ à&à°Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confø¨¡þûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ýR,³w6Cü€ ÿêÔ@¬œ à&à°Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆø¨¡þûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýRœÑv˜ÁI«œÀ×å’Ÿ‡…Ö@¬œ à&à°Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆø¨¡þûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý#™®ý ¿KÆ¡Ï*©ÿžØ¬œ à&à°Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý +ù.Rmb}[˜biæ‹}}Ï20 +ÜS7[AIF¬•pd± (ý¹–p¬ AŒ ’Á§M?…Ú<¬œ à&à°Fz鮩'üvºù.Rmb}[˜biæ‹}}Ï/etc/ttysø¨¡þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ýþ%2QŠGш0,½ (¥Ü@¬œ à&à°Fz鮩'üvºù.Rmb}[˜biæ‹}}Ïø¨¡þûð‹+aue_readÌ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýk;~lª +Ad±ŸÂBs›Þ@¬œ à&à°Fz鮩'üvºù.Rmb}[˜biæ‹}}Ïø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýþƒIQlD±ø n¥|±à¬œ à&à°Fz鮩'üvºù.Rmb}[˜biæ‹}}Ïø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýïG$×OFw%uÁB0â +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setresuiduideuidÿsuidÿarg_euid-1arg_ruid0arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýf°¯ù³E,»gìêFª_ðä +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setresgidgidÿegidsgidÿarg_egid0arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý +à+M,Fz鮩'üvº 20 +ÜS7[AIF¬•pd± (ý=v´i¿çFW€ŽÔëWiu欜 à&à°Fz鮩'üvºà+M,Fz鮩'üvºø¨¡þûð‹+aue_connect hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286address /var/run/logprivexecsudo20ÜS7[AIF¬•pd± (ý³®¢åôëCJ˜ 9=¤°èJ¬œ à&à°Fz鮩'üvºà+M,Fz鮩'üvºø¨¡þûð‹+aue_sendtoÈ +ret_msgid407hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýbtÌI˜EÑG`±êDê› µ dôFzé®{'üvºµ CjFzé®{'üvºø¨¡þûð‹+aue_recvfromÈ ret_msgid407hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýy 6ÅwC¢€…¶˜^sÈìbê› µ dôFzé®{'üvºªûzJÙR†]’Ù?òí†Ódø¨¡þûð‹+aue_writev˜hostHdc53375b-4149-46ac-9570-64b1090f28fdfd16ppid1execsyslogd20ÜS7[AIF¬•pd± (ý©ë ­™M@²ó=4Àſ à&à°Fz鮩'üvºà+M,Fz鮩'üvºø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÍPO(ÒMùšÍÄNNð +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setresgidgidÿegidësgidÿarg_egid1003arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý‹¸¬QJG§¿ÏR_ò +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setresuiduidëeuidÿsuidÿarg_euid-1arg_ruid1003arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¬é©Aä¦ÕæÁ©­Úô¬œ à&à°Fz鮩'üvºã.Ú×Wš.«ÆW×(Íø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý!ö>Âí-HÙ­d#ê©iö<¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<2/etc/security/audit_eventø¨¡þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ý“ã8IE©sÙycpø@¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_read̳hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý“²ª—§ìD&©1œZÄÓªÔú<¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁR2/etc/security/audit_classø¨¡þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ýOüýÀC[šõŠ×›Èü@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýTðÔ¿œBیܯ¥ß7{Ïþ0¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_lseekàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýk;ç‰\ Ebœ> &N¯ö €@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýS…´poNÒˆvJF‰Ä;°‚0¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýLàè½ Bו°éä°ˆšÜ„@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýDz`—vJ2¾DšX°|‹†@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýOŒR¦þKBg›U™¼‚c¦ˆ0¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý5G…}°NæºÃÒøIÿ©Š@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÊzWTL‹ˆ®^)ɲI„Œ@¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýˆººýZÑO?šÏº/c‹5Ž0¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_lseek̳hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý•ˆQHMMª{Tÿ§í0¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýÜÚ-C§C)­°jú@.”D’@¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_read̳hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýI#“E¯tt«ƒ(”@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýDî’ZÐ.L®•ÈÅõ:$ÀŸ–0¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÂ'ãVC)žq êŃó˜@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýäÒïÃØÇA»›¿ÑÑ']š@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý6â“ÌŒ5ER´÷ýùû¸œ0¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÿçN˜XÞM¾ºÛÓGéFðž@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý:ÛyZ±Ei¢ÏÜ-… @¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýÞx_A½¦åŽ4«o¬¢ +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setresgidgidÿegidÿsgidÿarg_egid-1arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýM†ö +˜IZ´{uJ5|¬¤ +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setresuiduidÿeuidÿsuidÿarg_euid-1arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýQ*jŽD*];-7³¦6¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1286execsudo20ÜS7[AIF¬•pd± (ýIÑÑ;C-«†[|®¨6¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value63ppid1286execsudo20ÜS7[AIF¬•pd± (ýŠáJªN@¬Ó‚ê^ª +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setuiduid +arg_uid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýª¥‹ÑM©‡ù½ _µ¬ +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setgidgid +arg_gid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýà+ìIFz鮩'üvºô20ÜS7[AIF¬•pd± (ýà+ìHFz鮩'üvºô20ÜS7[AIF¬•pd± (ý ·ÿ¥‘![l®m;†.¤bà+ìHFz鮩'üvºà+ìIFz鮩'üvº20 ÜS7[AIF¬•pd± (ý­|º{‘öJ…¡‰27𠮬œ à&à°Fz鮩'üvº·ÿ¥‘![l®m;†.¤bø¨¡þûð‹+aue_pipe ret_fd16ret_fd27hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýà+ò½Fz鮩'üvºžà&à°Fz鮩'üvº™, Bª¢T$µ„äý`Úø¨¡þûð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÅŒ3qñuMê©v¸ïp·v"°$¬œ à&à°Fz鮩'üvºà+ò½Fz鮩'üvºø¨¡þûð‹+aue_fork +arg_pid1295hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1295ppid1286execsudo20ÜS7[AIF¬•pd± (ýà+øÇFz鮩'üvºô20ÜS7[AIF¬•pd± (ýà+øÆFz鮩'üvºô20ÜS7[AIF¬•pd± (ý -Iq¦`âû³R¶ +ªœ à+ò½Fz鮩'üvºà+ò½Fz鮩'üvºø¨¡þûð‹+aue_setresuiduideuidsuidarg_euid0arg_ruid0arg_suid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execsudo20ÜS7[AIF¬•pd± (ýâ¼UMÁD¾Ä“if‹`¸"ªœ à+ò½Fz鮩'üvºø¨¡þûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value1ppid1294execsudo20ÜS7[AIF¬•pd± (ý3Úû¥zL¤µDüÄÞØüÙºªœ à+ò½Fz鮩'üvºôì{M6N?^Ž6%â?>gø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execsudo20ÜS7[AIF¬•pd± (ýB¦uä(@y£ógdºØŒâ¼ªœ à+ò½Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1294execsudo20ÜS7[AIF¬•pd± (ý¤ÿ …ýçA§° ·÷&šGv¾ªœ à+ò½Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1294execsudo20ÜS7[AIF¬•pd± (ý7·­)Ù?D诌Ýâ“oÂÀ"ªœ à+ò½Fz鮩'üvºø¨¡þûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1294execsudo20ÜS7[AIF¬•pd± (ýœ ÷‹A[¹C¢e Ú».ªœ à+ò½Fz鮩'üvºà+ìIFz鮩'üvº/bin/ls'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ø­—¬þûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinelsppid1294execsudo20ÜS7[AIF¬•pd± (ý){£D˜â¹¯ÿ}Ä@¬œ à&à°Fz鮩'üvºà+ìHFz鮩'üvºØ­—¬þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execsudo20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"”ìû”@úßCŽJx¸Œ€c5XEƬœ à&à°Fz鮩'üvºà+ìHFz鮩'üvºØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¼pªº²þB̬ƒüÏ~â‹È<ªœ à+ò½Fz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confØ­—¬þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1294execls20ÜS7[AIF¬•pd± (ýýqñçÊI¨©D­ÿ½VÊ@ªœ à+ò½Fz鮩'üvº‰oý©äÇU¤©A)Eǹ Ø­—¬þûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý‚jÖ…Ç°B€‡£Õ†[3þ̪œ à+ò½Fz鮩'üvº‰oý©äÇU¤©A)Eǹ Ø­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýn´Çµ…H†~ø‰È°Î<ªœ à+ò½Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsØ­—¬þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1294execls20ÜS7[AIF¬•pd± (ýÒb6»!žOE£¹±ù\ÓEÐ@ªœ à+ò½Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý¢ +•* A¦øns…KåÒ@ªœ à+ò½Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý²7J7íAo—­jEvÍWÔªœ à+ò½Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ý¦4þŠÞDã„ð\¹I>>Ö<ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj"/lib/libutil.so.9Ø­—¬þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1294execls20ÜS7[AIF¬•pd± (ý’]_(‰Dà–zc4ÿâ•Ø2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýÆ1hTêßN “L]}\ccÚ2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýKîE¯ÀA±¨ß±tAcšêÜ2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€À§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý÷|¡³²¦HŒ6^P‡Ý¯Þ2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€À§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýD 1ošMÆSÝX\{à2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€À« arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý¾¤³ˆª°Fc…!ØöpTnâ2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€À« arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý¬9éh@;O[‹×q°.©¯ä2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€€± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýÀ9“ëë“K,ÒX/Ûsæ2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€€± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý·Q—ÞŒ Ji¬×K˜é}{ü誜 à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ý +Ú6n $.\¤ ¸­ü.+¦20 +ÜS7[AIF¬•pd± (ýÒC¬Ÿ¥•G¡LC^ÉŒŒMÇ ç¥Ø–·ì2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýµ[_ÏåHbŠ~\Ò€Yüî2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýL®Ã˜SbJx…½Zúô¬ýð2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€€³ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýE°–šI˜2¶£d”é.ò2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€€³ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý@)ÿ¥ÞGl°mû·oGOô2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€ÀÇ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýáEÓøãiAú½@£LÁÌPö2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€ÀÇ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý6ñCÄïÂI‰<Ž€Ùï3ø2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýMbg ‰EL²¨`jö”¦¹ú2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýw¤žÎ·Nƒ¨!£f-°Çüªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýp”­¾®µCЕá Í¸Êzþ<ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Ø­—¬þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1294execls20ÜS7[AIF¬•pd± (ýÜÓ”Ù3ˆLϪ~îâ~„8e€2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýJ ·†´KBª œþ³x‚2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý—šV7‘NÞŽl¨8Ýõ„2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý?J^º.°GóžÈÒp¨tù¡†2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý‰D C½åA„Z<ÅœŽwˆ2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýøëüÊ,¸LCŸ„ÏØ…ç´Š2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýý+‡ÄNNK£Œu˜ê §Œ2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýõE¯‹ƒ9NN¿ãÒ!¶K¡–Ž2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýÿ©ñpýïGg§dø#íTªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýðºÍ3wLʺvhý•ûÃ’:ªœ à+ò½Fz鮩'üvºØ­—¬þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execls20ÜS7[AIF¬•pd± (ý*RädÇHñçw¢ úÑv”:ªœ à+ò½Fz鮩'üvºØ­—¬þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execls20ÜS7[AIF¬•pd± (ýg#9VïFÑ‹¯êô¹Ì–:ªœ à+ò½Fz鮩'üvºØ­—¬þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execls20ÜS7[AIF¬•pd± (ý#¾{ñé Aù”X3 KƒÑ˜:ªœ à+ò½Fz鮩'üvºØ­—¬þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execls20ÜS7[AIF¬•pd± (ý÷Ê1£ÈO/¬M¨Æã—”š<ªœ à+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bZ/usr/home/user/ripe-prov-tests-master/Linux/.Ø­—¬þûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1294execls20ÜS7[AIF¬•pd± (ýfØW×u!F[œ¦__å/Õœ6ªœ à+ò½Fz鮩'üvºà+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bØ­—¬þûð‹+aue_fchdir +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýoÌo(<ŸFɆó(Æfn¸ž<ªœ à+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bZ/usr/home/user/ripe-prov-tests-master/Linux/.Ø­—¬þûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1294execls20ÜS7[AIF¬•pd± (ýµCµÚØE̦-NOÀ ] <ªœ à+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bZ/usr/home/user/ripe-prov-tests-master/Linux/.Ø­—¬þûð‹+aue_open_rwtc +flagsmode +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1294execls20ÜS7[AIF¬•pd± (ý¢fkâ/I»§Öí¬z©Ÿ¢ªœ à+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1294execls20ÜS7[AIF¬•pd± (ý­· Ÿ"áLí·<¤O"ŸÍݤ6ªœ à+ò½Fz鮩'üvºà+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bØ­—¬þûð‹+aue_fchdir +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1294execls20ÜS7[AIF¬•pd± (ý¨CÒ·M€õëї릪œ à+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýw™u¾2F†N×Ó͸¨bªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_writeîhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ýÚròp„ùA …êPTó³Mªbªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_writeÖhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ýŸDþ:¼Iµº4Èt?ÀH¬bªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_writeÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ýØz™ÂÇóC–†ë2^d -®bªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_write°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ý¶ +__R–Bª¬E•Tr²Â°bªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_writeÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ý²¤®Íl4D=‰xUóJ>²bªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ýôüü,¶ðEܪ¼­xtç´ªœ à+ò½Fz鮩'üvºà+ò½Fz鮩'üvºØ­—¬þûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execls20ÜS7[AIF¬•pd± (ý"#TÇÂK9®ÞBÄuÞ‰t¶b¬œ à&à°Fz鮩'üvºà+øÇFz鮩'üvºØ­—¬þûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý•é!´ÚE‚’öƦ§yCv¸@¬œ à&à°Fz鮩'üvºà+øÆFz鮩'üvºØ­—¬þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýo6c.r)KC¨|¬^@µ‡º¬œ à&à°Fz鮩'üvºà+øÆFz鮩'üvºØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý™LŽèd^N¸§²3û ÖpE¼¬œ à&à°Fz鮩'üvºà+øÇFz鮩'üvºØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý³–¹pÔ9C5»<è+åõs›¾¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºØ­—¬þûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý"g>)”@—‰9Œ^!VÀ@šœ ߆7æFz鮩'üvº€ËâÞ +ŽµÈ@šœ ߆7æFz鮩'üvº€ËâÞ +è<ªœ à-;1Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Ø­—¬þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286exec +sleep20ÜS7[AIF¬•pd± (ý +çEEÔÒ—S’Ô%ñS—m´20 +ÜS7[AIF¬•pd± (ý€¢‹#sqJvŸ—"Sºê¬œ à-ñFz鮩'üvºçEEÔÒ—S’Ô%ñS—m´/usr/bin/nc'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ø­—¬þûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinenc -l 54321ppid1286execbash20ÜS7[AIF¬•pd± (ý¼Äd½ûNý””Ð-V,ôì<¬œ à-ñFz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confØ­—¬þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnc20ÜS7[AIF¬•pd± (ýlä3À+OQÍÒó¥@¤0î@¬œ à-ñFz鮩'üvº‰oý©äÇU¤©A)Eǹ Ø­—¬þûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýhºO·‰I0¬q™>W".×𬜠à-ñFz鮩'üvº‰oý©äÇU¤©A)Eǹ Ø­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ýrSð•²LF“]Rg¸µ<&ò<¬œ à-ñFz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsØ­—¬þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnc20ÜS7[AIF¬•pd± (ýêÙßQ@󵫭þå€sô@¬œ à-ñFz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ý7ŠcŒxdKì†.vÞ>Òáö@¬œ à-ñFz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ý§øéŠL‹ªpø5XÓ ø¬œ à-ñFz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ý + +vlYùÖN_–ù³ðNH20 +ÜS7[AIF¬•pd± (ý‘{A´”IŽï‘̬Eú<¬œ à-ñFz鮩'üvº +vlYùÖN_–ù³ðNH$/lib/libipsec.so.4Ø­—¬þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnc20ÜS7[AIF¬•pd± (ýuôöZÕLü¸¸ñ¾Ÿ›ü2¬œ à-ñFz鮩'üvº +vlYùÖN_–ù³ðNHØ­—¬þûð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ý`‹d¸†LAh Ï}ü–þ2¬œ à-ñFz鮩'üvº +vlYùÖN_–ù³ðNHØ­—¬þûð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ý†,Šo/uNfúT?¬ð€0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´Ôš‘€üð‹+aue_lseek’ðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdÕa#uåK¿·îrþ,Ù ‚0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_lseek’ðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµÂPè¯öH«–]½y[¡ê† ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýW+ "LIGz³B²"ëŒP„@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæÝ“n—A¬°Fæͪ7(ÕŠ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ý諳ëÉG¶ ÇôP³æˆ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&!”…‰XMV¡P ÄDŸ½Ž ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýC5Z@VˆšL‡ÂŒ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@—Ù +²I:ÒŒ£2i›,’ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ý6¤ŸŠû˜I‚‚Aþ[scïå@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™ 'ž Eb€§Y#~µ×– ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ý'ÅxCÚ£äqx6†I”@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓPå2MF`º c÷åQ]š ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýëàÕ•SAX­XUò±E>s˜@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“+î©/O†£k!8óž ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýÔ_G䣗^bMÈøœ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^7<»O@‹³«åŽA¦7¹¢ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýû@TÊ…¸Mò¼5s0æ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~öÃb½›Gc¿©¶¼§µ¦ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ý ’ûãOôJ;†ïÀÕ‚¤@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘f«Ò‰ Aê’ ½rǵª ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ý`øþç¶pGÇŽ‰¸ó%“Ѩ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýù Í-ÇEx»}nÕµMŽÒ® ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ý> …O!Bì«sÆÓ'\¥¬@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘+âUE•Î|äÅó·_² ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýðg¨92Kn»)gìKÀf°@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|ÙC÷‡½IsJ› U¶ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýÍjU4ù2Bol¥ÀòR´@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðŒ€öpM­‡SîΣoº ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ý\F$§i«Fn‰E‡ œàîá¸@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓ¢¦nVBŽbÕÅ‹@¬¾ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýºÔ »N¯‰]OÑÁɺ™¼@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýV‰'5ÖG—Œ”4Uÿ–N ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ý!=Ô‹ÎJÄštùáº|;À@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyÎ"[#Ll”Yh4·hÆ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýÓ™ÓËVµAì‘Ôí„ÏõmÑÄ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýBû°BJ¸l)t¨+ôÊ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýøt^¢£[DÄ™›¯Kë]6ÄÈ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇÆ73¯Hî²äq²á’BÎ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ý1å5ÁáE@•¤Dͨ3ä Ì@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›ÓJž¥ç…_š/ºÒ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýpû þ†FQ§ý…½f +’Ð@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèÜÎ[ȾB¤‡¼:U߈êÖ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýçŽëϤD£š1Zµ35BÔ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9é””lbBG‚™¬C³ðÜÄØ:‚œ Ê +ÙKFzé®›'üvº¤í‚ò„üð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯çoÀDB† á㈫…–Ú@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤í‚ò„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýc¶Öd1ëD[¶Wam=Þ]Ü@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·ê“â)?Aw§æj-®zv±Þ@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_pread¨HhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐõFxMÍC?œË0Ò¥z&€àb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤í‚ò„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýpò;ïG@ˆ‚¡]ô+Dâb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¤í‚ò„üð‹+aue_write’IhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~ÏD’kIG@‰eP8`7Š¼ä@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤í‚ò„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýä†MBô@®ƒiž€ÎZËæ@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýö-³"@SŸVÛaÝlF’è@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_pread”ChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›É–üÒI…¶LÀh¬‘"Åêb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¤í‚ò„üð‹+aue_writeþChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËŠ <öÜM¢‹&Yï?þkxìb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤í‚ò„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^è›bšxO2‡;Ö÷'9î@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤í‚ò„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýSuÈ…$¬CÒ¶ßøÚS-Sð@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóFtX—rC¶±ïéU Ǭò@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadæJhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýš ë£f#Añ£@ñYèç›sôb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¤í‚ò„üð‹+aue_writeÐKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý æ)Cì­Oç²xL¿‘Ïöb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤í‚ò„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;….—ÛCXƒD„mKa¢îø@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýùKy÷4uEq˜ñ`å[ ‡ +ú@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý sÇ:ôI´Ä·ñÙù;ü@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadØDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"²Öü1˜Ø®H¥Ldˆ¬ŒŽøI>þb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýj…ÿJ±N.©VáwAÿn\€ @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~õ4“F¸¨iÊBõ¬„8‚ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/þ›¿·J{óvݪ*`„ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadî?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýlñ¢u[K´³æÖž#b¡† b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýoüºJê²?:É~8Wˆ @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYÒö¯‰GÜ®z„w!þXŠ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýù_€ÅÐB@™ôÄeᯌ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadäChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýA–­cADsCY_ÙÚ‡Ž b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎÝé›Elˆ¨½G  @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*­WÑÿGAŽ`…; uÌi’ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËxþ¨ÃNs¤”Ðh>@÷” @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_pread°KhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýòŽ†$iIç­í­ˆ6¯j– b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýbà.t­Lü­ÿ6UÎ矘 @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3¢¨ @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýNÃ(âK ªt’ ¬ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadæIhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`Ò±ƒDµA`™øø Þ>˜•® b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæ³áI?‹v¯lóÏ Ý° @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙº9_³³O„«;'Ãy×}Ô² @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹ìnÖ^‚H*˜ð‡–Èíi´ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadö<hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýn½ýRKá˜C ›Å•¶ b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´H<ÿ +NíÖ'x¯úª¸ @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýî\Í=HF€†¦&ÓC “º @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµê#ž. D¿±ÓàKƒŽ!T¼ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadÎAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýä7ó4}¨Lö—Ueañv:¾ b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþ³5ÃoDˆ…²GÞ‚¢À @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýç§|9ÜÄGè…"6!²° @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4Ò÷ –fCO–ËXÜ˹Ä @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_pread’>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYÿkxnIƸ‘¢è=‰MÆ b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýiwHÏ¡9H.‘Ûœ½çåÈfÈ @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤Tß\-ZI³.IÕý4—Ê @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýu҃ɮN¸ê Ÿ N§¬Ì @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadªBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçMÞnFG½¬£˜5ñÝÎ b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-Ë</HúŸP²¯»Þ÷öÐ @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½ÛíXÿ@‚µ28¾¤0–Ò @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýúøœfÁEÒ™_ªCà!âÔ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadìAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿÆÞÇG˜D‚uŠ o’ Ö b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…&²ìV”Kd¹ ijãnhÁØ @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜSÁÑJŒMâ¾­4p›sÚ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýY²oÿXNy½ COwjV±Ü @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_pread–ChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:Ðè7:J,½yÔŒ°ã¯Þ b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£%~;_Kº¼s˜X”&@)à @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýl¨åÙFÀI@ŒI¯A]W +žâ @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$ P빘C¶§â!ûã“|ä @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_pread´GhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!:Q G]…׎°!ï€æ b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAFv5À4O—eµ&ÓÐ=è D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºæ®û„üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýkX¥dEí¯(Ö¢Á¥ê D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºæ®û„üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý îKÀÊEüµ´Äe«¢$ì b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºæ®û„üð‹+aue_writeÂEhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýaBýWO­V\‘¬î @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCøGu‚IKF”tq;•AÃ}ð @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýo¼Ÿ D׺ÆTŠžŒò @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadÒ=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýO8¦à‹Jlªµ2ö “cùô b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³Ÿ’r„K&¤92Á^¨*ö @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`e¥ªyB¹ .ƒ$Š9ø @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´›ü)(IΫÔÐÑIqœú @®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadš@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýS;sí@¢U ¹¤_×>ü b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—a"é¥@ìœOĦ`p!þ @®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼ê/IÆN!½7MŸU%²W€!@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯ol¡ÎGßµ£¿Ä®‚!@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadºNhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛHm6aM˜€Â:“y„!b®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄ…_àä1Ižžøslbs™Ÿ†!@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%/ân{¼B†HªÐ!Sˆ!J®œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºæ®û„üð‹+aue_sendtoÞ +ret_msgid408hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%Šéä0L +´c6Ä-×è4Š!Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºæ®û„üð‹+aue_recvfromÞ ret_msgid408hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýóÂÊžö=Lز nØm#VŒ!bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKæ®û„üð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÿqV:£ØJcŽyÙ)šæØŽŽ!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº®Ó»……üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬¼õðEñ•3 Y&—B!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº®Ó»……üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýf¿X0^CŶ*Ï#6E'Í’!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº®Ó»……üð‹+aue_writeØ@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖ&•‹ìL†µRÀ.g¸z”!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿s jíNE™É]Üb32–!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄ‹G3ËŠOŸøê?¤¬Ô˜!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_writeÎDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤57-D¤d´éLýœš!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶ÙϳfM3¼>³Š3;æœ!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ¿}ÌÔLá™FÌ4—¿ž!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_writešLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI+ÎS²xAI¶³ÅîáqT + !D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Šð›…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýË­ŽãcDì±ãÆð=M"]¢!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Šð›…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏ”ðÉOâI`…”±Ñ(}˜¤!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Šð›…üð‹+aue_writeºChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýfà„éÌÌE”ˆ²d¦ û¦!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/dâR"?E‚µøšPO"l¨!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýHÉ^¨C@$½â™C®Íâª!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_writeü=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý i\eÄHe†?]yjµ ¬!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|ÞÜÓ~ÌJô¸Uò­~c®!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ª¤ü‹Šé%»FDœaUBÉÂÝ6°!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_writeÐJhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄeÁ}«B"…ç^íB»Â®²!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêÎƯ…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýïÅ…:ìcC#¼Å£‡`.´!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêÎƯ…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"Á¾)B‘+üaz«yè¶!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêÎƯ…üð‹+aue_writeà=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýä N}ÊC¢ž²JFþ;θ!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬—ê´…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCŒï¸,Cu’Ïfktº!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬—ê´…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýå§|=vM‰_Íý|í1¼!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬—ê´…üð‹+aue_write¸BhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýø •ÒâÙ@¥G,»ñ;!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬—ê´…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼ú0AÛ›IжÄAù€!À!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬—ê´…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”FëXocDå¡Œ vñŠk`Â!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬—ê´…üð‹+aue_writeü>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[e$­¶=GZƒÒ\””P6Ä!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€Æ¾…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýA²«/w†BB—É[‚÷fˆ¯Æ!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€Æ¾…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´tØÁ9L…£øßkZýæªÈ!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€Æ¾…üð‹+aue_write”ChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:ÿÌï«Hg¢æšÃ秧-Ê!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ¡×É…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦!ûDGi¾0‰¿Ä¸:&Ì!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ¡×É…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠ&g{ôB#¸q»‰T¦/Î!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ¡×É…üð‹+aue_writeÖBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;¼Å'äFø‚¨ÒT›FªÐ!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷›ÍóoIHγڌ59úÒ!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥ýk¢¬qOψz›@b5 Ô!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_write€DhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýºþâÄÿùGš ìÿÉÓÝÖ!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷øzkó"Cñƒ<:²š#È…Ø!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæ?ý9jH²¬u€Â^X0Ú!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_writežHhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŇK¸]Fv»ªˆ +}•µÜ!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìî„Û…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]mí¸ +HD›«p³àlyÎ@Þ!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìî„Û…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨!æñ8‡Nq‡_Àd%:uà!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìî„Û…üð‹+aue_write¼>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.§/C‚F›‹ÐÀƒ¸™Hâ!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýàU<Žg±C‹³ ´7Ð¥d’ä!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýË¢ =EA‹)—t1Dæ!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_write„AhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“_GÂH¸£)íü\tŽÍè!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸%fØXÓK™»#ÂÂ’‘ê!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýH=¬N'"IE‡2ZæQAj¥ì!b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_write¤OhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶•ðÑMÁ˜)MÅÙ¶î!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”þèí…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;÷J«À¤·Úöâð!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”þèí…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙ'LþjsAù2÷f®ò!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºú×”ú…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖÞªpJ£¼ÃŠç +Ãô!D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºú×”ú…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖ= +3O¤¦@›Ã»ñ¦Ùö!ªœ à-;1Fz鮩'üvºà-;1Fz鮩'üvºú×”ú…üð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286exec +sleep20ÜS7[AIF¬•pd± (ý$|æÏEÙDý¾Á#ø!@šœ ߆7æFz鮩'üvº€ËâÞ +\ ×ms®"2ªœ àÈ ¹Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œú×”ú…üð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýŠ?Рh¨HÀ½óîÑ\#°"2ªœ àÈ ¹Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œú×”ú…üð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý~3q×N‰´ôNµP…5D²"ªœ àÈ ¹Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œú×”ú…üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýáþ²¡LŠ\Ô¸z¯´":ªœ àÈ ¹Fz鮩'üvºú×”ú…üð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý•Iõ¡€X@å¬[ï +FMS¶":ªœ àÈ ¹Fz鮩'üvºú×”ú…üð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýqÝ™v}H¬£b¥0¤Qþ¸"<ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Ü‚/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.datú×”ú…üð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execcat20ÜS7[AIF¬•pd± (ý:ICk¬GK¶zB mTÕº"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýEvtE…œKk¢)b¼"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýdœg>.M²ƒ›ˆÛðž"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýc ÝàKôDK‹¿Ÿö~7ÍÀ"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ý#16Ûg¤M¯~÷-ºÅó%Â"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýoæíõ¡C¿õ® äŸ`Ä"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ý5¦‡ yØI—‡÷Íh(yÚ[Æ"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V" Œûµ, ÕéB¬‹šúÙjüÈ"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýPcبÃF˶ÕIïK{ã!Ê"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýÀ=êû­[O¹‚/ÏÇ}´GÌ"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ý4{/¨5uD ˆ‹-âÚÝÃzÎ"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýÞ̆•h°N¡³ó<™« ÆÐ"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýfNØ&R±ESµ`4+‘èvÒ"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý&ÅÌ÷oÓKt¿%PýÍÐueÔ"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ý¤}z @L2†+ž¸ ÞÖ"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý⵩àïL…¾tý£F\x@Ø"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýÄæJãÜKÎñœÔ²Ú"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý>m_3Dç™vÖ؈:ûÜ"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýÏCšI^ûLê¦`¿VÙÓ®Þ"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_readà%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý‰Ëð´+N,ŸÚ_x £Ýà"bªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_writeà%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýŸ“òvˆ×H•º[yfÀºoâ"@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý‘š=ËߥN —¶7ÎODSúä"ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýþ:Q|HþH¤ì´y¾ªrÁæ"ªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýy¼Ýù”M0§Ó àBÁXpè"ªœ àÈ ¹Fz鮩'üvºàÈ ¹Fz鮩'üvºú×”ú…üð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý¾7D’^E‘‰šª€¦ëê"@²œ àÈBMFz鮪'üvº‰oý©äÇU¤©A)Eǹ ú×”ú…üð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýiY0U|âGª·HÞK…è|ì"²œ àÈBMFz鮪'üvº‰oý©äÇU¤©A)Eǹ ú×”ú…üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ýtÈò‰bDO™v¡ï†EÂî"<²œ àÈBMFz鮪'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsú×”ú…üð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnc20ÜS7[AIF¬•pd± (ý7ÈaED‘núø‚ƒPð"@²œ àÈBMFz鮪'üvºXꎩð®…\®ð@JÌ…¼âú×”ú…üð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ý’½² KÈ®tôeÍ•Ñò"@²œ àÈBMFz鮪'üvºXꎩð®…\®ð@JÌ…¼âú×”ú…üð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýs]¡oà¶EĘªçVÅ$£ô"²œ àÈBMFz鮪'üvºXꎩð®…\®ð@JÌ…¼âú×”ú…üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ýõë×IG–Ô©%ö"<²œ àÈBMFz鮪'üvº +vlYùÖN_–ù³ðNH$/lib/libipsec.so.4ú×”ú…üð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnc20ÜS7[AIF¬•pd± (ý¡´Ó§PK6ƒR|Oöfø"2²œ àÈBMFz鮪'üvº +vlYùÖN_–ù³ðNHú×”ú…üð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýB•bÁM“*SœÈ+‡ú"2²œ àÈBMFz鮪'üvº +vlYùÖN_–ù³ðNHú×”ú…üð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýëŽí½ àF|£ÙdŒ¹sòü"2²œ àÈBMFz鮪'üvº +vlYùÖN_–ù³ðNHú×”ú…üð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ý¯ ÂKC:H'ŽÜY¦@o&Ðþ"2²œ àÈBMFz鮪'üvº +vlYùÖN_–ù³ðNHú×”ú…üð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýÀ‘ƒs¡tFb¤h,&‘’ì€#2²œ àÈBMFz鮪'üvº +vlYùÖN_–ù³ðNHØðð€†üð‹+aue_mmap€€© arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ý8|/+‚H|”<È+iø(G‚#2²œ àÈBMFz鮪'üvº +vlYùÖN_–ù³ðNHØðð€†üð‹+aue_mmap€€© arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýˆl9IÛ®öòÀ?{8+„#D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºØðð€†üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýM¹Ìlš H“¨‘öÿz°c߆#D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºØðð€†üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýä`ï~ 8CG¢;]ÐÞů”ˆ#2²œ àÈBMFz鮪'üvº +vlYùÖN_–ù³ðNHØðð€†üð‹+aue_mmap€€« arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýh·¦5ONK·²À{ÌŠ#2²œ àÈBMFz鮪'üvº +vlYùÖN_–ù³ðNHØðð€†üð‹+aue_mmap€€« arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýWôçrCÞ®]•¢–©›¼Œ#²œ àÈBMFz鮪'üvº +vlYùÖN_–ù³ðNHØðð€†üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ý8‘\€Gp¯æŸ±>ºŽ#<²œ àÈBMFz鮪'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Øðð€†üð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnc20ÜS7[AIF¬•pd± (ýîš*hÊGq‚7AÆ>qãà#2²œ àÈBMFz鮪'üvºÞA`ì•øËQ¸•bxñË"œØðð€†üð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýѸ™ò”óHðºîmT¬W’#2²œ àÈBMFz鮪'üvºÞA`ì•øËQ¸•bxñË"œØðð€†üð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ý+2ëÞK¦H_šË$Ƨ@e”#2²œ àÈBMFz鮪'üvºÞA`ì•øËQ¸•bxñË"œØðð€†üð‹+aue_mmap€À¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýÈbæú!æMö¡ÇV +m–#2²œ àÈBMFz鮪'üvºÞA`ì•øËQ¸•bxñË"œØðð€†üð‹+aue_mmap€À¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýD_£wÑÀJë›[2cÕkî%˜#2²œ àÈBMFz鮪'üvºÞA`ì•øËQ¸•bxñË"œØðð€†üð‹+aue_mmap€Àë arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ý¶˜óšþ@ Þï +̶ယ#2²œ àÈBMFz鮪'üvºÞA`ì•øËQ¸•bxñË"œØðð€†üð‹+aue_mmap€Àë arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ý~3…–[MBw•Ù}÷ˆšœ#2²œ àÈBMFz鮪'üvºÞA`ì•øËQ¸•bxñË"œØðð€†üð‹+aue_mmap€€Ž arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ý/@ñ£^D-ƒäÜtξ|:ž#2²œ àÈBMFz鮪'üvºÞA`ì•øËQ¸•bxñË"œØðð€†üð‹+aue_mmap€€Ž arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýnËÅL}H3ŽŠTb˜´k #²œ àÈBMFz鮪'üvºÞA`ì•øËQ¸•bxñË"œØðð€†üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ýÊ?¼ +3F5ƒ[£ìÅ^‚¢#:²œ àÈBMFz鮪'üvºØðð€†üð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnc20ÜS7[AIF¬•pd± (ý“çô]HßGóˆéÊ“vJ ¤#:²œ àÈBMFz鮪'üvºØðð€†üð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnc20ÜS7[AIF¬•pd± (ýàb¤õŒO£—Í—·;_f¦#:²œ àÈBMFz鮪'üvºØðð€†üð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnc20ÜS7[AIF¬•pd± (ýk!f.$HN¥ Jy7iw¾¨#<²œ àÈBMFz鮪'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.confØðð€†üð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1286execnc20ÜS7[AIF¬•pd± (ýgöJ:49A¨±š-²YIª#@²œ àÈBMFz鮪'üvºÜN½Ëê¯+^¯êZ£®+VØðð€†üð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýÞ´N³LÍ…ñéV¬#@²œ àÈBMFz鮪'üvºÜN½Ëê¯+^¯êZ£®+VØðð€†üð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýŠÙuî Må›àZlÞ—®#²œ àÈBMFz鮪'üvºÜN½Ëê¯+^¯êZ£®+VØðð€†üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ý +Éòæò¢Ñ[¢ò¥›ÑÍ 20 +ÜS7[AIF¬•pd± (ýhÈz™C¤¹ÁÒâõ¦Ç†°#<²œ àÈBMFz鮪'üvºÉòæò¢Ñ[¢ò¥›ÑÍ /etc/hostsØðð€†üð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1286execnc20ÜS7[AIF¬•pd± (ýe-LûI¥¾Æ7Q\ìAÛ²#@²œ àÈBMFz鮪'üvºÉòæò¢Ñ[¢ò¥›ÑÍ Øðð€†üð‹+aue_readŽhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýæHªÈÁ‡@u©.}ŸygÓS´#@²œ àÈBMFz鮪'üvºÉòæò¢Ñ[¢ò¥›ÑÍ Øðð€†üð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýL5¬7ß E…{äŸÎqO?¶#²œ àÈBMFz鮪'üvºÉòæò¢Ñ[¢ò¥›ÑÍ Øðð€†üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ýàÉTáFz鮪'üvº::120ÜS7[AIF¬•pd± (ýŽ£Ô¡éIÓ»G +Q ´Ä¸#²œ àÈBMFz鮪'üvºàÉTáFz鮪'üvºØðð€†üð‹+aue_connecthostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286address::1port1execnc20ÜS7[AIF¬•pd± (ý”ºÈ§³/I*…²i ¢ñnº#²œ àÈBMFz鮪'üvºàÉTáFz鮪'üvºØðð€†üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ýàÉZÃFz鮪'üvº127.0.0.120ÜS7[AIF¬•pd± (ý–Løþ¾K/•4 ˜‡Û¥|¼#²œ àÈBMFz鮪'üvºàÉZÃFz鮪'üvºØðð€†üð‹+aue_connecthostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286address127.0.0.1port1execnc20ÜS7[AIF¬•pd± (ý^,×®'+Ò#@°œ àÈ:­Fz鮪'üvºXꎩð®…\®ð@JÌ…¼âØðð€†üð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýÕ‹%o–¬C;¸ÈÌõŽ·èÔ#°œ àÈ:­Fz鮪'üvºXꎩð®…\®ð@JÌ…¼âØðð€†üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execgzip20ÜS7[AIF¬•pd± (ýüʽ7!M4ª[]‰UX$’Ö#<°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñ/lib/libz.so.6Øðð€†üð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execgzip20ÜS7[AIF¬•pd± (ý§”>Ï“LU§fÄ÷ _Ø#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¢˜úvŽØ3º +E–ssÖ:>Ú#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý^!-œ¬‚Lÿž¤“ªFg uÜ#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€€© arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý0”–ó&F/”¡)MfpÞ#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€€© arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýFßÑ·¤TJó¶h怼Ç`¤à#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€€­ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýì|eF3Dlº¨Ì6Þßû)â#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€€­ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý kzéghKŒ¹Æ&!똷‹ä#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€Àµ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý×hÁö“N…±ˆó+&•æ#2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€Àµ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý‘{? YFÕ·9< Nåè#°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execgzip20ÜS7[AIF¬•pd± (ý +®p“ó ß[ aÃ ß W20 +ÜS7[AIF¬•pd± (ý™(IE$QI®´Š@o>{ˆ>ê#<°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß W*/usr/lib/liblzma.so.5Øðð€†üð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execgzip20ÜS7[AIF¬•pd± (ý‚jÓ‹`B:”ØâåàÖvŽì#2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý¹Ís„AÇ›l7ëÝlÇî#2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý£Á²ŽÞ‘Dì§ñ„rWÿoð#2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€À¶ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýPHž7’fLñ¬¤³$Þëò#2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€À¶ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý$ª®ÎÌ¿OJ±7,žd_Gô#2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€€¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýá‘Ü7´@º §æÅå iÄö#2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€€¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý—³}0FóMž¢L½šO;aªø#2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€€Ë arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýÄn–.AJ8ƒÌÙ§êú#2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€€Ë arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýÔÑÁVfXLs©8Ô3mhVü#°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execgzip20ÜS7[AIF¬•pd± (ý +ñ…&´iºU“i5kEºGQ20 +ÜS7[AIF¬•pd± (ýð1¥½õC’Ù±Iè™òþ#<°œ àÈ:­Fz鮪'üvºñ…&´iºU“i5kEºGQ(/usr/lib/libbz2.so.4Øðð€†üð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execgzip20ÜS7[AIF¬•pd± (ý•«–WVWDvƒ3º©üB[Ê€$2°œ àÈ:­Fz鮪'üvºñ…&´iºU“i5kEºGQØðð€†üð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýœ\boCC*¾Ê×Gq¾ž‚$2°œ àÈ:­Fz鮪'üvºñ…&´iºU“i5kEºGQØðð€†üð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýspÏèM{£G§bbj„$2°œ àÈ:­Fz鮪'üvºñ…&´iºU“i5kEºGQØðð€†üð‹+aue_mmap€€Ì arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýì•¿‡É@º(]ÞNfä †$2°œ àÈ:­Fz鮪'üvºñ…&´iºU“i5kEºGQØðð€†üð‹+aue_mmap€€Ì arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýR)”êF¯¢ObXkS +6ˆ$2°œ àÈ:­Fz鮪'üvºñ…&´iºU“i5kEºGQØðð€†üð‹+aue_mmap€ÀÍ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý*µÊ=‡ºMOÄð‘&¥,Š$0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöëùžˆüð‹+aue_lseekê·hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·[õ«ûIBh¡)^÷Õ×9Œ$@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÆÜ¢æŽüð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýªAz³f:Iš<¹«ÀÂŽ$JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆÜ¢æŽüð‹+aue_sendtoÚ +ret_msgid409hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý`U–^U"I‚ƒ OŽÉó$JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆÜ¢æŽüð‹+aue_sendto˜ +ret_msgid410hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýŠŸj!õ§D鯶`J¼’$JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆÜ¢æŽüð‹+aue_sendto¬ +ret_msgid411hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýƒîóÂNÏ•«ù7³ÙÉž”$JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆÜ¢æŽüð‹+aue_sendto˜ +ret_msgid412hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý³òñ RDå€S†.ð0Iw–$Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆÜ¢æŽüð‹+aue_recvfromÚ ret_msgid409hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÅ xI0O<¤X3K™|˜$Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆÜ¢æŽüð‹+aue_recvfrom˜ ret_msgid410hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý)ò%µdN­›…B±a§ßš$Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆÜ¢æŽüð‹+aue_recvfrom¬ ret_msgid411hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýkJô†IúAj“|IIrÎ@œ$Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆÜ¢æŽüð‹+aue_recvfrom˜ ret_msgid412hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýºÁ^ÄzAõˆ|z \Ć‘ž$0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦›Êâüð‹+aue_lseekšÊhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý + €ja·*XYª·CÿùX?Ü20 +ÜS7[AIF¬•pd± (ýµxÏFzé®’'üvºê™, Bª¢T$µ„äý`ÚhostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýeé截iEмÅv5nS’J $<Þ› µxÏFzé®’'üvº €ja·*XYª·CÿùX?Ü/etc/cron.d¾í•ý’üð‹+aue_open_rwtc +flagsmodeè +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1execcron20ÜS7[AIF¬•pd± (ý±¯¤Ù_Mý½'æ ¢$Þ› µxÏFzé®’'üvº €ja·*XYª·CÿùX?ܾí•ý’üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1execcron20ÜS7[AIF¬•pd± (ýl;ôÃ[äE ²·Ç2¤$0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_lseekšÊhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýn=EËDØ:Û—-‹¨$ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ýnÃ}\TôGú›^Àýú ¦$@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±–þchE¬ãs2žÈ¬$ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ý•²$‰RÓLg³‰îÊÛŠÑ]ª$@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­KÀÇËA «ÌZ¸Ïéõž°$ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ýâÇæPkE·£rЃÎRJï®$@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆ1CLš»çÑn[à™´$ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ý# NiLMqŒÐ^Ð[b)²$@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"Å줦¬H¨î›¤`ª¿¸$ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ý˜ãLIÙîO\¦Þék4Ô¿¶$@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’Žy}ÖÃLëµäþ-ÕÙ¼$ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ýlÐÂŒ¬Fˆ½/¶‰ø&?º$@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<ãœ$A”—Y“}å0åLÀ$ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ý)Ðu~=JÁ™÷a{»¹Úl¾$@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦-“0­qK£—ª9ç[uŒ§Ä$ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ýåg|?`ÜC¶µŠžÁQQ> Â$@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\,ß@Z¡¡§$¥N0yÈ$ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ýá“ßhHž»5«Ó%Àþ˜Æ$@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñiþŠÜ{OV•ìßF"BÊ$:‚œ Ê +ÙKFzé®›'üvº¦ˆÈå“üð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊñ4O›;yäÖÌ$@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóMßÅMI©YV³ó:—Î$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýGpq¹+´Gx‘ÌŠlƒ˜ÍÐ$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadŠ8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýסeœ@ãµ®+ÀˆCËÒ$b´œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ˆÈå“üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/]rVzOK‡š¿5êåÔ$b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ˆÈå“üð‹+aue_writeô8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡²XéP¨K ºl+™Ôec"Ö$@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓÒï2[Iµ“ìB¸•Û2êØ$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃüÂò0!Ex“ëî—b´ÌÚ$@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadò=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþ.Œ>@î¹`0vV(ïÜ$b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ˆÈå“üð‹+aue_writeÜ>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8²“¨~ÒA]‡ÓMµ¬æÚÞ$b´œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ˆÈå“üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáÕ|Üe(Db‰à%`¶¾à$@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýî\Íycw˜2Gý›ÜB“cˆ%b´œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ˆÈå“üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýy>ј"eFx³¢·Mà +Š%@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýSj@3òOÓ”¯Ç'ilî4Œ%0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UäœÆ¥—üð‹+aue_lseekž‹hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwSÔœ@Oצ\ÎJaècŽ%0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŠ™éžüð‹+aue_lseekúhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý♞±C|'ÚÅ•Yaw%0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_lseekúhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýëÇ¢ L9¿=@ÿI9¬”% ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+20ÜS7[AIF¬•pd± (ý£“Žúp”Oœ) kCT†’%@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCH9©D3°ÒÕQÃý¦ê˜% ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+20ÜS7[AIF¬•pd± (ýBéüìè²C ŽAλ¯ –%@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘åWÙOÐIú‰è@ñÅÀ4qœ% ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+20ÜS7[AIF¬•pd± (ýÌd•WG…F°¸qÇPV2š%@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÔ=:Ü6OÃH7JÜœ‘ž%:‚œ Ê +ÙKFzé®›'üvºòÚØ¢üð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9/ÉWØH†¦@tÉJÁêî %@¶œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V òÚØ¢üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJ0‰¸F"‰•ŸÅS:¢%@¶œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸rÜ€!:@×½jOK|ƒÜɤ%@¶œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadü@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýä‹PùCÙ­!ÜÐǾƦ%b¶œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áòÚØ¢üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$^ÕDrIè&tñИ¨%b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºòÚØ¢üð‹+aue_writeæAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6 Ò48”Mô¡<=—c§(»ª%@¶œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V òÚØ¢üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýG”…Q¥O*¨É(5k!xû¬%@¶œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯  †ÍMå® Õ^¯j®%@¶œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€Ì_hŸDɤø vt—¦°%b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºòÚØ¢üð‹+aue_write¾hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7³÷{cE´–éÛf‚²%b¶œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áòÚØ¢üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdQ&‘¾G¼Ã.¹“Ö±Ò´%@¶œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V òÚØ¢üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²Õ„*©B[»2øwhGÞU¶%J¶œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºòÚØ¢üð‹+aue_sendtoÞ +ret_msgid414hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýl,š//@„ûØjâåëʸ%Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºòÚØ¢üð‹+aue_recvfromÞ ret_msgid414hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýí¥¼¾ÚÓLa¬ÐsP{€º%bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKòÚØ¢üð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÊWMŽ€Jl‰ò«s¢ŸnÁ¼%D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÎÂÄâ¢üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyUŽ ®cKƒÚÚ¥JY²¾%D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÎÂÄâ¢üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…*?ÅÚNDLˆ«qS1ƒ>8À%D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÎÂÄâ¢üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑ]?±›O燣Ûøá']ŽÂ%D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÎÂÄâ¢üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýDÙ–©¤À@a²;æ‚žwqsÄ%@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÊêÆ”¥üð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýRROÊ=FK…“¥ã€ƒÆ%JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊêÆ”¥üð‹+aue_sendtoÚ +ret_msgid415hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýƒÅ?#JX¢³SZp­í&È%JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊêÆ”¥üð‹+aue_sendto˜ +ret_msgid416hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý#ðS3FgD~„#órQ_Ê%JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊêÆ”¥üð‹+aue_sendto¬ +ret_msgid417hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýJ¦DÝDs›pl²&ºWÌ%JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊêÆ”¥üð‹+aue_sendto˜ +ret_msgid418hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¬Gò3Ht¯ò˜¯ùÈFÆÎ%Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊêÆ”¥üð‹+aue_recvfromÚ ret_msgid415hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý—6ûµqzJ‹¶ÀDp HÐ%Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊêÆ”¥üð‹+aue_recvfrom˜ ret_msgid416hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý1(ÅÔ@˾GÞUA~dkÒ%Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊêÆ”¥üð‹+aue_recvfrom¬ ret_msgid417hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýfðü³HªO ™ãV*ôÔ%Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊêÆ”¥üð‹+aue_recvfrom˜ ret_msgid418hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýôzÔuL‰ž“ JŸ–Ö%0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†‘‰¬¦üð‹+aue_lseek¦ÃhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)<‰ÿW}E–—ô?gZ%mØ%0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uàêïñ­üð‹+aue_lseek€ÉhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýê"²¿zGÉ´ÄÖÈfDÚ%0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_lseek€ÉhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýD믠£ßIî¾ãD ÍmÞ% ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+20ÜS7[AIF¬•pd± (ýÖ(ÕKTN¿¿^}ù¨eñ´Ü%@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýh>M?ŒD„~~ÄUfIâ% ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+20ÜS7[AIF¬•pd± (ýZµÐA\‘í,Ò£Š}à%@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýj*§˜GKÚ< f¯}æ% ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+20ÜS7[AIF¬•pd± (ý†K(Q¸G¦±#\áõ¶´ä%@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯¿Â~Þ¨JM½ËsE´¹õ{è%:‚œ Ê +ÙKFzé®›'üvºœ¡Ì±üð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûaR­ +IÓ”çõ<øë™ê%@¸œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ¡Ì±üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?Àž—™öAm®àhÖÕ$)ì%@¸œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜö…I´J¶Ô½ÚÉÂòuî%@¸œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_pread¤2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎ"½Æ‘Nÿ¿]šÖy=#(ð%b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ¡Ì±üð‹+aue_writeŽ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡Bœ=ÙI¹½+pàéî-€ò%b¸œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áœ¡Ì±üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}M`d¾GP¥°^¾58êô%@¸œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ¡Ì±üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYuÏj¹Fr“ÅÆ $€Ãö%@¸œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ˨ÄòUL^¥QnæÊ©ø%@¸œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—’ˆ+ÊC»‹{ШÊøóJú%b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ¡Ì±üð‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýË£‰„(jD㳽̵:¥Ö‘ü%b¸œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áœ¡Ì±üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAZ;´ïO³ž^ ª¾eãìþ%@¸œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ¡Ì±üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ým#‰LIOA‰¥Qiƒ€&J¸œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºœ¡Ì±üð‹+aue_sendtoÞ +ret_msgid419hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýä%7YYL±§ŸNSBj]‚&Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºœ¡Ì±üð‹+aue_recvfromÞ ret_msgid419hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýQ )]z»NI3KŽí®‰„&bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKœ¡Ì±üð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¡”t\N¼”&JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŠ€ËÀ»üð‹+aue_sendto˜ +ret_msgid421hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¯¨)A +Š±ž[£ª¯–&JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŠ€ËÀ»üð‹+aue_sendto¬ +ret_msgid422hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýRã…N1>G^ °áÞ3¸ãº˜&JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŠ€ËÀ»üð‹+aue_sendto˜ +ret_msgid423hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý½¾“L}IL¦LÂép.¥*š&Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŠ€ËÀ»üð‹+aue_recvfromÚ ret_msgid420hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýM/#½„$@nŒ­OÑ@›æœ&Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŠ€ËÀ»üð‹+aue_recvfrom˜ ret_msgid421hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýw¼Ñta†@l§RxľJhž&Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŠ€ËÀ»üð‹+aue_recvfrom¬ ret_msgid422hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýB¤Ô±uMHž÷ì®…¼ý &Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŠ€ËÀ»üð‹+aue_recvfrom˜ ret_msgid423hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®ŽúØm-6¦B„Š±Ü"ÍtK¢&0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U’ÄÚõ¼üð‹+aue_lseekò€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý2³L4›B2´P +ŽmÛZI¤&0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_lseekò€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýºÖøröMê·W‚“±6¯¨& ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+20ÜS7[AIF¬•pd± (ýsLŒ -ïE`¶}|ð«—)¦&@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖj”Pœ€Dx´ +D-W¸¬& ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+20ÜS7[AIF¬•pd± (ýiعÂëUBœXÞ÷Ý®·ª&@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËÆä{AÍšK;lÛÿx°& ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+20ÜS7[AIF¬•pd± (ýU» š«B£¡èÄT˜uხ&@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+ÐÿY'3EÊ¡Æ“ªœé(²&:‚œ Ê +ÙKFzé®›'üvº¦ÆÕ¿Àüð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑ2Xmù÷O”±qÿ%´&næ´&@ºœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ÆÕ¿Àüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœh ÈCͧš…'|'(¶&@ºœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚÇV!¢ŒMöž^'*u^¸&@ºœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadÄ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚**ÔÌCÍ·ÙVÃÑâZº&b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ÆÕ¿Àüð‹+aue_write®&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýp Ée&uKôx®Ë>¼&bºœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ÆÕ¿Àüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšºÃœøùE«¬·ŽlFU#Û¾&@ºœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ÆÕ¿Àüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌýºuKܱ‡ß?Ž ?À&@ºœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£kÅ빓LŒ¡† 8ÕSÂ&@ºœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadžhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚<‘³5AE¼·mxiŸÐ®'Ä&b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ÆÕ¿Àüð‹+aue_writeˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆÛ߃#ýH+€HàY·ªÎ¤Æ&bºœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ÆÕ¿Àüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜFÊ<ÞK@¥†¸Â:Z>âÈ&@ºœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ÆÕ¿Àüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýà¡F§ÐF<½Ú¥o>dÊ&Jºœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¦ÆÕ¿Àüð‹+aue_sendtoÞ +ret_msgid424hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýu¡$ÏD;›Øï´”ÑÌ&Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦ÆÕ¿Àüð‹+aue_recvfromÞ ret_msgid424hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýØ‚`G³”3ŠøÎ&bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¦ÆÕ¿Àüð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý5=ùï @—„‡/dÒO#Ð&D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ÆÕ¿Àüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýtÿ廸3JΑ>ä d8²Ò&D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ÆÕ¿Àüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/w¶;Kå€k!ÜÕüölÔ&D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ÆÕ¿Àüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜ2\eFuH «¬›=€Ô[ŽÖ&D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ÆÕ¿Àüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²ùß^bêB?²¢Üwp¡±Ø&0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uèü¶ÕÄüð‹+aue_lseekƦhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷ü-K¦ëFÚ½.T´ ¤&ŸÚ&0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°©ÝªÌüð‹+aue_lseekž¬hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqº{fÀÜL;‹§xG«‘2Ü&0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_lseekž¬hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?]:ãŒH¡™Ÿ£½Å¿¸à& ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+20ÜS7[AIF¬•pd± (ý#äL×·D³‹‘)J1šà-Þ&@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–•U±Mß@›GA¾ïŸ%ä& ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+20ÜS7[AIF¬•pd± (ýM÷r¢uüD9§}kÔc½fuâ&@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýì/<ŠZOƒ‘DÌQ’«/)è& ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+20ÜS7[AIF¬•pd± (ýã[¯Ï!’N3´O<—–«î"æ&@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCñäéL­¸SoßÏëê&:‚œ Ê +ÙKFzé®›'üvº¸«ñ²Ïüð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#_ÄJ¸”•|yÖ=œ„ì&@¼œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¸«ñ²Ïüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý nvªI†Ã;;Z4³^î&@¼œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQP|û“ONµš:½`ùoèð&@¼œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_preadÌ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýú†™Æ[J±ž·§_°Ñaßò&b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¸«ñ²Ïüð‹+aue_write¶&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýt®ÉXuZM­(zßO ô&b¼œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¸«ñ²Ïüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%Z®í1BÖNݨŸö&@¼œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¸«ñ²Ïüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýºˆ¡œFWM‹’Ii²5ì£ø&@¼œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýɺq2„vF%¬G)¡Ò§´ú&@¼œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_preadÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛºWO¹ªŸÁII4ÉÏü&b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¸«ñ²Ïüð‹+aue_writeºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®AHÿ×þH¥«Æs[0÷Øþ&b¼œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¸«ñ²Ïüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5ø³Kà NÕ˜J¹’J©oØ€'@¼œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¸«ñ²Ïüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡¦<3:MÓ¹åZý=\E3‚'J¼œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¸«ñ²Ïüð‹+aue_sendtoÞ +ret_msgid425hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýw1J=(ƒJ´´DŠ%µ˜„'Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¸«ñ²Ïüð‹+aue_recvfromÞ ret_msgid425hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýM¯¤4@„ðÌVYÞ†'bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¸«ñ²Ïüð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý&ò2'‚TNv±³š®ùˆ'D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºâ宼Ïüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý󎀡vA[±$E=ûRPŠ'D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºâ宼Ïüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýPÂljڊI¬…",øúıŒ'D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºâ宼Ïüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹4íbI;³Û¥‘=ëÚŽ'D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºâ宼Ïüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýo|òéçtGõ‘ÝæCÇ%'@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e’õìûÑüð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý¨ÉÝ­9Oõ¶JÖŽRFÄ’'JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’õìûÑüð‹+aue_sendtoÚ +ret_msgid426hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý!Ý$øñð@ˆ£Hç(ð”'JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’õìûÑüð‹+aue_sendto˜ +ret_msgid427hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý±†bî‚zD}©s˜ønÔÝ–'JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’õìûÑüð‹+aue_sendto¬ +ret_msgid428hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý…’±#ªEt¢¿Á­ñ˜'JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’õìûÑüð‹+aue_sendto˜ +ret_msgid429hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýwð+I»ýL,­jCÚ‹Ñ’—š'Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’õìûÑüð‹+aue_recvfromÚ ret_msgid426hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýxÌLÕ½Eµ³Ü\#¾b9Ùœ'Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’õìûÑüð‹+aue_recvfrom˜ ret_msgid427hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýKýï¥5¨Dhš%¹cSZ:^ž'Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’õìûÑüð‹+aue_recvfrom¬ ret_msgid428hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý´¿–W§NǪ‰´'Ÿÿ» 'Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’õìûÑüð‹+aue_recvfrom˜ ret_msgid429hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý(Ä…&Gè¤1‚à` O¢'0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UøùâžÔüð‹+aue_lseek¬ÞhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃÎ6Y¬zL5’ÎU¬ø ¡¤'0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶ÎõáÛüð‹+aue_lseek†ähostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{âz0péCJ Éó"„¸eP¦'0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_lseek†ähostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýù<ðN:–†u4”µ²ª' ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+20ÜS7[AIF¬•pd± (ýVU¶KÇJ‹•§ë¢ê˜¿¨'@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU­o9„(G¡§M<QðQz®' ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+20ÜS7[AIF¬•pd± (ý¢qæ/”Aá¡X.\K)PU¬'@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýjÓľ/JX«èjí^r¶™²' ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+20ÜS7[AIF¬•pd± (ýü}®kÎ@,¸¾ÇfÐÁ°'@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýªö¤5Fæ—öîíÖ²‰´':‚œ Ê +ÙKFzé®›'üvºˆ±“¨Þüð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýzWᯢéM‰…üzT{çÚ¶'@¾œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆ±“¨Þüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦uæŒÚŒ@ ƒSb’¶—¸'@¾œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+¸@Sæê@¬‚Q?LÖ}·º'@¾œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_pread†2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýg}µ!8÷C‘“Êià훼'b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºˆ±“¨Þüð‹+aue_writeð2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýí–D¹ÿ]Mݶ­HzõÞç¾'b¾œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áˆ±“¨Þüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹AìH°C› ¥ 0¤ë]À'@¾œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆ±“¨Þüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxÅ&AfIéÅ^ÞѹwúÂ'@¾œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýEÀê qhö'@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~_B¡öM︩ê¶X…$ü' ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+20ÜS7[AIF¬•pd± (ýì>6dADÇ'¥2„éÎú'@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌlóaFB¿©Ƈ”õ¾Rþ':‚œ Ê +ÙKFzé®›'üvºÂåšíüð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxcÍv“B\k›õ¦B1€(@Àœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Âåšíüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯Mã=@•î |ìý‚(@Àœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5>ºv@³¶áZº>zO„(@Àœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadâ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,ý¶¼¨IΠ‡uü©áS†(b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÂåšíüð‹+aue_writeÌ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\0Åã•àC‰àC·ò0÷mˆ(bÀœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÂåšíüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9C!Àà¶H²ò—+Oy2ÝŠ(@Àœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Âåšíüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢~¦¥ûN¿§ÍÇÖ·LëNŒ(@Àœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýžcœÞŒ,AC‹aÇ´fŽ(@Àœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_pread¬hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹x²&MV¿4H7Ó¾Ž`(b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÂåšíüð‹+aue_write–hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýF7?P‡ÔO/¸³âõÏ°’(bÀœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÂåšíüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýGÃÙÇ»íO]£ä/4Yš”(@Àœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Âåšíüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡ÐïŠyðA§§^ë-e§]I–(JÀœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÂåšíüð‹+aue_sendtoÞ +ret_msgid435hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊ"p TOJžØTO˜k˜(Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÂåšíüð‹+aue_recvfromÞ ret_msgid435hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÂÀã™ìEò²¥jueUòš(bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÂåšíüð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýѤ aCˆ½*ò›O`¼:œ(D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº Ã¾£íüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJÕÁaiqDí‚$•Ö2®êž(D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº Ã¾£íüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,ó™ÊŠnN­¿Ý9¶8 / (D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¼ÌÕÅíüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÔŒƒdÒ.A±‹~Dž¡!ËU¢(D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¼ÌÕÅíüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^ã°N°UIë¹éÈ—êÂzH¤(@¬œ à-ñFz鮩'üvºàÉc‡Fz鮪'üvº²è€òüð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execnc20ÜS7[AIF¬•pd± (ýaÇwL:H2¬;mOFV®¦(¬œ à-ñFz鮩'üvºàÉc‡Fz鮪'üvº²è€òüð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ýÊ%¥D£?eMì·¨(¬œ à-ñFz鮩'üvºà-Á£Fz鮩'üvº²è€òüð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ýsèåM„£¦úL‡Iƒ%ª(¬œ à-ñFz鮩'üvºà-ñFz鮩'üvº²è€òüð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnc20ÜS7[AIF¬•pd± (ýžJ“=«@*¸‚Ð%5û–¨¬(Ršœ ߆7æFz鮩'üvº߆7æFz鮩'üvº²è€òüð‹+aue_killpid signumarg_pid1286arg_euid1003arg_ruid1003arg_egid1003arg_rgid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýî5ÁdÿEE…˜0ÞxL®(b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯²è€òüð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1281execbash20ÜS7[AIF¬•pd± (ýÓ} ¯xDë Fߪ£74°("–œ ×µ¨Fz鮩'üvº²è€òüð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1281execbash20ÜS7[AIF¬•pd± (ýp°4ÍN´ Ž†L‹@²(b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯²è€òüð‹+aue_writedhostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÝ'ïq±@ʽÙEB,¦Ù´(0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜæä½óüð‹+aue_lseek†ÏhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“ƒë¯¦J£ Cxgà —¶(0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U쪵ùúüð‹+aue_lseekÞÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎ÷3q<åM“¶ø‰LÎK+¢¸(0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĽìŒüüð‹+aue_lseekÞÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£¤G©&Ið ØüFna¼( ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UĽìŒüüð‹+20ÜS7[AIF¬•pd± (ý!&ÕÁ~¡Kª#÷Ñ ¢êº(@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĽìŒüüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýq­ I±I"ˆH?,Wþ`ÝÀ( ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UĽìŒüüð‹+20ÜS7[AIF¬•pd± (ý ‚- +1D‚º“¬ÿ1O¨¾(@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĽìŒüüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,^™ïN‰¡µ“ǦÄ( ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UĽìŒüüð‹+20ÜS7[AIF¬•pd± (ý ϯúfOž©ª#œŽ—Â(@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĽìŒüüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌ­¢5g(J©€–›BüŸ Æ(:‚œ Ê +ÙKFzé®›'üvºÄ½ìŒüüð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI¡¡XÉ‹BÊ‹ƒÊ½Õîõ‚È(@Âœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ĽìŒüüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞÇåæcB7¹Šü5¹”f7Ê(@Âœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĽìŒüüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–ˆÑÕbŽBQ¥2^C'Ä}>Ì(@Âœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĽìŒüüð‹+aue_preadÚ2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýüÙA}¶D<¢M%ÏK†S¶Î(b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÄ½ìŒüüð‹+aue_writeÄ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ~ùKVIJb¼žדдIÐ(bÂœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áĽìŒüüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼ûˆ¡Î?M»™ÉヘÏç[Ò(@Âœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ĽìŒüüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyò¤ðAN:·hšÜèáùÔ(@Âœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĽìŒüüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]Ÿzj~EH™¾¾ ¤7æÈÖ(@Âœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĽìŒüüð‹+aue_preadÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýGÐŽHIâ¢âwøñ‰½“Ø(b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÄ½ìŒüüð‹+aue_writeºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛG+‚ÝN2­ÀrŸ¦ +ÚÚ(bÂœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áĽìŒüüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýuÁËf£ÑDr°4èüVçTÜ(@Âœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ĽìŒüüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\¼ñðÓ¤D»Å"M2¨ªÞ(JÂœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÄ½ìŒüüð‹+aue_sendtoÞ +ret_msgid436hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdèD:õÇG†•·À^ +z‘à(Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÄ½ìŒüüð‹+aue_recvfromÞ ret_msgid436hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýu£4óP¬Eˆƒ®OùÐ:"öâ(bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKĽìŒüüð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý{ÏÔÕÏJB«¶>´™E‘`ä(D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°´—–üüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýïpƒEIûµÿÒÕç´pæ(D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°´—–üüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠL1I(–NÐÜ™Wmè(D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°´—–üüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶,‹êªoL+¦êÄ)öaC4ê(D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°´—–üüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅá3cZÄIb°“v E IAì(@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e–ÁìÖþüð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý +èЂKg¼´“²x÷Êî(JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–ÁìÖþüð‹+aue_sendtoÚ +ret_msgid437hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýy5˜Ì£ONüí#¸O±ið(JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–ÁìÖþüð‹+aue_sendto˜ +ret_msgid438hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýˆ C3øJÁ‹÷§ì4%>Pò(JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–ÁìÖþüð‹+aue_sendto¬ +ret_msgid439hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¼]º?QØKv¥´h2|Àô(JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–ÁìÖþüð‹+aue_sendto˜ +ret_msgid440hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýJ¯êw6O,Ÿ=“H“’ö(Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–ÁìÖþüð‹+aue_recvfromÚ ret_msgid437hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýŽî4̹E>²vJà%¥jø(Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–ÁìÖþüð‹+aue_recvfrom˜ ret_msgid438hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýUo$ +Ë I­†.>îÿ‰³Ùú(Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–ÁìÖþüð‹+aue_recvfrom¬ ret_msgid439hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®˜úz›a|/{A7œ3ŒaÁ¾Ðü(Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–ÁìÖþüð‹+aue_recvfrom˜ ret_msgid440hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý­}“„½¦CZ¹í ¡‡ë þ(0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾è¼è‚ýð‹+aue_lseekþ†hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýIJ½‘E:‹l1X‚®ù€)0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ª’ªŠýð‹+aue_lseekÔŒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒã*ù…+DŠ‰x±íºÖ:‚)0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_lseekÔŒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý o,—N@ŠWæ öu¡†) ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+20ÜS7[AIF¬•pd± (ý½O²™ÚD·šÅÏ8k´B„)@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýgŒ¬ùù}G€¨#ÚÇœVŠ) ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+20ÜS7[AIF¬•pd± (ýÙaËþ,K,»Æg§˜1ˆ)@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>š¿j1@³”ßïH4¹¦’Ž) ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+20ÜS7[AIF¬•pd± (ýÚDâ]MGô’Vëj€_Œ)@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]õXŠBÀ_F™³.úî):‚œ Ê +ÙKFzé®›'üvºŒÉÿÿŠýð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýN¥åÎ6DáŽZ.‹Ú8FÕ’)@Äœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŒÉÿÿŠýð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸¥‡ þL†œ&îN„êo”)@Äœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýTCÞ†çBZ½>? ² –)@Äœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_pread˜2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý K‘ünJ™šmÿ " /9˜)b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŒÉÿÿŠýð‹+aue_write‚3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7 +?ýè™A]œJ®šÓ“Gš)bÄœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŒÉÿÿŠýð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýã|ò“„¨EÞ»–1¥Dœ)@Äœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŒÉÿÿŠýð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýä³­²hE¢¬e,‹ýƒžiž)@Äœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸oª—oiCd°jTû˜9à )@Äœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥àj “Kà·Ø‹W»„Ì¢)b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŒÉÿÿŠýð‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJ?ScÎ×AyŠœ­vJ˜›¤)bÄœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŒÉÿÿŠýð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýѾÆOMƦ³?ÍÐǦ)@Äœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŒÉÿÿŠýð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦ÍðwiC÷ŠL9Se•Âê¨)JÄœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºŒÉÿÿŠýð‹+aue_sendtoÞ +ret_msgid441hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý äö‚|C@³à†WZ‚ªª)Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŒÉÿÿŠýð‹+aue_recvfromÞ ret_msgid441hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý'âöãÑ2AVƒÎ‹GÛœ¬)bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKŒÉÿÿŠýð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýk“ÎêiD˞ؙ#Ä}$®)D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŒÉÿÿŠýð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýUlÃK&õõ’Îv¾5°)D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŒÉÿÿŠýð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉ×”ðÆEVÏq—[Ӌݲ)D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°ª¾‰‹ýð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþ!T`ÃHr±ûúÚÿÒ´)D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°ª¾‰‹ýð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±œ+ +=IR±0sò^û¶)@ê› µ dôFzé®{'üvºªa݈ˌûWŒË=ûŠ³ÂÍÞêûýð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1execsyslogd20ÜS7[AIF¬•pd± (ýj‚›À·Ð@Pº¦eÀ2—š¸)bê› µ dôFzé®{'üvºÁU\|ÓŽšXŽÓ㈚iÂÍÞêûýð‹+aue_writev`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1execsyslogd20ÜS7[AIF¬•pd± (ýk ÒÏ©Gʲ/eWÈN—º)bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÂÍÞêûýð‹+aue_writev`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýF”Õ™fÉAk’éwyŸ?Ú¼)0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U® °›‚þð‹+aue_lseek°²hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎÕº@8Dñ¾ VžÙLS À) ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U® °›‚þð‹+20ÜS7[AIF¬•pd± (ýgÉ„!qJß®%Æ??á1¾)@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U® °›‚þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyÍ’µGR‡½/Y~]—Â)0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾ÓÑÝ‚þð‹+aue_lseek‚ÂhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýkEˆ[/A‡‚)óŒìì}Ä)@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eøûö˜…þð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý?©f¦£XC‡¥j=´ —tÆ)JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøûö˜…þð‹+aue_sendtoÚ +ret_msgid463hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýo£ŸFª\G‰žþCwVÎ#È)JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøûö˜…þð‹+aue_sendto˜ +ret_msgid464hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýN\ãÔ¥IJ‘g|îëG„Ê)JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøûö˜…þð‹+aue_sendto¬ +ret_msgid465hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýŠˆ …qDÑˆß +d.Ì)JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøûö˜…þð‹+aue_sendto˜ +ret_msgid466hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýõGÌ+DÊ„‡Tâ¤.=Î)Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºøûö˜…þð‹+aue_recvfromÚ ret_msgid463hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýnV^ ½Có«ÁWq{¦6Ð)Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºøûö˜…þð‹+aue_recvfrom˜ ret_msgid464hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‚”ÓNO ¾tŠu{¥òƒÒ)Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºøûö˜…þð‹+aue_recvfrom¬ ret_msgid465hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýpP21sŽD®ND5¸½íÔ)Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºøûö˜…þð‹+aue_recvfrom˜ ret_msgid466hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýT‘ÏOKIZ“Ý]%®Ý ùÖ)@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´ ž†þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý7ÅÑó'Fy¨õ%zêµ;Ø)@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´ ž†þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýõ§þ“9‘G’¸¹¾óÚ¼¨Ú)@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´ ž†þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý‰r§¿¡D@¤g’å’¬ØßÜ)b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´ ž†þð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý¢¿%hBE!ž»EŒmÆ5 Þ)0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ²ú Šþð‹+aue_lseek–ÙhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚVd¡¯‚Dƒ…¡‚%ÆŽw’à)@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø†•þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýªö$þH¤9¦Ur\[Jâ)@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø†•þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý. IûJŽEÜ°Ý“ä)@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø†•þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý¦\¸G»â_zÛì<®æ)b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø†•þð‹+aue_write*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýòkªÞùMh¨›S£®#« è)0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_lseek–ÙhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'§³ZÃI#€p6Àä˜#ì) ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+20ÜS7[AIF¬•pd± (ýFñ‡ëK¼¤ð`”±-ê)@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-ËGi•ãMÈ•åVWÌð) ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+20ÜS7[AIF¬•pd± (ý•‰7mJo«ÛÍKIõ›î)@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞéÀ*– G𤕌¶1¯ô) ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+20ÜS7[AIF¬•pd± (ý/F¢3ŒGx¤_Ü.ˈò)@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU`ÔùTIvƒr»Ô3j*ö):‚œ Ê +ÙKFzé®›'üvºèŠžŽ‘þð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒ~ðÛN £$ô?]yø)@Èœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V 芞Ž‘þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„Ó<†^òDÚ„\¢W5ìú)@Èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñoPò@ö€^o»ötü)@Èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadÊhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&=†¯ïFã°ógf\~¾þ)bÈœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á芞Ž‘þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+SÝHVrA‚¼U ž¶øµ€*b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèŠžŽ‘þð‹+aue_write´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý 6Ožä½b:0Ú*b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_writeÚ,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËÏ}‚VÄFŠ‰Óxy”ý˜Ü*@Êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ê–†‚ þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýaÞÞ‹D˜‹µ UÍÞ*@Êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑ‚ºöØCHw˜ª´OAŸà*@Êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadÖ +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>i–Ÿþ@¤”\Ì L"S”â*bÊœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÊ–†‚ þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýWÌ´OT‘CÈɦ")dä*b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_writeÀ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*`Q3 A4³Ä8ä± +VÙæ*@Êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ê–†‚ þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýé›~õcÚC₆^{`lè*JÊœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÊ–†‚ þð‹+aue_sendtoÞ +ret_msgid472hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý' ¦c«ÐFL³ÛǨW±ê*Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ–†‚ þð‹+aue_recvfromÞ ret_msgid472hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý|qM’ qHت ´õðè ì*bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÊ–†‚ þð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý#'½–”ëEˆ»/_+ágî*D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄî*²¬£B’¾.K$wYð*D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýL àm%žK,¯„´#¦ˆò*D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{]b¶”¼OM¬¨ZjkLô*D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýž³çYñåEš–9OpÛOö*0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌô¹ê þð‹+aue_lseek‚È hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’¬ ŠHs’ôóô¤sHbø*@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯â¬ÇÊ¡þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýV÷§5ØLH‰¿ .ët@ú*@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯â¬ÇÊ¡þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý7Ê%rM£¸Ýù—ƒÑZþü*@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯â¬ÇÊ¡þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÆ`,Ê\˜EÉ‘›n÷:²S#þ*b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯â¬ÇÊ¡þð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýfÌ<ÅC¾";'W€+0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖË겨þð‹+aue_lseekØÒ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿Wæn‡mE¨¤«§•iõ»x‚+0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_lseekØÒ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýhŠ”Þ–_BÄí +«ã-£‘†+ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+20ÜS7[AIF¬•pd± (ýÛ‰¿PâeMj‰õNü“‰`f„+@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýX:Ö~A¿¬l|äM>ºŠ+ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+20ÜS7[AIF¬•pd± (ýhÈW+»AMF…“¸6¼zGEˆ+@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýô¤!p0óO‚¨º:ˆç¾úŽ+ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+20ÜS7[AIF¬•pd± (ýÓm gŸL´—Šo…–[QAŒ+@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýz<)À.DÛž.UktE:ë+:‚œ Ê +ÙKFzé®›'üvº²ƒûô®þð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’ é„{°Oó™V‡yƒnß’+@Ìœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ²ƒûô®þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸—¶²Ì…D¢mY½©5îÙ”+@Ìœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖ¤®!¢¼J¼štB™ÞòÖ–+@Ìœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadŽ8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐœ·¶¢C“ÃÃà´Ïh˜+bÌœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á²ƒûô®þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYÊÃQÙCOá«g0/q 'Çš+b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_writeø8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý h 0Ž-H„~ËuÉ[‚œ+@Ìœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ²ƒûô®þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼a­!`µ@i”v}¢³qc8ž+@Ìœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýée|íÁPO¦ßy³ÀæV +@Ìœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadÎ +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—.5-ý,IჱI%zO¢+b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_write¸ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +v +i=¡IU²|ŽLâ&½¤+bÌœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á²ƒûô®þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýäd‹ý‚@ž±Qn.ãòû¦+@Ìœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ²ƒûô®þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+m›¬úGÕ¿,FT?¨+JÌœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº²ƒûô®þð‹+aue_sendtoÞ +ret_msgid473hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýv-g6 L¼€ˆmy½ª+Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº²ƒûô®þð‹+aue_recvfromÞ ret_msgid473hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýì ¥ó(C[·"Ýý¶u“©¬+bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK²ƒûô®þð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýYÑ´à¶úH{¥aï³4“.Õ®+D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™|“‹M呪¿×§EÇ°+D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:HøIE{N°˜ŠYìóû̲+D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôuVÒ4>L©¹D›ñm`p´+D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨@>ÿÏbGG˜v35™. .¶+0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈ«‘ñ¯þð‹+aue_lseek¨ø hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´²QñYH£.VþhÀ-8¸+@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e€ª°ò±þð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýØ…ý ¼AÙ„ÑÿÍ|úϺ+JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ª°ò±þð‹+aue_sendtoÚ +ret_msgid474hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¡fa|IEH‘î02”nã¼+JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ª°ò±þð‹+aue_sendto˜ +ret_msgid475hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÞ*œ/%ªM—•Úý•‘´{¾+JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ª°ò±þð‹+aue_sendto¬ +ret_msgid476hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýTòTxó'K‘€8Æ®¦ìDˆÀ+JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ª°ò±þð‹+aue_sendto˜ +ret_msgid477hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÇKc¸!@à¤B÷§idøÂ+Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ª°ò±þð‹+aue_recvfromÚ ret_msgid474hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ým`ÉÐøÜH-Š¥&ºFÕËxÄ+Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ª°ò±þð‹+aue_recvfrom˜ ret_msgid475hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýHî¶& A2’¡úø_˜ Æ+Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ª°ò±þð‹+aue_recvfrom¬ ret_msgid476hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýåt :ïfG›•Þni‚ìzÈ+Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ª°ò±þð‹+aue_recvfrom˜ ret_msgid477hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýü¼vŸƒüMۥˎ®ƒ³Ê+0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U€ëÁ´·þð‹+aue_lseekÞŠ!hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙ0‹ +yJO›+Ôa}[°bÌ+@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯øêüÀ»þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÖ¶ Ð^NÈ›æ,J,ºú!Î+b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯øêüÀ»þð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýù‹°âFzé®·'üvºò×µ¨Fz鮩'üvº°äÿ§®]vRS<„äB±øêüÀ»þð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýáEø,Pó@¸“kn×á/GGÐ+$–œ ×µ¨Fz鮩'üvºù‹°âFzé®·'üvºøêüÀ»þð‹+aue_fork +arg_pid1337hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1337ppid1281execbash20ÜS7[AIF¬•pd± (ý +¥µîgµÑUµg¨eµÑc'20 +ÜS7[AIF¬•pd± (ýëå³cKXŒU šgMÒ+ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc't/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1øêüÀ»þð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine@/usr/bin/env bash ../Bash/all.shppid1282execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"†àüT8ƒþ\EY³CWëB™÷xÔ+<ªœ ù‹°âFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conføêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execenv20ÜS7[AIF¬•pd± (ýƒ´øå$IÂŒ?cvgÖ+@ªœ ù‹°âFzé®·'üvº‰oý©äÇU¤©A)Eǹ øêüÀ»þð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý‚V'Í. FÚ©1MŸˆ{#.Ø+ªœ ù‹°âFzé®·'üvº‰oý©äÇU¤©A)Eǹ øêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýÀ§{Í\Móµžñ}›<ÙµÚ+<ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsøêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execenv20ÜS7[AIF¬•pd± (ýn(ê/ÝÆL|®ÑààL£rÜ+@ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý•ÕïD€¢TÈØ3/DÞ+@ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýºÒE-·Dƽ6¦A%eŽæà+ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýÐL—Ǫ’D[Žñ=*Z +â+<ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7øêüÀ»þð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execenv20ÜS7[AIF¬•pd± (ý }Q×r E±„åN#EŽä+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý`ÿg ñcG3º@è¯W² æ+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý”ןùÓyB·ö‚5 ˆ9‚è+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý-|%¯ÜI Áç_ÝÓê+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý,îëèL±¹P“ +€7uì+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý"W„÷KD˹aÑÔ(c¯î+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý×ã‡&¨_Oš°iøªçÈð+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýåé®é |Oµãî®ïò+2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý³Må§KZIV­°Wé,Êq ô+ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýàÚ*”ÈDD/ƒZ'ßל\üö+:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýË_¬ÕlNϨù9‡J4ÄÜø+:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýG‹©ýE…E«˜´ŸÛ"=O«ú+ªœ ù‹°âFzé®·'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1øêüÀ»þð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine&bash ../Bash/all.shppid1282execenv20ÜS7[AIF¬•pd± (ýD~ÅÈcÔC –¶%xoßü+<ªœ ù‹°âFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conføêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýS2 +ÛD”©þ0Ý ø¥þ+@ªœ ù‹°âFzé®·'üvº‰oý©äÇU¤©A)Eǹ øêüÀ»þð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý‰`Æ¢›E¯U^ªÒø‘€,ªœ ù‹°âFzé®·'üvº‰oý©äÇU¤©A)Eǹ øêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý´ê%O%¤c ýñg™[‚,<ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsøêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýƉ‰?f˜I—¹U÷Vã„,@ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýx"{Eú‚†É̿邬†,@ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý×çÞŒJ?³Þ"¿æ{ŠBˆ,ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ývR`XßæCf–éC¬Ö£¨3Š,<ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8øêüÀ»þð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýs=òBœ•@a®f5ý–²+Œ,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýù×Cý2ïI¦¸p­Æ;5Ž,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý=zþ*ÅM°<¤QM2,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý{„‰ÆVL ¦c˜6‚Æ€‰’,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýå&¥©YJ´»ÝådqtÆ!”,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý4¸íåBŽ“¤— +°¹–,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýȦüµqI¯üJS"¹“T˜,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý%òξBD¢ùó™­Y[¹š,2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýä×â!'D‰µîM%+ 6œ,ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýw&WuòèIà€yý×7ŠØ½ž,<ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8øêüÀ»þð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý,¨Ë|kIÜšÛí ´¡˜ ,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¿5A¯™jJ…’8¬™Ý40;¢,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýD2j¶Ü`@šRëy8¸Hé¤,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýMH€ظC9Š]tx°IX¤¦,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýù;nJ­ G0“[›ÂÕI¨,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¶,h~½K[Ž–.öÀŒr¹ª,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýfø¹ȲOsà {»žZþ¬,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýn²¸ €@2€O°‡ÉöÕa®,2ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýàs§ôH•¹Ã“)• û°,ªœ ù‹°âFzé®·'üvºm/"P;=\»P½¤¬=P_øêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý˜6›"ÏÑH·‹ZËoó8A²,<ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1øêüÀ»þð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý‚Öêõ¡L-Ÿì$§‹’´,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý“ÉBŒÎ²MÇ¡Òã9”iζ,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýy­|ÆÁNz€WA2KF¸,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý:“d|5ëG¹˜@ð¡¼òô‡º,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÀjW‚ D— ÅS”Ò—¼,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýî¼…ìÑäC(®,ŒÓ•8¾,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý'ð’ï£ F—¸¦Ká†yÀ,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý“àÙxÏ F­Œcà‡RŸ²Â,2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý£DW!Q?I¼Œ¢…š’ÂØÄ,ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýûpåÝ(H°¡9ãF­/£oÆ,<ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7øêüÀ»þð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý‰<OI5»–’p÷ÒŪÈ,2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýL“ ÆŸBÄžŠÔE®/áÊ,2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýԾΟJ§˜ûþîöMÌ,2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÂVw£aZI¸‘V€E¨y¶Î,2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýæR”ÊBŽ©¦ ›Ò¨Ð,2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýv\&„3‹N'¶"7X#šäÒ,2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý_sËùI×KK¨D4¿ÕšÖ,2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý:`ÏÊ?G–¼÷ÌX +þRØ,ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"˜ˆú°‹5z]Gã‘~ÓÛääÏÚ,:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýu[NÝ C…Š ߎ/ù±Ü,:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý#Ž¹èÀEI‹©^Ä øìâÞ,:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýÁe«-£áD'·|’š óùà,:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýb^þw–¥O¶ˆ¾†ÀM"Ùyâ,:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý´7Ç»½ÂIÜ™o©x v»éä,<ªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯/dev/ttyøêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý¥yN6»­A1‡N¹ÀÀ‡Æåæ,ªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯øêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý˜ã~xAÚ§öÔ ½B€¡è,<ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc't/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.shøêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýMñ‘kÃKOE¨Ò‘ÒÎê,0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ývÈé.ÀIM‘H»^4@ì,@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýY»«ô¦„O=´ø8,IŽ-î,0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýîv÷ñýœOþ›jý·Î£.ð,ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýZÚ?½K|ONƒÐoÔcìÕIò,"ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýµ¿¢e MT§xYþž0Z|ô,"ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý=û¸@ßHÜš}.Q?ñ¹ö,0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýÍlvècJ§ +FÜ6¡Îðø,@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýdñ~4f@0žè€žZ¿Áú,0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_lseekˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýù&4Fzé®·'üvºôù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±øêüÀ»þð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý¦gÌÒŸÉG…Á³”-.ü,$ªœ ù‹°âFzé®·'üvºù&4Fzé®·'üvºøêüÀ»þð‹+aue_fork +arg_pid1338hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1338ppid1282execbash20ÜS7[AIF¬•pd± (ý½²Ã­íG¶ÅJ¾¼Ü™·[±õŠ-@ªœ ù‹°âFzé®·'üvº–Ø%™wyïR¹wT’ï9¼ó“ŽÃþð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýn~® ´E¼«²TÉÁºcŒ-ªœ ù‹°âFzé®·'üvº–Ø%™wyïR¹wT’ï9¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý$„l±ßL#žôì`ZQÅŽ-bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¼ó“ŽÃþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý°hñ4ÎD/¢ÕU`Bt’-$ªœ ù‹°âFzé®·'üvºú'~0Fzé®·'üvº¼ó“ŽÃþð‹+aue_fork +arg_pid1339hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1339ppid1282execbash20ÜS7[AIF¬•pd± (ý|Å#cBðAqè§Íü"”-²œ ú'~0Fzé®·'üvº¥µîgµÑUµg¨eµÑc'¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +VìÁ®x{Y¸a5 {€020 +ÜS7[AIF¬•pd± (ýÒé”")CÔ€!WÛâ†.–-²œ ú'~0Fzé®·'üvºVìÁ®x{Y¸a5 {€0Š/usr/home/user/ripe-prov-tests-master/Linux/./change_file_permissions'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¼ó“ŽÃþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine4./change_file_permissions ppid1337execbash20ÜS7[AIF¬•pd± (ý +ˆ±AvAH®žÚ°wÃKV˜-<²œ ú'~0Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¼ó“ŽÃþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýÊe”x?8Dt€àPa‹Ùr<š-@²œ ú'~0Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ¼ó“ŽÃþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý¢3]'MP Â«ZËÅœ-²œ ú'~0Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý]+‚ÿO½¾L|¯±Gž-<²œ ú'~0Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¼ó“ŽÃþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýí{¨¹_|E­0pÛI» -@²œ ú'~0Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â¼ó“ŽÃþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý–e`º/G]“¥-Ë瘢-@²œ ú'~0Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â¼ó“ŽÃþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý÷ÁôߟqA©€j°©:|'¤-²œ ú'~0Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý“ÁÀº±º@­ójpÿ_Á¦-<²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¼ó“ŽÃþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý`^lþtØO +RXñ¡•Š9¨-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý5³¯êTH „¨Aºg&Úª-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý—‚¯3íCjŠ ‰C\âê¬-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý ' p"ÓG䑾ªl”\ù®-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý&‹¢üLO² +¯©¬l&«°-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý›¢r/DÑéBqJÇ’²-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýo Üd³KOŠxWÖ¦Ÿ"×´-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýÞáù)´Jÿ¥ÑþKpŠv{¶-2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý+ªâ€F¸¸0ÁB°ç¸-²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý,Nºˆj¢@S•'çÂy©º-:²œ ú'~0Fzé®·'üvº¼ó“ŽÃþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý2ðMTôìGX·Þô*¦0ª&¼-:²œ ú'~0Fzé®·'üvº¼ó“ŽÃþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý +j/°®¨¢¤_¢¨gIÿ¤ï20 +ÜS7[AIF¬•pd± (ýi:+µ“N붃c‘âg ¾-4²œ ú'~0Fzé®·'üvºj/°®¨¢¤_¢¨gIÿ¤ïj/usr/home/user/ripe-prov-tests-master/Linux/README.md¼ó“ŽÃþð‹+aue_chmodmode¶hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý ƃ„ZAWÙÃòOzì.À-4²œ ú'~0Fzé®·'üvºj/°®¨¢¤_¢¨gIÿ¤ïj/usr/home/user/ripe-prov-tests-master/Linux/README.md¼ó“ŽÃþð‹+aue_chmodmode·hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý,Ty½ÖšG&µŒÿcáCÂ-²œ ú'~0Fzé®·'üvºú'~0Fzé®·'üvº¼ó“ŽÃþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý\ð’1rEh¡)ˆ‘x£ˆnÄ-@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¼ó“ŽÃþð‹+aue_read°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýŒðXЉ ;‹–.2²œ úÂé}Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý›B‰¶U¾ë«*/˜.2²œ úÂé}Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý!Çš}tGí¤G2TÑ7òš.2²œ úÂé}Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_file20ÜS7[AIF¬•pd± (ýµ&&‘ |O²®Ê „  ùœ.²œ úÂé}Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý¯9T…ìAq©aŒ¡Ôç„ž.:²œ úÂé}Fzé®·'üvº”ç¥ÚÊþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý˜6Æòø¾LP¸:áÄ׿ .:²œ úÂé}Fzé®·'üvº”ç¥ÚÊþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopy_file20ÜS7[AIF¬•pd± (ýùßìƒh¾BF…öù˜wh¢.<²œ úÂé}Fzé®·'üvºj/°®¨¢¤_¢¨gIÿ¤ïj/usr/home/user/ripe-prov-tests-master/Linux/README.md”ç¥ÚÊþð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý +tTXìƒî°R®ƒ.û"°ËA20 +ÜS7[AIF¬•pd± (ýÄšÞeÛA+†â»úEN¶¤.<²œ úÂé}Fzé®·'üvºtTXìƒî°R®ƒ.û"°ËAf/usr/home/user/ripe-prov-tests-master/Linux/out.tmp”ç¥ÚÊþð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý 9jú‚C•dÏæIóû¦.@²œ úÂé}Fzé®·'üvºj/°®¨¢¤_¢¨gIÿ¤ï”ç¥ÚÊþð‹+aue_read„'hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý3÷âëM¤˜hÐ&õXq/¨.@²œ úÂé}Fzé®·'üvºj/°®¨¢¤_¢¨gIÿ¤ï”ç¥ÚÊþð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_file20ÜS7[AIF¬•pd± (ýŠ®ÿúh@ê‰nì¾8ÛñCª.²œ úÂé}Fzé®·'üvºí( ö~R¶ ~{‚~¯”ç¥ÚÊþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd0return_value0ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý «„‘âIb„”dVx¬.²œ úÂé}Fzé®·'üvºí( ö~R¶ ~{‚~¯”ç¥ÚÊþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1337execcopy_file20ÜS7[AIF¬•pd± (ýP5«“OO…Ïðy!Ü}®.²œ úÂé}Fzé®·'üvºí( ö~R¶ ~{‚~¯”ç¥ÚÊþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1337execcopy_file20ÜS7[AIF¬•pd± (ýáeÈ«´&Dˆ¥±@^éí6°.²œ úÂé}Fzé®·'üvºj/°®¨¢¤_¢¨gIÿ¤ï”ç¥ÚÊþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý¾Õ>½KDž«ÛHÞ)¸(´².b²œ úÂé}Fzé®·'üvºtTXìƒî°R®ƒ.û"°ËA”ç¥ÚÊþð‹+aue_write„'hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý¨×ZQÞEÙ¯’¸ ÇÿÁ´.²œ úÂé}Fzé®·'üvºtTXìƒî°R®ƒ.û"°ËA”ç¥ÚÊþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1337execcopy_file20ÜS7[AIF¬•pd± (ýwëV2¤IB™”Ä x’Rض.²œ úÂé}Fzé®·'üvºúÂé}Fzé®·'üvº”ç¥ÚÊþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopy_file20ÜS7[AIF¬•pd± (ýŸÙw'wtF7¤M M¥Ã0¸.@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'”ç¥ÚÊþð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý~…øŒ¶H@ÎS@0¶f$ïº.0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'”ç¥ÚÊþð‹+aue_lseekÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýúÃhßFzé®·'üvºüù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±”ç¥ÚÊþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý^‹ëxf@û¢¿ãN¬ôI«¼.$ªœ ù‹°âFzé®·'üvºúÃhßFzé®·'üvº”ç¥ÚÊþð‹+aue_fork +arg_pid1342hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1342ppid1282execbash20ÜS7[AIF¬•pd± (ýW!SÍÇBK”›}ã ú{di¾.²œ úÃhßFzé®·'üvº¥µîgµÑUµg¨eµÑc'”ç¥ÚÊþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýJ%)\}”@-”‰ÚÖªàÀÀ.²œ úÃhßFzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1”ç¥ÚÊþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ý æàN¦ˆ6VÁÒçÉÂ.<²œ úÃhßFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf”ç¥ÚÊþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý`–ó5 Nt›_ µÕøöÄ.@²œ úÃhßFzé®·'üvº‰oý©äÇU¤©A)Eǹ ”ç¥ÚÊþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý3Ë…Ü«RK÷˜†ÉèW.Æ.²œ úÃhßFzé®·'üvº‰oý©äÇU¤©A)Eǹ ”ç¥ÚÊþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¨¸ÒÁYâGS¿“ñâ­j™È.<²œ úÃhßFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints”ç¥ÚÊþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýœ¿z¡ŒLü‚-p+Ï-fÊ.@²œ úÃhßFzé®·'üvºXꎩð®…\®ð@JÌ…¼â”ç¥ÚÊþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýšÅ]E_Ið²ÛéU¥‰!TÌ.@²œ úÃhßFzé®·'üvºXꎩð®…\®ð@JÌ…¼â”ç¥ÚÊþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýáÖ3ÊB›-þ­ÑüÊÎ.²œ úÃhßFzé®·'üvºXꎩð®…\®ð@JÌ…¼â”ç¥ÚÊþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýJX³YPD¶†õ¢?±|:Ð.<²œ úÃhßFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7”ç¥ÚÊþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÞH§¥l„Añ¥ªs‘Îs±Ò.2²œ úÃhßFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýVŠIùôBü¾ï›¡˜Î¤Ô.2²œ úÃhßFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýl"uuwD¨YŽ¼«µâÿÖ.2²œ úÃhßFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý};0LÝþ2ü3‘ºØ.2²œ úÃhßFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýœgí~E@d–?Í`ÚHÚ.2²œ úÃhßFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý*Ÿ?ÿ­L3²&ñ¶"¡˜Ü.2²œ úÃhßFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýjDâÔòLI®ÝUv´“Þ.2²œ úÃhßFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý©Wž8ÑOñ¢@}~x‘GMà.2²œ úÃhßFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¡ÌÈA°NS‹Ú!Bjˆ÷â.²œ úÃhßFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý°‚9³B¸üPptƧä.:²œ úÃhßFzé®·'üvº”ç¥ÚÊþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýõ +—þË—L÷ª»nº—’ùgæ.:²œ úÃhßFzé®·'üvº”ç¥ÚÊþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýZ—«&7Nr™»#zèe?tè.0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_lseekØã"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽÝ ZFJ<»l;6\uÃhì. ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+20ÜS7[AIF¬•pd± (ý Ë£¼G2‘ýøPçÃŽê.@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý2V£ZûìDN‹Œç„{¹ªð. ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+20ÜS7[AIF¬•pd± (ýŸÐ¢ñÉBÜŽ»åD·¬qûî.@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCÚÆAå>@ƒÂè¢=„HÒô. ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+20ÜS7[AIF¬•pd± (ý±Põ~J¨~ˆ Wò.@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"š¬úZåÿT€ö@.€²öQcÉ*ø. ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+20ÜS7[AIF¬•pd± (ý]©â®ë»B  6óÊü¾Dö.@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwŒF#Bº¢hŸÆ e1ú.:‚œ Ê +ÙKFzé®›'üvºìôÎÛÌþð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/5|×CD9º8hÌÍ§Ý ü.@Ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½‚ ññHÕ°N@Îâ9¼äþ.@Ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´Æ`1xsD7ƒ’…ÔÀþá*€/@Ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadþJhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýë4ÉÕ›Dâ¬ð˜w[ºt‚/bÐœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áìôÎÛÌþð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýR©méúB[Œd½³g£Þ„/b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìôÎÛÌþð‹+aue_writeèKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×°½÷sÌHÀA,ìt2pg†/@Ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJ’ŠŽ¦A„€KP«x8#3ˆ/@Ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýØ~,2ˆöKý£4• 3Š/@Ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadü@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèd8H÷›K °Í{¼ë)kŒ/b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìôÎÛÌþð‹+aue_writeæAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“¨`Óu¡Jܳ’è£K¶8±Ž/bÐœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áìôÎÛÌþð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'Õ!;EÁ±Ã] W›/@Ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`u¿qËžLz­ÙÝþE’/@Ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšk×ÙåM»‹¸¥nÌQt”/@Ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadèLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷3žráE็ýd}–Ñ–/b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìôÎÛÌþð‹+aue_writeÒMhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ï‘UÍåA¬˜=à2²ÏÕJ˜/bÐœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áìôÎÛÌþð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý03ù—ÿBî±þ]]ßš/@Ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýžåê8†Fƒ¬mÕû<œ/0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uê‹¢“Îþð‹+aue_lseekêò#hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýžRIF÷ÃAÀ´Q6¬:pGIž/²œ úÃhßFzé®·'üvºúÃhßFzé®·'üvºÔÐÒÒþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýh˜VÀdÖHáœ9:ëµ\ /bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ÔÐÒÒþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýr1 ÈòL1µÝTÓ7`‘¢/bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ÔÐÒÒþð‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýû]"-Fzé®·'üvºþù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±ÔÐÒÒþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý~Yi©Gj»ì 沦¤/$ªœ ù‹°âFzé®·'üvºû]"-Fzé®·'üvºÔÐÒÒþð‹+aue_fork +arg_pid1343hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1343ppid1282execbash20ÜS7[AIF¬•pd± (ý¸²7¿ÓÎH¼†&GãP)dv¦/²œ û]"-Fzé®·'üvº¥µîgµÑUµg¨eµÑc'ÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +~JE9ê[¹E%`ûêq…20 +ÜS7[AIF¬•pd± (ýF'H¹`üDÖ®øÏgú‰¨/²œ û]"-Fzé®·'üvº~JE9ê[¹E%`ûêq…z/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ÔÐÒÒþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine$./copy_static_buf ppid1337execbash20ÜS7[AIF¬•pd± (ý§ùÙÍåGÜœ‰MYZbª/<²œ û]"-Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÔÐÒÒþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýÆšâ¦"øEø‘ø{<*¹!¾¬/@²œ û]"-Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ÔÐÒÒþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ý˜a! +–kO¾¶{,!Îyx®/²œ û]"-Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ý¥9)²‚@˜&¸Hš£°/<²œ û]"-Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÔÐÒÒþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ý˨ºêÂOæœ ö{%À»²/@²œ û]"-Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýáMñÑN«fïEú¹ŠÖ´/@²œ û]"-Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýí§3b¼NQ¾y[Q+e(¶/²œ û]"-Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýwå +‰ËWNl®M"MÏÒK¸/<²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ÔÐÒÒþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ý4Í:¥*C, äOê'ÿº/2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýJ j$_BÑ™`8æWú§¼/2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ý µPMZ˜ÄÉ:&²`Â/2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýKk~VîK³ƒµ[6+E Ä/2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ý6ê i˜C°™wªK-â¶<Æ/2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýA-£m$Ab±µpvgãd½È/2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýç{[ñQõHâ¸èd7¡›Ðöè/²œ û]x,Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý“³‰žæXLŸªpb&âþ¬ê/<²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ÔÐÒÒþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýsqEž‹H†§t¼x‰Òì/2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý@I€,H´sùQÐðì¢î/2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýî¥S%$G¤¬Er<>²:ð/2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý®ÞPH,‰Düdž෦`ò/2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý#ê”O(úIW…õþS¤Xéô/2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý̪žÁsOøŽð*2(]öö/2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýø,t>!C䎤Ñê…Çgø/0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®Ü·ÝÕþð‹+aue_lseekô¾$hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý2•@¶¸DˆZì^˜âçú/²œ û]x,Fzé®·'üvºû]x,Fzé®·'üvº¢ìõàÙþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý  äèƒFƶÿVòŠü/bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¢ìõàÙþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýïëvìêCÁ‡çY£¡±‘þ/bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¢ìõàÙþð‹+aue_writeLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýû÷6žFzé®·'üvº‚ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±¢ìõàÙþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý –V:9@€“ËÉIfè'k€0$ªœ ù‹°âFzé®·'üvºû÷6žFzé®·'üvº¢ìõàÙþð‹+aue_fork +arg_pid1345hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1345ppid1282execbash20ÜS7[AIF¬•pd± (ýpÎðRN³tsßÛ)§‚0²œ û÷6žFzé®·'üvº¥µîgµÑUµg¨eµÑc'¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +)Az€^ºAÎÏ^€L¯20 +ÜS7[AIF¬•pd± (ý”}§‘Ø”EÓ‡&-Þ +úÚ²„0²œ û÷6žFzé®·'üvº)Az€^ºAÎÏ^€L¯’/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_stack_frame'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¢ìõàÙþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine<./copy_static_buf_stack_frame ppid1337execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¦þ´*ºpÄF´Sœ X”†0<²œ û÷6žFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¢ìõàÙþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý0ÍX׶'E²·¹hã}fˆ0@²œ û÷6žFzé®·'üvº‰oý©äÇU¤©A)Eǹ ¢ìõàÙþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý‰ãO"žJp›«vY”˜vŠ0²œ û÷6žFzé®·'üvº‰oý©äÇU¤©A)Eǹ ¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý8s{ÜFhŒÿšôp&aÆŒ0<²œ û÷6žFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¢ìõàÙþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý)]låüŸH¶½ª¼°€8Ž0@²œ û÷6žFzé®·'üvºXꎩð®…\®ð@JÌ…¼â¢ìõàÙþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýyÝEŠjAƒ… w×Svú0@²œ û÷6žFzé®·'üvºXꎩð®…\®ð@JÌ…¼â¢ìõàÙþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýbâZN`ÇN9°¾ g’0²œ û÷6žFzé®·'üvºXꎩð®…\®ð@JÌ…¼â¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý‹£ŠMú®VFÃlêO”0<²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¢ìõàÙþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýùý¾ü¥X@†ƒ"×W+î–02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý[(®¶QC½ø¿–fµÎ>˜02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý›AºùEHqŠ¦u´Èªd`š02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýÖà¡sI ¬èa'\Dœcœ02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýt}”½åýE)²yF`‘ôÊ¥ž02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýž± ËHm¼5é‹“Jà02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý¬{#âžµB«¾ê\œƒ€¹¢02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý^Hd@4!K?…KpŠØs#¤02²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýB€¯ƒ¥Kã›zCOxÇŦ0²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý¿bü` @⮳&øæÙM§¨0:²œ û÷6žFzé®·'üvº¢ìõàÙþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý¸ñjÐ’O†öã2¡ô¬öª0:²œ û÷6žFzé®·'üvº¢ìõàÙþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýA$l䊈GÁ—{eÝÜöâ¬0²œ û÷6žFzé®·'üvºû÷6žFzé®·'üvº¢ìõàÙþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýc5~ìi@B²Œ¿½³yÆ„®0@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¢ìõàÙþð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýcw=´AJ‰¡½Q×þßB°00ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¢ìõàÙþð‹+aue_lseekÒ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýû÷µtFzé®·'üvº„ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±¢ìõàÙþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýø•#nMH ÁŒ²E&²0$ªœ ù‹°âFzé®·'üvºû÷µtFzé®·'üvº¢ìõàÙþð‹+aue_fork +arg_pid1346hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1346ppid1282execbash20ÜS7[AIF¬•pd± (ýU]gr¨C}€¼„7R}1´0²œ û÷µtFzé®·'üvº¥µîgµÑUµg¨eµÑc'¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý\j-±c-M)’Qà^—$«Ã¶0²œ û÷µtFzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¢ìõàÙþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ý˜1ÇÉ•F¼…¸“žHhüN¸0<²œ û÷µtFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¢ìõàÙþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý*vyÀì4H‚FÛñl¬sº0@²œ û÷µtFzé®·'üvº‰oý©äÇU¤©A)Eǹ ¢ìõàÙþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýAŠê}0±Fo½ÉUÔAy—¢¼0²œ û÷µtFzé®·'üvº‰oý©äÇU¤©A)Eǹ ¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý…ÚŸFδçÕkŸß–¾0<²œ û÷µtFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¢ìõàÙþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýžïžö@=\ä*êk #À0@²œ û÷µtFzé®·'üvºXꎩð®…\®ð@JÌ…¼â¢ìõàÙþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýOp‘¸IEɵÜ}Ú5KÂ0@²œ û÷µtFzé®·'üvºXꎩð®…\®ð@JÌ…¼â¢ìõàÙþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýªK^!óõEªº‘õö_Í,Ä0²œ û÷µtFzé®·'üvºXꎩð®…\®ð@JÌ…¼â¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý5¨-)”¾G¥ßÒ™Q%wÆ0<²œ û÷µtFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¢ìõàÙþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýr~ŽT·=Eñ‘p4ö¤–È02²œ û÷µtFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÃZAF{LJº)°Ù¹QÊ02²œ û÷µtFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýL/c–(BX˜´{{s®Ì02²œ û÷µtFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý'Ü}Lˈ:]uYÎ6|Î02²œ û÷µtFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýß_ëÓlGM§ÔÀ÷‡Ó"IÐ02²œ û÷µtFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý +¥AÄ_E›Œ! )¡mÕÒ02²œ û÷µtFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýŒšÏ\ßFïï‘9(/5Ô00‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàüŒ¡Ýþð‹+aue_lseeköŠ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄqÿ´¯H?·Ç2‚êHÖ0@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÀåÌÞþð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýVÖa‚Fê¶fWi2=_Ø0JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀåÌÞþð‹+aue_sendtoÚ +ret_msgid485hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý;ðŒt®Gʼn†mhgzÁÚ0JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀåÌÞþð‹+aue_sendto˜ +ret_msgid486hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¤á­»ÝLG²–X‘tùŸóÜ0JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀåÌÞþð‹+aue_sendto¬ +ret_msgid487hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¹P[eƲO¤½”íÁsu;Þ0JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀåÌÞþð‹+aue_sendto˜ +ret_msgid488hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÝŠ™åÜAº2MÔ$ìà0Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀåÌÞþð‹+aue_recvfromÚ ret_msgid485hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýyÑ“.¸@v©(o4¾;waâ0Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀåÌÞþð‹+aue_recvfrom˜ ret_msgid486hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý&@²Ì‚)J$ªß° ©Î€—ä0Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀåÌÞþð‹+aue_recvfrom¬ ret_msgid487hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý4~DÕ‘B|’0Gža¢fÈæ0Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀåÌÞþð‹+aue_recvfrom˜ ret_msgid488hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýú³Úoõ{@Æž7e~>•è0²œ û÷µtFzé®·'üvºû÷µtFzé®·'üvºŒå¥­áþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý…l"¤`RO¯‘Ï +}ÎFöê0bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Œå¥­áþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý–4 Å·Jh™®åæòs}§ì0bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Œå¥­áþð‹+aue_writeBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýü’È€Fzé®·'üvº†ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±Œå¥­áþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý[ßdiT¼LA¼ï1>Ÿ”•î0$ªœ ù‹°âFzé®·'üvºü’È€Fzé®·'üvºŒå¥­áþð‹+aue_fork +arg_pid1347hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1347ppid1282execbash20ÜS7[AIF¬•pd± (ý3y¦9nÐHŸ„ˆ‡ —â½fð0²œ ü’È€Fzé®·'üvº¥µîgµÑUµg¨eµÑc'Œå¥­áþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +elp„zQ-S‘z`ôƒ-å20 +ÜS7[AIF¬•pd± (ý’ørÓM–t§Ç¿ìÒò0²œ ü’È€Fzé®·'üvºelp„zQ-S‘z`ôƒ-åˆ/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_string'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Œå¥­áþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine2./copy_static_buf_string ppid1337execbash20ÜS7[AIF¬•pd± (ý«ƒŠfKp±VÏÙ‹BÐSô0<²œ ü’È€Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confŒå¥­áþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý’PS¸Ž×J[šÐCÇc]"hö0@²œ ü’È€Fzé®·'üvº‰oý©äÇU¤©A)Eǹ Œå¥­áþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý˜Uimo…G”Bˆˆ=3{ø0²œ ü’È€Fzé®·'üvº‰oý©äÇU¤©A)Eǹ Œå¥­áþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýÜb ÝùK ÇºÕMšÌoú0<²œ ü’È€Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsŒå¥­áþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý_Å>ÂfðNÞ«G+üMÜyü0@²œ ü’È€Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âŒå¥­áþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýÎ{‚,Ž Cž¼·"…4Boþ0@²œ ü’È€Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âŒå¥­áþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý¯¿r%SKÔ‡ÐÜ Ôx€1²œ ü’È€Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âŒå¥­áþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý´n¦––H@r¦Ë^©û+ñU‚1<²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Œå¥­áþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýSÚ´gIAE°­T2šg„12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýÝ\Z§eOJó•'3Ï/¢[J†12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýRdV3ÈG¸F–¯I÷Gˆ12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý,}ÆyþJè‘JØÖÁcqŠ12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý¸iìÖGDª¾Ê÷­¤‹Œ12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý³ŽâœµGK†WDÖÔæËŽ12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"”Àúá¨Ùiô9Bþ¢hT2.Ëâù12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý‡[CéBž©pC•Ñ1{ü’12²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý«E4 Ô¹H®Ÿš‘øÞõØ”1²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýŠ©ù­Ã2Gù¿EººMÌ–1:²œ ü’È€Fzé®·'üvºŒå¥­áþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý'J¹!F’_®ëlÕ6˜1:²œ ü’È€Fzé®·'üvºŒå¥­áþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý¯øߦŒIð«ÿÈL“Ü’Oš1b²œ ü’È€Fzé®·'üvºí( ö~R¶ ~{‚~¯Œå¥­áþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý# +<Ú(×C5±×HòèÌœ1²œ ü’È€Fzé®·'üvºü’È€Fzé®·'üvºŒå¥­áþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý[÷ö9…AFžXÝ +ø‰ž1@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Œå¥­áþð‹+aue_readæhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýg™;RîÙF]«¥n£PVš 10ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Œå¥­áþð‹+aue_lseekˆ +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýü“,±Fzé®·'üvºˆù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±Œå¥­áþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý™N­gŸ@*Œ ÿõ7=¢1$ªœ ù‹°âFzé®·'üvºü“,±Fzé®·'üvºŒå¥­áþð‹+aue_fork +arg_pid1348hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1348ppid1282execbash20ÜS7[AIF¬•pd± (ýÜÎ +»<™IUµ'ÁR½?–¤1²œ ü“,±Fzé®·'üvº¥µîgµÑUµg¨eµÑc'Œå¥­áþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý‰ƒÆ{XI1¾WVs›Å¦1²œ ü“,±Fzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Œå¥­áþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýgâ©©‚bBÃ…ˆÎ–wÓº¨1<²œ ü“,±Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confŒå¥­áþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýˆë¼JœFñ¸—X¤¾°Ëª1@²œ ü“,±Fzé®·'üvº‰oý©äÇU¤©A)Eǹ Œå¥­áþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýðX\5Ò7N¤Ç³q†¬1²œ ü“,±Fzé®·'üvº‰oý©äÇU¤©A)Eǹ Œå¥­áþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýssÞgKÆ¡©®s‡§.®1<²œ ü“,±Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsŒå¥­áþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý“zÞ^"Jð²åËȹE°10‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UèÙ‰ääþð‹+aue_lseek¼Ù%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢õ˜64•B&¦:|3•XþM²1²œ ü“,±Fzé®·'üvºü“,±Fzé®·'üvºæðâðèþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý +987õHĵÐÁfÓ§HO´1bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯æðâðèþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýˆÔQ•N¶Ñ¾^D±±¶1bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯æðâðèþð‹+aue_write>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýý,äÈFzé®·'üvºŠù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±æðâðèþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý*¦ÓíɽH0‹ É*?¤2¸1$ªœ ù‹°âFzé®·'üvºý,äÈFzé®·'üvºæðâðèþð‹+aue_fork +arg_pid1349hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1349ppid1282execbash20ÜS7[AIF¬•pd± (ýkLu¤;Cà–Bù¬Öíïº1²œ ý,äÈFzé®·'üvº¥µîgµÑUµg¨eµÑc'æðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +¤ üx¡\¡ô׬½i20 +ÜS7[AIF¬•pd± (ý ( âEq§_гEB¼1²œ ý,äÈFzé®·'üvº¤ üx¡\¡ô׬½i„/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_heap_buf'ìAzX™¦}˜¹(/libexec/ld-elf.so.1æðâðèþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine../copy_static_heap_buf ppid1337execbash20ÜS7[AIF¬•pd± (ý(B†‰z¨H%ƒ$hd”þ†"¾1<²œ ý,äÈFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confæðâðèþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý¬}ÊkA]†vÌÔó ™À1@²œ ý,äÈFzé®·'üvº‰oý©äÇU¤©A)Eǹ æðâðèþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý»ÉïlÌ”FƒT–ðF"†Â1²œ ý,äÈFzé®·'üvº‰oý©äÇU¤©A)Eǹ æðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýÆXšËRõLµÍ^À÷d%Ä1<²œ ý,äÈFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsæðâðèþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý…òiË3Gô£ž7S–k2Æ1@²œ ý,äÈFzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýù ÑíàÈI-¢³õhžNºÈ1@²œ ý,äÈFzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýƒ +Ì‚ïIi°~5ˆPæÌÜ12²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýjÕù•A·Ë`ÄhTÞ1²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýy3ã¬!GšÆ÷QŽ¨rUà1:²œ ý,äÈFzé®·'üvºæðâðèþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýêÑP¦«ÊFO²>mš`.?îâ1:²œ ý,äÈFzé®·'üvºæðâðèþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý#Ùî9H’«}r«Ûä1²œ ý,äÈFzé®·'üvºý,äÈFzé®·'üvºæðâðèþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý›#|Ü5²I‚/”Ü ìØæ1@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'æðâðèþð‹+aue_read°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýöè}HÎ4°«²) Gè10ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'æðâðèþð‹+aue_lseek® +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýý-:?Fzé®·'üvºŒù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±æðâðèþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýl€.ÚêIe»ØÃ*ì@Ñ4ê1$ªœ ù‹°âFzé®·'üvºý-:?Fzé®·'üvºæðâðèþð‹+aue_fork +arg_pid1350hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1350ppid1282execbash20ÜS7[AIF¬•pd± (ýàsß–]?Ih´ aXü}«Iì1²œ ý-:?Fzé®·'üvº¥µîgµÑUµg¨eµÑc'æðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýìªßTjFF±~æYP¯ßî1²œ ý-:?Fzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1æðâðèþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýÚoÃhÕ|@ó…³bv»ð ð1<²œ ý-:?Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confæðâðèþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýŒçà>«AÎÛk±±QÙò1@²œ ý-:?Fzé®·'üvº‰oý©äÇU¤©A)Eǹ æðâðèþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý©ÏË…±K”ﻯVÔŸô1²œ ý-:?Fzé®·'üvº‰oý©äÇU¤©A)Eǹ æðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¿]åÛ4C ¬¤j ¾ó£Úö1<²œ ý-:?Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsæðâðèþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýd±‡ D»¾¸b.¾1ýø1@²œ ý-:?Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýdè^yÊ&N“™r¤B&:ú1@²œ ý-:?Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý  X¯GŸ­¬kåbü1²œ ý-:?Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýƨs˯Btµûx³|]‚þ1<²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7æðâðèþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýe} ™®@ÜÎ?Ó‚˜7€22²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýu‹£ +àKž³.M/,j}‚22²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý™m耊[H1¤%ci®"™÷„22²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýnø]θ~B¸ ÚÙHžãÚ¦†22²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýLþÌðNŽ¬qê•‚R€ˆ22²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýBfºê@úH«ªÝÖl-Š22²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý 7zæYO†¤Ùz¹¸Kn<Œ20‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÐÖ°ìþð‹+aue_lseek¾¥&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýé×?*uÉM`ŸèSZu^0Ž2²œ ý-:?Fzé®·'üvºý-:?Fzé®·'üvºÀù·½ðþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÀJ„ëCˆµ¶ïqk”42bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Àù·½ðþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýüÇ´+N:²¢êJÚ Òt’2bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Àù·½ðþð‹+aue_write.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýýȆrFzé®·'üvºŽù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±Àù·½ðþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÜ™;«sþHµ›‹ Ð/”§”2$ªœ ù‹°âFzé®·'üvºýȆrFzé®·'üvºÀù·½ðþð‹+aue_fork +arg_pid1351hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1351ppid1282execbash20ÜS7[AIF¬•pd± (ýQ‚<ÍíØIn³ÙÊxÙ×h–2²œ ýȆrFzé®·'üvº¥µîgµÑUµg¨eµÑc'Àù·½ðþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +Êu÷qÔS”qð,Ó—¾20 +ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"”®üÛ/ì–øO¿®>ÿF˜2²œ ýȆrFzé®·'üvºÊu÷qÔS”qð,Ó—¾t/usr/home/user/ripe-prov-tests-master/Linux/./fork_process'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Àù·½ðþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./fork_process ppid1337execbash20ÜS7[AIF¬•pd± (ýä³Ö{EÊ¡|€JùÏš2<²œ ýȆrFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÀù·½ðþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execfork_process20ÜS7[AIF¬•pd± (ý8ËAUøØMwŒVuÚù?–œ2@²œ ýȆrFzé®·'üvº‰oý©äÇU¤©A)Eǹ Àù·½ðþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýˆ¯ +"kzHœ‡-¼'PèOž2²œ ýȆrFzé®·'üvº‰oý©äÇU¤©A)Eǹ Àù·½ðþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execfork_process20ÜS7[AIF¬•pd± (ýâ3{µEX¬¨´#¾OH 2<²œ ýȆrFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÀù·½ðþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýò{.L(¢FsŽw»¸CDþ¢2@²œ ýȆrFzé®·'üvºXꎩð®…\®ð@JÌ…¼âÀù·½ðþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýt¢ (KÉJ® ¿Ó¹’i¤2@²œ ýȆrFzé®·'üvºXꎩð®…\®ð@JÌ…¼âÀù·½ðþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ý¥K9¡JCÀ¾H.”Å㘦2²œ ýȆrFzé®·'üvºXꎩð®…\®ð@JÌ…¼âÀù·½ðþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execfork_process20ÜS7[AIF¬•pd± (ý÷AÍÏG‰y>ܦÅ*¨2<²œ ýȆrFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Àù·½ðþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýZ×U}L/¥Z†üÒÑåª22²œ ýȆrFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýÜ.h 1G—„[IýÊ~¬22²œ ýȆrFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýTœê PÿJ¸²\>¸žx)®22²œ ýȆrFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýˆ*áCŸ=A½§ÜzX…¨°22²œ ýȆrFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýÅ.íŽÜOûŒ™âWŸÞø²22²œ ýȆrFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýÚÙž D0ª·£á@Ï!´22²œ ýȆrFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýˆ½oLPI#Œ˜’ò¶22²œ ýȆrFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýdŽdTaAH©yŒÇ[.ä¸22²œ ýȆrFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execfork_process20ÜS7[AIF¬•pd± (ýÃPž<ïUBú› )¥v¢º2²œ ýȆrFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execfork_process20ÜS7[AIF¬•pd± (ý¶ ©°ŸGºŽ_ÌhþB¼2:²œ ýȆrFzé®·'üvºÀù·½ðþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execfork_process20ÜS7[AIF¬•pd± (ýŒÝ MfH¾£Š¤ÐÂÉ•¾2:²œ ýȆrFzé®·'üvºÀù·½ðþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execfork_process20ÜS7[AIF¬•pd± (ýýÈÐFzé®·'üvºýȆrFzé®·'üvº°äÿ§®]vRS<„äB±Àù·½ðþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÀ}½n½ÀHd·ÛŒ}4ÿ¶À2$²œ ýȆrFzé®·'üvºýÈÐFzé®·'üvºÀù·½ðþð‹+aue_fork +arg_pid1352hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1352ppid1337execfork_process20ÜS7[AIF¬•pd± (ýiÖþMÐJ'³†D/|ø¸Â2b²œ ýȆrFzé®·'üvºí( ö~R¶ ~{‚~¯Àù·½ðþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execfork_process20ÜS7[AIF¬•pd± (ý Px˜mGI®NµÞBïRCÄ2²œ ýȆrFzé®·'üvºýȆrFzé®·'üvºÀù·½ðþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execfork_process20ÜS7[AIF¬•pd± (ý!ZJÙ÷Fm¤ï¨’Ê_ðNÆ2bÖœ ýÈÐFzé®·'üvºí( ö~R¶ ~{‚~¯Àù·½ðþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1execfork_process20ÜS7[AIF¬•pd± (ý½ß0°ŸÛO›ƒ¾3ƒÃ|#0È2@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Àù·½ðþð‹+aue_readŠhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýÛ—^-}J¦†Ëø*2©ÁÊ20ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Àù·½ðþð‹+aue_lseekÊ +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýýÉAäFzé®·'üvº’ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±Àù·½ðþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýŠG)ûVGIÝ„œ}±` ‰Ì2$ªœ ù‹°âFzé®·'üvºýÉAäFzé®·'üvºÀù·½ðþð‹+aue_fork +arg_pid1353hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1353ppid1282execbash20ÜS7[AIF¬•pd± (ý…Öcku“B£ê•)wÓ@kÎ2Öœ ýÈÐFzé®·'üvºýÈÐFzé®·'üvºÀù·½ðþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execfork_process20ÜS7[AIF¬•pd± (ý…#¿>GÌš?±ëïÐ2²œ ýÉAäFzé®·'üvº¥µîgµÑUµg¨eµÑc'Àù·½ðþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýPäŠÄ{~Hô±‰³3lÙ”Ò2²œ ýÉAäFzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Àù·½ðþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýø÷•ì¬eCº‚ÆP9Ü„AOÔ2<²œ ýÉAäFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÀù·½ðþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýíÂÑM1N&¹ûþ-jÖ2@²œ ýÉAäFzé®·'üvº‰oý©äÇU¤©A)Eǹ Àù·½ðþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýŠ×üÉOFø™Hío]´þØ2²œ ýÉAäFzé®·'üvº‰oý©äÇU¤©A)Eǹ Àù·½ðþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýE\>ሪM¹¦ùãÑ°©:Ú2<²œ ýÉAäFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÀù·½ðþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý“Ø–ŽÒN©“Þ®‰‹?ÑÀÜ2@²œ ýÉAäFzé®·'üvºXꎩð®…\®ð@JÌ…¼âÀù·½ðþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýL¨`/{ÞA} uGû'ŸªÞ2@²œ ýÉAäFzé®·'üvºXꎩð®…\®ð@JÌ…¼âÀù·½ðþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýSußtSéI•iÞ""zà2²œ ýÉAäFzé®·'üvºXꎩð®…\®ð@JÌ…¼âÀù·½ðþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý;;Ê)>Jk ÉÒ’û¶á+â2<²œ ýÉAäFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Àù·½ðþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý_l6ÊãÜO-´£"ÓY‘[5ä22²œ ýÉAäFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýt‰’íRVGÅŸlÜFÙÏ<æ22²œ ýÉAäFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýØÆ.•÷-J“ˆ@2±` m@è20‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U‚âÄýóþð‹+aue_lseekˆõ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýææo—ªÇD+›ÿƒ6Çê2@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÆ›Ýùôþð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý]4àûzG5švñ1ÃF~ì2JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆ›Ýùôþð‹+aue_sendtoÚ +ret_msgid490hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýˆq„&xFÿ…±õzÐuî2JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆ›Ýùôþð‹+aue_sendto˜ +ret_msgid491hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý‹¡.cÁÐJ+…ûl®CÃ[°ð2JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆ›Ýùôþð‹+aue_sendto¬ +ret_msgid492hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÂéx¨7Ç@ø¥—¥¿©D4ò2JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆ›Ýùôþð‹+aue_sendto˜ +ret_msgid493hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý|%ò¯HB[•ð-˜‡[¥Pô2Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆ›Ýùôþð‹+aue_recvfromÚ ret_msgid490hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý(:ɉÍLìµ±BÑÞiÈ]ö2Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆ›Ýùôþð‹+aue_recvfrom˜ ret_msgid491hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý,2üAðçMÛ¤Ô³{ ÷éø2Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆ›Ýùôþð‹+aue_recvfrom¬ ret_msgid492hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‡ NoMÒ«!á7 ü†bú2Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆ›Ýùôþð‹+aue_recvfrom˜ ret_msgid493hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý®uváÝF]¯­®ŠŒ‘8õü2²œ ýÉAäFzé®·'üvºýÉAäFzé®·'üvºÎ¤½Šøþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý>Bëh?AKå”KaèóAÍþ2bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý4}°Dq¢PZD=áCñ€3bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write$hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýþdkiFzé®·'üvº”ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±Τ½Šøþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÍGY€•Aƒ•žÉ=(gÆ‚3$ªœ ù‹°âFzé®·'üvºþdkiFzé®·'üvºÎ¤½Šøþð‹+aue_fork +arg_pid1354hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1354ppid1282execbash20ÜS7[AIF¬•pd± (ýá~ÉXI‰žF"F9µO„3²œ þdkiFzé®·'üvº¥µîgµÑUµg¨eµÑc'Τ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +.iØÓä)P¤Ó‚›°)‡‰20 +ÜS7[AIF¬•pd± (ýúñaŸÖìM-¹3ªtSJ†3²œ þdkiFzé®·'üvº.iØÓä)P¤Ó‚›°)‡‰j/usr/home/user/ripe-prov-tests-master/Linux/./listdir'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Τ½Šøþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./listdir ppid1337execbash20ÜS7[AIF¬•pd± (ý*ß»(Ÿ8Eó¸Ì&Sæ?ëˆ3<²œ þdkiFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confΤ½Šøþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execlistdir20ÜS7[AIF¬•pd± (ýºè¦høM‡œê¿þ‰Ú"lŠ3@²œ þdkiFzé®·'üvº‰oý©äÇU¤©A)Eǹ Τ½Šøþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ýp¸NöìCœˆ¯Ð›ZrÚŒ3²œ þdkiFzé®·'üvº‰oý©äÇU¤©A)Eǹ Τ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execlistdir20ÜS7[AIF¬•pd± (ý­ã$ñKˉE†aÈ3£Ž3<²œ þdkiFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsΤ½Šøþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execlistdir20ÜS7[AIF¬•pd± (ý’ÅÍ÷ñN*¥<š/ªÊ‰3@²œ þdkiFzé®·'üvºXꎩð®…\®ð@JÌ…¼âΤ½Šøþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ý.¥åé@†¦X"趒3@²œ þdkiFzé®·'üvºXꎩð®…\®ð@JÌ…¼âΤ½Šøþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ý¶ßåèÊD#©œ65 9$”3²œ þdkiFzé®·'üvºXꎩð®…\®ð@JÌ…¼âΤ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execlistdir20ÜS7[AIF¬•pd± (ýž(%$OlCvñSw·‹–3<²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Τ½Šøþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execlistdir20ÜS7[AIF¬•pd± (ýÈÛcCR§AULa +T9¤˜32²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ýòC·é/ E-¿ÂQ’³°Ðš32²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ý}VOY‰0Lÿ“(`½_òGœ32²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ýÆaˆKûHÓ› .è[¨Ùž32²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ýÃIð5îD~›Âº<©Ë 32²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ýel¹ÜÙÞK +„ÒåÄm„Þ±¢32²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¢‚ú~‚|¢®A·›_Ž­apƤ32²œ þdkiFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÎ¤½Šøþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execlistdir20ÜS7[AIF¬•pd± (ý ½»³ÑDò„kƒˆN[m´¶>XÅñÎ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý••Ï¬/\A›GkW¯ýÐ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý0ŸwÒrNî¹Û»tëÒ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýÙBRO…}¥£ÆyÔ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý +Ld½¦HI†Äú-ÁX$TÖ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý¬CyF)ÉE-šªMZ<* Ø3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýVvˆKf¾Fɘ0$ÌAÞ`–Ú3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write0hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý¤pB%êIN3¡¯™—iaÜ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýbü¹I~›£ð ]¯Þ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýº?ÑìYM’‹Ú~üà3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýi•O3ŽÞGœ~}uAÖÀâ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýØcn[]iLËž{I¢îNºä3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýáëk!2L°§fÏ‹Õ„næ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýÏžÌòD&µ#JÊ/ƒ5è3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý mØy_ÂD™œ^ÌùÃ|³ê3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýƒL»bžMîŠÁsÝæWçì3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý‚{Õ—nþLœøDüǧÂî3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýS¦Pz½BÀ½Ð= \yîð3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý)A¨@¶ò@K´Ý0ˆˆò3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýä2‰¹5AN©‹‰>oç!ßô3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý1ñ< ¡æD ¥³W±i²ö3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý:w ®O®E˜:ŒN¸ÙFþø3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýÎ\B,«îKÒ«9Víì6¬éú3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý³<Š‘…OPŸÿNKg¼ü3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý«¨;»I¢ýhë†íþ3b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýlíÂþRAZ¦ž2ƒ + ›7€4b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý­‘a’Oаå³îܾA‚4b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýEüAë‘K  ì#î˜ÈŸ„4²œ þdkiFzé®·'üvºÞç=š8§T¸šm9D§bΤ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execlistdir20ÜS7[AIF¬•pd± (ýµt‚*Kªæèzl¯+¿†4²œ þdkiFzé®·'üvºþdkiFzé®·'üvºÎ¤½Šøþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execlistdir20ÜS7[AIF¬•pd± (ýòZÎRO£•½"~#©rˆ4@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Τ½Šøþð‹+aue_readîhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý ú`+Œ÷@DŸC"r^dëŠ40ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Τ½Šøþð‹+aue_lseekô +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýþeLÊFzé®·'üvº–ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±Τ½Šøþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýB£±ãàÏEp¸`× ðÉŒ4$ªœ ù‹°âFzé®·'üvºþeLÊFzé®·'üvºÎ¤½Šøþð‹+aue_fork +arg_pid1355hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1355ppid1282execbash20ÜS7[AIF¬•pd± (ý·~¸ø]H šÛŒr!£Ž4²œ þeLÊFzé®·'üvº¥µîgµÑUµg¨eµÑc'Τ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÌ›8¨Tk@|°@vŽ~üá¾4²œ þeLÊFzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Τ½Šøþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýèÅ؆I@‹pëkž’4<²œ þeLÊFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confΤ½Šøþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¨²s#0KÞ‚¡ÏÃ/Ù”4@²œ þeLÊFzé®·'üvº‰oý©äÇU¤©A)Eǹ Τ½Šøþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýøkô¢M]ŠB^…·T–4²œ þeLÊFzé®·'üvº‰oý©äÇU¤©A)Eǹ Τ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý­Ì=ñ[GZ™F¸x€˜4<²œ þeLÊFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsΤ½Šøþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý­LÀ£ÚNÙ‰0sŒFfå-š4@²œ þeLÊFzé®·'üvºXꎩð®…\®ð@JÌ…¼âΤ½Šøþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýDdBìiF¿¢Ø!¤ÕëRœ4@²œ þeLÊFzé®·'üvºXꎩð®…\®ð@JÌ…¼âΤ½Šøþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÄŸ ‹É@€•›OÞŒy­ž4²œ þeLÊFzé®·'üvºXꎩð®…\®ð@JÌ…¼âΤ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýË~2Ô BˆƒK\jab 40‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔü¾Îûþð‹+aue_lseekªð'hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý84/õsD\’Ó!’›9›¢4²œ þeLÊFzé®·'üvºþeLÊFzé®·'üvººÙ†Ñÿþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý@÷âß–Më“ úeùî—Ó¤4bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ºÙ†Ñÿþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý‰ øù¹G‰‹‡ÔP¥Ü¦4bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ºÙ†Ñÿþð‹+aue_write2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýþÿ‹Fzé®·'üvº˜ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±ºÙ†Ñÿþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý¦3ûB6®Cî‚g¶én)gp¨4$ªœ ù‹°âFzé®·'üvºþÿ‹Fzé®·'üvººÙ†Ñÿþð‹+aue_fork +arg_pid1356hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1356ppid1282execbash20ÜS7[AIF¬•pd± (ýûÕK®{ONí'n€ùóÖª4²œ þÿ‹Fzé®·'üvº¥µîgµÑUµg¨eµÑc'ºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +Ëë F>X†·CX>OY20 +ÜS7[AIF¬•pd± (ý—ñ¼îÍ*D!Áí˜ +G¾¬4²œ þÿ‹Fzé®·'üvºËë F>X†·CX>OYx/usr/home/user/ripe-prov-tests-master/Linux/./make_directory'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ºÙ†Ñÿþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"./make_directory ppid1337execbash20ÜS7[AIF¬•pd± (ý¾ç9X„@¯¦2ËžJÏ®4<²œ þÿ‹Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confºÙ†Ñÿþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýV(Y'6¡@—”ì ^Ë,í°4@²œ þÿ‹Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ºÙ†Ñÿþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýÇ’Á-®Oü¼f¾m#:ÁÞ²4²œ þÿ‹Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýmdr¿ÚLÞ:Dž9Ù7%´4<²œ þÿ‹Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsºÙ†Ñÿþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýõ]ûz?|Iõ(̸Ý<¶4@²œ þÿ‹Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý§·§¾¹Hö«Ÿä5—§ØV¸4@²œ þÿ‹Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýÑ¿ç‹+ÁIà§ýõ k@Ϻ4²œ þÿ‹Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý¾4ÞzS°Mܯ7ÁG·y¼4<²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ºÙ†Ñÿþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýH=²´iNAU¦Õ]˜é  ¾42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"’ÖúÈHÀ%lTKþ©s,áp™À42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý [&^ZIC´ò­EÓ˜‘Â42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýòL¬¹oFŸÄÜÕ)&‹¬Ä42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý¬¡V$Jˆ¢†t‹Æ42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýí£šº(]H º'ZÍÚÔÈ42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý |ðwi DI”ÈvÀ4en¥Ê42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý`a,XÏMš—OèsŸ¦ÍÌ42²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý¸Fn´¨)Gʧñ»:FèÎ4²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýKÎ!S´ôKŽÅ‹×BA¯Ð4:²œ þÿ‹Fzé®·'üvººÙ†Ñÿþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýG£\áKë¦Â²lÝ£% Ò4:²œ þÿ‹Fzé®·'üvººÙ†Ñÿþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý +ï w©Oh[hY«h^Ÿ20 +ÜS7[AIF¬•pd± (ýŸ›øsRòLf±õ}|‘˜Ê-Ô4²œ þÿ‹Fzé®·'üvºï w©Oh[hY«h^Ÿj/usr/home/user/ripe-prov-tests-master/Linux/temporaryºÙ†Ñÿþð‹+aue_mkdirhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý5ƒ>$)D¤æ¼Ású{Ö4²œ þÿ‹Fzé®·'üvºþÿ‹Fzé®·'üvººÙ†Ñÿþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý;uÕ%D=¯ý$^ràØ4@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'ºÙ†Ñÿþð‹+aue_readÄhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýø™»)Æ@´‹]Fì¨ò¿ÞÚ40ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'ºÙ†Ñÿþð‹+aue_lseek® hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýþÿŒ9Fzé®·'üvºšù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±ºÙ†Ñÿþð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýùŒÔÇŠ:N~ˆ‡îÐ->Ü4$ªœ ù‹°âFzé®·'üvºþÿŒ9Fzé®·'üvººÙ†Ñÿþð‹+aue_fork +arg_pid1357hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1357ppid1282execbash20ÜS7[AIF¬•pd± (ýÍëÏ„‚ÊOÈžo?gÊ8Þ4²œ þÿŒ9Fzé®·'üvº¥µîgµÑUµg¨eµÑc'ºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýªÎÖ—»–CwœÕ}i,ƒ(à4²œ þÿŒ9Fzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ºÙ†Ñÿþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýtÍë CI³’iˆÎˆsëâ4<²œ þÿŒ9Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confºÙ†Ñÿþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýð$;þažM¡´®Ë$Í­%ä4@²œ þÿŒ9Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ºÙ†Ñÿþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý6¥$pM]NA»ÁJRî:æ4²œ þÿŒ9Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýoaºåM½NV©°kx›ù &è4<²œ þÿŒ9Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsºÙ†Ñÿþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý>M¢µ^…OZ”pmø¼R–Cê4@²œ þÿŒ9Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý±t×_ÖžE€ÞŽ¥.U²ì4@²œ þÿŒ9Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÙYD£¶@!³;…<1 êî4²œ þÿŒ9Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýübìªEE]¶«Ÿ Çð4<²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ºÙ†Ñÿþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýBÏè‚@ …§§ô¼ø5êò42²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýd5/uŽBRµzìQ«'•ô42²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý”ò@‰¨Gz‘ðêºz ¿ö42²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýöÛifȪJ¼·8 8Qô‘ø42²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýºÇa]zåBw²‰äDo}Cú42²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý+xžÝËF”»ò]†÷O›ü40‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´êß—ƒÿð‹+aue_lseekº¾(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU'"œø¦GÕE6¢”´þ4²œ þÿŒ9Fzé®·'üvºþÿŒ9Fzé®·'üvºâ曚‡ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý®òDõK­F,NV€5bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯â曚‡ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýc”#Xz®@ø ·ˆÁàƒ‚5bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯â曚‡ÿð‹+aue_writeBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýÿ™ûFzé®·'üvºœù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±â曚‡ÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý*õÔæIãOæŒþˆ…HG„5$ªœ ù‹°âFzé®·'üvºÿ™ûFzé®·'üvºâ曚‡ÿð‹+aue_fork +arg_pid1358hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1358ppid1282execbash20ÜS7[AIF¬•pd± (ýçIQÀ.Cµ‡vŽKpà†5²œ ÿ™ûFzé®·'üvº¥µîgµÑUµg¨eµÑc'â曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +gAÅŸŒãŽP£ŒðÑ€Ž¡Å20 +ÜS7[AIF¬•pd± (ý²5]gfXK«…*ÞÕ³}Lˆ5²œ ÿ™ûFzé®·'üvºgAÅŸŒãŽP£ŒðÑ€Ž¡Åˆ/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_multi_write'ìAzX™¦}˜¹(/libexec/ld-elf.so.1â曚‡ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine2./multi_read_multi_write ppid1337execbash20ÜS7[AIF¬•pd± (ý<—´M@­“?~z4s¸Š5<²œ ÿ™ûFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confâ曚‡ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý²‘ÁB²1L¦p™4ÚË©“Œ5@²œ ÿ™ûFzé®·'üvº‰oý©äÇU¤©A)Eǹ â曚‡ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýNÙDÚŸ©JÛ«ŠdÀŽ5²œ ÿ™ûFzé®·'üvº‰oý©äÇU¤©A)Eǹ â曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýö^»’)F†rK ž+ø5<²œ ÿ™ûFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsâ曚‡ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýá ÿ^}ØOªŸÄ<×ÚÒKë’5@²œ ÿ™ûFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýêawêU E3Š¢Ì*á=Æñ”5@²œ ÿ™ûFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý E›¿+¹Dà“1îtâî–5²œ ÿ™ûFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýzM?€§ÑJ˪0Ð{…ŸÒã˜5<²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7â曚‡ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý-.¹%VNºˆpö@ÅÖµš52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýåÏþÁÔ¦H­0ëŽ +¨œ52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý›ÕÐœ¨F[µU´}õàýž52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýÆ:»B{¢EÕ´_ã3®¿òµ 52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýöâŠVR‘LŠ’eØU´”ò.¢52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýŠìyýßHÿªB3`s'Ú¤52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý&tB0ªaAZ±lø¼½ëÇ•¦52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýj‹EÖКC +ŒDkÎÃûP¨52²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýR¸Ð1èDA §<%‰ªª5²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýR}„{¾lN"»Æ ’TW=Ò¬5:²œ ÿ™ûFzé®·'üvºâ曚‡ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýG99uwtNö–&PÂG–ó¿®5:²œ ÿ™ûFzé®·'üvºâ曚‡ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý +f*qÛ^žqaþ>Û“Á20 +ÜS7[AIF¬•pd± (ý—W¼¾dLi´;7LûÉZ°5<²œ ÿ™ûFzé®·'üvºf*qÛ^žqaþ>Û“Á€/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.câ曚‡ÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý +1ž‰+_\‘+öý<_îæ20 +ÜS7[AIF¬•pd± (ý0þ +|ŠsGV¡¦Y|Æÿ ›²5<²œ ÿ™ûFzé®·'üvº1ž‰+_\‘+öý<_îæ˜/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.câ曚‡ÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý +–yÓžÇJ8UŠÇ>;å8¦&20 +ÜS7[AIF¬•pd± (ýß­ % ˜CÂ…E^üªWv´5<²œ ÿ™ûFzé®·'üvº–yÓžÇJ8UŠÇ>;å8¦&x/usr/home/user/ripe-prov-tests-master/Linux/output_file1.tmpâ曚‡ÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý +•Þ©R‹8¦Y¸‹5RI¦Q20 +ÜS7[AIF¬•pd± (ý!?§.~‘G¬œ½¨ÄŸ.¹¶5<²œ ÿ™ûFzé®·'üvº•Þ©R‹8¦Y¸‹5RI¦Qx/usr/home/user/ripe-prov-tests-master/Linux/output_file2.tmpâ曚‡ÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýœh†cæH·Ä5=¸5@²œ ÿ™ûFzé®·'üvºf*qÛ^žqaþ>Û“Áâ曚‡ÿð‹+aue_read¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý—~óÈÙAÛ†lA—ïl ƒº5@²œ ÿ™ûFzé®·'üvº1ž‰+_\‘+öý<_îæâ曚‡ÿð‹+aue_readühostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýžÌŠ '%LÅ+ƒ4îû¼5²œ ÿ™ûFzé®·'üvºf*qÛ^žqaþ>Û“Áâ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý¿PQ »ÝB ÌÚ2Evƒ&¾5²œ ÿ™ûFzé®·'üvº1ž‰+_\‘+öý<_îæâ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýξË5ëñJø¶È* +5ÚeÀ5b²œ ÿ™ûFzé®·'üvº–yÓžÇJ8UŠÇ>;å8¦&â曚‡ÿð‹+aue_writeþhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¢¨üîŠ +v÷@¼´õUiGyUÂ5²œ ÿ™ûFzé®·'üvº–yÓžÇJ8UŠÇ>;å8¦&â曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýz ˆ«íJ(¬$õˆÌlwLÄ5b²œ ÿ™ûFzé®·'üvº•Þ©R‹8¦Y¸‹5RI¦Qâ曚‡ÿð‹+aue_writeöhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý´ãRÇç{E³Ž”óL‡•€Æ5²œ ÿ™ûFzé®·'üvº•Þ©R‹8¦Y¸‹5RI¦Qâ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýÀcâúO¥–¬:ˆãêÈ5²œ ÿ™ûFzé®·'üvºÿ™ûFzé®·'üvºâ曚‡ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý£›¤Ð+{Ev®ËW4®8tÊ5@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'â曚‡ÿð‹+aue_readŠhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý<"ë#JIh¨!¤üiìÌ50ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'â曚‡ÿð‹+aue_lseekê hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýÿš¡ŽFzé®·'üvºžù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±â曚‡ÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýß©Ó­šýGX¦¾"ãÇ”î0Î5$ªœ ù‹°âFzé®·'üvºÿš¡ŽFzé®·'üvºâ曚‡ÿð‹+aue_fork +arg_pid1359hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1359ppid1282execbash20ÜS7[AIF¬•pd± (ý>ˆ¢ÌÙ}Cóƒ/ÔÅù¹Ð5²œ ÿš¡ŽFzé®·'üvº¥µîgµÑUµg¨eµÑc'â曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýýeÅ(ò‘CÛ‡Ž°(n“ÜQÒ5²œ ÿš¡ŽFzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1â曚‡ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýqŒSªF^&=É-òÔ5<²œ ÿš¡ŽFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confâ曚‡ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýJ+P•ìGFŠ‡±•ëØ›$Ö5@²œ ÿš¡ŽFzé®·'üvº‰oý©äÇU¤©A)Eǹ â曚‡ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý{ñÍ;ðFü¶€ØçAØ5²œ ÿš¡ŽFzé®·'üvº‰oý©äÇU¤©A)Eǹ â曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýKûÛQ•MY‚„óÇ.ºÈãÚ5<²œ ÿš¡ŽFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsâ曚‡ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý”ò‚‰G„º?üy-MöÜ5@²œ ÿš¡ŽFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý˜g—‰²XG„¤Òdâ9ß-pÞ5@²œ ÿš¡ŽFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýƒnƒ^kEL"¤+N£s{°–à5²œ ÿš¡ŽFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý6Hð¡g=BÛ˜g¡yÉl èâ5<²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7â曚‡ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýTKß(\ïM«†u"dbÖä52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý[d’D&E®¹Ìt‘•uŽ}æ52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÜ\Ó\¨U@©*Ö¶2ãÌè52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýáï!«ØJP’gŽ£wÙ<5ê52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý2lX .MI½’Œf(C\´ì52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýرzé±ÿBO¸Ë²È¨Êî52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýë!ÿœCɺË& D¢ð52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÒ©ãÏ}HœîUÂõ*àò52²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý Ä}äO<œR Nÿu&ô5²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý Ƹ<›vE¯òš…g +3ö5:²œ ÿš¡ŽFzé®·'üvºâ曚‡ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýUÒÏ=(SC`ˆ»<ØE¸ÍAø5:²œ ÿš¡ŽFzé®·'üvºâ曚‡ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýËË…×ljMVµY¦ +O‡yú50‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_lseekº¾(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýå®cqHË—.¬Äùv[þ5 ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+20ÜS7[AIF¬•pd± (ýÙãÆé«G ŒÓÃȹnÁü5@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹Ç•ÆâOXŸƒº4, ~‚6 ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+20ÜS7[AIF¬•pd± (ý¯OH¨ŒGfšQ ++ý—¸`€6@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýa±¦„@L½“-ë-;ƒ'͆6 ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+20ÜS7[AIF¬•pd± (ý °aã J4‰]ã<‚ɜڄ6@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOTwS¢DqœL +é€5L¥Š6 ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+20ÜS7[AIF¬•pd± (ý‰‘¶½ >L ½”Uu1Ɉ6@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýe=œDŒDZ‡onÊöŒ6:‚œ Ê +ÙKFzé®›'üvº†ý©ˆÿð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×Øja›Fø,7P@I±ÿŽ6@Úœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V †ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþÛïÐGP­¹J<¿±\‰6@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý Áð”ìlOy¿Ï‚Ò²¢‚’6@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_pread EhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙhÌ@·þ]€7}¾¤6@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€ +¨N¤’F‰-‹ @¦6@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadˆNhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâͳ8C\ ö0³7k¨6b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº†ý©ˆÿð‹+aue_writeòNhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°õ9øÀE¹½_¹Å–­—:ª6bÚœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á†ý©ˆÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQÌâIɅƹ^ø¯¬6@Úœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V †ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›|}¯jNGµ[Ö²xþØ‹®6JÚœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº†ý©ˆÿð‹+aue_sendtoÞ +ret_msgid495hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýãVYÝY®Hç¸éàϬt31°6Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº†ý©ˆÿð‹+aue_recvfromÞ ret_msgid495hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýöRÃ'SC̼²¤Ñ`s`˲6bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK†ý©ˆÿð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý@P½Uß1G§˜ðH ]ß’Ì´6D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¢£·²ˆÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#g,VFDãŽwc85휱¶6D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¢£·²ˆÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýGP/lN÷¤àÓ;bÿ¾¸6D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¢£·²ˆÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýW+á·Dd†r}®«Æú6D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¢£·²ˆÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊ&ŸoÿAQ¹ +8Ç¢Ôš½¼60‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uüñ¡íŠÿð‹+aue_lseekŠÒ)hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýb9„QâŠFŒ˜t5v 9A¾6@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e®ýØ«‹ÿð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý»Ã¿iL”Œìi(SòAÀ6JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®ýØ«‹ÿð‹+aue_sendtoÚ +ret_msgid496hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýé[.ņð@£šíê(¿mÛÂ6JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®ýØ«‹ÿð‹+aue_sendto˜ +ret_msgid497hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý|Å]ð^M«¼¥FÛù¥bÄ6JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®ýØ«‹ÿð‹+aue_sendto¬ +ret_msgid498hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý(A—ËDG8¥R8Ðk“Æ6JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®ýØ«‹ÿð‹+aue_sendto˜ +ret_msgid499hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý‰¡E +`©F¨¼´œ·ÓjÈ6Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ýØ«‹ÿð‹+aue_recvfromÚ ret_msgid496hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý›¨¯´;E̼'z¹YÇÿÊ6Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ýØ«‹ÿð‹+aue_recvfrom˜ ret_msgid497hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý{;¯1‹D‚=‘ ûF Ì6Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ýØ«‹ÿð‹+aue_recvfrom¬ ret_msgid498hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÉ£^fª^L¡×à›Ò΄Î6Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ýØ«‹ÿð‹+aue_recvfrom˜ ret_msgid499hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýk°cƒÏM[ªOèÙµY{Ð6²œ ÿš¡ŽFzé®·'üvºÿš¡ŽFzé®·'üvº¸ÕÐæŽÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýEéøš.%B¥žò[gªÝɬÒ6bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¸ÕÐæŽÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýà«‹ìV•EV²¥7(©†DÔ6bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¸ÕÐæŽÿð‹+aue_writeDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý5Ÿ’F{é®·'üvº ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±¸ÕÐæŽÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÁK+X.@‰†øìV`àÖ6$ªœ ù‹°âFzé®·'üvº5Ÿ’F{é®·'üvº¸ÕÐæŽÿð‹+aue_fork +arg_pid1360hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1360ppid1282execbash20ÜS7[AIF¬•pd± (ý(3†aH¸˜¶ÔÂÈá¿óØ6²œ 5Ÿ’F{é®·'üvº¥µîgµÑUµg¨eµÑc'¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +ظõa0øX°Óøø/å20 +ÜS7[AIF¬•pd± (ýªÐÊÏ€JwŽõç wo 6Ú6²œ 5Ÿ’F{é®·'üvºظõa0øX°Óøø/åŠ/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_single_write'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¸ÕÐæŽÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine4./multi_read_single_write ppid1337execbash20ÜS7[AIF¬•pd± (ý/ò­I@צ‹Œ†ÆjÜïÜ6<²œ 5Ÿ’F{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¸ÕÐæŽÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"Òü}s\’ÇÞE8ŸµŸ»ÅZýÞ6@²œ 5Ÿ’F{é®·'üvº‰oý©äÇU¤©A)Eǹ ¸ÕÐæŽÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý~7tß{Ch„ùO5^’clà6²œ 5Ÿ’F{é®·'üvº‰oý©äÇU¤©A)Eǹ ¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýâ°6e“L~œàYÜ6â6<²œ 5Ÿ’F{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¸ÕÐæŽÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýéÛÉZ«J ˆ%5’bä6@²œ 5Ÿ’F{é®·'üvºXꎩð®…\®ð@JÌ…¼â¸ÕÐæŽÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýÚØ^±YoC‘˜“ˆø™?æ6@²œ 5Ÿ’F{é®·'üvºXꎩð®…\®ð@JÌ…¼â¸ÕÐæŽÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýoŸm‚rAo¦9ç»ü¨*è6²œ 5Ÿ’F{é®·'üvºXꎩð®…\®ð@JÌ…¼â¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýÀÊóoó G¸ê6<²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¸ÕÐæŽÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý4T¸ÃFy·Ãç˜r9Ëì62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýþø(uAÎG§ž6S7qÊnî62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýFè›nv”F\ aBØ3ç•ð62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý*¶WÖxÿIË”ç¢-Š' Gò62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýYÌ^ý#Cñ«$Ë~ƒ4Ýô62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý”Ÿþr²GÑ–ËÏz-ö62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýªÎ¸Ü×OK‚½H“¬†‡˜®ø62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý$¥Øé‘EO ›(Ü+ÿ=Þú62²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý(›6ë¼@“>m]¦ñŽü6²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý꛼¥ZO­:  ôm/þ6:²œ 5Ÿ’F{é®·'üvº¸ÕÐæŽÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýfâ@2jDu£Íæ òçõ€7:²œ 5Ÿ’F{é®·'üvº¸ÕÐæŽÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý2[`N™I˜¬fNçGd”›‚7<²œ 5Ÿ’F{é®·'üvºf*qÛ^žqaþ>Û“Á€/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c¸ÕÐæŽÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý%Œ ‚¢J4›™ \äK„7<²œ 5Ÿ’F{é®·'üvº1ž‰+_\‘+öý<_îæ˜/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c¸ÕÐæŽÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý +“§UŽÞ*PªÞG $P20 +ÜS7[AIF¬•pd± (ý×9ø.‹E‘´4—?iÚ Z†7<²œ 5Ÿ’F{é®·'üvº“§UŽÞ*PªÞG $Pv/usr/home/user/ripe-prov-tests-master/Linux/merged_file.tmp¸ÕÐæŽÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý2*!×ïKü¯þMß…Sˆ7@²œ 5Ÿ’F{é®·'üvºf*qÛ^žqaþ>Û“Á¸ÕÐæŽÿð‹+aue_read¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý"¥ÓOeHZ«ûŒÉtäš'Š7@²œ 5Ÿ’F{é®·'üvº1ž‰+_\‘+öý<_îæ¸ÕÐæŽÿð‹+aue_readühostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýÒU4Koº”™ŽPríŒ7²œ 5Ÿ’F{é®·'üvºf*qÛ^žqaþ>Û“Á¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý‰J°†XG—¦¬¼–öݼðŽ7²œ 5Ÿ’F{é®·'üvº1ž‰+_\‘+öý<_îæ¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýË\NæLºà>| J7b²œ 5Ÿ’F{é®·'üvº“§UŽÞ*PªÞG $P¸ÕÐæŽÿð‹+aue_writeôhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýß!)èõÔOQ›¾\›Æ–ç’7²œ 5Ÿ’F{é®·'üvº“§UŽÞ*PªÞG $P¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý“¸31d/Lc¢Ùóý÷@Í°”7²œ 5Ÿ’F{é®·'üvº5Ÿ’F{é®·'üvº¸ÕÐæŽÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý *Ø`L @s†k>Ê^õ=ì–7@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¸ÕÐæŽÿð‹+aue_readÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý#×hü$Hä öòáwl˜70‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Ušøó¹’ÿð‹+aue_lseekú*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6ÊF{é®·'üvº¢°äÿ§®]vRS<„äB±hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý\éG7%›G°²;lsL@š7²œ 6ÊF{é®·'üvº6ÊF{é®·'üvºœ ¯–ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý5ŽoÛÇI¤¨öÞq£ˆDyœ7bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯œ ¯–ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýÔ|ĽOŽÉ=ôJž7bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯œ ¯–ÿð‹+aue_write6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýа¥F{é®·'üvº¤ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±œ ¯–ÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýåÚý+ºGs–+WK/ê& 7$ªœ ù‹°âFzé®·'üvºа¥F{é®·'üvºœ ¯–ÿð‹+aue_fork +arg_pid1362hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1362ppid1282execbash20ÜS7[AIF¬•pd± (ýc +¹ždOèd#v:#i¢7²œ а¥F{é®·'üvº¥µîgµÑUµg¨eµÑc'œ ¯–ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +jþ»^A-Ò\­A` üÒB>20 +ÜS7[AIF¬•pd± (ý6‹=eCµ§Gj‹‹´wõ¤7²œ а¥F{é®·'üvºjþ»^A-Ò\­A` üÒB>|/usr/home/user/ripe-prov-tests-master/Linux/./remove_directory'ìAzX™¦}˜¹(/libexec/ld-elf.so.1œ ¯–ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine&./remove_directory ppid1337execbash20ÜS7[AIF¬•pd± (ý5G|&’þü7$ªœ ù‹°âFzé®·'üvºkbÂF{é®·'üvº¶–Éöÿð‹+aue_fork +arg_pid1364hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1364ppid1282execbash20ÜS7[AIF¬•pd± (ýd”¡_DG— +õz¬õCúþ7²œ kbÂF{é®·'üvº¥µîgµÑUµg¨eµÑc'¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýüÙï­^vO”¢` Xøö(É€8²œ kbÂF{é®·'üvº[Q…¾vVS¶¾4ÿCVaír/usr/home/user/ripe-prov-tests-master/Linux/./remove_file'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¶–Éöÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./remove_file ppid1337execbash20ÜS7[AIF¬•pd± (ýð¤HkN·\ŸjÄG2‚8<²œ kbÂF{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¶–Éöÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý­¥`+SûM–‡·‰G§«fâ„8@²œ kbÂF{é®·'üvº‰oý©äÇU¤©A)Eǹ ¶–Éöÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýi=¿iK#¼õOÑ$MU†8²œ kbÂF{é®·'üvº‰oý©äÇU¤©A)Eǹ ¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ý>#E³1E¸¯Ò¶ÜUšx¶ˆ8<²œ kbÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¶–Éöÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýÍ 7ØPM»–ñÓW?Š8@²œ kbÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýÎ<4Ë& OM®iâÆêŠkŒ8@²œ kbÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý2Ä V,ŸK$˜öomtXÔEŽ8²œ kbÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ý·iÜÑI¾‚mD—©“çë8<²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¶–Éöÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýÊ3_äêIW«LÔbßAÄ’82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý¥³OX`Hµ#Á9ÊÅ&6”82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý'ä?óŽKŽWS?¹n*–82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýÄýç–1@/“O]³ŸÃؘ82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýz!Þß:µJ3€ç(Âñ7®š82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýìXülônC¯?Éo Vœ82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýéVj‡!CLÕ‘ä¡yo Q{ž82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý`lY¹ÂNXŒÑøEü 82²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýyÓ+Fç¤MTŒéçc¬és¬¢8²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ýÛÌ8¿DY߫䤮¤8:²œ kbÂF{é®·'üvº¶–Éöÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ýšOv å…B½ °4ÀÈ@¿¦8:²œ kbÂF{é®·'üvº¶–Éöÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ýK:­Fƒº Eá¶q†¨8\²œ kbÂF{é®·'üvºtTXìƒî°R®ƒ.û"°ËAf/usr/home/user/ripe-prov-tests-master/Linux/out.tmp¶–Éöÿð‹+aue_unlinkhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ýC1l¹Æ*N  ïÍç9¾÷^ª8²œ kbÂF{é®·'üvºkbÂF{é®·'üvº¶–Éöÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ý‘çh$VAh¦2á‡mn¬8@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¶–Éöÿð‹+aue_readühostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý6yÓOBSc,Mo/`ã®80ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¶–Éöÿð‹+aue_lseekÐ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýkÃìF{é®·'üvºªù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±¶–Éöÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý‘KJåïÄJÒ³M«e¥IU¼°8$ªœ ù‹°âFzé®·'üvºkÃìF{é®·'üvº¶–Éöÿð‹+aue_fork +arg_pid1365hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1365ppid1282execbash20ÜS7[AIF¬•pd± (ýŽŽZ1b,@ׇ°ÿ]@ȵm²8²œ kÃìF{é®·'üvº¥µîgµÑUµg¨eµÑc'¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý OK¿žleöX¹´8²œ kÃìF{é®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¶–Éöÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýÿË84ª¡Eý‡smnúþÀ‚¶8<²œ kÃìF{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¶–Éöÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý>£ä)Rb@w£aOf訸8@²œ kÃìF{é®·'üvº‰oý©äÇU¤©A)Eǹ ¶–Éöÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýfb®/ H$šø]¾£2º8²œ kÃìF{é®·'üvº‰oý©äÇU¤©A)Eǹ ¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýGÔ¤¾RÇF ¢µƒd²°"¼8<²œ kÃìF{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¶–Éöÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýt]xÐØNÂßT±×u¾8@²œ kÃìF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýBwCý,F}Š©rÌËçU À8@²œ kÃìF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¯¬S— AЈýùÓìµ°³Â8²œ kÃìF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýOöSûê±A׌Ç,Ä QTÄ8<²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¶–Éöÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýµlÌ,²LB`”€d®4ðä,Æ82²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý]3¦!_:@Ö¦|Ø;‚ä'È82²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý`yqöIG–áJ°UâÊ82²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýà·ÑLÀN¬ºŽtXWRp¦Ì82²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¿Ç6ÈK BžRiZpgfÎ82²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý´O•Ft‡ƒú3CÐ80‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº¤ÏÓ¡ÿð‹+aue_lseekÚº+hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;h#´?ÃD¹‘Qá²m?Ò8@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eº¤ÏÓ¡ÿð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý€»e}¼9J½!è©•ÎéãÔ8JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºº¤ÏÓ¡ÿð‹+aue_sendtoÚ +ret_msgid501hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý;ö)1‚O·© +’LjçäÖ8JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºº¤ÏÓ¡ÿð‹+aue_sendto˜ +ret_msgid502hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýJøý›¦A›4‹Ü[Ø™Ø8JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºº¤ÏÓ¡ÿð‹+aue_sendto¬ +ret_msgid503hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýêñJÓêKˆ›cžL¬j€Ú8JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºº¤ÏÓ¡ÿð‹+aue_sendto˜ +ret_msgid504hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýŽRv„MRNûˆOmÛ½íÄÜ8Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºº¤ÏÓ¡ÿð‹+aue_recvfromÚ ret_msgid501hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýeÛÕ0[³C霈Œ€Ð$qÞ8Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºº¤ÏÓ¡ÿð‹+aue_recvfrom˜ ret_msgid502hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýV-@ú•LA§Å s­þ†+à8Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºº¤ÏÓ¡ÿð‹+aue_recvfrom¬ ret_msgid503hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¢×ÕÞï:Hÿ³Â \Ð0Äâ8Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºº¤ÏÓ¡ÿð‹+aue_recvfrom˜ ret_msgid504hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‡ãÌ'jBC‰}È0¥ã7ä8²œ kÃìF{é®·'üvºkÃìF{é®·'üvº’͈º¥ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý΄}ö8Fã¬'ôIÀ°³6æ8bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯’͈º¥ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý2¼y1\ÅF2£Q_þgtOè8bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯’͈º¥ÿð‹+aue_write,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý¢ÅF{é®·'üvº¬ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±’͈º¥ÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý1çUáØWN¬†ÊKçƒ6“ê8$ªœ ù‹°âFzé®·'üvº¢ÅF{é®·'üvº’͈º¥ÿð‹+aue_fork +arg_pid1366hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1366ppid1282execbash20ÜS7[AIF¬•pd± (ýàèÜiܘH +‡bÑ”óì8²œ ¢ÅF{é®·'üvº¥µîgµÑUµg¨eµÑc'’͈º¥ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýñ- :BÑ°J†âžY5î8²œ ¢ÅF{é®·'üvº[Q…¾vVS¶¾4ÿCVaír/usr/home/user/ripe-prov-tests-master/Linux/./copied_pipe'ìAzX™¦}˜¹(/libexec/ld-elf.so.1’͈º¥ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./copied_pipe appid1337execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"–ˆû‘@*ðvW@y‹á­áÝð8<²œ ¢ÅF{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf’͈º¥ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý(a±Cd¨7»'Èî-²ò8@²œ ¢ÅF{é®·'üvº‰oý©äÇU¤©A)Eǹ ’͈º¥ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý2ççql@f°é362—Õ¾ô8²œ ¢ÅF{é®·'üvº‰oý©äÇU¤©A)Eǹ ’͈º¥ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý8–¸McM8ºå†\K~¯Sö8<²œ ¢ÅF{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints’͈º¥ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý&aŽçwE€¾…ä~ ø8@²œ ¢ÅF{é®·'üvºXꎩð®…\®ð@JÌ…¼â’͈º¥ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýc‚Î9>C±® ’Myö˜ú8@²œ ¢ÅF{é®·'üvºXꎩð®…\®ð@JÌ…¼â’͈º¥ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýü Hy%An·.¨¥žÞ(ü8²œ ¢ÅF{é®·'üvºXꎩð®…\®ð@JÌ…¼â’͈º¥ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýØXßDÛGȹÂÉ] ‘¯þ8<²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7’͈º¥ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýúahPdUIÀ±¨í‡9Y€92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýúñ²7‘×HXŸhoEY³—‚92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý>€HƒÓF¬€ñv~‹¦ôC„92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýÿj±$ÚJK·ðêxÊUÌ,†92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýáœgÔ’.Ozœè¤ùøï܈92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý.ðk +SBNS…¦%&º ûŠ92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý®‰jJ&€' sÞÉxŒ92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýDv!½ŠA9¿ZÖkçÿŒŽ92²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýóAfXïTGÕ„Ó£t÷u29²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý“;PÔ£M®¹ÚuñX„u’9:²œ ¢ÅF{é®·'üvº’͈º¥ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýé\€~VH֯׫ÒÎï.Ÿ”9:²œ ¢ÅF{é®·'üvº’͈º¥ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýè/F{é®·'üvºô20ÜS7[AIF¬•pd± (ýè.F{é®·'üvºô20ÜS7[AIF¬•pd± (ý xFö‰Ö]íù>Hàè.F{é®·'üvºè/F{é®·'üvº20 ÜS7[AIF¬•pd± (ýó}y+SM펉•w‘ÒË–9²œ ¢ÅF{é®·'üvºxFö‰Ö]íù>Hà’͈º¥ÿð‹+aue_pipe ret_fd13ret_fd24hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýë!F{é®·'üvº®¢ÅF{é®·'üvº°äÿ§®]vRS<„äB±’͈º¥ÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýϵœQCNœ®é@Vƒì [˜9$²œ ¢ÅF{é®·'üvºë!F{é®·'üvº’͈º¥ÿð‹+aue_fork +arg_pid1367hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1367ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý•Ø´Ü@Cw·Tzž‘£ÿš9bÖœ ë!F{é®·'üvºí( ö~R¶ ~{‚~¯’͈º¥ÿð‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1366execcopied_pipe20ÜS7[AIF¬•pd± (ýH÷ÛÈ +Lr° ‰ó%‚%^œ9bÖœ ë!F{é®·'üvºè/F{é®·'üvº’͈º¥ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1366execcopied_pipe20ÜS7[AIF¬•pd± (ý¬ÄýØDc´>~[›bìž9Öœ ë!F{é®·'üvºë!F{é®·'üvº’͈º¥ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1366execcopied_pipe20ÜS7[AIF¬•pd± (ýjb¥hEÉœDwóßz 9@²œ ¢ÅF{é®·'üvºè.F{é®·'üvº’͈º¥ÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýµ_>.xK̬ày­k² •¢9b²œ ¢ÅF{é®·'üvºí( ö~R¶ ~{‚~¯’͈º¥ÿð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýJvsšLLÅ‹€ckR…Ò„¤9²œ ¢ÅF{é®·'üvº¢ÅF{é®·'üvº’͈º¥ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý ñð.öLp†æð¿BrÚy¦9@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'’͈º¥ÿð‹+aue_readèhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýÜÁÇÞ}GÚ…)6ssˆÃ¨90‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uì‹‚—©ÿð‹+aue_lseek¢†,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(F{é®·'üvº°°äÿ§®]vRS<„äB±hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý¥EÐ5õEY¦/Äe–¼¼éª9²œ (F{é®·'üvº(F{é®·'üvºª‘´ý¬ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýAÌŽ™äZAñºÐ"ÞŠÐ'§¬9bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ª‘´ý¬ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýAÏ]p¶¼G¶±4,°'€®9bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ª‘´ý¬ÿð‹+aue_write8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýŸÂF{é®·'üvº²ù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±ª‘´ý¬ÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýªaõÑÛLõ …Y﹇¢°9$ªœ ù‹°âFzé®·'üvºŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_fork +arg_pid1369hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1369ppid1282execbash20ÜS7[AIF¬•pd± (ýo¦«VMg­rh‚bBj6²9²œ ŸÂF{é®·'üvº¥µîgµÑUµg¨eµÑc'ª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +8: ¦ïaFÖ­¡µûCÐ pÀ9@²œ ŸÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼âª‘´ý¬ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý7YÚI+FÀ„è·ÙQ +Â9²œ ŸÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼âª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý‚ÁßM“mMSáAÄ9<²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ª‘´ý¬ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýk~[æ2vOçŽ`ñ²ž¢í‡Æ92²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýò„)ši"E±©! ýl«ÐÈ92²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý7Ç"ž:DA¥hzyü¦ÁÂÊ92²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýÚsTs »Dˆ¤»ò£Æ/pÌ92²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý©ð¢¥ÆO§¿rqõIÓÎ92²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý8:…ÐVCѼ=›Ah#ùÐ92²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý¤X£KÝGí‡b‡ç%Šk3Ò92²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýŽ[%ÊIæCñž!ë£~WŽÔ92²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý =˳LML@˜+Àr ;©Ö9²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý´žöñK#¾V»! +¼*íØ9:²œ ŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýk«†R§O#p£³]6Ú9:²œ ŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý×wËP‚$NRŸ¬PðÊ€Ü9²œ ŸÂF{é®·'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ª‘´ý¬ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine4bash ../Bash/datagram.sh appid1337execenv20ÜS7[AIF¬•pd± (ý¶(úMy·çd±+¡ÌÞ9<²œ ŸÂF{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confª‘´ý¬ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýUóÎâ¥UD°ÒÑâ§írà9@²œ ŸÂF{é®·'üvº‰oý©äÇU¤©A)Eǹ ª‘´ý¬ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÿ¡Ú_?@.­SÞ'¿mâ9²œ ŸÂF{é®·'üvº‰oý©äÇU¤©A)Eǹ ª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý㵆ð ÕH®Išbñz×Kä9<²œ ŸÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsª‘´ý¬ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýï?'§C@@P€±òŽ]ZáÂæ9@²œ ŸÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼âª‘´ý¬ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýMHæˆF%L—ç–d#PÃuè9@²œ ŸÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼âª‘´ý¬ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýRV»>¾ O9¼¯/¼Ñ­fê9²œ ŸÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼âª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý:¡Ìƒ}kH5±Ž-]Pì9<²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8ª‘´ý¬ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý¾úMlQ£CVµ»Áò«øÙî92²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýü>­ ++BVÓõ)~t„ð92²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýS´y_L€¹=2Þ_kzÀò92²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ým¢žšYrO"Œª aÒ©/ô92²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý>ùiÁsçB#žfjª¾$MŠö92²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ŽÒû[ìTjü“Nd†œ`F$xxÍø92²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýêù[¹CúL™?.<ƒãú92²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý]@­“ûI\‰J|ÅÙ¼4ü92²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýg¹4èÁD¢†¬] 6Tþ9²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý>­;çA¡ÔUnƒCÿL€:<²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8ª‘´ý¬ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýö·‰ >Cv–h`›ðϺÓ‚:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý}qÕÄJ;€}„Íÿ #„:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýI:mþs5C­’~ƒtºßdò†:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý½}¾, EíŽùWÜ_ýH¬ˆ:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÛYfæÇ€HV·ÕâàŠ:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýË"AëZ@O±18TÝ+/Œ:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýš¹Ýÿ,FÁ¶ Þ64s齎:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýô}Šzþ:L÷´Ûi¯;×À:2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýà‰ ‹KL°}ItK—î’:²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýý°~GÙ¦B—ˆ“ñ†à½”:<²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1ª‘´ý¬ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýõ ž¾gaEÅ–A‘åp4^7–:2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÕý>ƒwK_¼jůW³{˜:2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýf¶¯õ‡€DkƒRò¥ñ¤Ð š:2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýJÝL|@¡«ŒÅ©ë'žƒœ:2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýߘ[ÿFÕ›ûYð(—äž:2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÉö%R=’A[“ôÄ׌à:2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý_z¥îÝ Aé–‚`WÌÏ¢:2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý7 +C@K5ªï¹ŠÚ•rè¤:2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýŽA"ÄUE½¨ÔÓÐi™i/¦:²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý´KËf‹A'”×æ#>Ï5—¨:<²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ª‘´ý¬ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý+žr~YCDϤðA¡ =Ûª:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý»¢˜—IA7’^µ£š!4¬:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýõÌÊ”IDFÛ§>óôâ®:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýUÑo"ÂJz°Dâ•þ'ì9°:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¾%²÷cD²‰U_ê‰x‹²:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý'ƒÛ_hK䶉ȵ5F´:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý°×8€ø:JKªµññ ’¶:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÕèZznWI²•>z¼¡Äü¸:2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý/ëýC{H;¡i°©®Íº:²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¾¨ÇŒÁL‡Œ¹¶ÑÆÕ`¼::²œ ŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¤.Vƒ[ G̾’iÄ.¾::²œ ŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý@Ï'‰—¶JK¾åºº÷WYÀ::²œ ŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýø QàXöAT¿±~++ˆÂ::²œ ŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýnøßÏùÎDª¿b’ú#5ƒÄ::²œ ŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý›pG°À„F±g«'žƒÆ:<²œ ŸÂF{é®·'üvºí( ö~R¶ ~{‚~¯/dev/ttyª‘´ý¬ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýFиuq{Biˆ]œãu^È:²œ ŸÂF{é®·'üvºí( ö~R¶ ~{‚~¯ª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýªŒFçÃEC‚ºjMc³ÑXÝÊ:<²œ ŸÂF{é®·'üvº8: M‚õˆ;2àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýogJ/V[Jf­¬—Ëð™IÍŠ;2àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ý©VæoÿEOƒô@®óR‘ Œ;2àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýëL V¯Noª\=g4²JŽ;2àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ý==¨sl!HÅ”s¬”ŒÄÐ;2àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýléŠ)²IÀ‡Ê®Ní7Lq’;2àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ý#äžñníF"¦³ÿ_e¼œ”;àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369exec +sleep20ÜS7[AIF¬•pd± (ý)_ˆŠ¿áME•ô¯îÓ–;:àœ  ŸF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýaδúO@Jšßk[-IØ;:àœ  ŸF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýÙlaÕMJŒrÜSýš;@Öœ  ”›F{é®·'üvº‰oý©äÇU¤©A)Eǹ ª‘´ý¬ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý>qÁ¶BA©Û{ÔMûúœ;Öœ  ”›F{é®·'üvº‰oý©äÇU¤©A)Eǹ ª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýÀÐ.ä¾ÎBE‰½hæ-™–ž;<Öœ  ”›F{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsª‘´ý¬ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýPקøEB˜Q¼„Ì=Ôv ;@Öœ  ”›F{é®·'üvºXꎩð®…\®ð@JÌ…¼âª‘´ý¬ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýŸáWÖ„5O©ˆÀcI!ßk¢;@Öœ  ”›F{é®·'üvºXꎩð®…\®ð@JÌ…¼âª‘´ý¬ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýZöÓˆ¿ºN¤„Èç¬Þ{×­¤;Öœ  ”›F{é®·'üvºXꎩð®…\®ð@JÌ…¼âÀ↭ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý#cÍÈ÷óGOˆ‚`êØê¦;<Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7À↭ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýR«òtúF„ÁBÑáG`>¨;2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý£qJ¤ßB°¹ÞÙGö_ª;2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý“Ö@ÔvN„ûÖ?È[¬;2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý,埦8çF)©‘#žAáF®;2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý›¸"TLÎëyÉ‘%°;2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýú‰…BN¶‡n#Ób·Ý²;2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýŸÅžH-«n,®Tll´;2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýÃcÒ´L³Cƒ“@–X>}’¶;2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý+ËhµÅNŽ¡\`pr&¸;0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨Æ¼ö°ÿð‹+aue_lseekÊß-hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýH«)dªªIèŽH9Oÿº;àœ  ŸF{é®·'üvº ŸF{é®·'üvº€ÞùÄ´ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýÍýü§·C›ƒ¨˜µ$µ+¼;<²œ ŸÂF{é®·'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.db€ÞùÄ´ÿð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý8¼hÂIp£ÏqíøåúB¾;@²œ ŸÂF{é®·'üvº–Ø%™wyïR¹wT’ï9€ÞùÄ´ÿð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýþ×K°à}½·xÍ+À;@²œ ŸÂF{é®·'üvº–Ø%™wyïR¹wT’ï9€ÞùÄ´ÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÆ3ç.>IŒ—!Ø9–ð`Â;@²œ ŸÂF{é®·'üvº–Ø%™wyïR¹wT’ï9€ÞùÄ´ÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý ×ÇdBžöŒ!¸ÛÄ;²œ ŸÂF{é®·'üvº–Ø%™wyïR¹wT’ï9€ÞùÄ´ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý%ÐYnBeN€™ Á—*Ó‘âÆ;@²œ ŸÂF{é®·'üvº8: Ö§â;2àœ :Ÿ0F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ€ÞùÄ´ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ýÊç°ÛI¡jU®¹fßä;2àœ :Ÿ0F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ€ÞùÄ´ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ýnñÑõœ'G;’%›O"‹W æ;2àœ :Ÿ0F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ€ÞùÄ´ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ýöÕ\½CKm!襊’è;2àœ :Ÿ0F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ€ÞùÄ´ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ýD?N¬ÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý­ß*´D2DA§\A×c$Á ˆs'N©¼tœZ@š¾ÿ¤<@²œ ;<ŸF{é®·'üvºXꎩð®…\®ð@JÌ…¼âŽ¢äÉ´ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÂݬCFs¦F›Iœo,\¦<@²œ ;<ŸF{é®·'üvºXꎩð®…\®ð@JÌ…¼âŽ¢äÉ´ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý÷œË6V%L¯®Ùˆôc=÷`¨<²œ ;<ŸF{é®·'üvºXꎩð®…\®ð@JÌ…¼âŽ¢äÉ´ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý±?x›ÞKæ¡Z6²“Fàª<<²œ ;<ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Ž¢äÉ´ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýõܯâÕ.BÕ»žElM¸Ì¬<2²œ ;<ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œŽ¢äÉ´ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýgo5ýC ˜ÑºÉϘkN®<2²œ ;<ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œŽ¢äÉ´ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÙ<m…ÌE˜®°·äèò:°<2²œ ;<ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œŽ¢äÉ´ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý ™÷ºLC­]g烉‰Ô²<2²œ ;<ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œŽ¢äÉ´ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýò-ÏkÅ.I^¤ôæ] <´<2²œ ;<ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œŽ¢äÉ´ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý-“¬zkO¹‚ûò Œôf¶<2²œ ;<ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œŽ¢äÉ´ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý!5ë†È’MR”¦Æ¾Æ¸<2²œ ;<ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œŽ¢äÉ´ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýèhvôIœ‘A=]«q붺<2²œ ;<ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œŽ¢äÉ´ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý;òÁÜ¡D8› (§FSû¼<²œ ;<ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œŽ¢äÉ´ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÂ5Ûš…Í@Á¬K±–œ'¾<:²œ ;<ŸF{é®·'üvºŽ¢äÉ´ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý uWåhG欪Ž‡^-YáÀ<:²œ ;<ŸF{é®·'üvºŽ¢äÉ´ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýP-f0ž¢M8œVJo ;îÂ<0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_lseekÊß-hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝd,å›G:–à¬5|ÖáÆ< ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+20ÜS7[AIF¬•pd± (ý°¼ +¦Eƒ—k碤*ÎÄ<@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜Û‡¼n6@‹å ê ]ã¤Ê< ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+20ÜS7[AIF¬•pd± (ýø‚6³ïL¦Éùjþ@mÈ<@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýv#ÃÈBßn±u9‚ìMÎ< ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+20ÜS7[AIF¬•pd± (ýÔ$ôrM3H{‰2+A=à»Ì<@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²wáA¥ÛAF Ï«Ë”Ý®=Ò< ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+20ÜS7[AIF¬•pd± (ý„Ÿîþ@ªCz“9„©÷¾<Ð<@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)»ü®;Mô³…+ü&?ìOÖ< ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+20ÜS7[AIF¬•pd± (ý·qÂA}¬¢Á?Æ®ë!Ô<@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýsMVÏHUþ¯Ú¦ëØ<:‚œ Ê +ÙKFzé®›'üvº¤Ú¶ƒµÿð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}ûü*?}@ФÝü©<5Ú<@✠Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤Ú¶ƒµÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý G¨þ`×B¿ oÒªéÓÜ<@✠Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍûÆv“@U‰ÐÙoÞ<@✠Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadÀKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøO¹­IÛO —âᦦNõäà‰Å©w”¦:âúG º4‡dÁøöB”ŠÆÛþÒÔœQÀ=²œ ÖEF{鮸'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1î˜Þ‘¼ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ý»’Þß%Jªá<Ô±ÙUÂ=<²œ ÖEF{鮸'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confî˜Þ‘¼ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýƒ° o†Kšˆ1U¸.l]õÄ=@²œ ÖEF{鮸'üvº‰oý©äÇU¤©A)Eǹ î˜Þ‘¼ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÆÝc˜uDë¬G/hýÔ:•Æ=²œ ÖEF{鮸'üvº‰oý©äÇU¤©A)Eǹ î˜Þ‘¼ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý7 p½C¤¹ŸúÒˇÈ=<²œ ÖEF{鮸'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsî˜Þ‘¼ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¾½ÌCøŽöNÇ-÷nÊ=@²œ ÖEF{鮸'üvºXꎩð®…\®ð@JÌ…¼âî˜Þ‘¼ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÉ_¦ÅŽrLw¥Bç¥oZ±Ì=0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UØçžÀÿð‹+aue_lseekÜÂ/hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(ˆw”Eü½â74DŒÎ=²œ ÖEF{鮸'üvºÖEF{鮸'üvºªÛÙÃÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÀ Îq¹øMŒ¶5™+ãÀx~Ð=bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ªÛÙÃÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý<1Ô)ÕE ‚vUKyÀáÒ=bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ªÛÙÃÿð‹+aue_write2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýq¨F{鮸'üvºÂù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±ªÛÙÃÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý%®2«éÓKë¦D|+pRA®Ô=$ªœ ù‹°âFzé®·'üvºq¨F{鮸'üvºªÛÙÃÿð‹+aue_fork +arg_pid1377hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1377ppid1282execbash20ÜS7[AIF¬•pd± (ýw„ÏËF}-pòh¯Ö=²œ q¨F{鮸'üvº¥µîgµÑUµg¨eµÑc'ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +8”HH}æT¦}d5À20 +ÜS7[AIF¬•pd± (ý0i®VÌDŸ®TõÕåCôbØ=²œ q¨F{鮸'üvº8”HH}æT¦}d5Àx/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ªÛÙÃÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineH/usr/bin/env bash ../Bash/named.sh appid1337execbash20ÜS7[AIF¬•pd± (ýÖ«Cœ„E©äDøö PðÚ=<²œ q¨F{鮸'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ý<Êø̈_K“y¿_öÎÜ=@²œ q¨F{鮸'üvº‰oý©äÇU¤©A)Eǹ ªÛÙÃÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý µFFAOQ¹+Ì\a#Y_Þ=²œ q¨F{鮸'üvº‰oý©äÇU¤©A)Eǹ ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý ©²ûLB˜ª¿•ÄÃ`qÏà=<²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ý+Gàös=Es²Q|p«:º‡â=@²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý‡n K¿®WĉËCœkä=@²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýL¼ç•‰O˜‘‰7] +æ²æ=²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý°aKV,àG€ŠG8Yµ¿¹è=<²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ªÛÙÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýØ2õLEpAy‡“léØ“Wê=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý¥H”Oü»J9¤…‹Üfh˜ì=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý*^¾oKÙ¹.­ /Žî=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýe¸ß8Bƒ¹—Gx%ð=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýH'·lHAµ¿—:²a"9%ò=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý€Ï8#AMÝŽ‰Æ³\C/ô=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýP/8r MðŒKO˘8œö=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý…t”´hKâõ“Ì7ŽÌŒø=2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýçþçžx¨I-§>7&–ú=²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýê… >=qLà¼fï‰4höü=:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýR +î®úK‡–nÝ +eœ þ=:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýPÚLMB¬¡µ1}ž¬€>²œ q¨F{鮸'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ªÛÙÃÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine.bash ../Bash/named.sh appid1337execenv20ÜS7[AIF¬•pd± (ý À\hÄH²€ÀvZýã4‚><²œ q¨F{鮸'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý,S›76MZ¬­ý*Èüí„>@²œ q¨F{鮸'üvº‰oý©äÇU¤©A)Eǹ ªÛÙÃÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¾ÎÆ¿¯ÂAÿ®ãu¿¶†>²œ q¨F{鮸'üvº‰oý©äÇU¤©A)Eǹ ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýįwì¡ÛF¢­æÞΛÇŸˆ><²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý_pÚóÑK£!';ï©ÔŠ>@²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÊÁýzØGp‹–¢ó2lŒ>@²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý®åï#‚~@ ±ÖÊ ÷ +%åŽ>²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýo˜nÌbB;¶ËØÓÌÏ"œ><²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8ªÛÙÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýKÖÔÆ4Dל®ç!C+£’>2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý«OÍ×&|A¡©®B÷ä”>2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýßÔË^O^„TmÈx¼ù–>2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýd’¬÷¹B|³4xõž’U˜>2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý&yåÈqD2–ÌÀ1Ò.àš>2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý-1²ÉçÍJU·QŽdäSŠQœ>2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýM‰Ç÷jNš¼# ¹­üÍž>2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¥JÍõèÊD±¿½Hª–,!? >2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý>Ï-öGá ÏRþvÕ÷Å¢>²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý\ÓØWíSN¼ÕÎ^ªb5¤><²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8ªÛÙÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ŽÔúÛ¬[ÜD•Ah’ve2–þ¦>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý ˆZÊ93F€â_!Ä>¾¨>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýblUtG|¸¢cVHfbª>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýq§lG¶¨™ç}ää8¬>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýR/ÞÚ¼A· +®1b®>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý\f¤ ,–B¾’*]9¾‹Z°>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýW:%lK•@¿™JŸ²²>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýQÆÚˆeo@T‡»ì ?ç!z´>2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý=8¾Ô‚\H…›iŠz|5`¶>²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý‰¾˜xÖdJ䃘yÂí±„¸><²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1ªÛÙÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý.¥Õç©O…0æÔÔ)^º>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý^pØÒHñGü½†—Fº‚˼>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýà˜Á‹±C‡„CÝfšŒ2±¾>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý´øý+«DHæœî¢÷tQ¤ÙÀ>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýþÝ i­L¥SÐ2ïªÂ>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý?dIõ”ãF«´ÍÐ C!Ä>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý–;')5@u¾Û]œ¹·Æ>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý…w_4¼K‚¼p7ŽQÖ“ È>2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýâÏWq;ÈI«á µKªÊ>²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýIÎëþ6G`‡L{+¤Õõ›Ì><²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ªÛÙÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýl8¸K»fNþ²Òÿ ªÌÃÕÎ>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýð^«ÏOJ“lC) ÉÐ>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý9‹–)D£ŽóÒ÷óDZÒ>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýMzÎâNd‚„;W*ù7Ô>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý`ÝBzAD‰‹êî“-Ö>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý—Û SâQB¿#X8C=Ø>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýH¥XI@¼²²D˜Y%˜*Ú>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýù¹_žåD’! ý¿úÜ>2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¾è8PÝKG••!GˆÄb8Þ>²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý' øÉÈOqŽZ5Lb ´ˆà>:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý %«ž¶ÝK%¢°úUîòÚ[â>:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý‡ õ§š¾Ca… }Þ×v;ä>:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÇÎ{ ó1HžŽ©îÚHÖOdæ>:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýË7ÔØtO†›‘¹ ¥ÐdŽè>:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýç¿#÷¡Eµ¤1ÊÞä~xüê><²œ q¨F{鮸'üvºí( ö~R¶ ~{‚~¯/dev/ttyªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý—×1M\±Ô8ØgÙÂÿì>²œ q¨F{鮸'üvºí( ö~R¶ ~{‚~¯ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý÷cÇOLÄ¥üÒú¯I>¹î><²œ q¨F{鮸'üvº8”HH}æT¦}d5Àx/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.shªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý”–¬$¯ÅB[¿L’iw?ð>0²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýWÂâÁþtO—§‹JøÕGÝò>@²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýBÆ^C„¯3°nL„² ô>0²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýè†<rJþQÓmÝö>²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÅÝ”)=IŒ„žÁøi~P¹ø>"²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¸%@×ÛN¯ݘ—߈"ú>"²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý;@dêiNq¦q¸Úõ¤%3ü>0²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýÞgO2áìJÁ…qü_ tGþ>@²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_read¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý矼b¸AM¼÷W.…ñ€?0²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_lseekúhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýrAF{鮸'üvºÄq¨F{鮸'üvº°äÿ§®]vRS<„äB±ªÛÙÃÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý߆ײyI>ŒˆÖ ÎàÔ ‚?$²œ q¨F{鮸'üvºrAF{鮸'üvºªÛÙÃÿð‹+aue_fork +arg_pid1378hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1378ppid1337execbash20ÜS7[AIF¬•pd± (ýl¿V©/NÖ…îÞqNÏ„?@²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_readBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýÅûÅMKM÷½"ÁMp÷ü~†?0²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_lseekžhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýrLFF{鮸'üvºÆq¨F{鮸'üvº°äÿ§®]vRS<„äB±ªÛÙÃÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýü‘y¬8žDK‚[œfÜííˆ?$²œ q¨F{鮸'üvºrLFF{鮸'üvºªÛÙÃÿð‹+aue_fork +arg_pid1379hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1379ppid1337execbash20ÜS7[AIF¬•pd± (ý­yVbËsL_¸ÎÂñS 6{Š?Öœ rAF{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1377execbash20ÜS7[AIF¬•pd± (ý½ûØŽ×AO{V!BÔŒ?<Öœ rAF{鮸'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nullªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execbash20ÜS7[AIF¬•pd± (ý{p8í(C$¼üÈ?퇎?Öœ rAF{鮸'üvº3P ÓK€X‹Ó«·Ø€‘^ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execbash20ÜS7[AIF¬•pd± (ýˆ{‡ðäI£¡?•¸³&Ë?àœ rLFF{鮸'üvº8”HH}æT¦}d5À‚ëÕãÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1377execbash20ÜS7[AIF¬•pd± (ýYçwn¡GD@¨AUýÇ]¦‘’?àœ rLFF{鮸'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1‚ëÕãÃÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1377execbash20ÜS7[AIF¬•pd± (ýW˜ù%’D¦ˆ"òÝêÜn”?<àœ rLFF{鮸'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf‚ëÕãÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý +°¼OhÅ‘¦V‘ÅÜö¶¦ß¥20 +ÜS7[AIF¬•pd± (ý-d²ËOþ¸ª'ý(ЄÜ–?Öœ rAF{鮸'üvº°¼OhÅ‘¦V‘ÅÜö¶¦ß¥t/usr/home/user/ripe-prov-tests-master/Linux/./named_writer'ìAzX™¦}˜¹(/libexec/ld-elf.so.1‚ëÕãÃÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine ./named_writer appid1377execbash20ÜS7[AIF¬•pd± (ýÓPuW)z@¼ªÇ„…d˜?<Öœ rAF{鮸'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf‚ëÕãÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý6ñðe’Å@t®ó6ÓzkÔš?@àœ rLFF{鮸'üvº‰oý©äÇU¤©A)Eǹ ‚ëÕãÃÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý}*¿›WK-€i.>u¿dÐœ?@Öœ rAF{鮸'üvº‰oý©äÇU¤©A)Eǹ ‚ëÕãÃÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýÍØj‘ÛN´žá“§È ûž?Öœ rAF{鮸'üvº‰oý©äÇU¤©A)Eǹ ‚ëÕãÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýÂñµ¦£ Bô¶7ÿ ³ +dù ?<Öœ rAF{鮸'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints‚ëÕãÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý§‰×ǘHó‡ +sæŒ\¢?@Öœ rAF{鮸'üvºXꎩð®…\®ð@JÌ…¼â‚ëÕãÃÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýj²¸ŽWMk‰ýâ3ìöá¤?@Öœ rAF{鮸'üvºXꎩð®…\®ð@JÌ…¼â‚ëÕãÃÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý›þ”êžMgŸù3«–¦?Öœ rAF{鮸'üvºXꎩð®…\®ð@JÌ…¼â‚ëÕãÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý$9åyÔ'@«¸ þáóPÐé¨?<Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7‚ëÕãÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýRéï|/dM¨›¬gk‹ïª?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý -‚’‘N5£-|dŽy\¬?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"––üÀ ­eÊOª‡Ô¼V‡Xn®?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýUýè]y«CÀ‰i„=Í8°?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý~»:ªE`¹%cVªš\²?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýãD -C¥§µ.&}Ã<Ñ´?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýóA.íEíªÂy¼ ‡å¶?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýâ­wõ†Cú—¤Ö->0¡¸?2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýŽñ>kàˆIJ¨¬Ÿz2†Ð·º?Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýñ½äålZI­°ÀX%™Wå¼?:Öœ rAF{鮸'üvº‚ëÕãÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýúr•òNlF2Š"ÅÂ6(·v¾?:Öœ rAF{鮸'üvº‚ëÕãÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýZú²RÕ0El…©ex‘ÆI À?bÖœ rAF{鮸'üvºí( ö~R¶ ~{‚~¯‚ëÕãÃÿð‹+aue_write6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýK"±•H¥;œ«°áÂ?àœ rLFF{鮸'üvº‰oý©äÇU¤©A)Eǹ ‚ëÕãÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý^è)dIg•è¬¾¯ãûÄ?<àœ rLFF{鮸'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints‚ëÕãÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ýëîHß—.@ ÈH>Z…m;Æ?@àœ rLFF{鮸'üvºXꎩð®…\®ð@JÌ…¼â‚ëÕãÃÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ýTÊÙº¡B®êj’ïøX…È?@àœ rLFF{鮸'üvºXꎩð®…\®ð@JÌ…¼â‚ëÕãÃÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý+ÔŽ>·VNè—hÓöÛi&Ê?àœ rLFF{鮸'üvºXꎩð®…\®ð@JÌ…¼â‚ëÕãÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377exec +sleep20ÜS7[AIF¬•pd± (ýäÔÒpgDAåµ÷Z­VöÌ?<àœ rLFF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7‚ëÕãÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ýȪ(!³9ÀÔ?2àœ rLFF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý}{i åEÙ– ð§{¼Ö?2àœ rLFF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ýq¢u'v0I‰Œ<”DûºØ?2àœ rLFF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ýϺäã#Jšžœý¶H¼Ú?2àœ rLFF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý«ÚJ¬FNLv¹*ö?O(ºÜ?0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UöÓÜïÇÿð‹+aue_lseekÎœ1hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýn(¸OßÍB<žà:p*¸:ØÞ?àœ rLFF{鮸'üvºrLFF{鮸'üvºÜãø¯Ëÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1377exec +sleep20ÜS7[AIF¬•pd± (ýjL÷0ËìC³˜ñ)¬ ÆÔà?<²œ q¨F{鮸'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.dbÜãø¯Ëÿð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýÖß?‚@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýj@2—G,¬WR¯Bÿ¨V„@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýks·Ùx‘IV (\â[)4†@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ý·Õ“ÔBËIÐí¾•Mjˆ@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýz¹-'”òEȈ±HB~H Š@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýy1z£¡ GH¢äY±H—Œ@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýØëÓU}@“­À¤m••ÊŽ@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýV±H8F@¡òôB’Q'ˆ@2àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ý8%E4F­qÛ ™ZÜ»’@àœ 2uF{鮹'üvºÞA`ì•øËQ¸•bxñË"œÜãø¯Ëÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ý)|$B¾á÷‹ÿ]·€”@:àœ 2uF{鮹'üvºÜãø¯Ëÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýs¢©[ oM«¨Û´ï&u–@:àœ 2uF{鮹'üvºÜãø¯Ëÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýà ÑÞáH¤©1•x¡±˜@bàœ 2uF{鮹'üvºí( ö~R¶ ~{‚~¯Üãø¯Ëÿð‹+aue_write6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ý +êüöµßh_†ß!h™j20 +ÜS7[AIF¬•pd± (ýïÏÏÕ÷œC݇ej.ñÔÇ’š@<àœ 2uF{鮹'üvºêüöµßh_†ß!h™jh/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmpÜãø¯Ëÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ý +s' F{鮹'üvº20 +ÜS7[AIF¬•pd± (ý™w+àòHsƒãÐk¤ ±œ@<Öœ rAF{鮸'üvºêüöµßh_†ß!h™jh/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmpÜãø¯Ëÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý +s' F{鮸'üvº20 +ÜS7[AIF¬•pd± (ý]“S½‘KHz½É3µÑHiž@bÖœ rAF{鮸'üvºs' F{鮸'üvºÜãø¯Ëÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýhR1h´/BÞ¢ÀXóThÄ @bÖœ rAF{鮸'üvºí( ö~R¶ ~{‚~¯Üãø¯Ëÿð‹+aue_write$hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýæÛÍ-’ãHl²î‘hr_€¢@Öœ rAF{鮸'üvºêüöµßh_†ß!h™jÜãø¯Ëÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý§Ã…)N +”j@mïc¤@Öœ rAF{鮸'üvºrAF{鮸'üvºÜãø¯Ëÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý¬¿“:$C-—¶/;í,ý¦@@àœ 2uF{鮹'üvºs' F{鮸'üvºÜãø¯Ëÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýÒÿ¿ÉB‚æw—Å['‹¨@àœ 2uF{鮹'üvºs' F{鮹'üvºÜãø¯Ëÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ý4¼ªÝÉL!€¸š/u¿ ª@bàœ 2uF{鮹'üvºí( ö~R¶ ~{‚~¯Üãø¯Ëÿð‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýê¬Ô>K3•“?± +à¬@àœ 2uF{鮹'üvº2uF{鮹'üvºÜãø¯Ëÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1377execnamed_reader20ÜS7[AIF¬•pd± (ýd¤©t?bH¯XecK'®@@²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀÜãø¯Ëÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýQ³á5åFµ‹3¬¬·T°@²œ q¨F{鮸'üvºq¨F{鮸'üvºÜãø¯Ëÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÇ%ÅåF½€ZÎì´²@@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Üãø¯Ëÿð‹+aue_read¶ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý³‹ŽnÍ,A_…>ÒkWÓHG´@0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Üãø¯Ëÿð‹+aue_lseek¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý÷AF{鮹'üvºÊù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±Üãø¯Ëÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý"Z~ÞNRŠ AOzóEĶ@$ªœ ù‹°âFzé®·'üvº÷AF{鮹'üvºÜãø¯Ëÿð‹+aue_fork +arg_pid1381hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1381ppid1282execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¢žûíi¨¥­ä@ —?Ÿ +æšÒ%¸@0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢Æ¼Ïÿð‹+aue_lseeküè1hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýï…ê¹ëE¡JG1á]^úº@<Þ› µxÏFzé®’'üvº €ja·*XYª·CÿùX?Ü/etc/cron.dÂò§‚Òÿð‹+aue_open_rwtc +flagsmodeè +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1execcron20ÜS7[AIF¬•pd± (ý§`g†Â!IĆBIyCÀG¼@Þ› µxÏFzé®’'üvº €ja·*XYª·CÿùX?ÜÂò§‚Òÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1execcron20ÜS7[AIF¬•pd± (ýsÇO¡÷ïB§i/ÞöªãѾ@0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_lseeküè1hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýMŘ”gJœœ*FS\Ñ)ØÂ@ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+20ÜS7[AIF¬•pd± (ýsQ:1L©K¸iΞÀ@@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOJhÝCÛEœ¼èCíä7"Æ@ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+20ÜS7[AIF¬•pd± (ýN=AìzM!œ×¶bîvÄ@@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'žxÈIOÀ¸sïz!3¤Ê@ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+20ÜS7[AIF¬•pd± (ýôn%±¦BL!˜ØŒ+¶æèÈ@@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:Ôº…ZEé°ð¤½ë +º_Î@ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+20ÜS7[AIF¬•pd± (ýI Å÷H7¾¨É,ó=ÛZÌ@@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹¨h(æO¨¼Â5lÇ1öÒ@ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+20ÜS7[AIF¬•pd± (ýÊ«¢sÖL*)ÄpP9 …Ð@@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýDèJTv„AҎѦ™”œÝôÔ@:‚œ Ê +ÙKFzé®›'üvºÆÜÉêÒÿð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6Ë3–í¼Cî©Ö…#68<Ö@@æœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýó¹³££B»’µ$‹3qØ@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚ©*dJԵú~¾=Ó7Ú@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadìLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæ}–§ GK–H*æ‹@VíÜ@b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆÜÉêÒÿð‹+aue_writeÖMhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘Æÿ@J°¹kž¿éѽÎÞ@bæœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆÜÉêÒÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýgwM(G?ˆ˜bEåà@@æœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýA†§ˆëKc¤ä’X-04â@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýò f6+&Nü‘Êþ{2CZä@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadÊ>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(AðƒÇJ;æ`ä ³…æ@b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆÜÉêÒÿð‹+aue_write´?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßØõùHt˜¿¿íÒ¡Yè@bæœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆÜÉêÒÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCô¡ ‹HH”QÔ›C°Eê@@æœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4ËvzxB’ñ×¢]Ÿõì@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +ŠŽÿôJ‘B< /i’àî@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_pread¤NhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI±r\eIH†ŽzŽûÂe°ð@b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆÜÉêÒÿð‹+aue_writeŽOhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ‚W„òAMS–BT+MEegò@bæœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆÜÉêÒÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOΙR‡ûBô¤±œá`‹†ô@@æœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýANñÝE.›frl·ö@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŒö¦a‹Gº‡°û; +¾ø@@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_pread¦LhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&‘‰ÍXÒGä´‹:„qÀl¥ú@bæœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆÜÉêÒÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«Šœt)UO¾ã^tgÒü@@æœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆ1¸ŽN˜\ò‰yjxþ@Jæœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÆÜÉêÒÿð‹+aue_sendtoà +ret_msgid520hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏý‰ñ[OFµMªssÃyh€ADê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆÜÉêÒÿð‹+aue_recvfromà ret_msgid520hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý…1£Æ$bNع>yYÞ‘—Ù‚Abê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÆÜÉêÒÿð‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýnÒ¯‚H§Àå½»œ?¾„A²œ ÷AF{鮹'üvº÷AF{鮹'üvº´‡¯ôÒÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýP-Œ`N‹¨¬þµ a†Abªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯´‡¯ôÒÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýûˆÚl L(ˆ ÃMþ!¾3ˆAbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯´‡¯ôÒÿð‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý¨‘F{鮹'üvºÌù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±´‡¯ôÒÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýp7Ã.ÑL¶•äG·ý!ÒêŠA$ªœ ù‹°âFzé®·'üvº¨‘F{鮹'üvº´‡¯ôÒÿð‹+aue_fork +arg_pid1382hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1382ppid1282execbash20ÜS7[AIF¬•pd± (ýœŒDydHêxhøýx¬ŒA²œ ¨‘F{鮹'üvº¥µîgµÑUµg¨eµÑc'´‡¯ôÒÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +~ì[y*UVªy›#U´Q20 +ÜS7[AIF¬•pd± (ýeSþûÔÁF;€Â°à›–KŽA²œ ¨‘F{鮹'üvº~ì[y*UVªy›#U´Qn/usr/home/user/ripe-prov-tests-master/Linux/./shm_exfil'ìAzX™¦}˜¹(/libexec/ld-elf.so.1´‡¯ôÒÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./shm_exfil ppid1337execbash20ÜS7[AIF¬•pd± (ýXr¾pTA‡B-\°ŠVA<²œ ¨‘F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf´‡¯ôÒÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýc+ͨã@H·8¿ÏÍ.c’A@²œ ¨‘F{鮹'üvº‰oý©äÇU¤©A)Eǹ ´‡¯ôÒÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ý¨‡OˆËNF’ï;&¶8*”A²œ ¨‘F{鮹'üvº‰oý©äÇU¤©A)Eǹ ´‡¯ôÒÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ý#Ímäo4Bg†PcúIÞ–A<²œ ¨‘F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints´‡¯ôÒÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýáž.“)Hk‘t” iÏA@²œ ¨‘F{鮹'üvºXꎩð®…\®ð@JÌ…¼â´‡¯ôÒÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýöׇ†ŠF†›ýsaNk+ªšA@²œ ¨‘F{鮹'üvºXꎩð®…\®ð@JÌ…¼â´‡¯ôÒÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýr¨„:[OA˜)ö¥˜bœA²œ ¨‘F{鮹'üvºXꎩð®…\®ð@JÌ…¼â´‡¯ôÒÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ý>7ü¼>„I…¹­M-bF-žA0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®…ðÿÖÿð‹+aue_lseekÀµ2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒ‘¶ÆE²¥7X½¿Š Ab²œ ¨‘F{鮹'üvºí( ö~R¶ ~{‚~¯Öå’ÄÚÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýÖl@ßMõ›ï‹åý™¾G¢A²œ ¨‘F{鮹'üvº¨‘F{鮹'üvºÖå’ÄÚÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ý¥¯ÛTˆCß +=6' B¤A@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Öå’ÄÚÿð‹+aue_read– hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý ]Ì D6˜££’§I}i¦A0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Öå’ÄÚÿð‹+aue_lseekˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýD¯ +F{鮹'üvºÐù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±Öå’ÄÚÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýˆÉДq@z¥ÿŠ‰ |¨A$ªœ ù‹°âFzé®·'üvºD¯ +F{鮹'üvºÖå’ÄÚÿð‹+aue_fork +arg_pid1384hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1384ppid1282execbash20ÜS7[AIF¬•pd± (ý³â±¯í:BŒ0I=A•`¡ªA²œ D¯ +F{鮹'üvº¥µîgµÑUµg¨eµÑc'Öå’ÄÚÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý½1ÔA0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ÃÞÿð‹+aue_lseekÎã2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?2c…Gkui æÖA0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+aue_lseekÎã2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýß¿*×öB?“Óþlæ!M"ÚA ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+20ÜS7[AIF¬•pd± (ý†òýŸ™rLÍ´-Ú|[ù +ØA@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_<¬ç8½Ej¦> ˆørù +ÞA ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+20ÜS7[AIF¬•pd± (ýæ’»W©K ªH¶]‹‚#¼ÜA@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýuŠaeREQŠ0v<0l¢ÇâA ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+20ÜS7[AIF¬•pd± (ý⬳-‰¬E^²ôëäXê¼ïàA@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›Wß'+C¨ŽÒÁ.TùÜ¢äA:‚œ Ê +ÙKFzé®›'üvºžööÝáÿð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„ÝÍ-‚ On~Éñ™þËSæA@èœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V žööÝáÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘ éy +J=Æ]"¸”à†èA@èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýú$×q7•M÷³à~£æÛ®êA@èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+aue_pread¼LhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýNnšÔbPJh«½&Êò¤ÑìAb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºžööÝáÿð‹+aue_write¦MhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýeöü÷ÏFIJ‹³÷W˜îÙîAbèœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡ážööÝáÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²Á²iG®1+EhøpiðA@èœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V žööÝáÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÔ^Å€÷DR¿¿±™DÀêwòA@èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘1”©†LN<©_: ”áý·ôA@èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+aue_pread†.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñq§j÷úA@èœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V žööÝáÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§l(IŒ;T‰[eÙüAJèœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºžööÝáÿð‹+aue_sendtoà +ret_msgid521hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷^x¥OK­ƒày(ZŽgþADê› µ dôFzé®{'üvºµ CjFzé®{'üvºžööÝáÿð‹+aue_recvfromà ret_msgid521hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý*ˆf3B¡êŠxZ Ì—€Bbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKžööÝáÿð‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýôœsªJO¿™³Ë:‚BD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºžööÝáÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆÞèünNÀ”ši3»\;„BD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºžööÝáÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýr+8Þ ~Lb£9v+ø†BD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÐ¼ùæáÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý °Þ¬K¿¿Ä^”ÐäˆBD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÐ¼ùæáÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·¼Ñ‡d›Fï¸Ù4þž¥ŠB²œ D¯ +F{鮹'üvºD¯ +F{鮹'üvº¬Ý²âÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýôÓþ+'õ@¤·]Vy(MÌøŒBbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¬Ý²âÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýÂçü#D¡zi°}é'GŽBbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¬Ý²âÿð‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýßµ¹F{鮹'üvºÒù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±¬Ý²âÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý”,Ê[ªDOÿƒ1w¸Ÿ4B$ªœ ù‹°âFzé®·'üvºßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_fork +arg_pid1385hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1385ppid1282execbash20ÜS7[AIF¬•pd± (ýÄëÚH¯éDM­+·E„X³þ’B²œ ßµ¹F{鮹'üvº¥µîgµÑUµg¨eµÑc'¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +ýêÝ•ÓV•KóÆÓq20 +ÜS7[AIF¬•pd± (ý°|ŒÆóH•¬WW|é³Ò´”B²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓqz/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¬Ý²âÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineJ/usr/bin/env bash ../Bash/signal.sh appid1337execbash20ÜS7[AIF¬•pd± (ývž$iŸçFŠ½­t,Ýù–B<²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ý¡& o1ùG±°Ük"SM˜B@²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýÓ‹ÿêKã“à¢è~yšB²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýÞ˜[y)Gm²$Û3å'÷’œB<²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýu²ªõ^¯A¼–z +šªï—ŠžB@²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý6±¯ÓF—¢Ö¢|…r:m B@²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýê«_½ëºF2Ž0­h&ÓÊ¢B²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýTn¢ïÚK³‰2Y=ɲ黤B<²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¬Ý²âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýb2Y‰ü«J½™Øà3ȦB2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý>G0 Cœº?üóúV0¨B2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý²S7© @X¤¨öÛj"0€ªB2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýÙŸØN»ãH‡«¹ÎôФ¸¬B2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýpxj¥A0„†l°•Bü®B2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýù›öx6Cü¿£#˜‚F#°B2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýL*Œ™ž¥Oq±¼ÏžŽ²B2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýa²šg…£FÓ–ÖEX÷“¨´B2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýõÌÒøªG¥fÚ“`“‘¶B²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý_4æ¢ßC°£•?ýµŒÇh¸B:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý~ŠD¨©t" ÑºB:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýŽÕCmŒM±¸ö #kN¼B²œ ßµ¹F{鮹'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¬Ý²âÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine0bash ../Bash/signal.sh appid1337execenv20ÜS7[AIF¬•pd± (ý‘ìo+fLQ¬Í}Ž^. ¾B<²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýž‘ác=D!«zâ²µˆÀB@²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý§•ê<@]ML´‰ë¤è‰¸ƒÂB²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý²+Ú›?K§½9É|ä½ ÄB<²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýü¯dwMo=¾Ãxõ²ÆB@²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý }aTŸUN½kÁ¡1c×÷ÈB@²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÏ0Ò0™B¤Ù·jZKˆÊB²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý#]/ÎKFºÛtï.ÅÔEÌB<²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8¬Ý²âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý™» +Ñ×`JÓ®¡ˆ8ÌðþÎB2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýAãTN,¢BﶳlxõGÎ ÐB2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¯¿+ä÷Kʧn?Á®Í: ÒB2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý#ë”$æ"O|šAtpuCd+ÔB2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý*£&}ÀD%’†Éã/³`ÖB2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýáöóCÍKνÄæ—Åô|ûØB2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýDbÇþ€QNd„6\7§'°@ÚB2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýHšÄC)M·¼H$tB8öÜB2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý\ˆZŸLò»Ø·kÅ@eÞB²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýéfFœ(OIºm—˜wÆS‚àB<²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8¬Ý²âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý¬fæ 8CŸ‘åÝ rË„âB2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýa>’ÂĬK\‰ÉsÕ"ª^ÞäB2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý§îÞNÖÈGq˜¶ee†?õæB2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"Ž¼ü0뎙&NMô¹Z',~¦^èB2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý‘4__i»Dÿ¥Ô|~R¶gêB2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýDfUiC᳽łŽê¸ìB2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýòæ’£ê¯HÑ–ÁP²ŒÓÒîB2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¾!Ë×¥€H$†TS¨ .FðB2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý/Ÿ3IùK„‰æWNˆxEòB²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý€eYÿÀBž]×Ê=?¢ßôB<²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1¬Ý²âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý,(² æHº„Kfˆ í98öB2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý†ÖIÿvF_Fs’( +éMøB2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý1ô©óBá¯}œÊ®FúB2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÌl國OÙeˆ` ÇÞ¼üB2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÿÊLãÚCp´N›°¹o”þB2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý°ÑOMªDtEVë€C2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý„{„u)‹D"žƒ—+7ZIÖ‚C2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÎEWnBúµŸ÷=YŒ„C2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýXûõºS,FqºëtAqåT†C²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý#Š‘ÕYIy·ý Hõm§8ˆC<²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¬Ý²âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýƒW ܤ@ý¦ÍÆsñeHGŠC2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÀóèZÛ@퇱—%ñ—RƒŒC2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý-î¼{¾Nœ‰›q5ò^ŽC2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÆ#K8dAg„7èÒ#;çvC2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý·Oß]ÙEæš<í„¢ã’C2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÿÍZ‰#MŒ °)0}”C2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýs^ ö;ÉJü‹‘3Ó–C2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý::ûŠK-±d}š Ñ1˜C2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý=<õýíDP–É1¨m1ÔršC²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý3oï^¼þI4Î ïÊ[r2œC:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýbŸÒ°ñdM=ºbé߯ÔÕ>žC:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýioØ‘O·±kݤ!ÜK C:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý†æa +|m­R­>Á­ËP20 +ÜS7[AIF¬•pd± (ýùï‰#-L(¨æ•vÖ +øšD<àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËP$/lib/libcxxrt.so.1Ž£˜–âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý6}%wðdNŒ™VÜé/˜œD2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý÷oôGªp®v„±žD2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý{[x­oO]˜øšÃ¡¸N D2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýÉšöGÉ,Iî´3F4ªž¢D2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý«¤%ÜÒÖJoƒŠÒ 4*”¤D2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý§±q€— +E³$O¸S"ü’¦D2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýßWtWÙ)Jj58? +vh¨D2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýô¸KG¾N<‚„da>BçªD2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýìüQdxB¯Žºz•'b¬Dàœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýCí×ê‹KJ¥Q›Ö«Ç®D<àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜/lib/libm.so.5Ž£˜–âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýV]ÂÔjOCµBÓäÿDý°D2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýÌ.LÓ~¡B¡§Â¶k{Ÿl¯²D2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý·D¥h_%@&¨[­We±´D2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýG†jõeHå»CrS>Qb¶D2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýï‚ØÜ?K¿•XTsUú¸D2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýw㺠+HfFS¢á)pì–׶ºD2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýÒr«üx¤Fó±ÙÒö1&¼D2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýx®}×#FȤñçñÁk¾D2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýHŸò·‰KY¢þ‡ükV…ÀDàœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý +§ÌÃq#DT£°5DmP20 +ÜS7[AIF¬•pd± (ý^Ú°EñüB6†Ñ‡'…ÂD<àœ à‡çF{鮹'üvº§ÌÃq#DT£°5DmP$/lib/libgcc_s.so.1Ž£˜–âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ým­õt<H¨„¯'„_ÄD2àœ à‡çF{鮹'üvº§ÌÃq#DT£°5DmPŽ£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý%o"BM¡²« :yÑ[ÆD0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uä­æÿð‹+aue_lseekô€5hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸tg£ä@ȌɊMµí•ÈDÖœ à’„F{鮹'üvºà’„F{鮹'üvº¸‰¸ãéÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýt ‡ÎGr¤¢$0|g ÚDÖœ |¾€F{鮹'üvºtd:Ñ7ø³V¸7Ç‹¶³EÒv/usr/home/user/ripe-prov-tests-master/Linux/./signal_client'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¸‰¸ãéÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"./signal_client appid1385execbash20ÜS7[AIF¬•pd± (ýE^‚Ô#@¨¹›09‚åÇÜD<Öœ |¾€F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¸‰¸ãéÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýùùѸñ@!¬ÇÿÐ`@–‰ËmT?º’æD@Öœ |¾€F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¸‰¸ãéÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýåË1ÿ“(Kí‡L +‹Ûš ièDÖœ |¾€F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýßÇ;¥o@¬¡}Zä TñêD<Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ(/usr/lib/libc++.so.1¸‰¸ãéÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýj ,CB2ĵüŽßŸìD2Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý¾AÆßÂKÀWÿ ‹5sÉîD2Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý—¥¯aC7¨Ô€¦©’ðD2Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý_ ðǬK"¾z5óXQêòD2Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"†êú=DÀSKj 6®–l  ôD2Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_mmap€€Õ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýß++I¼öE¶á©·€‹)ºöD2Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_mmap€€Õ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýù\Û^Fò¨/P½ëä›…øD2Öœ |¾€F{鮹'üvº†sya–„[–a½WÛ„jÙ¸‰¸ãéÿð‹+aue_mmap€Àˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýATÿ£m­R­>Á­ËP$/lib/libcxxrt.so.1¸‰¸ãéÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýŒ%=dÝCÂUœ4 ½(€E2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý“˜Y_8ËHyÍXEqÅ-‚E2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÝ•ïÞ=@J1‹ˆ5;t¾=~„E2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý Áb`8Mì‚—AÏÈí†E2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý"–c‹#¾Bô°SűAnhÙˆE2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýØÅDBMÛ«kÛeÊÍ^ŠE2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÓd}åFɮݽ <µÒ£ŒE2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý}BÆá]ù@HŠ“–/ú°9ðŽE2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýæ/¢¹!B¹“k¯·â«ÉEÖœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýä®õ«;AžϋsZÄnC’E<Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜/lib/libm.so.5¸‰¸ãéÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý’Á·JÈ€¢õÏö*’2”E2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý¢Ç0/A<–óëÔó wö–E2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýï€þÔC‚ë"´6«˜E2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýªmµ’BüŸ^Û÷] +‰šE2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý6Ië×VGg´Í.ÓœE2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý‚"ÕÇMI¡¸Ô.’R¹„žE2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýgˆòRYK1†_ò#¤ƒE\ E2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý³¬ÒìÑÀB§ž‡ðŒM\¢E2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý‘Šwž¾öFõŒ.´S€ÒÔ¤EÖœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýŒe=‘Ù«N:¶¸rǘA*¦E<Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP$/lib/libgcc_s.so.1¸‰¸ãéÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý¸ÅÔ\ß™@÷ºœ,g 1%¨E2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý6¹¾÷^%EëŒã« /ÏëYªE2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýTmÊ‹JŸ»°ÞCwïü¬E2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýgªÉü@ª»ÆÇle‘b®E2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÎ12U™±Fƒ»L mаE2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€€¼ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý)ïNö“3B@¸>ÁH —d²E2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€€¼ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýP±—+xNDp•4Æþ}>Ó•´E2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýy.ÍS)Mõƒz²M·qÝF¶E2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÛ¶¸…ºA6´[­Šžˆ-¸EÖœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýn£ë¥)ÆK™¦˜Aâ{Õ­¶ºE<Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¸‰¸ãéÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýíkåY—I9® ûêž‚¼E2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÙÕä)ÄHÓ@\T¶ö¾E2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýú÷!µŽõE§þuXRÃ{ÀE2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€€Ä arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý._/ÄÀCå—}ÇØÉå‘-ÂE2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€€Ä arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý¥ƒ!cˆGC§½g¼Ø±qÄE2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€€ƒ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýäéñCj\J ˜£Ò7yÜúÆE2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€€ƒ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý³[å ¼H÷³ÈíRL ÈE2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý£®ÞD BO­rv)§>³(ÊE2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý–¶©œ?šI•Õòž"LŒÌEÖœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýWbT® ÛL/‰c@ˆ;)ÎE:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýžzò<@ŸNÞ‘}éöW3gÐE:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýP›K½H´¨Â‰"÷óUVÒE:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýΞÎÒ=êL¢¾ÙZ¥køOªÔE:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÊ8î‚\GN½Ù3Іþ)ÇÖE:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý?¦~áJÝ®¦MÕD´EØE:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý +Ó‹IŸ_xUŸŸ€YExž20 +ÜS7[AIF¬•pd± (ýYtƒÑš“EPŸnEÄQâ¼£ÚE<Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExžf/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp¸‰¸ãéÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý»ù¶—*Dµˆ´‡oÅßÊÜE@Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÕ{?+J@!À0½&ôD|ÞE@Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý,!7îà«Jö›N=–ª¤ÚàE0Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý‰Nyìº;EÀµ`ûNñC«âE0Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýQ¡ðäÜZK†‰–æêekIäE0Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý&6yÿcKMˆuÔ „t€æEÖœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý1-aHŠLÅ”Î!ƒAž,èEbÖœ |¾€F{鮹'üvºí( ö~R¶ ~{‚~¯¸‰¸ãéÿð‹+aue_write8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýfâ‘å¼JdŽU +¿=;mêEÖœ |¾€F{鮹'üvº|¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÊFb¤, LÑ®Åþ"¸9áìE\àœ à‡çF{鮹'üvºÓ‹IŸ_xUŸŸ€YExžf/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp¸‰¸ãéÿð‹+aue_unlinkhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýõ´òçVàCb§RÍ™Nª˜îEbàœ à‡çF{鮹'üvºí( ö~R¶ ~{‚~¯¸‰¸ãéÿð‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý„Üq9/ß@±°Öíú]² ðEàœ à‡çF{鮹'üvºà‡çF{鮹'üvº¸‰¸ãéÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýrXáI¯“ÿ Plg’úòE@²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¸‰¸ãéÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýn!P¥ÂÂBD©èœ3¸Ñî˜ôE²œ ßµ¹F{鮹'üvºßµ¹F{鮹'üvº¸‰¸ãéÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý©ØI‰ŠÇEu¤9¸çò…Y¨öE@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¸‰¸ãéÿð‹+aue_read° hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬ÂûRŒøbšEa´žƒSùAöøE0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¸‰¸ãéÿð‹+aue_lseekîhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý}þÄF{鮹'üvºÚù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±¸‰¸ãéÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýìw¾³gÖAkˉweõ$;úE$ªœ ù‹°âFzé®·'üvº}þÄF{鮹'üvº¸‰¸ãéÿð‹+aue_fork +arg_pid1389hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1389ppid1282execbash20ÜS7[AIF¬•pd± (ýã{Á-âGý”&¶¹¦ñÑüE²œ }þÄF{鮹'üvº¥µîgµÑUµg¨eµÑc'¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÆý*¶¸©Bî·˜ìSÇÎÄÀþE0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U‚ÞÂîÿð‹+aue_lseekÈŠ6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4QÑÙVEì¶t¥ÏaÕÄ߀F0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_lseekÈŠ6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6ª?­ª)O·”4MfY^œ/„F ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ý‚ ’|ïNØ’™ùHáxe΂F@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒgÖaãMQ¨´èƒêpˆF ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ý³Ÿ&?­HH”Gi!^ …q†F@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆ•¾l%E¿–^Ìñ ×ŒF ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ýÍwMCÍJŠºüŸ«)aÖŠF@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýß9(¯ÉIJˆgÎøŽeíwF ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ýÕ¨476JµŒ(K9ðlŽF@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨ë¥£$kC}«¤kT‹[€L”F ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ý­`û²~åJÊ_ž5B7ïØ’F@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7ã'¬^EX¾'Mô"Q`˜F ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ýº«MDˆ@º…`Z+pY–F@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýk½Ö3sy@±^4ž(ä>œF ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ý!uI2$šH™•àÔÃ(Ð 1šF@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢›OG7½Yî§øpîËžF:‚œ Ê +ÙKFzé®›'üvº¬ÀµÐðÿð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyw#¯}Lƒ­N®Ô‰H F@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýúÂ-Ï1‹OùªDˆ Ï^6H¢F@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+X:<JŠ±ÊNzõ¯úi¤F@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadìIhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯^¤1NMÀ‹ÐÌHc·šÊ¦Fb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬ÀµÐðÿð‹+aue_writeÖJhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘wô ‹zFbŠÈsª‘nÚ¨Fbêœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬ÀµÐðÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£DÙ¼öGÛ™ª)^µD?ªF@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®•ªìÜMýŽ’¡TðJÙ|¬F@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýci8¸o@E¨¨×{HÖ…®F@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadàChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxR–pܦHU²3cð6íS°Fb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬ÀµÐðÿð‹+aue_writeÊDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7sT‘™cM¾¥ÆcX¶H»à²Fbêœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬ÀµÐðÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåÑvG;b·0Cb¯Ó´F@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…Šää.O…¦üý{_mù(¶F@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœn4ÚþuKí•ÌéJ}Éw=¸F@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_pread®IhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_o¤ÍA@Šã(Ÿõ:ºFb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬ÀµÐðÿð‹+aue_write˜JhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’Þ2^øÇN +´4—ë E<ò¼Fbêœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬ÀµÐðÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýºœâ~ãJY¥´—žöÛ7¾F@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýΛ#³A¦O™“›>ÆÙÀF@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨µ›)\cHª—|Àg&Ò¢ÂF@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadŒFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýIM–€VM~œ'„Üåã/ÄFbêœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬ÀµÐðÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?¦¥ÔÎOOÇ”Ùöyæ;ÆF@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdÆ"¢£âNŸ©h©“æQÈF@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼®WmÔÛMM¦€/Nr1e“ÊF@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadŒGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýíA~1§iCþ$²Eë“ý?ÌFbêœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬ÀµÐðÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½Ä_ŸGŽ%—-… +ûˆÎF@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5ç“»CÃF! ¶3®l)ÐF@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðýçpªN‹ƒ¿@‹bfÃÒF@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_pread¸BhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙ¾ÄV«Få½8;×Д;ÔFbêœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬ÀµÐðÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷#¯: ÛN”a6¾"pFAÖF@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý";T“Ø@w¬Õ¯oo:ö‡ØFJêœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¬ÀµÐðÿð‹+aue_sendtoà +ret_msgid526hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyúˆïÜLˆõ‹ “¦øÚFDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¬ÀµÐðÿð‹+aue_recvfromà ret_msgid526hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýœ5‘¬¼OÅ·Gt>1ýžÜFbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¬ÀµÐðÿð‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÇr!Ö]AÕœ*­­¡ÏÞFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=¯+lòyHŽ°ý¥þú8àFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýj_V;WSBž¿!\U:Ö†âFb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_writeöFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýMmÏcODhÂí¥ÙÒÎ÷äFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡&ÔýÊ@HÖÿçB99†_æFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýç3±Mªæ‘ÂE&TèFb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_writeöGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.ÍÕî>Lʯc¸¡Å‹bêFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèÙ³ãðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰ëyø¦âE¥½.Ñ@äX ìFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèÙ³ãðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýz3íëoDÃýäÂB"L2îFb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèÙ³ãðÿð‹+aue_write¢ChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-.žwKÄHBš6R«~¤œðFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°©“íðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýªýiÞ·ÌMØ|)iþðÍòFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°©“íðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýé"ÁeržC‘ˆ€ÿôFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°©“íðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1,‹´¥NŸ‚¢ rZµkäöFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°©“íðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*Öeó_AG¶þ¤¼›‘UeøFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŠÄðùðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½Ø=HÎÝF\½uî´‹–úFD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŠÄðùðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»ù©qà@l -ÌÆ/gøÓüF²œ }þÄF{鮹'üvº}þÄF{鮹'üvºœýö¦ñÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý>ó:Ûì6BfƒR™ò ¬`þFbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯œýö¦ñÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýù‚EI2‘©¤G¦ä~€Gbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯œýö¦ñÿð‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýðF{鮹'üvºÜù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±œýö¦ñÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýæ.¤ª¹üG2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý•É$ŠäwB˶/‚(»¿æúþG2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý1î¯'½J/“Ý]pRÒ:€H2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý]‰’`G ½RtMÜ”#¨‚H2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýüÑÿâMC5´ªKDÙvI–„H2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý»¦V Dܱ\ŸðìJ'†H2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÙ·ýUXÚK•G‹ƒS?-ˆH2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÙ6t’noBF¤ÿüFÂÜŠH2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýЀ”%&=JÛÔ¤a ¹TºŒH²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý+„—k Lþ‚â?ƒ3KålŽH:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýý1ºAŽ÷D‚»Ž½RÖá©H:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý?íÃ$³N¿Zö d¸šŒ’H:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýªUÇ*ÆsB`°Xã~‚gÙ”H:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýúP¹ëEJ„¶º'2-à„–H:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýØî¹ÊâiJ°äþz¢Ë@%˜H<²œ ðF{鮹'üvºí( ö~R¶ ~{‚~¯/dev/ttyœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý1UcÒIŽ½øÊÃ-¤šH²œ ðF{鮹'üvºí( ö~R¶ ~{‚~¯œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¬[íÈgÌCvšàªÇ£k©œH<²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{z/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.shœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý$ÙÕ±X@ð›6&ŽCᦞH0²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý,'Û$Z A¢²lžhü EV H@²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÛÆ®ýLô—±¸“ +dú±¢H0²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"–Êúô]@:«JF1±ÀV›â¿V¤H²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý2ÍVdòBÒŠôÇ,¶”/a¦H"²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¾f:uzCFð_»Fé¨H"²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýrgÚw!Húž{å¯s±#qªH0²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýwæïó!C¢šbJ’´O̬H@²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_readÄhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýŽ 5N÷qEk¸²óæY®H0²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_lseek€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýÞF{鮹'üvºÞðF{鮹'üvº°äÿ§®]vRS<„äB±œýö¦ñÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýx_ä]~H £{÷ap¿žÇ°H$²œ ðF{鮹'üvºÞF{鮹'üvºœýö¦ñÿð‹+aue_fork +arg_pid1391hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1391ppid1337execbash20ÜS7[AIF¬•pd± (ýòòìÒKJÚ³áðë§K³-²H@²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_readDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý§þ”í¸îHljâ§CK]«´H0²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_lseek¤hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýè›F{鮹'üvºàðF{鮹'üvº°äÿ§®]vRS<„äB±œýö¦ñÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý㤵‹˜óJ<±=½~Vð†Û¶H$²œ ðF{鮹'üvºè›F{鮹'üvºœýö¦ñÿð‹+aue_fork +arg_pid1392hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1392ppid1337execbash20ÜS7[AIF¬•pd± (ýƒÂ4ÐîI¡½Å K±y¸Hàœ ÞF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1390execbash20ÜS7[AIF¬•pd± (ýaõË‚dBm½¦¥¡´|wBºH<àœ ÞF{鮹'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nullœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execbash20ÜS7[AIF¬•pd± (ýœoš=ÓÆOä6)ÐN àÒ¼Hàœ ÞF{鮹'üvº3P ÓK€X‹Ó«·Ø€‘^œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execbash20ÜS7[AIF¬•pd± (ýOù`CJ~­ˆÄ–-­v¾HÖœ è›F{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1390execbash20ÜS7[AIF¬•pd± (ýJ¿ûGE·. +”ÔÀHÖœ è›F{鮹'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1œýö¦ñÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1390execbash20ÜS7[AIF¬•pd± (ý›÷lSlQNŠÿ¥…A«D­ÂH<Öœ è›F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390exec +sleep20ÜS7[AIF¬•pd± (ý +²w”\·²mÄŒ”E‰20 +ÜS7[AIF¬•pd± (ý/®ª”¸L­¼ñ‡‹ÉD8kÄHàœ ÞF{鮹'üvº²w”\·²mÄŒ”E‰v/usr/home/user/ripe-prov-tests-master/Linux/./stream_server'ìAzX™¦}˜¹(/libexec/ld-elf.so.1œýö¦ñÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"./stream_server appid1390execbash20ÜS7[AIF¬•pd± (ýVj°M]—zÑRu…×ÆH<àœ ÞF{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý÷ê²éÀÕDć„І˜ÈH@Öœ è›F{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390exec +sleep20ÜS7[AIF¬•pd± (ýö‚Æ «FQ¹ÀÃzE‡ÊH@àœ ÞF{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýÈ?è«<ÔNѪèÁ™ÌHàœ ÞF{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ý£ØOVMد½:£ôxÎH<àœ ÞF{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý´§„œDˆ€Ž®^iªÐH@àœ ÞF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýj þ¬ŒBIòži×Ë4O­HÒH@àœ ÞF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý¡q]ýÎO +–C¨<ÒåÁÔHàœ ÞF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ýÐÞÌðÐL¯Ÿer¬ñ«7ßÖH<àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7œýö¦ñÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýªE\eOP¸~+QDXÏXØH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý#Âsÿ1‡Bu’¡«>ÂX_ÚH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýuK殡ßFC7ÄB×ËÜH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý°˜#Ï<)@©n¥¦æÞH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýüNá‘,F±xë=î ¸PàH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýN V(ùTC©_kà ûâH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýö •È!@û6ªgE7 ãäH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý¬5 +ßJÅ¡‡ÞX=bŒæH2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý¡° ‚­C<¬Û÷á4ûèHàœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ý©z&¥SµIž¨–9Z!-êH:àœ ÞF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ýØ“|Þ8¯Nr©¹Öl‰ŒëìH:àœ ÞF{鮹'üvº„ñÞ¯ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ý +H F{鮹'üvº20 +ÜS7[AIF¬•pd± (ý°€ÄN6C)“cpiX )UîHàœ ÞF{鮹'üvºH F{鮹'üvº„ñÞ¯ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ý +KÕF{鮹'üvº20 +ÜS7[AIF¬•pd± (ým–1†'LF ¡¶átŽëZ"ðHàœ ÞF{鮹'üvºKÕF{鮹'üvº„ñÞ¯ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ýÒ^/…]G¸¡PT8u½‡îòH0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uøõñæõÿð‹+aue_lseek¢ 8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµÄŽs˜æNë·Î„\û5ÜôHÖœ è›F{鮹'üvºè›F{鮹'üvº¤›„óøÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1390exec +sleep20ÜS7[AIF¬•pd± (ýú©"ŸÝCV¼Ñ]BˆõƒöH<²œ ðF{鮹'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.db¤›„óøÿð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýÅ<â`qMX³Ñ‘à¤H.øH@²œ ðF{鮹'üvº–Ø%™wyïR¹wT’ï9¤›„óøÿð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý kD/EC«ŠþI‘Ð]èúH@²œ ðF{鮹'üvº–Ø%™wyïR¹wT’ï9¤›„óøÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýȼ¸6ü@.•ôt%KˆªüH@²œ ðF{鮹'üvº–Ø%™wyïR¹wT’ï9¤›„óøÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÓ7Æ•OǽzzÜj 1¥þH²œ ðF{鮹'üvº–Ø%™wyïR¹wT’ï9¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýŸÉë^\»K_‹éÇ„5ý¦þ€I@²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{¤›„óøÿð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý²›=F{鮹'üvºâðF{鮹'üvº°äÿ§®]vRS<„äB±¤›„óøÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý¼ÛJòÌL‹Œ¸¶UziÇ‚I$²œ ðF{鮹'üvº²›=F{鮹'üvº¤›„óøÿð‹+aue_fork +arg_pid1393hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1393ppid1337execbash20ÜS7[AIF¬•pd± (ý Õ„L»“¯Š gS „IÖœ ²›=F{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1390execbash20ÜS7[AIF¬•pd± (ý +¬ø„( žuUž Üo¥u20 +ÜS7[AIF¬•pd± (ý+ÄÃ6VG5ˆÖÑúS†IÖœ ²›=F{鮹'üvº¬ø„( žuUž Üo¥uv/usr/home/user/ripe-prov-tests-master/Linux/./stream_client'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¤›„óøÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./stream_clientppid1390execbash20ÜS7[AIF¬•pd± (ýÉN)jvUKˆõÉ^FðˆI<Öœ ²›=F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¤›„óøÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý£a¤Fb¶xò Ë=ñ”ŠI@Öœ ²›=F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¤›„óøÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýT?dBÆ™@™ªlš^RôÔŒIÖœ ²›=F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ý¾Fƒ0U`C4¡± 6NŽI<Öœ ²›=F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¤›„óøÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýŒÇJÿLqWm:\@HI@Öœ ²›=F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¤›„óøÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýÑ’âÃ@NŒVEI] ½„’I@Öœ ²›=F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¤›„óøÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýgùSXëMÛ©zëršå&X”IÖœ ²›=F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ý™Ú9—Ab§@˜pD¥ä–I<Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¤›„óøÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý˸– œOï¹ô¨‹òZR˜I2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýRpC…$8KÚ…£L>T??šI2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýB\BgKéœÄoqn¤ìœI2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýHüü]Æ2O¡•n>«KžI2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýzÃÚRTL®òžúÝŠú I2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý•ÿ$‡G:½l§È9X&¢I2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýŠ]*’«®Cü¯Ï¦‚i½þ¤I2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýwaXí‹J¶ð¾»º-3ô¦I2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý®ÜãWL—°˜Ÿµwú¨IÖœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ý!×nÎ ÆGÙ¦¨EÝÊ9ªI:Öœ ²›=F{鮹'üvº¤›„óøÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"²’üÚ<­½>KщµzŸ¦¬I:Öœ ²›=F{鮹'üvº¤›„óøÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ý +³ F{鮹'üvº20 +ÜS7[AIF¬•pd± (ýYõ{o6"F-ŠÿwÔËnñ¶®IÖœ ²›=F{鮹'üvº³ F{鮹'üvº¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ý +³4F{鮹'üvº20 +ÜS7[AIF¬•pd± (ý‚éf [@ùŸjP& ¿ñ‰°IÖœ ²›=F{鮹'üvº³4F{鮹'üvº¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ý³ +×F{鮹'üvº0.0.0.1˜¤0.0.0.1Ä620ÜS7[AIF¬•pd± (ýO/F{鮹'üvº0.0.0.1Ä60.0.0.1˜¤20ÜS7[AIF¬•pd± (ý³¯F{鮹'üvº0.0.0.1Ä60.0.0.1˜¤20ÜS7[AIF¬•pd± (ý7÷S x LѶ‰ø¾.7²IÖœ ²›=F{鮹'üvº³ +×F{鮹'üvº¤›„óøÿð‹+aue_connecthostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390address::1port3490execstream_client20ÜS7[AIF¬•pd± (ýär€CúI‹«²2´IbÖœ ²›=F{鮹'üvºí( ö~R¶ ~{‚~¯¤›„óøÿð‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1390execstream_client20ÜS7[AIF¬•pd± (ý²f‚æAŒ‹”hœ3W$™¶Iàœ ÞF{鮹'üvºO/F{鮹'üvº³¯F{鮹'üvº¤›„óøÿð‹+aue_acceptret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value4ppid1390address::1port +10508execstream_server20ÜS7[AIF¬•pd± (ýÂXólþA˜¬MÞʸø¥¸Ibàœ ÞF{鮹'üvºí( ö~R¶ ~{‚~¯¤›„óøÿð‹+aue_write@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1390execstream_server20ÜS7[AIF¬•pd± (ý³'-F{鮹'üvºäÞF{鮹'üvº°äÿ§®]vRS<„äB±¤›„óøÿð‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýVc® AL»œÈAInZºI$àœ ÞF{鮹'üvº³'-F{鮹'üvº¤›„óøÿð‹+aue_fork +arg_pid1394hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1394ppid1390execstream_server20ÜS7[AIF¬•pd± (ý¯»íŶMì«n Âïø¿¼IJìœ ³'-F{鮹'üvº³¯F{鮹'üvº¤›„óøÿð‹+aue_sendtohostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1391execstream_server20ÜS7[AIF¬•pd± (ýÀ†J@îœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ®€’Äÿÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–÷«H‹ß@«©’iÎ3íMˆJ@îœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®€’Äÿÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆ$©ƒèkIÔ£oº‡®WÌôŠJ@îœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®€’Äÿÿð‹+aue_preadèMhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒŒ îIص˜úÈ9ÒŒJbîœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á®€’Äÿÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýb0C¯B‰„hà2¬áÒŽJ@îœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ®€’Äÿÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.ƒ‰kŒ{A‡…•wˆ0JJîœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº®€’Äÿÿð‹+aue_sendtoà +ret_msgid531hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœ[Óœæ¯G*¢ëµ‹µì’JDê› µ dôFzé®{'üvºµ CjFzé®{'üvº®€’Äÿÿð‹+aue_recvfromà ret_msgid531hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý_ÿê9NKO¤°§×Œµ?Z–”Jbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK®€’Äÿÿð‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýèlr­½J²”o8Öq3†–JD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌžöÍÿÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸ›ýà I@§“4Õ3õe˜JD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌžöÍÿÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑbGVñ”KͱcÑ®zø`úšJb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌžöÍÿÿð‹+aue_write¤MhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[ …X”YHܸõm—²¤c‘œJD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌžöÍÿÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËžx¤N¼Ý#‡"A2žJD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌžöÍÿÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;P±|K® ñ”1c>Á’ Jb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌžöÍÿÿð‹+aue_writeÒNhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÔXl ‹Aĉ¿ƒÞÓ)M¢JD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœïÞÖÿÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆDordH«¬ö…Ò´ƒœ¤JD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœïÞÖÿÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ‹¦LâCõ†Il„?(¦JD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºà’Ýàÿÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–Óg@6$GF½H,m‰‚œ¨JD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºà’Ýàÿÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýïMk +'E»®‘¼Ž6 x†ªJD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ÝÓêÿÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓKk JµA«mÀ£;¬JD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ÝÓêÿÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³{ØF{鮹'üvºæ°äÿ§®]vRS<„äB±hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý9úbØ©Lœ\Ž­B‡5(®J²œ ³{ØF{鮹'üvº³{ØF{鮹'üvºº™Í¶€€ñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý‘fOÁ‰JO¼ÑÔŽ’=Xx°Jbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯º™Í¶€€ñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý=åò,É.Ku•1Yÿ?ô²Jbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯º™Í¶€€ñ‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý LŸëF{鮹'üvºèù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±º™Í¶€€ñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý#í7n§Cf¢¤ƒŒÛç­Õ´J$ªœ ù‹°âFzé®·'üvº LŸëF{鮹'üvºº™Í¶€€ñ‹+aue_fork +arg_pid1396hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1396ppid1282execbash20ÜS7[AIF¬•pd± (ýÔ(-JwÐ@(‹žƒO_tQ,¶J²œ  LŸëF{鮹'üvº¥µîgµÑUµg¨eµÑc'º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý +ÉäAÀ|1V±|?š÷%20 +ÜS7[AIF¬•pd± (ýs t˜ÿMaŽ«O̼¸J²œ  LŸëF{鮹'üvºÉäAÀ|1V±|?š÷%n/usr/home/user/ripe-prov-tests-master/Linux/./with_wget'ìAzX™¦}˜¹(/libexec/ld-elf.so.1º™Í¶€€ñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./with_wget ppid1337execbash20ÜS7[AIF¬•pd± (ýÁïSèÑD¯&›B—ÔÖ¤ºJ<²œ  LŸëF{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýÝq½öëDp±DLÎÀ¶Ã¼J@²œ  LŸëF{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý‘]bmAs«ÃDW¬.þ¡¾J²œ  LŸëF{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýPšiR‘nNC˜"Rh¢*ÀJ<²œ  LŸëF{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýMK xª/J0‰ö¯6¼ÅwÂJ@²œ  LŸëF{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýø•tÔ"MLÏ¡í•d62ÍÄJ@²œ  LŸëF{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýröHH»!@º€Ì0q3zzæÆJ²œ  LŸëF{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýô},[L§±”°Œ90wÈJ<²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7º™Í¶€€ñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýh>ù^D O¯¨´cý) ²ÊJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¾ü Üñœç#O²¡Fnß )ÌJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý²Fo.âE^¼å\^¸¤oÎJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý„ÍIfžDž€K"iå»ÐJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ývÝRê·IÀ¤P~¢ûײ°ÒJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý’SÖl›+N‹„™,âÒ·ŸÔJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý%#2§§O¹ùáyb³}ÖJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý–3Ħ H]œ·…á—E×?ØJ2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý¯ƒ¯ï{E ¸]ÏëÛmLÚJ²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý »ÉѦÍE…”F.:!„ÜJ:²œ  LŸëF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýH{šÚ³ÐGþŒÏJ.‹ñêÞJ:²œ  LŸëF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý LîF{鮹'üvºê LŸëF{鮹'üvº°äÿ§®]vRS<„äB±º™Í¶€€ñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý±b¼Ü›V˜ÎMFB® ³Ü ›²¢K2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€ÀÔ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý—…„?äaMý“§mÆ`?+î¤K2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€é arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý‡ñÑÃÕ©G³œcôû„c7¤¦K2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€é arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýO›k“ÓYBª¡ó>aûSת¨K2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€‚ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýXÉ—æt E˜—à +¬F¨ªK2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€‚ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýﲇ¾ý @ŠÞÖÆó¨æ¬KÖœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1396execsh20ÜS7[AIF¬•pd± (ý­A8™bML>‹S¸øE,ë®K:Öœ  LîF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1396execsh20ÜS7[AIF¬•pd± (ývGUar›D1©€¹$n+Ó°K:Öœ  LîF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1396execsh20ÜS7[AIF¬•pd± (ýÜ€éT®Ê@±…@±VéÓm4²K:Öœ  LîF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1396execsh20ÜS7[AIF¬•pd± (ý·ÖAcvM´A¤æ9Ÿ@´K:Öœ  LîF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1396execsh20ÜS7[AIF¬•pd± (ýǧL75­G¢{¸•mÔ)¶KbÖœ  LîF{鮹'üvºí( ö~R¶ ~{‚~¯º™Í¶€€ñ‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1396execsh20ÜS7[AIF¬•pd± (ý2¯¤ ÜIKb†Lø¯uʸKÖœ  LîF{鮹'üvº LîF{鮹'üvºº™Í¶€€ñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1396execsh20ÜS7[AIF¬•pd± (ý­%ép*;G²’÷Asªi—ºK²œ  LŸëF{鮹'üvº LŸëF{鮹'üvºº™Í¶€€ñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý "AíK¢Œ´nI?€¯M¼K@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'º™Í¶€€ñ‹+aue_readª hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýÃßáuµ¾O_‹æjoÜù10¾K0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'º™Í¶€€ñ‹+aue_lseek”hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý Mr§F{鮹'üvºìù‹°âFzé®·'üvº°äÿ§®]vRS<„äB±º™Í¶€€ñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýî W)O’‡Nó±Ña³#ÀK$ªœ ù‹°âFzé®·'üvº Mr§F{鮹'üvºº™Í¶€€ñ‹+aue_fork +arg_pid1398hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1398ppid1282execbash20ÜS7[AIF¬•pd± (ý…ØäÎíVGó¬ÃÏ>H«V¢ÂK²œ  Mr§F{鮹'üvº¥µîgµÑUµg¨eµÑc'º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÝÀ´½BašÃµæÂÄK²œ  Mr§F{鮹'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1º™Í¶€€ñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ý)€èþ–ýL}ˆ¯ÃFÞ* ¨ÆK<²œ  Mr§F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýYE§ù@ùMHƒa¬¡©­5¢ÈK@²œ  Mr§F{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý6¸Üòü@u¼Öv䔘]GÊK²œ  Mr§F{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýŸ(Q'Jô ¢”³³ÃÌK<²œ  Mr§F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýù]=ÕçHÍ’I`H¤IÂÎK@²œ  Mr§F{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýø-iê†ñN†»dXHMФŸÐK@²œ  Mr§F{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¦ŸßÀ7}K¡”Á]7HdÒK²œ  Mr§F{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ª¸ûª0‡ñ³Gm’ˆœòÀ…ÔK<²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7º™Í¶€€ñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ým\eFEª7÷î\§ÖK2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý›â›7C½´•ÌÞæH½¡ØK2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýu³„ikÂIW– ÷,M;ã¿ÚK2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýõ<¯ÌØeN¡Ÿ‘sF¶Q*ÞÜK2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý–ZÞʹJË¿…ÍŽÞÏ{ÞK2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýK"ZgõN¸£ŽÒ+ÏÉàK2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýzéÊ/D>¹ñÜ[¹ÁߺâK0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uììõ͆€ñ‹+aue_lseekø½:hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃÀkÞ“òON‘õe]Œ|Û äK²œ  Mr§F{鮹'üvº Mr§F{鮹'üvº¼’¦†ˆ€ñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¿è!ñÕÁGŒ–¿r$—¾êìæK@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¼’¦†ˆ€ñ‹+aue_read$hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýÆçhNôDG±¢×ëjgèKbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¼’¦†ˆ€ñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý;MãÉëH`¬›gšxö.êKbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¼’¦†ˆ€ñ‹+aue_write +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýç5{Ì#«B`¯ùõ.Ü +ÁìK@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¼’¦†ˆ€ñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýc­èŽöþG—*ÉPÎœÎ_îKªœ ù‹°âFzé®·'üvºù‹°âFzé®·'üvº¼’¦†ˆ€ñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý)´$ ªO ¼òPÏ&3” ðK"–œ ×µ¨Fz鮩'üvº¼’¦†ˆ€ñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1281execbash20ÜS7[AIF¬•pd± (ýò¿Îq¾@r¯\ 7ߘ-òKb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¼’¦†ˆ€ñ‹+aue_writedhostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý]Ça§HI£¥`´??«ôK0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞꆯŽ€ñ‹+aue_lseek¦Ð:hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5º°H—„ƒ_N˜.âöK0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_lseek¦Ð:hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.¦‡ùÌ·Dú­5õÉ3qúK ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+20ÜS7[AIF¬•pd± (ý +Œbžã»I"’/ºÄW!àøK@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\¾Æ`¦Eà¥ï½MÎ̱þK ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+20ÜS7[AIF¬•pd± (ýЭÄa#‚MšÎÀâ°Z4üK@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊ]…wtM·sagFfÅ‚L ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+20ÜS7[AIF¬•pd± (ýˆ0§º¬Eþ˜pùt ¼Ž€L@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýO¬IÝC°N³\ª`³Ò<Ú†L ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+20ÜS7[AIF¬•pd± (ýôó7JA@¡°"{½±éV„L@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚Œ`o¹H¡Eƒš¯¸>ýŠL ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+20ÜS7[AIF¬•pd± (ý¿ku/µXK™56“v£ *ˆL@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1Ù×*æÝOð‹÷ãñ©™ ŒL:‚œ Ê +ÙKFzé®›'üvºô“„¹Ž€ñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/ñF'•L\ŽËBFwó3JŽL@ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ô“„¹Ž€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*\×iÀHׄzÊË(F¬¹L@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•÷OŒJ˜çõÊß›ô=’L@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadÎ?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.m?Í•B<¥Þ‹ ¶=J”Lb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºô“„¹Ž€ñ‹+aue_write¸@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðÀÒê£XOÉ㺥ÔM–Lbðœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áô“„¹Ž€ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂ’X…ÊOÓž¬zÅ3„˜ã˜L@ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ô“„¹Ž€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=F¦ô'áD駒x`u^žBšL@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýç|<ΉªFq•„ëfÝÜœL@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadŽKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýFY§-[@§˜/òí±ÓHžLb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºþÕÀŽ€ñ‹+aue_writeøKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘¥ûÔA˜œ†¡Ã àt Lbðœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áþÕÀŽ€ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI¥ïUT DÑ·.™ÍÓHË´¢L@ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V þÕÀŽ€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁø^© ~B ‡×ùªz Ô¤L@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UþÕÀŽ€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙ ¯˜ 1K?©,]ͱTnL¦L@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UþÕÀŽ€ñ‹+aue_preadòDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰.¹à¬˜E§´ÐUÏŸa¨Lb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºþÕÀŽ€ñ‹+aue_writeÜEhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£ÎÎΪìG*¬[$œ65ëäªLD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Ú«ØŽ€ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉtW(hÁ@Þ“&× ß Æ¬LD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Ú«ØŽ€ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýØ™ÅnsLŸ¨ÕÄÒE®LD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Ú«ØŽ€ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>ðÑ©`O¡§•5·ôEç4°LD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Ú«ØŽ€ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|–1Ô$²HÀ‹âí^ÉJвLbðœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”Ú«ØŽ€ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁRº:ÞKhnyoBñ!´L@ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”Ú«ØŽ€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçúäßOƒ¤œªñ]ù’W¶L@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”Ú«ØŽ€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýD‹*NÒ7Fín‹*1­¸L@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”Ú«ØŽ€ñ‹+aue_pread¦hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\û'4Ký†Zýçva–ºLb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¼Þæ㎀ñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýí•4@ÆBÚ¯½‘þûq+¼Lbðœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¼Þæ㎀ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠøäAEÛ§¯‡× ¾L@ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¼Þæ㎀ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]pÓ?]O[´˜Þ›}“!ÀLJðœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¼Þæ㎀ñ‹+aue_sendtoà +ret_msgid532hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýø„Š_Ú Kâš«§Z Å^ÂLDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¼Þæ㎀ñ‹+aue_recvfromà ret_msgid532hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý-¦:C¬ØHþ(['Ž?EÄLbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¼Þæ㎀ñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¦Fªh›Ei›$î]“÷Ò™ÆLD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ–à掀ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–Y3”lHÍ€<\æ«ò)ÈLD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ–à掀ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%D¸.¼CWµ(ئ*7žÊLD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ–à掀ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýTñÛC.ÈF'Ÿb¸£°ÌLD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ–à掀ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýHÑRTØFA¶u•¯Mó|•ÎL@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eŽŠÆ´‘€ñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý(Ò˜_ •G¼Œ,÷{@~OÐLJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŽŠÆ´‘€ñ‹+aue_sendtoÚ +ret_msgid533hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýãЧdž®Dr‡µƒåäõ‘¨ÒLJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŽŠÆ´‘€ñ‹+aue_sendto˜ +ret_msgid534hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýº9çbé¡Go‰÷jõÄ"ÜÔLJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŽŠÆ´‘€ñ‹+aue_sendto¬ +ret_msgid535hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýx ¢qÚ)AE“ i(Ï™¬ÔÖLJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŽŠÆ´‘€ñ‹+aue_sendto˜ +ret_msgid536hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý8O+®p@ŸÜ<›7¿ØLDê› µ dôFzé®{'üvºµ CjFzé®{'üvºŽŠÆ´‘€ñ‹+aue_recvfromÚ ret_msgid533hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýì†Ü´†}J‡¢\tGxˆIÚL0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ßÖð•€ñ‹+aue_lseekÞ’;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI>É?‚lNà‹ôøÕ¥ÑÜL0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+aue_lseekÞ’;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍ(Õ¡&eI¨ŽD¹ëè‰UàL ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+20ÜS7[AIF¬•pd± (ýÍÊ¢]~@µ›\RÁS¶ÀÞL@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"^­ôòC+ƒm¨vb̈eäL ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+20ÜS7[AIF¬•pd± (ý=Åë‰DV³˜!÷„+öâL@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷ ô{`BŒ˜äï þ½æL:‚œ Ê +ÙKFzé®›'üvº„ã窀ñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQ§¥>½G¯±'¶ÝèL@òœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V „ã窀ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýúV!˜)EÀ¬;€rè–_êL@òœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄïNfïõBψ³Õþ¬åq°ìL@òœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+aue_pread°BhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýô„D^?A"ŒË PÒl +‹îLb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº„ã窀ñ‹+aue_writešChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯§¸cÖTNÜŽ#wÞÅÓ…êðLbòœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á„ã窀ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1=³ÓÉœJ«ž¬¦¹× +IòL@òœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V „ã窀ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈÙðÈ¡@Ÿí?&zJnôLJòœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº„ã窀ñ‹+aue_sendtoà +ret_msgid537hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ÷@þŒO³fâÒ?qÉöLDê› µ dôFzé®{'üvºµ CjFzé®{'üvº„ã窀ñ‹+aue_recvfromà ret_msgid537hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýµ™·àýLæ5,DªùâøLbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK„ã窀ñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÑ[ÇN$ž>kº'øŸúL0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨Ýô³€ñ‹+aue_lseek ¬;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛfï¤J²Š9š««ÖüLD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨Ýô³€ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®šü8yjXƒÓM²¨È¥¤þLD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨Ýô³€ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×#yêD¶±¥~$F‘à€M@ê› µ dôFzé®{'üvºªa݈ˌûWŒË=ûŠ³â«øíØúð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1execsyslogd20ÜS7[AIF¬•pd± (ý(¢ C¾GS¸mÉ… ­‚Mbê› µ dôFzé®{'üvºÁU\|ÓŽšXŽÓ㈚iâ«øíØúð‹+aue_writev`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÙª[žðA.°ƒBG¤±o„Mbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKâ«øíØúð‹+aue_writev`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý™¤¨áƒKU´=µ¶ †M@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eš¾þÛúð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÝÞoKMI©]BÈk¤¿´ˆMJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºš¾þÛúð‹+aue_sendtoÚ +ret_msgid351hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý­¡Ì;ÿNt´êwAÎ_EnŠMJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºš¾þÛúð‹+aue_sendto˜ +ret_msgid352hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÖ²˜3A®”“Í໌MJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºš¾þÛúð‹+aue_sendto¬ +ret_msgid353hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýv ûcB €[ä³:ðŽMJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºš¾þÛúð‹+aue_sendto˜ +ret_msgid354hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýýÀk|©K¿\ÛMcI“uMDê› µ dôFzé®{'üvºµ CjFzé®{'üvºš¾þÛúð‹+aue_recvfromÚ ret_msgid351hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýòFS„»CDƒÂb<5Ô’MDê› µ dôFzé®{'üvºµ CjFzé®{'üvºš¾þÛúð‹+aue_recvfrom˜ ret_msgid352hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýØ£½¸»F Þw…à+Ï”MDê› µ dôFzé®{'üvºµ CjFzé®{'üvºš¾þÛúð‹+aue_recvfrom¬ ret_msgid353hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýªÝIfÆCÖ­-=×ñK–MDê› µ dôFzé®{'üvºµ CjFzé®{'üvºš¾þÛúð‹+aue_recvfrom˜ ret_msgid354hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýiúÉ`ÏôêKMVÜu'Ù¥€ÆM@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_õÅ£·qKO¨qK‡®RögÌM ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+20ÜS7[AIF¬•pd± (ýBtß¿×'CŽº5v†ÌÌœ`ÊM@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°•Úðïúð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3ʬƒ|Á%åg¥ÆèMDê› µ dôFzé®{'üvºµ CjFzé®{'üvº°•Úðïúð‹+aue_recvfromÜ ret_msgid356hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý;þ‡øpEÿ›@D‹D(IêMbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK°•Úðïúð‹+aue_writev¬hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýQšZ]€N&¹ÏÕRæQâìMD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°•Úðïúð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýfLº,XJñšæÇFMJîMD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°•Úðïúð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøöpöŒJ¿*îõVÛŽðMD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°•Úðïúð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸÛ³ûYAb»Œã$mÀ²åòMD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°•Úðïúð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?ÌŒ“\F`ª±ÖàäéôM@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e””“¬òúð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýé\ØóDáCKºTðÄæ7âqöMJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº””“¬òúð‹+aue_sendtoÚ +ret_msgid357hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý<æâÇ 5Iù›z¬Hm>¦øMJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº””“¬òúð‹+aue_sendto˜ +ret_msgid358hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýsÑâÑoEø­É/~°O¿úMJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº””“¬òúð‹+aue_sendto¬ +ret_msgid359hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý[ÙíXå`Nê¢5’>yú½TüMJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº””“¬òúð‹+aue_sendto˜ +ret_msgid360hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÙkUýÓOà¤z»C~,ž$þMDê› µ dôFzé®{'üvºµ CjFzé®{'üvº””“¬òúð‹+aue_recvfromÚ ret_msgid357hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýku3…ãE£¬*–ƒÁñz'€NDê› µ dôFzé®{'üvºµ CjFzé®{'üvº””“¬òúð‹+aue_recvfrom˜ ret_msgid358hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÕ‹ùµ_ñAøHÓÀÞµyß‚NDê› µ dôFzé®{'üvºµ CjFzé®{'üvº””“¬òúð‹+aue_recvfrom¬ ret_msgid359hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý*!arAÐA¡u¢Ì”l„NDê› µ dôFzé®{'üvºµ CjFzé®{'üvº””“¬òúð‹+aue_recvfrom˜ ret_msgid360hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýËhþGÔº„\Ǫi†N0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„Šª’öúð‹+aue_lseekølhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý 7øsXO‰?JòzàR2ˆN0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜¡ØÔýúð‹+aue_lseekÒrhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýž+ºsÕL­¾%´ü³æŠN0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+aue_lseekÒrhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷*¬cM$£#aíL4ç'ŽN ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+20ÜS7[AIF¬•pd± (ý†°µý*IꘔÓ(º¼6|ŒN@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖ·žÊ…üEƃp3R¡$’¤’N ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+20ÜS7[AIF¬•pd± (ýNý^cG‰*M0ćêîN@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝE>a‹\E –a먎Îæ&–N ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+20ÜS7[AIF¬•pd± (ý`hc-&N Ïkõ}LT”N@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýbjr‚«L¡­ ð¢ØQ˜N:‚œ Ê +ÙKFzé®›'üvº¤‹Øãþúð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŒEÎ!tˆC†¬_ÒíÖ²¤\šN@”œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤‹Øãþúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›ÔËÚRNàŒ„YÌUgþ;œN@”œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýE;º‡ }Gö¡;HJºŸÿ;žN@”œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+aue_preadò1hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜sæ£ðFÛ¡˜Üv|†S† Nb”œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤‹Øãþúð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏ÷=7kìNx«^½X°yÇ¢Nb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¤‹Øãþúð‹+aue_writeÜ2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎ*$8×6AÏ\aÅIc(¤N@”œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤‹Øãþúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}‚¨AÞ—éôI£Íü¦N@”œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,nöýF£…¶Æ‹_r‘¨N@”œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤‹Øãþúð‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýNLmÖ·JDü«…ÞªNb”œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤‹Øãþúð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"–¤ü¿17ɈcCiˆ$¦j½¥¬Nb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¤‹Øãþúð‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýè36ó‚M’¤Ýp÷ |®N@”œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤‹Øãþúð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£${@¨©Ar¥H?òhq,°NJ”œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¤‹Øãþúð‹+aue_sendtoÜ +ret_msgid361hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶NMýäG›‚œ2¨Aº½<²NDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¤‹Øãþúð‹+aue_recvfromÜ ret_msgid361hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý´O’=°iEÆTú`¹E´Nbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¤‹Øãþúð‹+aue_writev¬hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý%/†™bOe¤bsªt¶ND‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºúœ†îþúð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýb±‚MšOø”UõºÁY.¸ND‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºúœ†îþúð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\ÃgêœOÁ¶$³Ym¯jºND‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºúœ†îþúð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎÝÇlÉäM|²ÂŒ7+ :Q¼ND‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºúœ†îþúð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒª æÉ®P,ƒ§.¤ýþ…&192.168.56.101,192.168.56.1‚Ã20ÜS7[AIF¬•pd± (ýJ©Ï|ZL³•³¨IègJø¾NÚš µO×PFzé®’'üvºƒª æÉ®P,ƒ§.¤ýþ…&Ö΄‰„ûð‹+20ÜS7[AIF¬•pd± (ýe +ˆ-ñüXl¹ÄIšvgé192.168.56.101,192.168.56.1‚Ã20ÜS7[AIF¬•pd± (ý¹ø*FóA;/.›MëAÀNÚš Öd·Fz鮧'üvºe +ˆ-ñüXl¹ÄIšvgéÖ΄‰„ûð‹+20ÜS7[AIF¬•pd± (ý»Ñ@S€Ib¸êË×›i¡½ÂNò› µO­öFzé®’'üvºµO×PFzé®’'üvºÖd·Fz鮧'üvºÖ΄‰„ûð‹+aue_acceptret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value5ppid1address192.168.56.1port +61633execsshd20ÜS7[AIF¬•pd± (ý ÛC7FÏ5-.Tï¿2ÄN"ò› µO­öFzé®’'üvºÖ΄‰„ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value6ppid1execsshd20ÜS7[AIF¬•pd± (ýÂÁ­ÏI0–ú$/¬‚ÆN"ò› µO­öFzé®’'üvºÖ΄‰„ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execsshd20ÜS7[AIF¬•pd± (ý w*DûqV^'¶Ss"ÍXÖdÑFz鮧'üvºÖdÑFz鮨'üvº20 ÜS7[AIF¬•pd± (ý™?WöVJ”‹IÄ3ó¿ÈNò› µO­öFzé®’'üvºw*DûqV^'¶Ss"ÍXÖ΄‰„ûð‹+aue_pipe ret_fd16ret_fd27hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execsshd20ÜS7[AIF¬•pd± (ý -‡ÚÁ_\û5TÛD¥ÖdéFz鮨'üvºÖdöFz鮨'üvº20 ÜS7[AIF¬•pd± (ýo£ +WMȆK³Ú0gÊNò› µO­öFzé®’'üvº-‡ÚÁ_\û5TÛD¥ÖdöFz鮨'üvºÖ΄‰„ûð‹+aue_socketpair ret_fd18ret_fd29hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execsshd20ÜS7[AIF¬•pd± (ýÈœAëvðAž©Õ0zðGÌN$ò› µO­öFzé®’'üvºÖd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_fork +arg_pid1278hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1278ppid1execsshd20ÜS7[AIF¬•pd± (ýžaÇ@ù BÍ»YÈðéÔnêÎNŠœ Öd'“Fz鮨'üvº‹Û÷ %„þ[„%ÿâKþ2/usr/sbin/sshd'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ö΄‰„ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"/usr/sbin/sshd -Rppid1108execsshd20ÜS7[AIF¬•pd± (ý±,XBü†Q­_˜n®›ÐN<Šœ Öd'“Fz鮨'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÖ΄‰„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý̉ÄŠGÒ™©Ä%Fe!ÒNò› µO­öFzé®’'üvºÖdéFz鮨'üvºÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1execsshd20ÜS7[AIF¬•pd± (ýD×m2 BÃŒJ§:»ÔNŠœ Öd'“Fz鮨'üvº‰oý©äÇU¤©A)Eǹ Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýžh!™^FQ¼¬@xAÅ[EÖN<Šœ Öd'“Fz鮨'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÖ΄‰„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýI“ÔNc»Ü {kÁòØN@Šœ Öd'“Fz鮨'üvºXꎩð®…\®ð@JÌ…¼âÖ΄‰„ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ýáB7ÿ”dF—\Vĸ|–±ÚNŠœ Öd'“Fz鮨'üvºXꎩð®…\®ð@JÌ…¼âÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÂ&9/ŸJì§:ÔY¨M»ÜN<Šœ Öd'“Fz鮨'üvº ªV.x±h^±xåNhžõ(/usr/lib/libpam.so.6Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÆWsn5WJµ‘]3µdÛlÞNŠœ Öd'“Fz鮨'üvº ªV.x±h^±xåNhžõÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýYkŠ8JŒ¶#'w7ãàN<Šœ Öd'“Fz鮨'üvºLÜÑÄ­Q­ÄºËÁt¤6/usr/lib/libprivatessh.so.5Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýcÍådƒO‹Ää×_÷•âNŠœ Öd'“Fz鮨'üvºLÜÑÄ­Q­ÄºËÁt¤Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýfο\/O‹Œz€ï%:PäN<Šœ Öd'“Fz鮨'üvº5‹s{¯lœZ¬¯ª}Zœµj"/lib/libutil.so.9Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýŽsƒ'Eƒ›ÃŒ™]•éCæNŠœ Öd'“Fz鮨'üvº5‹s{¯lœZ¬¯ª}ZœµjÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÔõ4CgFyy2OÄBEèN<Šœ Öd'“Fz鮨'üvºöâÜ-ŽTš-æTŽ¹(/usr/lib/libbsm.so.3Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý i<'ÍB¬A³ ãy.NêNŠœ Öd'“Fz鮨'üvºöâÜ-ŽTš-æTŽ¹Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý„o¹^˜En‡¼¨+‡~»6ìN<Šœ Öd'“Fz鮨'üvº¡h}Zše^¥š—´þ³¿4/usr/lib/libblacklist.so.0Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýODéb\A…Ü8i,²ùîNŠœ Öd'“Fz鮨'üvº¡h}Zše^¥š—´þ³¿Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý#MGÜõyBŒ˜0}jzJ‘ðN<Šœ Öd'“Fz鮨'üvº„/|ÓøgT¸Óætg®Ã:/usr/lib/libgssapi_krb5.so.10Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý€pƒ£€Cµº¾-ŸäÅwòNŠœ Öd'“Fz鮨'üvº„/|ÓøgT¸Óætg®ÃÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýAT8ïm°OÚ«x8ˇbôN<Šœ Öd'“Fz鮨'üvºo˜Em/ÿ_¯m(ÿÓË0/usr/lib/libgssapi.so.10Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýgôxz²J’« Záþê–öNŠœ Öd'“Fz鮨'üvºo˜Em/ÿ_¯m(ÿÓËÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý„V”r@ŒBGžÂøN<Šœ Öd'“Fz鮨'üvº:]àÀ4hV¨439fç,/usr/lib/libkrb5.so.11Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýËúªcRKð„ðÓƒSüêúNŠœ Öd'“Fz鮨'üvº:]àÀ4hV¨439fçÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýëq» óùHr®ÂÁü.õüN<Šœ Öd'“Fz鮨'üvº/Ÿ€avT¡R¹¤v‹ */usr/lib/libwrap.so.6Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý}4bŠUA9¥Ÿ)}_Ô2þNŠœ Öd'“Fz鮨'üvº/Ÿ€avT¡R¹¤v‹ Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýAgÖ/yN µ½‰_ÈÚ~€O<Šœ Öd'“Fz鮨'üvºe ÃáMòSU²MR€•SÙâ*/lib/libcrypto.so.111Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý{<^ïËÆD¿µIˆý6ý×v‚OŠœ Öd'“Fz鮨'üvºe ÃáMòSU²MR€•SÙâÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý]Ô«AÏ°B ¼B ìPªÙ„O<Šœ Öd'“Fz鮨'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýDOÛáÐN°LCýíušþ†OŠœ Öd'“Fz鮨'üvºÞA`ì•øËQ¸•bxñË"œÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýËÃÄ‘ãE)«§Öøp9#ˆO<Šœ Öd'“Fz鮨'üvºæôÆ´|@ïV€|}¢–ïÿ'8/usr/lib/libprivateldns.so.5Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý ö—þÈßD»²HÏœ"wŠOŠœ Öd'“Fz鮨'üvºæôÆ´|@ïV€|}¢–ïÿ'Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýçì&ƒþQGɪea?ǯæWŒO<Šœ Öd'“Fz鮨'üvº6'üiiU©ihÿõ$/lib/libcrypt.so.5Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÜI/ÍMÅŠ¥Dx´ |QŽOŠœ Öd'“Fz鮨'üvº6'üiiU©ihÿõÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýònÅþË£J`·Šq ÆÌ>+O<Šœ Öd'“Fz鮨'üvº¥_¤!0rtQ²0 ñt¿ñ/lib/libz.so.6Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý}؆¾KA©›S˜ÂœRð’OŠœ Öd'“Fz鮨'üvº¥_¤!0rtQ²0 ñt¿ñÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¤‹ññKJ«¯¶‚KC¥”O<Šœ Öd'“Fz鮨'üvºÇ8N¢¹V¢NY¤6¹< /lib/libthr.so.3Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÊΛ™[žN·ü8 +}°v–OŠœ Öd'“Fz鮨'üvºÇ8N¢¹V¢NY¤6¹<Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý®t ,fí@’ô|ŒÞãªj˜O<Šœ Öd'“Fz鮨'üvºÑÇzLRrS’Lb´srå./usr/lib/libroken.so.11Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýdÆMÎR|AÕª‰¢M@ÔšOŠœ Öd'“Fz鮨'üvºÑÇzLRrS’Lb´sråÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýy]Ë‚†™C±´KÁª?ÍôœO<Šœ Öd'“Fz鮨'üvºý[æ§ê%œ_¥êCÝOœY],/usr/lib/libasn1.so.11Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÉŠ„ÃríB{§åèÝ!°»ïžOŠœ Öd'“Fz鮨'üvºý[æ§ê%œ_¥êCÝOœY]Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýA÷øŸ*F ˆ\Ͼjn+ O<Šœ Öd'“Fz鮨'üvºó¶‡Vbc”U£b4Õ”­§0/usr/lib/libcom_err.so.5Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý#,¼¿ÞIm[SrPëÀ”¢OŠœ Öd'“Fz鮨'üvºó¶‡Vbc”U£b4Õ”­§Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÛå:^JB†±±–™ë:ÅU¤O<Šœ Öd'“Fz鮨'üvºJ…vÑL†HU†Lî¢H¯./usr/lib/libhx509.so.11Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý÷^þO5wMÃ)ZKÔÕè¦OŠœ Öd'“Fz鮨'üvºJ…vÑL†HU†Lî¢H¯Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýi¥#4ç§DÊ£´7¯áĨO<Šœ Öd'“Fz鮨'üvºlfª«ãÂZ£«øŸºÂÄÅ,/usr/lib/libwind.so.11Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýc\óùqüJ»R½ÿŽz…ªOŠœ Öd'“Fz鮨'üvºlfª«ãÂZ£«øŸºÂÄÅÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý™ÀQá¤B0ŠÂÄò@MOå¬O<Šœ Öd'“Fz鮨'üvº™ü1… %V[¥ Ü «VF,4/usr/lib/libheimbase.so.11Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýEÌ>í1A°žÁŒȯ%6®OŠœ Öd'“Fz鮨'üvº™ü1… %V[¥ Ü «VF,Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýûÄŪsÉHF¿¤™±N|êÚ°O<Šœ Öd'“Fz鮨'üvº¦ÇxTØTTü$Øä½B/usr/lib/libprivateheimipcc.so.11Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýý΄ﴫKA€Áx>‰ª§²OŠœ Öd'“Fz鮨'üvº¦ÇxTØTTü$Øä½Ö΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý£Èg‡žEœ­ýáÔÇ´O<Šœ Öd'“Fz鮨'üvºÀ¤J'(¦ÓX¦(²ˆÓý,/usr/lib/libssl.so.111Ö΄‰„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýZ 9§BG•#"·†ˆü}¶OŠœ Öd'“Fz鮨'üvºÀ¤J'(¦ÓX¦(²ˆÓýÖ΄‰„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýptžG‘EAÿ¥³k¶­¡Õ¸O:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"–ÆüÛ€þÍAá±vI@e–qÒºO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýpdø +ÚAס"ñ•2“¼O:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý` ô GÒ¹ÝvóVí ›¾O:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¶FBå5áEE}s~ÛuùÀÀO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýXM^?ïI¥'¥Þ¶À¥qÂO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýäZq·|Nò½E`ü¨"ÄO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýU.ÔÉ·G¦&C¸Ÿ³tGÆO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýî}¢2ÜF‘‚Ã÷ °I×ÈO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÞ'çkÒE®›ã6s’žÜ‰ÊO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýè]bÔîßE>‡V>'¤ëêÌO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¢ŠÂLDI»ž0£ŽÖc,ñÎO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýyÆÜz¥ÛC,«ô=ùðÐO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýäŒÎn•CƒVSm±PIÒO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýHwí4ÅFT†Ð×Stu€ÔO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý– Ízì¶@X¦È@`)Õ ÖO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý®0Ô#lÝHq¹øÁTåµØO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýìÿ¹œ% L€ªÄe‰aÕÚO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÄ{˜nâAkœýŠ“ÕážÜO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýò ©"%I˜ )~5ÞO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýä<ÜŽˆN¶°¯à´a—àO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýåéúuEO+›1ÖÁ(¹*ÃâO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýz@: +G6Œ…±/'8˜ÄäO:Šœ Öd'“Fz鮨'üvºÖ΄‰„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÊ (ëK‘ig:†yPæO:Šœ Öd'“Fz鮨'üvºŒ»¯’„ûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý•ÔÒw4B˜¥ºÿç½ oJèO:Šœ Öd'“Fz鮨'üvºŒ»¯’„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¤$1ü˜D"½zé{²âêO<Šœ Öd'“Fz鮨'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nullŒ»¯’„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý¿À‰½fLÓžáÚG|0ìOŠœ Öd'“Fz鮨'üvº3P ÓK€X‹Ó«·Ø€‘^Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý‚˜ ù®vCX¨m°ñ8L‡OîO<Šœ Öd'“Fz鮨'üvºe ÃáMòSU²MR€•SÙâ*/lib/libcrypto.so.111Œ»¯’„ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýóÓ¦ýù`EÍ”¡æ‚%ƒå<ðOŠœ Öd'“Fz鮨'üvºe ÃáMòSU²MR€•SÙ⌻¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý”Z¬ÿ…|Iºšyr’‚ÜòO<Šœ Öd'“Fz鮨'üvºŠ*ÃI[®\®[pgŒî (/etc/ssl/openssl.cnfŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý7::ñB7§åìõð +TMôOŠœ Öd'“Fz鮨'üvºŠ*ÃI[®\®[pgŒî Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÔÓÛô/ÏAê‘‚š~LÎ`öOŠœ Öd'“Fz鮨'üvºÖeáóFz鮨'üvºŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¶ÄÄнC+³g¡#JgøOŠœ Öd'“Fz鮨'üvºÖeå§Fz鮨'üvºŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý‰r˃ìBV¹ŽÍMmÏ/ŒúO<Šœ Öd'“Fz鮨'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.confŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý»gs¨ö¯C2.rÐÉç´üOŠœ Öd'“Fz鮨'üvºÜN½Ëê¯+^¯êZ£®+VŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýp¤ò^ÿMp›B‘&,(ÑþO<Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbŒ»¯’„ûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýºp[¬ÃFI¾šíù»€P@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÅñXƒ¡Oé»Ê¯åƒ•M“‚P@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÑèÐðÝH:„Nb^‡íGþ„P@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ý…üs8B¨˜‚>U[.¨¢†P@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ýy×Ò#iQF`“  „dkÑíˆP@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ýT÷€¸ÅÇHý‹û;CµŠtŠP@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ýåò´m—Bø®ØpZ«g\ŒP@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ýX q€Nñ¼»”šz6ŽP@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1108execsshd20ÜS7[AIF¬•pd± (ý´*ЫߊKJ™RŽå8PŠœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>gŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýú¿ Òg‰AV‡Æç8˜’uÉ’P<Šœ Öd'“Fz鮨'üvºlˆ"÷dÒW’d/ð§«t2/etc/ssh/ssh_host_rsa_keyŒ»¯’„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý~’6UæØD›º¦ýÖÈÓûø”PŠœ Öd'“Fz鮨'üvºlˆ"÷dÒW’d/ð§«tŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý3ðÜ@¾Â¯ZlkN–P<Šœ Öd'“Fz鮨'üvºlˆ"÷dÒW’d/ð§«t2/etc/ssh/ssh_host_rsa_keyŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýSdô¦ö@Z’)08UÜcN˜PŠœ Öd'“Fz鮨'üvºlˆ"÷dÒW’d/ð§«tŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý5èí‹ÞD\ŽØZ–3šP<Šœ Öd'“Fz鮨'üvºØ]¿?ˆs%P³ˆüd %,|:/etc/ssh/ssh_host_rsa_key.pubŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýv€{k LJ\¹„¾y.i…[œPŠœ Öd'“Fz鮨'üvºØ]¿?ˆs%P³ˆüd %,|Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¥3§w˜&I®»[3°O¥ÈëžP<Šœ Öd'“Fz鮨'üvº.Ë=&SY¦î¹SË6/etc/ssh/ssh_host_ecdsa_keyŒ»¯’„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýt¢rÖÄC2cÌ’(åu PŠœ Öd'“Fz鮨'üvº.Ë=&SY¦î¹SËŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¼ø¹È3@¬©Z¦| +§î¢P<Šœ Öd'“Fz鮨'üvº.Ë=&SY¦î¹SË6/etc/ssh/ssh_host_ecdsa_keyŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýx\òJþ„ÿ¨ß3®¸¤PŠœ Öd'“Fz鮨'üvº.Ë=&SY¦î¹SËŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýýSöa“Kªwðñ^­ü¦P<Šœ Öd'“Fz鮨'üvº>ýpì)¨^©“N¨î<>/etc/ssh/ssh_host_ecdsa_key.pubŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýÕ}žÕyýpì)¨^©“N¨î<Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÁ +»*ÔNº€· ?öتP<Šœ Öd'“Fz鮨'üvºšv*Åõ2PµÅèj 2…(:/etc/ssh/ssh_host_ed25519_keyŒ»¯’„ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýªå +ë…N.œLb8ùN¬PŠœ Öd'“Fz鮨'üvºšv*Åõ2PµÅèj 2…(Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýO[è²A÷¨÷\̤4‚®P<Šœ Öd'“Fz鮨'üvºšv*Åõ2PµÅèj 2…(:/etc/ssh/ssh_host_ed25519_keyŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ýEÊšPdKJ5¸mx\š*¡°PŠœ Öd'“Fz鮨'üvºšv*Åõ2PµÅèj 2…(Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýûÞ GôM_šHí‡%š²P<Šœ Öd'“Fz鮨'üvºn·ëë–W–çUW ,B/etc/ssh/ssh_host_ed25519_key.pubŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1108execsshd20ÜS7[AIF¬•pd± (ý1 ºá™OC€?~Ç \±´PŠœ Öd'“Fz鮨'üvºn·ëë–W–çUW ,Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¾ü®?ôAS¸}芮Óö¶P6Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvºŒ»¯’„ûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1108execsshd20ÜS7[AIF¬•pd± (ýŒ?Q(j,Mâ›»ñt-S¸P6Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvºŒ»¯’„ûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value63ppid1108execsshd20ÜS7[AIF¬•pd± (ý¦ä*˵ªOm¶ŽÐìú?ºP6Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvºy~$¾RŽ$½Þb¾ˆ=/Œ»¯’„ûð‹+aue_chdirhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýQŒ O-•F$’aºé(67"¼PŠœ Öd'“Fz鮨'üvºÖdöFz鮨'üvºŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýK¸µÊIGr¥æ©¸-$¾P<Šœ Öd'“Fz鮨'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nullŒ»¯’„ûð‹+aue_openat_rwtc +flagsmode ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý”‚>t'Ag¥,~Õ'”<ŽÀPŠœ Öd'“Fz鮨'üvº3P ÓK€X‹Ó«·Ø€‘^Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýlºˆvç`Ný»OCàŒV½ŽÂP"Šœ Öd'“Fz鮨'üvºŒ»¯’„ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý…XéÇ9D÷‚Ž'å¦(78ÄP"Šœ Öd'“Fz鮨'üvºŒ»¯’„ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý-©ç /Iý¸ ÔûnÏ­ÆP<Šœ Öd'“Fz鮨'üvºaOr;ó7S³;IF£7;— /etc/resolv.confŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ýLeÃ3)AL¨ª7“ß48ÐÈPŠœ Öd'“Fz鮨'üvºaOr;ó7S³;IF£7;—Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýï¿—0HýŒY¹1øQÉÄÊP<Šœ Öd'“Fz鮨'üvº5e| DeT„ Ve»/etc/gss/mechŒ»¯’„ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ýÛÔÀ¶4îH­’֙ЀˆcÌP<Šœ Öd'“Fz鮨'üvº„/|ÓøgT¸Óætg®Ã:/usr/lib/libgssapi_krb5.so.10Œ»¯’„ûð‹+aue_openat_rwtc +flags0mode ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value6ppid1108execsshd20ÜS7[AIF¬•pd± (ýë6ƒøŒ@¡xøâ2v=DÎPŠœ Öd'“Fz鮨'üvº„/|ÓøgT¸Óætg®ÃŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"–Äú›X‘ª¿M\¦rtx9VâÐP<Šœ Öd'“Fz鮨'üvºÃêHߺXŸHغ¶C>/usr/lib/libgssapi_spnego.so.10Œ»¯’„ûð‹+aue_openat_rwtc +flags0mode ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value6ppid1108execsshd20ÜS7[AIF¬•pd± (ý¸Z9dOÒ„þ±cóûBÒPŠœ Öd'“Fz鮨'üvºÃêHߺXŸHغ¶CŒ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¦…ÄÈ^IN¹ßË ñæ¬ùÔP:Šœ Öd'“Fz鮨'üvºŒ»¯’„ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¬E’Ø€J£ºÐ΃ÊD™ÖPŠœ Öd'“Fz鮨'üvº5e| DeT„ Ve»Œ»¯’„ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýVŤ¤tZA­gF‚¢ &ØP0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UðˆŸµ…ûð‹+aue_lseekÒ›hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýî¨4q Ož%/ø&êÚP<Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g/etc/spwd.db†¤šä…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ýâ¹$Þ€Lw€“þc deÜP@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýw!r † MÕ‘&²Ý¥nTUÞP@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýèq3¤&D¼ŽÑ„ź&ÌÏàP@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý¦ñ:.åM0±ýIÄø/%âP@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýúQ= r€BH[>8ƒSäP@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý±ÿã–SÙI@“ûì^'æP@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýºâ ýA£±·ŽO6)ƒèP@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý&Å[G´ùò„L†=êP@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýϵHÍ&Eª&ž‘þ6WÐìPŠœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýˆD”msGfžS½€àIÇ8îP<Šœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.conf†¤šä…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý…ÅOá N–ŽgŦI·öJðPŠœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýaç=X.ðM¨Ü÷ùÝòP<Šœ Öd'“Fz鮨'üvºáÒÍ!j™Õ\™jJè¼ÕVÙ/etc/pam.d/sshd†¤šä…ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý½TdðLJN}½‰9¼¾Õ’:ôP<Šœ Öd'“Fz鮨'üvºzËŽw•ÏT•w{³tÏy“,/usr/lib/pam_opie.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ýö¥ÉÖ=Kh™=f‰N¸öP"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ý~®Ž»G\ž‰ØJÜá·+øPŠœ Öd'“Fz鮨'üvºzËŽw•ÏT•w{³tÏy“†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýdzc4B0§3»…æTúP<Šœ Öd'“Fz鮨'üvºsºæ1ÀZ± þZÀm¨*/usr/lib/libopie.so.8†¤šä…ûð‹+aue_openat_rwtc +flags0mode ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ý‹{0f¾A'ts63‡úIüPŠœ Öd'“Fz鮨'üvºsºæ1ÀZ± þZÀm¨†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýLYíí^D¸äô[2Í%þP<Šœ Öd'“Fz鮨'üvº¤×†eo'ŠQ§o{ö¡Šé/lib/libmd.so.6†¤šä…ûð‹+aue_openat_rwtc +flags0mode ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýáì£ÉLúº +c¥Àf0€QŠœ Öd'“Fz鮨'üvº¤×†eo'ŠQ§o{ö¡Šé†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýþ‰Ïà O„¨èðˆò²ê‚Q:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¸šo«Bu’Üx¦C"ã„Q:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýîR%¢IH›…1ß^‘ýX†Q:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýHš»Q)ôE ÞÜÚÌòˆQŠœ Öd'“Fz鮨'üvºzËŽw•ÏT•w{³tÏy“†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÓbVC9BP©Ôkejí“ŠQ<Šœ Öd'“Fz鮨'üvºLv‹ t½P´ T‹ð½Ï18/usr/lib/pam_opieaccess.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ýÔ³¼Ùn·N^ˆ\Rôäì6ÀŒQ"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ý 32ÔFv­™‹HÓgŽQŠœ Öd'“Fz鮨'üvºLv‹ t½P´ T‹ð½Ï1†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý’ñ `¦nJ¥Æ€8ÃTHQ:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýeŸm©ùN\8Õì;¼’QŠœ Öd'“Fz鮨'üvºLv‹ t½P´ T‹ð½Ï1†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýwئ5L×£}Kj{Æ”Q<Šœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR,/usr/lib/pam_unix.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ý“Fq¬ŒEÄ¿uÍž•¸¡&–Q"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýf\Ñ_¶D߬&2mZŒæ˜QŠœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýñRšª5§H瀚f3SoÁìšQ<Šœ Öd'“Fz鮨'üvºëPï9•^•9Cy^R„./usr/lib/libypclnt.so.4†¤šä…ûð‹+aue_openat_rwtc +flags0mode ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýšØÏ +˜<@* FyúcIלQŠœ Öd'“Fz鮨'üvºëPï9•^•9Cy^R„†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýø <âŒMŽ„ð?ÁµÁVžQ:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýùƒ‘&ëÔHF°5¾ñg·_ Q:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý«Û/3}"Dµ‹„¬¸7R¢QŠœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¤¶r˧KHíºý¦ú<ÛÁ¤Q<Šœ Öd'“Fz鮨'üvº«öü¯!ÊZQŠ!*aZ3·2/usr/lib/pam_nologin.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ýlZ7ö"B)„*S™&O§¦Q"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýl(³Â+©N2£ºé%FtÓ¨QŠœ Öd'“Fz鮨'üvº«öü¯!ÊZQŠ!*aZ3·†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý­À†šÑÒMoŽüeöŸ„þõªQ:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý"ã_žDîš»Ýj'ª« ¬QŠœ Öd'“Fz鮨'üvº«öü¯!ÊZQŠ!*aZ3·†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý˜¹ôÕÃEMªú>«¯(=®Q<Šœ Öd'“Fz鮨'üvº<;Иä®QäkQ®ßûsÌQ<Šœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR,/usr/lib/pam_unix.so.6†¤šä…ûð‹+aue_openat_rwtc +flagsmode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ý­œ_•` OS¾ÒWZÍX‚ÎQ"Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_fcntlcmd ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ý²Ñú‡ŽŠF”£âÑÅú’®ÐQŠœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý~ßីCª“…€7)ÕÒQ:Šœ Öd'“Fz鮨'üvº†¤šä…ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÓ8r±X^F…’þù"DB3ÔQŠœ Öd'“Fz鮨'üvº½O7PQ\V‘ѤÖ\ŒR†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý¯_¹oêIª…/öü×KăÖQŠœ Öd'“Fz鮨'üvºáÒÍ!j™Õ\™jJè¼ÕVÙ†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý”E©âEJ·«£¯ÝØLhØØQ<Šœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.conf†¤šä…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ýåtGÞC­Uf¡yŶ5ÚQŠœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýV·\Wª¬ISžK‚ +Õ8ÜQŠœ Öd'“Fz鮨'üvºÖˆU¾Fz鮩'üvº†¤šä…ûð‹+aue_connect hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108address /var/run/logprivexecsshd20ÜS7[AIF¬•pd± (ý;ì™^ÿBŽYƒugF“ÞQJŠœ Öd'“Fz鮨'üvºÖˆU¾Fz鮩'üvº†¤šä…ûð‹+aue_sendtoÀ +ret_msgid365hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýü|ÊpãH\³[Á }WàQDê› µ dôFzé®{'üvºµ CjFzé®{'üvº†¤šä…ûð‹+aue_recvfromÀ ret_msgid365hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý0ˆâ|qJZ„T ž“’˜âQbê› µ dôFzé®{'üvºªûzJÙR†]’Ù?òí†Ód†¤šä…ûð‹+aue_writevhostHdc53375b-4149-46ac-9570-64b1090f28fdfd16ppid1execsyslogd20ÜS7[AIF¬•pd± (ýëÿb:}Oœ®°ÀG¿ËäQŠœ Öd'“Fz鮨'üvºÖˆU¾Fz鮩'üvº†¤šä…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¢¢úe¦¡²$EÕ”°9Zö`¶ØæQ<Šœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.conf¸ð†î…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý›ä×&Ë—H¯p*ÿ~•¢¦èQŠœ Öd'“Fz鮨'üvºMTZŸ2S²ŸâÓ‚ˆ¸ð†î…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýMöù”MÞƒ?yÉXÜcêQŠœ Öd'“Fz鮨'üvºÖ‰¢–Fz鮩'üvº¸ð†î…ûð‹+aue_connect hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108address /var/run/logprivexecsshd20ÜS7[AIF¬•pd± (ý«½Ö²×†O¾f(tMùÉìQJŠœ Öd'“Fz鮨'üvºÖ‰¢–Fz鮩'üvº¸ð†î…ûð‹+aue_sendtoÀ +ret_msgid366hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýÎ)æixrD”ËÌï°3.îQDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¸ð†î…ûð‹+aue_recvfromÀ ret_msgid366hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÇb^AbO*œ>i°›:«ðQŠœ Öd'“Fz鮨'üvºÖ‰¢–Fz鮩'üvº¸ð†î…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý‚R3=O0Hµ¤#æë\òQ<Šœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨/etc/group¸ð†î…ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý(ÒÈ7ÒL‡ŸZR‹ÀÛ©ôQ0Šœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨¸ð†î…ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ýFì|“Dú¸3îðØ{¥öQ0Šœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨¸ð†î…ûð‹+aue_lseekðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý!D”WAó“‘&w57øQŠœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨¸ð†î…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýbA4õ;SN›„0ÅvãšÿsúQ +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_setgidgidë +arg_gid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýg¨Sý hKʧ&z]‘©Í4üQ +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_setuiduid +arg_uid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÈ>ª”©N±— >…f™ÞËþQ +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýU!¬µÌëG¤›i*¢¨j•€R +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý˜J?OðB(ˆ 9š†ýá‚R +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_setuiduid +arg_uid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý[(¬Ž¹F¦¦a+ +­­ö„R +Šœ Öd'“Fz鮨'üvºÖd'“Fz鮨'üvº¸ð†î…ûð‹+aue_setgidgidë +arg_gid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý1»!.UêGH§U”„DÚþšR–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýågã¼ôDÓŠÈÓl±¥œR0–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý­czÅ5XC››UBÔ½úžR–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý"‚Œ–Å€AƒH,Ô{— R<–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbº÷œ÷…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÅê2/K§8Ó—³, ¢R@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÁ­Ž…©@ “ééÔ]Õ¤R@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýe¸ÄàH²H´5d€²T¦R@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý%’–¤æD°¬þ×ï8Î".¨R@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý .y$™íMª(* ‘øÀªR@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÅïÉFsWLÔ¾TÑ#m¼¼¬R@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÿ¸]2­ˆLV 6@£íâÝ®R@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý¿±q¤åN̔늳Š(O°R@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýzrÆ îäLé‡ÉljºYÉ ²R–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýɶWš“D{ˆ--t Îûc´R<–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­/etc/opiekeysº÷œ÷…ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ý¤SëøÅAGm«=Œæñ³Òâ¶R<–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­/etc/opiekeysº÷œ÷…ûð‹+aue_openat_rwtc +flagsmode ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value9ppid1278execsshd20ÜS7[AIF¬•pd± (ý¹uÁÎMLŒ—NŒÊ)ó°g¸R–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý Gä†ýbHñ¼lˆµ¯NºR0–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý¢³â÷’FF•„rÐO1>ʸ¼R–œ Ö‹8ÅFz鮩'üvºO«–Ì¿ZŒ–²×¿u­º÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýy…¦ ¯B±Ø[ a«@¾R<–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbº÷œ÷…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÿÀ3Â\I«†©¦ÂKâèeÀR@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý±Þ.Õ™KÕ‰]Õ$Üa7ÂR@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÎ%¬ªJ_°%Ôm´VdÄR@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýgNÁ¯~LiŽ˜mK$±a®ÆR@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýJ´LŒæ™Oò¥Ÿ˜Þ“Ô‘nÈR@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýµa‹ÚVtE¤4ÔwóÆrÊR@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý·TÀ´vGGŸ¶ZŠåN¿;ˆÌR@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÿ»ÐÍñÑ@Û«iâK‹ÕEÎR@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýJI¯¨2½GL¯¦ÁÓÌÒSÐR–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gº÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýŸ¹oC±lB?»9Ms‘ÚïÒR<–œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confº÷œ÷…ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ý·jßÈ +#N§†ÆÀ ÒœÔR–œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆº÷œ÷…ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýÄ»“&ÇI&“ {#Hè|ÖR@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e´ðÃ؈ûð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýelH±Dͤþ(ƒùÿ ÞØRJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº´ðÃ؈ûð‹+aue_sendtoÚ +ret_msgid368hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý)Q¸4B Ÿt@S­hÚRJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº´ðÃ؈ûð‹+aue_sendto˜ +ret_msgid369hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÁþú¥ò6LÁ +ïð<³¤ÜRJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº´ðÃ؈ûð‹+aue_sendto¬ +ret_msgid370hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýºÕã¾±Ok¼ æ×úŒùÞRJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº´ðÃ؈ûð‹+aue_sendto˜ +ret_msgid371hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýŽz øFƨÒUßê³HàRDê› µ dôFzé®{'üvºµ CjFzé®{'üvº´ðÃ؈ûð‹+aue_recvfromÚ ret_msgid368hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýjÚ7‘x°J÷)‡Ì„ã CâR0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uú½ïŠûð‹+aue_lseek’þhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃa‹²KW¢1%Y¤6CäR0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_lseek’þhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýV\GBœ¸3>jGÃ(èR ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+20ÜS7[AIF¬•pd± (ý§n²þ•HñŸxJqJ|æR@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý2³n_JŒ™o†”qìR ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+20ÜS7[AIF¬•pd± (ýLJM¹͔Pe&¦êR@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+Éã¿h^cáKoŽkâÈÏþž–S@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadØYhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£;* >Hƒ‰9uâƒPöh˜Sb˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýú:Ž¬®A ´#ÚÊ¢¨ÙšSb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”·ò×ûð‹+aue_writeÂZhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqiǪ™C“³ÃzrŠlfœS@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›e{‹ÖHŒž†P“êÕ«8žS@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+«kQ«€H¢æØhz²¦? S@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadÒ;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýWi–+Dž46ˆæp¢Sb˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýíÇ›}(œM¹’–羟œ§—¤Sb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”·ò×ûð‹+aue_write¼<hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýØ¿FâÄ@r„qýIb±Ù¦S@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§•†5ÈÍIm‘‹€Ð€wtT¨S@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýy½’öN쎖N9P «ªS@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadðKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|å°±Â^D»bIuN¶Ú]¬Sb˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝL•[µB§êV°ÿëì®S@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿ<Ž_MuµoÖzH\E°S@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]ð™ñN#´5K/Ÿzß²S@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_pread”PhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”‡eÿÍIÇ}xŒš¦¹´Sb˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwÉ—e÷FL:…Ö*š/îâ\¶S@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍ},Fó@`„Î_´JòLö¸S@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý 9/{ŒÄK˜º]=ÎsÓ`ºS@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadžRhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙWàQ—‡D•„“Æ…’íËŽ¼Sb˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýVõ{!ÄJX¹—Ø\Ù)¡/¾S@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýi—ÓóJl€ÊjßwD~ûÀS@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›È¦ñI’¢O-rÊëÕ'ÂS@˜œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”·ò×ûð‹+aue_preadö?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸ûÁ¦äOG¨¥Noàf[ÄSb˜œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”·ò×ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿ß¬ÎFƒ ž‚ú¼±PÆS@˜œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”·ò×ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»09»ÄŒNb¡‚ß)ðÌÈSJ˜œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº”·ò×ûð‹+aue_sendtoÞ +ret_msgid372hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýLr‘) G¯‚õw£,¾µÊSDê› µ dôFzé®{'üvºµ CjFzé®{'üvº”·ò×ûð‹+aue_recvfromÞ ret_msgid372hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¸sKtòØOú»jȵ­G•ÌSbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK”·ò×ûð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýßPÜš<éO9¿üb¨‹ä_ÎSD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§ðàûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5—%¬YK¦©‹YQ«†”-ÐSD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§ðàûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑTrÛ-{L™“˜ÈÿHGÀÒSb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§ðàûð‹+aue_writeÚLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýü´âpoŸC¦lmêÚ¦ãÙÔSD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§ðàûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýêsšs<ÔA+C'Ä¡çï±ÖSD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§ðàûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý º{¶mMÓˆWLI`vòØSb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºö‡êûð‹+aue_writeþPhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤<µ_zLñ¸>ÉHìEÚSD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºö‡êûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAÊ8Æ•Nûo +jûq¾ÜSD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºö‡êûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@—Zub~C›©4è VÞSb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºö‡êûð‹+aue_writeˆShostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{7âñSI +»#úå9vºâàSD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ×óûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈ.³‡Læ•%"]×# âSD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ×óûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþîÌV÷Å@q·æ»Ãfo^òäSb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ×óûð‹+aue_writeà@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°Y÷óE-€ 0®íŒÀæSD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŽæÜýûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎMMû“ïò½çIáèSD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŽæÜýûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁ™ä›°ùI)¡ÌA&I"É€êSD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŽæÜýûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËýíOý±MaBqØXAq™ìSD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŽæÜýûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸáh¤ï´Cˆ„§Tuð¶ +ÉîSD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¢žÜ†Žûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýM^ì}MC¥çVÄ¿±ðSD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¢žÜ†Žûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýܼèüŸ[Gj•Á;uAŠ¾iòS<–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbúËÛ±”ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ý@¤a*6ØIS­`6·!ĦôS@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÓ"1ÔG†¶hä8ϧçöS@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýävco’CP¯Ãà~·…¤9øS@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýñe˜ðYD$¢ÛÊ2M.aúS@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýý,zúJº±Lï“.ÚÐüS@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý¾ +)³/›K>…ÿ‰ õdÖþS@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýú8€Í3¨BÖ©à¥ëpì"€T@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý kv12 G¸ î2+µX‚T@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý,™ãxÄN§³7)¿‚„h±„T–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýŽ“£ÆDm®PE.n’ÑH†T<–œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confúËÛ±”ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ýw•Žg&OHÓšŸ¢ø£TˆT–œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆúËÛ±”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýQÉà T|C‚˜+•~b ЊT<–œ Ö‹8ÅFz鮩'üvºÓŠsñŸdX—Ÿ“¿XdgÖ"/etc/login.accessúËÛ±”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ýåD[QlÜB2°¤ ÇäÑ‹ŒT–œ Ö‹8ÅFz鮩'üvºÓŠsñŸdX—Ÿ“¿XdgÖúËÛ±”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý÷¸8aYD_r2æxíŽT<–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbúËÛ±”ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ýqÕ¼ žC®•¶6¡á #‰T@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý樂~ÃìLK†¹ÛÃ-÷ñ‰’T@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÏ»•6äI¤†5¤Z=aÄ”T@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý²ÄÖ¡C˜Š™² y¤?Í–T@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýâ¶yÌ5«C«Ÿï šÜâÞ˜T@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýp,J&¾K¦Ó´À´úUÌšT@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýÈ%‡ +}Miˆñò€Í¸p£œT@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ý“- +KM“²hjº,EÏðžT@–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1278execsshd20ÜS7[AIF¬•pd± (ýXèý—{^JJ©-Œ|gÝ8 T–œ Ö‹8ÅFz鮩'üvºôì{M6N?^Ž6%â?>gúËÛ±”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýBãZ€­mEX•Ù'ÂŽ¢T<–œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confúËÛ±”ûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1278execsshd20ÜS7[AIF¬•pd± (ý +M³_µKX¯ä襒=Ô¤T–œ Ö‹8ÅFz鮩'üvºMTZŸ2S²ŸâÓ‚ˆúËÛ±”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýqß'M@w±ø=„¦T–œ Ö‹8ÅFz鮩'üvºÖ‹8ÅFz鮩'üvºúËÛ±”ûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýÖï[lI·Db«eëxM¿{¨TŠœ Öd'“Fz鮨'üvºÖ‹/~Fz鮩'üvºÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýàôw£åðD¡ÊòrxŠ-ªTŒœ Övz3Fz鮩'üvºÖvz3Fz鮩'üvºÚøñº”ûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýÖ·P:JQ„>°†1JR_0/etc/security/audit_userÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1108execsshd20ÜS7[AIF¬•pd± (ý·ƒF¦Lš¤iF|,ôÀT<Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁR2/etc/security/audit_classÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1108execsshd20ÜS7[AIF¬•pd± (ýKT_"¸éG–Š™+Q²bæ]ÂT0Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁRÚøñº”ûð‹+aue_lseekàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1108execsshd20ÜS7[AIF¬•pd± (ýoW¡,5H ±&IxèÛpÄT<Šœ Öd'“Fz鮨'üvºÜ+´¼ÄQ¼QAÄ’ò6/etc/security/audit_controlÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value7ppid1108execsshd20ÜS7[AIF¬•pd± (ýŒ÷ŒoC¿·Õ TGK;ßÆT0Šœ Öd'“Fz鮨'üvº-%¬>JQ„>°†1JR_Úøñº”ûð‹+aue_lseek6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý}N DD‘Ôo„Ú¾0ÓÈT0Šœ Öd'“Fz鮨'üvº-%¬>JQ„>°†1JR_Úøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1108execsshd20ÜS7[AIF¬•pd± (ý¸ÓQFü´K¼ÝÉ;%½ÊTŠœ Öd'“Fz鮨'üvºÜ+´¼ÄQ¼QAÄ’òÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýw¥ÿß DÛ–†¸Ø=ù4QÌT<Šœ Öd'“Fz鮨'üvºÜ+´¼ÄQ¼QAÄ’ò6/etc/security/audit_controlÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value7ppid1108execsshd20ÜS7[AIF¬•pd± (ý‰ ÜìEBV±´·÷²wßîÎT<Šœ Öd'“Fz鮨'üvº‘Oè´¼s>W³¼AÑ7>í<2/etc/security/audit_eventÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value8ppid1108execsshd20ÜS7[AIF¬•pd± (ýH‘´ÛŠ;IY‹ŠúGÀq7zÐT0Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁRÚøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1108execsshd20ÜS7[AIF¬•pd± (ý +ÿåÄšE"¯Ð >#ùÒT0Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁRÚøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1108execsshd20ÜS7[AIF¬•pd± (ýÒwªR}CO²–Z÷Ê㦠—ÔT0Šœ Öd'“Fz鮨'üvº‘Oè´¼s>W³¼AÑ7>í<Úøñº”ûð‹+aue_lseek̳hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1108execsshd20ÜS7[AIF¬•pd± (ýY%¼}[ºNo„ðÕUÈ·eIÖT0Šœ Öd'“Fz鮨'üvº‘Oè´¼s>W³¼AÑ7>í<Úøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1108execsshd20ÜS7[AIF¬•pd± (ý9}JºûKŸƒíÁ»ø@ØT0Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁRÚøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1108execsshd20ÜS7[AIF¬•pd± (ý­hnÆ@“”xŒ·¹×n7ÚT0Šœ Öd'“Fz鮨'üvºÞI²Ÿ!qÁ_±!@9ÁRÚøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1108execsshd20ÜS7[AIF¬•pd± (ý §VïAt^‡¹Ì‰ÆÞœòÀ×´”°Fz鮩'üvº×´”»Fz鮩'üvº20 ÜS7[AIF¬•pd± (ý˜õàOQIþ¨ãšßKÓô¦ÜTŠœ Öd'“Fz鮨'üvº§VïAt^‡¹Ì‰ÆÞœòÀ×´”»Fz鮩'üvºÚøñº”ûð‹+aue_socketpair ret_fd19ret_fd210hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý.{wsSJk¿ñ²3•}¢ÞT"Šœ Öd'“Fz鮨'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýèÞŸ=H$±ÅW5ÐêàT"Šœ Öd'“Fz鮨'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýê˜Ç4Jæ«+²YÌâT$Šœ Öd'“Fz鮨'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_fork +arg_pid1281hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1281ppid1108execsshd20ÜS7[AIF¬•pd± (ý‹7¿‘CD žÐ×M­„̬äT +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setgidgidë +arg_gid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýò2‚ØÕLq .é[9 +‹yæT<Œœ ×´©³Fz鮩'üvºZ2°Ë1]±m‘¨/etc/groupÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd110hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value10ppid1278execsshd20ÜS7[AIF¬•pd± (ýrÅ–PîÅ@“ +0ù%yËèT0Œœ ×´©³Fz鮩'üvºZ2°Ë1]±m‘¨Úøñº”ûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd10ppid1278execsshd20ÜS7[AIF¬•pd± (ýñ˜*?:ÉFìƒï¡OQ«YêT0Œœ ×´©³Fz鮩'üvºZ2°Ë1]±m‘¨Úøñº”ûð‹+aue_lseekðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd10ppid1278execsshd20ÜS7[AIF¬•pd± (ýÛá<—kJIrµ’R ÿ<àìTŒœ ×´©³Fz鮩'üvºZ2°Ë1]±m‘¨Úøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd10return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý ÇùÔͽAJ»gx§Mç¦ÎîT,Œœ ×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setlogin +hostHdc53375b-4149-46ac-9570-64b1090f28fd +loginuserreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýD¬¿iBÙ4¬\aø«ðT6Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1278execsshd20ÜS7[AIF¬•pd± (ý\ã¨wÿ¦MH«„çV®³ŠTòT6Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1278execsshd20ÜS7[AIF¬•pd± (ýÞhq˪G­´Ý¹Úï9ôT +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setuiduidë +arg_uid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý—ß0=ïJ¦‘æ-Þé(ÔºöT +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý®gKE_B¼< Ö€{ÑøT +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýè租lF'‘a«r­¤NcúT<Œœ ×´©³Fz鮩'üvºNÐ$a![¡ú¼û!Ã.,/home/user/.login_confÚøñº”ûð‹+aue_open_rwtc +flagsmode +ret_fd110hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value10ppid1278execsshd20ÜS7[AIF¬•pd± (ý1÷u:[IEø‹Õ)Rz}½üTŒœ ×´©³Fz鮩'üvºNÐ$a![¡ú¼û!Ã.Úøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd10return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýAFj\"ÁN¨«·À©Kp£þT<Œœ ×´©³Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confÚøñº”ûð‹+aue_open_rwtc +flagsmode +ret_fd110hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value10ppid1278execsshd20ÜS7[AIF¬•pd± (ý½nçÂ?üOäYšh¨€€UŒœ ×´©³Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd10return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý3Ô=WIÇ¢Îõöã_‹‚U +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýqè½I8ªK?¼Bl1ã„U +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýPœ<€JúŸ…û¿Çâ†U6Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1278execsshd20ÜS7[AIF¬•pd± (ýêŸðKK}¹_'p§¶ÁïˆU +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý)UüiŠI°¡¹¢P+ÝŠU +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý¢à8]úNëœêY~6’ŒU<Œœ ×´©³Fz鮩'üvºNÐ$a![¡ú¼û!Ã.,/home/user/.login_confÚøñº”ûð‹+aue_open_rwtc +flagsmode +ret_fd110hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value10ppid1278execsshd20ÜS7[AIF¬•pd± (ým_†M3ÑN,”']ç»VŽUŒœ ×´©³Fz鮩'üvºNÐ$a![¡ú¼û!Ã.Úøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd10return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýàjÌo-(Gò‰ÐÔÕ«8ýçU<Œœ ×´©³Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confÚøñº”ûð‹+aue_open_rwtc +flagsmode +ret_fd110hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value10ppid1278execsshd20ÜS7[AIF¬•pd± (ýâ>z¢ªLž*°&a~H­’UŒœ ×´©³Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆÚøñº”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd10return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýycû›rR@s¿:9mQd'”U +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý£ä#i÷kOÝ»MŽ"‰ k2–U +Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýËï¥k@Òµ–¡}7˜U6Œœ ×´©³Fz鮩'üvº×´©³Fz鮩'üvºÚøñº”ûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1278execsshd20ÜS7[AIF¬•pd± (ý VÔt°_å“-º?XŒ×µÍFz鮩'üvº×µÎFz鮩'üvº20 ÜS7[AIF¬•pd± (ýRAÏ­1«E»‚XAX¨KäšUŒœ ×´©³Fz鮩'üvºVÔt°_å“-º?XŒÚøñº”ûð‹+aue_pipe ret_fd110ret_fd211hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýmð<U”B´¶s6(Cˆ[œU"Œœ ×´©³Fz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý~uPå¶Ew›±bÜ©ÉÔ…žU"Œœ ×´©³Fz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ýù÷7ÁNK›œéWd_}² U"Œœ ×´©³Fz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1278execsshd20ÜS7[AIF¬•pd± (ýx=¸Œ¿@öŠù7ýJ,¹´¢U"Œœ ×´©³Fz鮩'üvº×µÍFz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý“sÒ­µN3ˆ£ŽÃîŠú¤U"Œœ ×´©³Fz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1278execsshd20ÜS7[AIF¬•pd± (ýÎB\iv M/£n5½mS²‰¦U"Œœ ×´©³Fz鮩'üvº×µÎFz鮩'üvºÚøñº”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý~;ÖBócH%…= ‘¡¨U>Šœ Öd'“Fz鮨'üvºÚøñº”ûð‹+ aue_posix_openpt +ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value9ppid1108execsshd20ÜS7[AIF¬•pd± (ýf~¢‚Æ%M»¸/hÌnªU<Šœ Öd'“Fz鮨'üvºí( ö~R¶ ~{‚~¯/dev/pts/0Úøñº”ûð‹+aue_openat_rwtc +flagsmode ret_fd111hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value11ppid1108execsshd20ÜS7[AIF¬•pd± (ý-®<´@Šæ¸ÕµœEº¬U<Šœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨/etc/groupÚøñº”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1108execsshd20ÜS7[AIF¬•pd± (ýÿ‘"ú5@D8¬¾2ü¸b®UŠœ Öd'“Fz鮨'üvºZ2°Ë1]±m‘¨¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý&·pSï³AoÇ‚(ý±h°U4Šœ Öd'“Fz鮨'üvºí( ö~R¶ ~{‚~¯/dev/pts/0¦€ÑÄ”ûð‹+aue_chownuidëgid arg_uid1003arg_gid4hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýqíŽI Bì‚žd›US²U<Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g/etc/spwd.db¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1108execsshd20ÜS7[AIF¬•pd± (ý+è㦖Kú²Âm·óm¸´U@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýÛçï3ë´M³8Úqâ(r¶U@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýòüõN¿Bß·†»6ã• ¸U@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý+6ô¦4F¿¹º‰”Í SÔºU@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý‚^PXâ@pÁ^Õò…¼U@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýRì#}nFÚ½qî’õ³‹¾U@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ývÆÏ'ôAâŠN<›®ÀU@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý×ûQ$„OÛŠ2±†”‰ÂU@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý‰Ì<òROã´¯‚nXÕˆÄUŠœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý›é‚ð¬D„ñ™OŽ@fõÆU<Šœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À,/var/log/utx.lastlogin¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1108execsshd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"˜ ýªN&²{H’¼K‘áÿ|B.ÈUŠœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÚÝÏìG×Mס!3sÊU<Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g/etc/spwd.db¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1108execsshd20ÜS7[AIF¬•pd± (ý–l©¸µ G´´bŒþ˯/ùÌU@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý²+Š ïN• +/PcWF(ÎU@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýB’§ÚÌöDµC!PûÝÛˆÐU@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý.›7üºIY…cÒƒ˜])IÒU@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýö|K[X¾Kk¬W]™©g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ý¿¹¡ñL–A ¿ÉlÖU@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýqV‡¢GJC¿vµãTqöšØU@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýfǪÈn1Aýš°ê¹“?V±ÚU@Šœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12ppid1108execsshd20ÜS7[AIF¬•pd± (ýè"Ç:ÆE•²ÀãÅv´®‰ÜUŠœ Öd'“Fz鮨'üvºôì{M6N?^Ž6%â?>g¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýØ—ÖêµNá¸Þ¤º VaóÞU<Šœ Öd'“Fz鮨'üvº—¢y:SU™:Z•SØŽ&/var/run/utx.active¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1108execsshd20ÜS7[AIF¬•pd± (ýJ3¿;,pF~¥ÖÓ …³ÙàU<Šœ Öd'“Fz鮨'üvº—¢y:SU™:Z•SØŽ&/var/run/utx.active¦€ÑÄ”ûð‹+aue_open_rwtc +flags"mode¤ +ret_fd113hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value13ppid1108execsshd20ÜS7[AIF¬•pd± (ýUòm4N‡¤.ù}&„Ç;âU"Šœ Öd'“Fz鮨'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value +16386ppid1108execsshd20ÜS7[AIF¬•pd± (ýAù7§,ãE¡Ñ š# +äUŠœ Öd'“Fz鮨'üvº—¢y:SU™:Z•SØŽ¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýRìE“ NÁ |ɉŠú]æU<Šœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À,/var/log/utx.lastlogin¦€ÑÄ”ûð‹+aue_open_rwtc +flags"mode¤ +ret_fd113hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value13ppid1108execsshd20ÜS7[AIF¬•pd± (ý‘à« Oó±?¨ÃÕ§¥nèU"Šœ Öd'“Fz鮨'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value +16386ppid1108execsshd20ÜS7[AIF¬•pd± (ý¥nû F°®ßÞ«³H«êU0Šœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À¦€ÑÄ”ûð‹+aue_lseek”hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13ppid1108execsshd20ÜS7[AIF¬•pd± (ý;ñ‘@Dö’: ñ³ÓRŸìU0Šœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À¦€ÑÄ”ûð‹+aue_lseekŠhostHdc53375b-4149-46ac-9570-64b1090f28fdfd13ppid1108execsshd20ÜS7[AIF¬•pd± (ýÏEÊаB8®}¸ê +ãiîUŠœ Öd'“Fz鮨'üvº‹»Äñþ^ñVE®þ;À¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý!ÍLí¢@]ªª>YtðU<Šœ Öd'“Fz鮨'üvºE¨h§ ‘]Œ§\œ‘»ù /var/log/utx.log¦€ÑÄ”ûð‹+aue_open_rwtc +flags mode¤ +ret_fd113hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value13ppid1108execsshd20ÜS7[AIF¬•pd± (ýC‘=’—ýDTªmÇ4¦òUbŠœ Öd'“Fz鮨'üvºE¨h§ ‘]Œ§\œ‘»ù¦€ÑÄ”ûð‹+aue_writev¦hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13ppid1108execsshd20ÜS7[AIF¬•pd± (ý¶Øôg`ÚNž‰v ±MôUŠœ Öd'“Fz鮨'üvºE¨h§ ‘]Œ§\œ‘»ù¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý`êŠî#ûJk¼%ɦA•H'öUŠœ Öd'“Fz鮨'üvº—¢y:SU™:Z•SØŽ¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ýÒ’¨Â–`Oh¾›,ñ’oøUŠœ Öd'“Fz鮨'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd0return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý½{PzšÇH…˜Ö_#QåúULŠœ Öd'“Fz鮨'üvº×´”»Fz鮩'üvº¦€ÑÄ”ûð‹+aue_sendmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd10ppid1108execsshd20ÜS7[AIF¬•pd± (ýÙXØ£A…©–+“VdžðüULŠœ Öd'“Fz鮨'üvº×´”»Fz鮩'üvº¦€ÑÄ”ûð‹+aue_sendmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd10ppid1108execsshd20ÜS7[AIF¬•pd± (ýYòt¼ŒÇBrŸûjùõJþU<Šœ Öd'“Fz鮨'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/null¦€ÑÄ”ûð‹+aue_openat_rwtc +flagsmode ret_fd10hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value0ppid1108execsshd20ÜS7[AIF¬•pd± (ý‰rÆ@@˜ï4£\Åpi”V"Œœ ×´©³Fz鮩'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1278execsshd20ÜS7[AIF¬•pd± (ýÒWì§ÚKŽƒ žAA p\–V"Œœ ×´©³Fz鮩'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1278execsshd20ÜS7[AIF¬•pd± (ý–,T,nMã¸qÚþ Ñ˜V"Œœ ×´©³Fz鮩'üvº¦€ÑÄ”ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value6ppid1278execsshd20ÜS7[AIF¬•pd± (ý¶íÝpCßr|8ÇGW‚šVJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦€ÑÄ”ûð‹+aue_sendto˜ +ret_msgid375hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýdn<)Gʘ¼m¿yÇ–JœVDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦€ÑÄ”ûð‹+aue_recvfrom˜ ret_msgid375hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý&SB¤´EÞ¿¹Dí©ƒÇžV<–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯/dev/pts/0¦€ÑÄ”ûð‹+aue_openat_rwtc +flagsmode ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value12ppid1281execsshd20ÜS7[AIF¬•pd± (ýr ] ÚbKwŒz²Ãà­ V–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý_=Ãl0M¥”du€±è‡¢V<–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯/dev/tty¦€ÑÄ”ûð‹+aue_openat_rwtc +flagsmode ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value12ppid1281execsshd20ÜS7[AIF¬•pd± (ý©Z¶_M¦÷áùuAV¤V–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýиYEï„Ou­2+ÊËXR ¦V–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd13return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý ˆˆ³UMT‘äöù*> â¨VJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦€ÑÄ”ûð‹+aue_sendto¬ +ret_msgid376hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÆžÛ²)%B¤ÉÂÞVøªVDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦€ÑÄ”ûð‹+aue_recvfrom¬ ret_msgid376hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýo樲’A7£žŒ‘ˬV<–œ ×µ¨Fz鮩'üvºüñ§ª–X_–ªu{X„ç/etc/motd¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1281execsshd20ÜS7[AIF¬•pd± (ý_•k4qå°V +–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº¦€ÑÄ”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý¦ÐÄ»£‹KºïÙ¨¿²V +–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº¦€ÑÄ”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýÚ®âÏ´ŒLš¡p&FIvs´V<–œ ×µ¨Fz鮩'üvºNÐ$a![¡ú¼û!Ã.,/home/user/.login_conf¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1281execsshd20ÜS7[AIF¬•pd± (ýòÑÆžLῺ0铤,f¶V–œ ×µ¨Fz鮩'üvºNÐ$a![¡ú¼û!Ã.¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý‹ÂmèŸ*@¤y‘†=Û®V¸V<–œ ×µ¨Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.conf¦€ÑÄ”ûð‹+aue_open_rwtc +flagsmode +ret_fd112hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value12ppid1281execsshd20ÜS7[AIF¬•pd± (ý,@{——CS§×T.?‚ò8ºV–œ ×µ¨Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd12return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý  +çA«> ˆ¡Ë¼V +–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº¦€ÑÄ”ûð‹+aue_seteuideuidë +arg_euid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýµéQéGûýwv;/ñ¾V +–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº¦€ÑÄ”ûð‹+aue_setegidegidë +arg_egid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ýШ_íÔG€žÓ„UR>ßÀV–œ ×µ¨Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<¦€ÑÄ”ûð‹+aue_closefrom +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd11return_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý© ì\,–G§™>+£oê³ÂV6–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº€-§q0]±+G-0D/home/user¦€ÑÄ”ûð‹+aue_chdirhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execsshd20ÜS7[AIF¬•pd± (ý«Ì¥ÄnØFã¤ïšh(}ÄV–œ ×µ¨Fz鮩'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¦€ÑÄ”ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine +-bashppid1281execsshd20ÜS7[AIF¬•pd± (ý ¥ª4_½M¶¯7†^A'ÆV<–œ ×µ¨Fz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¦€ÑÄ”ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýÔì DON…£å,oˆ[ÈV@–œ ×µ¨Fz鮩'üvº‰oý©äÇU¤©A)Eǹ ¦€ÑÄ”ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý¹W9Ö çFŽ§c +šŽÊV–œ ×µ¨Fz鮩'üvº‰oý©äÇU¤©A)Eǹ ¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýýÜ®¥Ùó@¥”NÏFË +dÌV<–œ ×µ¨Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¦€ÑÄ”ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý,ÊÃ¥6$G™¥ì‡çXcÎV@–œ ×µ¨Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â¦€ÑÄ”ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý„eEPB`KZ°ÝÅA†ºYÐV@–œ ×µ¨Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â¦€ÑÄ”ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýž<š + ·AY’zˇÅ9ÒV–œ ×µ¨Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýÌ.ê²VÓGY…_ »JÜ…ÔV<–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8¦€ÑÄ”ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý®æ¥mB‹¥6 ni*‰ëÖV2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý7ÊÍì“Kf´˜éH©ËÂØV2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýé™Ìº'¬MžÃÀÒ£õ|@ÚV2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý`\=¼¾-Dȧò%fyðÈ™ÜV2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý V¤QÊHs‚X"ÁÔcÔ ÞV2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"’Àý´o„ÓQaE±‹.92mÀ£àV2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý)BSIãF§½sÉ5)Ï âV2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýÇ=OCÏ´êC'ZºÆLäV2–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý2NªæñµNSŒRrM>\4UæV–œ ×µ¨Fz鮩'üvºâpÑ +m.×W®mAs××¼›¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýZœ–ú7K­©%ªiA&âèV<–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8¦€ÑÄ”ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý=r³ þOo˜³üe‹Ç•`êV2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý'K†f—Lùª=ÆîwìV2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý 9\4Ý´IØ›bn§ö^›îV2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý…D)Ú9ÄOâ€=bÔŸˆ•œðV2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýFÄ]§û«Lp’™‰3Uú»òV2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý'ƒÐ½Iú¬‘._<–dôV2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýÖÑb;·bLí ÚV½mclÎöV2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýk©UçoA…¯ˆÖ/ÖËøV2–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýí‘Ü߇Jˆ¾ÆpÚ$[ØúV–œ ×µ¨Fz鮩'üvºm/"P;=\»P½¤¬=P_¦€ÑÄ”ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýv iÓE°½­rÖ¨%üV<–œ ×µ¨Fz鮩'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1¦€ÑÄ”ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýÈTr1x@rº †¦[þV0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´Ø÷ˆ•ûð‹+aue_lseek‚•hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ˜uªOZAS®}Þìi^£€W2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýÑKL#?¢D³×è⪲ '‚W2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýxñùÀ¤ô@­Í÷ ò3„W2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý{)°¢E°NÓ”f6ß3Ä5†W2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý$ÿ HCVDŠ¦{‹å„KoˆW2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý•´À‰iGf®1É$2Ǹ8ŠW2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý¤Ý2w;JŸºà{%µÎŒW2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýÁæ ±pBþ€=sm .ŽíŽW2–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý§`vfG”ó½:OO¸:W–œ ×µ¨Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý÷;î‹uIm‚áÅr'’W:–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý/m°®½–H‡£¿%¢êäâ%”W:–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýb*þ°õoMi§/ÛŽR –W:–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýœ×v.€H$›ä± ¯’é˜W:–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý¤àVvRLz€4fš²âšW:–œ ×µ¨Fz鮩'üvº´Ø÷ˆ•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýåÅâ'ë®Fº½»™ø1œW<–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯/dev/tty´Ø÷ˆ•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýiì,a‹AMM³7l¼–¿IžW–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýPF¾|úLŸC*uN/| W<–œ ×µ¨Fz鮩'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.conf´Ø÷ˆ•ûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýr¾ÏèÜ€H˜ªdIµú¶[¢W@–œ ×µ¨Fz鮩'üvºÜN½Ëê¯+^¯êZ£®+V´Ø÷ˆ•ûð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý·\K°}I~­S’Ñ寤W@–œ ×µ¨Fz鮩'üvºÜN½Ëê¯+^¯êZ£®+V´Ø÷ˆ•ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýÇÀ,-kF;· ±Û§†¦W–œ ×µ¨Fz鮩'üvºÜN½Ëê¯+^¯êZ£®+V´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý€ríÁ¾KŸ³ÁHßÜò#©¨W<–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–/etc/pwd.db´Ø÷ˆ•ûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý›4¾1a`@«PáÚ®©æüªW@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýôhÑÚOOæµý)±§´Â$¬W@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýò/ɹUªCš’óÑ\D¸ª®W@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýû¤Ú”H.¾2èïc²ØR°W@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýQã½ðNl¯;J6ߪT²W@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý¶ {õ¿IkšÍ¬Z1ýsÄ´W@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý~E>gL,Šk%Ðub€Î¶W@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ýKº‰*OªÓµY½ŠB¸W@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý ÞSÌ‚žB¦’Îü§h“ºW@–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý‡¹a œNV¼™pi®~¼W–œ ×µ¨Fz鮩'üvºfš Ž_è^ŸŽkèþ–´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý¹XÞéÄM‹¤cr;þM®N +ÐW<–œ ×µ¨Fz鮩'üvºÍÈ‘uu®Sµuåî4/etc/profile´Ø÷ˆ•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýò*÷MC„—>JþêìÒW@–œ ×µ¨Fz鮩'üvºÍÈ‘uu®Sµuåî4´Ø÷ˆ•ûð‹+aue_readähostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý|¯-þe:I!¸„pîtÏžÔW–œ ×µ¨Fz鮩'üvºÍÈ‘uu®Sµuåî4´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýZ啬d"GÛ¡ÄóâG‘cÖW<–œ ×µ¨Fz鮩'üvºö"УîêZ›îÀÀªê&ã&/home/user/.profile´Ø÷ˆ•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýîáîŽöJ“²R€AØW@–œ ×µ¨Fz鮩'üvºö"УîêZ›îÀÀªê&ã´Ø÷ˆ•ûð‹+aue_readâ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1281execbash20ÜS7[AIF¬•pd± (ý>·,DœJæT:õ‰ÚW–œ ×µ¨Fz鮩'üvºö"УîêZ›îÀÀªê&ã´Ø÷ˆ•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý›ËOO‚ÛJ’j÷.qyª>ÜW$–œ ×µ¨Fz鮩'üvº×Á…çFz鮩'üvºæˆ’‘•ûð‹+aue_fork +arg_pid1283hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1283ppid1281execbash20ÜS7[AIF¬•pd± (ýÞ9ñ…‘1Mt«I+¸m€¨ ÞWšœ ×Á…çFz鮩'üvº°FL ¼"X¼ 5¢ø"¬£$/usr/bin/resizewin'ìAzX™¦}˜¹(/libexec/ld-elf.so.1戒‘•ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine*/usr/bin/resizewin -zppid1282execbash20ÜS7[AIF¬•pd± (ý0ˆ•ç7ÑD‚ˆÊ"žö˜S^àW<šœ ×Á…çFz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf戒‘•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execresizewin20ÜS7[AIF¬•pd± (ý”TàÙðdEk³A¶§?|«âW@šœ ×Á…çFz鮩'üvº‰oý©äÇU¤©A)Eǹ 戒‘•ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýŸI©Úë·D¢¸wþÒØsÑäWšœ ×Á…çFz鮩'üvº‰oý©äÇU¤©A)Eǹ 戒‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ý&D_6õ@ƒ  '­â98æW<šœ ×Á…çFz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints戒‘•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýú\DôêAÞúß0 €’0èW@šœ ×Á…çFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ý8IyøæêA£µDë>x¤êW@šœ ×Á…çFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýÈ'ýfrtJå ¼{%åžeìWšœ ×Á…çFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ý]YÙô˜Bè¸2Aƒ%fîW<šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7戒‘•ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýN£çÀ¼mE.·ú@ú[ìÁ¶ðW2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"žþúåq½ pA¥½öÄtp‚õòW2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ý…Á<–7D5‹! ;Ÿ‹•ùôW2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýÇyŠŠJCs²>"Ú¹!öW2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýNÊggýCD¥êÈLC7°ÑøW2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýùûö,C‚’¶bš“Ëé»úW2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýŒ9£¼XF•¾«úç÷]ØüW2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýôÉ(Y¦rMO¸`M9SS‚þW2šœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýœ´÷ÌÈ.BšF[zýx÷ê€Xšœ ×Á…çFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ý6‘ŠÖ¨~KÈ•)gô÷=Ä‚X:šœ ×Á…çFz鮩'üvºæˆ’‘•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ý ûæ Eþ¸2ãóÀ¶‚þ„X:šœ ×Á…çFz鮩'üvºæˆ’‘•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ý7¿k7<ÔO¯—  U7Ÿ‹†X<šœ ×Á…çFz鮩'üvºí( ö~R¶ ~{‚~¯/dev/tty戒‘•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execresizewin20ÜS7[AIF¬•pd± (ýüD<3¡G@¾¿«çˆXšœ ×Á…çFz鮩'üvº×Á…çFz鮩'üvºæˆ’‘•ûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execresizewin20ÜS7[AIF¬•pd± (ý ˆ^zn I*³R[ãb€ŠX$–œ ×µ¨Fz鮩'üvº×ÂlFz鮩'üvºæˆ’‘•ûð‹+aue_fork +arg_pid1284hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1284ppid1281execbash20ÜS7[AIF¬•pd± (ý5N;¤WF•Ïªv*BŒXšœ ×ÂlFz鮩'üvº—>Ï¿ä7Q·äAºaG /usr/bin/fortune'ìAzX™¦}˜¹(/libexec/ld-elf.so.1戒‘•ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine:/usr/bin/fortune freebsd-tipsppid1282execbash20ÜS7[AIF¬•pd± (ýï”]äüBþ§6\ÅÙt˜ŽX<šœ ×ÂlFz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf戒‘•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execfortune20ÜS7[AIF¬•pd± (ýì–Pñ;¯GSŒŒ&>²1ó(X@šœ ×ÂlFz鮩'üvº‰oý©äÇU¤©A)Eǹ 戒‘•ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ý©0 +‰hA䟎¨ù‹’Xšœ ×ÂlFz鮩'üvº‰oý©äÇU¤©A)Eǹ 戒‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execfortune20ÜS7[AIF¬•pd± (ý(µé'NL¸€Ï¹ L~ùÙ”X<šœ ×ÂlFz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints戒‘•ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execfortune20ÜS7[AIF¬•pd± (ý=2îÜMD¤w/#~"¦n–X@šœ ×ÂlFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýµ\ AiºlÙ_Z=¶±˜X@šœ ×ÂlFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ý'/..6Gc¸1Ú1òšXšœ ×ÂlFz鮩'üvºXꎩð®…\®ð@JÌ…¼â戒‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execfortune20ÜS7[AIF¬•pd± (ýõöÚTCĵQùŸ +}üÎœX<šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7戒‘•ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execfortune20ÜS7[AIF¬•pd± (ý%ªdã<I´ôÓù¾ýÄ=žX2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýAßÆ*çBè©Ö'ÅÍþ X2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýñt•W/GG/“œYñJ¨F¢X2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýúÖ‘°ÀGÌ–wRت¦›¤X2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýgžöŠáEœ¬MÜ’°á¦X2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€Àå arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýÓ—¬_¼~OD©‚ó¿&Ø1¨X2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€Àå arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýAÍfö”KMŠ°mÉÙLBΪX2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€ˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýƒøŸ³ „E=˜„C¶þ&ɬX2šœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_mmap€€ˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execfortune20ÜS7[AIF¬•pd± (ýkQäÎÈNÿ›`,IvÊ®Xšœ ×ÂlFz鮩'üvºÞA`ì•øËQ¸•bxñË"œæˆ’‘•ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execfortune20ÜS7[AIF¬•pd± (ýbÍ2ÛJßmd8¹°X:šœ ×ÂlFz鮩'üvºæˆ’‘•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execfortune20ÜS7[AIF¬•pd± (ý¥äŸgô&D_…˜š>ëî˜&²X:šœ ×ÂlFz鮩'üvºæˆ’‘•ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execfortune20ÜS7[AIF¬•pd± (ý»Ø‰+Nü—ï{¯·×´X0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+aue_lseekÄ  hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’å:0ËßA ³eJΓ¨ë¶X0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+aue_lseekÄ  hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°ë‚dçÍJØŽgØI<ºX ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+20ÜS7[AIF¬•pd± (ýpÛM*(ŒM1ŸŠc…ÿl|¸X@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘_˜ã}@ʺ§ˆŠâ°E¾X ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+20ÜS7[AIF¬•pd± (ý¨)ÀÃâìE<‹o—߃eí¼X@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊk·¸£uH_°/Oa?©_ÂX ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+20ÜS7[AIF¬•pd± (ýº åËÒ›Oï¥éêÔ³ ÚßÀX@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²©ýÓœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýf–ty0B9¾ù̺—±ÆX ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+20ÜS7[AIF¬•pd± (ý‚ºrI”4@‰¢ì;µu›WÄX@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýV€½„C—@9¤Wˆ°3¢ÇŠÊX ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+20ÜS7[AIF¬•pd± (ý qrIA“)ÄõÑïÞÈX@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýzÍo@PIþ‡ú/R1÷ÎX ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+20ÜS7[AIF¬•pd± (ýö }ä GJP´§î lT|ÌX@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\N2è²F²N¤Úû'ÁÓÒX ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+20ÜS7[AIF¬•pd± (ý‰f*PeF¯zñí¸¡þÐX@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­<:cjpD˜‰éy†åŸÖX ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+20ÜS7[AIF¬•pd± (ý9W¬Y9B3½ìì4%Í—ÔX@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýû˜€!¬Aü†B,Òð»ë?ÚX ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+20ÜS7[AIF¬•pd± (ýüvP„¸N¬¤ÓÊàtØX@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýoÙè3¼iM¨´ó<>YãÀŽÜX:‚œ Ê +ÙKFzé®›'üvºÒèÁÝœûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±8f)qwGž‚I3‚ +~sóÞX@œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„Õ$ï®AO˜À²K@ÚsàX@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥œÂ¤¶M†«“ýËv‰ð>âX@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadŒ@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZk¾E +åK ’âBž +ú¤äXbœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýDg€™D ½O0:GªQæXb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÒèÁÝœûð‹+aue_writeö@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýt»W A—¨äÆeG±ýJèX@œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚6ý…5iB.›-÷8øWêX@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýLO¶ vL÷°ZL°ÈÓ%ÔìX@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadä8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýθú•,NPæÝâM‹‰£îXbœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸Â’PL‰PíweðXb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÒèÁÝœûð‹+aue_writeÎ9hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—\¡²DЭӣTOa?½òX@œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_m_•Ì†GŸ¸íÐÔ‚6ˆôX@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓ¸nl¿OÓ Õ̇ÐqöX@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_pread’GhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠÑº-BñFè?V?’Ù¥øXbœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýé­>íC—˜÷§ÕÊã%²úXb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÒèÁÝœûð‹+aue_writeüGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýY´R´sE¿"5ÐUy·±üX@œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýFo%:îOL¤l‹Ì×M=þX@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%Ž‡ðöIš(Ó<{𔣀Y@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_pread¼AhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨^Ò5#kKÖ…Æõ~°Õ¸%‚Ybœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰‰"­Dڧǫ–ÏÚ­„Y@œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýêà»ð˜Hˆ€$ƒz»T†Y@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁ 62#¾Gœ·U!ʃxÖ?ˆY@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadîIhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙTn˘I1¢•BPÕ:P`ŠYbœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýWdì6ËB|®%Ùcwt07ŒY@œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýú'ÿ ÇÈJw…Fá¼ïÈfŽY@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"’Úün&%±K½³é ™£Þð•Y@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_pread”KhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢ŸŸÄkVE˜,^BØVŽ’Ybœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýWz6e*Eö«ë¾Ê)LÍg”Y@œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚK•yC˜¦·¢É˜\–Y@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”‘sŸÉÉCd²þý÷h8 Õ˜Y@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadÐAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýàb¢ý™MG2ÿ»¹‹0šYbœœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒèÁÝœûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•=é^"M˜©V—€i‘)œY@œœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂ\©¾+¿BÄ’ "Øô·&žY@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾óîr-òGö N?;© Y@œœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒèÁÝœûð‹+aue_preadâIhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ým–‘f7…@‚¥BLˆ¯€ëÄ¢Y0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÐÌÞ ¤ûð‹+aue_lseekÊÝ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQ|uEE$¹ó pc¤Y@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ìÿ…°¥ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýr{¬ôvI–³.–¹NGg¦Y@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ìÿ…°¥ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýùmé%ÅCv–TôŸzõ÷a¨Y@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ìÿ…°¥ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý ÄÛŒ[ÍJ‰“okãÜP¥ªYb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ìÿ…°¥ûð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý’yC¥¤Éà|p1 ¬YÔ› µƒÎ¯Fzé®›'üvºµƒÎ¯Fzé®›'üvºÎå®Ó¨ûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1226exec +sleep20ÜS7[AIF¬•pd± (ý+ó‘v9DE• ¬ü&¾g®YΛ µƒÂFzé®›'üvº߉Ðj_”Ðvˆj°/usr/bin/nice'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Îå®Ó¨ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine$nice -4 fsck -B -pppid1execsh20ÜS7[AIF¬•pd± (ýÌÃÊðo‹D滺Ÿƒ|LÏ'°Y<Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execnice20ÜS7[AIF¬•pd± (ý`”\/B@¹§(œƒH¡¼²Y@Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýYˆ.r;JG ˆFr~†uZ´YΛ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execnice20ÜS7[AIF¬•pd± (ý‡ZžÊF>¤ëÜ…åÿ¶Y<Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execnice20ÜS7[AIF¬•pd± (ýT’Wß'Oè ù +K´¥¸Y@Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýp/ÖkA»‰zZÛ¼£1ºY@Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ý×3×YùO¢•[Ê÷>p\>¼YΛ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execnice20ÜS7[AIF¬•pd± (ýAvÁ_ÓBó­‡Ï#–OzR¾Y<Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Îå®Ó¨ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execnice20ÜS7[AIF¬•pd± (ýr¯M”EÚ_Þ'' pÀY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýÕË TµBeŠ{¼DO’ÂY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ý÷zè J ²…T+ì¼dªÄY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ýïZ@éã}I¨ŒDL?¢Œ’UÆY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ý½ìâCzÑA­¥§o'wsÈY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ý\»31[CÚ ðÿ®9ÊY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ý|y¼Ñ1I‘„&¿Õ&AÇÌY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ý‹9æüÐDk®¨ZGÎÔ\ÎY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execnice20ÜS7[AIF¬•pd± (ý½«Î6ÐíLQŸ~ÕqäôþÐYΛ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execnice20ÜS7[AIF¬•pd± (ýf·4ÝèK/ˆ™Y($S0ÒY:Λ µƒÂFzé®›'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execnice20ÜS7[AIF¬•pd± (ý$N¶T¢òEë’ùûö²ÓÔY:Λ µƒÂFzé®›'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execnice20ÜS7[AIF¬•pd± (ýÔÔs‹ûÓIb†mdž,Ù¨´ÖYΛ µƒÂFzé®›'üvº§d +½å X¥½g4È Î:/sbin/fsck'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Îå®Ó¨ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinefsck -B -pppid1execnice20ÜS7[AIF¬•pd± (ý cÑ¿¼Do®Ñ NHøØY<Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execfsck20ÜS7[AIF¬•pd± (ýïï‹xòE‡l¥ÝúLÊQÚY@Λ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýyFØ×Gá—e‹:i¿`äÜYΛ µƒÂFzé®›'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execfsck20ÜS7[AIF¬•pd± (ýÌ¢Fß29NŸûøpÌ€ïbÞY<Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execfsck20ÜS7[AIF¬•pd± (ýi—IsZý@]Q×>Ò_ÄàY@Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý»$a)´I‡ž>bgÙ[„fâY@Λ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýHX¿œù¸J¥Ä1x Ž¤qäYΛ µƒÂFzé®›'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execfsck20ÜS7[AIF¬•pd± (ýE7ê.­zG{ úîøæY<Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Îå®Ó¨ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1execfsck20ÜS7[AIF¬•pd± (ý×ÿÍW²E”‚çºBˆñ.èY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýQ´ó² L@e‡¼-n[ÇÊêY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý,Q3YÅDN„¦NGE…ŒìY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýã,ç{ùJù¿õLYF¹IîY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€À¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý/ÎSâM¾«ZÝ£L»ðY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€Àä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýè‹ÔhzÍIUž£ö¾íIžlòY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€Àä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý£ÕYqE ¿PtQwŠ:ôY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€‡ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýëfê[„EĉÙ_Ú]eÖ8öY2Λ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€‡ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ývÝs±ÊõF½ñß“^öøYΛ µƒÂFzé®›'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execfsck20ÜS7[AIF¬•pd± (ýÙ¦MjIG‰Ã,È^QäoúY:Λ µƒÂFzé®›'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execfsck20ÜS7[AIF¬•pd± (ýJ%º¯„*La²ÃÈøÓ¸ðð€Z@Λ µƒÂFzé®›'üvºö¢][ˆª_ˆ[°¿ªàôÎå®Ó¨ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ýúìºeì+GÊ–÷DÓ:À¿‚Z$Λ µƒÂFzé®›'üvºÙR©Fz鮩'üvºÎå®Ó¨ûð‹+aue_vfork +arg_pid1285hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1285ppid1execfsck20ÜS7[AIF¬•pd± (ý¨þc¾P@´ƒó*Ðè „Zšœ ÙR©Fz鮩'üvºCHX»@naV®@–+Æaá_/sbin/fsck_ufs'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Îå®Ó¨ûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine4fsck_ufs -p -F /dev/ada0p3ppid1226execfsck20ÜS7[AIF¬•pd± (ý½¥èæÎ G¦ ‚—‰¸T†Z<šœ ÙR©Fz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýÑUä!L í<5  |ˆZ@šœ ÙR©Fz鮩'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý¢‚] +ì™CÌ–|}µfÿŠZšœ ÙR©Fz鮩'üvº‰oý©äÇU¤©A)Eǹ Îå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý?®V$àdB¨˜9y¬o'ŒZ<šœ ÙR©Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÎå®Ó¨ûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý¦MŽçµAV3„Ó½PäŽZ@šœ ÙR©Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý³†EÆØFu˜¯pÎEûZ@šœ ÙR©Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýlúI\†å½=p°Î€’Zšœ ÙR©Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýgººyà­A|†,ï!Tw¥v”Z<šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ  /lib/libufs.so.7Îå®Ó¨ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýÌyè½`RAˆ/ʆ4‹)é–Z2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€€µ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý˜M'ªG\„D~=#ô‰Å˜Z2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€€µ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý˜~ŒsÿiKŠJØ&V{„šZ2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€Àµ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý²Cy“fOv¥Íæ«´¸þåœZ2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€Àµ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýòY0ŒNѸvéŸ_ÕžZ2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€€¸ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý5™™Ë6D ©p[í)o@ Z2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€€¸ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¢âükCÖâGܧ9Ö(m•H¢Z2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€À¹ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýï׎մ¹OɧRŸmÄ +*ܤZ2šœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_mmap€À¹ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý#ç(‰…GÀ’­1CWÏ(!¦Zšœ ÙR©Fz鮩'üvºp_/d˜AQ˜‘PÁ Îå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýežñ‡HÒ¤}`hp´Ž,¨Z<šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Îå®Ó¨ûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýjÝš\±â@ ªFAM{‹ªZ2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€µ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý`/;äC EèŒ%úÇYrÑ¡¬Z2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€µ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý ¹ŠŠWCº§é>Õ®Z2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€» arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý±¡<—ïO0„O÷q'u‚¼°Z2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€» arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýñd§SyëGN­”‰è*³x¾²Z2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€ú arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýW•™0?J:©'E`óŽF´Z2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€€ú arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý•=jyKwCÓ›8„ºê®ß—¶Z2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€Àœ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýø•îü¦Jn¿Ì"¥Ì”^(¸Z2šœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_mmap€Àœ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýŸÚŸc@MžŽ)ð*¹#’´ºZšœ ÙR©Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œÎå®Ó¨ûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýPá ¸2jB£™¬ø¤èÛ¼Z:šœ ÙR©Fz鮩'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýà4F„Š³Œ,ÿ¾À¾Z:šœ ÙR©Fz鮩'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýÎ3ä„=¸Nn«‚AC  NÀZ:šœ ÙR©Fz鮩'üvºÎå®Ó¨ûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý­Uíº#ó@ð¦fNäøzÏÂZ<šœ ÙR©Fz鮩'üvºP܆ZÛGP‡ÛzìÐVU/dev/ada0p3äؽިûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýò—9bŒ¼GêƒÍvKÕ¶œÄZ@šœ ÙR©Fz鮩'üvºP܆ZÛGP‡ÛzìÐVUäؽިûð‹+aue_pread€€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý›z/†bI–?°!ÀYÆZ@šœ ÙR©Fz鮩'üvºP܆ZÛGP‡ÛzìÐVUäؽިûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý£(ÑóçpJGœ¨.È ÈZ@šœ ÙR©Fz鮩'üvºP܆ZÛGP‡ÛzìÐVUäؽިûð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýçNO¼2"HÐœÒñÝš#eÊZšœ ÙR©Fz鮩'üvºP܆ZÛGP‡ÛzìÐVUäؽިûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ýËœ'¼¿O@³MZuüEÌZšœ ÙR©Fz鮩'üvºÙR©Fz鮩'üvºäؽިûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1226execfsck_ufs20ÜS7[AIF¬•pd± (ý¥„^Ûj}Dã‡õZÞ²wÇÎZ@Λ µƒÂFzé®›'üvºö¢][ˆª_ˆ[°¿ªàôäؽިûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execfsck20ÜS7[AIF¬•pd± (ý¸˜äç=HE‰R¹œYTÐZΛ µƒÂFzé®›'üvºö¢][ˆª_ˆ[°¿ªàôäؽިûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execfsck20ÜS7[AIF¬•pd± (ýªi•€¾hEO¥fÀѦÁÒZΛ µƒÂFzé®›'üvºµƒÂFzé®›'üvºäؽިûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execfsck20ÜS7[AIF¬•pd± (ý@\%ëd»FV–3‚¼¤›ÔZè› µƒÃÏFzé®›'üvºµƒÃÏFzé®›'üvºÊËÒƒ©ûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec logger20ÜS7[AIF¬•pd± (ýêiKNóKLµØM·Úx¥øÖZ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UèÁµ¾«ûð‹+aue_lseekÊÝ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýû\’Å(CÜš8?ÚZ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UèÁµ¾«ûð‹+20ÜS7[AIF¬•pd± (ý”k(H±1 31áò{ØZ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UèÁµ¾«ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁ¢Ÿ¨FNr¼ý©nc,¶ÜZ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶ª±ñ«ûð‹+aue_lseekÚé +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý {M¦ªJó‚9ë»] dÞZb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯’é§Ö¬ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÞ§€rå(F§»2”ÑmààZR–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvº¬³ï߬ûð‹+aue_killpid signumarg_pid1282arg_euid1003arg_ruid1003arg_egid1003arg_rgid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý ®ÄrPcAÄŒV>Üg½Ù·âZb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¬³ï߬ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýõl3P÷F:¶f0Î*ßdäZ"–œ ×µ¨Fz鮩'üvº¬³ï߬ûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1281execbash20ÜS7[AIF¬•pd± (ýV”ÛG€xMp¦¤¸„}»æZb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¬³ï߬ûð‹+aue_write*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÍ”b[¥?Fc¿ÿE{0ËëÒèZ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯–‚Ñš¯ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýïD$ éÀCâ§`œER$zêZb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯–‚Ñš¯ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýS_˜FP¼¯§-ÆbìZ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Î—ãð¯ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýç7²ÅêI]³ºä°*WÊîZb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Î—ãð¯ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýcb¾0°‘Cë‰løEÕ³×÷ðZ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú­ì°ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý5j)ØÔCÇ|}ø¾ÅcÝòZb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú­ì°ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýΈ +fCÙ¼‚¤Ï3ü”ôZ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÊŸÖû±ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýRj(¸dBeŽÿ¹Þ§˜BöZb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÊŸÖû±ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý çÿI'µïïÇO4×øZ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ê„âȲûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý ùÅ+[™N~žÀœÓüʸúZb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ê„âȲûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýõY:õ(I*§’c6$ñYüZ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UøêÖ°³ûð‹+aue_lseekžƒ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýߨ¨’Q&Mf’` ^,hþþZ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯êÊþسûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý‰¿þ —G,›vúë/ +Ta€[<–œ ×µ¨Fz鮩'üvº€-§q0]±+G-0D /usr/home/user/.êÊþسûð‹+aue_open_rwtc +flagsmodet  +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1281execbash20ÜS7[AIF¬•pd± (ý~l+0͈C÷´Zœ*õAŒ ‚[–œ ×µ¨Fz鮩'üvº€-§q0]±+G-0DêÊþسûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ý0YPÕ€FË’ …᯸è„[b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯êÊþسûð‹+aue_write*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý (Á+ºJš%é_^)_ë†[@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eʲµûð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý—R–½XØF¬¼IKì8†ˆ[JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊ²µûð‹+aue_sendtoÚ +ret_msgid384hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý£±¿TH„–$¤ª9Š[JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊ²µûð‹+aue_sendto˜ +ret_msgid385hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýLØlj˜ÇJ+›n4[í³¼^Œ[JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊ²µûð‹+aue_sendto¬ +ret_msgid386hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý€Ú2ú†õOz‘ˆsª§÷Ž[JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊ²µûð‹+aue_sendto˜ +ret_msgid387hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¶{?†®iG¹˜^€ô,`[Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ²µûð‹+aue_recvfromÚ ret_msgid384hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýU¡¿ ‚L›^µa!‰÷ç’[Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ²µûð‹+aue_recvfrom˜ ret_msgid385hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý RSÔÔBŸ\[TÄpX×”[Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ²µûð‹+aue_recvfrom¬ ret_msgid386hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý›Õlˆ]C’".i‡È!X–[Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ²µûð‹+aue_recvfrom˜ ret_msgid387hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý&AÉ+æBæŽèƒ$˜Nâ˜[0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_lseekžƒ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýo9j¯J¬øz3¢1?•œ[ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+20ÜS7[AIF¬•pd± (ý¬Ò.r~I饸Ú³þl¾š[@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;—–FœM®€û"|Wm§ [ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+20ÜS7[AIF¬•pd± (ý%bAš3B\†¹RØÕ}Óž[@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼jT·²’A¯°eù¨],‡¤[ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+20ÜS7[AIF¬•pd± (ýû|•Š²BA™Ô/Œ´Ÿ¢[@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýu¶à¢slAg»‰¾rIJ¨[ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+20ÜS7[AIF¬•pd± (ý„üxK %B¡z‚;%æôÖ¦[@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£:e/ÅJ±ˆw¶aðˆ{çª[:‚œ Ê +ÙKFzé®›'üvºÖë챺ûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxTSš ãI⌘jCÍ•þج[@ œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Öë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýM§"ûEf‘^ßäBÐêJ®[@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý. +4ÿvFq‰¦]ëC‹É°[@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadÐFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'c‚æŸIN£M-Üx¨m²[b œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÖë챺ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤üÏF®D}—]Æ,—SÔ´[b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÖë챺ûð‹+aue_writeºGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆ„¾`ÒMMO¬XÃ*Àë@+¶[@ œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Öë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾Ý<•«C ƒqz6ƒÎuE¸[@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£ kEî”×è³8­º[@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_pread°EhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOºÐpÞ(FH¹À‡eÍî¼[b œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÖë챺ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆ¶–@ HñBnG윾[b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÖë챺ûð‹+aue_writešFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýmS*´¡>O€s;RçÀ[@ œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Öë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýsZk‘¡ŠBÏ}öí•Â[@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®¾üǽEA—‹½Û&à¼åTÄ[@ œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖë챺ûð‹+aue_pread¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚o?‰ž­@ ŒÉCz}-¿1Æ[b œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÖë챺ûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý #"ÚvyO=¬Üt:awÐÈ[b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÖë챺ûð‹+aue_write¦hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýàl +ï G|ŒÆxJñwÊ[@ œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Öë챺ûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡Á(8úI,ˆæÚÝRô°Ì[J œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÖë챺ûð‹+aue_sendtoÞ +ret_msgid388hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýMi.¡iIn»ê{PrÙ°Î[Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÖë챺ûð‹+aue_recvfromÞ ret_msgid388hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýœË •°ƒCù*}¢O€Ð[bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÖë챺ûð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÛ¹¯ŠI´‘9ƒ« ™Ò[D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§Õººûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃtí€Nb¶§¥´ù ` +Ô[D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§Õººûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýö’?AÜ´É࢑`¾Ö[D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§Õººûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)ïóo±¥GÆ\ ?å¥#Ø[D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§Õººûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…(zLHž-dàãDªÚ[D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§Õººûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý Õ4ÞÁL’ŸdÁ1íQTÜ[D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº–§Õººûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýL`»öøÉJZ¤Vö0D!(YÞ[0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸¡ÿóºûð‹+aue_lseekÀÇ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎ?ëïHŸØ¿ñûÿ°à[@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÜƒÜã¾ûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý:‚DÌ™BZ§O0â[b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÜƒÜã¾ûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý’,¶#¢²L¼”19{tu–ä[@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ø–™Àûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý[Yò§ +‹I{–’˜“ÁÈ’zæ[b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ø–™Àûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý/Nêv²D¾¨bö?±ÓU£è[@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯„ùðÁûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýA ‡¶§Fq‹ ž¯¦ýÛŸê[<–œ ×µ¨Fz鮩'üvº[Q…¾vVS¶¾4ÿCVaíD/home/user/ripe-prov-tests-master/„ùðÁûð‹+aue_open_rwtc +flagsmode¾Ð +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1281execbash20ÜS7[AIF¬•pd± (ýZ qàÿAù©] èì[–œ ×µ¨Fz鮩'üvº[Q…¾vVS¶¾4ÿCVaí„ùðÁûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýÛ)’±N MÖŠ“ðeõ÷Ãcî[b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯„ùðÁûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýDz ¿DùI ºÒðÁ%:ð[0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ö§·Âûð‹+aue_lseekÀÙ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄýœËîíAöœ¸å¨Oi`ò[@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ŠƒÃûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý·Ô]PÙG›«ÏÓ RÄ3ô[b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ŠƒÃûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý%"TWäB´µivÿ=&|ö[6–œ ×µ¨Fz鮩'üvº×µ¨Fz鮩'üvºÞç=š8§T¸šm9D§bN/home/user/ripe-prov-tests-master/LinuxŠƒÃûð‹+aue_chdirhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1281execbash20ÜS7[AIF¬•pd± (ýœ±}UËÖE‡ˆ·¬Ë{ +Ýø["–œ ×µ¨Fz鮩'üvºŠƒÃûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1281execbash20ÜS7[AIF¬•pd± (ýO”+žN›C¿³*ª±%g–ú[b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ŠƒÃûð‹+aue_writedhostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý5ëþ«TKã»Mø‰‰z8!ü[0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_lseekÀÙ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹7Øö‰@Õ˜z›J¾ °€\ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+20ÜS7[AIF¬•pd± (ýéîÀÖ©±M­F¼ö…Efªþ[@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæÖ3‚Ï"MY¬¹{‰"’B„\ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+20ÜS7[AIF¬•pd± (ý&6øÂŽ¢FØ” ¦Òæ•j‚\@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçAbGLg„¶‰Ý}Gàpˆ\ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+20ÜS7[AIF¬•pd± (ýFÝ× ƒCç’2G»bS®†\@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆ2׊yGíŸfF;jâ-³Š\:‚œ Ê +ÙKFzé®›'üvº´è…¥Éûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý̆¯úÝLíš`xˆxr™›Œ\@¢œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ´è…¥Éûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý££Ö,M6®*œù{±!Ž\@¢œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:d#EØLlˆJ+Çù\@¢œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_preadšDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆß×Û(ŽO•ÏH«­x§’\b¢œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á´è…¥Éûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýsZ cxEkqµ¡ôÿÙ”\b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº´è…¥Éûð‹+aue_write„EhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)’RlûiFy²%+‚Öåv–\@¢œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ´è…¥Éûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½TÿÈR®MåŠÒäßAl¢˜\@¢œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôÔ®€ÐœLZ„Ì‘ÜÚÿëš\@¢œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´è…¥Éûð‹+aue_preadøhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŒËî™DZƒ¸¼ZAbŠÃœ\b¢œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á´è…¥Éûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýç>&2ÌH@ì£ó`³bùè ž\b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº´è…¥Éûð‹+aue_writeâhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýé`'uN%“¢§X÷†T \@¢œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ´è…¥Éûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýoûr¬DP¼ÐiŸ÷È¢\J¢œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº´è…¥Éûð‹+aue_sendtoÞ +ret_msgid389hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.׸0à-F¶–¥Ï^˜ãÄ\Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ßŸßËûð‹+aue_recvfromÚ ret_msgid390hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý”æÕ/ìE˜µ'ý6LhÆ\Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ßŸßËûð‹+aue_recvfrom˜ ret_msgid391hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýE67ÊmIóžÑlðaËÎÈ\Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ßŸßËûð‹+aue_recvfrom¬ ret_msgid392hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýbÌÛ¢.O¾²#¯Íqÿ Ê\Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ßŸßËûð‹+aue_recvfrom˜ ret_msgid393hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý»J›€­VI§‘ ^Qb÷ ¢Ì\0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈ°€ÇÑûð‹+aue_lseekº  hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýnåá:úJ4ÒBļçÔÎ\ø› µ5Ž«Fz鮉'üvºÜšïFz鮩'üvºÌˆÃàÑûð‹+aue_connecthostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1address107.155.79.108port123execntpd20ÜS7[AIF¬•pd± (ýKÏüö CÛ«‰·)žì§‘Ð\ø› µ5Ž«Fz鮉'üvºÜšïFz鮩'üvºÌˆÃàÑûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ýC/¦%¥UË´šFÅ›ö¶10.0.2.15ö107.155.79.108ö20ÜS7[AIF¬•pd± (ýn‡Rš4+A´‹´ºÕ©šáéÒ\ø› µCJœFz鮉'üvºC/¦%¥UË´šFÅ›ö¶ÌˆÃàÑûð‹+20ÜS7[AIF¬•pd± (ýÄFžrJM³º6Ð$Þ<Ô\Jø› µ5Ž«Fz鮉'üvºµCJœFz鮉'üvºÌˆÃàÑûð‹+aue_sendto`ret_msgid394hostHdc53375b-4149-46ac-9570-64b1090f28fdfd22ppid1address107.155.79.108port123execntpd20ÜS7[AIF¬•pd± (ýx­”}y”@ÁÖŸ +õÕ˜Ö\Jø› µ5Ž«Fz鮉'üvºµA¬ÐFz鮉'üvºÌˆÃàÑûð‹+aue_sendtoÌ +ret_msgid395hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execntpd20ÜS7[AIF¬•pd± (ýw&þÈ»jMYŠÙF&NœØ\Dê› µ dôFzé®{'üvºµ !Fzé®{'üvºÌˆÃàÑûð‹+aue_recvfromÌ ret_msgid395hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‘Hk×éÎ@lŠTÉfÌ1¤Ú\0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_lseekº  hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–”’³ÏJD‰1¸5½žÞ\ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+20ÜS7[AIF¬•pd± (ýýÜÔuѽG±’Dï—ñ ±ÂÜ\@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçHÌ•ŸHu´Paè&Nâ\ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+20ÜS7[AIF¬•pd± (ýmljÔ\*IŠ«Ø‹k“©˜à\@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý o¹ˆ%®Mw¸ÄÿX‡Û–æ\ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+20ÜS7[AIF¬•pd± (ýœáE|VLI…?JHä¾ÁTä\@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬OË¥ŠJö¦qÊÝ—‚Ýiè\:‚œ Ê +ÙKFzé®›'üvºöâá—Øûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚•h<·Mô¶¨ºïºÛãê\@¤œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V öâá—Øûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼½^Í6àK¯9lRÖÒ…ì\@¤œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›–M&4C|‹øyÙBî\@¤œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadè/hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"°ÔüïŸl›zL${Ú Æð\b¤œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áöâá—Øûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜¿ý± E,¬KX4F¿—ò\b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_writeÒ0hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙª}G6J¿¬L-ÂõOMô\@¤œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V öâá—Øûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»eBÃÝñNœ¥"ñc:Üciö\@¤œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCÞÚÖ]M³'ˆûûWã%ø\@¤œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöâá—Øûð‹+aue_pread‚hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýC- üõõHÏ ž3o» bú\b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_writeìhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}‘ |MA0²¬¥E +¾š‚ü\b¤œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áöâá—Øûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅ„,Í®xA´¿?‰(A˜àlþ\@¤œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V öâá—Øûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$³¨¯1AÙµtç’ü\¤Ð€]J¤œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºöâá—Øûð‹+aue_sendtoÞ +ret_msgid396hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýž_zvu­BÞ´ôem‚]Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºöâá—Øûð‹+aue_recvfromÞ ret_msgid396hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý›(1¤Ã’N°£ÏcªÛ Ï„]bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKöâá—Øûð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý«8uàŒ7IŠ»«ib;qº†]D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýä½}ÂȤMйQ¢8™WàÔˆ]D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýV¦”·žÜH,vE§r %†Š]D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCh +·‚ã@k¾9ß:G9mÒŒ]D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºöâá—Øûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýpU̬û–C¨G²OÛ{‡ýŽ]@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¸ÒµäØûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý,r .!ÿE¿Nì#Ef]@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¸ÒµäØûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýô&yÚMc°q‚sŽñ}’]@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¸ÒµäØûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýòæB*£µŸÏ”]b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¸ÒµäØûð‹+aue_writeJhostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý$Ÿs¢Až£TÂ{Øãà–]0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ–£ŠÙûð‹+aue_lseekºØ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýh… PaHSÖ1Ôõ®˜]@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýY‘ +|w´O׉Þæ±øôøš]@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýIGÿ .EMÈVE´4Æx‡œ]@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý2qˆýtNœ¨Ž–ùG^$Ûž]b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÛªà2xFU°¨ÂYSáQß ]@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý'ECñ£L¼Ÿ†0f¤Ùšþ¢]@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý}>sG×fJxŸ¹]˜¾ÊФ]@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ú´öºàûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýéTœg-D7¨Ýð¹Gæüÿ¦]0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾ÜæÍàûð‹+aue_lseekÚå hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáƒBgIr˜%®]¹û˨]@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e’ðÂŒâûð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýFOË7ýHs—³ÀÔÝÓÎïª]JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’ðÂŒâûð‹+aue_sendtoÚ +ret_msgid397hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý~Ô"¾DT¹¡;oͬ]JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’ðÂŒâûð‹+aue_sendto˜ +ret_msgid398hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý" åYD-§àQì¬ßÇ®]JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’ðÂŒâûð‹+aue_sendto¬ +ret_msgid399hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýϽ¦µIÄ„B +„}-Ô«°]JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’ðÂŒâûð‹+aue_sendto˜ +ret_msgid400hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý*bìuS¡Oµ\exdFg²]Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’ðÂŒâûð‹+aue_recvfromÚ ret_msgid397hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýä/›U‹Ju­CÄ{ñ!Û«´]Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’ðÂŒâûð‹+aue_recvfrom˜ ret_msgid398hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÄ(÷í GQ”“ÛÀ¨ëT©Ð]b¦œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áܥʋçûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸1 ˜I5G¶Èp +>Ó§Ò]b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ¥Ê‹çûð‹+aue_writeâ8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœŽ\¨ª4O§KŽr}Í—7Ô]@¦œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ܥʋçûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýX%:d/GN¹4ä©'="ÚÖ]@¦œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uܥʋçûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚Me§Â×Ob¨¬U¿¥àØ]@¦œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uܥʋçûð‹+aue_pread˜ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýu[fÚJ^—Z-^€Ò +Ú]b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ¥Ê‹çûð‹+aue_write‚hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰‘ô§‹OšÍÏŒï,xÜ]b¦œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áܥʋçûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýªÝoû÷ H·”qO ñÞ]@¦œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ܥʋçûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦Œª•H«Œ½ò#™g:à]J¦œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÜ¥Ê‹çûð‹+aue_sendtoÞ +ret_msgid401hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»·TM·Mô¬ð¢@º Áâ]Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÜ¥Ê‹çûð‹+aue_recvfromÞ ret_msgid401hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¶-˜˜nJ!šQ‚‚Úø€ä]bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKܥʋçûð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý R}ÖVH€Ž¡nVAöæ]D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ¥Ê‹çûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +RG—Ni¹–Ç%ð"c­è]D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ¥Ê‹çûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýbŒòÖDdƒüݘkyê]D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ¥Ê‹çûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`Œ’…«qLÖ³fôÃó™Êì]D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ¥Ê‹çûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘uÅÕùEÇŽ Ët†I 7î]@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯†×ã§çûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýʱæl‹E´··QÂð]@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯†×ã§çûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýýƯˆIO¯#úÕˆºò]@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯†×ã§çûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý^_Ö7ãJù…¥V‰Û‡lô]b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯†×ã§çûð‹+aue_write`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýqñt£0dHMµÐôöÚ#Uäö]0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâÍçèûð‹+aue_lseekø hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýöÒÞÆìOʼn½ +¹úŸûø]0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UöÙõÓïûð‹+aue_lseekÒ£ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤ÓðìµI³µ‹]C؉¨bú]0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_lseekÒ£ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý É™}N0šµ?ó$`þ] ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+20ÜS7[AIF¬•pd± (ý\æ¶8SB?„0)²”ñ£ü]@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®ùócHÛG†e"TbçHâ‚^ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+20ÜS7[AIF¬•pd± (ýñ_ÁÚ/ìE]“®åÛ9¿€^@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™ö¿¼Š0BòŠ ö•ýríʆ^ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+20ÜS7[AIF¬•pd± (ý=Œ§LAþC}®þº¾¸þY¯„^@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿²Ó[÷ E*¾yñE±Ï³…ˆ^:‚œ Ê +ÙKFzé®›'üvºÌäÀþõûð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýf9ÖóXÒNÊž2õÖ°ü–îŠ^@¨œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÌäÀþõûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;ÚàÈè³Bרî]͘[|Œ^@¨œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³‚a¯AF’BæT7ÒŽ^@¨œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_pread–8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑϵ GfJĪA¹=>Œgr^b¨œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÌäÀþõûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñªµj9ÅCV€ØÏ)´GQn’^b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_write€9hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýüxæU˜™F°œ‹I&Þ=þÇ”^@¨œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÌäÀþõûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@v×°›vFw¸ Œk–Y5 –^@¨œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCï®Ø×JKH‹QvB¹,˜^@¨œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌäÀþõûð‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯7«øKm‰–G:sÕš^b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõÈ#œëHÏ›¿– Xᙜ^b¨œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÌäÀþõûð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýLÔÙ¡8N› 3,ûb~Hž^@¨œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÌäÀþõûð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"Šæü|ï‚ëAK‡ôÿ ï_æ ^J¨œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÌäÀþõûð‹+aue_sendtoÞ +ret_msgid402hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-yqÈD7›¥H +ðÉ“ ¢^Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÌäÀþõûð‹+aue_recvfromÞ ret_msgid402hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý é~jK‚³ÊÚ}—»{¤^bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÌäÀþõûð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýØ)Ÿ£è9I3§æ/S5Rp¦^D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðÂq1ý@„ äÿÊø“·¨^D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýh÷¾¾ð´KöœtÑ'r ³ª^D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèX¨ŽIE¤²ÑóAä¬^D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÌäÀþõûð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌ 0~OB¡¸6.Éßí‡X®^@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¢Ìˆ›öûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýd”ÛL! K ¯oœTQ}—°^b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¢Ìˆ›öûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýàsÑñ@„¤+Ü?ù7·²^$–œ ×µ¨Fz鮩'üvº߆7æFz鮩'üvº¢Ìˆ›öûð‹+aue_fork +arg_pid1286hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1286ppid1281execbash20ÜS7[AIF¬•pd± (ýì&6@CVÐ?´^šœ ߆7æFz鮩'üvº€ËâÞ +õÐ^2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýfîr±N%OÀ,¯cÒ^2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýÞÁ£k•1B'½÷Bº›’ÌÔ^2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý]Êê’ Dõ©Ûµ:ò„ÆÖ^šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýyò a’Eì°Ä¿*}ù•ÐØ^:šœ ߆7æFz鮩'üvº¢Ìˆ›öûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýv˜h°{Oª¶GÂçlh{Ú^:šœ ߆7æFz鮩'üvº¢Ìˆ›öûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execenv20ÜS7[AIF¬•pd± (ý«ª?Û8I‚™‹ZÕC6—!Ü^šœ ߆7æFz鮩'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¢Ìˆ›öûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine.bash ./bash_commands.shppid1282execenv20ÜS7[AIF¬•pd± (ý‰*J€’H•½1ûëÞ^<šœ ߆7æFz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¢Ìˆ›öûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýÇ.-ZWEœ§ñ ê¬Pqà^@šœ ߆7æFz鮩'üvº‰oý©äÇU¤©A)Eǹ ¢Ìˆ›öûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýG÷Ch^jC´E¼þÅñœlâ^šœ ߆7æFz鮩'üvº‰oý©äÇU¤©A)Eǹ ¢Ìˆ›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýW~~—ßÕDQ‰Ž sGy]Žä^<šœ ߆7æFz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¢Ìˆ›öûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý—3DÄ&BlŽki½u™ãæ^@šœ ߆7æFz鮩'üvºXꎩð®…\®ð@JÌ…¼â¢Ìˆ›öûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý}ÊûÏÌ€Eÿ¥ÿ¯_hYW<è^@šœ ߆7æFz鮩'üvºXꎩð®…\®ð@JÌ…¼â¢Ìˆ›öûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýû1XM6SO°´NNØÛ ê^šœ ߆7æFz鮩'üvºXꎩð®…\®ð@JÌ…¼â¢Ìˆ›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý,ÁÊNº©#ßrãu'åì^<šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8¢Ìˆ›öûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýúp(¹sJk¡$:DÛwìZî^2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý…7~©OEj´m®àa ì²ð^2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý×8aHFbµœÁµ&_’ò^2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý‘,ß›ØL¼¼DIĦྛô^2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÀ˜ƒ-JFy«År‰ê|È"ö^2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýæÅí¦2G«²ÝØünÁ­ø^2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýáòäh‘_Gƒ¶¼¯Ô«©ú^2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÀ&»"Lf qZ˜-ëü^2šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý7+¬—AhM±‹™OE ,žþ^šœ ߆7æFz鮩'üvºâpÑ +m.×W®mAs××¼›¢Ìˆ›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýô„ô‡ªGð³JP†DȦ€_<šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8¢Ìˆ›öûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýí<2l}7A•ªoš:žN˜‚_2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÐ÷à·ùDõ¦jPlÄ™$„_2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¸Ðø!ÄJðÐ0r¿í$‘†_2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¤Á>Ñ?AÒ¡µÄKß Äìˆ_2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý –DÓ×UOÒ‡ûúè¢óšŠ_2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý8·[O­[G…Š+ÌÅ$[ð`Œ_2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýánI™;I^›Y–È®¿YŽ_2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý€RTodKl‘ù „œD_2šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýf20c¶ +Lý–¸r“w’_šœ ߆7æFz鮩'üvºm/"P;=\»P½¤¬=P_¢Ìˆ›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýÙ»ÅVßçNQ¬)ô?•˜”_<šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1¢Ìˆ›öûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýƒ•í é#Kc½fQ›Àñª–_2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÀ”ÝÖHñ¤,«Åÿç~˜_2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¶¬ß`íMå£ÙÑŠ{²š_2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýîÏ7Aª¨O;íÔ9ùœ_2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÖ{A@{IOÓ¢.ëÆ/Ÿž_2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýØÕ ^áL³Æ6õš; _2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýn/ qˆ>DFˆÌ°QŒ¯¢_2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÁá“N–ƒD,£¾Ò¤_2šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýl´ÏÛÊL2ªÀò6EϦ_šœ ߆7æFz鮩'üvº"‘ûŽdkÇ[«d.µ[Çբ̈›öûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýgÃÈ—ÞÄE˜¯J¢Wîö'a¨_<šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¢Ìˆ›öûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"–˜ýáMÛh¹I]’B·S“2àgª_2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¼l‘#@E@¸Kã¡I¬_2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¤Ì¨ùá{B39˜æý +Åþ®_2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÔŸó ++=Fç¾á¯F­#°_2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýËÕÕ…s@¼àZCŠ²_2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýZáƒQ8õL ‘ÿkDÊ™í´_2šœ ߆7æFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¢Ìˆ›öûð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý´Ýê)kŒDKšÞvÅ^^ª-¶_0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌñé ÷ûð‹+aue_lseekž¯hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ývÁÜÚ‡HΞù§ÉÀDµ¸_@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¦Éݹøûð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý¬ö¦"D«¥&n@¯&º_JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦Éݹøûð‹+aue_sendtoÚ +ret_msgid403hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýãJùDIñ–O kæX9¼_JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦Éݹøûð‹+aue_sendto˜ +ret_msgid404hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýõš\ãí +MÖª°!Ášæk¾_JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦Éݹøûð‹+aue_sendto¬ +ret_msgid405hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýB ¯bûFñ±lvdLo»·À_JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦Éݹøûð‹+aue_sendto˜ +ret_msgid406hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýá~× +ÔCT©cg*ENÂ_Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦Éݹøûð‹+aue_recvfromÚ ret_msgid403hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý5Û‚ÏA.»T@Ɉ,Ä_Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦Éݹøûð‹+aue_recvfrom˜ ret_msgid404hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý.òÓÊJë¦ípy+&4Æ_Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦Éݹøûð‹+aue_recvfrom¬ ret_msgid405hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýõVýv…Nç¯f½®ÁÚ«È_Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦Éݹøûð‹+aue_recvfrom˜ ret_msgid406hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýçX%€kíG:ŠQÜ×–·JÊ_ªœ ߇NéFz鮩'üvº߇NéFz鮩'üvº¬Ì°ñýûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286exec +sleep20ÜS7[AIF¬•pd± (ýÁþBØ[Aý‚ ËÅàÃÀÌ_<šœ ߆7æFz鮩'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.db¬Ì°ñýûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýŽ˜ ð@ª4à£ñ©qÎ_@šœ ߆7æFz鮩'üvº–Ø%™wyïR¹wT’ï9¬Ì°ñýûð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýˆmŽà¥dJd·3'lþqÐ_@šœ ߆7æFz鮩'üvº–Ø%™wyïR¹wT’ï9¬Ì°ñýûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÙ̵çK¬®¦µ »AÒ_@šœ ߆7æFz鮩'üvº–Ø%™wyïR¹wT’ï9¬Ì°ñýûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý0ìA݃KÆŒç÷CÀU&Ô_šœ ߆7æFz鮩'üvº–Ø%™wyïR¹wT’ï9¬Ì°ñýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýkÌS§ƒIž‰2ôqŠ4®Ö_@šœ ߆7æFz鮩'üvº€ËâÞ + >]›ú_2ªœ à"ìvFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¬Ì°ñýûð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýjÏ– +ñE8¦çé©×¦ü_2ªœ à"ìvFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¬Ì°ñýûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýÌÎw^¡îC´šŠ!_i Jþ_2ªœ à"ìvFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¬Ì°ñýûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýx5%4°M„Éë @Ø?<€`2ªœ à"ìvFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¬Ì°ñýûð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýÔ®»ÀE…ó’$|õ‚`2ªœ à"ìvFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¬Ì°ñýûð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýÞEõ-ºA½V»Hl„`2ªœ à"ìvFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¬Ì°ñýûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ý PÎ)ÖO}„/Ozʆ`2ªœ à"ìvFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¬Ì°ñýûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýá‰ôâ+H>¦6¤%£Cø·ˆ`ªœ à"ìvFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ¬Ì°ñýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286exec whoami20ÜS7[AIF¬•pd± (ýþDùÚ?HÛøù[)}ÛŠ`:ªœ à"ìvFz鮩'üvº¬Ì°ñýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286exec whoami20ÜS7[AIF¬•pd± (ýìbjÿóFר–ƒtô&EŒ`:ªœ à"ìvFz鮩'üvº¬Ì°ñýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286exec whoami20ÜS7[AIF¬•pd± (ý)ëñhËAÙŽ–xÔ?Z‡ÉŽ`<ªœ à"ìvFz鮩'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.conf¬Ì°ñýûð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýðºLc¬¤DÜD+`@ªœ à"ìvFz鮩'üvºÜN½Ëê¯+^¯êZ£®+V¬Ì°ñýûð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýUU•¿"Fµß÷­ò’`@ªœ à"ìvFz鮩'üvºÜN½Ëê¯+^¯êZ£®+V¬Ì°ñýûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ý,á¸$`F¸КASì”`ªœ à"ìvFz鮩'üvºÜN½Ëê¯+^¯êZ£®+V¬Ì°ñýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286exec whoami20ÜS7[AIF¬•pd± (ý§þ°c-@J}™ŸIÜ#–`<ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–/etc/pwd.db¬Ì°ñýûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1286exec whoami20ÜS7[AIF¬•pd± (ý«.*¾»2M‘¸Êî´Éµl˜`@ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–¬Ì°ñýûð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýÜüuå+AŸŠø Vy׸š`@ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–¬Ì°ñýûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýÎÝ2A<ãH\Ÿ5FîÞ ìœ`@ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–¬Ì°ñýûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýwD•©}FLƒ|mÏnŠ˜ž`@ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–¬Ì°ñýûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýø)ÂÙ’åBA§¹§(ÊŽŸ¬ `@ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–¬Ì°ñýûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýƒ›:q”Bê¦ãpô2"K‹¢`@ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–¬Ì°ñýûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ý¦Hë:Z¦A=¦=¹ÙßË©¤`@ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–¬Ì°ñýûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýgïBÅC]ž¹…5mÐI¼¦`@ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–¬Ì°ñýûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ýˆ´Q7«M¨“«R€øó¨`@ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–¬Ì°ñýûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec whoami20ÜS7[AIF¬•pd± (ý:ùp5O8—Ã4©y4}ª`ªœ à"ìvFz鮩'üvºfš Ž_è^ŸŽkèþ–¬Ì°ñýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286exec whoami20ÜS7[AIF¬•pd± (ýÿNÜÿ‡D™¹ìüåI¬`bªœ à"ìvFz鮩'üvºÏU…¹^…•öþ¹€Ü¬Ì°ñýûð‹+aue_write +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286exec whoami20ÜS7[AIF¬•pd± (ý`ûzîDîd·Æª…ª®`ªœ à"ìvFz鮩'üvºà"ìvFz鮩'üvº¬Ì°ñýûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286exec whoami20ÜS7[AIF¬•pd± (ýÁ)Vñ¶lGÙ™ Á3z1~"°`@šœ ߆7æFz鮩'üvº€ËâÞ +´`$šœ ߆7æFz鮩'üvºà#·¯Fz鮩'üvº¬Ì°ñýûð‹+aue_fork +arg_pid1289hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1289ppid1282execbash20ÜS7[AIF¬•pd± (ý0àî $M’‹=f…9i,¶`ªœ à#·¯Fz鮩'üvº€ËâÞ +-Bs¯Kþ¿1¡¢âSBèža2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÅwãGƒ DÐ]<Ø æ a2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýËk§WrM¢ª=j9_ +?$¢a2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýýÔ¿×?Iõˆdµþða‘¤a2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýC=8; iFrŠöß$ób{ܦa2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€á arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýAuœöKÑMF²÷DI‹&ó¨a2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€á arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý×a „hMóŽý:ŠP%ªa2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€â arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýê7ꊆZEs‚'¥½ï­•5¬a2ªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_mmap€€â arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý[D1òûDo·|¼4Bz˜®aªœ à#·¯Fz鮩'üvº`;‡à2RŒ^’2¬øžŒ““˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý»žZv»rC{‡{˜Íó€W°a<ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7˜­¤ûýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýqràUÙ…@‚·0^ ðX"0²a2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý ¬ÉÚmEû§DÉa¼E!´a2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý9ªP ÊH ™©E4𢴫¶a2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýrgH17`HµM!p¡”øa2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÕõ±¤ŠN·‘É@’KLZغa2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýL¨-Ü?HÕ¡åîëVE¼a2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý/Ÿh¿7½G"™ùùSŸ +å¾a2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýê‡B„|˜I­ùãväsl¡Àa2ªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"æû•¶Š­îFó°Útønb cÂaªœ à#·¯Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýù1­œÜ¥M…ó¨ä^ +@Äa<ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Íç /lib/libelf.so.2˜­¤ûýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÒ0;AzO©›¿Qeï7Æa2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýJx!¨IH±*ø%*xÈa2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýd*¥}@ +™@6$nñÊa2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýë6è:J'K^¤{k‹;õÃÌa2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý5Rè¡UÚO~o_5Z¶™Îa2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€Àã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýölI~¯G‰¦4ì&ÚÅqÐa2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€Àã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý)录UíC=³uò牨ÂÒa2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€€ì arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ýW +Y&žD刕¾’G4°Ôa2ªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_mmap€€ì arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnetstat20ÜS7[AIF¬•pd± (ý0Õ›cÀHG=ËA£I!Î{Öaªœ à#·¯Fz鮩'üvº1ßö¯È’Wˆ¯BRç’Í瘭¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýèû³T*ñO¦šÓ5çŸØa:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýA¿;cI‘…‹n­5ÿÚa:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý”Á\œ³¨H§žz[ì$]rÜa:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý9[ˆdÑXE©•‰·:®OyÞa:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýÏñÚ¿ÉE–¼ËEE59àa:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýçb‰œUKµ±8ðÌâa:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý !¦1B¥DÙ†ÿ¬¨›Ù¯äa:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ýä÷6ãÕ1J^’œcrŠ)ù§æa:ªœ à#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý½§¢ïŒH©¥¸Mú€dšèabªœ à#·¯Fz鮩'üvºÏU…¹^…•öþ¹€Ü˜­¤ûýûð‹+aue_write¢0hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execnetstat20ÜS7[AIF¬•pd± (ýœûÆiĨE®”[C'®Ø”¨êaªœ à#·¯Fz鮩'üvºà#·¯Fz鮩'üvº˜­¤ûýûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execnetstat20ÜS7[AIF¬•pd± (ý¤gä ÎÚ@T®4¡6]›zìa@šœ ߆7æFz鮩'üvº€ËâÞ +NŽŸ™Ù6_Uíþaªœ à$ýFz鮩'üvº‰oý©äÇU¤©A)Eǹ ˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýšôž(6Oh‹“òú>ÍT€b<ªœ à$ýFz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints˜­¤ûýûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execcat20ÜS7[AIF¬•pd± (ýÇažµ‹kE}¥­›ÉÔÏ‚b@ªœ à$ýFz鮩'üvºXꎩð®…\®ð@JÌ…¼â˜­¤ûýûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý*GoBFA¢ß›9ÍÞ„b@ªœ à$ýFz鮩'üvºXꎩð®…\®ð@JÌ…¼â˜­¤ûýûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý‡ËÓÒ2MNÖ¿èx‡ÝèÈç†bªœ à$ýFz鮩'üvºXꎩð®…\®ð@JÌ…¼â˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý®%öȸJ„½˜\`†ÑÑðˆb<ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7˜­¤ûýûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execcat20ÜS7[AIF¬•pd± (ý4. \5O­Ÿ)½ËÕ׊b2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý_A«ûÍEýª bWÇŒb2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýB3ET¦ðJ!†bª y1Žb2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý'Ù3«ê@G±œÈ{µ¡\b2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý”såáˆ?LT¢ar–«8à’b2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýM6BY€Að‹Ëþs"j’”b2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýòÖõZͨDW–ØbrX÷–b2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýÝrwx¿BI„mZÑãaü»˜b2ªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý4²š}Á­G³ƒ&©_S +šbªœ à$ýFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýthÀ1L"u€@nðx›œb:ªœ à$ýFz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýáßè˜w¯@® UK$“Äòôžb:ªœ à$ýFz鮩'üvº˜­¤ûýûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýNÛѬ—ùE ¹›ýhã+2 bbªœ à$ýFz鮩'üvºí( ö~R¶ ~{‚~¯˜­¤ûýûð‹+aue_write +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1286execcat20ÜS7[AIF¬•pd± (ýv³F$¡.#ŒfƒzÆ¢bbªœ à$ýFz鮩'üvºí( ö~R¶ ~{‚~¯˜­¤ûýûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1286execcat20ÜS7[AIF¬•pd± (ýoõÙp@‘—þ2F—d|¤bbªœ à$ýFz鮩'üvºí( ö~R¶ ~{‚~¯˜­¤ûýûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1286execcat20ÜS7[AIF¬•pd± (ýLÕxb’îKù¦£ë„XûA¦bbªœ à$ýFz鮩'üvºí( ö~R¶ ~{‚~¯˜­¤ûýûð‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1286execcat20ÜS7[AIF¬•pd± (ý2¨håï¢A»%¯á¬œ¨bªœ à$ýFz鮩'üvºÏU…¹^…•öþ¹€Ü˜­¤ûýûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý‚A¢±YA•†\*:ðõ ªbªœ à$ýFz鮩'üvºà$ýFz鮩'üvº˜­¤ûýûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýƒåG-såEv—B42Hbl¬b@šœ ߆7æFz鮩'üvº€ËâÞ +[F‚æÅfàø°b$šœ ߆7æFz鮩'üvºà%dµFz鮩'üvº˜­¤ûýûð‹+aue_fork +arg_pid1291hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1291ppid1282execbash20ÜS7[AIF¬•pd± (ý^6àå;iA¶‚tìD¿Ú+[²bªœ à%dµFz鮩'üvº€ËâÞ +q Òb2ªœ à%dµFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýJ&SCj€¼:eG ’Ôb2ªœ à%dµFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ˜­¤ûýûð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý± "ˆ½/bin/ps'ìAzX™¦}˜¹(/libexec/ld-elf.so.1øŽ¹„þûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineps auxxppid1286execbash20ÜS7[AIF¬•pd± (ý»¸´5žD¦¼‰Ñ.n–&”üb<ªœ à%ÆFz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conføŽ¹„þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ý|)…~K: ~Î%ÛV(þb@ªœ à%ÆFz鮩'üvº‰oý©äÇU¤©A)Eǹ øŽ¹„þûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýíª@èM`DŠŸòÒæÓu5þ€cªœ à%ÆFz鮩'üvº‰oý©äÇU¤©A)Eǹ øŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý¨6ïIˆIÛŸ|å`/ûÐW‚c<ªœ à%ÆFz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsøŽ¹„þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ý‚¶bâäKöi·X¹hb±„c@ªœ à%ÆFz鮩'üvºXꎩð®…\®ð@JÌ…¼âøŽ¹„þûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýøòÌ:ÔBBžùá§t0†c@ªœ à%ÆFz鮩'üvºXꎩð®…\®ð@JÌ…¼âøŽ¹„þûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýRÆz­ íFå’¶àt<·D¡ˆcªœ à%ÆFz鮩'üvºXꎩð®…\®ð@JÌ…¼âøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýiw!„¡òIœ‹ï¹Úbç†AŠc<ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜/lib/libm.so.5øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýwFë°úGÛ©¦IZc@Œc2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýôŽO«@þI +€È]ßè%{wŽc2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýƒ«‡«*AK²çôÓ*P ec2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýãσ ½%Cš ½)MÕÌ’c2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýUÍ€"b^JbŽ•B%P”c2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý1al//ûO4›dc˜Hå–c2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý ð=7^Q@ä ¼Ú¯Ó×0˜c2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý‡º ’8™@°žzv/ä€Óšc2ªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_mmap€€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý"þ·ÞËÂF@Šã>tcªœ à%ÆFz鮩'üvºLÓÅ:îtX®:îXte˜øŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýx ._€(GÅ•´>i]*ùžc<ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gs /lib/libkvm.so.7øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýŸF³^ˆ…I*¼ŸO^>%¬ c2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýjyeºÚB¸ò#$yN<Á¢c2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýãèx}‚@‘òƪ‘jŠ¤c2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÁ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýŒa‚`£qIò¾›s€>åYz¦c2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÁ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýµÐ}­‚FM͆!¬Sk9Ú¨c2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÄ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýixh&ªRC ¿vÚMk ªc2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÄ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÍHço,×A|¬»sÉ1r¬c2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÉ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýg±wb†O¨»#×-fvl®c2ªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_mmap€ÀÉ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý–e“âB.LR1@oc°cªœ à%ÆFz鮩'üvºþáï›é”W“éÛJ—”gsøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýUŽ¦æâFÊ„¢6¢%2²c<ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£"/lib/libjail.so.1øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýÍ pj×Jv†ÈÃmgɵŠ´c2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýç,¿z¹œA¾ª?ëÞxÚb¶c2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýüÈØœ¡Cܶr_nlyÖ¹¸c2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Ë arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý íÕ°cÍB»´–=Pmðºc2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Ë arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýpwÛ) Fß™àѱòvßè¼c2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Ì arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýŸS~¢ÌK¦¹%/à=7¾c2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Ì arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÇ.ûùuCç”ã³7/Õþ½Àc2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Î arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýpï#+_ßC—ŸÃì?ê±8Âc2ªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_mmap€€Î arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÐ6Íp¥ÐM‚§ E;W=‚Äcªœ à%ÆFz鮩'üvº]¸&g [ gÃo{„£øŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý¯BŠA›®NÞåŽÆc<ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœ/lib/libxo.so.0øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýØà¤Jº„|tÒ„ Èc2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýžîÞ +LDu±SiçõëüÊc2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý]+ÜH(œFï¼DZv,GgÌc2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€ÀÏ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý¦ùM ¶ü®Z bþ Îc2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€ÀÏ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýYl4Š4OËš¯û¸ âæ†Ðc2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€ÀÓ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý‰EŽjÝM<‰…6i:glãÒc2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€ÀÓ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýˆ‰%à›Me‰p'ŸÍÚÔc2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€€Þ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý›†ûûÆöDÑ°“…óJ@Öc2ªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_mmap€€Þ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýySbA”xG~¡%¼,ãg¡@Øcªœ à%ÆFz鮩'üvºAÑúÚ¹ËNU‹¹Êì…NNœøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýK\ÉE¯…›>{Ný}Úc<ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"’þúÀHs•LÍ°‹÷°Ü¹Î:Üc2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÏ'S€G±ˆ¾QÂнÞc2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýiSˆ™ØB¨¼r/%“Ô“àc2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€Àß arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýwŠýÏôÀIfŽc»Ký£Îâc2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€Àß arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÚ$¥ßöI½è&—¯}îäc2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€Àž arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý1¨Ä‰^Oä³ÀŠ_úQHºæc2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€Àž arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýØmåÈ­Cn‚¦/`W‰³Åèc2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€€Á arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýäH4†XÐL—¶ù¾ÊsÏ¡²êc2ªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_mmap€€Á arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýœC•*aHѾWÑ–ìcªœ à%ÆFz鮩'üvºÞA`ì•øËQ¸•bxñË"œøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý*\]·¦zJ*¢e^§uBÊ?îc<ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’Íç /lib/libelf.so.2øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýÁG)8íG"’w'ðc2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÓ…yÀQGž>1ã¿ýÓòc2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýç˜ÜS@´cb²ÏïÃôc2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€Ü arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýz†‚”‚D `O„xûâköc2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€Ü arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýÕÿB9ÐoEZ‚öGu›€‚øc2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€Àß arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýL&!^eÖMÏ‚†‹Ú§úc2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€Àß arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýSh±„ÏöK5µÑ[èèÃüc2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€è arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý—%ùEó >o´=ÕRþc2ªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_mmap€€è arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýá·”ö¦I%ž^òïÆ˵ˆ€dªœ à%ÆFz鮩'üvº1ßö¯È’Wˆ¯BRç’ÍçøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ý¦xËO_ùB3³B€ ´I4‚d<ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj"/lib/libutil.so.9øŽ¹„þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ý>ÄKÓ[’G4›a4ŒÓ18Á„d2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý³hÝüáCf¨oàµîío†d2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýAV-ü$ÆL»µL â÷妈d2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý*äãÐ3Cº¶äëSZ¥ Šd2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý„£Ö܆FJ9î;!$xŒd2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€í arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ýë`¹€"&A„g +Õƒ(ÚŽd2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€€í arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý*’ó C–¡ú¸èAÌgƒd2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€Àò arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý¤ëjQéÄJ¼¤-ü€Ï¥í’d2ªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_mmap€Àò arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execps20ÜS7[AIF¬•pd± (ý]#5]Adª7š”"j0”dªœ à%ÆFz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýö‚ÕÈ¡D÷»( ª‡ãi–d:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ýÊ‘E‚ÄPGº·º5þ“}9Ęd:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ýy1’‚wÆC몂 fË)9šd:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ýì 9§1p@¸›žùZñ;0œd:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ýÖ׿vóUD饨6­ÃhSwžd:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ý¶£—ªÁMc§Â‡°à¾À9 d:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ýI.:éC¬ŸÜe²äA¢d:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ýÙœ#=MSHìš„^€hDë¤d:ªœ à%ÆFz鮩'üvºøŽ¹„þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execps20ÜS7[AIF¬•pd± (ý8ytrê¿AÞµUɯ¦iǦd<ªœ à%ÆFz鮩'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nulløŽ¹„þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execps20ÜS7[AIF¬•pd± (ýÓ\=ÒI—Kï‡ý¹,`BëB¨d<ªœ à%ÆFz鮩'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nulløŽ¹„þûð‹+aue_openat_rwtc +flagsmode ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value4ppid1286execps20ÜS7[AIF¬•pd± (ýÉ£~Ò’L½£S3Ë‚Üͪd<ªœ à%ÆFz鮩'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.conføŽ¹„þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1286execps20ÜS7[AIF¬•pd± (ý Vsy¨½L›Ž@¡lx„Qô¬d@ªœ à%ÆFz鮩'üvºÜN½Ëê¯+^¯êZ£®+VøŽ¹„þûð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ýåÓ¼qœJ_ƒ—*Æ·EZÚ®d@ªœ à%ÆFz鮩'üvºÜN½Ëê¯+^¯êZ£®+VøŽ¹„þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ýžèŠ­ÒªL’˜tNÈH[Þ°dªœ à%ÆFz鮩'üvºÜN½Ëê¯+^¯êZ£®+VøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýzQUz|J²º\}±SÕi¼²d<ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–/etc/pwd.dbøŽ¹„þûð‹+aue_open_rwtc +flagsmode +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1286execps20ÜS7[AIF¬•pd± (ý ÇãÁVC¿°‘ cÁüö—´d@ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–øŽ¹„þûð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ý~áÐJö*# `R1p¶d@ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–øŽ¹„þûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ý¾Äj±ð N •ýiIÃÃÖÖ¸d@ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–øŽ¹„þûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ý»¨ûÐ`ÏC„€FÉ‹û›8ºd<ªœ à%ÆFz鮩'üvºª®bŠ;_ƒŠÖVŸ;*H./usr/share/zoneinfo/UTCøŽ¹„þûð‹+aue_open_rwtc +flagsmode +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1286execps20ÜS7[AIF¬•pd± (ý’JÁ€|B¤µˆ¦mè>ˆ}¼d@ªœ à%ÆFz鮩'üvºª®bŠ;_ƒŠÖVŸ;*HøŽ¹„þûð‹+aue_readìhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execps20ÜS7[AIF¬•pd± (ýþìÔQ+C4Œ0‹Ö"ê¾dªœ à%ÆFz鮩'üvºª®bŠ;_ƒŠÖVŸ;*HøŽ¹„þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1286execps20ÜS7[AIF¬•pd± (ýeãÕ ïzBŒŠ[aàþʇÀd<ªœ à%ÆFz鮩'üvºR‘GVË–D[–Ë.P+DöÇDn¡´h“&¥2*Êd@ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–øŽ¹„þûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ýVQÚ…M¼¹‚+¢í‘áÌd@ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–øŽ¹„þûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ýsƭܱdC¦Eˆµ\ÕåõÎd@ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–øŽ¹„þûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ýÙªgëœH`Œ8^ §¢A@Ðd@ªœ à%ÆFz鮩'üvºfš Ž_è^ŸŽkèþ–øŽ¹„þûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execps20ÜS7[AIF¬•pd± (ýŸÈqg“X‰òd@¬œ à&à°Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âÄ•‰Žþûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýÛ¸ò±ÕKl©‚êc1+üNôd@¬œ à&à°Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âÄ•‰Žþûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý¦[ýé –B‘ôiö`›½ºöd¬œ à&à°Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âÄ•‰Žþûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ým°uR9@`˜H‚A´ød<¬œ à&à°Fz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj"/lib/libutil.so.9Ä•‰Žþûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execsudo20ÜS7[AIF¬•pd± (ýo_÷L¿Œ¦ã»Xúd2¬œ à&à°Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjÄ•‰Žþûð‹+aue_mmap€€² arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýË(!U¼ô@%•!á}8,Ýüd2¬œ à&à°Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjÄ•‰Žþûð‹+aue_mmap€€² arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý|‰nBMüM†“Y¤0oBQOþd2¬œ à&à°Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjÄ•‰Žþûð‹+aue_mmap€À² arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýS)a$³Dõ†ÇÏg/etc/spwd.dbÄ•‰Žþûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1286execsudo20ÜS7[AIF¬•pd± (ýˆHëñ3GIú’}íùI¨ðîe@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý?¹ŒJæKN.§»ú|Mi˜ðe@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýšÿ]Y„¶E:‰à°“ß•õ°òe<¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨/etc/groupÄ•‰Žþûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ý¥${ÆD¯þw2ò ôe<¬œ à&à°Fz鮩'üvºí( ö~R¶ ~{‚~¯/dev/ttyÄ•‰Žþûð‹+aue_openat_rwtc +flagsmode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ˆÔüʯ‘ÜNÙµ‰[Ñ“´&’öe¬œ à&à°Fz鮩'üvºí( ö~R¶ ~{‚~¯Ä•‰Žþûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¡?"ÌFR¯&Ö6o,È…øe@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýˆÙÚI²8HH›O,ÄùÅÈlúe@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýºÙPŠ‚î@ߨ¯ÙÈǹdüe@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýâÝ83V O ž!6Ò’˜þe@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý$óÓ3 °AÁ‡`E Z•Rˆ€f@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý{¬ªÛp@-¦” <8 q‚f@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ý %ßV#Û@Lº»tõÅZÝ„f@¬œ à&à°Fz鮩'üvºôì{M6N?^Ž6%â?>gÄ•‰Žþûð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execsudo20ÜS7[AIF¬•pd± (ýŒ“þT SGYœòXà'Ÿ¾†f6¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1286execsudo20ÜS7[AIF¬•pd± (ýmµëŠS)Nü‘âþì7¡ˆf6¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºÄ•‰Žþûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýC$EXJЋ–ƒö_HŠf<¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]D/usr/local/libexec/sudo/sudoers.soÄ•‰Žþûð‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ý_ÙÔ±G„¡`ééÄ êŒf2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýó¢żxKÒ©bR¨^T`8Žf2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýqÞéþ)H’–˜  +@f2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€Àý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýgªË@qNª‘CspMž’f2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€Àý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý«CsçDÃB\†§/`b„Y”f2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€À‹ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýûR4@*@5•F7ÎÈV~–f2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€À‹ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýx»DaÁG¶¤ÔJm%_˜f2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý : k›ÄEy­ëTˆâ»à!šf2¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýü ²zG…¥`Ø)‚-V=œf¬œ à&à°Fz鮩'üvº"9#;–"s^¢–‰8Ns“]Ä•‰Žþûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýåvפ IS›$ ±Eº˜ñžf<¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹(/usr/lib/libbsm.so.3Ä•‰Žþûð‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ý$ÖšYG/‹ +Q¼ †3 f2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýeâltàuFW©–Bü“éM.¢f2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýWoÙb“D≋â…r†å€¤f2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýŽw —o†G©®xMK(7˜¤¦f2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýyu²&Kû6ƒ7_ÖN¨f2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€­ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÒ˜¢ÊñMǶÚß k1vªf2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€€­ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý‚§óáØëA«¡ ‹WÈ¿­¬f2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€Àµ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý”Äh¦^FÔ¿yЛ炭®f2¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹Ä•‰Žþûð‹+aue_mmap€Àµ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýhûñr,OÙ‰6q_¡aÇð°f¬œ à&à°Fz鮩'üvºöâÜ-ŽTš-æTŽ¹¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýo?iÁDãˆw§œ¬?²f<¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ(/usr/lib/libpam.so.6¤ŽÛ—þûð‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ýU¥â8£ÒO5”:Ó²ˆ<ìo´f2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýžçI•‡ìI/¨ãº«°Í|¶f2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý‹iÑXÁÊ@#¢]è2К¸f2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý„æZÀ(&Hm¾ÆebQÇUºf2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý8±5Í›F$žÂÙ–M+î)¼f2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€º arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý÷úòÝ28EŠ¼ôöYø¥¾f2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€€º arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýM\Ý”mJºµ<å  Y(ÞÀf2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€À½ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýª²YU"JvŠñ”¿òpƒÂf2¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_mmap€À½ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý€Ó¡ëB!«Vší¦|Ê^Äf¬œ à&à°Fz鮩'üvº ªV.x±h^±xåNhžõ¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý«ÿLLN›˜ù=½Ö+0Æf<¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ/lib/libz.so.6¤ŽÛ—þûð‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ý' +Æm—Nß®_OŽ/ØÈf2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýYûo9A‹©ý™®ÁˆÓ_Êf2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý+ÆÒÛnòOs±” ñ¦|gÌf2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€¿ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý²†}¯jôE»¸ÍØEh±ƒJÎf2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€¿ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÑjq°‰ßDšI`³g'D¹Ðf2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€Ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý\e™MŽc (!CÉÔÒf2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€€Ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýUúÛå¢ùN<£÷m*u±Ôf2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€ÀË arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý*¿ê!ÆJžç6s$§°úÖf2¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_mmap€ÀË arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýQÊ£åÖBp»†{Ïô[kØf¬œ à&à°Fz鮩'üvº¥_¤!0rtQ²0 ñt¿ñ¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý•£#ºGN‚—4‡†¨_íÚf:¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýþáøð„cLÝ«Yõ|”5çÜf:¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý÷-èzçNú³ ^y¶úÍÞf:¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý Åýl·¯@›¯N£.û@Ûàf:¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÅ_«[€L:°\³‹TfUyâf +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduideuidÿsuidÿarg_euid-1arg_ruid0arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýN·«è­€öf@¬œ à&à°Fz鮩'üvºã.Ú×Wš.«ÆW×(ͤŽÛ—þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýîb^¹BËC¾¹p®Ýº.Cøf<¬œ à&à°Fz鮩'üvº8-•ÈuVÈ»Gæu3Ä0/usr/local/etc/sudoers.d¤ŽÛ—þûð‹+aue_open_rwtc +flagsmodeÿÿ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1286execsudo20ÜS7[AIF¬•pd± (ýÏöô¦ãߟo€šg@¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_readðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýÔö² Ï^H4“µ ê¥ïœg¬œ à&à°Fz鮩'üvºZ2°Ë1]±m‘¨¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýFÀÓ¸ýJðŒä>åÏÄžg +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresgidgidÿegidësgidÿarg_egid1003arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý Ü67™[L­¦¤äu€ú±o g +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_setresuiduidÿeuidÿsuidÿarg_euid-1arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý†î!¸EÀ‘wZ dlt´¢g<¬œ à&à°Fz鮩'üvºHÞp¬«#®R£«ö)â®42/usr/local/etc/pam.d/sudo¤ŽÛ—þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ý,z7§ýYBåšáù]§ˆx¿¤g@¬œ à&à°Fz鮩'üvºHÞp¬«#®R£«ö)â®4¤ŽÛ—þûð‹+aue_read†hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýsºl3s‘H+‰ÛÃ9Çû)Ϧg<¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,"/etc/pam.d/system¤ŽÛ—þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1286execsudo20ÜS7[AIF¬•pd± (ýð3 TæFY37a +ýk¶¨g@¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,¤ŽÛ—þûð‹+aue_read +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execsudo20ÜS7[AIF¬•pd± (ý„)¼xE•Ž&î¼Ë¯e<ªg<¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“,/usr/lib/pam_opie.so.6¤ŽÛ—þûð‹+aue_openat_rwtc +flagsmode ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value7ppid1286execsudo20ÜS7[AIF¬•pd± (ý +Ϙ¶ÈhM`€p 1¬g"¬œ à&à°Fz鮩'üvº¤ŽÛ—þûð‹+aue_fcntlcmd ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ýïY/fF±JX1qäQ®g2¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“¤ŽÛ—þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýƧ0‘¥O†¿ÓÞÄÓM¯°g2¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“¤ŽÛ—þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý¨ÉG¸îkG#°ÿ +{È×P²g2¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“¤ŽÛ—þûð‹+aue_mmap€Àé arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý²õtN†N%†L)'EE´g2¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“¤ŽÛ—þûð‹+aue_mmap€Àé arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý!¼ð· +FX¹šÎ²=wóª¶g2¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“¤ŽÛ—þûð‹+aue_mmap€€ê arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýƒÂX5"@+ùuó9兩g2¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“¤ŽÛ—þûð‹+aue_mmap€€ê arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý,†¾®F’¦*a[gœGºg2¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“¤ŽÛ—þûð‹+aue_mmap€Àê arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý¦&¥2N‰‚å—û`†¤w¼g2¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“¤ŽÛ—þûð‹+aue_mmap€Àê arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý-“•UöD^¾ˆxýƒ¸"¾g¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“¤ŽÛ—þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÑ}Ìdp§FSŸ— ÑžÇã,Àg<¬œ à&à°Fz鮩'üvºsºæ1ÀZ± þZÀm¨*/usr/lib/libopie.so.8¤ŽÛ—þûð‹+aue_openat_rwtc +flags0mode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ýd ¥ø)ãD0²zèý%‰Âg2¬œ à&à°Fz鮩'üvºsºæ1ÀZ± þZÀm¨¤ŽÛ—þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýk‡ ¼B@¿í‘£¶‰ùÄg2¬œ à&à°Fz鮩'üvºsºæ1ÀZ± þZÀm¨¤ŽÛ—þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý;YµíŒ€Mv½ËãÙvLÆÆg2¬œ à&à°Fz鮩'üvºsºæ1ÀZ± þZÀm¨¤ŽÛ—þûð‹+aue_mmap€Àë arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýhŸÆk(HĦ§²·±YÈg2¬œ à&à°Fz鮩'üvºsºæ1ÀZ± þZÀm¨¤ŽÛ—þûð‹+aue_mmap€Àë arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýæâpí_K¯Ä¤wôCŒðÊg2¬œ à&à°Fz鮩'üvºsºæ1ÀZ± þZÀm¨¤ŽÛ—þûð‹+aue_mmap€€í arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý=#H»»£)R4×ØÌg2¬œ à&à°Fz鮩'üvºsºæ1ÀZ± þZÀm¨¤ŽÛ—þûð‹+aue_mmap€€í arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýäê+5ðBÌ»÷ÙCˆäÒÎg2¬œ à&à°Fz鮩'üvºsºæ1ÀZ± þZÀm¨¤ŽÛ—þûð‹+aue_mmap€€ï arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý–Œf˜öÛM‚ª–ùÎIJÐg2¬œ à&à°Fz鮩'üvºsºæ1ÀZ± þZÀm¨¤ŽÛ—þûð‹+aue_mmap€€ï arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýѵȓ¡èC^œµ"øE–Š0Òg¬œ à&à°Fz鮩'üvºsºæ1ÀZ± þZÀm¨ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý4.çKÆ«œÂã“~ÙÌÔg<¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šé/lib/libmd.so.6ø¨¡þûð‹+aue_openat_rwtc +flags0mode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ýÔ?Ë 4IS’±Ã‰ãµœêÖg2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý]Ô›šHE½’Þ¿,™Øg2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýÖ¿pa’M—= +(§mÚg2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýgŸ’€®ÿB‰«ÐÃõÊúÜg2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýÆr_á„ Ko¡¡“r5·ÝÞg2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€„ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý›¬ƒÍíÚMڵ¸u~ûàg2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€„ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý}­áþDή:µ1'D·âg2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€Ž arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý‚v°=zK²Ñ4× xRäg2¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_mmap€€Ž arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý0Þ^³Ed§Zší;d=Sæg¬œ à&à°Fz鮩'üvº¤×†eo'ŠQ§o{ö¡Šéø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý0ü¨q+G—>g™‹ò[‰èg:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÍÚ² +·b@ƒŒ¢É±ˆBÈEêg:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý†JWYxG˜»œínŽýìg:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÆíŒõtJ|µ¥qšÐ îg¬œ à&à°Fz鮩'üvºzËŽw•ÏT•w{³tÏy“ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýZúö¶KOI1Š[×$Jªðg<¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï18/usr/lib/pam_opieaccess.so.6ø¨¡þûð‹+aue_openat_rwtc +flagsmode ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value7ppid1286execsudo20ÜS7[AIF¬•pd± (ý[À0ôCYŸF€*½9òg"¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_fcntlcmd ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ý¦´@û¤Bñ”è̇ÆÉÁôg2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý¶˜ ŸÎJîƒF¤ì#[öIög2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýÈ›Ú]½ÁC ¾¦IHkçÛèøg2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€Àñ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýcËKæðšAÔ½"ÃGÊY¿cúg2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€Àñ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýÌD´- ÛDðŠ uiüg2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€€ò arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýOzL#J8MÁ—‡ö6Pjwþg2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€€ò arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý±°öt‹à@w0ÜãzDâï€h2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€Àò arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýýkÃ{§+E.ŸZ¦ ± ¨[‚h2¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_mmap€Àò arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"†’úO‡r]Ó‹N“½ÂüÅx4¼„h¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýbQyVsÈBå­·H9?…¡†h:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý±=¾WHGå‚ò•Z“6¼ˆh¬œ à&à°Fz鮩'üvºLv‹ t½P´ T‹ð½Ï1ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¯¨NrþªL,ƒ­‹¾fÆ°†Šh<¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒR,/usr/lib/pam_unix.so.6ø¨¡þûð‹+aue_openat_rwtc +flagsmode ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value7ppid1286execsudo20ÜS7[AIF¬•pd± (ýÕÙW^‚N7„ùËë·d€Œh"¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_fcntlcmd ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ý†ülKG•À·pŸÙ›Žh2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý¹4‰¶M³Fšª›ªøoÔ´h2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýå †-aI@h¿ã‰ÿ'ÝÛï’h2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àó arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýj…W$jMÐÙòþ£ÍŠO”h2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àó arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýÅvöÓTDÏ´tÞ GŽ–h2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àô arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý‘Asf?@1¹9‹ÒY–• ˜h2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àô arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý§EoK@G µ)NúÓŸzVšh2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àõ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýèøé’’åIs•cV#®ž¶Êœh2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€Àõ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýÏ +=ë¬NÙ bXMãQržh¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýƒz -Gƒ¨>†>ló h<¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõ$/lib/libcrypt.so.5ø¨¡þûð‹+aue_openat_rwtc +flags0mode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ý×½}TK²®ÄÇK§$¢h2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýG¬}ÌÓæLˆ ‹ÀfÔii¤h2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýrìlÄM*ž +z™y쇦h2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€ÀŸ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý2a$‘¸Mæ‘î¬/y—KŠ¨h2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€ÀŸ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýR¯þ0–Ký·Õ2mŠp"ªh2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€À¡ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýi É"B©–3ðp«Í·¬h2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€À¡ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý¾‹’£ÍDv³"®/H«®h2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€À¦ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýã~x„½ìL8¬¥^@gæ&w°h2¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_mmap€À¦ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýw46í…K1¾£]äçA ²h¬œ à&à°Fz鮩'üvº6'üiiU©ihÿõø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý*nÍ-hJLºÕ§~Û|z†´h<¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„./usr/lib/libypclnt.so.4ø¨¡þûð‹+aue_openat_rwtc +flags0mode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ýÅ6­§µKoŸ?‰´}iѶh2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýsÚ—C~—B˜”5÷iÇG1Z¸h2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýcçʇb¨K¹–Ðn]}¸Œºh2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€Àö arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýa#cO´F@µPÝîÈ+Û¼h2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€Àö arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýx8ž2 Fcºdù +‰z¾h2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€€ø arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý‚‹¶Ûí*N~“gÞ…B( Àh2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€€ø arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýæYÊc›N†ž!—2ÆçÂh2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€€ù arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýgLe(E~£ŽÖ¹ñS†Äh2¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_mmap€€ù arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýþÊê¡8ŽOR–J‹-Æh¬œ à&à°Fz鮩'üvºëPï9•^•9Cy^R„ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýı¬¿G­BX°yáÏmñ +Èh:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýJ‰÷·ÈfD™©V`˜Ä9hVÊh:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý8s“0H¸¡%2Ñ®ã~Ìh:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý½".?rÜGxŠô³`ÖËÉ…Îh¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýΈ“]úHn¤OÿþÇ/‡Ðh@¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,ø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execsudo20ÜS7[AIF¬•pd± (ýÑùõ©´Mѹ ´›õTº=Òh¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÓ(5æÕDó‹³RM+¿”Ôh<¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,"/etc/pam.d/systemø¨¡þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1286execsudo20ÜS7[AIF¬•pd± (ýçÏß‚S@¦ŽuD¾¨üýÖh@¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,ø¨¡þûð‹+aue_read +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execsudo20ÜS7[AIF¬•pd± (ýo SQ/C°™YXÞå\pØh<¬œ à&à°Fz鮩'üvº<;Иä®QäkQ®ßû¿þß O ‚d<ì?(’i"¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_fcntlcmd ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value7ppid1286execsudo20ÜS7[AIF¬•pd± (ý,ÔÃpî›DÌ¿8%Ö‰”i2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ý »»Ue*Cù·Ûä©LOú–i2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýÞ«öž A;†Dù/ýá½Y˜i2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€À° arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ý’DF+à×H´¡“|Úwžši2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€À° arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ý;=ÜdVôHά-¹H`Q©•œi2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýh¬„¨B­A½¦(-óÖËÆži2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ý„>\²+"A$«!µ[ø´ i2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€À± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýîa“#LGI¨­J1CŸô¢i2¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_mmap€À± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýVÑE§J:I¥œO’ýÙøcݤi¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý´Œvº„Dļ‡(ú¢iŒï¦i:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýañZHð1L©¡êvP9ûn¨i¬œ à&à°Fz鮩'üvº±…tBc„ ]„c “ ã´ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý¢ ¸§Hn¸0“>á]ªi<¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,"/etc/pam.d/systemø¨¡þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1286execsudo20ÜS7[AIF¬•pd± (ý%_I)¤OCç©v ‹0Y¬i@¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,ø¨¡þûð‹+aue_read +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execsudo20ÜS7[AIF¬•pd± (ýÀàfœC†A«ˆ}£˜“bÃØ®i<¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒR,/usr/lib/pam_unix.so.6ø¨¡þûð‹+aue_openat_rwtc +flagsmode ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value7ppid1286execsudo20ÜS7[AIF¬•pd± (ý`9ƒ×ýäGÿ¶ÖR)l/Ïê°i"¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_fcntlcmd ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value8ppid1286execsudo20ÜS7[AIF¬•pd± (ýEš2¨GŃr9Nkª;þ²i2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýdî2ÂòŠ@u§ÏÑø`ö´i2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý! íLIC`’_íúVˆÕ¶i2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€À² arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýè´LnA‹Ä›v‰Ç»˜¸i2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€À² arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý¯ÈmÔFD¹¸xN9¹T¦ºi2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€À³ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýE^×00’K#+Nåþ¼i2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€À³ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýúù»dÄŒGó¹ÞÀ‘Ù»#¾i2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€À´ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý׶MƒC€ä®øá³² Ài2¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_mmap€À´ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ýJwµë·K’ßý) Âi¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýS*¤’ ¹Mk;^€BžÂÄi:¬œ à&à°Fz鮩'üvºø¨¡þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýqaùü¤MÙ¡ -÷ŽÀ'Æi¬œ à&à°Fz鮩'üvº½O7PQ\V‘ѤÖ\ŒRø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýé·§A³Ñ„ZDZõÈi@¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,ø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execsudo20ÜS7[AIF¬•pd± (ýÚŠw½ +C;¯pY°Ê9ÆŒÊi¬œ à&à°Fz鮩'üvºÀ‹kB¼Ñ^¼B<.Ñë,ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýE2: GLü‡cÉ<8‘?Ìi@¬œ à&à°Fz鮩'üvºHÞp¬«#®R£«ö)â®4ø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýÔÎ:a­óI ð,7ÕíhÎi¬œ à&à°Fz鮩'üvºHÞp¬«#®R£«ö)â®4ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý(ŽNÌ)ô@š’›p™IF\,Ði<¬œ à&à°Fz鮩'üvºÓŠsñŸdX—Ÿ“¿XdgÖ"/etc/login.accessø¨¡þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ý±q›BÞJO¬œML†-LjÒi@¬œ à&à°Fz鮩'üvºÓŠsñŸdX—Ÿ“¿XdgÖø¨¡þûð‹+aue_readòhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý"³Q:ÅâO°œÎ¦qå”ÁmÔi@¬œ à&à°Fz鮩'üvºÓŠsñŸdX—Ÿ“¿XdgÖø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýäAó®Ho¿1n±œu–öÖi¬œ à&à°Fz鮩'üvºÓŠsñŸdX—Ÿ“¿XdgÖø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý[x)¢àOµ½°ø–Tø® Øi<¬œ à&à°Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confø¨¡þûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ýßb]Ê;Nм«aÁ@ \àÚi@¬œ à&à°Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆø¨¡þûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýh=Éë­NDšËÆÁ©W®Üi@¬œ à&à°Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆø¨¡þûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýªçïâ¢IXˆ÷àº6è@Þi¬œ à&à°Fz鮩'üvºMTZŸ2S²ŸâÓ‚ˆø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýEæ›ÜÜ£D}…ý½ÓÕ ¥ài<¬œ à&à°Fz鮩'üvºù.Rmb}[˜biæ‹}}Ï/etc/ttysø¨¡þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ý%èÓÏJ¦£yx­ÄµÔíâi@¬œ à&à°Fz鮩'üvºù.Rmb}[˜biæ‹}}Ïø¨¡þûð‹+aue_readÌ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýY“g(ݼD¨¦Qç¤Í6äi@¬œ à&à°Fz鮩'üvºù.Rmb}[˜biæ‹}}Ïø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýà£Û“Ì©AdŠ8ñêUÏÿ æi¬œ à&à°Fz鮩'üvºù.Rmb}[˜biæ‹}}Ïø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýÏà=¼MK:ˆŒÔê°<èi +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setresuiduideuidÿsuidÿarg_euid-1arg_ruid0arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý#½yo†@•‘^>\Ý}k]êi +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setresgidgidÿegidsgidÿarg_egid0arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýßI€Ê\¶H²ƒ ýW³¼AÑ7>í<2/etc/security/audit_eventø¨¡þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1286execsudo20ÜS7[AIF¬•pd± (ýîCÑc¦¼Jâ’Õ©@pzVþi@¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_read̳hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý´Ô+(G1{í©ýt:€j<¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁR2/etc/security/audit_classø¨¡þûð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1286execsudo20ÜS7[AIF¬•pd± (ý»pA>,J¡$ͽ_A‚j@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý/43cUò@J­Ù ¤lþ„j0¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_lseekàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý-棙GÙ¢­y–<~‘†j@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýùéw™RHqµˆb¥*„å!ˆj0¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý²o¾ß»Eæ­ÌLÞÞª²Šj@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýâ+0HI”û?É'„¡Œj@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýë¶.|ÌõJ~¯r@¦IÎ@ªŽj0¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý8´í~ákF>¿Yí~økØj@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýâÊŠ&»G-¨iKPZf’j@¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýõŠöÆr»B•¤ÇñæZ¨êK”j0¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_lseek̳hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýMº“î Gõ£âL¾¡Ò–j0¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýÍKP– +)@•†¨Òïù˜j@¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_read̳hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ý´ßár@@F¯ b˜k¯øûšj@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýÚîPz‹J"†lŠ +7Úÿœj0¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ÒüÛšhY§Gˆ¿èz8Ð9¨žj@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýjµËÙÏDÖ©Ç% ŒÈ j@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýC×ÀF1Hgˆê&O`±o<¢j0¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ýš_d»_|C¤ª÷Ay©¤j@¬œ à&à°Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1286execsudo20ÜS7[AIF¬•pd± (ý‚’+Œ|i@K´yÚ8€ÀÌƦj@¬œ à&à°Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execsudo20ÜS7[AIF¬•pd± (ýæû^¦C±²²8¢j +5¨j +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setresgidgidÿegidÿsgidÿarg_egid-1arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý‚ÃIÍBh¤Ô¡¦¼¯äTªj +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setresuiduidÿeuidÿsuidÿarg_euid-1arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýñPÞ°™¹Ar¤¶¼`æyô¬j6¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1286execsudo20ÜS7[AIF¬•pd± (ý?Ù¶ã@μ“ xŠ¥€ä®j6¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value63ppid1286execsudo20ÜS7[AIF¬•pd± (ý÷Éz¦ÎþB¬¨T©Tù °j +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setuiduid +arg_uid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý×'Ä‘#pH¼6è;½ãk²j +¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºø¨¡þûð‹+aue_setgidgid +arg_gid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ý ·ÿ¥‘![l®m;†.¤bà+ìHFz鮩'üvºà+ìIFz鮩'üvº20 ÜS7[AIF¬•pd± (ý«¯‹51TGÁ´ÂÌJ‘|g´j¬œ à&à°Fz鮩'üvº·ÿ¥‘![l®m;†.¤bø¨¡þûð‹+aue_pipe ret_fd16ret_fd27hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýPö™½#Lj‡Šç_u‰’¶j$¬œ à&à°Fz鮩'üvºà+ò½Fz鮩'üvºø¨¡þûð‹+aue_fork +arg_pid1295hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1295ppid1286execsudo20ÜS7[AIF¬•pd± (ý -gø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execsudo20ÜS7[AIF¬•pd± (ý°ZC{¾Gÿºõ)d S ‚Âjªœ à+ò½Fz鮩'üvº‘Oè´¼s>W³¼AÑ7>í<ø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1294execsudo20ÜS7[AIF¬•pd± (ýpžÑ…îJ2‰ÊI•„Äjªœ à+ò½Fz鮩'üvºÞI²Ÿ!qÁ_±!@9ÁRø¨¡þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1294execsudo20ÜS7[AIF¬•pd± (ý+ò¤–HJgr•­ÎÆj"ªœ à+ò½Fz鮩'üvºø¨¡þûð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1294execsudo20ÜS7[AIF¬•pd± (ýPBÓ/¾O5»X†™zó]­Èjªœ à+ò½Fz鮩'üvºà+ìIFz鮩'üvº/bin/ls'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ø­—¬þûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinelsppid1294execsudo20ÜS7[AIF¬•pd± (ý/"ö\ãG@“µ)šõ3ÄÊj@¬œ à&à°Fz鮩'üvºà+ìHFz鮩'üvºØ­—¬þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1286execsudo20ÜS7[AIF¬•pd± (ý껑WvA@T…¯ËÙS¿üÂÌj¬œ à&à°Fz鮩'üvºà+ìHFz鮩'üvºØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýGZ7Š™D®µ^°}¡í3Îj<ªœ à+ò½Fz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confØ­—¬þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1294execls20ÜS7[AIF¬•pd± (ýEÍCÛåNh“FXúAsFÐj@ªœ à+ò½Fz鮩'üvº‰oý©äÇU¤©A)Eǹ Ø­—¬þûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý°:²ß”Bñ†AGP›ÉÒjªœ à+ò½Fz鮩'üvº‰oý©äÇU¤©A)Eǹ Ø­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýc2ÄVM?†¾5ç`D›ŸÔj<ªœ à+ò½Fz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsØ­—¬þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1294execls20ÜS7[AIF¬•pd± (ýuÀËn•N‘C ÿ¯;áFÖj@ªœ à+ò½Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýSÎÿ6]vA+ü€SúŽ‚Øj@ªœ à+ò½Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý×´ùFF!¬•lú±M Újªœ à+ò½Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýéÛ–è%/Dû‰8}?êsÜj<ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}Zœµj"/lib/libutil.so.9Ø­—¬þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1294execls20ÜS7[AIF¬•pd± (ý»6„óªK¨’†Øðh5ÙÿÞj2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýô‚íT5¼C@°¥ûŸ´n¶Càj2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýö^tŠFjŒ&Çé»B âj2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€À§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý«î!zM°ƒ˜¥qiªôäj2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€À§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýÀ):>µA„¢!µY‰g æj2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€À« arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýµ]¦¿èÌGÒ½c‚Ö é!–èj2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€À« arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýdÕkFyšxîéƒL¹êj2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€€± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý…’æd™AÙmo!^ésìj2ªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_mmap€€± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý£ïj8ÔB`gñ.ÜWªîjªœ à+ò½Fz鮩'üvº5‹s{¯lœZ¬¯ª}ZœµjØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýaXýy@5¾q“SKøZŽðj<ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦*/lib/libncursesw.so.8Ø­—¬þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1294execls20ÜS7[AIF¬•pd± (ýÏ%mÅ×vKNšR8ʪÆhòj2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý€.ú˜#HKºI Hœmôj2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý{p# HD¤ +r[8°kžöj2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€€³ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý_•»Ëê8Oì‰tš ÃÑ”øj2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€€³ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýðJŠ'îsLí˜sq ŠK#Åúj2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€ÀÇ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý\d'¯ôGc¢¿S ÓG8óüj2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€ÀÇ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýdzD +`BJ®»KáÓòÓeþj2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý'áÜ5šKc,* hM§€k2ªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý¨"€kœÌD|¸ûm@B‚kªœ à+ò½Fz鮩'üvºÚ6n $.\¤ ¸­ü.+¦Ø­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýáˆÒ!´zK¬íÚä²B#„k<ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Ø­—¬þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1294execls20ÜS7[AIF¬•pd± (ýSŒ¸ ƒW@¥¤#ÄÓ!†k2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýzYƲ†ºB0¼gY^‰E«ˆk2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý1wgA2Aá·$ .(Šk2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý³%–³&D¾”ï¼ +¨à¿Œk2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýJÚm)’Lä°|è§ôDWíŽk2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý>?VÓk’@œ²I„›>Ik2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýX|N üG´§Y¼`”‚Ø’k2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ý…ÎÌr¹1JØ«ªó&­‡”k2ªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1294execls20ÜS7[AIF¬•pd± (ýL5—þZ„NÕ§ÃÊ™ª*ê®–kªœ à+ò½Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýF§ªõLIˬXœŽäg@M˜k:ªœ à+ò½Fz鮩'üvºØ­—¬þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execls20ÜS7[AIF¬•pd± (ý;é(Ï9G<ŸºêùJªi³šk:ªœ à+ò½Fz鮩'üvºØ­—¬þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execls20ÜS7[AIF¬•pd± (ý›K©ä ìEÂ0¯a ]hëœk:ªœ à+ò½Fz鮩'üvºØ­—¬þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execls20ÜS7[AIF¬•pd± (ýL .ÁüCˆ¾ÓR×Àwtžk:ªœ à+ò½Fz鮩'üvºØ­—¬þûð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execls20ÜS7[AIF¬•pd± (ý:É·GÖDùš³ú%½ãAÀ k<ªœ à+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bZ/usr/home/user/ripe-prov-tests-master/Linux/.Ø­—¬þûð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1294execls20ÜS7[AIF¬•pd± (ýáµm)aîJj€Xç ])Ô·¢k6ªœ à+ò½Fz鮩'üvºà+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bØ­—¬þûð‹+aue_fchdir +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1294execls20ÜS7[AIF¬•pd± (ý°CÇò÷ßCx€wbèãô¤k<ªœ à+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bZ/usr/home/user/ripe-prov-tests-master/Linux/.Ø­—¬þûð‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1294execls20ÜS7[AIF¬•pd± (ýÎHy¼¹A¡sæcÛ2¬õ¦k<ªœ à+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bZ/usr/home/user/ripe-prov-tests-master/Linux/.Ø­—¬þûð‹+aue_open_rwtc +flagsmode +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1294execls20ÜS7[AIF¬•pd± (ý^óœŒdLºˆá’¹Ê"ñ–¨kªœ à+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¨èû•PÂØ @Ó¾G:çUâùªk6ªœ à+ò½Fz鮩'üvºà+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bØ­—¬þûð‹+aue_fchdir +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1294execls20ÜS7[AIF¬•pd± (ý­v çRH½¡¿}뇣¼›¬kªœ à+ò½Fz鮩'üvºÞç=š8§T¸šm9D§bØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1294execls20ÜS7[AIF¬•pd± (ýê¦ËiVD¬ œ‡þëaŸù®kbªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_writeîhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ýøãO‡LÑF²uÍhïþ<†°kbªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_writeÖhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ý)ÑFEc½|oH\žÞk²kbªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_writeÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ýû€±“ËC<³´z`øÈ´kbªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_write°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ýŒ—ºÍ­LF• +"H\nÚe¶kbªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_writeÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ýQÕ»ÿ½B‹«L­ê/¸kbªœ à+ò½Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø­—¬þûð‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1294execls20ÜS7[AIF¬•pd± (ýÎØ•û”èF®12nTŒ¸mºkªœ à+ò½Fz鮩'üvºà+ò½Fz鮩'üvºØ­—¬þûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1294execls20ÜS7[AIF¬•pd± (ý¬>‡–B]­Ásf¼Gãk¼kb¬œ à&à°Fz鮩'üvºà+øÇFz鮩'üvºØ­—¬þûð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1286execsudo20ÜS7[AIF¬•pd± (ý:^xXÚN÷†Ð0Çc:.û¾k@¬œ à&à°Fz鮩'üvºà+øÆFz鮩'üvºØ­—¬þûð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1286execsudo20ÜS7[AIF¬•pd± (ýý ˜07He x±×g¾d:Àk¬œ à&à°Fz鮩'üvºà+øÆFz鮩'üvºØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýèä™­Ä>E~³Õ’1A~Âk¬œ à&à°Fz鮩'üvºà+øÇFz鮩'üvºØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýI0Ä“K¼ ?By)ƘÄk¬œ à&à°Fz鮩'üvºà&à°Fz鮩'üvºØ­—¬þûð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execsudo20ÜS7[AIF¬•pd± (ýb-æÍyŽIÉ«*¯H@(À Æk@šœ ߆7æFz鮩'üvº€ËâÞ +Cñ¹ïvohå_@êk@ªœ à-;1Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286exec +sleep20ÜS7[AIF¬•pd± (ýe>н«7F5Ÿ:¾7‚²k +ìkªœ à-;1Fz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286exec +sleep20ÜS7[AIF¬•pd± (ý·~ðxK@¼œñ¦§uÆîk<ªœ à-;1Fz鮩'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Ø­—¬þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286exec +sleep20ÜS7[AIF¬•pd± (ýÃ=:»Iÿ•£¼”ðk¬œ à-ñFz鮩'üvºçEEÔÒ—S’Ô%ñS—m´/usr/bin/nc'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ø­—¬þûð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinenc -l 54321ppid1286execbash20ÜS7[AIF¬•pd± (ýú(/YPGÁ¢–°)¿"7ròk<¬œ à-ñFz鮩'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confØ­—¬þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnc20ÜS7[AIF¬•pd± (ýÎŒwtŸaCNŸÉÞS;(aôk@¬œ à-ñFz鮩'üvº‰oý©äÇU¤©A)Eǹ Ø­—¬þûð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýduÒQu}OO¹ª@=—Üök¬œ à-ñFz鮩'üvº‰oý©äÇU¤©A)Eǹ Ø­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ýë̘uHå›ÓýHóç3øk<¬œ à-ñFz鮩'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsØ­—¬þûð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnc20ÜS7[AIF¬•pd± (ý¡ ÍgC~’Ê×?©’úk@¬œ à-ñFz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýbÅ¥[ÌI™Œ‹Ï9ðdÜük@¬œ à-ñFz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýR“ë{_C¯´ucç/=$Òþk¬œ à-ñFz鮩'üvºXꎩð®…\®ð@JÌ…¼âØ­—¬þûð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ý• +õÇìäL£•‘–y1‰™€l<¬œ à-ñFz鮩'üvº +vlYùÖN_–ù³ðNH$/lib/libipsec.so.4Ø­—¬þûð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execnc20ÜS7[AIF¬•pd± (ýûGdsäÊL +Ž¤ë»AY‚l2¬œ à-ñFz鮩'üvº +vlYùÖN_–ù³ðNHØ­—¬þûð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ý-)C` B‹®³ŒÁ=”>„l2¬œ à-ñFz鮩'üvº +vlYùÖN_–ù³ðNHØ­—¬þûð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ýÄåä•ØO°§e¸®<Ÿ†l0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´Ôš‘€üð‹+aue_lseek’ðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠ+˜§»+L©©—JPŒ ͧˆl0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_lseek’ðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýk-úI›H.§1‘`A©ÖŒl ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýÓ˜ T»EQ™ž‚x}(èŠl@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…2â0 B ™©Àa\¤ól ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýÞ-?o}¤I ” ÉÖ³œŽl@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;Rh_ùŸFÛ†³68nÚç”l ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýó.~H‘«+󆬹Çê’l@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷)t6¦N¹ æHÒ¿ˆ˜l ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýh[:QÏÃO¯§ëo(³¨?–l@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^ñ&K«…3’dfrœl ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýs õËßE#·7Zðw?šl@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYüì·ÆBb²7Í2¦O l ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ý8ÅüFROK¦nËË>êžl@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;èI?é@œ‡©È:9 5¸¤l ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ý_‚vGñ`J~®Ë[9Ãû@ä¢l@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{~¦‘xDžx9ò!ùz0¨l ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ý&4~Ž,Cƒè"ˆbŽå¦l@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<óðØKAºz¬Ä¢âÝB¬l ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýÞå«PI(¼M½žw®ªl@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýö<ž!¿^Gî¬cY$?Ý΄°l ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýøO ]ZIM•ŽDªÛ/·3®l@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?"?ÕÝK~˜/¼Eu´l ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ýW"Œ¹Q¹E¢¬¦Z©v!í²l@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌÔ²ÔïDiÌ +¤„·ì¸l ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ý«XÂ&kJE£½½Œ²|È9¶l@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢Ôcg¼(FP´­ï €9–¼l ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ý#L2ãÖl@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýëÏÆžÓxK"¤…˜›ÅÝÜl ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+20ÜS7[AIF¬•pd± (ý5dó‰uL†›³õ®S%ÞÚl@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=Ä¥¹ývD±2N64ËÞl:‚œ Ê +ÙKFzé®›'üvº¤í‚ò„üð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýä0‚¢@>£Hï·´ü}4àl@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤í‚ò„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýG¡ÞJÓŒ™þ³U¿âl@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ývà'ÝklId¥÷ÁZ`Ü©Þäl@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_pread¨HhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝ«b"DwpL~ðælb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤í‚ò„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂȆG”@J¿ ï‘zùVœèlb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¤í‚ò„üð‹+aue_write’IhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/¦v— A ƒïà;a+»Âêl@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤í‚ò„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌWòÆ«sCÊ·Õ%6Ë´söl@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýTe&—ÇøC“¢>ìÓ6iøl@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤í‚ò„üð‹+aue_preadæJhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎ÷&#-Le£äñ=é¦úlb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¤í‚ò„üð‹+aue_writeÐKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýh2)¬Od‘gú<Ëjülb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤í‚ò„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷þ†LÓ†|ýŽþNŠþl@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}æ¿4M€ŒIe:±J£s€m@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýº +¶P$Mº†|â¼Ã¤‚m@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadØDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.wξ=HÓ“7sRY>•„mb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý( +*Ü ‹B“xÐCª³[†m@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýºeâü-³@È«bƒÖ`Áˆm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®Û™7¾Aiˆè=œo%ˆŠm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadî?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâyhï¡}L[ºJ*q8VÄBŒmb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýð懚ãæC@“ŠL¡R–IŽm@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýó«jn}I×á#*va¼|m@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚhÊ—?#@,©•T„i>ã’m@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadäChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ª)f>IŽ¹à°2»e;”mb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁcÏ@ÙM"Š/ì«—ÎrÉ–m@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýéj]=ÍA{¨œð BÔÞ)˜m@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±>X°vH§² ï*4PŠšm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_pread°KhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýv²bÍZFó¹¥±Ç'ÆYËœmb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýéS‘€ÕENÁ¦ò0Ôó9žm@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´®Àv²uN}»háú W m@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU•¦ÓI²[÷D2½3¢m@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadÐBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚€)ºuÎCO²›m¿|Á‚å¤mb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒêÏ…BJ”bJûŽ¦m@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýî[È^@¹­ž—y°È®@¨m@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝrHZ°“¤%Ô³©ªm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_pread’=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸt\ñgUEª—Í9v<³¬mb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýX"ïSÞøG ž-¢Wãx]®m@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqútÿ–Eâ¿gßµJªl°m@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,Ê ÛÕB/˜• =Ëð˲m@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadæIhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýHf÷–H“IC“ê£ÛÛ:b´mb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ?7ë´“C;½«Å=Ή?¶m@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýp|ïð ƒB›ƒü£Î@ø~8¸m@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿«ÐmòBê•=}æD4ºm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadö<hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýb[m6ŸþEòœ«ªwûŠ¼mb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýEhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1VÍG¢°ü¡DåL‚„Ìmb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽ/ýÝRH?šPÖlõ‹‰ŽÎm@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿ©”L«Gw„åËÐm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýíB§5#K«ÿÛ [Ž¼Òm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadªBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷ÆØÛuYEÆ™Ý%t¿‘gÔmb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý63é$äOÙ¨ô@PÂGÁ¯Öm@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåÆ÷ˆ¬1Båžbm’•qÐ(Øm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýmyÚ&”…BH¦Ó½¦AþÛÐÚm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadìAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0ì—¡•tFH…®¶®#l»KÜmb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁßÖÁx@ÿ¸ ûîNÞm@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²-•½èOLµ±:Œ)³‹:àm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõaJx¹cH“Œ^l'ær‰Ïâm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_pread–ChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$ÌÙï]EŠ¨4¬u|»ämb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿ¢þΑ4J •FH„¯;ôræm@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOyM·BÜL˜™”Ç~åI¶èm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐÀª ¯DÞŽTÏ5æíêm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_pread´GhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýà@v¼ô;@[¦Ÿ DBæ ìmb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸ ×éà›L ¼›~ëÅ?§îmD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºæ®û„üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýiÿ¢ÅëkO¹¶Í U^Ø[[ðmD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºæ®û„üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýz»à-øyGÇš;þŒ)¦2òmb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºæ®û„üð‹+aue_writeÂEhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZC?}C +’‚#Ñdúôm@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…­=.NAýŠI‹öm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)Ó9û¯O¾š?™upxøm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadÒ=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌxîòwLÒªGCÊ€.úmb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜó×Ô%IK†´d0`1[üm@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdݲúI ¬J±"‚»¹þm@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿF1K8™ì»0£7O€n@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadš@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýV>bgyK>˜e!k÷Žfh‚nb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ªîü¶h´Ê7@©…,ŽX¸KK„n@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-ŽÎIÜIî»ý6¨@Õ†n@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýtÕקü?O.Ÿ#ÒFÚˆn@®œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ®û„üð‹+aue_preadºNhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"ðW9ÿáEÝ´éBQ;î5Šnb®œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ®û„üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷dj³ëÍE3¹ýÂÕF}Œn@®œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ®û„üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýR¶ðm~K<¨¥á?ÌhŽnJ®œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºæ®û„üð‹+aue_sendtoÞ +ret_msgid408hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖ§wÛ‘HU×FÈŠšönDê› µ dôFzé®{'üvºµ CjFzé®{'üvºæ®û„üð‹+aue_recvfromÞ ret_msgid408hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¾þ_9LF^g‹„M½’nbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKæ®û„üð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý]k΋0CÆÌ©s^”nD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº®Ó»……üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁ Leõ I1œ”57Â9•–nD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº®Ó»……üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®×rBLÛaÏ`åŽ4á˜nb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº®Ó»……üð‹+aue_writeØ@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄÞj¢N¯¿[.ÍŽM“3šnD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈÿ–×÷K´±¦·¸ñGœnD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJs¢;.¥NDƒ8ªåFgžnb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_writeÎDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýû«Û;K>J­ºd7õ5¦ nD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýû,z-Ö>B€¿]‡q…:[Ú¢nD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýT®wQh•I7”aïè‘ï¤nb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨ÈÉŽ…üð‹+aue_writešLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcMÜuÂLÁ† zŒþfQ¦nD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Šð›…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„·cUœ5A¨‘6rG¬‚U¨nD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Šð›…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦u.óÂE8´‡*¹Óì-ªnb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Šð›…üð‹+aue_writeºChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯¬ïn`¹Iø W®öQò¨¬nD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞÿQ‚EB‘þ3|9É3®nD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒþ TXHõ·hz4‚$A—°nb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_writeü=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?t—ÄM«¦z7ø^§!ã²nD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýC¥â¬YCg½thU°¶ï´nD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[.8ãGB‹_2ï[ã¶nb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¾»À¢…üð‹+aue_writeÐJhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýzVáÿüÊEiŽ:RÍhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAÿÿ{DYŒÍ|mˆ¿’ÊnD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€Æ¾…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕc`‰OFû®`ûæåRÌnD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€Æ¾…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýú! +igŠL뢬²”V|o•Înb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€Æ¾…üð‹+aue_write”ChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý VûLÚOï±M1´Cx7ÐnD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ¡×É…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµ¾/>7üN¬£´ƒaPºÒnD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ¡×É…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýFO.ON¬­ˆìÀþõ™Ônb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆ¡×É…üð‹+aue_writeÖBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýr—†–@¶Ãçù$nÖnD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0åX¶‡PGúµç»öðÞ—ØnD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\¡3yÄK•I·\'¼ßÚnb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_write€DhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýå2Îýô¢DˆªŽUÄÜnD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎá¶CÇ£HÔ«BeZ;p‘êÞnD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕ€'HœHù¯‘•ê¶8’Iànb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºêùÑ…üð‹+aue_writežHhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^%ÇÞõäEô«e¥·E,ã+ânD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìî„Û…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçpýš1Bùœ÷"Ø.@änD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìî„Û…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇ«¹¨Ý(Dšæ•a’¡ÆWænb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìî„Û…üð‹+aue_write¼>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛ‡³yË–O©kôJ6àènD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿÖmÑpÊD·]Å?Ç•.ênD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓ.®3|Ç@@¹ÎpŸŠìnb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_write„AhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^4×–OCŸå?‚…‚óînD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\3Õ2r%B+…öO^oðnD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýT8p²‚K“»å%æR ¬¥ònb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºü†¦ä…üð‹+aue_write¤OhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊþË16F`”;³ÖAÀ<ïônD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”þèí…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊÞ»B© {O/]"önD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”þèí…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýº1Ù +8Jf«?Í8ËZìønD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºú×”ú…üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•‡Ñ;b O·„û¹ŸÀúnD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºú×”ú…üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýòHý/cbG³šÍ90ì©"ünªœ à-;1Fz鮩'üvºà-;1Fz鮩'üvºú×”ú…üð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286exec +sleep20ÜS7[AIF¬•pd± (ýl·¿·iEJ•s¥•=tœþn@šœ ߆7æFz鮩'üvº€ËâÞ +M¦º~ξ DºŒoªœ àÈ ¹Fz鮩'üvº€ËâÞ +¦4Œ4NÚToÊobªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ý´M«KSsIùLc&Ôo@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýK‡Ö“L[DƒŠ=,Ï[Öobªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ý머ÅABoŠëeºè±Øo@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ý‹‚›Òa)F° £„q [$Úobªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ý†’‹-ÎL•vÁÝâÜ׫Üo@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýŽ °P¿F‘­Hî__· +Þobªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ý½±š>jµId„RòE´`\ào@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýª'ê©¢B@o“|ý)87°gâobªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýª¿ ¿òÀF›‘¤KGXäo@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_readà%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýj5íy¾sCÏ¥Ôèx½êÛæobªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_writeà%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1286execcat20ÜS7[AIF¬•pd± (ýeú¶´H"G¦³@Db¨„²èo@ªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execcat20ÜS7[AIF¬•pd± (ýe;™TL"»¯‹ÑáoÁ,êoªœ àÈ ¹Fz鮩'üvºÏU…¹^…•öþ¹€Üú×”ú…üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýîOÝ$tE’NuïV,ìoªœ àÈ ¹Fz鮩'üvºàÈBFz鮩'üvºú×”ú…üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1286execcat20ÜS7[AIF¬•pd± (ý8*G숗Cؽúj_¬îoªœ àÈ ¹Fz鮩'üvºàÈ ¹Fz鮩'üvºú×”ú…üð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1286execcat20ÜS7[AIF¬•pd± (ýØÒfš!C[»W5[R¼ ðo@²œ àÈBMFz鮪'üvº‰oý©äÇU¤©A)Eǹ ú×”ú…üð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execnc20ÜS7[AIF¬•pd± (ý?'g1ÿAŽ‘¾$u¬G Çòo²œ àÈBMFz鮪'üvº‰oý©äÇU¤©A)Eǹ ú×”ú…üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ýfT£ýgK»íì1ÿic²~ç²ÊpÞš àÉc‡Fz鮪'üvºzUYK¹–de¢ƒ‚Øðð€†üð‹+20ÜS7[AIF¬•pd± (ýéç–¨1A¾ƒ@©š–ó"òÌp²œ àÈBMFz鮪'üvºàÉ_”Fz鮪'üvºØðð€†üð‹+aue_connecthostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286address127.0.0.1port +54321execnc20ÜS7[AIF¬•pd± (ý¸ÔKlD7Ž ªƒúîfÎp¬œ à-ñFz鮩'üvºà-Á£Fz鮩'üvºàÉc‡Fz鮪'üvºØðð€†üð‹+aue_acceptret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value4ppid1286address127.0.0.1port +58335execnc20ÜS7[AIF¬•pd± (ý,©«ÆèK ™ŽØ'>Å&Ðp@¬œ à-ñFz鮩'üvº3P ÓK€X‹Ó«·Ø€‘^Øðð€†üð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1286execnc20ÜS7[AIF¬•pd± (ý¹e[‡njLoç1Òp°œ àÈ:­Fz鮪'üvºJ~!]þË}V‹þ|)ZÓýAÀ²Y-C. êp2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€€© arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýÙ%›¥WCyœô~꜂ìp2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€€­ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýj¾÷B%H>µðaEè¼îp2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€€­ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýºÓŽÏ(ÇOò°,Pa¦‘6®ðp2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€Àµ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýÃ,5èF"¤za´˜òp2°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_mmap€Àµ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýõ'ý¸­§NC­’áµÙã‚ôp°œ àÈ:­Fz鮪'üvº¥_¤!0rtQ²0 ñt¿ñØðð€†üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execgzip20ÜS7[AIF¬•pd± (ý±—Ï5CH.‚ÓL戚Ԁöp<°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß W*/usr/lib/liblzma.so.5Øðð€†üð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execgzip20ÜS7[AIF¬•pd± (ýìað–DŠ±É&ƒïd]øp2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýk­ß7°ÀD«®3r=Pïúp2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý¦˜»Œg–B§’g5ýÅüp2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€À¶ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý?¿‚îNµõãp·ÏwUþp2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€À¶ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýÓ€`Eg³€§§q0€q2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€€¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý¸³arÎGº¸nø‰îÇŠ"‚q2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€€¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý¨(tw’IiŠbO÷æ„q2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€€Ë arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýÃÈïu0K—»¶ß‚‡mU†q2°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_mmap€€Ë arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýÜ ¶¡ýáI†ú± ’A5ˆq°œ àÈ:­Fz鮪'üvº®p“ó ß[ aÃ ß WØðð€†üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1286execgzip20ÜS7[AIF¬•pd± (ýŸ:l%…yHU·|6e¦0hŠq<°œ àÈ:­Fz鮪'üvºñ…&´iºU“i5kEºGQ(/usr/lib/libbz2.so.4Øðð€†üð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1286execgzip20ÜS7[AIF¬•pd± (ý7á²ÍKb…ÁØX«‡FgŒq2°œ àÈ:­Fz鮪'üvºñ…&´iºU“i5kEºGQØðð€†üð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýÃäq»dD›~UŒdÊŽq2°œ àÈ:­Fz鮪'üvºñ…&´iºU“i5kEºGQØðð€†üð‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý‹4æwóçC*šnåÌ fq2°œ àÈ:­Fz鮪'üvºñ…&´iºU“i5kEºGQØðð€†üð‹+aue_mmap€€Ì arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ý”geÑ‘þOÀ›7™ÅÊúô’q2°œ àÈ:­Fz鮪'üvºñ…&´iºU“i5kEºGQØðð€†üð‹+aue_mmap€€Ì arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýôâí‹ùÖL`¥­+FH|K”q2°œ àÈ:­Fz鮪'üvºñ…&´iºU“i5kEºGQØðð€†üð‹+aue_mmap€ÀÍ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1286execgzip20ÜS7[AIF¬•pd± (ýv‹ð.Z@–VÖ<ìb’8–q0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöëùžˆüð‹+aue_lseekê·hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$àò&ÕÕIB‚TÊìõक़q@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÆÜ¢æŽüð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý\ŸëL@B˜©5&äwqJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆÜ¢æŽüð‹+aue_sendtoÚ +ret_msgid409hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýœî»AL ¿*o(ÀhãœqJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆÜ¢æŽüð‹+aue_sendto˜ +ret_msgid410hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý½ÿÞ !AJÚ‚±9:á¤ð8žqJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆÜ¢æŽüð‹+aue_sendto¬ +ret_msgid411hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÕ¡ÅÌAœ£ePÛŒ®æ qJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆÜ¢æŽüð‹+aue_sendto˜ +ret_msgid412hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÉ‹ñO¯ANéƒÃÇSN¢qDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆÜ¢æŽüð‹+aue_recvfromÚ ret_msgid409hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýå» 6A’’€+^ÄOãV¤qDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆÜ¢æŽüð‹+aue_recvfrom˜ ret_msgid410hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýWˆ—ó‹VH¼¡¬à«ÙĦqDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆÜ¢æŽüð‹+aue_recvfrom¬ ret_msgid411hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýWÛ™ +Eï©ëõ£…m¡½¨qDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆÜ¢æŽüð‹+aue_recvfrom˜ ret_msgid412hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýïî^â%Hq¹1ÍÔeªq0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦›Êâüð‹+aue_lseekšÊhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýT…j…=XBºÉž^E2up¬q<Þ› µxÏFzé®’'üvº €ja·*XYª·CÿùX?Ü/etc/cron.d¾í•ý’üð‹+aue_open_rwtc +flagsmodeè +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1execcron20ÜS7[AIF¬•pd± (ýÂþáñÛE/œ0™ç½oÔõ®qÞ› µxÏFzé®’'üvº €ja·*XYª·CÿùX?ܾí•ý’üð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1execcron20ÜS7[AIF¬•pd± (ýÜ)QäZNOO®'wì˜Å°q0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_lseekšÊhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡‰ñJ˜³lš +â›<´q ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ý™) +lºæI‡«vtËXTGº²q@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqy¼²FU è¦\HÿT¸q ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ýEømšOO¹š”7=Q ‡¶q@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°çÈBù@D°ŒwºÊÄ i¼q ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ý×"Co@´&‡êP!¯ºq@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýEé L "³gÍ„Àq ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ýV«Ä|QrF/¡×D2Oµ¾q@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1°AÞDuº“c ãÕÄq ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ýÒ¼ËNÕLE—[rŸ5oÂq@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶ÿèŠ-/D²ÄÛsAD‰GÈq ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ý®S&ïEUD“²½Ê$ó>Y1Æq@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýz}Ñ¥’jCÝ…Ï + ö€Ìq ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ýÚìTà¯DÁ¤´Í%|œdUÊq@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#¼à úëE€ˆs¾5£á¼ZÐq ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ý9è:9fFu°|£iéžÝÎq@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæÍ`¥¶ŸGźjÚDŠïÜÔq ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+20ÜS7[AIF¬•pd± (ýüѳN:´àEElšÚÒq@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´üÃX8G‰Ÿ\Ï@ë={Öq:‚œ Ê +ÙKFzé®›'üvº¦ˆÈå“üð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"°Äû¬xïVJ¡¶’o»3Œ,}Øq@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™,°Ò‘ÊTàK"ªÑ‚±*u<äq@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞƒ1ögBZº ˜LdI:æq@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadò=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýË— +ÅL@åjú³Ë~èqb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ˆÈå“üð‹+aue_writeÜ>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQ>º›¬MÕ•å¶Ã'Kaêqb´œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ˆÈå“üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎ#DúORìÄÖ—–Îìq@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxpŠÊxIªé —|æîq@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYµ„ÔäBá²rÿÀoo2šðq@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadª<hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýW/w1tJÇ­$)ö ZãKòqb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ˆÈå“üð‹+aue_write”=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýNÙÈ´PAù«`V^5¯ôqb´œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ˆÈå“üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—:H”~C¥2"h–ÈÎëöq@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|àÀî@*˜–}ãØÀDøq@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄÚ…(CF³‘ÆE þúq@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_pread®AhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚv?0¶M/¬Ü€w†üqb´œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ˆÈå“üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýò0z¿ô J|¥KÇnk}å þq@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçª}`HFz£ OkB50ê€r@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýA&RwÕEN¿Ÿk°_vÅÖ‚r@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadÚGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖ‹#­MsŒ8€Uý„rb´œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ˆÈå“üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$Ý +ÃÖµEت‘&\Œƒ39†r@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%ùÖ5MP·îpŠÕ ˆr@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛ}€ê¿¨CÀ©ñZ¨‰ŽZŠr@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadŒChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½1DA8ž EP6†.FŒrb´œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ˆÈå“üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹vvÙG%–sß¡ÊívÉŽr@´œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_9‘W…O†|žRÌr@´œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ˆÈå“üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§¤úe™Nÿ°U`Š*öM%„2-,òáP²œr0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_lseekúhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–j1 ®åI)®¼’®=q r ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+20ÜS7[AIF¬•pd± (ýÈ +—ã!1Kô¢ ‡/8ÿžr@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^¡ôÐ6ËA —Z>P5áþܤr ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+20ÜS7[AIF¬•pd± (ý,Ñ¿Ê–úBä‘’G2Ó¨‰p¢r@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£*:Í"ÒNb„…É{Z儨r ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+20ÜS7[AIF¬•pd± (ýDMägK·I ’ü"M0æ1¦r@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆSeÊ·MM§Þïµ'!P¬ªr:‚œ Ê +ÙKFzé®›'üvºòÚØ¢üð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ¥ßºÞ±HÓ†|)S4¥n‡¬r@¶œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V òÚØ¢üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈ›&K÷´J›Kf)*ŸÐ¢®r@¶œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼+˜N:BÉó9KÒ°r@¶œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadü@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýª¼T0"A8˜Cít„œç²rb¶œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áòÚØ¢üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8rƒ\G@¶–ahÝ´rb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºòÚØ¢üð‹+aue_writeæAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýSƒ]>IF^‹Pö]æ,¶r@¶œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V òÚØ¢üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦®ç~g{Ds¹ç6ø«àѹ¸r@¶œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcB’ïHh­‡ácÛÉ»¦ºr@¶œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UòÚØ¢üð‹+aue_preadÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜1­u|G8«è· ’j¼rb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºòÚØ¢üð‹+aue_write¾hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–¡§ý¢INµœD|˜á#a¾rb¶œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áòÚØ¢üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýé%<ˆñuO©~2Ýé4èÀr@¶œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V òÚØ¢üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýãE&~\«GZ‰™ŸqUðüÌÂrJ¶œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºòÚØ¢üð‹+aue_sendtoÞ +ret_msgid414hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·†pe0»I•WÙÚ)@,-ÄrDê› µ dôFzé®{'üvºµ CjFzé®{'üvºòÚØ¢üð‹+aue_recvfromÞ ret_msgid414hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÜBKKI°€¶=¤*p;Ærbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKòÚØ¢üð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý(ÒÇoM½†ñGã XjpÈrD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÎÂÄâ¢üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ývh™ZòAX£7Iº'4bÊrD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÎÂÄâ¢üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýäs6Ql7GqƒÒÄj©>YSÌrD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÎÂÄâ¢üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄHÁšOl¦¦K˜ù ‘ÎrD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÎÂÄâ¢üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóúâ¶A@퉑z ´8¡Ðr@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÊêÆ”¥üð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýB¿(NOQL\‘cÊî~ÏyÒrJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊêÆ”¥üð‹+aue_sendtoÚ +ret_msgid415hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýh!ŠNîøM]—ÛEźÀ‡ÔrJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊêÆ”¥üð‹+aue_sendto˜ +ret_msgid416hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýóųµä1IÁ¾àÕ½rè¢ÖrJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊêÆ”¥üð‹+aue_sendto¬ +ret_msgid417hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý)’ŸÿKF1¯Ù„Ò4vÑØrJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÊêÆ”¥üð‹+aue_sendto˜ +ret_msgid418hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýZ»ñ¼ÐG­ü°÷œÚrDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊêÆ”¥üð‹+aue_recvfromÚ ret_msgid415hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýû5Ñ^G}ÜãYЊÜrDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊêÆ”¥üð‹+aue_recvfrom˜ ret_msgid416hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¦VÍ/:Jy¬Ž„Ãí FÞrDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊêÆ”¥üð‹+aue_recvfrom¬ ret_msgid417hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý)‹·7ó­@ˆ&9îø}…àrDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊêÆ”¥üð‹+aue_recvfrom˜ ret_msgid418hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýˆÙ3!á1Fº˜wÜešÏPâr0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†‘‰¬¦üð‹+aue_lseek¦ÃhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5;ÅPN„-ª]3 Λär0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uàêïñ­üð‹+aue_lseek€ÉhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,!~´Õ8@ð¶UV ,Qãær0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_lseek€ÉhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"õ4V²J™j÷.…êr ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+20ÜS7[AIF¬•pd± (ýâh¼Q ”C¦¦º6­0Úxèr@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5Ž8'éÌKѹÈëC]f]îr ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+20ÜS7[AIF¬•pd± (ý,$LšiCsŸ‘ÄéÝH5Jìr@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐ{V_L1Aã‹@t'r;Ñòr ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+20ÜS7[AIF¬•pd± (ýÌ‘]¢ñI …&V5Ôðr@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýO‚Fm†÷CñµñOöhÝGôr:‚œ Ê +ÙKFzé®›'üvºœ¡Ì±üð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=÷„Þ£Aß»…A,Úrör@¸œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ¡Ì±üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­Þó¿2Fç—ü05’Ê:ør@¸œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±GŽÓ©tF’-Úä)‡×úr@¸œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_pread¤2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…O³±ÛE•¨l–‰¡nÈürb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ¡Ì±üð‹+aue_writeŽ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{¼%‘M|—“A:ÙBöúþrb¸œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áœ¡Ì±üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýMëN\ãöNWq<²çôÉ€s@¸œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ¡Ì±üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽ]…+>ÐF7 à¯sÈׂs@¸œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýºÅÑÉÌO\¹2Œÿ„s@¸œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¡Ì±üð‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ÞŽñ@½úÕ7q†sb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ¡Ì±üð‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬Âúüý\ÜîFŸKí}–±"ˆsb¸œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áœ¡Ì±üð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕ:ªºKz‘Ésy_èÃvŠs@¸œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ¡Ì±üð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI÷hù$ Jã¼(ÿÜU펌sJ¸œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºœ¡Ì±üð‹+aue_sendtoÞ +ret_msgid419hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°·ýG«E¥÷ÅT{rIŽsDê› µ dôFzé®{'üvºµ CjFzé®{'üvºœ¡Ì±üð‹+aue_recvfromÞ ret_msgid419hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý²X1úGÕ›.ÑaZøCësbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKœ¡Ì±üð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý.V«é·J3½ÔeòøgTÀ’sD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ¡Ì±üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýíZô~@@”™OR߆%”sD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ¡Ì±üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨¢%ˆí‰L¹³èømB œå–sD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ¡Ì±üð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýpø»­ÊI§Ï '*ÚP˜sD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºœ¡Ì±üð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·ÿWNX9Jš¿Çù(Òçšs0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uðû̲µüð‹+aue_lseekÌîhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛÍ „Ž^A—;²%5ßèœs@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eŠ€ËÀ»üð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý9 VÒ—L(¿=+™¦'‰`žsJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŠ€ËÀ»üð‹+aue_sendtoÚ +ret_msgid420hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýH¸¨èI£†N­¤ô ï× sJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŠ€ËÀ»üð‹+aue_sendto˜ +ret_msgid421hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý4ÏÕ\çB±HøåìËý¢sJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŠ€ËÀ»üð‹+aue_sendto¬ +ret_msgid422hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý®¡¥áC'BÝ©Np?åÊæ’¤sJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŠ€ËÀ»üð‹+aue_sendto˜ +ret_msgid423hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý"‰w¿O©BíµÊÐsbR[ŦsDê› µ dôFzé®{'üvºµ CjFzé®{'üvºŠ€ËÀ»üð‹+aue_recvfromÚ ret_msgid420hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýá À-L³_‰è Yk¨sDê› µ dôFzé®{'üvºµ CjFzé®{'üvºŠ€ËÀ»üð‹+aue_recvfrom˜ ret_msgid421hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýžEüÆA*Kƒ¹¤iëªôǪsDê› µ dôFzé®{'üvºµ CjFzé®{'üvºŠ€ËÀ»üð‹+aue_recvfrom¬ ret_msgid422hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý/Ÿ¥Ê8Hw—*Cs½Ä +¬sDê› µ dôFzé®{'üvºµ CjFzé®{'üvºŠ€ËÀ»üð‹+aue_recvfrom˜ ret_msgid423hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý“º¯{*@X²ϘVùÝ®s0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U’ÄÚõ¼üð‹+aue_lseekò€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰g'3|"CU›²â2u™…˜°s0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_lseekò€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýfE­ua¿Aáˆ×p¢yô‚:´s ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+20ÜS7[AIF¬•pd± (ý¿Q¯›ñE½±õÍ=Ñ0ݲs@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþÇŒ]ÛH³®Ù³”Úv ž¸s ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+20ÜS7[AIF¬•pd± (ýX4&måF°„Žœš¢$¶s@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýܱþéêG¿§¤.MƼs ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+20ÜS7[AIF¬•pd± (ý—Û‡´ DF¨"žô—Š7ºs@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +r`K‡O¨…)£Á5æä¾s:‚œ Ê +ÙKFzé®›'üvº¦ÆÕ¿Àüð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹P|KbÝ@ +½j¬Ì5®/Às@ºœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ÆÕ¿Àüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýü–b-ÈpAtšà¿R¬ÌÂs@ºœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýk^f–OŠŒuQdêsÄs@ºœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadÄ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚rO'½DT–¡j…¨XlÆsb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ÆÕ¿Àüð‹+aue_write®&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýL‚ÓŒÎ>J5¹52ŠXÐIÈsbºœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ÆÕ¿Àüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹Ÿ:Œ…M›†[–Œ›iwqÊs@ºœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ÆÕ¿Àüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀß»ºòCS¤i;iNðÐúÌs@ºœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóÙuµ¤»Oî®óªà°ˆä5Îs@ºœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ÆÕ¿Àüð‹+aue_preadžhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý §tc|ANà˜ÑÙa©Ê(Ðsb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ÆÕ¿Àüð‹+aue_writeˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­ô±BƵÑTöhø:Òsbºœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ÆÕ¿Àüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®9±åØ™JÙ¡šUUdX¸ªÔs@ºœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ÆÕ¿Àüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýBð~H3¤iyקåhôÖsJºœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¦ÆÕ¿Àüð‹+aue_sendtoÞ +ret_msgid424hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`(*kIÛ¦qéA—Çd‹ØsDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦ÆÕ¿Àüð‹+aue_recvfromÞ ret_msgid424hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý€eâM¿ƒBB…Ç_Ùb¬Úsbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¦ÆÕ¿Àüð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýG6iÄ€[@"„kÒ$Åà’]ÜsD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ÆÕ¿Àüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.a8‚ìjLbœ°­}G†¾<ÞsD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ÆÕ¿Àüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ]X†@»D Êç÷XcàsD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ÆÕ¿Àüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!^\ÁÌLY„asÀðvâsD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¦ÆÕ¿Àüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞÂE!ñE ´¢æ±¢1‡äs0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uèü¶ÕÄüð‹+aue_lseekƦhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\Áú|Ds™ÚJ¿! 3+æs0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°©ÝªÌüð‹+aue_lseekž¬hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!²Eæ7I¢µŽ/Y.sÈès0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_lseekž¬hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýý_ð5DqH¢’|¹”Rrìs ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+20ÜS7[AIF¬•pd± (ý˜?~~ª.Jȸ3¡,RÚ þês@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<? ýOó‹º+Rjçðs ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+20ÜS7[AIF¬•pd± (ý´}}ÊrGk¥”Îf2úŒ¶îs@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýoDQK K_´Þ#¬“ñ›ôs ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+20ÜS7[AIF¬•pd± (ý¤ÂmA(G<«VzSç AÎòs@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýråiH¶DG°¸/ŤOŸös:‚œ Ê +ÙKFzé®›'üvº¸«ñ²Ïüð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~ò ä¡@ØŠÉódÕ£ôøs@¼œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¸«ñ²Ïüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]©LvZHæ§)++£ÀÔfús@¼œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýùG”M´š6’·ÈE@xüs@¼œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_preadÌ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýv1ˆ'ܾLGžÏ,g–äþsb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¸«ñ²Ïüð‹+aue_write¶&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþ&.¯6nBè­ü1¯‹D€tb¼œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¸«ñ²Ïüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃóòàMHI'›f%0o%‚t@¼œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¸«ñ²Ïüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýr¬—G;²Þmãü[„Á„t@¼œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`\]%D¼»_iTu…†t@¼œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸«ñ²Ïüð‹+aue_preadÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛ­EüiG;€Ï"ŸŠÕn6ˆtb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¸«ñ²Ïüð‹+aue_writeºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·BR­ÂLEv­Ç¡ÁÑw·çŠtb¼œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¸«ñ²Ïüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýD9Åç³DFˆ€(Ô®÷VŒt@¼œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¸«ñ²Ïüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰tp½]ÓFÒŽ5íUµWeaŽtJ¼œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¸«ñ²Ïüð‹+aue_sendtoÞ +ret_msgid425hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýº›]™C¶¹²5v4-ãtDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¸«ñ²Ïüð‹+aue_recvfromÞ ret_msgid425hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýà-àl`–Cͧgä ®’tbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¸«ñ²Ïüð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý3ÀÃJ…EÉš¢™9Å›”tD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºâ宼Ïüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý `•S¬»B±®NL¢Åý–tD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºâ宼Ïüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~¥«eNÔ¸€¾±4D˜tD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºâ宼Ïüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýa[2Þ’D›ˆá*LçµjštD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºâ宼Ïüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜¼‚ü@7„î wà•‚œt@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e’õìûÑüð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý–êÝÄOF:¨òµ1]þ¨žtJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’õìûÑüð‹+aue_sendtoÚ +ret_msgid426hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýp’ÅK£§ Þi­É¹ tJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’õìûÑüð‹+aue_sendto˜ +ret_msgid427hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý­ñVL銞¤¿qíâtJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’õìûÑüð‹+aue_sendto¬ +ret_msgid428hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý‡0QÌ>yIôž¦¤ÅÈÚ5¤tJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’õìûÑüð‹+aue_sendto˜ +ret_msgid429hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý2TÕ¡\G½A­‡”Ë­d*ÞÈtb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºˆ±“¨Þüð‹+aue_writeð2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýx ØlGß“ioõ‚…‹GÊtb¾œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áˆ±“¨Þüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-µÞrK3˜\Ä”÷œÌt@¾œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆ±“¨Þüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎh l¾KJËŠ®<À›ØcÎt@¾œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyBEÒš I½’ãý——ÅÐt@¾œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ±“¨Þüð‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„³QH#µüÈ–ÕÒtb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºˆ±“¨Þüð‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýe!ÙýBB‹’ê-Ö_ÄBÔtb¾œ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áˆ±“¨Þüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'ƒw”Aó£dƒ¿ÃªÖt@¾œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆ±“¨Þüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿xìa™KPˆGtî@¹¶ØtJ¾œ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºˆ±“¨Þüð‹+aue_sendtoÞ +ret_msgid430hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×®ñGNtH 1˜žÆ9ûÚtDê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆ±“¨Þüð‹+aue_recvfromÞ ret_msgid430hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý/c‘¶ÿ×MI†ÅKì§éVúÜtbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKˆ±“¨Þüð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýPg•RäO³‚Ú…±ã +QÞtD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº˜¨ÆÌÞüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾Ã¡º²ôA·›C¨/¨Š àtD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº˜¨ÆÌÞüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\\K¿³GT«—ÂؾgÐâtD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº˜¨ÆÌÞüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_¦ùdžðId·ãzž[½¿ätD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº˜¨ÆÌÞüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>D +çV'@¥§5!*çhÃýæt0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ¯ Ëãüð‹+aue_lseekð‰hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý2¨Kêš÷3ÁÙÆv]èt@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eöÆШèüð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý¦§2è~îG¶‚ï|FZ¦êtJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºöÆШèüð‹+aue_sendtoÚ +ret_msgid431hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýWì7¬…àE›c´Â£Q<@ìtJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºöÆШèüð‹+aue_sendto˜ +ret_msgid432hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý O^¸n#C„u ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+20ÜS7[AIF¬•pd± (ýêvb3¸E6´‹PƒŒ­’ê‚u@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðÞ jžN™¨}N'‘¹¸ˆu ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+20ÜS7[AIF¬•pd± (ýö ëœ …IÁŒ§3¾ôÄcÖ†u@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›#|Üî¨@ô§Ÿ0DšŠyŠu:‚œ Ê +ÙKFzé®›'üvºÂåšíüð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýq·OcßO`‘¿@G2ÇŒu@Àœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Âåšíüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-%läÁPC<ºô…ßOâóŽu@Àœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…îhÝ‹hCŒ·þëÎN*u@Àœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadâ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ¶º«ÄMÁŒ—^µQ„w’ub„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÂåšíüð‹+aue_writeÌ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýMöŒi +H¦}4êoº”ubÀœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÂåšíüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ±Ô¡gc@J®5çâ7Çž–u@Àœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Âåšíüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉOAœ 9De´‚"˜u@Àœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™š´˜Å9E(šwª™è ¥šu@Àœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂåšíüð‹+aue_pread¬hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýǸ 'BV’Ä\†n çœub„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÂåšíüð‹+aue_write–hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýkó"ヰD@³íºä“ý#kžubÀœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÂåšíüð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý Þå“šC¡£æß²ŸÞÞÍ u@Àœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Âåšíüð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–ÊhCÊdF‚‰ä„Tqx¢uJÀœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÂåšíüð‹+aue_sendtoÞ +ret_msgid435hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâ ´¤NzCŽŠ3l¿ ‘’†¤uDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÂåšíüð‹+aue_recvfromÞ ret_msgid435hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýW@]yÀ„Cç±ùÄ6íð5¦ubê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÂåšíüð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýT_áõM€Šm”a®÷è¨uD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº Ã¾£íüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýà¬]ª%K(ˆ{ûè¼õªuD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº Ã¾£íüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ]Ê~µLÊ©2;†¬uD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¼ÌÕÅíüð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýã“ǽG±–0hÛtøþ1®uD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¼ÌÕÅíüð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­êÙ¡œ¸Aª/„ž"ñl°u@¬œ à-ñFz鮩'üvºàÉc‡Fz鮪'üvº²è€òüð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1286execnc20ÜS7[AIF¬•pd± (ý#¯KÓ`I  Æ£ó°›o²u¬œ à-ñFz鮩'üvºàÉc‡Fz鮪'üvº²è€òüð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1286execnc20ÜS7[AIF¬•pd± (ý!¶?† GE¿ÎëﵬCn£z³Ï€å0üuJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–ÁìÖþüð‹+aue_sendto˜ +ret_msgid438hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýøMøOê@BŒŽ‘”çjþuJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–ÁìÖþüð‹+aue_sendto¬ +ret_msgid439hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¤ÈÔuDÎLz¿²×Ëàh…œ€vJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–ÁìÖþüð‹+aue_sendto˜ +ret_msgid440hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý +xê¹úcA–9ËnSËÅ‚vDê› µ dôFzé®{'üvºµ CjFzé®{'üvº–ÁìÖþüð‹+aue_recvfromÚ ret_msgid437hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¹ÂBoYþE˜³ŸáÆ£UP?„vDê› µ dôFzé®{'üvºµ CjFzé®{'üvº–ÁìÖþüð‹+aue_recvfrom˜ ret_msgid438hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýDà$Á(9EušÓ7ŒB#Z†vDê› µ dôFzé®{'üvºµ CjFzé®{'üvº–ÁìÖþüð‹+aue_recvfrom¬ ret_msgid439hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý=”(V‚C ©÷‰GŠMéˆvDê› µ dôFzé®{'üvºµ CjFzé®{'üvº–ÁìÖþüð‹+aue_recvfrom˜ ret_msgid440hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýµci߇ÜL?‹[³3uBŠv0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾è¼è‚ýð‹+aue_lseekþ†hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQ¶J6IëœÀ/Y^©Œv0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ª’ªŠýð‹+aue_lseekÔŒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!ÎYÝ+äE3­Z?: Gô8Žv0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_lseekÔŒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýXñ#ÖM±^J &õh^’v ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+20ÜS7[AIF¬•pd± (ý+ô1 §AJ½à@¼Cx øv@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒ…gØttL‰«µUïfí–v ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+20ÜS7[AIF¬•pd± (ýíÛ#ù!ÚD|¹jµ7_â;”v@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥PÛJ@œ¯` +K¯ÖÓíšv ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+20ÜS7[AIF¬•pd± (ý± +MZŽEKžq þΧMo˜v@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒ *3ãYEƒ¯Gcj+=9³œv:‚œ Ê +ÙKFzé®›'üvºŒÉÿÿŠýð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹«Ð%œHxžëãÈllžv@Äœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŒÉÿÿŠýð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚ b«8*FïœÕ"!ê´ v@Äœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?»æMˆ™E×­ðB\ø5¢v@Äœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_pread˜2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšßÇ»¹”F +—§íIê̤vb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŒÉÿÿŠýð‹+aue_write‚3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýBÅØŸÖA°‡»ËÑà"¦vbÄœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŒÉÿÿŠýð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæIíʬMªµ‹÷V¢{_D¨v@Äœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŒÉÿÿŠýð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{\È^°YFT¤I ;ÿΪv@Äœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6 ¯àoN¶´XæQ Ì<Š¬v@Äœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÉÿÿŠýð‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJÆõ¯) N̤dúóՇخvb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŒÉÿÿŠýð‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·æª¹O†«c®|Ï°vbÄœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŒÉÿÿŠýð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQÅψN?”Lý>óq–²v@Äœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŒÉÿÿŠýð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊj» + O8ˆ·¡õ¼U´vJÄœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºŒÉÿÿŠýð‹+aue_sendtoÞ +ret_msgid441hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýRr›MÓ•¿ ñ—1E+¶vDê› µ dôFzé®{'üvºµ CjFzé®{'üvºŒÉÿÿŠýð‹+aue_recvfromÞ ret_msgid441hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÏÈeezMÆ—‡Öö©í¡Y¸vbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKŒÉÿÿŠýð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýðôzzO’J~6b…ººvD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŒÉÿÿŠýð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýN&ø»OáŠz_l£­à<¼vD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŒÉÿÿŠýð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦¯WËŒ±D$Œ^Á*×ñßî¾vD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°ª¾‰‹ýð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²qoÕù@tžWµb³ߦÀvD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°ª¾‰‹ýð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«t_[¤7F¾’¿DCU÷ÈÂv@ê› µ dôFzé®{'üvºªa݈ˌûWŒË=ûŠ³ÂÍÞêûýð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1execsyslogd20ÜS7[AIF¬•pd± (ý_G¬¿4_C’´#tÔòóÄvbê› µ dôFzé®{'üvºÁU\|ÓŽšXŽÓ㈚iÂÍÞêûýð‹+aue_writev`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1execsyslogd20ÜS7[AIF¬•pd± (ýfí<²+BHŠ§´ + ±|‘Ævbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÂÍÞêûýð‹+aue_writev`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¡Ðž=’óK’}¬³¸ZnÈv0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U® °›‚þð‹+aue_lseek°²hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\°Ì…54HÅ¥^ƒ’N –mÌv ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U® °›‚þð‹+20ÜS7[AIF¬•pd± (ý +çÉ­PH"¼ÖÒè‚TÊv@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U® °›‚þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.$j]IN:¥Ä´nFßÎv0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾ÓÑÝ‚þð‹+aue_lseek‚ÂhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—êQˆ”YO§ÏÏ3Œ9îÇÐv@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eøûö˜…þð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýRí$È÷N{˜Åû’T·ßÒvJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøûö˜…þð‹+aue_sendtoÚ +ret_msgid463hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý“™Š\ÎMGl…Jªˆ]9d*ÔvJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøûö˜…þð‹+aue_sendto˜ +ret_msgid464hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýuÐEäHŽEK„`ˆq>¾MÖvJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøûö˜…þð‹+aue_sendto¬ +ret_msgid465hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý0§UÉnFÐœY…€J“ËlØvJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøûö˜…þð‹+aue_sendto˜ +ret_msgid466hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÿ0}™ p@V—W3ê÷ÚvDê› µ dôFzé®{'üvºµ CjFzé®{'üvºøûö˜…þð‹+aue_recvfromÚ ret_msgid463hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¿þÜ…²NϽ…¸ÉɾoÜvDê› µ dôFzé®{'üvºµ CjFzé®{'üvºøûö˜…þð‹+aue_recvfrom˜ ret_msgid464hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¨¥ÝÊJê±wë2¦ ¾œÞvDê› µ dôFzé®{'üvºµ CjFzé®{'üvºøûö˜…þð‹+aue_recvfrom¬ ret_msgid465hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÇñ?G‰§ŽÉÖôàvDê› µ dôFzé®{'üvºµ CjFzé®{'üvºøûö˜…þð‹+aue_recvfrom˜ ret_msgid466hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýv= ++¡æOsŸ'ñ#ú£=ªâv@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´ ž†þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýò˜ c IY¸êKV$öäv@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´ ž†þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýS»¦ŒL@·°Ñn1¨ æv@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´ ž†þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý°L{XÂ}M¿šú7Ðc§Ùèvb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯´ ž†þð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýFXqèUF¹¼Õ ªØjkêv0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ²ú Šþð‹+aue_lseek–ÙhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­æ‚cA´êRÅZ„ñqìv@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø†•þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýèEäQ¶Bå½ürsg*bîv@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø†•þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý‹;öþ]K”°TŽ¢"¬’9ðv@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø†•þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý,§#kö(O-ˆV½|¡A'Fòvb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ø†•þð‹+aue_write*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýíñ‰#HV™’ï(ø3Ïôv0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_lseek–ÙhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·ÊŽL½~RÐ éíPøv ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+20ÜS7[AIF¬•pd± (ýªOüQPGšª¶Ìo‹‚öv@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýì 3tËNM*–˜ïÌ­iõÇüv ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+20ÜS7[AIF¬•pd± (ýc{7/@6¬WWŠgèúv@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒqb‡%™H°¢ `2ž*x€w ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+20ÜS7[AIF¬•pd± (ýÇw~`®E†®Šdr8G}þv@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýtøîäÛÜB"“òÁyû‚w:‚œ Ê +ÙKFzé®›'üvºèŠžŽ‘þð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍdï)êKÒ6Ágá‹Ò„w@Èœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V 芞Ž‘þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQÏgûØBLº-H·„†w@Èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýeH*.8ÍLé’ö|ƒäé$ˆw@Èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadÊhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;O]ªëEï„ dÿ%¹ŠwbÈœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á芞Ž‘þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑÍïE%àIíˆL>”$ƾŒwb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèŠžŽ‘þð‹+aue_write´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸvªl£Bò¸ "vù\Žw@Èœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V 芞Ž‘þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®Ôú YÚm&äNþ°·¤}œw@Èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýå Û±Gg³c¼E7s\’w@Èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U芞Ž‘þð‹+aue_preadŒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛ•æ¬THG¦¾Ö•ñåó”wbÈœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á芞Ž‘þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9\¬vyYEfAÿ¯Tا–wb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèŠžŽ‘þð‹+aue_writeöhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏ~IE”¤&¨b6™˜w@Èœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V 芞Ž‘þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýãMÊ“ÜGŽ… mÿT½“ šwJÈœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºèŠžŽ‘þð‹+aue_sendtoÞ +ret_msgid467hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝðjIáب¬]ŠôœwDê› µ dôFzé®{'üvºµ CjFzé®{'üvºèŠžŽ‘þð‹+aue_recvfromÞ ret_msgid467hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýyÒv+mI‡¨,]Ï„­Bžwbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK芞Ž‘þð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý-×Pô>~I×Pya-$X wD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèŠžŽ‘þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýýÝyL™äôŽìù¢wD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèŠžŽ‘þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏ-}Mò=N’o(¥|Ê’¤wD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÀÄ×—‘þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›1{<ï¯D´}… ®Nhí¦wD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÀÄ×—‘þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±q0û&IÑ|!€V_¨w0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ€þè‘þð‹+aue_lseekŽ… hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯{<„‰9Ò1¾wJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœÖæÅ›þð‹+aue_sendtoÚ +ret_msgid468hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýùñ…ÆþN½šÏP°t3´‚ÀwJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœÖæÅ›þð‹+aue_sendto˜ +ret_msgid469hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý†ùêÔÜE+“³†ZÝ<3ÂwJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœÖæÅ›þð‹+aue_sendto¬ +ret_msgid470hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýj€ ÚÚ‹O€´°ó^Å!ÄwJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœÖæÅ›þð‹+aue_sendto˜ +ret_msgid471hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÕ;(ôq;N‚½5ÙöK ÆwDê› µ dôFzé®{'üvºµ CjFzé®{'üvºœÖæÅ›þð‹+aue_recvfromÚ ret_msgid468hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý<J¥EJ[Ò5˜;ÈwDê› µ dôFzé®{'üvºµ CjFzé®{'üvºœÖæÅ›þð‹+aue_recvfrom˜ ret_msgid469hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýªû%?׫D¶ENmÓºëäÊwDê› µ dôFzé®{'üvºµ CjFzé®{'üvºœÖæÅ›þð‹+aue_recvfrom¬ ret_msgid470hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýäÁÿw#A5’âôî8÷ÌwDê› µ dôFzé®{'üvºµ CjFzé®{'üvºœÖæÅ›þð‹+aue_recvfrom˜ ret_msgid471hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý†ã9ÅóúEh®ý¾;ÓñÎw0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_lseekì hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšhëŽÒúEo™¾ÚòÁW8Òw ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+20ÜS7[AIF¬•pd± (ýüüB&ÚæDx‡%eY˜móÐw@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖO,-¹KÉ»÷.Ñ¢þ¯Öw ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+20ÜS7[AIF¬•pd± (ýGû,»_sA\°ƒ.­0?Ôw@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸Ñ8tC®„Ž8ùŸ˜yXÚw ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+20ÜS7[AIF¬•pd± (ý¬ÔÐn\HO”æTª.Øw@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#ç°(ŠAš´ÉåÓ£é Üw:‚œ Ê +ÙKFzé®›'üvºÊ–†‚ þð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+íLï“Û¶a¥ÑÞw@Êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ê–†‚ þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉhZÛK½ŠÑ^Fàlàw@Êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýïÿlúõ>AWž “4TGâw@Êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadð+hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýN¾) +اL ³w5ÿx7;äwbÊœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÊ–†‚ þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ÅàÿA³Š8ÀÖ½"yâæwb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_writeÚ,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽY¤á¬¿B8Š<u±f1ªèw@Êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ê–†‚ þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýé¢ ÑóCŸn”êæêw@Êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&YÃÈèF¯— ,Vìw@Êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ–†‚ þð‹+aue_preadÖ +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4T~ØUÃC÷¹ 'I¦¹{îwbÊœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÊ–†‚ þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|-¾S‹÷E½‡ØŸŽJ<³ðwb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_writeÀ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýå4ª¥ÍAGþ³¨‘^ÌÙdzòw@Êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ê–†‚ þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”?YxáìHO¦»û.èKôwJÊœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÊ–†‚ þð‹+aue_sendtoÞ +ret_msgid472hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ©Y"ñEB+¡ñ>£õöwDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ–†‚ þð‹+aue_recvfromÞ ret_msgid472hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý'5tµHëC@¹†ú¾¶!×"øwbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÊ–†‚ þð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¸ZO± KȲÇ8#·úËÀúwD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýùQoßp8I+žõÓ·wBÐgüwD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;¬ž9÷Fó– ¹¹"èÀþwD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßÅ“¤‚M݇»%´âMå€xD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÊ–†‚ þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýk«¼OïBºÝXˆöÅO‚x0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌô¹ê þð‹+aue_lseek‚È hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0î†î[ABŽž{ Œ¸P„x@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯â¬ÇÊ¡þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý"íôËBE±¬Ê8Òý•.†x@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯â¬ÇÊ¡þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý´ù5¿Ï¿B¸»šµ¦¼ÚΈx@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯â¬ÇÊ¡þð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý—Æ•DnMï£àÐÄFõŠxb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯â¬ÇÊ¡þð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý®—Er™ÿ@ ¶?öÂÞN˜½Œx0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖË겨þð‹+aue_lseekØÒ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý œðcû@ ¶££¬_÷Žx0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_lseekØÒ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜ßðu}L|šÇ\S¨Žq’x ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+20ÜS7[AIF¬•pd± (ý™œÕĆiE¶!ÕåÝÍN²x@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[*HJb@c³ –x ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+20ÜS7[AIF¬•pd± (ýÞ3ØDÚÇG›Ÿ4¸ÌòâŸq”x@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{-Fø’rÁÿ­0Çšx ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+20ÜS7[AIF¬•pd± (ýãB7Ú Jr²£›²”!˜x@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†U‚ì]B³¢.a’ÃN»œx:‚œ Ê +ÙKFzé®›'üvº²ƒûô®þð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(*?‹—8Bx…Š²„2ožx@Ìœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ²ƒûô®þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯ð›NtGL"»m“÷Ä£Ú x@Ìœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(?ˆ(”GûÔg\¹™Et¢x@Ìœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadŽ8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýuŒ‘`ƒD˜¼×æ¦Mú¤xbÌœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á²ƒûô®þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +{±¢ÕOL½ #îI̦xb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_writeø8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍyžÿ PJá«äƒѵ¨x@Ìœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ²ƒûô®þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJ–(ÏsNèªc_ýÍ ‘ªx@Ìœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýNÕ#Of”YŠõ¢u”¬x@Ìœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ƒûô®þð‹+aue_preadÎ +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€I¨–™M•SêÁ)®xb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_write¸ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýü¹g©mF}¬äŠçî7÷'°xbÌœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á²ƒûô®þð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥Êc@¨B7Ÿß9þ©¿x²x@Ìœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ²ƒûô®þð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýVDCs.vMV‘›¶Ó%w#÷´xJÌœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº²ƒûô®þð‹+aue_sendtoÞ +ret_msgid473hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›^î:HX”$Ä/Doì9¶xDê› µ dôFzé®{'üvºµ CjFzé®{'üvº²ƒûô®þð‹+aue_recvfromÞ ret_msgid473hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýžyM!œKHy„WO’Woö¸xbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK²ƒûô®þð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýw]âÎz`D‹xQäÔ0µºxD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýKéÀÏMILž+ïˆwhå¼xD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ŒîûebaˆO8ÉR#ó﻾xD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýKÊ ›Hºœ¤å"ö€]ÀxD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº²ƒûô®þð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýge›qE(Oœ°‹ešöÉŇÂx0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈ«‘ñ¯þð‹+aue_lseek¨ø hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^{)ãaH“±ú¼tÛ¹Äx@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e€ª°ò±þð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý·§A:C)­à·ÄnÈÆxJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ª°ò±þð‹+aue_sendtoÚ +ret_msgid474hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýG!MÐï§AD±cYH¯P4ÙÈxJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ª°ò±þð‹+aue_sendto˜ +ret_msgid475hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýà0/\WML1»=§OÊxJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ª°ò±þð‹+aue_sendto¬ +ret_msgid476hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýUúEák»Jׇ~oF/˜ô9ÌxJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€ª°ò±þð‹+aue_sendto˜ +ret_msgid477hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÜr»ªI”Ë膅îš0ÎxDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ª°ò±þð‹+aue_recvfromÚ ret_msgid474hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýµ„ÛÊÐ'O„©ÈB0sÌhÏÐxDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ª°ò±þð‹+aue_recvfrom˜ ret_msgid475hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýL»ÄÈHŠI>"”þÄÒxDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ª°ò±þð‹+aue_recvfrom¬ ret_msgid476hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý˜‚…RP£EÞù#Á¿KbñÔxDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€ª°ò±þð‹+aue_recvfrom˜ ret_msgid477hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÎéÞVEž Þ’/ÛsÖx0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U€ëÁ´·þð‹+aue_lseekÞŠ!hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýe™«¸¥ìxªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execenv20ÜS7[AIF¬•pd± (ý z¤‚üO²¥õb‰á,ªnîx<ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7øêüÀ»þð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execenv20ÜS7[AIF¬•pd± (ý‹ê&‹Nª²Õáö2|ô™ðx2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý@u‡_ÂN‹‡L8ùòx2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýzm0™ +žBA¨Mò³*Ör>ôx2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýnñÏŽãLd)DÄÆ<öx2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýýË@'ÀûC„|kAõ:¬Šøx2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý]è<‰s¾HoƒŠ,]eöä«úx2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý+'òŒêI°‚z²|UÚüx2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýSÁi["M¬•¬6† hÄþx2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýìÝÖ5%yA`¯âˆBköÈÍ€yªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execenv20ÜS7[AIF¬•pd± (ý”y³¬âãM ¿0ݼy‚F‚y:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýª»RÍŠñAñ˜Æ»©þµ•q„y:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execenv20ÜS7[AIF¬•pd± (ý“¤ —4©MV_Mû¤Ã8‡†yªœ ù‹°âFzé®·'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1øêüÀ»þð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine&bash ../Bash/all.shppid1282execenv20ÜS7[AIF¬•pd± (ý›œÇØ!J—¹™…»Û@ˆy<ªœ ù‹°âFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conføêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý¾SbD›!N.Éê”›@%Šy@ªœ ù‹°âFzé®·'üvº‰oý©äÇU¤©A)Eǹ øêüÀ»þð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýù¹âF?¿·{Ô™% Œyªœ ù‹°âFzé®·'üvº‰oý©äÇU¤©A)Eǹ øêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý¦˜îq§G†]ÇV¾žsŽy<ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsøêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý_*5/© Ia©hø›ñ@æy@ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýëo+ݬF^¦“êó[/ý’y@ªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý ðnì¥ÉBÙŒóIŒÞ›G”yªœ ù‹°âFzé®·'üvºXꎩð®…\®ð@JÌ…¼âøêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýQÌ*…ÇbF°loV’e}O–y<ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8øêüÀ»þð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýá^ZvQL1•pÿý ©â˜y2ªœ ù‹°âFzé®·'üvºâpÑ +m.×W®mAs××¼›øêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýFš¨T3Ñý)Îy2ªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¿!÷û^OM¸p$º^q¡Ðyªœ ù‹°âFzé®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕøêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý‹½ÿêƒCª„ÆzÛªÒy<ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7øêüÀ»þð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý4ÓÄ_ÄO¢®¿>¼M(ÿ¾Ôy2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý‹kv1p¬L†Wb‚+…=Öy2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¸·´Íè—LÙ±¼Ý´läLØy2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý9®`ƒŸá@ʾ÷74Û]ŠÚy2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýJz¨ ÿBö¯}ÐÈ•m°Üy2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý>¥ž4^pEó¶{¯Ñ!\sAÞy2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÿÂ.þÚGúŠÙÂ@ ÿHày2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýغp @—¢‚ »S²²ây2ªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýë>@¸€[ADÖ’ÚåØÍäyªœ ù‹°âFzé®·'üvºÞA`ì•øËQ¸•bxñË"œøêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýØ€:»eOŽ«ç¡÷ÙÄhæy:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý̼ÀòêD´²bs~·Ë¥èy:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý7+Ö¦ä•B8‚ö3óÖÄêy:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý8½T7úÁCš®^ Ïûa«ìy:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý…JÍ÷úKMa”ònéàx®`îy:ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýdtŠDš©*.«)šª(ðy<ªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯/dev/ttyøêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýoý69ÇE‹ +ó4Ròyªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯øêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýÚžPó¼BZ4} úEßôy<ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc't/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.shøêüÀ»þð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýaþ¿qäÅKŸœ½¬o~1üöy0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý´¸v­G[c×j¥^Ìøy@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÐíUb{RDšŸR$èVn-úy0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý³%}>3A ›]~FêLFüyªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýGöl!,CA@®Y°’ä Þþy"ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýÂØ» ‘—C±‡ß¾oJ$G»€z"ªœ ù‹°âFzé®·'üvºøêüÀ»þð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýæ éåwëHóŠC\ íBÕ‚z0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýékš ÛIBé¿3U™ÿ#É„z@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý0,”÷¨:DÕ•4k `ΰ†z0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'øêüÀ»þð‹+aue_lseekˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý:ƒ÷?YƒEÝ¡)ÚÉ‚`bˆz$ªœ ù‹°âFzé®·'üvºù&4Fzé®·'üvºøêüÀ»þð‹+aue_fork +arg_pid1338hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1338ppid1282execbash20ÜS7[AIF¬•pd± (ýÒ5×[¹HL+|ª{'®Šz²œ ù&4Fzé®·'üvº¥µîgµÑUµg¨eµÑc'Ð’¸Ê»þð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý \H³ü OŒJì»ÎËŒz0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨ðŽ¿þð‹+aue_lseekè–"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”qÚ QKê«Xlc´õŽz²œ ù&4Fzé®·'üvºù&4Fzé®·'üvº¼ó“ŽÃþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý!rãßB²NQ—|—dñܸyz<ªœ ù‹°âFzé®·'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.db¼ó“ŽÃþð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý<¹ÓøªœEÔµsJ¯$ºí’z@ªœ ù‹°âFzé®·'üvº–Ø%™wyïR¹wT’ï9¼ó“ŽÃþð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÊ!€FHŽ– ¼'Ú¹”z@ªœ ù‹°âFzé®·'üvº–Ø%™wyïR¹wT’ï9¼ó“ŽÃþð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýMM˜&ÎùC|ŒFoÇJcΖz@ªœ ù‹°âFzé®·'üvº–Ø%™wyïR¹wT’ï9¼ó“ŽÃþð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý ê2ìJà€›y¡v'˜zªœ ù‹°âFzé®·'üvº–Ø%™wyïR¹wT’ï9¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý,«Kiw›Gƒ€ J¸C•¬Þ·tÓÜ’®z@²œ ú'~0Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â¼ó“ŽÃþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýŽÀm&¢BÛª‹³r|·õþ°z²œ ú'~0Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýô ƒ4—B¢¶£²¹š±G²z<²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¼ó“ŽÃþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýâ±»â}Cò¯tØþ8Ã’>´z2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý1úL¾7O¦°J©?#~¶z2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý¿ ;½â Lü¸â3F‘yRî¸z2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýK52^ƒ Hù·5Jî‹©*ºz2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýÐø4¶AºöžÑÿâ²¼z2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý¨Ç¬qê²G—›ø‚!?¿nO¾z2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýöµÐœ…Nö±PüÙŒµ¬šÀz2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý©àUçk@]€j¸úÊMFÂz2²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ývì‘œ¦ J[ˆ5rZqƒ8Äz²œ ú'~0Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý=l'¼êN(¦í©ýæœÚìÆz:²œ ú'~0Fzé®·'üvº¼ó“ŽÃþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ý9¶QóEMĆߌkmo~¿Èz:²œ ú'~0Fzé®·'üvº¼ó“ŽÃþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýc¿ËéñJB¥üï¹#­4ÃÊz4²œ ú'~0Fzé®·'üvºj/°®¨¢¤_¢¨gIÿ¤ïj/usr/home/user/ripe-prov-tests-master/Linux/README.md¼ó“ŽÃþð‹+aue_chmodmode¶hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýãú&´Ÿ“G‡¨[x9Õ¹ÊðÌz4²œ ú'~0Fzé®·'üvºj/°®¨¢¤_¢¨gIÿ¤ïj/usr/home/user/ripe-prov-tests-master/Linux/README.md¼ó“ŽÃþð‹+aue_chmodmode·hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýþy¬Bø­×…üØSÏbÎz²œ ú'~0Fzé®·'üvºú'~0Fzé®·'üvº¼ó“ŽÃþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&change_file_permiss20ÜS7[AIF¬•pd± (ýɪ,ƒÛLd‰-÷¶ûÂ|Ðz@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¼ó“ŽÃþð‹+aue_read°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý£cC;álAà¯ßߘØÚ}Òz0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¼ó“ŽÃþð‹+aue_lseek¨hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý|P’"G³„<€tAè®Ôz$ªœ ù‹°âFzé®·'üvºú'Ø¿Fzé®·'üvº¼ó“ŽÃþð‹+aue_fork +arg_pid1340hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1340ppid1282execbash20ÜS7[AIF¬•pd± (ý …±ŒK¶áÉÁ@Öz²œ ú'Ø¿Fzé®·'üvº¥µîgµÑUµg¨eµÑc'¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"’ÄüRGëCo½:,7¢‹Øz²œ ú'Ø¿Fzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¼ó“ŽÃþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýîîñÖ*YC¤ëÕœÿ2ÞÚz<²œ ú'Ø¿Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¼ó“ŽÃþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¸fòæIY“½ÚÌí<Üz@²œ ú'Ø¿Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ¼ó“ŽÃþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÇ"x¹YM—dt‹oÇpŸÞz²œ ú'Ø¿Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýhÿ2A¡E—-oA7 àz<²œ ú'Ø¿Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¼ó“ŽÃþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýqžS|EX¶µÎq òçâz@²œ ú'Ø¿Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â¼ó“ŽÃþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý_ŸZ:mâDÙ¸ +=îÞ×äz@²œ ú'Ø¿Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â¼ó“ŽÃþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýAû„Ž²ÇLò˜QÎD±æz²œ ú'Ø¿Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â¼ó“ŽÃþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý@Zü¯ðD¦~šHâ¿:èz0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U€½©ÎÆþð‹+aue_lseekØã"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚iâI@Õ‡Ø2§®Lêz@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eœ§ãŸÈþð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÞÚSK±½Ä ùãôìzJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœ§ãŸÈþð‹+aue_sendtoÚ +ret_msgid479hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý‚¦ß$O'hÃþ>$îzJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœ§ãŸÈþð‹+aue_sendto˜ +ret_msgid480hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý7ÿÌŠi\JÝ“£zr],°lðzJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœ§ãŸÈþð‹+aue_sendto¬ +ret_msgid481hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýE©}"™gJgµÁw7–c$ùòzJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœ§ãŸÈþð‹+aue_sendto˜ +ret_msgid482hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý÷0JøBJª—ëp7MhôzDê› µ dôFzé®{'üvºµ CjFzé®{'üvºœ§ãŸÈþð‹+aue_recvfromÚ ret_msgid479hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýO_fÖOG”ŠÐ‰É“Yå=özDê› µ dôFzé®{'üvºµ CjFzé®{'üvºœ§ãŸÈþð‹+aue_recvfrom˜ ret_msgid480hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý_Àï—2–@Ê‚E9Ex‰âøzDê› µ dôFzé®{'üvºµ CjFzé®{'üvºœ§ãŸÈþð‹+aue_recvfrom¬ ret_msgid481hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýéJíÜ\&EÅ“ø és…&ÑúzDê› µ dôFzé®{'üvºµ CjFzé®{'üvºœ§ãŸÈþð‹+aue_recvfrom˜ ret_msgid482hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýoÙ)¾ÊA§ŸʪX䧳üz²œ ú'Ø¿Fzé®·'üvºú'Ø¿Fzé®·'üvº”ç¥ÚÊþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýIXŠGHD“Hœpè1^þzbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯”ç¥ÚÊþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýyƒ5ÄD鯰Цy­˜½€{bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯”ç¥ÚÊþð‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýLLô}æ¦M@¦‘€9ÁÖDÅ‚{$ªœ ù‹°âFzé®·'üvºúÂé}Fzé®·'üvº”ç¥ÚÊþð‹+aue_fork +arg_pid1341hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1341ppid1282execbash20ÜS7[AIF¬•pd± (ýŠeú#@¦³ØE/ ;™„{²œ úÂé}Fzé®·'üvº¥µîgµÑUµg¨eµÑc'”ç¥ÚÊþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýv|¸NC§œq»SŽFœ{2²œ úÂé}Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_file20ÜS7[AIF¬•pd± (ýVÈLÝåÜMJ§] +›KIXíž{2²œ úÂé}Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý–;â¯j(D¢¢¢`àžD {2²œ úÂé}Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_file20ÜS7[AIF¬•pd± (ýS ¡jЊHŠªj^Ø’6ñ¢{2²œ úÂé}Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý·Þ@>·„h§á"g¤{2²œ úÂé}Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_file20ÜS7[AIF¬•pd± (ýõØÞCÝMá‡îü=¼bÔò¦{2²œ úÂé}Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_file20ÜS7[AIF¬•pd± (ýßãÅâ¼H`®W•,£¨{²œ úÂé}Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ”ç¥ÚÊþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý2‚Û°²OD×…äD¬Hvž½ª{:²œ úÂé}Fzé®·'üvº”ç¥ÚÊþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý{bØžmOOᑽÀ锾–“¬{:²œ úÂé}Fzé®·'üvº”ç¥ÚÊþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý³ õ…—@“¯²bб½[®{<²œ úÂé}Fzé®·'üvºj/°®¨¢¤_¢¨gIÿ¤ïj/usr/home/user/ripe-prov-tests-master/Linux/README.md”ç¥ÚÊþð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý±š¥*¾´BüŸR¼R­Li°{<²œ úÂé}Fzé®·'üvºtTXìƒî°R®ƒ.û"°ËAf/usr/home/user/ripe-prov-tests-master/Linux/out.tmp”ç¥ÚÊþð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý®`«f˜K•¸ÙžïÕ«y²{@²œ úÂé}Fzé®·'üvºj/°®¨¢¤_¢¨gIÿ¤ï”ç¥ÚÊþð‹+aue_read„'hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_file20ÜS7[AIF¬•pd± (ýH#_xC`‰]xŽ—åä'´{@²œ úÂé}Fzé®·'üvºj/°®¨¢¤_¢¨gIÿ¤ï”ç¥ÚÊþð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý•®>€SgJ.¨ö'á›è ¶{²œ úÂé}Fzé®·'üvºí( ö~R¶ ~{‚~¯”ç¥ÚÊþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd0return_value0ppid1337execcopy_file20ÜS7[AIF¬•pd± (ý-íËNŸM‰¯@wAûŸTˆÑ%} ž|@Ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýëog‹÷ÒK2”öî}‰b |@Ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìôÎÛÌþð‹+aue_preadèLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.žZKHí±Ðùh£÷¢|b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºìôÎÛÌþð‹+aue_writeÒMhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯Ä>@ JÇ·@¼ÍÓ¤|bÐœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áìôÎÛÌþð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçÝÛ]'AÄš ¯2ÙÕ¦|@Ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ìôÎÛÌþð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—Hp ŽC,”*gîLe¨|0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uê‹¢“Îþð‹+aue_lseekêò#hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)+lÚ¼G‘;bÝŒlºª|²œ úÃhßFzé®·'üvºúÃhßFzé®·'üvºÔÐÒÒþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¿†à˜cI1´yDˬ 2¬|bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ÔÐÒÒþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý͇HŽ-C䦡\Š-¼´É®|bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ÔÐÒÒþð‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýà>hŽ +Eš©-¨~jìP°|$ªœ ù‹°âFzé®·'üvºû]"-Fzé®·'üvºÔÐÒÒþð‹+aue_fork +arg_pid1343hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1343ppid1282execbash20ÜS7[AIF¬•pd± (ýuÑd¦‰7O,¢ï(YeæIJ|²œ û]"-Fzé®·'üvº¥µîgµÑUµg¨eµÑc'ÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÉmvUÛ@t¯#·YÀ¦ ª´|²œ û]"-Fzé®·'üvº~JE9ê[¹E%`ûêq…z/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ÔÐÒÒþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine$./copy_static_buf ppid1337execbash20ÜS7[AIF¬•pd± (ý^ fnêI<ªR¶–L.Â!¶|<²œ û]"-Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÔÐÒÒþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ý¸{±GÔJ⊗·´Ê¹Â¸|@²œ û]"-Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ÔÐÒÒþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýêgÛ¬˜¯Iê” +¬6zfº|²œ û]"-Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýÄï­y‘æJQ‹˜QVZV¿¼|<²œ û]"-Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÔÐÒÒþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýÆX^ŸCIœT2Àôu¬¾|@²œ û]"-Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýâ„7CLEΰt<³«U‡ïÀ|@²œ û]"-Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýèš|PóMÞŽ^':Â|²œ û]"-Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ý,+èÝFT¾¯ÊÞG00Ä|<²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ÔÐÒÒþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýiN£€ÏÎÑ-ÑCuÒ|2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ý È p®Až¸½½cF±Ô|2²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ý·ŒâQ¸GH¬‰\ÿs +.Ö|²œ û]"-Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýF寥 +HOýZ¼BÑbûØ|:²œ û]"-Fzé®·'üvºÔÐÒÒþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýÓ]ÙRñ=EšÃK}eÚ|:²œ û]"-Fzé®·'üvºÔÐÒÒþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ý 7Ö”EŒAÙ“e P=©Ü|²œ û]"-Fzé®·'üvºû]"-Fzé®·'üvºÔÐÒÒþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopy_static_buf20ÜS7[AIF¬•pd± (ýƒ&U$|N•®ÀÁ8þØäÞ|@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'ÔÐÒÒþð‹+aue_readähostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýð÷v+L¬FM›³ü}½Âà|0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'ÔÐÒÒþð‹+aue_lseek˜ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý»öÓ+;úO'•‘¼-r·ñGâ|$ªœ ù‹°âFzé®·'üvºû]x,Fzé®·'üvºÔÐÒÒþð‹+aue_fork +arg_pid1344hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1344ppid1282execbash20ÜS7[AIF¬•pd± (ý,KŒ@ÂLb»7†ƒÀ¬ä|²œ û]x,Fzé®·'üvº¥µîgµÑUµg¨eµÑc'ÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý½åÕ‡2M—¼,n¥€Zæ|²œ û]x,Fzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ÔÐÒÒþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýês·LÌ–ä|³5ßè|<²œ û]x,Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÔÐÒÒþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý÷°|‰MБ´KÖDÖê|@²œ û]x,Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ÔÐÒÒþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý4g˜S@¯»ù#PC~íì|²œ û]x,Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý2¡ÚPxmAñ–«^Ÿ!ôÄî|<²œ û]x,Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÔÐÒÒþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý•9ó*EøM…£;ÈkùIÈ$ð|@²œ û]x,Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýì/¸tú×AH‰€Œ1éŠCò|@²œ û]x,Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý}W0M€ÆN˽Bõ(I÷Ãô|²œ û]x,Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âÔÐÒÒþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¶#~^ÕMÑ©gAWhõö|<²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ÔÐÒÒþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý†E~d€N@ªÇí®¹:ãø|2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý†iN?»WçŠÏÙú|2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýlzhìpqGñ—Z˜àbúü|2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýØ\ŽOÈ‹~hè5£fþ|2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýaºb’¿Ba“d¬0%ðÿÀ€}2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"Žºû%Ÿ–,’cH©¤'ï”ö‚}2²œ û]x,Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œÔÐÒÒþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý© U|3›HÊ·d/QO×a„}0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®Ü·ÝÕþð‹+aue_lseekô¾$hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½SËWË)KõŽÙ´}UR†}²œ û]x,Fzé®·'üvºû]x,Fzé®·'üvº¢ìõàÙþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý"Õ± mvDΈŸše܈}bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¢ìõàÙþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýŠAÀ,ÃÓFϾMi˜Ó´ÓÚŠ}bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¢ìõàÙþð‹+aue_writeLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý:,¢òrN漌¶î\mÞHŒ}$ªœ ù‹°âFzé®·'üvºû÷6žFzé®·'üvº¢ìõàÙþð‹+aue_fork +arg_pid1345hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1345ppid1282execbash20ÜS7[AIF¬•pd± (ýàïäH„O$ÜÍ` xŽ}²œ û÷6žFzé®·'üvº¥µîgµÑUµg¨eµÑc'¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý{Ä#™J ªkü\2g}²œ û÷6žFzé®·'üvº)Az€^ºAÎÏ^€L¯’/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_stack_frame'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¢ìõàÙþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine<./copy_static_buf_stack_frame ppid1337execbash20ÜS7[AIF¬•pd± (ýíJ;p•I°°`ÖÔ8 –’}<²œ û÷6žFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¢ìõàÙþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý4´ H êH…©iDOv ²”}@²œ û÷6žFzé®·'üvº‰oý©äÇU¤©A)Eǹ ¢ìõàÙþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýÛü–´S[A+¢j-]2ª8+–}²œ û÷6žFzé®·'üvº‰oý©äÇU¤©A)Eǹ ¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýëßeéàLé§ÆaæØí®˜}<²œ û÷6žFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¢ìõàÙþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý¸e€¬]F £Îò&ŒùÈš}@²œ û÷6žFzé®·'üvºXꎩð®…\®ð@JÌ…¼â¢ìõàÙþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýÞiÆë9H\¾XX(!íùœ}@²œ û÷6žFzé®·'üvºXꎩð®…\®ð@JÌ…¼â¢ìõàÙþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý­sþêmòF.¬“Pê§2WVž}²œ û÷6žFzé®·'üvºXꎩð®…\®ð@JÌ…¼â¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýà'7áØIŸ†[Vì°ÿï¿ }<²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¢ìõàÙþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýíÓ«Õ1LMä‹v¤OÁ e¢}2²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýL –|@§´»í6GHs¤}2²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýKlkFåˆB¡°«^´ÓÇ‹¿¦}2²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýlÄfã$Mè®!™a¨}2²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý¤‰ûÒÒ¿Ms²+ß šÿ*ª}2²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý`ˆ{ÃøI£Œx )ôGxˆ¬}2²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý“7תûýK+¥­Gà©E¶\®}2²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýy6¡gdeE¼K”ÛCûq°}2²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý7¶¶¦¶DU€u„F^– +œ²}²œ û÷6žFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý¼0²ï¦Dž«À<J]ç´}:²œ û÷6žFzé®·'üvº¢ìõàÙþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýž1Ó•íLù„dAÓ~÷[¶}:²œ û÷6žFzé®·'üvº¢ìõàÙþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýÂ0ÖºQCB\ŽÚf•Kß6θ}²œ û÷6žFzé®·'üvºû÷6žFzé®·'üvº¢ìõàÙþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýS_”?€@]‰(äÉû_º}@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¢ìõàÙþð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýëÁÅC„NF$‡Š|”ƒ¼}0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¢ìõàÙþð‹+aue_lseekÒ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý¨E-lðDNŠê~Ä*d”k¾}$ªœ ù‹°âFzé®·'üvºû÷µtFzé®·'üvº¢ìõàÙþð‹+aue_fork +arg_pid1346hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1346ppid1282execbash20ÜS7[AIF¬•pd± (ýNœ-Kµ˜I6©÷l[9ýÒÀ}²œ û÷µtFzé®·'üvº¥µîgµÑUµg¨eµÑc'¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý€ ¥t#OÄ“!‹ðXºAÂ}²œ û÷µtFzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¢ìõàÙþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýs°PðOj‹ #S圄IÄ}<²œ û÷µtFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¢ìõàÙþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýC†ƒUÿH“†9} °dýÆ}@²œ û÷µtFzé®·'üvº‰oý©äÇU¤©A)Eǹ ¢ìõàÙþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý[v(`Þ»F–œufuQ¬È}²œ û÷µtFzé®·'üvº‰oý©äÇU¤©A)Eǹ ¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýZÎO¾æF¼½![L2/~KÊ}<²œ û÷µtFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¢ìõàÙþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý9eõ$‚²Ii©E÷É9ú_Ì}@²œ û÷µtFzé®·'üvºXꎩð®…\®ð@JÌ…¼â¢ìõàÙþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý ÄûNI1¾–ÓÝKUÿEÎ}@²œ û÷µtFzé®·'üvºXꎩð®…\®ð@JÌ…¼â¢ìõàÙþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý •-©½ÈB”œ;õ¨AÐ}²œ û÷µtFzé®·'üvºXꎩð®…\®ð@JÌ…¼â¢ìõàÙþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýBþ!:òyD¿á±Ånú†–Ò}<²œ û÷µtFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¢ìõàÙþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýNíÛ‡˜.BßêcÇ>àuÔ}2²œ û÷µtFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýzÿÍ0mFJ“>ÓC?ãTÖ}2²œ û÷µtFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý(- ¼_7DÍ”…8òã9üØ}2²œ û÷µtFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýGŸ…á„@]®ÀJèKÑÚ}2²œ û÷µtFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýDèå)×He¯FвÍfªíÜ}2²œ û÷µtFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýlüËkïéI„˜U¦Œkí‡Þ}2²œ û÷µtFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ¢ìõàÙþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýΡ8}A«=Ùl¶å4¦à}0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàüŒ¡Ýþð‹+aue_lseeköŠ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýmQgјFõ„mõ¬Ìdç?â}@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÀåÌÞþð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýIYEÑYA轡AÕ߇ •ä}JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀåÌÞþð‹+aue_sendtoÚ +ret_msgid485hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýuÉß·E­L’¤lPáøü³æ}JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀåÌÞþð‹+aue_sendto˜ +ret_msgid486hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýyÉ‹&SúEÕ†ÝCS•Øè}JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀåÌÞþð‹+aue_sendto¬ +ret_msgid487hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÄ Ë x‡Ca’qš9‡p´Éê}JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀåÌÞþð‹+aue_sendto˜ +ret_msgid488hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý©þ¹rQEЉ¾ £X6°Œì}Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀåÌÞþð‹+aue_recvfromÚ ret_msgid485hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýéÛKJCµIM±™LY>a»jî}Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀåÌÞþð‹+aue_recvfrom˜ ret_msgid486hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÑ›šþJMcŠÃ2”0!Èð}Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀåÌÞþð‹+aue_recvfrom¬ ret_msgid487hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý6ÔQ–»°J‰ªé +Pz—ˆò}Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀåÌÞþð‹+aue_recvfrom˜ ret_msgid488hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýŸ‡ï6—F;š‚蔞Vcô}²œ û÷µtFzé®·'üvºû÷µtFzé®·'üvºŒå¥­áþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý†;¼à½DI€2˜™®gm!ö}bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Œå¥­áþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýX覈MDÂØwYa'ø}bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Œå¥­áþð‹+aue_writeBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýòmÃU_MŽwé f0hú}$ªœ ù‹°âFzé®·'üvºü’È€Fzé®·'üvºŒå¥­áþð‹+aue_fork +arg_pid1347hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1347ppid1282execbash20ÜS7[AIF¬•pd± (ý·!¦N›¡MI°»r‹Br%ìü}²œ ü’È€Fzé®·'üvº¥µîgµÑUµg¨eµÑc'Œå¥­áþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýßì½ÝM­±y¦vÀ7Fþ}²œ ü’È€Fzé®·'üvºelp„zQ-S‘z`ôƒ-åˆ/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_string'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Œå¥­áþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine2./copy_static_buf_string ppid1337execbash20ÜS7[AIF¬•pd± (ýM0Çã FVŽG-1å±:€€~<²œ ü’È€Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confŒå¥­áþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ývøàõ}'F#³BÚñÙè‚~@²œ ü’È€Fzé®·'üvº‰oý©äÇU¤©A)Eǹ Œå¥­áþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý •–"…Cåº Õb.!U0„~²œ ü’È€Fzé®·'üvº‰oý©äÇU¤©A)Eǹ Œå¥­áþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýÖï–QªpO±²ð×@ò=†~<²œ ü’È€Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsŒå¥­áþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýˆÝïŠù#AY¶Áõ·ÉIÁ¬ˆ~@²œ ü’È€Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âŒå¥­áþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýÀÙ"tÒD ±ûÌüòõ-œŠ~@²œ ü’È€Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âŒå¥­áþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýAçÓLFOé…¦~Šßô"{Œ~²œ ü’È€Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âŒå¥­áþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýa2Æ;ÇÝG•œò#QžäŽ~<²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Œå¥­áþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"Š¶úÚJOÚM ‡ž —TX~2²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýW¸bñG§‡,Æy!­‰’~2²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýbd€LðM„¼ÒPÕøBD”~2²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý;9X¼ÛA0¸$tŠ»p>–~2²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý„“H?a’Jn‰(…qéøɉ˜~2²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý;1I+ÕŸMg˜&(âº8aš~2²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý};@F¢@nÏ8Èj˜’Ñœ~2²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý03Q!~Bøˆÿ“Œ˜Gõž~2²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýÀ5«ãCêJ‹¥®2s˜š({ ~²œ ü’È€Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œŒå¥­áþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýh«¶l¸þN;™’¼d¬ ¢~:²œ ü’È€Fzé®·'üvºŒå¥­áþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýÇŠC*¾EÄ”Dý‚P;g¤~:²œ ü’È€Fzé®·'üvºŒå¥­áþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ýËÉlî5QNq¼è{b~b²œ ü’È€Fzé®·'üvºí( ö~R¶ ~{‚~¯Œå¥­áþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý:žëbòI;­ÀÀ7±¨~²œ ü’È€Fzé®·'üvºü’È€Fzé®·'üvºŒå¥­áþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_buf_str20ÜS7[AIF¬•pd± (ý9ŽÝòZL¸gXPtú9ª~@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Œå¥­áþð‹+aue_readæhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýF¾lI›M¡`±%>¬~0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Œå¥­áþð‹+aue_lseekˆ +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýG’›êN(µÔ~ðM½ì®~$ªœ ù‹°âFzé®·'üvºü“,±Fzé®·'üvºŒå¥­áþð‹+aue_fork +arg_pid1348hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1348ppid1282execbash20ÜS7[AIF¬•pd± (ý&åëÕ·H£§Bæ6õd°~²œ ü“,±Fzé®·'üvº¥µîgµÑUµg¨eµÑc'Œå¥­áþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýiŒ:  ÀFÕ®c†¢ì;²~²œ ü“,±Fzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Œå¥­áþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýü9ã%(G +¥—0dL5^¡´~<²œ ü“,±Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confŒå¥­áþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýpE"Í®$KC„ä÷i¬”¶~@²œ ü“,±Fzé®·'üvº‰oý©äÇU¤©A)Eǹ Œå¥­áþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý%YpÛ¢¡ER»/Q&XŽ$£¸~²œ ü“,±Fzé®·'üvº‰oý©äÇU¤©A)Eǹ Œå¥­áþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¹7‰þBmBíž +ðvÄW\º~<²œ ü“,±Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsŒå¥­áþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýiÃÔÙ+A)¹˜ÒÐú{©ò¼~0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UèÙ‰ääþð‹+aue_lseek¼Ù%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚD¦ +¾’Cû‰üJ”ÔEz]¾~²œ ü“,±Fzé®·'üvºü“,±Fzé®·'üvºæðâðèþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýoèéÖ~He¡®+”³H7•À~bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯æðâðèþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýØ{Ò2|@Ež¿¹.A|¯©Â~bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯æðâðèþð‹+aue_write>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý¢Å–âAä×·2UŒ¯Ä~$ªœ ù‹°âFzé®·'üvºý,äÈFzé®·'üvºæðâðèþð‹+aue_fork +arg_pid1349hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1349ppid1282execbash20ÜS7[AIF¬•pd± (ý5×sã[ÐDZ‘xž=×`CÆ~²œ ý,äÈFzé®·'üvº¥µîgµÑUµg¨eµÑc'æðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý{H ¾ï‹G^¥ÐoëØkñ)È~²œ ý,äÈFzé®·'üvº¤ üx¡\¡ô׬½i„/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_heap_buf'ìAzX™¦}˜¹(/libexec/ld-elf.so.1æðâðèþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine../copy_static_heap_buf ppid1337execbash20ÜS7[AIF¬•pd± (ýæGªa3{LH¿/š^¡m>Ê~<²œ ý,äÈFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confæðâðèþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýµË }ZóIgº µÐH\‡ŠÌ~@²œ ý,äÈFzé®·'üvº‰oý©äÇU¤©A)Eǹ æðâðèþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýg+?‹Iyš•ªXK•ß–Î~²œ ý,äÈFzé®·'üvº‰oý©äÇU¤©A)Eǹ æðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýâ7J­¥XÕ|¿hDŒÐ~<²œ ý,äÈFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsæðâðèþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýCˆ‚fÑìH̨‘¿Ë3÷Ò~@²œ ý,äÈFzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý‹z¼ÂMº‹ +ÜHÔ~@²œ ý,äÈFzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýÿyê­1@÷®t[mŒ1ÌÖ~²œ ý,äÈFzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýÝ‘ðXM7­_Çc’éÌÿØ~<²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7æðâðèþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýo‰kÓ9F7’F7jI±ØvÚ~2²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý¶ÐEœë5D›€yð pŠS0Ü~2²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýÉ_ÛFZ¦ŸïFè†@Þ~2²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýÊŽÐ-Ÿ¨F÷£ã@C—.ÜÖà~2²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýëê—4|oC°±8¡;¹ñµ5â~2²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýŸ"ÃPKŒ¸  ¼Ï¼ÿä~2²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý‘t·©½òHÀša$Jˆ4…3æ~2²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýQ”éÅ(FÁò2.}VÞè~2²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýO²¡,êI³®Ñ·.U8ê~²œ ý,äÈFzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý] â0J'Bpœ:É84Œì~:²œ ý,äÈFzé®·'üvºæðâðèþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýÕU¢Õ°‘H5±cùCd#|î~:²œ ý,äÈFzé®·'üvºæðâðèþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýIˆ,ö9G Œ¡ù9ª´að~²œ ý,äÈFzé®·'üvºý,äÈFzé®·'üvºæðâðèþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý˦»›ŒL›º€3HC¦ò~@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'æðâðèþð‹+aue_read°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýùëÁ‘E­¤„¡ŒyÁ ô~0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'æðâðèþð‹+aue_lseek® +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýÉ&™³NJ»„ä, 7*ö~$ªœ ù‹°âFzé®·'üvºý-:?Fzé®·'üvºæðâðèþð‹+aue_fork +arg_pid1350hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1350ppid1282execbash20ÜS7[AIF¬•pd± (ý-»ã&oGU¡I·òÛ=ãø~²œ ý-:?Fzé®·'üvº¥µîgµÑUµg¨eµÑc'æðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýô̶à{H5¹ŠÿSŠú~²œ ý-:?Fzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1æðâðèþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýÄ•üÇsK`£ lÇ6ÍÝü~<²œ ý-:?Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confæðâðèþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÊ.cCÛ‚ç~6•’rþ~@²œ ý-:?Fzé®·'üvº‰oý©äÇU¤©A)Eǹ æðâðèþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýŠ±&­=ÔDÒš—ZE#e|€²œ ý-:?Fzé®·'üvº‰oý©äÇU¤©A)Eǹ æðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¢­EÈDDb™ÊÉyø½F‚<²œ ý-:?Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsæðâðèþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýðÕpÑ%Kµ\bf/Of„@²œ ý-:?Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¾%mùQFD¶¨Ò +a&Œï†@²œ ý-:?Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýN(üë„—A8…ž†nä +Dˆ²œ ý-:?Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âæðâðèþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýú„:ƒMH–{VÎ%† ¡Š<²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7æðâðèþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýè€õÝKK¯«ËóÏ~¤Œ2²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¤˜Ö¤ñ!@—LeACWoŽ2²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý:_˜'Aƒ“Uì%u¦2²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýeWÁ8Ç4K}´Àï#Kß’2²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý'Ó×+ÖF ‚ûi$]+ò”2²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýù(@ÂsoLrƒÍ’mH-Í–2²œ ý-:?Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œæðâðèþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýØ}‘0ðaJ}“@wÚ’…cј0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÐÖ°ìþð‹+aue_lseek¾¥&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"’šüÉö®ïPø@W·4}rØ%8š²œ ý-:?Fzé®·'üvºý-:?Fzé®·'üvºÀù·½ðþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýªŽMlK—IºˆF2†ç%Ÿrœbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Àù·½ðþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý”+:üªA€·’‘‡ÉsçÉžbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯Àù·½ðþð‹+aue_write.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýRჇÑKüºìRã{È $ªœ ù‹°âFzé®·'üvºýȆrFzé®·'üvºÀù·½ðþð‹+aue_fork +arg_pid1351hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1351ppid1282execbash20ÜS7[AIF¬•pd± (ý|¥Â^>°G¤œ‰Qrå›Õ¢²œ ýȆrFzé®·'üvº¥µîgµÑUµg¨eµÑc'Àù·½ðþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýs¡ÿÇ6¼ÿ®P Ê:²œ ýȆrFzé®·'üvºÀù·½ðþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execfork_process20ÜS7[AIF¬•pd± (ý(›6§M|AKU>ïÿ +Ì$²œ ýȆrFzé®·'üvºýÈÐFzé®·'üvºÀù·½ðþð‹+aue_fork +arg_pid1352hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1352ppid1337execfork_process20ÜS7[AIF¬•pd± (ý„ã"(›fM¸—wò=-LìÎb²œ ýȆrFzé®·'üvºí( ö~R¶ ~{‚~¯Àù·½ðþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execfork_process20ÜS7[AIF¬•pd± (ý÷çÞÈ9ÎE¾ˆò¸ä°7}ÿвœ ýȆrFzé®·'üvºýȆrFzé®·'üvºÀù·½ðþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execfork_process20ÜS7[AIF¬•pd± (ý]C¹uK­—O~Y L“ÒbÖœ ýÈÐFzé®·'üvºí( ö~R¶ ~{‚~¯Àù·½ðþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1execfork_process20ÜS7[AIF¬•pd± (ýö¹F·óÉ@O‘ŸÙÝÝVJÔ@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Àù·½ðþð‹+aue_readŠhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýPHÙGGU«0Õ40Ô§*Ö0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Àù·½ðþð‹+aue_lseekÊ +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý Î}‹òLL¤¹úÂO3/Ø$ªœ ù‹°âFzé®·'üvºýÉAäFzé®·'üvºÀù·½ðþð‹+aue_fork +arg_pid1353hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1353ppid1282execbash20ÜS7[AIF¬•pd± (ý:xÌÃ6CªðÑHF¡&`ÚÖœ ýÈÐFzé®·'üvºýÈÐFzé®·'üvºÀù·½ðþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execfork_process20ÜS7[AIF¬•pd± (ýëêÀ.EÙ”P)Cw†öܲœ ýÉAäFzé®·'üvº¥µîgµÑUµg¨eµÑc'Àù·½ðþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýQ-òTAK†Md<ÍìËFÞ²œ ýÉAäFzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Àù·½ðþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ý8TtÜŠ²N` §ûqðIÊà<²œ ýÉAäFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÀù·½ðþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý.rÀ +HCXL|˜qàÔ#+Ïè@²œ ýÉAäFzé®·'üvºXꎩð®…\®ð@JÌ…¼âÀù·½ðþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýO“ ŸyE艃yë¬8føê@²œ ýÉAäFzé®·'üvºXꎩð®…\®ð@JÌ…¼âÀù·½ðþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý_æa<ÿ@Ö‘zü2¾†ì²œ ýÉAäFzé®·'üvºXꎩð®…\®ð@JÌ…¼âÀù·½ðþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýö/&shÜC< ”æ¿2kå^î<²œ ýÉAäFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Àù·½ðþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýiŒZèóYCyˆ”yÁ´<)ð2²œ ýÉAäFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¶‡ê‹Î\Aþ´Ú[¨JOÛsò2²œ ýÉAäFzé®·'üvºÞA`ì•øËQ¸•bxñË"œÀù·½ðþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýúªWaî@N·›Ov˜³êô0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U‚âÄýóþð‹+aue_lseekˆõ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜ÊÃZwF™YÒZö@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÆ›Ýùôþð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýPbåúùEçª÷2¡lMøJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆ›Ýùôþð‹+aue_sendtoÚ +ret_msgid490hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýêÏg qiOìªëÁoé~¿úJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆ›Ýùôþð‹+aue_sendto˜ +ret_msgid491hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÍù!?yFN8˜Å u¼ó‚<üJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆ›Ýùôþð‹+aue_sendto¬ +ret_msgid492hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýêOI%íÍLð²s4þÏÜÊþJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÆ›Ýùôþð‹+aue_sendto˜ +ret_msgid493hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýú^†é±†I¶–8¥×z€€Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆ›Ýùôþð‹+aue_recvfromÚ ret_msgid490hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÉ«4fšTG¶µv¹s‚€Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆ›Ýùôþð‹+aue_recvfrom˜ ret_msgid491hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÛÀ£®;@‘¢ÍÕïÞòY„€Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆ›Ýùôþð‹+aue_recvfrom¬ ret_msgid492hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÞshrK°šBÎl@0¶P†€Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆ›Ýùôþð‹+aue_recvfrom˜ ret_msgid493hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý•KÔÑ +VÞ€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýÅ-‘XC¬…ÈŸKšà€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýÙ¹íâ|Hꓧ´©e`â€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý¯7ÛU©F/€aYžÌWPä€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýuîJŠ#×IÖ²6‘ ['æ€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write0hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýBä·tlöFýº}BIÆÚ7è€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýÃwÊôú B ¹ÌBÝlfÆáê€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýrO-nÏNBmLnTIeÍì€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý¹jvð¿LGƒ2é+°@Tî€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýåÎK`ÂHÿÿáV,‹W|ð€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýÝq–^6²Bq ÙnŽý¡ëò€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý0»NÖ(@« ]:¥RØô€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý1›m؉OI¥âã øÖ•vö€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý¥§e,ŒI)‡À}•ŽÜ—&ø€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý +y†F!YC̓X?ÅæG’ú€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýɤ^·KNG&¹Ð>a +k?ü€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýj°·xRúOÁªªìà•Ä.þ€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýõ¤g©*CW³´(S}#šu€b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý[R$ùžBÓ…Ô„„JÇà‚b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý%^6ùý A\˜3åÆ-“U„b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý9¶‡å6A­c”¶%¸À†b²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý¶áצ¨!IÓ­s9LðVˆb²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýj¬d&ÿýH7€éÐbRRŠb²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý1àì¶MG{”}K8ØvNŒb²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ý_ÄVõOQH»§u­†¿¨Žb²œ þdkiFzé®·'üvºí( ö~R¶ ~{‚~¯Î¤½Šøþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execlistdir20ÜS7[AIF¬•pd± (ýñ\ÙuN4D ¾ï)lrW²œ þdkiFzé®·'üvºÞç=š8§T¸šm9D§bΤ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execlistdir20ÜS7[AIF¬•pd± (ý¦c¥ªŽLØ—?l$®§’²œ þdkiFzé®·'üvºþdkiFzé®·'üvºÎ¤½Šøþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execlistdir20ÜS7[AIF¬•pd± (ý$>ú»AäŠg Ôy”@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Τ½Šøþð‹+aue_readîhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý-aCjC\@”Û9ô䌰–0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Τ½Šøþð‹+aue_lseekô +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýrXlKºŒM€TÓ$oƘ$ªœ ù‹°âFzé®·'üvºþeLÊFzé®·'üvºÎ¤½Šøþð‹+aue_fork +arg_pid1355hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1355ppid1282execbash20ÜS7[AIF¬•pd± (ýõœ‘e0D¿™xÿ\jš²œ þeLÊFzé®·'üvº¥µîgµÑUµg¨eµÑc'Τ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý_=^»MŽ—?›’*œ²œ þeLÊFzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Τ½Šøþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ý)NµZ)C2Ÿ/¤vÔC}ž<²œ þeLÊFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confΤ½Šøþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýFŽì—ÎH;‹[®A`Í @²œ þeLÊFzé®·'üvº‰oý©äÇU¤©A)Eǹ Τ½Šøþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýì™!ö 6J.™¿G pØý›¢²œ þeLÊFzé®·'üvº‰oý©äÇU¤©A)Eǹ Τ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý†Š{¼&@?®Q¾:FiF¤<²œ þeLÊFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsΤ½Šøþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý_|lVmE“¹W~ ƒ¿¥¦@²œ þeLÊFzé®·'üvºXꎩð®…\®ð@JÌ…¼âΤ½Šøþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÿîä«ÛA\¸ÖZ9ìúÀ¨@²œ þeLÊFzé®·'üvºXꎩð®…\®ð@JÌ…¼âΤ½Šøþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýBôkPÒMC ¢âN’•±®uª²œ þeLÊFzé®·'üvºXꎩð®…\®ð@JÌ…¼âΤ½Šøþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÚ äT¼Lÿ»#€¿ ðι¬0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔü¾Îûþð‹+aue_lseekªð'hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý N\–Gq¾Äq9ÖËy®²œ þeLÊFzé®·'üvºþeLÊFzé®·'üvººÙ†Ñÿþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý^fU~M…•ŽK3ïk4˜°bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ºÙ†Ñÿþð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýÊuÛnJé’'ÑLÖf²bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ºÙ†Ñÿþð‹+aue_write2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýt}—mb¯C‘¶a08´%-©´$ªœ ù‹°âFzé®·'üvºþÿ‹Fzé®·'üvººÙ†Ñÿþð‹+aue_fork +arg_pid1356hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1356ppid1282execbash20ÜS7[AIF¬•pd± (ýFÓ6ÔñI]¼ _(„ñ4¶²œ þÿ‹Fzé®·'üvº¥µîgµÑUµg¨eµÑc'ºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýwþñó°þM«­øíÔ¥åG¸²œ þÿ‹Fzé®·'üvºËë F>X†·CX>OYx/usr/home/user/ripe-prov-tests-master/Linux/./make_directory'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ºÙ†Ñÿþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"./make_directory ppid1337execbash20ÜS7[AIF¬•pd± (ýýµÛRÓ‡BO“å‚v–E=ú<²œ þÿ‹Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confºÙ†Ñÿþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýY[¦‰©F&°‘rÁ»¼@²œ þÿ‹Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ºÙ†Ñÿþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýå/ŠÙ!}Au>l؆ ÄÓ¾²œ þÿ‹Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý‰Ùçœ÷]N‘œ$òˆ6wq À<²œ þÿ‹Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsºÙ†Ñÿþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý*£JÊG$­R\DÍRÂ@²œ þÿ‹Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý•i¥¾,{@ί™ @òeÄ@²œ þÿ‹Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý øH.†ÿxRq‘Ʋœ þÿ‹Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýÓiMîsýGƪ*#ðu4È<²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ºÙ†Ñÿþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"†’ú‚G×2cLˆu};Š÷xÊ2²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýÿߎŽ‘Eϧí]H'„‡*Ì2²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý†@¸d Eö–î¸ÄÎ2²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýðuôx°M­p®*žäŸÍÐ2²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý›¼:Ú±¶M¦©¹Ê´’àÒ2²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýw\Y4Fª¹L­~ì¡Ô2²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý€G‘¶sLÚ¨ ‰š a•1Ö2²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý‡üCŽ_—Dƒ±¥ùI\\°(Ø2²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý$Ĩ«ÍNšA”^'më‡Ú²œ þÿ‹Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýÈ @ú„¼A£Œ˜Ût’Ôl¤Ü:²œ þÿ‹Fzé®·'üvººÙ†Ñÿþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýFù‰‡lGÆŽb|­ûçgÞ:²œ þÿ‹Fzé®·'üvººÙ†Ñÿþð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ýmX§Å\~L –Ô?«·Æm°à²œ þÿ‹Fzé®·'üvºï w©Oh[hY«h^Ÿj/usr/home/user/ripe-prov-tests-master/Linux/temporaryºÙ†Ñÿþð‹+aue_mkdirhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý¡ÿ)F» K¼ Sņ]Ⲝ þÿ‹Fzé®·'üvºþÿ‹Fzé®·'üvººÙ†Ñÿþð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execmake_directory20ÜS7[AIF¬•pd± (ý@b.rÍJÁ‹Õ4ËUñi~ä@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'ºÙ†Ñÿþð‹+aue_readÄhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýœìÇÇk@ϲ ÃEð¦ Ææ0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'ºÙ†Ñÿþð‹+aue_lseek® hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýÝ S“HŸ‡A¢°`0ËÓè$ªœ ù‹°âFzé®·'üvºþÿŒ9Fzé®·'üvººÙ†Ñÿþð‹+aue_fork +arg_pid1357hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1357ppid1282execbash20ÜS7[AIF¬•pd± (ýƒáÀyƒJP‚­ðº닉겜 þÿŒ9Fzé®·'üvº¥µîgµÑUµg¨eµÑc'ºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÎÍI !ÆM¥·!}2)þ½®ì²œ þÿŒ9Fzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ºÙ†Ñÿþð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýRC(‘0öN™ÈÌ­ +Ócî<²œ þÿŒ9Fzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confºÙ†Ñÿþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý"L¶5½KëŠUk02êð@²œ þÿŒ9Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ºÙ†Ñÿþð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý<«í?Ó¦M¤˜Žo Ogºò²œ þÿŒ9Fzé®·'üvº‰oý©äÇU¤©A)Eǹ ºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýáJegi€Bཨ·‘(¸Á2ô<²œ þÿŒ9Fzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsºÙ†Ñÿþð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÁÅåbTÀO™£ñ)wèW¾ö@²œ þÿŒ9Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýáåLÍÁFµÃ˜í¸*: ø@²œ þÿŒ9Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý® ÓÊG¹½B‰‚·Oú²œ þÿŒ9Fzé®·'üvºXꎩð®…\®ð@JÌ…¼âºÙ†Ñÿþð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý›zïòÇI¾‹ø ÍÖyçŽü<²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ºÙ†Ñÿþð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýú_¨<2C²˜B„•§þ9‰þ2²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýбDŸ6›B(ŽŒYx­5g€‚2²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¢ ÚßÏHM »x9ÀW·Ý˜‚‚2²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý6M¿ôGÔ‘êÕë«©Ó„‚2²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýGõ—UHc¤å—NúL†‚2²œ þÿŒ9Fzé®·'üvºÞA`ì•øËQ¸•bxñË"œºÙ†Ñÿþð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýQ•$ +†ŽA9¶´nÔÉ«òˆ‚0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´êß—ƒÿð‹+aue_lseekº¾(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³èJ×ÔO̼ãöþ –TŠ‚²œ þÿŒ9Fzé®·'üvºþÿŒ9Fzé®·'üvºâ曚‡ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý„¸QW5HV¥$ þ Œ‚bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯â曚‡ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýÇ={º‚FGÖùÈÙ°Ž‚bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯â曚‡ÿð‹+aue_writeBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýWŒjq +I鈾g¼Î¿W‚$ªœ ù‹°âFzé®·'üvºÿ™ûFzé®·'üvºâ曚‡ÿð‹+aue_fork +arg_pid1358hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1358ppid1282execbash20ÜS7[AIF¬•pd± (ý×$à1÷F·0êÉh’‚²œ ÿ™ûFzé®·'üvº¥µîgµÑUµg¨eµÑc'â曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýç–…Ÿk/I ½‰â»“”‚²œ ÿ™ûFzé®·'üvºgAÅŸŒãŽP£ŒðÑ€Ž¡Åˆ/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_multi_write'ìAzX™¦}˜¹(/libexec/ld-elf.so.1â曚‡ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine2./multi_read_multi_write ppid1337execbash20ÜS7[AIF¬•pd± (ý¸[.G¿A(…ÞrM#êU–‚<²œ ÿ™ûFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confâ曚‡ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýáLñg¬MÛ¯ ~H{˜‚@²œ ÿ™ûFzé®·'üvº‰oý©äÇU¤©A)Eǹ â曚‡ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýéUúSºHŒ¢;Ö^ÿ=ŽÜš‚²œ ÿ™ûFzé®·'üvº‰oý©äÇU¤©A)Eǹ â曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýŸ%Ü“rI싵Fûs­“œ‚<²œ ÿ™ûFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsâ曚‡ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýf’¦G§)F+¸FÏk]~‘ž‚@²œ ÿ™ûFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýml„Î]Gß­=ÑP©ƒY ‚@²œ ÿ™ûFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý˜YÌaäCð¬ý7¿ˆ¢‚²œ ÿ™ûFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýóU¹\‘OCÀ´$‰Ò Ç'¤‚<²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7â曚‡ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýÀåˆ<À¿A´‹Õ|% ¦‚2²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýSš tßG ‚ÔŠ¦y²G~¨‚2²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýœã"}F¸%* §ª‚2²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý?T}åŽ"HƆ,‚îƒ1¬‚2²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý”A¡#6L ­Äˆ‰øŠÞ÷®‚2²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý Ö)WqEyœQÖViŒ°‚2²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý æWC-šÁ;{Ä­²‚2²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý+‘L¼šüO ¡_©¾kzÒr´‚2²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýžð瘔NÒ¼IëIT6‡¶‚²œ ÿ™ûFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý}ÒD™‰ŽEs¹ŽÊø‡¶¸‚:²œ ÿ™ûFzé®·'üvºâ曚‡ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýÛòX½M—ˆ¼xÞš¶mšº‚:²œ ÿ™ûFzé®·'üvºâ曚‡ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýs’-Fè@€ƒ—º_TE꼂<²œ ÿ™ûFzé®·'üvºf*qÛ^žqaþ>Û“Á€/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.câ曚‡ÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýz‚…ˆ±R@ ˜² £y9鬾‚<²œ ÿ™ûFzé®·'üvº1ž‰+_\‘+öý<_îæ˜/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.câ曚‡ÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýÂM†ƒDæ‰@q¬ïã”À‚<²œ ÿ™ûFzé®·'üvº–yÓžÇJ8UŠÇ>;å8¦&x/usr/home/user/ripe-prov-tests-master/Linux/output_file1.tmpâ曚‡ÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý8LÂèXÜA·µ§tO¾ˆ‚<²œ ÿ™ûFzé®·'üvº•Þ©R‹8¦Y¸‹5RI¦Qx/usr/home/user/ripe-prov-tests-master/Linux/output_file2.tmpâ曚‡ÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýŸ=MG¾B’(;£œ)¬Ä‚@²œ ÿ™ûFzé®·'üvºf*qÛ^žqaþ>Û“Áâ曚‡ÿð‹+aue_read¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýßk‚FíIÆ‹>r pÅù¢Æ‚@²œ ÿ™ûFzé®·'üvº1ž‰+_\‘+öý<_îæâ曚‡ÿð‹+aue_readühostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý»ùã nÅGz¡ÖúκO´ È‚²œ ÿ™ûFzé®·'üvºf*qÛ^žqaþ>Û“Áâ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýœ¶~ph FM¢ÔêhA­–Ê‚²œ ÿ™ûFzé®·'üvº1ž‰+_\‘+öý<_îæâ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýîÄaT|AN¸„Û›dƒÌ‚b²œ ÿ™ûFzé®·'üvº–yÓžÇJ8UŠÇ>;å8¦&â曚‡ÿð‹+aue_writeþhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýç£y¥8„LE•|Ðîj53΂²œ ÿ™ûFzé®·'üvº–yÓžÇJ8UŠÇ>;å8¦&â曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"žÄûR¥YÞq_B}‹uè]< †Ђb²œ ÿ™ûFzé®·'üvº•Þ©R‹8¦Y¸‹5RI¦Qâ曚‡ÿð‹+aue_writeöhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý¡Š@ù"tHé¨5Ñßv…¯Ò‚²œ ÿ™ûFzé®·'üvº•Þ©R‹8¦Y¸‹5RI¦Qâ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý²º ¸RÛIÊÎ-æÑÔ‚²œ ÿ™ûFzé®·'üvºÿ™ûFzé®·'üvºâ曚‡ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýE(‹c'·HR¸uBD*"]çÖ‚@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'â曚‡ÿð‹+aue_readŠhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýœÝÛëÌwI#ºíÞXo¿¥•Ø‚0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'â曚‡ÿð‹+aue_lseekê hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý$$,Žú¤C,«žÕ`_cÌÚ‚$ªœ ù‹°âFzé®·'üvºÿš¡ŽFzé®·'üvºâ曚‡ÿð‹+aue_fork +arg_pid1359hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1359ppid1282execbash20ÜS7[AIF¬•pd± (ýúf0åÒ @Á€æ¤á'V—Ü‚²œ ÿš¡ŽFzé®·'üvº¥µîgµÑUµg¨eµÑc'â曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý©ægFøN¢’‡µÀk²³gÞ‚²œ ÿš¡ŽFzé®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1â曚‡ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýì Ã'‰Hn‡‘ÃhWLâà‚<²œ ÿš¡ŽFzé®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confâ曚‡ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý±ÜöÎ@ÀœbEr›ø^â‚@²œ ÿš¡ŽFzé®·'üvº‰oý©äÇU¤©A)Eǹ â曚‡ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýœe’`0L…Òúò­8䂲œ ÿš¡ŽFzé®·'üvº‰oý©äÇU¤©A)Eǹ â曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý«U†b $LµÅJß(úMæ‚<²œ ÿš¡ŽFzé®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsâ曚‡ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý7§®™íC’ƒq]ê…è‚@²œ ÿš¡ŽFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý7PjÞRäL”'.ô.ê‚@²œ ÿš¡ŽFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýZÚ ïNNµ·Z_Ôº3삲œ ÿš¡ŽFzé®·'üvºXꎩð®…\®ð@JÌ…¼ââ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý&f\D‰@ñċ؇§7½î‚<²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7â曚‡ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýH#£JÕ‚«ó{÷ ð‚2²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý~DüŠBKðµòý|ÍÄò‚2²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýãOˆ‰ä B5º€Lƒ +µöÁô‚2²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý™-ç$GZÛÙ[ûÍâÖö‚2²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýSýÞŠM²M¬² É@«Ñø‚2²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÑáZpv”Mì—ÏÉig€èTú‚2²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý}–2¯ñAWœÑ5†ùú?Oü‚2²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý‚­†Å¹•I7‘™Q&E„ˆþ‚2²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý#€Ë YK‘Ëö"müJ€ƒ²œ ÿš¡ŽFzé®·'üvºÞA`ì•øËQ¸•bxñË"œâ曚‡ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýDç="tN£†Kb1 !‚ƒ:²œ ÿš¡ŽFzé®·'üvºâ曚‡ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¢Eq ±º@^ÄøEKÊoC„ƒ:²œ ÿš¡ŽFzé®·'üvºâ曚‡ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýd«jš1Iµ·ÌÈjÒ†ƒ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_lseekº¾(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/­xJdMé‘À»HU%<Šƒ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+20ÜS7[AIF¬•pd± (ý^û+ûv;B¦ºéy m|…ˆƒ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃÖ8„ZKö½©—£tûƒÏŽƒ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+20ÜS7[AIF¬•pd± (ýµglOÁ·6‡‚~Ý5ñŒƒ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼VÇäD¦l“†Â).’ƒ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+20ÜS7[AIF¬•pd± (ý_ÚÖ‰mHÔƒ¹ü"¸žƒ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåÊPS5ŸH)”Ÿ|Qª=½ –ƒ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+20ÜS7[AIF¬•pd± (ýñrzôÍ0KܯÀÞ„P””ƒ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZ¶ÑÍüE&±jÞ¢66yP˜ƒ:‚œ Ê +ÙKFzé®›'üvº†ý©ˆÿð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“¤©Âl:E©>¦ý£ˆ*¾šƒ@Úœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V †ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]Á€ð*-@Ž»ñŸƒõ會@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨_oŠþPB.¦™ì°¤%Ëžƒ@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_pread EhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýàÕ’?þlKΤ‹¼ÞÙƒJ5 ƒb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº†ý©ˆÿð‹+aue_writeŠFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€9fq +K—²RV¢ƒbÚœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á†ý©ˆÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýiꦘÖrKÖ€s .Ì¥¤ƒ@Úœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V †ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçTêwOU¥B¤Š½¦ƒ@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉ$ð¬çCÿŽ¥3ÉQr7„¨ƒ@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadò5hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýo®Ô=,E1¢­ÿ6¶ñõuªƒb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº†ý©ˆÿð‹+aue_writeÜ6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑD²êIu†¤Cš´Û¤¬ƒbÚœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á†ý©ˆÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý Ɔ­xCòº´xë¦P¾®ƒ@Úœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V †ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸IïcP\H‡•|¥‹·†wz°ƒ@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙ OؽH¦¢D½:©=.²ƒ@Úœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ý©ˆÿð‹+aue_preadˆNhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýLN|ÄuÐEœëŸ†"Ï´ƒb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº†ý©ˆÿð‹+aue_writeòNhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’¥g9œC,…§¬&¨¬¶ƒbÚœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á†ý©ˆÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡c¥J¤Õ@‡£/ÎÃøƒ@Úœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V †ý©ˆÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]Xk_=AF°Ža†^rºƒJÚœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº†ý©ˆÿð‹+aue_sendtoÞ +ret_msgid495hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(Ï'3ÈRM•¢Šù¾¹á¢/¼ƒDê› µ dôFzé®{'üvºµ CjFzé®{'üvº†ý©ˆÿð‹+aue_recvfromÞ ret_msgid495hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý½ò[yÔA ¿?œsTÀŠZ¾ƒbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK†ý©ˆÿð‹+aue_writev®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý0a¸(•„OÙ¶+°¬åÎñXÀƒD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¢£·²ˆÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'úæÕ—A¹žÚÅå(ËízƒD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¢£·²ˆÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþi&ceLzŠRP%ð{ăD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¢£·²ˆÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý F|âKl00Âq3ÌƃD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¢£·²ˆÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyò‡3Ç;B¯=Ê +Üïȃ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uüñ¡íŠÿð‹+aue_lseekŠÒ)hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýy¦Î¬á0AßÜKPjb}ʃ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e®ýØ«‹ÿð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýŠ9N[YËA’žv;Õ¹Ïï̃JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®ýØ«‹ÿð‹+aue_sendtoÚ +ret_msgid496hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýŸ¾Ì4ÔOЄ^ò}mùf΃JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®ýØ«‹ÿð‹+aue_sendto˜ +ret_msgid497hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýv­¶ºl@¿·± DÔ"I½ЃJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®ýØ«‹ÿð‹+aue_sendto¬ +ret_msgid498hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý'#&KCŽ -ÓçÅ9ZÒƒJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®ýØ«‹ÿð‹+aue_sendto˜ +ret_msgid499hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýK'¨šwNmƒ6å¯}ïKÔƒDê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ýØ«‹ÿð‹+aue_recvfromÚ ret_msgid496hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýG±Ì0äžLY¿1Bq?ëÖƒDê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ýØ«‹ÿð‹+aue_recvfrom˜ ret_msgid497hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýkÝ…1 ÛI6W‡S" Ý؃Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ýØ«‹ÿð‹+aue_recvfrom¬ ret_msgid498hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýg‰bãI‘â_o¤ÿbÚƒDê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ýØ«‹ÿð‹+aue_recvfrom˜ ret_msgid499hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý9Ø‚’GZ¥ÿí™ÜG܃²œ ÿš¡ŽFzé®·'üvºÿš¡ŽFzé®·'üvº¸ÕÐæŽÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý«sóÎ[¯N«­žƒ è B¦Þƒbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¸ÕÐæŽÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýU+Dk‘«M0†w~ðÓA?àƒbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¸ÕÐæŽÿð‹+aue_writeDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýé¾².½rB’üœ¦©Ðâƒ$ªœ ù‹°âFzé®·'üvº5Ÿ’F{é®·'üvº¸ÕÐæŽÿð‹+aue_fork +arg_pid1360hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1360ppid1282execbash20ÜS7[AIF¬•pd± (ýÞ5J YM[C¶œtje]䃲œ 5Ÿ’F{é®·'üvº¥µîgµÑUµg¨eµÑc'¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýdPŽ˜ÕOð²p{e “lG惲œ 5Ÿ’F{é®·'üvºظõa0øX°Óøø/åŠ/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_single_write'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¸ÕÐæŽÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine4./multi_read_single_write ppid1337execbash20ÜS7[AIF¬•pd± (ýÑ ºœ´C–’îÆ2èƒ<²œ 5Ÿ’F{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¸ÕÐæŽÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýÄ­P Mfåq§Q_Žêƒ@²œ 5Ÿ’F{é®·'üvº‰oý©äÇU¤©A)Eǹ ¸ÕÐæŽÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýp6Cž»JœSTZ‰O|샲œ 5Ÿ’F{é®·'üvº‰oý©äÇU¤©A)Eǹ ¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"Šäý+swPEçƒ èqûuƒ¾îƒ<²œ 5Ÿ’F{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¸ÕÐæŽÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ým4'ÓŽHJڃή2ۚ؃ðƒ@²œ 5Ÿ’F{é®·'üvºXꎩð®…\®ð@JÌ…¼â¸ÕÐæŽÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý!sÿP[±Cl·pÀçµ.òƒ@²œ 5Ÿ’F{é®·'üvºXꎩð®…\®ð@JÌ…¼â¸ÕÐæŽÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýbšq4œIÔªëâ v2™ôƒ²œ 5Ÿ’F{é®·'üvºXꎩð®…\®ð@JÌ…¼â¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýKV”÷÷ÄI‡‘ÃÉŸµ&‡öƒ<²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¸ÕÐæŽÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý½þʯyEÝš¯z‰jO¿½øƒ2²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý9Ãœ»Lþ‘Û)¨0‚úƒ2²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý¾ µ}Z¢H…Wïpâ[üƒ2²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýÀ®/eâzB—·!^p…^tþƒ2²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýTbÊýHCmX Ì P€„2²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýZ[gcNõNí•[\ªé™‚„2²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýÃyð¹k]B\™ªSZÊé„„2²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý,(p6Àê@s’ïp?wl †„2²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ývZ~)_BLœ†µÔè§\…ˆ„²œ 5Ÿ’F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý%6-£³K¦3„,?6RØŠ„:²œ 5Ÿ’F{é®·'üvº¸ÕÐæŽÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýÁz¹½ ÿ@ž[3 ø±èúŒ„:²œ 5Ÿ’F{é®·'üvº¸ÕÐæŽÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý ×@#ÕF°†ÙBú4Ž„<²œ 5Ÿ’F{é®·'üvºf*qÛ^žqaþ>Û“Á€/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c¸ÕÐæŽÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý2p2 +òJ¶€¥ÝEæ&C±„<²œ 5Ÿ’F{é®·'üvº1ž‰+_\‘+öý<_îæ˜/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c¸ÕÐæŽÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýaºÏÀIä‚et&¸¶¦2’„<²œ 5Ÿ’F{é®·'üvº“§UŽÞ*PªÞG $Pv/usr/home/user/ripe-prov-tests-master/Linux/merged_file.tmp¸ÕÐæŽÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýE RhÖA§¹âB‹Ç¥”„@²œ 5Ÿ’F{é®·'üvºf*qÛ^žqaþ>Û“Á¸ÕÐæŽÿð‹+aue_read¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý™H£®œ#D:¯³Æ`Wæw„–„@²œ 5Ÿ’F{é®·'üvº1ž‰+_\‘+öý<_îæ¸ÕÐæŽÿð‹+aue_readühostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýu#Y“—¯Må¡Áý$©Ý+Ó˜„²œ 5Ÿ’F{é®·'üvºf*qÛ^žqaþ>Û“Á¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýÖbê:€'G+¥C²b±,š„²œ 5Ÿ’F{é®·'üvº1ž‰+_\‘+öý<_îæ¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýf!4-@Ë£Z´ùŸd¬œ„b²œ 5Ÿ’F{é®·'üvº“§UŽÞ*PªÞG $P¸ÕÐæŽÿð‹+aue_writeôhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý¼,Œè!G›¢7JŒ‰G‘ž„²œ 5Ÿ’F{é®·'üvº“§UŽÞ*PªÞG $P¸ÕÐæŽÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý˜Í²ü?}Ae§º¤/½ä „²œ 5Ÿ’F{é®·'üvº5Ÿ’F{é®·'üvº¸ÕÐæŽÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý<|Æ‹Í;H¢u· +¨¢,ö¢„@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¸ÕÐæŽÿð‹+aue_readÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýLüÛá+ŒNÓ¢Ôå•ÉÉ‘Ÿ¤„0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Ušøó¹’ÿð‹+aue_lseekú*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýlhÝ¥††G~’ ó>§á¦„²œ 6ÊF{é®·'üvº6ÊF{é®·'üvºœ ¯–ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý m¤VGƒŸr½œR`¨„bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯œ ¯–ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ývI[¾÷qMè•ßrÓ†¶ª„bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯œ ¯–ÿð‹+aue_write6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýmCßƇM±¯k=4Ô#l¬„$ªœ ù‹°âFzé®·'üvºа¥F{é®·'üvºœ ¯–ÿð‹+aue_fork +arg_pid1362hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1362ppid1282execbash20ÜS7[AIF¬•pd± (ý÷&ONE|‡Ä% +Ò#¦å®„²œ а¥F{é®·'üvº¥µîgµÑUµg¨eµÑc'œ ¯–ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý´-Ú•éAÉ¥Æò);žC‹°„²œ а¥F{é®·'üvºjþ»^A-Ò\­A` üÒB>|/usr/home/user/ripe-prov-tests-master/Linux/./remove_directory'ìAzX™¦}˜¹(/libexec/ld-elf.so.1œ ¯–ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine&./remove_directory ppid1337execbash20ÜS7[AIF¬•pd± (ýB/3+‡ûJõŸM ùžEJ²„<²œ а¥F{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confœ ¯–ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ý˜ßå¢] @-—YÉëd)´„@²œ а¥F{é®·'üvº‰oý©äÇU¤©A)Eǹ œ ¯–ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ýD1¨).O诞TFYÖ8*¶„²œ а¥F{é®·'üvº‰oý©äÇU¤©A)Eǹ œ ¯–ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ýD©¢îâ˜ATˆÈŸÞZ⤸„<²œ а¥F{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsœ ¯–ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ýÖÿØV\Kß²Š«ð¹³·hº„@²œ а¥F{é®·'üvºXꎩð®…\®ð@JÌ…¼âœ ¯–ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ýoxUƒP˜B³¢¥¯"[¼„@²œ а¥F{é®·'üvºXꎩð®…\®ð@JÌ…¼âœ ¯–ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ýÝ’˜À FQ¥å“tE<‡¾„²œ а¥F{é®·'üvºXꎩð®…\®ð@JÌ…¼âœ ¯–ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ýH~äeM¼C2—ë⛤'ËÀ„<²œ а¥F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7œ ¯–ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ý¸©ª¾}xD(ŠHW.ȉÚ„2²œ а¥F{é®·'üvºÞA`ì•øËQ¸•bxñË"œœ ¯–ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ý^üÅ×S%D5·‚‡Ò`N@Ä„2²œ а¥F{é®·'üvºÞA`ì•øËQ¸•bxñË"œœ ¯–ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ý4ŠÝ~.×AK˜PÑã¾ÈÆ„2²œ а¥F{é®·'üvºÞA`ì•øËQ¸•bxñË"œœ ¯–ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ýŒS 3E£Íû_âƒßÈ„2²œ а¥F{é®·'üvºÞA`ì•øËQ¸•bxñË"œœ ¯–ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ýiÏ6žEO˜UCÐóKb÷Ê„2²œ а¥F{é®·'üvºÞA`ì•øËQ¸•bxñË"œœ ¯–ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ýÓȉFYIŠ©ß¼ä@¼Ì„2²œ а¥F{é®·'üvºÞA`ì•øËQ¸•bxñË"œœ ¯–ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ýõ–³„QK'™‡'FµÁ΄2²œ а¥F{é®·'üvºÞA`ì•øËQ¸•bxñË"œœ ¯–ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ý}ä3ix\Iwºä }{ùlŠЄ2²œ а¥F{é®·'üvºÞA`ì•øËQ¸•bxñË"œœ ¯–ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ý«TÕŒSC©Ï,³FFÒ„²œ а¥F{é®·'üvºÞA`ì•øËQ¸•bxñË"œœ ¯–ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ý$Mç…-@ô€Ó°É´-g˜Ô„:²œ а¥F{é®·'üvºœ ¯–ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec remove_directory20ÜS7[AIF¬•pd± (ý_A¹ÎóhÃK}…¼U‡\Éð„@²œ Ñ F{é®·'üvºXꎩð®…\®ð@JÌ…¼âœ ¯–ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýŸcïÞö‡A”’~¼¥«Ì®ò„²œ Ñ F{é®·'üvºXꎩð®…\®ð@JÌ…¼â ¸ª³–ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÎ_)wlG榛£R\|ô„<²œ Ñ F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7 ¸ª³–ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý§·±ŠGO¦L4é3,ñö„2²œ Ñ F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ ¸ª³–ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V" ü% ã#Fâ 7Æœ‘)>ø„2²œ Ñ F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ ¸ª³–ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý’xFòófAø†Ò ,%bÀú„2²œ Ñ F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ ¸ª³–ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý ¼™Üb›Jþ³Ý ̸ÇÓü„2²œ Ñ F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ ¸ª³–ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýADHè|E®ÈDšS_‹$þ„2²œ Ñ F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ ¸ª³–ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýJÝMOF¹Jå‚£µåšü*€…0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U€õ톚ÿð‹+aue_lseekôë*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýl‰1ܺ¦KL´ú3|®@Z€‚…²œ Ñ F{é®·'üvºÑ F{é®·'üvº¶–Éöÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýú7´º¦mM ¿¥v +ï£Ð„…bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¶–Éöÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýïæ¯ofF +¯6èŪ ?i†…bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¶–Éöÿð‹+aue_write,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýÒ˜žÎÓH©žN#ó䈅$ªœ ù‹°âFzé®·'üvºkbÂF{é®·'üvº¶–Éöÿð‹+aue_fork +arg_pid1364hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1364ppid1282execbash20ÜS7[AIF¬•pd± (ýMõ.¢O¼›ýM<ð&wߊ…²œ kbÂF{é®·'üvº¥µîgµÑUµg¨eµÑc'¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý}§þ‘Ií·²“‚ÙÑIŒ…²œ kbÂF{é®·'üvº[Q…¾vVS¶¾4ÿCVaír/usr/home/user/ripe-prov-tests-master/Linux/./remove_file'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¶–Éöÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./remove_file ppid1337execbash20ÜS7[AIF¬•pd± (ý7%Øa'6H·‹ûmà.vaŽ…<²œ kbÂF{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¶–Éöÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý‡Ý¥éºM¤€—Ðãè$O…@²œ kbÂF{é®·'üvº‰oý©äÇU¤©A)Eǹ ¶–Éöÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý!Á™­˜-@d‹zÈnQ(F’…²œ kbÂF{é®·'üvº‰oý©äÇU¤©A)Eǹ ¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ý= {´kGú¬NÂÖ‰fÊ9”…<²œ kbÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¶–Éöÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýj¦`žRšM.ˆ›VÙÀ ¹ –…@²œ kbÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýP ¥=ÅDóŠï‚ÿÝÔð˜…@²œ kbÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý ÃΡKn³‚lÉ «š…²œ kbÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ý]I'žiH¼Ëø#@gœ…<²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¶–Éöÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý+y"0î­H^`‡ØÈ ž…2²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýÅ7·»ÖBÀ‚Œvþۼ …2²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ýÒÙlRHc‹m‡ì8h:¢…2²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý’ô”WÄAýý¹®I u ¤…2²œ kbÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execremove_file20ÜS7[AIF¬•pd± (ý–|söó +{Ga´…\²œ kbÂF{é®·'üvºtTXìƒî°R®ƒ.û"°ËAf/usr/home/user/ripe-prov-tests-master/Linux/out.tmp¶–Éöÿð‹+aue_unlinkhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ýZ&¨ +½õDB°ìâžC¶…²œ kbÂF{é®·'üvºkbÂF{é®·'üvº¶–Éöÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execremove_file20ÜS7[AIF¬•pd± (ýC4ôý2‹KŽñ²àV§]θ…@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¶–Éöÿð‹+aue_readühostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýv³ÙLJ6‡=@tä溅0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¶–Éöÿð‹+aue_lseekÐ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý4g—èeB3£?@‚ÊK¼…$ªœ ù‹°âFzé®·'üvºkÃìF{é®·'üvº¶–Éöÿð‹+aue_fork +arg_pid1365hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1365ppid1282execbash20ÜS7[AIF¬•pd± (ýÌá:¿Ÿ@„¶yNä›V¾…²œ kÃìF{é®·'üvº¥µîgµÑUµg¨eµÑc'¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¡±Ã@„­p ç“m À…²œ kÃìF{é®·'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¶–Éöÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýÇŒ5¼Â@AŠóÓb€h·Â…<²œ kÃìF{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¶–Éöÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýoW·û‘E·¢üLN_¿ÈOÄ…@²œ kÃìF{é®·'üvº‰oý©äÇU¤©A)Eǹ ¶–Éöÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý6a_MBåš7_fp.Œ`Æ…²œ kÃìF{é®·'üvº‰oý©äÇU¤©A)Eǹ ¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýyáæFK§‹üÈIaã’È…<²œ kÃìF{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¶–Éöÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý®¾’ÁþSEÞ¢ñú3°©AÊ…@²œ kÃìF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý‰ôV±MÒL—¼Èeà̓̅@²œ kÃìF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÁÞƒ€LUEô‡æ[R UfÎ…²œ kÃìF{é®·'üvºXꎩð®…\®ð@JÌ…¼â¶–Éöÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý•_M0WN;± p)Æ"ÎoÐ…<²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¶–Éöÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýå™J¦ëE†{í»qu_Ò…2²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýéÛ•ìBJ&¿zk|ÑdÔ…2²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÿÁˆ©{A­†iEIþçQÖ…2²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýVÛ‚zdKF®¶ËóŽàF‘Ø…2²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýCÝn'xO¤IèH·â–Ú…2²œ kÃìF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ¶–Éöÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýs°ìŸB}©g¡ãØ™.Ü…0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº¤ÏÓ¡ÿð‹+aue_lseekÚº+hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýLJôéÁN~ŒÐDTþÑ>Þ…@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eº¤ÏÓ¡ÿð‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýü^’->×CEžò#¢˜¹?à…JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºº¤ÏÓ¡ÿð‹+aue_sendtoÚ +ret_msgid501hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýcð»…¯¡B °¸j”/k“â…JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºº¤ÏÓ¡ÿð‹+aue_sendto˜ +ret_msgid502hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÎꌙº¹J±‚/à.܉vFä…JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºº¤ÏÓ¡ÿð‹+aue_sendto¬ +ret_msgid503hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý³£>Cû%NOˆ84×O’æ…JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºº¤ÏÓ¡ÿð‹+aue_sendto˜ +ret_msgid504hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý´6lUj+B[¥Õ˜½7Õ±xè…Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºº¤ÏÓ¡ÿð‹+aue_recvfromÚ ret_msgid501hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýê*­`ûCÙ¬šÒÛKþê…Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºº¤ÏÓ¡ÿð‹+aue_recvfrom˜ ret_msgid502hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý/²*²bKªŒ+êêÇ"iBì…Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºº¤ÏÓ¡ÿð‹+aue_recvfrom¬ ret_msgid503hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýü¶ŸH“©‹”Ó£úùâî…Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºº¤ÏÓ¡ÿð‹+aue_recvfrom˜ ret_msgid504hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÝÒÈ–I7»Í¯?£¸è¿ð…²œ kÃìF{é®·'üvºkÃìF{é®·'üvº’͈º¥ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÅëÌTIÖ¾0•'L üò…bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯’͈º¥ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý‘_‚¶AOi¢ ¸šÏÛô…bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯’͈º¥ÿð‹+aue_write,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýtAGiWµA;„%¤8pr<`ö…$ªœ ù‹°âFzé®·'üvº¢ÅF{é®·'üvº’͈º¥ÿð‹+aue_fork +arg_pid1366hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1366ppid1282execbash20ÜS7[AIF¬•pd± (ý^©ì(lON‘=€³Ñ!ø…²œ ¢ÅF{é®·'üvº¥µîgµÑUµg¨eµÑc'’͈º¥ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýM­øàÓFƒÈžÒGäØú…²œ ¢ÅF{é®·'üvº[Q…¾vVS¶¾4ÿCVaír/usr/home/user/ripe-prov-tests-master/Linux/./copied_pipe'ìAzX™¦}˜¹(/libexec/ld-elf.so.1’͈º¥ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./copied_pipe appid1337execbash20ÜS7[AIF¬•pd± (ýYÓOI]O˦#VBr¥Cü…<²œ ¢ÅF{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf’͈º¥ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý?ÌÚžø5HmGÊ-†x€þ…@²œ ¢ÅF{é®·'üvº‰oý©äÇU¤©A)Eǹ ’͈º¥ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýÜùäAL¡•e.;€keÒ€†²œ ¢ÅF{é®·'üvº‰oý©äÇU¤©A)Eǹ ’͈º¥ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý"müp>aO5ˆí"J„¶‚†<²œ ¢ÅF{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints’͈º¥ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý5TVË°NG…I¸U©ºEÝ„†@²œ ¢ÅF{é®·'üvºXꎩð®…\®ð@JÌ…¼â’͈º¥ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýƒŽHnFŠB`ŸVÊ ú݆†@²œ ¢ÅF{é®·'üvºXꎩð®…\®ð@JÌ…¼â’͈º¥ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ŒÀú¸²4ð +—J©‘–Ä£93µÎˆ†²œ ¢ÅF{é®·'üvºXꎩð®…\®ð@JÌ…¼â’͈º¥ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýj^SOÓÐOè„úFNK!Š†<²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7’͈º¥ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý›ôÑ_ø@³Qä£çlŒ†2²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýŠ…‡y’ìDΆ3ý”t’VžŽ†2²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý$”vq7KôŸ,Éá;|1M†2²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý—}P>TBF”™"hÀÊ!ß’†2²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýÚ +`é8G\»ûû‹âG@”†2²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý›(½›úfM†`L¶Äj­–†2²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý)y+§cBqºâÍb19u˜†2²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý~KÿWROK;®âËŽ%Ã#øš†2²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý=NèÌ;íN®Ž¢×<ᜆ²œ ¢ÅF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ’͈º¥ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý1ºåëwO¶úŒ_Ä LÉž†:²œ ¢ÅF{é®·'üvº’͈º¥ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýžâdëÿ¼F‚Ž@ã!Í‹= †:²œ ¢ÅF{é®·'üvº’͈º¥ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý xFö‰Ö]íù>Hàè.F{é®·'üvºè/F{é®·'üvº20 ÜS7[AIF¬•pd± (ýIŸŒ&nG¼³ð”¡;˜°F¢†²œ ¢ÅF{é®·'üvºxFö‰Ö]íù>Hà’͈º¥ÿð‹+aue_pipe ret_fd13ret_fd24hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý‰õS”JŸw·'VÃ|¾¤†$²œ ¢ÅF{é®·'üvºë!F{é®·'üvº’͈º¥ÿð‹+aue_fork +arg_pid1367hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1367ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýg÷Œ•Åê@‡…3ÐÄíþ– ¦†bÖœ ë!F{é®·'üvºí( ö~R¶ ~{‚~¯’͈º¥ÿð‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1366execcopied_pipe20ÜS7[AIF¬•pd± (ý«ã¹¦sÔAy—ßÐmę̀†bÖœ ë!F{é®·'üvºè/F{é®·'üvº’͈º¥ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1366execcopied_pipe20ÜS7[AIF¬•pd± (ý\äæñöfJNŒõíc¯>ª†Öœ ë!F{é®·'üvºë!F{é®·'üvº’͈º¥ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1366execcopied_pipe20ÜS7[AIF¬•pd± (ýŽ• À_’M̘›_K¬†@²œ ¢ÅF{é®·'üvºè.F{é®·'üvº’͈º¥ÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ýn[ƒ‡ 6B—„¨£F”­®†b²œ ¢ÅF{é®·'üvºí( ö~R¶ ~{‚~¯’͈º¥ÿð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý‹™|g-B¡Ü38£÷¤4°†²œ ¢ÅF{é®·'üvº¢ÅF{é®·'üvº’͈º¥ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execcopied_pipe20ÜS7[AIF¬•pd± (ý–š«j;’JîœH‚¿0.°²†@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'’͈º¥ÿð‹+aue_readèhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý b®^†Bà–Ïmýpqz´†0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uì‹‚—©ÿð‹+aue_lseek¢†,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]Ä#•—H$»~‘^À*Ŷ†²œ (F{é®·'üvº(F{é®·'üvºª‘´ý¬ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýB Ãe@IVŽV"Ý,Õ‘ ¸†bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ª‘´ý¬ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý¯)Šî¶QC®ƒ×Û%¢O»º†bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ª‘´ý¬ÿð‹+aue_write8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý[­Ö£%Dr³Oîä?Åç¹¼†$ªœ ù‹°âFzé®·'üvºŸÂF{é®·'üvºª‘´ý¬ÿð‹+aue_fork +arg_pid1369hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1369ppid1282execbash20ÜS7[AIF¬•pd± (ýå„Çî-IÁ®õ'›Ûu¨#¾†²œ ŸÂF{é®·'üvº¥µîgµÑUµg¨eµÑc'ª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¯&z:EËŠÔb³gÀ†²œ ŸÂF{é®·'üvº8: ê†<²œ ŸÂF{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confª‘´ý¬ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý©âZ Hå³ê-Ô2´šÀì†@²œ ŸÂF{é®·'üvº‰oý©äÇU¤©A)Eǹ ª‘´ý¬ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýç-ôt,»N(•³þºóMœ ŸÂF{é®·'üvº‰oý©äÇU¤©A)Eǹ ª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýу’âKwçùKî€ð†<²œ ŸÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsª‘´ý¬ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý=…SêsMaˆµ§`ìºaò†@²œ ŸÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼âª‘´ý¬ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýTOÕ[*Í@V–î~ = É0ô†@²œ ŸÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼âª‘´ý¬ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýå/Jw $EA‰–±oåD2sö†²œ ŸÂF{é®·'üvºXꎩð®…\®ð@JÌ…¼âª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý"îƒ^aEˆ«É©÷«áø†<²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8ª‘´ý¬ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýÙgîŽþZOûµ¡ºä<;^xú†2²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý‡§ÇÓéJB¡—ÀÔ«ìN8™3"Ô|]Hµþ†2²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýº"5eväFŸ¾/æ¿Ò|Ú³€‡2²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý«¦Ñ*Kµ<{gîK‚‡2²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýíÇ +§H§®ËÌè —„‡2²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý½p»/ˆO¢¤#ÞØf.lN†‡2²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÐÁç' ÐN°ü©J¶!ꌈ‡2²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý‰5²òáAÔ–tE·Ö_ªFŠ‡²œ ŸÂF{é®·'üvºâpÑ +m.×W®mAs××¼›ª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýIŠÒâ$K¿7ä¾{$4 +Œ‡<²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8ª‘´ý¬ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýSã¥:ÓJO²§e:”Ž‡2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý™î Dí¸I,ÙÈÏ,Ó­‡2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ŠšûñÙU ¼3BÔ§9IãµTs’‡2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýJ·FöVDšŽûßZ;˜i”‡2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý4ýÄĵ™LP³#P2aϼ–‡2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýi·Ùj‚Ej"¸ŒC>7ɘ‡2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýîÿÙG—µÕ[kÞ5òTš‡2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¤£A±«qF¯Ÿ+•ëÛËÁYœ‡2²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýxhèp5E›šÈtæâ,ž‡²œ ŸÂF{é®·'üvºm/"P;=\»P½¤¬=P_ª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý“iÜ^ZºL¹y2*ˆÑ¤ ‡<²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1ª‘´ý¬ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýèç°¯Á-L˸oûëäø¢‡2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÄaiùDƒ‚4kë•Ä¤‡2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýáð4nRCBz3ÞygZ¦‡2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýg98¬îöEž’qÃO´…!¨‡2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¥†¥ÿJK4±eðŒrX8ôª‡2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¸ªê!t`CAƒéÄçÕ嬇2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¯'’ZÓ‡@ñ¢ÊPo§î´[®‡2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýƒ]ýLK<ŠF@”^ÒD°‡2²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý[¨alUKN^³ÁN.ÚÈ4s²‡²œ ŸÂF{é®·'üvº"‘ûŽdkÇ[«d.µ[ÇÕª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýô9 [ÆA·wÃìI³^´‡<²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ª‘´ý¬ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýó¥ÂÚÈMŒ²©•CÖ|Œ|¶‡2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý^rYÒeGO±\“«òy†¸‡2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýCÒ§–C[O ²:®¼é ·žº‡2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýƒÔOÛñäI™Ê3Fµj¼‡2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýi A·³·BÚœJ7ñ»DŽ¾‡2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýð‡—Ã@Û‹ÛN’ºµ8VÀ‡2²œ ŸÂF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÜ,øvê‡$²œ ŸÂF{é®·'üvº ”›F{é®·'üvºª‘´ý¬ÿð‹+aue_fork +arg_pid1370hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1370ppid1337execbash20ÜS7[AIF¬•pd± (ýp”@ý¡Dõ¯¨œ©š™œì‡@²œ ŸÂF{é®·'üvº8: Më„[> EÜùÛŠˆ@àœ  ŸF{é®·'üvºXꎩð®…\®ð@JÌ…¼âª‘´ý¬ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýnô§ï€DØ™4êÆ~ð)Œˆàœ  ŸF{é®·'üvºXꎩð®…\®ð@JÌ…¼âª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýTÌÇùL‘“^fO¹¨Žˆ<àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ª‘´ý¬ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýM®˜¤ËçF}¤€Š#Φ6Ùˆ2àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýÝš±‹J¾žqBÝÀ_ë’ˆ2àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýÔ?¿w{Mß¹@n8K}Ss”ˆ2àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýic•¸ûHÇ’Ó +½}Ékü–ˆ2àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýJë©ŠkCt‡3iÍUS€ë˜ˆ2àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýX Åó¯üIP€§ž«87?üšˆ2àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"–Âü#›LS yLâ–¡ÔNŽœˆ2àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ý#.äÐðÒEÈ‘È¢zï~žˆ2àœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýà˲}ÔN«µmMž?ÈÉÈ ˆàœ  ŸF{é®·'üvºÞA`ì•øËQ¸•bxñË"œª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369exec +sleep20ÜS7[AIF¬•pd± (ýËçÇÖNF#´ül¼¯b#¢ˆ:àœ  ŸF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1369exec +sleep20ÜS7[AIF¬•pd± (ý†zj²P­MK³Öû:žŽ +¤ˆ:àœ  ŸF{é®·'üvºª‘´ý¬ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1369exec +sleep20ÜS7[AIF¬•pd± (ý+à¤dGW¥¦Yq&í¦ˆ@Öœ  ”›F{é®·'üvº‰oý©äÇU¤©A)Eǹ ª‘´ý¬ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýœ{÷WËA9¹+y/LVª¨ˆÖœ  ”›F{é®·'üvº‰oý©äÇU¤©A)Eǹ ª‘´ý¬ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý š,ÂG4÷êîÄR몈<Öœ  ”›F{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsª‘´ý¬ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý?k{&Bù¨ï(†‹¾l¬ˆ@Öœ  ”›F{é®·'üvºXꎩð®…\®ð@JÌ…¼âª‘´ý¬ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýÙ†kêD]D†FËù÷s+®ˆ@Öœ  ”›F{é®·'üvºXꎩð®…\®ð@JÌ…¼âª‘´ý¬ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýûÞªZBJ£²»õéIŸŽs°ˆÖœ  ”›F{é®·'üvºXꎩð®…\®ð@JÌ…¼âÀ↭ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý$WØö.‚@=©ÚŸÂk¿á ²ˆ<Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7À↭ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý½½•zº”Fݹ¿÷.LM^´ˆ2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýþ¿!/çFѪ6GÏoA¶ˆ2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýÛ7R)[FJ·Š~‡4¦Â¸ˆ2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýø‡%Y·KCD˜ )>¢d8ºˆ2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý[zà4³ÊIf™1ô¬ñ뼈2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý°âôK¾sAƒ§1œÓÎO¤¾ˆ2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý€0=².HÆ¿¦ÚELCªÀˆ2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý±F´®8JP|6±2ëö3ˆ2Öœ  ”›F{é®·'üvºÞA`ì•øËQ¸•bxñË"œÀ↭ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ý=º”ŽlN“8 Rõ‡KĈ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨Æ¼ö°ÿð‹+aue_lseekÊß-hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôNó›T@§ˆ4‰\ƈàœ  ŸF{é®·'üvº ŸF{é®·'üvº€ÞùÄ´ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1369exec +sleep20ÜS7[AIF¬•pd± (ý&¥ëÝHVÓ5jÚ¾>cȈ<²œ ŸÂF{é®·'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.db€ÞùÄ´ÿð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý{ÏN¬ËJ›û¸Bʈ@²œ ŸÂF{é®·'üvº–Ø%™wyïR¹wT’ï9€ÞùÄ´ÿð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýž³åMñyG3µÝ;9õ“̈@²œ ŸÂF{é®·'üvº–Ø%™wyïR¹wT’ï9€ÞùÄ´ÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýX!Ñè‚MD2­Ž +°à +Έ@²œ ŸÂF{é®·'üvº–Ø%™wyïR¹wT’ï9€ÞùÄ´ÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý,:§ñUtEÉ»êßKÅcPЈ²œ ŸÂF{é®·'üvº–Ø%™wyïR¹wT’ï9€ÞùÄ´ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÃÌÆ×Fç™ëQ™fÌÒˆ@²œ ŸÂF{é®·'üvº8: ÌI?°((„N³Düˆ:àœ :Ÿ0F{é®·'üvº€ÞùÄ´ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ýÿw˜•³õII¶ûDÈËUbxþˆ:àœ :Ÿ0F{é®·'üvº€ÞùÄ´ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ýô[5q°¤C’Ãg5Ž€’€‰àœ :Ÿ0F{é®·'üvº:ññF{é®·'üvº€ÞùÄ´ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ý Þh„A1Cf˜?/HPE¾‚‰àœ :Ÿ0F{é®·'üvº:õ²F{é®·'üvº€ÞùÄ´ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ýmÝBâLØŠõÔ˜å©9„‰bàœ :Ÿ0F{é®·'üvºí( ö~R¶ ~{‚~¯€ÞùÄ´ÿð‹+aue_write^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ýF Þ—}‰U’•’1 +lΫ::1äÅ::1¬M20ÜS7[AIF¬•pd± (ýïÅ.®Ã'Mš¥Â4fÀCÀ†‰àœ ;ÌF{é®·'üvºF Þ—}‰U’•’1 +lΫ€ÞùÄ´ÿð‹+20ÜS7[AIF¬•pd± (ýn¡ç}_ašôÕ•û::1¬M::1äÅ20ÜS7[AIF¬•pd± (ýÔö2Wþ&Kr·ÖQ¢CЫöˆ‰Þš ¡G$F{é®·'üvºn¡ç}_ašôÕ•û€ÞùÄ´ÿð‹+20ÜS7[AIF¬•pd± (ý"šLëIg¼ò–l£Š‰Jàœ :Ÿ0F{é®·'üvº;ÌF{é®·'üvº€ÞùÄ´ÿð‹+aue_sendtoret_msgid506hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369address::1port4950execdatagram_client20ÜS7[AIF¬•pd± (ý"âêÈÝžN¶M¼q…VÏcŒ‰àœ :Ÿ0F{é®·'üvº;ÌF{é®·'üvº€ÞùÄ´ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ý^.JÿMÊUÿŸª«µÑì‡127.0.0.1žÎ127.0.0.1¬M20ÜS7[AIF¬•pd± (ý^¢+“_Jÿ½5m2»Ž‰àœ ;¿F{é®·'üvº^.JÿMÊUÿŸª«µÑ쇀ÞùÄ´ÿð‹+20ÜS7[AIF¬•pd± (ýóWªWZE^œÏ”®Wó•‰Jàœ :Ÿ0F{é®·'üvº;¿F{é®·'üvº€ÞùÄ´ÿð‹+aue_sendtoret_msgid507hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369address127.0.0.1port4950execdatagram_client20ÜS7[AIF¬•pd± (ýŠDv³¥MW•ˆÅ -w°Ê’‰àœ :Ÿ0F{é®·'üvº;¿F{é®·'üvº€ÞùÄ´ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ýÈé-ÎŽA‚b^m®Pv§”‰àœ :Ÿ0F{é®·'üvº:Ÿ0F{é®·'üvº€ÞùÄ´ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1369execdatagram_client20ÜS7[AIF¬•pd± (ýÍ[eÉ.@”\¦ö‹9Ô–‰DÖœ  ”›F{é®·'üvº¡G$F{é®·'üvº€ÞùÄ´ÿð‹+aue_recvfromret_msgid506hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1369address::1port +61810execdatagram_server20ÜS7[AIF¬•pd± (ýj=8£‰¼OåüŸ*ˆÿ˜‰bÖœ  ”›F{é®·'üvºí( ö~R¶ ~{‚~¯€ÞùÄ´ÿð‹+aue_write>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýb´'š…G´¢ëqUÉ–µ9š‰bÖœ  ”›F{é®·'üvºí( ö~R¶ ~{‚~¯€ÞùÄ´ÿð‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýÄœ¦®ÈèCz¯Ò´3j2Q‰œ‰Öœ  ”›F{é®·'üvº¡G$F{é®·'üvºŽ¢äÉ´ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýKsÈ¢PHÞ©^K ¤™€ž‰Öœ  ”›F{é®·'üvº ”›F{é®·'üvºŽ¢äÉ´ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1369execdatagram_server20ÜS7[AIF¬•pd± (ýªªF@@uK’”0›npl׌ ‰@²œ ŸÂF{é®·'üvº8: íTMž¢žNÈŽß܉ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+20ÜS7[AIF¬•pd± (ý=p]kZF ¼×ÿ®ý<ØìÚ‰@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹Ì3fp@ܸy튋‚wà‰ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+20ÜS7[AIF¬•pd± (ý;mÆ0ˆJ€™©¥p>ýÏ6Þ‰@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýIh[ú¯(DˆX*rß^ä‰ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+20ÜS7[AIF¬•pd± (ýé7t0N΋öfDâ‰@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4®Ä«Kš˜¶> +u§›¢è‰ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+20ÜS7[AIF¬•pd± (ý®õ wHŒ™É…q»ßxæ‰@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤Sšß¥F'¿}`Ã×Íê‰:‚œ Ê +ÙKFzé®›'üvº¤Ú¶ƒµÿð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0…Wå^O¦¨*z㈂êì‰@✠Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤Ú¶ƒµÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸžÓ°ANªK4ÃÌQ)Ìî‰@✠Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýýÆÑð²ïOó®.ÐÂÌÎ>ëð‰@✠Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadÀKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤\º0ÖaG‹Ô·o}cÊò‰b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¤Ú¶ƒµÿð‹+aue_writeªLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£ñÔÔB¬ ´’¾Bmô‰b✠Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤Ú¶ƒµÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý .ŒdGÜ“A›Ž²ÌBlö‰@✠Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤Ú¶ƒµÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýØû§ãs9D¥—pÂ~ +àø‰@✠Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"žú;ð2J‘•LþÀ„–“†ú‰@✠Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ú¶ƒµÿð‹+aue_pread–MhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤ã¬P°àLÕˆ±Íu¥½Ð„ü‰b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¤Ú¶ƒµÿð‹+aue_write€NhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«CÒ;~MCR·Æ­‚ªrþ‰b✠Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤Ú¶ƒµÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~’4ñXBâ¼ÙØB/k€Š@✠Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤Ú¶ƒµÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4‡sÓªHñ¬‹„¸°HÀ–‚Š0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ûþ͸ÿð‹+aue_lseek¬ó.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑfByÈhDJ½õ²C'ë„Š²œ ;<ŸF{é®·'üvº;<ŸF{é®·'üvºî˜Þ‘¼ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýEg©ØJ‡£MhRøDѬ†Šbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯î˜Þ‘¼ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýPôépj“E–„9§+|7¥ˆŠbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯î˜Þ‘¼ÿð‹+aue_write,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý=lŽ@.—“_Y®òŠŠ$ªœ ù‹°âFzé®·'üvºÖÈF{é®·'üvºî˜Þ‘¼ÿð‹+aue_fork +arg_pid1374hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1374ppid1282execbash20ÜS7[AIF¬•pd± (ý³„q\&Eñ£Â5^ÏçKŒŠ²œ ÖÈF{é®·'üvº¥µîgµÑUµg¨eµÑc'î˜Þ‘¼ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý©—ç\NFS…ƒ' jòÁ‹ŽŠ²œ ÖÈF{é®·'üvºõÌ¥HA˜Æ]˜A›Ë­Æ-Er/usr/home/user/ripe-prov-tests-master/Linux/./direct_pipe'ìAzX™¦}˜¹(/libexec/ld-elf.so.1î˜Þ‘¼ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./direct_pipe appid1337execbash20ÜS7[AIF¬•pd± (ý„Oü<[B¿…öÙî è;Š<²œ ÖÈF{é®·'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confî˜Þ‘¼ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý¼NêÑŽXO牗 +V™vV’Š@²œ ÖÈF{é®·'üvº‰oý©äÇU¤©A)Eǹ î˜Þ‘¼ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýE5dI§JÐ5ëMæq³”Š²œ ÖÈF{é®·'üvº‰oý©äÇU¤©A)Eǹ î˜Þ‘¼ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýöŒÃK0AÐŽà<¼´{–Š<²œ ÖÈF{é®·'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsî˜Þ‘¼ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý6Y §If§^÷lð+æD˜Š@²œ ÖÈF{é®·'üvºXꎩð®…\®ð@JÌ…¼âî˜Þ‘¼ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýd8s¦QFô€ß½ÕXðwšŠ@²œ ÖÈF{é®·'üvºXꎩð®…\®ð@JÌ…¼âî˜Þ‘¼ÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý ¿·®BH ¬ó¹ àXöùœŠ²œ ÖÈF{é®·'üvºXꎩð®…\®ð@JÌ…¼âî˜Þ‘¼ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý0ø O©FN@WeÜØßžŠ<²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7î˜Þ‘¼ÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýt Ô£Aп!ì¨ÃFÝU Š2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýLZ ö5A^¢ã>×Öõ¼¢Š2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýe­Y~8H´£%… ʤŠ2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý á¥-âNp—Ñÿ5Ýfÿ¦Š2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýµ†½äM˪áÓIóÏú¨Š2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýñ:ƒúõJ –ûªgCòªŠ2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýˆ(6‘sÞES‘&F©2°!¬Š2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýX÷þýOzŠŠ òø®Š2²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýÇ3,WN ‘² Žã°Š²œ ÖÈF{é®·'üvºÞA`ì•øËQ¸•bxñË"œî˜Þ‘¼ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýNŽ4B0ˆ@Ô¿dµŽêÿ@²²Š:²œ ÖÈF{é®·'üvºî˜Þ‘¼ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýè¼—&;C€² ½q_´Š:²œ ÖÈF{é®·'üvºî˜Þ‘¼ÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý "q¥"’¸YDŠª?‘ÁÖZƒF{é®·'üvºÖZƒF{鮸'üvº20 ÜS7[AIF¬•pd± (ý—GÉá~tMÓ¼4t©b?궊²œ ÖÈF{é®·'üvº"q¥"’¸YDŠª?‘Áî˜Þ‘¼ÿð‹+aue_pipe ret_fd13ret_fd24hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýe±/^4 Iô†¡Z©’y¸Š$²œ ÖÈF{é®·'üvºÖ]‹F{鮸'üvºî˜Þ‘¼ÿð‹+aue_fork +arg_pid1375hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1375ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýĹNáÈ=Oš¦wâ?Ë£”ºŠbÖœ Ö]‹F{鮸'üvºí( ö~R¶ ~{‚~¯î˜Þ‘¼ÿð‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1374execdirect_pipe20ÜS7[AIF¬•pd± (ý©Ä]eÞEÛ–{¡D#’¼ŠbÖœ Ö]‹F{鮸'üvºÖZƒF{鮸'üvºî˜Þ‘¼ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1374execdirect_pipe20ÜS7[AIF¬•pd± (ýëïÙ!¼Hû¿ÆÕ·³˜¾ŠbÖœ Ö]‹F{鮸'üvºí( ö~R¶ ~{‚~¯î˜Þ‘¼ÿð‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1374execdirect_pipe20ÜS7[AIF¬•pd± (ýö–Zp|Eóo{rXÀŠÖœ Ö]‹F{鮸'üvºÖ]‹F{鮸'üvºî˜Þ‘¼ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1374execdirect_pipe20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"Œ üUÌêßjÞMº°ÂLjڼnõŠ@²œ ÖÈF{é®·'üvºÖZƒF{é®·'üvºî˜Þ‘¼ÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý º(âc¨K°œ-—î‚+ÿÄŠb²œ ÖÈF{é®·'üvºí( ö~R¶ ~{‚~¯î˜Þ‘¼ÿð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý~¬cêÅ£N8¤ZRÔà&ÆŠb²œ ÖÈF{é®·'üvºí( ö~R¶ ~{‚~¯î˜Þ‘¼ÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ý–ŸÚÈB’eÁ`Æ8¹–ÈŠ²œ ÖÈF{é®·'üvºÖÈF{é®·'üvºî˜Þ‘¼ÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execdirect_pipe20ÜS7[AIF¬•pd± (ýÄ þ†™ëI¬š³²IïÊŠ@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'î˜Þ‘¼ÿð‹+aue_readœhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý4>»€«M4‘NÁ·-9ÌŠ0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'î˜Þ‘¼ÿð‹+aue_lseek‚hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýú`ï¿MÑKG¾‡ši__`Ί$ªœ ù‹°âFzé®·'üvºÖEF{鮸'üvºî˜Þ‘¼ÿð‹+aue_fork +arg_pid1376hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1376ppid1282execbash20ÜS7[AIF¬•pd± (ý))w—"A˜·Ç$jyzÀЊ²œ ÖEF{鮸'üvº¥µîgµÑUµg¨eµÑc'î˜Þ‘¼ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý^Àx)Âí@z’Æ^…IqHÒŠ²œ ÖEF{鮸'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1î˜Þ‘¼ÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ýr0c|+öKù€±°Õ ¿aÞÔŠ<²œ ÖEF{鮸'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confî˜Þ‘¼ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý“qwhPJÙþ/E¯¨ÖŠ@²œ ÖEF{鮸'üvº‰oý©äÇU¤©A)Eǹ î˜Þ‘¼ÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýí­¼v÷Fø¸°~>Ö{&ØŠ²œ ÖEF{鮸'üvº‰oý©äÇU¤©A)Eǹ î˜Þ‘¼ÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýt™CŒ4Eˆø1`@ €ÚŠ<²œ ÖEF{鮸'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsî˜Þ‘¼ÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý¬³$ÚK™·e“ÎWz8ÜŠ@²œ ÖEF{鮸'üvºXꎩð®…\®ð@JÌ…¼âî˜Þ‘¼ÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÃØ•ãG€ŽV K@ÕÚ˜ÞŠ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UØçžÀÿð‹+aue_lseekÜÂ/hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀ'ÅÍ 3JÈ¿ýˆTUÏàŠ²œ ÖEF{鮸'üvºÖEF{鮸'üvºªÛÙÃÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýú :cׇB¡o]yðÕöâŠbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ªÛÙÃÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýHw|”KG¦Mš¬$™NäŠbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯ªÛÙÃÿð‹+aue_write2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýÉʬé$êB–¢ÕúÐ+;æŠ$ªœ ù‹°âFzé®·'üvºq¨F{鮸'üvºªÛÙÃÿð‹+aue_fork +arg_pid1377hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1377ppid1282execbash20ÜS7[AIF¬•pd± (ýœ–°ïh?C©¬âþ »¬—j芲œ q¨F{鮸'üvº¥µîgµÑUµg¨eµÑc'ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÌ~¡ß‰J˜ÕQ:À£êŠ²œ q¨F{鮸'üvº8”HH}æT¦}d5Àx/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ªÛÙÃÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineH/usr/bin/env bash ../Bash/named.sh appid1337execbash20ÜS7[AIF¬•pd± (ý¿p@5ãNß¡SCV”Ëë¹ìŠ<²œ q¨F{鮸'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýœwè ,îDD»û"ùdXÌsîŠ@²œ q¨F{鮸'üvº‰oý©äÇU¤©A)Eǹ ªÛÙÃÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý/’¹ç¥¨D"Šè8¾QýPÂðŠ²œ q¨F{鮸'üvº‰oý©äÇU¤©A)Eǹ ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýˆž=¿]4LT’Xà +„—òŠ<²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýd­¼¿å&L¬]úäHH\ôŠ@²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý¢VŸSïB–F¦Í3˜äöŠ@²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý+t/ÕL@² L\/‘²øŠ²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýÏËÀns†Hè»È¯9Ìac¯úŠ<²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ªÛÙÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýË` ‚2cBR°]¤EÛ³œŒüŠ2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý÷ùO KPœÁDC—ØäþþŠ2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý#0ÁÛ¬@á„/—‡8·ì€‹2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýG‰Ø\{GŒ’‰À.\9$‚‹2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý·µs|ŠAL˜‡¼u€ù⬚‹<²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýUSóoU@0 »Úof{œ‹@²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÁõKÚÆ´E…uãpž‹@²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý§!áõY˜Fj¥X—Ï0€_9 ‹²œ q¨F{鮸'üvºXꎩð®…\®ð@JÌ…¼âªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýöÁæ;HüšÝ/ÝOQ ;¢‹<²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8ªÛÙÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý¯Ì^ÁÚžG7¾º d^›P1¤‹2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý[Ç&µÅD>£Ä]è€xg¦‹2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýò®ù7ÀN'½IÉ„zÄpŸ¨‹2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý›Ó%í ŽJä¦Þ)Í0Ù¡ª‹2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý·ùof+.@··ì·8b‘7¬‹2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý­ŒyÂ÷pJ꬀  H–?®‹2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ým3C $!M «æ`ÒÔX/û°‹2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý°V&j£FBq‹õ˜ÄN®²‹2²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý` sœøòO¿1ð +¯ÖdŠ´‹²œ q¨F{鮸'üvºâpÑ +m.×W®mAs××¼›ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýò¤ÖF-Ë£öûⶋ<²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8ªÛÙÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý“2DEB ™{ÊyÔ¯+¸‹2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýίIQL ¿®á¢ dt¤º‹2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý„\J³Ì‹G¿±§µ[W*›U¼‹2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýE bCd‹ BÓWž¹T¾‹2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý?B¡°#EF¤È¿“C#¤VÀ‹2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý>ù~OßL÷£æ{L4¶ù9‹2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý+ÏùtIìˆÄ|/ÚÈÄ‹2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý ZÀdŽC™¾}­îVJÝÆ‹2²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýbýî©GÞ¯_¶Ww«¿vÈ‹²œ q¨F{鮸'üvºm/"P;=\»P½¤¬=P_ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýþ]kD‹›™hÖ’Íþ\Ê‹<²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1ªÛÙÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýšÍF”2º@ç¿×_Õí‚ø²Ì‹2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ŒÎûÆÿX'I MwµœGþ[غ΋2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýòÚ#„?K ¶ç´8‡gЋ2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý’ºß¢éÚGá–×J!ñ/´Ò‹2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýà(6“IÛ@Ù€)MÕŠ,Ô‹2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý™hs¥çêC»¦ó¬‚t‹Ö‹2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýEk.n´˜O; Ø¦*zVÉ:Ø‹2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ým2Ò×\HÎŽ4ê³JZCEÚ‹2²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý%•ÞŠ½åD™¼:øâh¥‚ÓÜ‹²œ q¨F{鮸'üvº"‘ûŽdkÇ[«d.µ[ÇÕªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýæVU,r©Kö©Ñ=”TªÞ‹<²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ªÛÙÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýô·¦¥Î´H)³YVõA’à‹2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý1>Ñö—O‹®Ü=üKTMâ‹2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý@„r¡ºHn­¥Ó2{‹·ä‹2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý×ò®Ö.NjƒhƒHð:5Žæ‹2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý|V,ÿ6J—¨NÄk_€`ûè‹2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýåuÐ Lᤤ$Éâ×:ê‹2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ývdµÙáNO«ï,ë~¸ì‹2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý-Í…ì¾¹AÞœ›ãžvúâýî‹2²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý?4¶½·÷K&²QÀîʆ\ð‹²œ q¨F{鮸'üvºÞA`ì•øËQ¸•bxñË"œªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýâ¯Åò×K–¦hªúìîÄEò‹:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýjï3VQÀIá•Äv£ã«’æô‹:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÍÂUQ;dKF¾é$ãgŽ¡ö‹:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÜ<…Œåú@U”¼D0Vç)Yø‹:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý–d¤ÖÝ×G»|ÚÒâ‹"ú‹:²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÏ­fß,B¡± VÎÖÌ$ü‹<²œ q¨F{鮸'üvºí( ö~R¶ ~{‚~¯/dev/ttyªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýÏY”0>A…ž +QúœÆƒþ‹²œ q¨F{鮸'üvºí( ö~R¶ ~{‚~¯ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýre"VsƒA‘Ž †gÕâzG€Œ<²œ q¨F{鮸'üvº8”HH}æT¦}d5Àx/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.shªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý&Îs9¾@}œ«äÐ(§p®‚Œ0²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý×$EïO„9m®Õ[’„Œ@²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýcßx ‚›Dñ¢ Yþ†Œ0²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý9àK±lU@>€ væ,ƒ–ˆŒ²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýèÄ‹}ˆI.¬Sì‰C«³ŠŒ"²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýé?éK›Ü-V=ÅŽnŒŒ"²œ q¨F{鮸'üvºªÛÙÃÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÝ°|(EEŽPôÓ†ŽŒ0²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýH7…‘íI¾’Î1ÀßõlŒ@²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_read¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý_v`ªREÁµ‹NEsôÝÖ’Œ0²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_lseekúhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýMCþÃYK8’VÓ/XZ플$²œ q¨F{鮸'üvºrAF{鮸'üvºªÛÙÃÿð‹+aue_fork +arg_pid1378hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1378ppid1337execbash20ÜS7[AIF¬•pd± (ýÛ.[­QD÷¤Ë-d)¡«–Œ@²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_readBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý¹$l’&‡F'¿á7þó™ö˜Œ0²œ q¨F{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_lseekžhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý>R('ûÕN¯X°"ÎÑ'jšŒ$²œ q¨F{鮸'üvºrLFF{鮸'üvºªÛÙÃÿð‹+aue_fork +arg_pid1379hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1379ppid1337execbash20ÜS7[AIF¬•pd± (ýxøÇ©ÏF9žÅÜê£T'œŒÖœ rAF{鮸'üvº8”HH}æT¦}d5ÀªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1377execbash20ÜS7[AIF¬•pd± (ýUÌ—,È@‹èe+¹¬ãžŒ<Öœ rAF{鮸'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nullªÛÙÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execbash20ÜS7[AIF¬•pd± (ýú=ŠM&LŽ›½b€º¡ ŒÖœ rAF{鮸'üvº3P ÓK€X‹Ó«·Ø€‘^ªÛÙÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execbash20ÜS7[AIF¬•pd± (ýÞœÁCT ïÀwhb~¢Œàœ rLFF{鮸'üvº8”HH}æT¦}d5À‚ëÕãÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1377execbash20ÜS7[AIF¬•pd± (ý#!+sˆ¥F¨´D>·(€Ê°¤Œàœ rLFF{鮸'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1‚ëÕãÃÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1377execbash20ÜS7[AIF¬•pd± (ý)÷í[LƒH⮪ƒ…g‡¦Œ<àœ rLFF{鮸'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf‚ëÕãÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ýx$R€ƒ?BÛAåܨ ¨ŒÖœ rAF{鮸'üvº°¼OhÅ‘¦V‘ÅÜö¶¦ß¥t/usr/home/user/ripe-prov-tests-master/Linux/./named_writer'ìAzX™¦}˜¹(/libexec/ld-elf.so.1‚ëÕãÃÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine ./named_writer appid1377execbash20ÜS7[AIF¬•pd± (ý“×YŸH¶b,:z¢@ªŒ<Öœ rAF{鮸'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf‚ëÕãÃÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýhјu"Jè–‘á—'¬Œ@àœ rLFF{鮸'üvº‰oý©äÇU¤©A)Eǹ ‚ëÕãÃÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377exec +sleep20ÜS7[AIF¬•pd± (ý&·bÖxG$Š:Š$K>n®Œ@Öœ rAF{鮸'üvº‰oý©äÇU¤©A)Eǹ ‚ëÕãÃÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý²” æDÛI»b™Ê:ÒCgŽö°¬z®]#¸ŒÖœ rAF{鮸'üvºXꎩð®…\®ð@JÌ…¼â‚ëÕãÃÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýceÓ;ÊG œ![¨”o<ºŒ<Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7‚ëÕãÃÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýu¸>mÿL˜±Zz}П+ ¼Œ2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýÕ°†féÔJ¥ Ô¥"Ði羌2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýÛiÙ-(¸L4¶"ÌxÄlÀŒ2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý5 îWëAOžGÐQš# 0ÂŒ2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ýš„¸Ä*ŽM–±qÚg qÄŒ2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý/gzóØKO)‡ åv]JÆŒ2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý«Í)À€1L¢°D^± ê2ÈŒ2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý6Çm+F€§M›Øryð*ÊŒ2Öœ rAF{鮸'üvºÞA`ì•øËQ¸•bxñË"œ‚ëÕãÃÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1377execnamed_writer20ÜS7[AIF¬•pd± (ý‰g÷chostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýNïýø·Cu¨z65 +ÛÖ®øb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆÜÉêÒÿð‹+aue_write´?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðx|%Ü€LP€éé²±j*öúbæœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆÜÉêÒÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýö§ymƆMÒ“ÃH Ðc|ü@æœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀYMÙz M®úæÝòzßÎþ@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}¿QiCí¸‹ h =(€Ž@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_pread¤NhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠ½šŠAÜòª«fl‚Žb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÆÜÉêÒÿð‹+aue_writeŽOhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýL`høF鹆»¿Ì„Žbæœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆÜÉêÒÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=mö}OTµG•\çšÑF†Ž@æœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦uuÏå«Lˆž¾P1¹þ+ˆŽ@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜(7¦ãÅC€ãû*Ä>–ŠŽ@æœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÜÉêÒÿð‹+aue_pread¦LhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ývr´ÒÍNZXAÑžpÕŒŽbæœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆÜÉêÒÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOyÝÍDëAœ%Ús}†S׎Ž@æœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÜÉêÒÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýA”Î4˜üN¥¨'TgˆŸÙ£ŽJæœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÆÜÉêÒÿð‹+aue_sendtoà +ret_msgid520hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]pHbLŒ·Ùo‰â®‘Ù’ŽDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆÜÉêÒÿð‹+aue_recvfromà ret_msgid520hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý@Õî!YKw««ÔH;˧V”Žbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÆÜÉêÒÿð‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýäîÓ.oÐB­¢˜*”Z²ó–Ž²œ ÷AF{鮹'üvº÷AF{鮹'üvº´‡¯ôÒÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý’N‰Ø0×Lz°)‡¿€™õ˜Žbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯´‡¯ôÒÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý„õ¦ä€Fú‚ÛgÙÄ´ŒþšŽbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯´‡¯ôÒÿð‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý?k)pK„ˆœB½Ä圎$ªœ ù‹°âFzé®·'üvº¨‘F{鮹'üvº´‡¯ôÒÿð‹+aue_fork +arg_pid1382hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1382ppid1282execbash20ÜS7[AIF¬•pd± (ýE.À(ƒXGÆ·±8~R*M†žŽ²œ ¨‘F{鮹'üvº¥µîgµÑUµg¨eµÑc'´‡¯ôÒÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýèÕ¤*G¸~lßü£Õ Ž²œ ¨‘F{鮹'üvº~ì[y*UVªy›#U´Qn/usr/home/user/ripe-prov-tests-master/Linux/./shm_exfil'ìAzX™¦}˜¹(/libexec/ld-elf.so.1´‡¯ôÒÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./shm_exfil ppid1337execbash20ÜS7[AIF¬•pd± (ýrí®°%SMæŠQ€~äÜÇ„¢Ž<²œ ¨‘F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf´‡¯ôÒÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýzûÔd»G'”¤g8_?“¤Ž@²œ ¨‘F{鮹'üvº‰oý©äÇU¤©A)Eǹ ´‡¯ôÒÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýôØžíVFL˜·æÌìþ‹«©¦Ž²œ ¨‘F{鮹'üvº‰oý©äÇU¤©A)Eǹ ´‡¯ôÒÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýð2Ž· +SG-­Mv¡äN¶å¨Ž<²œ ¨‘F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints´‡¯ôÒÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýäÜS- KPŠÊþ™ÊªŽ@²œ ¨‘F{鮹'üvºXꎩð®…\®ð@JÌ…¼â´‡¯ôÒÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ý£¸úÉ@£˜ÌY¬­$“¬Ž@²œ ¨‘F{鮹'üvºXꎩð®…\®ð@JÌ…¼â´‡¯ôÒÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ý8j:RE*„MšÆå‘È®Ž²œ ¨‘F{鮹'üvºXꎩð®…\®ð@JÌ…¼â´‡¯ôÒÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýûþ óOº‘Ð¥m*e°Ž0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®…ðÿÖÿð‹+aue_lseekÀµ2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏN¸ÅÇD;<9ó€I²Žb²œ ¨‘F{鮹'üvºí( ö~R¶ ~{‚~¯Öå’ÄÚÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýb«¶SUCü©Rîâj¿{î´Ž²œ ¨‘F{鮹'üvº¨‘F{鮹'üvºÖå’ÄÚÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execshm_exfil20ÜS7[AIF¬•pd± (ýã£ÙÜ·*Di›ÂiÌá̶Ž@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Öå’ÄÚÿð‹+aue_read– hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýý»=žœBò—Rÿ»iÜR€¸Ž0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'Öå’ÄÚÿð‹+aue_lseekˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýË Pæ]J¶ T÷;Ê´9ºŽ$ªœ ù‹°âFzé®·'üvºD¯ +F{鮹'üvºÖå’ÄÚÿð‹+aue_fork +arg_pid1384hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1384ppid1282execbash20ÜS7[AIF¬•pd± (ýáŠ!mGG˜5æàÒø‡¼Ž²œ D¯ +F{鮹'üvº¥µîgµÑUµg¨eµÑc'Öå’ÄÚÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¹FqÀãBîµ1›ÜŠ‹‡¾Ž²œ D¯ +F{鮹'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Öå’ÄÚÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ý ,1ˆ ÄHÒ‹,Ž¶äVÃÀŽ<²œ D¯ +F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÖå’ÄÚÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýµÄyÁiH¬¶ÐIhfÿ+îÂŽ@²œ D¯ +F{鮹'üvº‰oý©äÇU¤©A)Eǹ Öå’ÄÚÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý8Ú¾M7K-Ÿ„¾½V¦ÄŽ²œ D¯ +F{鮹'üvº‰oý©äÇU¤©A)Eǹ Öå’ÄÚÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý÷ÀNcµLù¿\´’@ÃæÆŽ<²œ D¯ +F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÖå’ÄÚÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýRÿ[»ˆüOq’~p[çÍ@áÈŽ@²œ D¯ +F{鮹'üvºXꎩð®…\®ð@JÌ…¼âÖå’ÄÚÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÔ^8ªuA!¨!TV™zÊŽ@²œ D¯ +F{鮹'üvºXꎩð®…\®ð@JÌ…¼âÖå’ÄÚÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýâ|-êÃðGb«J½Ùî-ÒÌŽ²œ D¯ +F{鮹'üvºXꎩð®…\®ð@JÌ…¼âÖå’ÄÚÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý77ì¨ÉL©½¼âæKIÎŽ<²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Öå’ÄÚÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý÷À+ƒN–°Õo‡ìΫÐŽ2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý˜=zJÂG´µa°I1ØÒŽ2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýñ ˜v|CÛ‰»è÷5ÎkÔŽ2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý^£…B®½8ýAØ|ÖŽ2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýºÄÌâ—æFX•(:Â؎2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý9®OÖÅK ­¯p¾òñ:ÚŽ2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÉ(‡Þ(FKR³ãèTò›$ÜŽ2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÛS“º@N¾~¦œŠÞŽ2²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýUÙ uù K½³ŠR,àŽ²œ D¯ +F{鮹'üvºÞA`ì•øËQ¸•bxñË"œÖå’ÄÚÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýOý” ³"Kê½Û³W¥´ÀüâŽ:²œ D¯ +F{鮹'üvºÖå’ÄÚÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýeÑZ0šMO…b|íˆ,–oäŽ:²œ D¯ +F{鮹'üvºÖå’ÄÚÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýéúg™¯ÃFÄ«4k0:æŽ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ÃÞÿð‹+aue_lseekÎã2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýSåVtÇAŽk î©2þèŽ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+aue_lseekÎã2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•`o&ÕOý½ÉqmvìŽ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+20ÜS7[AIF¬•pd± (ýüÞâ%+¾A«¸/ßÙ¹"êŽ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýΑ±ô „EÚ§@šk™ÐðŽ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+20ÜS7[AIF¬•pd± (ýþ\~gVSMfšÕ¹RVê‹îŽ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<—CÆúNl¾¦™œ §9?ôŽ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+20ÜS7[AIF¬•pd± (ý믷ì–õFD½N¡}ôNòŽ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýº[,­þ0F»/³a u±öŽ:‚œ Ê +ÙKFzé®›'üvºžööÝáÿð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•Nà0YAðߺESϽøŽ@èœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V žööÝáÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýΚ·MÔ®¶Ó'R´'úŽ@èœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžööÝáÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýWâ°UšD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÐ¼ùæáÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤ŽB$LM^²B"`:œ²œ D¯ +F{鮹'üvºD¯ +F{鮹'üvº¬Ý²âÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÙÛ¡³]K;h$’&ó5¿žbªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¬Ý²âÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýþæ`T@Dø„ÛÌýÓÜ5 bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¬Ý²âÿð‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýNWcJÍDwªèp‰KS¢$ªœ ù‹°âFzé®·'üvºßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_fork +arg_pid1385hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1385ppid1282execbash20ÜS7[AIF¬•pd± (ýö ®»hK|·§lå>*¤²œ ßµ¹F{鮹'üvº¥µîgµÑUµg¨eµÑc'¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýVã†ýãWG%¤ØÛO‘¦²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓqz/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¬Ý²âÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineJ/usr/bin/env bash ../Bash/signal.sh appid1337execbash20ÜS7[AIF¬•pd± (ý³jr|îzO­3i;-|VJ¨<²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ý¨ò5û¸BM¡²ã"L¬:@²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý&Òl›ÑD³ å|/£ÓÊ„¬²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý-J¤sAEå¯È\®F}Æ®<²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýÅãpªA„ŠOôÔ’€X¼°@²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý6ëТ…Oz‹e¥â¼ào²@²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý@ƒ÷ÈÍ]@–scߤj·°´²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý0tîl™SKߤ _D¡¶<²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¬Ý²âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ý@8ÏvfÉA+µx‹}TÁ²¸2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý¥~¢r§¡F¥íVÖÿÏ‚º2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý+—É£Bb@«oÔ§% èí¼2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýù>¨{ÆðF@ž\ÆÌJKž2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý§÷ºôœ™M‘"x:ë¡ÿÈÀ2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý7Õ*YÈK¿¯Þ˜Šþ’Â2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý‰qµqÜF÷¿‘`êÄ2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýp†òèMAIü{2ýÆ2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýnÿóm¦>Eà­ØÉÒ$M’ìȲœ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýi`‹•CY™zS›ÃØÊ:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýÿíøñ¹N™Çx`ÉQ‹æÌ:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýÌAˆ?%ýH$«LÑ•sÕN_βœ ßµ¹F{鮹'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¬Ý²âÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine0bash ../Bash/signal.sh appid1337execenv20ÜS7[AIF¬•pd± (ý-Þòy¾KБÒK$ø`%qÐ<²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýí¤ ®@ßFN‘ð³ EŽÝÒ@²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý4”¡[&E†·n`¾š´*¡Ô²œ ßµ¹F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¸¬. –G`’²JÅëŽ×Ö<²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý¶`[ËÖC§8w?`TÇØ@²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýúê–õZ0D°8Ñçf^QÝÚ@²œ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ým¥¼Ä”ALk¹mÝí^öJܲœ ßµ¹F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý±‹ÌAkmB§–ؽ£c/D-Þ<²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8¬Ý²âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý= «åopDÒ€š‡Q j|à2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýýR¢xEŽÚ\ýFŠúŸâ2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýûg ÷VBMšÐÂÁ}Tä2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýô’å­³L|¿Ï^vž'æ2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý~Ø»ÆH¬U£Õvµ íè2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý„KDN…¤Šµ8ñZÜê2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýdÛÈfIq»ÀÈ€hR$ì2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¡b¯IXñNÌŸa¹Ë—íÏî2²œ ßµ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýxoõJ~¬w÷–Kð𲜠ߵ¹F{鮹'üvºâpÑ +m.×W®mAs××¼›¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý\H.ZòG„¦B¦Gµ$·ò<²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8¬Ý²âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýC¬zxÛFâ¹ìFR­CǨô2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¬\FØK‘¯/6²zïtö2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý™YǺGKÉ”QG›Ù(œø2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý@|ô©†ÏEÍœl +n[&Îgú2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý±bx}CÚ‹»Âã!Lü2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýñ^¯.=G,‰îºÅ­^`þ2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýûæ£G9ƒE­6©ý(êhs€2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýì²ÕÃC=³å²”³Ñ¦ñ‚2²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý‘íöl·ML›Ú‡Ãäo6F„²œ ßµ¹F{鮹'üvºm/"P;=\»P½¤¬=P_¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý£Ù;ÀÝO!Âh½rÕ†<²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1¬Ý²âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýÄC „ÔEþ±·î¯Muˆ2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýîŠOe@D–âPÙe-YŠ2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý€”ž\”éC0ªë,q'!ÈÆŒ2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýþúÞ‹BGo´mæ ]ëêÉŽ2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýA‚N)ƒL1°ÃkÍÏ(¾2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýi5ŠLWN&ŒßÑ`»"Qz’2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¬{¥ñHb€WèïÄuo”2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýWÖ.Ë‘®DVŽø_&õb–2²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýûÌD|M¹ÕL9 ÿ˜²œ ßµ¹F{鮹'üvº"‘ûŽdkÇ[«d.µ[Çլݲâÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"Œ¦û53¡Gò[G(Œ—ä:øš<²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¬Ý²âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýr`( ÔBa¬¦ØèˆÅœ2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¼ñ* ûÓG5´gR ¯±ž2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý]¥¯´FMÜ´gÈ3òc;  2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýD\_Q¿Lƒ¯ˆïÞI;M¢2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý£wŸµ5L™§„¬m¨±Äü¤2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýFÓá:rAãªà‘ùMwƒ¦2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý„@%Áý!B(£ì쪤H´-¨2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý•+å=¢GŸ‘…ÂGGoKª2²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý*7ê–ŸóG†ná?Gã1¬²œ ßµ¹F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýbe‘ uB”Ôàî±lZ®:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýg¤KA;¹¯ìùP=íÅ°:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýË‹;¤NJ­2‡åèÅ‘²:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÝ<öšArƒ¸DN솰-´:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýte/Dnd@âŒfß3îp§h¶:²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý‰FË +Hù€¢()ïš­I¸<²œ ßµ¹F{鮹'üvºí( ö~R¶ ~{‚~¯/dev/tty¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýÿþèªêÐAb‡xÿªQÑÝѺ²œ ßµ¹F{鮹'üvºí( ö~R¶ ~{‚~¯¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý”h`QAîš9¬ +TA¼<²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓqz/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý;}v”-H»“Î:e<>j–¾0²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÖËj³WAê™j>̇À@²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý:N'mªHä‘q‡úöbÂ0²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýz%_. LR±ÚÝ{‹R“IJœ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý#¾ÇM+˜€‚=‰i +^Æ"²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý ¬4:ÉáM2Ž™¿@‡ÃñKÈ"²œ ßµ¹F{鮹'üvº¬Ý²âÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý“q©£tCšC.RÄ1ŒrÊ0²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý÷¤ÕB I4®Ù³Ê™¥NÌ@²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_readÂhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýÓf‘YYN¸t€Ä -ØÎ0²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_lseekêhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýmÔèMJš:+BïKÎÐ$²œ ßµ¹F{鮹'üvºà‡çF{鮹'üvº¬Ý²âÿð‹+aue_fork +arg_pid1386hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1386ppid1337execbash20ÜS7[AIF¬•pd± (ýYÇ®E„#C„÷Ñõ›ÀÊäÒ@²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_readXhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýÕ²ÈEwÒN¥™äH¸ «Ô0²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_lseekŽhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýÌ÷jͱE`§Ž¸{6nÖ$²œ ßµ¹F{鮹'üvºà’„F{鮹'üvº¬Ý²âÿð‹+aue_fork +arg_pid1387hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1387ppid1337execbash20ÜS7[AIF¬•pd± (ýB©.û¨î@ù‹þXá_§ÞÖœ à’„F{鮹'üvºýêÝ•ÓV•KóÆÓq¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1385execbash20ÜS7[AIF¬•pd± (ýî„NêY@‰¤ÀÔ.Ú÷àÖœ à’„F{鮹'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¬Ý²âÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1385execbash20ÜS7[AIF¬•pd± (ý|ˆS^ÎìH¦œ@ j\ ,â<Öœ à’„F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýBŒ“§Ž¬E¬E„´n.·¯ä@Öœ à’„F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýÈBéJTAk•ZÙ뮋KxæÖœ à’„F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýçv@ìÓ_@Sž,úaÜü¹Òè<Öœ à’„F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¬Ý²âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýMôPÈkíFD“èTüüê@Öœ à’„F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýdËX·ÿ6D‡¶ñÖ—_ˆ2øì@Öœ à’„F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýih\¨ïCQ–~Œ„x.ýîÖœ à’„F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýÑk(OqH¯ªÔ-ï‹ Rð<Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¬Ý²âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ý?ó…ø@Q¢QKNÀ,}Îò2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýöÀíÔNäMYºÑ¼ÖÁ{‡ô2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ý3 ¬ÀWLv¤<÷x»ÇÙö2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ý¼Á +xΧ@kjË}¢<ø2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýô†+fºIo†¤i²–Kú2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýÆßH3à3J¹¤ÜÏú£%ð‘ü2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýe9¹–çOד~µ»²aÞäþ2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ý‹ÐM˜yÂIˆ¯"¨âÚ4k¹€‘2Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385exec +sleep20ÜS7[AIF¬•pd± (ý±ß»º‰Nªá—”;›xü‚‘Öœ à’„F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¬Ý²âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385exec +sleep20ÜS7[AIF¬•pd± (ý|æÞ€­öDÜ„‡[qút©„‘:Öœ à’„F{鮹'üvº¬Ý²âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385exec +sleep20ÜS7[AIF¬•pd± (ýZ»5á1Nó†‹ê¶ Ñ/†‘:Öœ à’„F{鮹'üvºŽ£˜–âÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385exec +sleep20ÜS7[AIF¬•pd± (ý¦¾ä'¨M³‹8V™ƒÙLˆ‘àœ à‡çF{鮹'üvº÷ˆ•1•®q^®•Ä­®q‡v/usr/home/user/ripe-prov-tests-master/Linux/./signal_server'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ž£˜–âÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./signal_serverppid1385execbash20ÜS7[AIF¬•pd± (ýÓÓÛì+BBÏôõ1wÜŠ‘<àœ à‡çF{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confŽ£˜–âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý4=JUJ–÷¨ð§¥Œ‘@àœ à‡çF{鮹'üvº‰oý©äÇU¤©A)Eǹ Ž£˜–âÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý5¹hXÑ-Hq’>ð–Íø%óŽ‘àœ à‡çF{鮹'üvº‰oý©äÇU¤©A)Eǹ Ž£˜–âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý¸ªôŽ¥éH#ªëçƒ ‘<àœ à‡çF{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsŽ£˜–âÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý̉;b;iFE‡‚÷8m3’‘@àœ à‡çF{鮹'üvºXꎩð®…\®ð@JÌ…¼âŽ£˜–âÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýu5DK½TélŠy¸”‘@àœ à‡çF{鮹'üvºXꎩð®…\®ð@JÌ…¼âŽ£˜–âÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýDïnNÏâBh¥«¬úEÔ–‘àœ à‡çF{鮹'üvºXꎩð®…\®ð@JÌ…¼âŽ£˜–âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý-eîvK³ŒŽ€wî +#˜‘<àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙ(/usr/lib/libc++.so.1Ž£˜–âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýù¶ÆH4F~¥¶A}cRš‘2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýœô1'@J¶ †5øŽKÄœ‘2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýh9…ÑØFc‰¡ìjó¿ž‘2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýùÓ^®óMüg_šŒkÈ ‘2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý`‰ ¤sžHÉ¿Bó…øÈPò¢‘2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€€Õ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýŽÊB =AI›±Ç±¥:©¤‘2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€€Õ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"‚Òûôu£RYàK›ŠëSÛ5ª)¦‘2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€Àˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý#ÊòjïYGu› ¥ +Zž÷¨‘2àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_mmap€Àˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýâ¯ß©Om‚p‚Чìª‘àœ à‡çF{鮹'üvº†sya–„[–a½WÛ„jÙŽ£˜–âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý&AÔv^¶OñµÍ›O¦݃¬‘<àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËP$/lib/libcxxrt.so.1Ž£˜–âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý‚|¶)Œ"@©™Y7ñ9B®‘2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýŪ Å:rL£ïáiŸ½U0°‘2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý±9sjõA4µìaͦ‘ô²‘2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýBá£L®‡ði#?ët´‘2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýµ· ¨rO:žÐŽÈÍ ¶‘2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýÿÕиõII¼ŸAÚ;kI¸‘2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýzÖ¥„åD³jÏûÁº‘2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý}ö_à[Ej½W¸Ö×*|Ÿ¼‘2àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýŠü¶¸§8Iu¥X$kâ/W¾‘àœ à‡çF{鮹'üvº_Ì>m­R­>Á­ËPŽ£˜–âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýhA—êS~Iä„>9 +¯3ÂÀ‘<àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜/lib/libm.so.5Ž£˜–âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýöÍ+aJcBh¢g3â0:5ÿ‘2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý«fóCË…@Ÿ²Ä2$Z_Ä‘2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýoÅa2ù£L¶§©(Á‹qÆ‘2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýÐ=\€’¸CH±pïÅxå'·È‘2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýøýÄ@E4¿C×@ÔàJíÊ‘2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýŸ„Dü^ EâŸ[ÃYåξÌ‘2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýshkn¸GCÇ›ÐâÁbæhdΑ2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýϪì…LN‡®-ÚJ?»­qБ2àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý¡ &Ͷ´AÈŠ2ÝrOo¦ÛÒ‘àœ à‡çF{鮹'üvºLÓÅ:îtX®:îXte˜Ž£˜–âÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý±Û„(ÌšLf¬Ö¬t¿ýJÔ‘<àœ à‡çF{鮹'üvº§ÌÃq#DT£°5DmP$/lib/libgcc_s.so.1Ž£˜–âÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýk{qð(u@<‡GÚ® +]Ö‘2àœ à‡çF{鮹'üvº§ÌÃq#DT£°5DmPŽ£˜–âÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýgý¹¼u„Fž1ŒG¾}¦Ø‘0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uä­æÿð‹+aue_lseekô€5hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹¾yÕ´GG’‘ymÊW• €Ú‘Öœ à’„F{鮹'üvºà’„F{鮹'üvº¸‰¸ãéÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385exec +sleep20ÜS7[AIF¬•pd± (ý2ðÞñ[HÒ…4öU·œ3Ü‘<²œ ßµ¹F{鮹'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.db¸‰¸ãéÿð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýëŸÃŒ|I¿`Eòò…±ŠÞ‘@²œ ßµ¹F{鮹'üvº–Ø%™wyïR¹wT’ï9¸‰¸ãéÿð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýPº¾•ûJ;±ÉËQí´Rmà‘@²œ ßµ¹F{鮹'üvº–Ø%™wyïR¹wT’ï9¸‰¸ãéÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¬éî’eKÈ’¶ÄAå]â‘@²œ ßµ¹F{鮹'üvº–Ø%™wyïR¹wT’ï9¸‰¸ãéÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý-g†T×E[“˜n‘›Þ䑲œ ßµ¹F{鮹'üvº–Ø%™wyïR¹wT’ï9¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÐb¤º!¤D]¬CÊY'y-æ‘@²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¸‰¸ãéÿð‹+aue_read4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý$©Ü‰¢O ˆÊT­dè‘$²œ ßµ¹F{鮹'üvº|¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_fork +arg_pid1388hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1388ppid1337execbash20ÜS7[AIF¬•pd± (ýU÷gôCGшb‘r®æ6)ê‘Öœ |¾€F{鮹'üvºýêÝ•ÓV•KóÆÓq¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1385execbash20ÜS7[AIF¬•pd± (ýÕ?¯ˆ‡F-”¼ŽÜ;BDì‘Öœ |¾€F{鮹'üvºtd:Ñ7ø³V¸7Ç‹¶³EÒv/usr/home/user/ripe-prov-tests-master/Linux/./signal_client'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¸‰¸ãéÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"./signal_client appid1385execbash20ÜS7[AIF¬•pd± (ýONÈœªKyüÌdf»¸î‘<Öœ |¾€F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¸‰¸ãéÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý^”_ÊQåKI›ïKÛæŒÚJð‘@Öœ |¾€F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¸‰¸ãéÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý¶m”sSMŽ—w­€Ògïò‘Öœ |¾€F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýz¥¤>fJÀ« ôÉ'|-ô‘<Öœ |¾€F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¸‰¸ãéÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýw(|´s\F“w [†H»¿ö‘@Öœ |¾€F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¸‰¸ãéÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý’¢BTm­R­>Á­ËP$/lib/libcxxrt.so.1¸‰¸ãéÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýN‡†ù^O²¾ìtöøí6˜’’2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýWĸ®SpK“Žs×ÃÅB|Ø”’2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý7æ´oÀ G™¥ûUúÑÎ9È–’2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý°‚öèÑJ‰¹Q8¢ •ô·˜’2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý—ž\HGÖ¥)6ƒ+Ñ~š’2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýõ‡YIJCj»ãéBHQqœ’2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýJ¿pÞ¼€L“êç÷(#ž’2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý *[äVÿBµ=CÖãüð# ’2Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý=’D?¾ÍE—žIJÁÙY¢’Öœ |¾€F{鮹'üvº_Ì>m­R­>Á­ËP¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý˜>þY‚ùM{µY‘ ¡µŒ¤’<Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜/lib/libm.so.5¸‰¸ãéÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýz#O9½PA¹¡:þpqï²¥¦’2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"”®üõJ…Š–ÏBR½VZ$V;N㨒2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý-=ùsDŽQh…Ò/Ábª’2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý`ÕÐbçIDjØÄ­ç4M¬’2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýìq¸_ Hå°]åtî·l³®’2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýäB›½ÉI3²ßKÉÂ4þ•°’2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý(üNÚéfJô Øt—êúÕ¼²’2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýZ.wÔ«{NR4 ù+œùÆ´’2Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý¦oV·]–N&¡.`Ô»Ôµ|¶’Öœ |¾€F{鮹'üvºLÓÅ:îtX®:îXte˜¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýý€ÓFF„öÝ{¹IƸ’<Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP$/lib/libgcc_s.so.1¸‰¸ãéÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÜþ~vNª’…Š—[º’2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý–Ÿç $±Eí·¶È㔚ȼ’2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý_æn݆E34Ø¡ºE¾’2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý®0‡ŸQ>J’3È«4ÂüÀ’2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý¯Uúû¸,Omˆ*›vÍåp´Â’2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€€¼ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýPÆ +¥ûÀIn›…qƤ`ÿWÄ’2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€€¼ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýæußÅIŸGQŒù¨â?”òGÆ’2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý¼I%[¯Ju·5uQpøíÈ’2Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_mmap€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýWÐX§*A´Œ²P;$ç Ê’Öœ |¾€F{鮹'üvº§ÌÃq#DT£°5DmP¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý§_ISžN]¦U·)&¼§Ì’<Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¸‰¸ãéÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÃW¹sŠNˆ¢m™&›¸öÎ’2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý"fÕ¨Lµ½Ü0NH0Ð’2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÕÅdN”Fdšþn±š[­¨Ò’2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€€Ä arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ývÅߥžeI ŸðÑç•Ô’2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€€Ä arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÅûÂ;Ö +E謞Ô|80|Ö’2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€€ƒ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýdÉïÆoD·µ»ñpc¸ÃØ’2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€€ƒ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý‹>·NÒWL‰WÒŽoFÁÚ’2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý½HH+óJ0©˜“š{cŒÜ’2Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý<:ã+z*Fç‘.¬»Vl=òÞ’Öœ |¾€F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý68<‡O«ü%´Y&)~à’:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý÷µ!¢HC¡ÆøêŠwfâ’:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý¬Õßr~N’ŠIÓÕ±ä’:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýVŒšÌc@¿¨ÛNe¥àÀ\æ’:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýŸÊîÝœAÔ‰g„ýîb#è’:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýÀjJ|ÉMGØŸ)ÞšbÎÏhê’:Öœ |¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýCÇ!…ÀëLmŠÓ‡“(’•ì’<Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExžf/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp¸‰¸ãéÿð‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýƒü4äÌÜF ŒµõE]Jî’@Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý~MÚÚTNù¦š$o>ð’@Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýH²áfe"MljY¼m+¼[ ò’0Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý¨LvSáMµ½7HÙÉ5Éðô’0Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýHÊLÚkEö©nßTWÇö’0Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýBÜ»+‰E_¡©;f•º°ø’Öœ |¾€F{鮹'üvºÓ‹IŸ_xUŸŸ€YExž¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ýøKåNiªaWôðþÄòú’bÖœ |¾€F{鮹'üvºí( ö~R¶ ~{‚~¯¸‰¸ãéÿð‹+aue_write8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý`¸&ïÅH8œÙæ£}Žü’Öœ |¾€F{鮹'üvº|¾€F{鮹'üvº¸‰¸ãéÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_client20ÜS7[AIF¬•pd± (ý!5„™ÀCò²$Hqa\–þ’\àœ à‡çF{鮹'üvºÓ‹IŸ_xUŸŸ€YExžf/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp¸‰¸ãéÿð‹+aue_unlinkhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ý>'¤Â¯DÞ— m&…´Š«€“bàœ à‡çF{鮹'üvºí( ö~R¶ ~{‚~¯¸‰¸ãéÿð‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýÃÙ­³ˆH¹€{·n \‚“àœ à‡çF{鮹'üvºà‡çF{鮹'üvº¸‰¸ãéÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1385execsignal_server20ÜS7[AIF¬•pd± (ýDE1k@ƒ³¥t¬tç„“@²œ ßµ¹F{鮹'üvºýêÝ•ÓV•KóÆÓq¸‰¸ãéÿð‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý±ï R6CO¾”»heœ,†“²œ ßµ¹F{鮹'üvºßµ¹F{鮹'üvº¸‰¸ãéÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýäòDÞTBù¡t)´®_ûˆ“@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¸‰¸ãéÿð‹+aue_read° hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý ˆC m.Jfª/¥>ƒ ÅŠ“0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¸‰¸ãéÿð‹+aue_lseekîhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýÀð¸ØHMÒ‹&¢ Ôõ8ðŒ“$ªœ ù‹°âFzé®·'üvº}þÄF{鮹'üvº¸‰¸ãéÿð‹+aue_fork +arg_pid1389hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1389ppid1282execbash20ÜS7[AIF¬•pd± (ýotÐìïB›±ƒA§iBSŽ“²œ }þÄF{鮹'üvº¥µîgµÑUµg¨eµÑc'¸‰¸ãéÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýxŽ]µÂ/Bÿ­Nƒ³¬Í•\“0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U‚ÞÂîÿð‹+aue_lseekÈŠ6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³+ b®µH6¾·^ÿpðM’“0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_lseekÈŠ6hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýø9†1@¶º—™Þ?vD–“ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ýìÒ§ù\ H…Dþ¸ Åº”“@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]Â1¿I-¯­dnŸ( Pš“ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ýû€'yHIU r¼ådß°˜“@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^èD‰ÐHñŽ$Ä>qeHž“ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ý<ÓØ<POч“&¯*Hœ“@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉô[µ;ðGî†ÜÓÓX%ƒ}¢“ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ýyS‰,ñ\EJ®²(òΠ“@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹x-ÖPE’2ÂÙ\Z'¦“ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ý>ŒÕL¢ÑAÌO8C¤“@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&2?ÃýAO׳6ð¦jª“ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ýqû\iÞÆHË»yy;güʨ“@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸Hº4ÊÐGO±«àÝy—®“ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+20ÜS7[AIF¬•pd± (ývi5ѧDŸ,¿âôC¬“@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýà&¯_Å”L¯¼j®˜³‘"°“:‚œ Ê +ÙKFzé®›'üvº¬ÀµÐðÿð‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýV½ûrûE2…áõh³C›²“@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýy÷IrêyN%–·ÄÒáÒr‹´“@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©,³PIH°™×ì6&„ú¶“@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadìIhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-›.¡†ÅM1š-ᆠ­‘¸“b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬ÀµÐðÿð‹+aue_writeÖJhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°Rà¢t[L‹‘ +E#ÙEº“bêœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬ÀµÐðÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"œÐú…:sļId•îUðW|.{¼“@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqT·E!ßI2˜äi—/$»e¾“@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$qQ¦'³Eí¢]Lë¤ZƒwÀ“@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadàChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýVXÂëyLœŒUWÀ(`y¦“b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬ÀµÐðÿð‹+aue_writeÊDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@•¤æbCʃ4UjgšCÄ“bêœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬ÀµÐðÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyã­AF´ý{d*pnºÆ“@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý' 9ÂxªB•"P¢ú •gÈ“@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýê>ÄaëBŠŸï½Áõ.`µÊ“@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_pread®IhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷kÄ¥EvK…Щ4že…/Ì“b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¬ÀµÐðÿð‹+aue_write˜JhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8¤\÷pöG€—…§£¹àΓbêœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬ÀµÐðÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^…ØÅ­O@„ËeáÔoIГ@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýeö(3zmHÖ¬‡K–½ eÒ“@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJHŒRTãH÷ðäf*¨LÔ“@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadŒFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQ%4<¨ñKÁªØ-ËIâc§Ö“bêœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬ÀµÐðÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýeoùU•OŒÍàýôhØ“@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðBŽDœÖ[ {{¡]Ú“@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýXAµFÙF@„¤ä65–‡ÊÜ“@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadŒGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýg¯Yj)üJTšÈ³ +ÀΛޓbêœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬ÀµÐðÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèg»T"9D€¼øíÊÙõT¡à“@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·«æfšžJ+•¸ñòÂ;†ìâ“@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý %äBz¾õ=èÓXä“@êœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ÀµÐðÿð‹+aue_pread¸BhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI߆å_N#½³·œ†”©æ“bêœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬ÀµÐðÿð‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*”½WBÛ°ñ²S&àÆJè“@êœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬ÀµÐðÿð‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±¬YKüÝBë¯]ÏPˆ„ê“Jêœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¬ÀµÐðÿð‹+aue_sendtoà +ret_msgid526hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞûÈ<–K¯çA£ÏHÿì“Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¬ÀµÐðÿð‹+aue_recvfromà ret_msgid526hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý«}€ñ…œId¾Îh)άî“bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¬ÀµÐðÿð‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýg `d'ìO0 {»qäŽð“D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwr1î +±NqŸTÍVb1 ò“D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕ‚\ O-­6”*L9ô“b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_writeöFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5è)&Oà“ ‰œî“ö“D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×|#yIF¿®‹˜Êý…ºø“D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾QÏ tO~‚›öY (‹ìú“b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº€¨õÙðÿð‹+aue_writeöGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqÂÞ+ÎE6Ÿa8á<$φü“D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèÙ³ãðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýéÎÌLÏŒ‹º.WlNþþ“D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèÙ³ãðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,¡“2øhMä¤vćÄí €”b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºèÙ³ãðÿð‹+aue_write¢ChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµ\[à¹ËKa…th%@`a‚”D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°©“íðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýVö‘Å`ÂL=ªt@$ÇB÷„”D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°©“íðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²}w©§G_ØD‡„3d憔D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°©“íðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqN’Ì-¦@$–+(²vq‰šˆ”D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº°©“íðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýéÓ•)©JŸ‚ZÚórCÔPŠ”D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŠÄðùðÿð‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™úñ™„Oˆ¥q¹2÷´ªŒ”D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºŠÄðùðÿð‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚÀœP¦ÀGœµ]KQ6ò#Ž”²œ }þÄF{鮹'üvº}þÄF{鮹'üvºœýö¦ñÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýž0öwl@ó#C%c·Q”bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯œýö¦ñÿð‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýlxìDP Iº‘R¨Ð —’”bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯œýö¦ñÿð‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý³¬ksCûŠi`Y¢¼‘””$ªœ ù‹°âFzé®·'üvºðF{鮹'üvºœýö¦ñÿð‹+aue_fork +arg_pid1390hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1390ppid1282execbash20ÜS7[AIF¬•pd± (ým?"•ýFð¸†-‘hbþ–”²œ ðF{鮹'üvº¥µîgµÑUµg¨eµÑc'œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÀ]Ñ— +Lh£¯v÷Y>˜”²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{z/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1œýö¦ñÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineJ/usr/bin/env bash ../Bash/stream.sh appid1337execbash20ÜS7[AIF¬•pd± (ýwëË´9SKˆ« ú/)ËК”<²œ ðF{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ý}“>ÅcE¬úW»OI霔@²œ ðF{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý«»PÈñMêœì¢áâS3ž”²œ ðF{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ýð³ƒÔ‹F¸­bó¢¤þÖn ”<²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ý:â‚Þ »Bϲقó9[¢”@²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý|e¢±V¼@ô´˜€ͽªá¤”@²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý^ˆƒ>äKk¤º•<]j%¦”²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý–_UP|N¤ëظ<ù¯¯¨”<²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7œýö¦ñÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execenv20ÜS7[AIF¬•pd± (ýÔÃæ‘I[˜ÝùmÓ!ª”2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýdÊ.Í@U«óç–¿ÛW-¬”2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýÄ—}C•ªMÍ–a½ùĪ +|®”2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý®¢uCëWõÙ°”2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý§ +IÃêzHˆ¢k ÆÜ}›²”2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý+³†ÌU±IQ–Nfykt?´”2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý;ßP¶Ö‹CÈ´$Ÿ¹[Ci ¶”2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ý)þLð:~@£L¡_¿Á¸”2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execenv20ÜS7[AIF¬•pd± (ýìd±6¬ML¬GMçXó㼺”²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý¡ÿ¾Ž5¯B±JJÍùè¼”:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý$›à¼NwOÆuèÞl<8¾”:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execenv20ÜS7[AIF¬•pd± (ý““ÚÊI –±µçDvšÀ”²œ ðF{鮹'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1œýö¦ñÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine0bash ../Bash/stream.sh appid1337execenv20ÜS7[AIF¬•pd± (ýÒvjƒ[ßBŠ’tH£À¯þ”<²œ ðF{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýa¾Ø5عK×€îC ´I&’Ä”@²œ ðF{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý»gÐb ­NŠgÉQϨùÆ”²œ ðF{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý,úx&»Fˆ¤íƒÈ°°¼È”<²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý¿%ü“’N ¤6ÂBèàÊ”@²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýµ‡…78–LMÆ”j,½&rÌ”@²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý—…-þ¬äMVªVpbñ?çΔ²œ ðF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý°Ûê®A¾E ©k.8;ÑД<²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8œýö¦ñÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýŠp fÄýB3µg*/Ÿ€\Ò”2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¡=ËÎÎB¼®/ŒÚ\ +E Ô”2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¯þæ.OܲJÅD_Â-Ö”2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"Šþü§K"EíA˜%ÏÙh,?6Ø”2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýçO3ÎSGEŸÂÒ-c÷ÀÚ”2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýO£ l­‡MA±Ô‰ñ³Ôñ£Ü”2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýºÓ´µìYBp¤±AŠÊ`×'Þ”2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý½0¿`V‘N“x‘¢{ˆs–à”2²œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýþ0`‡„×N £²˜ŒîKN┲œ ðF{鮹'üvºâpÑ +m.×W®mAs××¼›œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÊYܾ´wC–¼¾¨œŽA¼ä”<²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8œýö¦ñÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýïìk9ÄF —Ú +{U ¤´æ”2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý_׺¿@#µ…¢vÇ"Dè”2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý'sÍê F ›§îih¹ê”2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýëéîJ³ŒJ1­!f\á»wì”2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýºuÀ`ÕzDÔ¿¤V©H߉î”2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý+O¢§J ˆÓòyOÂð”2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý8mpÙ +™@Éœ®ÖG ª±«ò”2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýžè­-}ÆEIž¢ì%íB[vô”2²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý{#çø.øKß³˜¥?¼ÿö”²œ ðF{鮹'üvºm/"P;=\»P½¤¬=P_œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýôÓ‚0ùHÖ¬ABE¨;âgø”<²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1œýö¦ñÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýª:X1nýE¸ ù¦ýJÀú”2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýJÒ=œß÷Oãð¦R#z$ü”2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýàÑZžÂSHoªÁ mxO9Yþ”2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÁ»•†ðHè¦Ò¸i˜ñ¡¹€•2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý?ªÌ)KA‹Î=ܳ #Q‚•2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýBußð¯+L¢k•Ö‹s„•2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýk±b0úñB†ž@Î OLgɆ•2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýXøè³RCy`™nÔØAeˆ•2²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýù½;[ FÆšYa¹ë/銕²œ ðF{鮹'üvº"‘ûŽdkÇ[«d.µ[ÇÕœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý˜Þ’$Gïš™=,e.öðŒ•<²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7œýö¦ñÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýwÒàìE*´‹MdYIÑŽ•2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýã[©ÙbÍN¥âkS¤m¾•2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý5“ÄÌ™hOs–dDü*[ª’•2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýæRÔîfM¼®Â¾Ôu+ží”•2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý,ZBpE&»¤eïÃœ—–•2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý$›‡,A»EP˜ ®Æ²Bû5˜•2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¿8'k¦ËA†q“¶Í2›@š•2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÈqvÿzD"±\”±ü…Xxœ•2²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýÊÂÀ6Y‡O“‚Nè¬âò߉ž•²œ ðF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÜ#¯Ð)`GÉ«ì`‚ ™ •:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýßú°Ù +J¬‰ +â+㬀¢•:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý’š0€åöAFœOI9Õ»¦¤•:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý7ÃLâþIo‡"Ëâ?Û™h¦•:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýRR]SD>ž%á¨Ùm¯Z¨•:²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¾L +¾B…GÑ­ÏckÂJ‡ª•<²œ ðF{鮹'üvºí( ö~R¶ ~{‚~¯/dev/ttyœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý\0. D ²ç¨î*×"¬•²œ ðF{鮹'üvºí( ö~R¶ ~{‚~¯œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýÑ`ž ¢O-zâªð,ÉV®•<²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{z/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.shœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execbash20ÜS7[AIF¬•pd± (ý;ä! +Mf² ¬kBì°•0²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý!‡®ËªM}¶ ˆ=1’ý’²•@²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ý¨lè5D€šG¾Î0"´•0²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýaûæ ƒòD¡‹aT»A&<%¶•²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý'ü¥ÖEÆ@}©ŠÐ(mb;¸•"²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýEoûQ±sGe‡s¥¤¶ô(º•"²œ ðF{鮹'üvºœýö¦ñÿð‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý¬àô]A³¸'Ž<üàs¼•0²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýìŠY¯MD–±ƒý©_4YϾ•@²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_readÄhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýI`ô'7vIÄ¢[—Q*_6À•0²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{œýö¦ñÿð‹+aue_lseek€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ýêAÜ•^­Bò\°`/Ò•Öœ è›F{鮹'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1œýö¦ñÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1390execbash20ÜS7[AIF¬•pd± (ý7*½ï¸þIœ©¢¸‚ÎÊÝ'Ô•<Öœ è›F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390exec +sleep20ÜS7[AIF¬•pd± (ýn30—]¡NT¶uƒ²L…h0Ö•àœ ÞF{鮹'üvº²w”\·²mÄŒ”E‰v/usr/home/user/ripe-prov-tests-master/Linux/./stream_server'ìAzX™¦}˜¹(/libexec/ld-elf.so.1œýö¦ñÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"./stream_server appid1390execbash20ÜS7[AIF¬•pd± (ýgæu/ÛHDä‹Á4p¢¯ŒØ•<àœ ÞF{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýsŒÐ‚§åBµ¢àé\žÕÂsÚ•@Öœ è›F{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390exec +sleep20ÜS7[AIF¬•pd± (ý_U~F5OEŸZÐ(Œâ­Ü•@àœ ÞF{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýÞp-*ÿ@é±Gy¢÷Þ•àœ ÞF{鮹'üvº‰oý©äÇU¤©A)Eǹ œýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ýW+h´-OÆ­n[\"ÜÊà•<àœ ÞF{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsœýö¦ñÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"œˆýÛK YO;¯…Xð<}e¬â•@àœ ÞF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýu4k²ÇID¥ˆùAŸ¹Wä•@àœ ÞF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý“a})B‰7ëRØ.>9æ•àœ ÞF{鮹'üvºXꎩð®…\®ð@JÌ…¼âœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ýà{!N¿H)½èY¦Æiî±è•<àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7œýö¦ñÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýn÷ÉI¶H›åÈû•ê•2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý9À9xTRJ‹,ú ›¦@ì•2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýDðtÁɾE ¶tQ5§óî•2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý!®™…¢¾Iµ¸k@ù@kð•2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýLQ§Ê.&N]„[šZ|(eò•2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ý$`ÿFYÆM›p§p¦ßÈô•2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýÍ)I‰ƒL ›V„âøt’íö•2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýôOŸkÞNS¬4²~ŠRÁø•2àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_server20ÜS7[AIF¬•pd± (ýè:|[v¨K™»wˆ"% Ôú•àœ ÞF{鮹'üvºÞA`ì•øËQ¸•bxñË"œœýö¦ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ý,¿2ZÓC½¸­z•ÕËûü•:àœ ÞF{鮹'üvºœýö¦ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ý ——“ÔCìªþÈýµZþ•:àœ ÞF{鮹'üvº„ñÞ¯ñÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ýA*ôêäúG–°¸ ·`Ü3€–àœ ÞF{鮹'üvºH F{鮹'üvº„ñÞ¯ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ýÁfSq#¹B¸FˉËa&‚–àœ ÞF{鮹'üvºKÕF{鮹'üvº„ñÞ¯ñÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_server20ÜS7[AIF¬•pd± (ý4ëŠ}ÚŽB¬É$ƒÁp¯è„–0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uøõñæõÿð‹+aue_lseek¢ 8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°ÎKÝuFДí#MMžpN†–Öœ è›F{鮹'üvºè›F{鮹'üvº¤›„óøÿð‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1390exec +sleep20ÜS7[AIF¬•pd± (ý¶U„øÍPM»õO³Í]Vˆ–<²œ ðF{鮹'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.db¤›„óøÿð‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1337execbash20ÜS7[AIF¬•pd± (ýÅfhE8—L¥ ÊÚR€â›Š–@²œ ðF{鮹'üvº–Ø%™wyïR¹wT’ï9¤›„óøÿð‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýüb¿Ÿ-NÂ¥,yeô›0öŒ–@²œ ðF{鮹'üvº–Ø%™wyïR¹wT’ï9¤›„óøÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýæLFŽ¤K£ÅÐá¡K?Ž–@²œ ðF{鮹'üvº–Ø%™wyïR¹wT’ï9¤›„óøÿð‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execbash20ÜS7[AIF¬•pd± (ýk ¦=FEÝ‘!ËÓ ŸL–²œ ðF{鮹'üvº–Ø%™wyïR¹wT’ï9¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ý”­uäVAö—cýo5G^Ë’–@²œ ðF{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{¤›„óøÿð‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1337execbash20ÜS7[AIF¬•pd± (ý-SKæt·KðŸØƒ b”–$²œ ðF{鮹'üvº²›=F{鮹'üvº¤›„óøÿð‹+aue_fork +arg_pid1393hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1393ppid1337execbash20ÜS7[AIF¬•pd± (ýš¥eQBÊ·@Ó.ïs––Öœ ²›=F{鮹'üvºd‘´Ú.#W®Ú›ÊÇ#”{¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1390execbash20ÜS7[AIF¬•pd± (ýÓSÈJGB’5ݪlj˜–Öœ ²›=F{鮹'üvº¬ø„( žuUž Üo¥uv/usr/home/user/ripe-prov-tests-master/Linux/./stream_client'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¤›„óøÿð‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./stream_clientppid1390execbash20ÜS7[AIF¬•pd± (ý 55µÇéA‘´£Ÿmüš–<Öœ ²›=F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¤›„óøÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý©Û$Â%OJ& †nóÒ. 0œ–@Öœ ²›=F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¤›„óøÿð‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý¡hÿB¤›Bn†‹g³ž–Öœ ²›=F{鮹'üvº‰oý©äÇU¤©A)Eǹ ¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ýlxìÎE¢Ž$ø5¤B› –<Öœ ²›=F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¤›„óøÿð‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýöFA D嶹lQ"e‹õ¢–@Öœ ²›=F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¤›„óøÿð‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý³ƒY\N$§±yj-ÉФ–@Öœ ²›=F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¤›„óøÿð‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ým/NdÅHQ‚ÖLïjÿº¦–Öœ ²›=F{鮹'üvºXꎩð®…\®ð@JÌ…¼â¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ý‰A=lG=’ŸôÔÙ€o ¨–<Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¤›„óøÿð‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýuÞR AºÌ*C¤>°ª–2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýt®Ù´LZ±Á}÷Zˆ?ꬖ2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý³†¾é’@R¾[–9° ^®–2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý˜væoKD(˜Kh²ÛÙJ½°–2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ý²Qòù¼C“„@°Ní²–2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýË/ä"_F겆¤¬„N‚æ´–2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýâhóuDrœ51€³¥ q¶–2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýâÄWzxsJ%•»#[õIÝ ¸–2Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1390execstream_client20ÜS7[AIF¬•pd± (ýìËaɇ¦L뉸¾ö^„Óº–Öœ ²›=F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ýþRÐ$\N¶Zàïã#H¼–:Öœ ²›=F{鮹'üvº¤›„óøÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ý[Ô)ù4ÇD8¦Öâ%Wäš¾–:Öœ ²›=F{鮹'üvº¤›„óøÿð‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ýµ‘?dVDq°ÃÁ¥¿/aÍÀ–Öœ ²›=F{鮹'üvº³ F{鮹'üvº¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ýI…·Ó²@¢.F1/twô–Öœ ²›=F{鮹'üvº³4F{鮹'üvº¤›„óøÿð‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390execstream_client20ÜS7[AIF¬•pd± (ý¶KÀÉ–Yq‰´ ý`ñ¼0.0.0.1˜¤0.0.0.1Ä620ÜS7[AIF¬•pd± (ýõ0ä ®,M˜®©)–Ü–Ä–Þš ³ +×F{鮹'üvº¶KÀÉ–Yq‰´ ý`ñ¼¤›„óøÿð‹+20ÜS7[AIF¬•pd± (ýøJxŒS÷–êœ(æ˜0.0.0.1Ä60.0.0.1˜¤20ÜS7[AIF¬•pd± (ýwXœÏ´VCx—‚3X솨Æ–Þš O/F{鮹'üvºøJxŒS÷–êœ(昤›„óøÿð‹+20ÜS7[AIF¬•pd± (ýgÚû¨ìÓW˜šïQ÷b®Á0.0.0.1Ä60.0.0.1˜¤20ÜS7[AIF¬•pd± (ý©Hf·´ÂF$ƒ™Õ|ÜߣȖޚ ³¯F{鮹'üvºgÚû¨ìÓW˜šïQ÷b®Á¤›„óøÿð‹+20ÜS7[AIF¬•pd± (ý%Våq­FÒƒã˜t”ì½KÊ–Öœ ²›=F{鮹'üvº³ +×F{鮹'üvº¤›„óøÿð‹+aue_connecthostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1390address::1port3490execstream_client20ÜS7[AIF¬•pd± (ýL¶Í‚½©L|¡¦ȶ,ÓÑÌ–bÖœ ²›=F{鮹'üvºí( ö~R¶ ~{‚~¯¤›„óøÿð‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1390execstream_client20ÜS7[AIF¬•pd± (ýKßpà%‰Môœ6dëì£êΖàœ ÞF{鮹'üvºO/F{鮹'üvº³¯F{鮹'üvº¤›„óøÿð‹+aue_acceptret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value4ppid1390address::1port +10508execstream_server20ÜS7[AIF¬•pd± (ýÔ¤åüPMK¯âüۜΌKЖbàœ ÞF{鮹'üvºí( ö~R¶ ~{‚~¯¤›„óøÿð‹+aue_write@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1390execstream_server20ÜS7[AIF¬•pd± (ýað&*M‰Œ‹!?+Ò–$àœ ÞF{鮹'üvº³'-F{鮹'üvº¤›„óøÿð‹+aue_fork +arg_pid1394hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1394ppid1390execstream_server20ÜS7[AIF¬•pd± (ýk?lYÁWB-Šgw¥TòÓÔ–Jìœ ³'-F{鮹'üvº³¯F{鮹'üvº¤›„óøÿð‹+aue_sendtohostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1391execstream_server20ÜS7[AIF¬•pd± (ýá­ººïEaS’s¸ÔÖ–bìœ ³'-F{鮹'üvºí( ö~R¶ ~{‚~¯¤›„óøÿð‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1391execstream_server20ÜS7[AIF¬•pd± (ýŸcþåEM¢îIˈ¾ÏPÊ—bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯º™Í¶€€ñ‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýÚ±Ú +W@옷D†»ÐxNÌ—$ªœ ù‹°âFzé®·'üvº LŸëF{鮹'üvºº™Í¶€€ñ‹+aue_fork +arg_pid1396hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1396ppid1282execbash20ÜS7[AIF¬•pd± (ýA-MuÒD鋱7Rmè"ìΗ²œ  LŸëF{鮹'üvº¥µîgµÑUµg¨eµÑc'º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýGJµ#túFYŠ—÷‚L üЗ²œ  LŸëF{鮹'üvºÉäAÀ|1V±|?š÷%n/usr/home/user/ripe-prov-tests-master/Linux/./with_wget'ìAzX™¦}˜¹(/libexec/ld-elf.so.1º™Í¶€€ñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./with_wget ppid1337execbash20ÜS7[AIF¬•pd± (ýÿo<š G„’¼ÅS˜ˆ~Ò—<²œ  LŸëF{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýÇ|ÜÛyƒDSaúÐû†Ô—@²œ  LŸëF{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý?»H¤–fKÓŠÚ§ +dÐ}Ö—²œ  LŸëF{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýZÚ÷7?Nv”pd—®.Ø—<²œ  LŸëF{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýíè¬ÿrH˜¡‚îÿîó…Ú—@²œ  LŸëF{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý…¶µC³*Oè¤Ë(R‰ÔüÜ—@²œ  LŸëF{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý†ãܯà=H÷‘¨dõp`ÎÞ—²œ  LŸëF{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýåqÌQŸfC½žQ¶™‘[Iíà—<²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7º™Í¶€€ñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýº…ýíFH˜Šq8èóàâ—2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý>ï¸àZéHÀ¯ÎpÐxÇä—2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýJjúnÒH:‰­-˜¨UÃæ—2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýÏ£ºë0v@·´$,ÜÏ#Y–è—2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý®½R8{|Op–Cí1 +%iê—2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýdØñZŠE­qmÈì—2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýó9?‡ºDŸ;àíæáî—2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý±ÿY,JA춯“_‰Žð—2²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýŒH} }ãCc +øm¨)¶Æò—²œ  LŸëF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýp¼nI{‚B¢™@P[yâÅô—:²œ  LŸëF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýöÍhñ÷½L_±Z_ºÐ‡¼ö—:²œ  LŸëF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ý{¸€@RÖIà®7šÇ9µ'ø—$²œ  LŸëF{鮹'üvº LîF{鮹'üvºº™Í¶€€ñ‹+aue_vfork +arg_pid1397hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1397ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýS{ý,é¢Gˆ÷ì1ãÍ^ú—Öœ  LîF{鮹'üvºó÷êßZyºU¹Zˆºä$/bin/sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1º™Í¶€€ñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineVsh -c wget http://www.google.com/index.htmlppid1396execwith_wget20ÜS7[AIF¬•pd± (ýf攪Ff˜aˆõØ'ûœü—<Öœ  LîF{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1396execsh20ÜS7[AIF¬•pd± (ý%7DEQZKŒéàK +d[þ—@Öœ  LîF{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý¤Öæ¹^C¹±ÊqSýwõ€˜Öœ  LîF{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1396execsh20ÜS7[AIF¬•pd± (ý”‘.TFäC/ž¥±"ÜX,‚˜<Öœ  LîF{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1396execsh20ÜS7[AIF¬•pd± (ý8R>Íë˜GÞ¹ÿpÕFêq›„˜@Öœ  LîF{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý¤§=XCë™%`€à§L:†˜@Öœ  LîF{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý'Ô¤‰B'©î´Ö²À¶ˆ˜Öœ  LîF{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1396execsh20ÜS7[AIF¬•pd± (ýåIíGÚŽÙÁN¤1Š˜<Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿ"/lib/libedit.so.7º™Í¶€€ñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1396execsh20ÜS7[AIF¬•pd± (ýöø1-&DMˆÜ ÿÜÕ©AŒ˜2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý&G„¾WMg–ÛÂìö”VÕŽ˜2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýö{'›{ÐH¢¿ 1Í·MU˜2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€À¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý³B*]ÚÐGÝ¥uÎF Wqê’˜2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€À¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"”öûúÑ€‹ÈÈOÏ©~Ò‰ŠI *”˜2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€Àà arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýg ¢Æ»AM•$\"T|,¼–˜2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€Àà arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý°œÞ=DN˜º€ ïÑE1˜˜2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý™¿FŸ–æä/š˜2Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýÚ Ÿ‘GD†9Ê¡â*[œ˜Öœ  LîF{鮹'üvº*‡qo&\¯q׬&¬Ÿº™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1396execsh20ÜS7[AIF¬•pd± (ý—n2…Ñ@@\©;+¦nìäÙž˜<Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7º™Í¶€€ñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1396execsh20ÜS7[AIF¬•pd± (ýºGCRò@M¨ê¥éò Ä ˜2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýùÀH ¯Bƒ¥9Oµª¢˜2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýéxäd6HºƒrÐ,B­¤˜2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€Ø arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý&ÛI¢—+CžÉ8#ˆ ¦˜2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€Ø arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý«sä%4›E[²?ÚætŒ§¨˜2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€— arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý•eh‹&šOx¢„¹¿xsfĪ˜2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€— arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý®(.c¾NV Q0ts¬˜2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À¹ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý°^z­6I‰²Sˆ;{쮘2Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À¹ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýÊŒ¾Á™Cü­X=’,Wý°˜Öœ  LîF{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1396execsh20ÜS7[AIF¬•pd± (ýc 7KvÄL=­ÒfÕ9û_²˜<Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦*/lib/libncursesw.so.8º™Í¶€€ñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1396execsh20ÜS7[AIF¬•pd± (ýoBx&jåG˸mÛÛRG(½´˜2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýÕuÜ™ïF‚±{ yZœ^¶˜2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý ?³ëF¼ßÔX–w¸¸˜2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€ÀÔ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý¿ƒ´AÜFZ€ÚÕk¢¦¤žº˜2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€ÀÔ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýûP!².7OVL¯W Ž¶¼˜2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€é arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ý¤ ÂG¦LrªÞës°¸<ø¾˜2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€é arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýj¿c‡»B•…gr•9wsÀ˜2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€‚ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýRö{š«HŠ‡ü +C ° ˜2Öœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_mmap€€‚ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1396execsh20ÜS7[AIF¬•pd± (ýc¿Àó¢JÄy!tQ­l/ĘÖœ  LîF{鮹'üvºÚ6n $.\¤ ¸­ü.+¦º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1396execsh20ÜS7[AIF¬•pd± (ýSãGóÿùNªÇ½§"³¬+Ƙ:Öœ  LîF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1396execsh20ÜS7[AIF¬•pd± (ýâ÷—¥l—Mç’²%‡–ëv˜Ș:Öœ  LîF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1396execsh20ÜS7[AIF¬•pd± (ýx†Ï½}Kí´ø\Ü¿ʘ:Öœ  LîF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1396execsh20ÜS7[AIF¬•pd± (ýj=='mNø¡aÊnç}?̘:Öœ  LîF{鮹'üvºº™Í¶€€ñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1396execsh20ÜS7[AIF¬•pd± (ýVKÄñÀG¨‡“ß!&9ÆΘbÖœ  LîF{鮹'üvºí( ö~R¶ ~{‚~¯º™Í¶€€ñ‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1396execsh20ÜS7[AIF¬•pd± (ý$ün0Mã–º{»* ¨ИÖœ  LîF{鮹'üvº LîF{鮹'üvºº™Í¶€€ñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1396execsh20ÜS7[AIF¬•pd± (ý­àêb}¨Fl˜œPÓ&o:ZÒ˜²œ  LŸëF{鮹'üvº LŸëF{鮹'üvºº™Í¶€€ñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337execwith_wget20ÜS7[AIF¬•pd± (ýÿ¤[x¸NŽÅL8ÑqaÔ˜@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'º™Í¶€€ñ‹+aue_readª hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý…ù‰Q AÝ›};¢ùÖ˜0ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'º™Í¶€€ñ‹+aue_lseek”hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý~JœŠÂGNJ¤ËÚ¢óý9ؘ$ªœ ù‹°âFzé®·'üvº Mr§F{鮹'üvºº™Í¶€€ñ‹+aue_fork +arg_pid1398hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1398ppid1282execbash20ÜS7[AIF¬•pd± (ý +æiCZ«å,¡FM5ÿÚ˜²œ  Mr§F{鮹'üvº¥µîgµÑUµg¨eµÑc'º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1337execbash20ÜS7[AIF¬•pd± (ýå6êöK~Kú†ÄŒ¼·Póeܘ²œ  Mr§F{鮹'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1º™Í¶€€ñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1337execbash20ÜS7[AIF¬•pd± (ý\–[»{MÚ·¹¦³Eµ+Þ˜<²œ  Mr§F{鮹'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýª…5HÈš¸œï-³•à˜@²œ  Mr§F{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý䟋ҥJ·¡!£È›x☲œ  Mr§F{鮹'üvº‰oý©äÇU¤©A)Eǹ º™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý(ž”<çM¡¯Niúüo¾ä˜<²œ  Mr§F{鮹'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsº™Í¶€€ñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý!¶káR£@ŽºkG÷·—æ˜@²œ  Mr§F{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý둹’J¨„\‹Z +1Õè˜@²œ  Mr§F{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý*PôöDl‡iÓÑIo°ÿ꘲œ  Mr§F{鮹'üvºXꎩð®…\®ð@JÌ…¼âº™Í¶€€ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýtÁEÃÃF¦žZø¡nÿŠì˜<²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7º™Í¶€€ñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý|<õQLX •*.ÎÀÄKî˜2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýÔô„¹Ÿ™AV¥iÔï¿Ì{ð˜2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýê\P‹.³Bsˆø[ 9ª÷Oò˜2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý{¥Ø©¡O’“ !ä7½0Ðô˜2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýv¬Ž©º×Oc êÛTDLÓ:ö˜2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ýnÀÃD{ÌEƒ¤ö¶]Œ'ø˜2²œ  Mr§F{鮹'üvºÞA`ì•øËQ¸•bxñË"œº™Í¶€€ñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý8¢Î3Ž¢L’š¹'òõlzú˜0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uììõ͆€ñ‹+aue_lseekø½:hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾ChFѺ‘h+ò|q¤ü˜²œ  Mr§F{鮹'üvº Mr§F{鮹'üvº¼’¦†ˆ€ñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1337exec +sleep20ÜS7[AIF¬•pd± (ý•hõÑ6E‰¬ IuºC@þ˜@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¼’¦†ˆ€ñ‹+aue_read$hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý‚¯´•ãÕGÀ¡¥ª Ѐ™bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¼’¦†ˆ€ñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýŽª˜ í[L«žˆ‹Ü‚™bªœ ù‹°âFzé®·'üvºí( ö~R¶ ~{‚~¯¼’¦†ˆ€ñ‹+aue_write +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý³)ôžC8—µ4éóà-©„™@ªœ ù‹°âFzé®·'üvº¥µîgµÑUµg¨eµÑc'¼’¦†ˆ€ñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý¤ßYòï-Oµ£3®X6Rª,†™ªœ ù‹°âFzé®·'üvºù‹°âFzé®·'üvº¼’¦†ˆ€ñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýQ„ƒ,sN"©²Èe_f÷ˆ™"–œ ×µ¨Fz鮩'üvº¼’¦†ˆ€ñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1281execbash20ÜS7[AIF¬•pd± (ý8ÊÎvS¨C¦eÀÖ”Õ늙b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¼’¦†ˆ€ñ‹+aue_writedhostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýØœ&µøKV¬©â4 ÖŒ™0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞꆯŽ€ñ‹+aue_lseek¦Ð:hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤¼üHØM’ŠÆ¢¨ž-zŽ™0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_lseek¦Ð:hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýªuºÍ§G4¸söH;mÍ’™ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+20ÜS7[AIF¬•pd± (ý®|ã¡/&@1šJú’(Hq ™@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&‡‰:u’J@«QÈŸ«CÕ–™ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+20ÜS7[AIF¬•pd± (ý¡ìÅÿQ@¢ƒÉ“H¹Â¹”™@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–݈ÂF¥Ž»d6ƒq÷•š™ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+20ÜS7[AIF¬•pd± (ýcÁ'E4Fļü¬ÄºPp˜™@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý /ãižJHœŽ +š ¢Áž™ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+20ÜS7[AIF¬•pd± (ý¼z–v/tK“ŒmYŠÍ7½šœ™@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹=xÀKN±î)©ËHy¢™ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+20ÜS7[AIF¬•pd± (ý1½q&—ŒJ㲪ÎG„)é™ ™@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%ûF“túK¨è§p¹E£¤™:‚œ Ê +ÙKFzé®›'üvºô“„¹Ž€ñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŒ‰ãïtuO'’s–PÙHƒ¦™@ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ô“„¹Ž€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®ÞûŒì9SÀ+Kªh|~sV¬¨™@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚ôüÙ`¯@ã fgòGOª™@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadÎ?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU R˜/Ô@¥¼DËæf>þ¬™b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºô“„¹Ž€ñ‹+aue_write¸@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýïu´ÏG_¾DÕ­`ÉÚ®™bðœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áô“„¹Ž€ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢¦¯BT½©`óÎÇÕ‡°™@ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ô“„¹Ž€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.ÿ[Pÿ´Bû†OËê>û²™@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘ÁÄî‹Oñ³Û»ù`´™@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô“„¹Ž€ñ‹+aue_preadŽKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýX2íñ^@î®›ƒi†ú¶™b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºþÕÀŽ€ñ‹+aue_writeøKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯„Ș5¶D£†Ï¸æÃOQ_¸™bðœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áþÕÀŽ€ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@ì3Ø@¸®ã¹r:Ìþ y¾™@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UþÕÀŽ€ñ‹+aue_preadòDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý Å&}H]ˆrÔáT&µ À™b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºþÕÀŽ€ñ‹+aue_writeÜEhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”4U^A÷™³cFԭ礙D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Ú«ØŽ€ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŒR;•à0GO­‰ ÊjâÿÄ™D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Ú«ØŽ€ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZ‘VU]Oe„C1A÷ù¢"Æ™D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Ú«ØŽ€ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅWtOMÜ€¯Fµ‡ú2È™D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº”Ú«ØŽ€ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøÚà@…«M¨µá‡NhæÊ™bðœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”Ú«ØŽ€ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊ€Vê»àM0žÉÇ(èu†Ì™@ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”Ú«ØŽ€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõPJ*åL‡Œâ3ÖîΙ@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”Ú«ØŽ€ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»£_:D£Œé=9D(hÁЙ@ðœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”Ú«ØŽ€ñ‹+aue_pread¦hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>È¢bíùAk"¬‘É}Ò™b„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¼Þæ㎀ñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýù;©][ÕEÔ¡[‡²¨”8ÕÔ™bðœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¼Þæ㎀ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýylÍôJ@a¦4¬å$Ö™@ðœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¼Þæ㎀ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆEwvÉG¯¾ïÉþQÀmØ™Jðœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¼Þæ㎀ñ‹+aue_sendtoà +ret_msgid532hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýi‹¼GÎK좴Õ^4 Ú™Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¼Þæ㎀ñ‹+aue_recvfromà ret_msgid532hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýŸlØ`Œª@Xد÷|{ÂÜ™bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¼Þæ㎀ñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýD¨1GéàI±ŸaÀgw¹?Þ™D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ–à掀ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞ¿€QÊÒC^ ýºÆ;45Ôà™D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ–à掀ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/ý¤®“L «Óoÿ ØB|â™D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ–à掀ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?á9ÕLFy»0¯ šŽ¢$ä™D‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvºÜ–à掀ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3ñ‚w–nE•½Å€¾·Ô’æ™@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eŽŠÆ´‘€ñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý×öHSèH½ŸæŽE‘êoè™JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŽŠÆ´‘€ñ‹+aue_sendtoÚ +ret_msgid533hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýïÐ?6›F£±î´kØ Áê™JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŽŠÆ´‘€ñ‹+aue_sendto˜ +ret_msgid534hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý:5ÉÓÂKÀ‹ýÙ ½ì™JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŽŠÆ´‘€ñ‹+aue_sendto¬ +ret_msgid535hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýR¼Ù¹šK„yÔLæJî™JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŽŠÆ´‘€ñ‹+aue_sendto˜ +ret_msgid536hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýô¸‘…“QKç«Y¬Œ¢ð™Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŽŠÆ´‘€ñ‹+aue_recvfromÚ ret_msgid533hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýñ Âï¹?CþûvȈå®èò™0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ßÖð•€ñ‹+aue_lseekÞ’;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýC3"!à@¥‚xV5ÔpÄô™0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+aue_lseekÞ’;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀ\éÑNXº§)Þù·¡Rø™ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+20ÜS7[AIF¬•pd± (ýsΟ”÷O‹Ä<àÞFœ…ö™@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸèPÁÓOuúJj±1Rü™ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+20ÜS7[AIF¬•pd± (ý¬s"PCSqj5yß•šú™@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{–¤.›Aò¯g¶6Œìþ™:‚œ Ê +ÙKFzé®›'üvº„ã窀ñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|óùÁ¼ºA™[Af8€š@òœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V „ã窀ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýR¤ øåÕKµ1¯$DÖ‚š@òœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËN$›(8Oˆœ4·ú]÷ª„š@òœ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ã窀ñ‹+aue_pread°BhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýàÓÄ|,ÔMˆ²*aã«-t†šb„œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº„ã窀ñ‹+aue_writešChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýt{· AŠ_ h)ÆÍ䈚bòœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á„ã窀ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýpïÃÒžÍJ|­"ËhvÙÙ:Šš@òœ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V „ã窀ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýs/…óµOIn¾¯{†¨MŒšJòœ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº„ã窀ñ‹+aue_sendtoà +ret_msgid537hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#ÀѲM@ƒW1”Ug´ŽšDê› µ dôFzé®{'üvºµ CjFzé®{'üvº„ã窀ñ‹+aue_recvfromà ret_msgid537hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÍä¾ +’ãAÛ¢[Zzç˜fMšbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK„ã窀ñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý-eT’ÂAð¨˜ÛÄ—6ù ’š0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨Ýô³€ñ‹+aue_lseek ¬;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøˆAQØA•¯€î nµ'”šD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨Ýô³€ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcW¤Ÿ«J€‡ã𠇸–šD‚œ Ê +ÙKFzé®›'üvºÊ ãmFzé®›'üvº¨Ýô³€ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿ(”æ}ŠNQ§PYocNB˜š0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÀô²ì¼Çñ‹+aue_lseekÄ´;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý z2ʤB×°mýÍ“eI‹œš ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÀô²ì¼Çñ‹+20ÜS7[AIF¬•pd± (ýu~M„¸Egìú”›ékšš@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÀô²ì¼Çñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚XçMX¨OÔ¦ r ´þÍžš@ê› µ dôFzé®{'üvºªa݈ˌûWŒË=ûŠ³´°ê®½Çñ‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1execsyslogd20ÜS7[AIF¬•pd± (ý…q`±ô£IkºÖrŠüÚ- šbê› µ dôFzé®{'üvºÁU\|ÓŽšXŽÓ㈚i´°ê®½Çñ‹+aue_writev`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1execsyslogd20ÜS7[AIF¬•pd± (ý€¶ÅJMCߥ­¸EÙ}í¢šbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK´°ê®½Çñ‹+aue_writev`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÅõž2Ž+Mɲƒ`ct'Sô¤š0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô‡é¥ÄÇñ‹+aue_lseekŠÄ;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýS\Xƒ±•B ºÇ_i«[|d¦š@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÂð̬ÇÇñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÝfœp•lIcµ KÀ)ª‰—¨šJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÂð̬ÇÇñ‹+aue_sendtoÚ +ret_msgid +16928hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýЬÕóRJJ··#nØö’媚JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÂð̬ÇÇñ‹+aue_sendto˜ +ret_msgid +16929hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýäåÐIø­–nm²eb¬šJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÂð̬ÇÇñ‹+aue_sendto¬ +ret_msgid +16930hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý±ºÌ~‚Mœ»DÛËì7ƒº®šJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÂð̬ÇÇñ‹+aue_sendto˜ +ret_msgid +16931hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýˆ·JŠGABÄ Œ {x°šDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÂð̬ÇÇñ‹+aue_recvfromÚ ret_msgid +16928hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýFZ\NÑjH,Ic¯{ _Ž²šDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÂð̬ÇÇñ‹+aue_recvfrom˜ ret_msgid +16929hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýñ?¬ÄeJ¯,¥Ö`mWG´šDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÂð̬ÇÇñ‹+aue_recvfrom¬ ret_msgid +16930hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¯W‰WmJý¥-Õ觶šDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÂð̬ÇÇñ‹+aue_recvfrom˜ ret_msgid +16931hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýª)Ðœ;GVœî€Úz—‹¸š0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UºÔ€àËÇñ‹+aue_lseekŠÄ;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘÷ßÃ4ISµK€\÷v·¼š ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UºÔ€àËÇñ‹+20ÜS7[AIF¬•pd± (ýƒ +Ö³/AÚ†±àûwЗŽºš@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UºÔ€àËÇñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?[sÕh±El­Ì¢7fÀš ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UºÔ€àËÇñ‹+20ÜS7[AIF¬•pd± (ýï‹Y§ÄNpž»AÂÅc¾š@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UºÔ€àËÇñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýãŒÍåÓOC¢Ç†M0ÐE½š:‚œ Ê +ÙKFzé®›'üvººÔ€àËÇñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýkwlmò€FØ‚ˆjõxq&‰Äš@” Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ºÔ€àËÇñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡l«·À¶@¶ÚœÒ2ŠmÆš@” Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UºÔ€àËÇñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[\’…ÎE"¹$ÙHÑØ[-Èš@” Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UºÔ€àËÇñ‹+aue_pread¾hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.ì#?.²NŠ¶c°YýTîõÊšb” Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áºÔ€àËÇñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +Ùy5.F}é®Ã'üvº20 +ÜS7[AIF¬•pd± (ýŒ~TDL–³­=çîeI˜Ìšb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvººÔ€àËÇñ‹+aue_write¨hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýr'O¿áL¬Tl¬¸ ½öΚ@” Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ºÔ€àËÇñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøÇQøÖD¦¡ù¯Àäi4КJ” Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvººÔ€àËÇñ‹+aue_sendtoà +ret_msgid +16932hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´€Z<4LA`¯!®^{$ú‰ÒšDê› µ dôFzé®{'üvºµ CjFzé®{'üvººÔ€àËÇñ‹+aue_recvfromà ret_msgid +16932hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬šüÊ®õÖú(O‹by—&É°øÔšbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKºÔ€àËÇñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý;ìèÞŽ EŸµ¹Òè?äÖšD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvººÔ€àËÇñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8Ãö@dCs¸9 qƒ(¬ØšD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvººÔ€àËÇñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýk…µçWI.² +áÇÙÕHÚš0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÒÞèËÇñ‹+aue_lseek¶î;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYo%ù€K‰žKßãƒQjãÜš0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U’ñ‰¬ÓÇñ‹+aue_lseekŠô;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýC¶üLZ’P'âæk§Þš0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêضÒÚÇñ‹+aue_lseekŠô;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁWç …ÆB „/‘êY.gâš ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UêضÒÚÇñ‹+20ÜS7[AIF¬•pd± (ýÁq¥ëC`’H抅l +yí’›ΛJ˜ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¢°‹ÆéÇñ‹+aue_sendtoà +ret_msgid +16938hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂÐä^KÃH\ƒÂ¸‹ìÕs›ЛDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢°‹ÆéÇñ‹+aue_recvfromà ret_msgid +16938hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý(Ͳü‚4CJ0.9"‰Ï€Ò›bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¢°‹ÆéÇñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÈ£=zC'@–«dYx"ÏÌeÔ›D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢°‹ÆéÇñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘ÜL<°EÌŒåÏ¿ª`}Ö›D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢°‹ÆéÇñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýúÓ̹ Aq“±$ïv8ýØ›D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÈ°ÈÏéÇñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓ½ÌZàçI7³ù#H…’4/Ú›D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÈ°ÈÏéÇñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýfK:—(Å´l wì›JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºžïŒôÇñ‹+aue_sendtoÚ +ret_msgid +16941hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý0 JdG ©‚J~Ÿ”s\î›JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºžïŒôÇñ‹+aue_sendto˜ +ret_msgid +16942hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýµ§ +-9+A‘ÒFŠå:ð›JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºžïŒôÇñ‹+aue_sendto¬ +ret_msgid +16943hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý_‘”YÏ÷M¸þ ‘ñþË ò›JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºžïŒôÇñ‹+aue_sendto˜ +ret_msgid +16944hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýè™wÁ<ÉGh»Fƒ%wš%ô›Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºžïŒôÇñ‹+aue_recvfromÚ ret_msgid +16941hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ývP3'åN·–\K5y[ö›Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºžïŒôÇñ‹+aue_recvfrom˜ ret_msgid +16942hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýi +"ZEÁC¦³–n™0: #ø›Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºžïŒôÇñ‹+aue_recvfrom¬ ret_msgid +16943hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý;~î§IV¹:;ê9_zaú›Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºžïŒôÇñ‹+aue_recvfrom˜ ret_msgid +16944hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýtäK&êµ@°Smò¦~/ü›@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¾•Ê›öÇñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®œû‹ ”ÕH«„_Îùãé;þ›@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¾•Ê›öÇñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý÷môOÓAû†>ÌÐÿ%€œ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¾•Ê›öÇñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý~+¾y2O/³ÅwE¤ž‚œb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¾•Ê›öÇñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý½">”Hõ•;gun¥ïŠ„œ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uºÿ‘¹øÇñ‹+aue_lseek¾ä<hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«§Fª"2L/°vÊrôOˆœ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uºÿ‘¹øÇñ‹+20ÜS7[AIF¬•pd± (ýòàê7¢Eé éÚ×®ZŠ†œ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uºÿ‘¹øÇñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýe¼R~ÁDö‹4ÞÈû3¯ˆŒœ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uºÿ‘¹øÇñ‹+20ÜS7[AIF¬•pd± (ýlìþ§ÍŒBñ¥°˜…£÷:Šœ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uºÿ‘¹øÇñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýúwÕÞwæB>‰ ã¥Ãí¯œ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uºÿ‘¹øÇñ‹+20ÜS7[AIF¬•pd± (ýï¤ßCò–×´;A›òŽœ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uºÿ‘¹øÇñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýá°D„’AqˆhlŠø,1’œ:‚œ Ê +ÙKFzé®›'üvººÿ‘¹øÇñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}˜Bv€KÞ©|8ØÆj”œ@š Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ºÿ‘¹øÇñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!íRâÒ9Kp4ªœ=Ÿˆ–œ@š Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uºÿ‘¹øÇñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-žo)„EOW®÷Ý/BùB˜œ@š Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uºÿ‘¹øÇñ‹+aue_preadò%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýLTJ?¸C¾ Y6G£Øœ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¼€›±‡Èñ‹+20ÜS7[AIF¬•pd± (ýLˆ4!†M +”Ó …EǬKÖœ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼€›±‡Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9š³ÙGBÕ´któå’ŒÖÚœ:‚œ Ê +ÙKFzé®›'üvº¼€›±‡Èñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýSý4Þ&eJ·ˆ-¤ógGÜœ@œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¼€›±‡Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦·d5ÀIÜ”B©.·NKÞœ@œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼€›±‡Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýq®F:æHx¶H†×nàœ@œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼€›±‡Èñ‹+aue_pread¸8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýrj=‘ÕÐI7¯¨NÊó¾H¥âœbœ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¼€›±‡Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²¯(t)ÁG Ó®¿ ¡D§äœb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¼€›±‡Èñ‹+aue_write¢9hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!g,9»DÎLLm܃E¯æœ@œ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¼€›±‡Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýhsèø!FÄ·±ì•ìÓ0<èœ@œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼€›±‡Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýEŠÍùKh´Sf¶Hsê@\‰} ¬;àâ„JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÒгŠÈñ‹+aue_sendtoÚ +ret_msgid +16947hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¾&M‰…cECŒk.ëX9k†JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÒгŠÈñ‹+aue_sendto˜ +ret_msgid +16948hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý‹›«·®Kg†„# »ˆˆJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÒгŠÈñ‹+aue_sendto¬ +ret_msgid +16949hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýýÊX×2sI¦ã·¢)ƒŠJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÒгŠÈñ‹+aue_sendto˜ +ret_msgid +16950hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý—G2@™¸Jw¼nãŽDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÒгŠÈñ‹+aue_recvfrom˜ ret_msgid +16948hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý[ò‹Ëh]C@©]UÚçZ«Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÒгŠÈñ‹+aue_recvfrom¬ ret_msgid +16949hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÏHëI2cNÔ´ÚbY€Œ:’Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÒгŠÈñ‹+aue_recvfrom˜ ret_msgid +16950hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý8`[ŽC@ÿ¡õnªá§äw”0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚ±ÉÅÈñ‹+aue_lseek´æ=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…ŒDèã-M’TŒåÄ—Ëè–0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÀÑ矖Èñ‹+aue_lseek´æ=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯õÍûÄVK ¦Ð¢3)¨áš ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÀÑ矖Èñ‹+20ÜS7[AIF¬•pd± (ý)îifO®¾4AQjB(Û˜@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÀÑ矖Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðÍH^´N¹’†ÞˆÓI +ž ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÀÑ矖Èñ‹+20ÜS7[AIF¬•pd± (ýòÐ!SI«@÷˜¦¨´BÇœ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÀÑ矖Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý² üŸ×˜NÍ‘× íªBAr¢ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÀÑ矖Èñ‹+20ÜS7[AIF¬•pd± (ýq4Ÿý]A°µA†¤Ë±› @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÀÑ矖Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý &¶ ÔE—ºX”´å›î¤:‚œ Ê +ÙKFzé®›'üvºÀÑ矖Èñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýém@˜ KM¸J%ê¬án¦@ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÀÑ矖Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"]cÑŠGÊ¡ã¦ÎǺËO¨@ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÀÑ矖Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”h"«H…Š˜†uÔéœõª@ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÀÑ矖Èñ‹+aue_preadŒ,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ŽœúÅhZCí‹L/‚/°.¢BÙجbž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÀÑ矖Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}sç®ÖH1™Í(G ©]º®b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÀÑ矖Èñ‹+aue_writeö,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼ðYØ%]B ¬^¼e]¦¡Ë°@ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÀÑ矖Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQbcëi¾Jƒ—ªórË<²@ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÀÑ矖Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽ¦>–$N¶¡Ö¶¦å¼˜§´@ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÀÑ矖Èñ‹+aue_pread´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýž“vÒÉbL5vÍÈ¢ì¶bž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÀÑ矖Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“™OØ;M¥¦Z¾B˜Òb!Ì@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÈÿšÈñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý—çoÖžLAO¸Ú5²ÐùütÎb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÈÿšÈñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýì«?yF}é®Ï'üvº¦×µ¨Fz鮩'üvº°äÿ§®]vRS<„äB±ÈÿšÈñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý|ÞqÕŽD(²Œþ‚n +ÀÐ$–œ ×µ¨Fz鮩'üvºì«?yF}é®Ï'üvºÈÿšÈñ‹+aue_fork +arg_pid1491hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1491ppid1281execbash20ÜS7[AIF¬•pd± (ýq+‘‹§_NÉXëGf¥—Ò²œ ì«?yF}é®Ï'üvº€ËâÞ +sñLì |‘Åç +Ü@²œ ì«?yF}é®Ï'üvºXꎩð®…\®ð@JÌ…¼âÈÿšÈñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý_ôünE°Fj±?¬~>C±Þ@²œ ì«?yF}é®Ï'üvºXꎩð®…\®ð@JÌ…¼âÈÿšÈñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýéðøEKh®_´è: « ಜ ì«?yF}é®Ï'üvºXꎩð®…\®ð@JÌ…¼âÈÿšÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execenv20ÜS7[AIF¬•pd± (ý±M¬ *2Aò“4j»Å[â<²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ÈÿšÈñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execenv20ÜS7[AIF¬•pd± (ý²Û’‡#ÔMO»­2…ToNgä2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œÈÿšÈñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý3¾ïSœIê¿þ!ç\»æ2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œÈÿšÈñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý÷¬MìJm³¹bÒW›Ê&è2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œÈÿšÈñ‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýQ¥šy½ÉEý¡npáønˆ”ê2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œÈÿšÈñ‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýµù¸FR/íQ¸>ì2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œÈÿšÈñ‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý¼ýJéO%Lc°vÞª†uÓî2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œÈÿšÈñ‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý\©[âkMK/F£œÝð2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œÈÿšÈñ‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýL韖VNOž¡¡ ÐX¡ò2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œÈÿšÈñ‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý€Øùú~#MQ¸ixìÖÆÂÅô²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œÈÿšÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýç}½ï½QE˜åð˜Yö:²œ ì«?yF}é®Ï'üvºÈÿšÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýH MÓ²MΛ‚ˆmtÝwø:²œ ì«?yF}é®Ï'üvºÈÿšÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýܯ=vùÈA·ž"×íz1ú²œ ì«?yF}é®Ï'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ÈÿšÈñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine.bash ./bash_commands.shppid1282execenv20ÜS7[AIF¬•pd± (ý˜nðÍ~æG‘™¼-ü<²œ ì«?yF}é®Ï'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÈÿšÈñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý¦­ÄÉrK ±ìâ +ØÃaþ@²œ ì«?yF}é®Ï'üvº‰oý©äÇU¤©A)Eǹ ÈÿšÈñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý~ñ¬ŸiýF¬’‹•ö¢PÝŒ€ž²œ ì«?yF}é®Ï'üvº‰oý©äÇU¤©A)Eǹ ìâÉšÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý^À0"TCà‰BX¿ÇHƒq‚ž<²œ ì«?yF}é®Ï'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsìâÉšÈñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý>ûÒB<‰I@£ÝåÖE¤„ž@²œ ì«?yF}é®Ï'üvºXꎩð®…\®ð@JÌ…¼âìâÉšÈñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý}™Å®iN‚º}ŒŒÛW™†ž@²œ ì«?yF}é®Ï'üvºXꎩð®…\®ð@JÌ…¼âìâÉšÈñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý´½Á•ÏöN¤[X¹-¥ˆž²œ ì«?yF}é®Ï'üvºXꎩð®…\®ð@JÌ…¼âìâÉšÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý#ýË °BIÁ“øËÈ[¨*CŠž<²œ ì«?yF}é®Ï'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8ìâÉšÈñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýÓ•þPQNÕ–«tÀ꛲)Œž2²œ ì«?yF}é®Ï'üvºâpÑ +m.×W®mAs××¼›ìâÉšÈñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý3¡1‡´iCGŒz1™Î_Žž2²œ ì«?yF}é®Ï'üvºâpÑ +m.×W®mAs××¼›ìâÉšÈñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÿ´6|²•C©—)®ì„Oçž2²œ ì«?yF}é®Ï'üvºâpÑ +m.×W®mAs××¼›ìâÉšÈñ‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý{¥¼‘TnM—•3—a p¸’ž2²œ ì«?yF}é®Ï'üvºâpÑ +m.×W®mAs××¼›ìâÉšÈñ‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý7cäe÷Jц ÉÏðÂw”ž2²œ ì«?yF}é®Ï'üvºâpÑ +m.×W®mAs××¼›ìâÉšÈñ‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý…‹jÙk–OݵÀ©éቖž2²œ ì«?yF}é®Ï'üvºâpÑ +m.×W®mAs××¼›ìâÉšÈñ‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýî0:óM²Nà½Ø$I#"˜ž2²œ ì«?yF}é®Ï'üvºâpÑ +m.×W®mAs××¼›ìâÉšÈñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý:ò7G0Ka˜_|§W*šž2²œ ì«?yF}é®Ï'üvºâpÑ +m.×W®mAs××¼›ìâÉšÈñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÄXêTø@Ï•Q‰s²ÛŠœž²œ ì«?yF}é®Ï'üvºâpÑ +m.×W®mAs××¼›ìâÉšÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý‡«„7x&N`·tƒ']Ìßžž<²œ ì«?yF}é®Ï'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8ìâÉšÈñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý×#eÖóLO°›wu¿úÏ ž2²œ ì«?yF}é®Ï'üvºm/"P;=\»P½¤¬=P_ìâÉšÈñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¶©óbiJF’FNŽ\lŸ¢ž2²œ ì«?yF}é®Ï'üvºm/"P;=\»P½¤¬=P_ìâÉšÈñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýì ÚéóD^ªçŸ‚ýˆ¼O¤ž2²œ ì«?yF}é®Ï'üvºm/"P;=\»P½¤¬=P_ìâÉšÈñ‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýçi¶¹ D¶›VGÕn³o“¦ž2²œ ì«?yF}é®Ï'üvºm/"P;=\»P½¤¬=P_ìâÉšÈñ‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýóDn…žMNŒ½Ýäé‹]f¨ž2²œ ì«?yF}é®Ï'üvºm/"P;=\»P½¤¬=P_ìâÉšÈñ‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý7vÒ —I†™y (6 ªž2²œ ì«?yF}é®Ï'üvºm/"P;=\»P½¤¬=P_ìâÉšÈñ‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýdS»œ‹Džh%µï¬ž2²œ ì«?yF}é®Ï'üvºm/"P;=\»P½¤¬=P_ìâÉšÈñ‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý(××ê>Oo¹d,ñx‚W|®ž2²œ ì«?yF}é®Ï'üvºm/"P;=\»P½¤¬=P_ìâÉšÈñ‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý,¾dˆ|»I{³ÒÃ…îhÙ2°ž²œ ì«?yF}é®Ï'üvºm/"P;=\»P½¤¬=P_ìâÉšÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýó3ÛöÂLšOìð4߲ۢž<²œ ì«?yF}é®Ï'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1ìâÉšÈñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý-lÇk2`M'½5Dû›™V´ž2²œ ì«?yF}é®Ï'üvº"‘ûŽdkÇ[«d.µ[ÇÕìâÉšÈñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýŸç£ÎËŽMï‚öÐ&v_«¶ž2²œ ì«?yF}é®Ï'üvº"‘ûŽdkÇ[«d.µ[ÇÕìâÉšÈñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"”Üú}Zz’ªÿKF’u#lñXF¸ž2²œ ì«?yF}é®Ï'üvº"‘ûŽdkÇ[«d.µ[ÇÕìâÉšÈñ‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý _”L™yC—“”TȳR4ºž2²œ ì«?yF}é®Ï'üvº"‘ûŽdkÇ[«d.µ[ÇÕìâÉšÈñ‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý´ÇfµõE ‡\!hNø¼ž2²œ ì«?yF}é®Ï'üvº"‘ûŽdkÇ[«d.µ[ÇÕìâÉšÈñ‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý%å@½§†D&ƒ!1Ÿ®ýܾž2²œ ì«?yF}é®Ï'üvº"‘ûŽdkÇ[«d.µ[ÇÕìâÉšÈñ‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÉlæauN#•ì^Én*üŸÀž2²œ ì«?yF}é®Ï'üvº"‘ûŽdkÇ[«d.µ[ÇÕìâÉšÈñ‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý›:¨ Z›Ik çkÞ–Oœž2²œ ì«?yF}é®Ï'üvº"‘ûŽdkÇ[«d.µ[ÇÕìâÉšÈñ‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý̹0x¶1E šŒúZjéçÄž²œ ì«?yF}é®Ï'üvº"‘ûŽdkÇ[«d.µ[ÇÕìâÉšÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý ·ÕÁHÿ ª8öGqÆž<²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ìâÉšÈñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýÌà‘Õ MG½2f½' ß9Èž2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œìâÉšÈñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýaÙ¬ŠBh†Ã…ò»Êž2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œìâÉšÈñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÀe¶(ÏãD£ÂL™ýn”Ìž2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œìâÉšÈñ‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýú pLcÉ@Çžæ7F Ξ2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œìâÉšÈñ‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýú;êH'LEgsÓÙRûО2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œìâÉšÈñ‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýà:Ü™cåEÒ¢v8xãPyÒž2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œìâÉšÈñ‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýuZºe=oM†#æ_2™ßÔž2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œìâÉšÈñ‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý;^pE¥FØFÓQ•àÖž2²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œìâÉšÈñ‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýøùtÛôSF&ªIiŸ«¼X†Øž²œ ì«?yF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œìâÉšÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýË ã„ +Ajˆ`IvE&¥Úž:²œ ì«?yF}é®Ï'üvºìâÉšÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýiAúmÕF‹¨ÑÔÄ÷ê)œÜž:²œ ì«?yF}é®Ï'üvºìâÉšÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýÉ2k„¬ J?ŽòaÅJ–Þž:²œ ì«?yF}é®Ï'üvºìâÉšÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýÈ'ï”\GÄ€ŒˆŸÄ¡`àž:²œ ì«?yF}é®Ï'üvºìâÉšÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýû9á ÊC»‹Cf(}´@âž:²œ ì«?yF}é®Ï'üvºìâÉšÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý̨ÇnJ²KD¢ã×Ó1u‘äž<²œ ì«?yF}é®Ï'üvºí( ö~R¶ ~{‚~¯/dev/ttyìâÉšÈñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýȦð&@Í )C±SúïÊæž²œ ì«?yF}é®Ï'üvºí( ö~R¶ ~{‚~¯ìâÉšÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý‘hÛ: Hò«ßZ·È@™èž<²œ ì«?yF}é®Ï'üvº€ËâÞ +©4QXÂÎz6êž0²œ ì«?yF}é®Ï'üvº€ËâÞ +N¸L껦“xº#g⮟°œ íFUF}é®Ï'üvºÏU…¹^…•öþ¹€ÜæðÖŒ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execbash20ÜS7[AIF¬•pd± (ý@´Æ‡,1CˆûÖ/¬? °Ÿ°œ íFUF}é®Ï'üvºÑROÄ:^…[ž:]!+…í/usr/bin/whoami'ìAzX™¦}˜¹(/libexec/ld-elf.so.1æðÖŒ¢Èñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine whoamippid1491execbash20ÜS7[AIF¬•pd± (ýžçWÊuGÿ—1á£Qj¬D²Ÿ<°œ íFUF}é®Ï'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confæðÖŒ¢Èñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýÂñC‰I˜‚@RÅÄè¨P´Ÿ@°œ íFUF}é®Ï'üvº‰oý©äÇU¤©A)Eǹ æðÖŒ¢Èñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ý:÷è‰ÐGE“ûm0«\#‚¶Ÿ°œ íFUF}é®Ï'üvº‰oý©äÇU¤©A)Eǹ æðÖŒ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491exec whoami20ÜS7[AIF¬•pd± (ýýµTõGF%%V/o좸Ÿ<°œ íFUF}é®Ï'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsæðÖŒ¢Èñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491exec whoami20ÜS7[AIF¬•pd± (ý±Ó.V3|M±Ê½ðºŸ@°œ íFUF}é®Ï'üvºXꎩð®…\®ð@JÌ…¼âæðÖŒ¢Èñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýlçbè´L¥¥¸â½Ø^zª¼Ÿ@°œ íFUF}é®Ï'üvºXꎩð®…\®ð@JÌ…¼âæðÖŒ¢Èñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýϪ›Ô·GZ¨n„T×€7–¾Ÿ°œ íFUF}é®Ï'üvºXꎩð®…\®ð@JÌ…¼âæðÖŒ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491exec whoami20ÜS7[AIF¬•pd± (ýisŒ½N“¼Yý®u-„¿ÀŸ<°œ íFUF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7æðÖŒ¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýΩÎïÖG!‘Öš…šÒŸ2°œ íFUF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýEŸ}ðnKÆžó÷™²ÀVÄŸ2°œ íFUF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ý±‚å·¦ÂB;¹³3Œ*oiÆŸ2°œ íFUF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ŒøûŒúÏsÞgLõ·³™tœéúÈŸ2°œ íFUF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýʽwdâCq¾y¿&"_ÇÊŸ2°œ íFUF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýÁí®@dpAƤDæNV¯ÌòÌŸ2°œ íFUF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ý¡Ó0¶×Gí½°=Wm–Ο2°œ íFUF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ý.€Ÿ Jô® ü§\¸†П2°œ íFUF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ý]ÃdHntCŠ€8ëݵkªßÒŸ°œ íFUF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491exec whoami20ÜS7[AIF¬•pd± (ý|XÛÛ`Lš¹>úԟ:°œ íFUF}é®Ï'üvºæðÖŒ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491exec whoami20ÜS7[AIF¬•pd± (ýÀ¬Ö;~Gu’Å’Q:¸¨KÖŸ:°œ íFUF}é®Ï'üvºæðÖŒ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491exec whoami20ÜS7[AIF¬•pd± (ý‚¯ðÜeE«›ä +w°„RØŸ<°œ íFUF}é®Ï'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.confæðÖŒ¢Èñ‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýÖ¤oÆÌÐC¥”H¿ø UmæÚŸ@°œ íFUF}é®Ï'üvºÜN½Ëê¯+^¯êZ£®+VæðÖŒ¢Èñ‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýIo惭$N9fuv&6§”ÜŸ@°œ íFUF}é®Ï'üvºÜN½Ëê¯+^¯êZ£®+VæðÖŒ¢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ý®Yk˜OG‘ØE.ÞŸ°œ íFUF}é®Ï'üvºÜN½Ëê¯+^¯êZ£®+VæðÖŒ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491exec whoami20ÜS7[AIF¬•pd± (ý±ÆõŠO讲ùo5YíàŸ<°œ íFUF}é®Ï'üvºfš Ž_è^ŸŽkèþ–/etc/pwd.dbæðÖŒ¢Èñ‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýø/×Ù„AJµ÷¬ê·u÷âŸ@°œ íFUF}é®Ï'üvºfš Ž_è^ŸŽkèþ–æðÖŒ¢Èñ‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýs +” -,Fx­í”«Ü“õ”äŸ@°œ íFUF}é®Ï'üvºfš Ž_è^ŸŽkèþ–æðÖŒ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýÕµbm B¢¡Of`·N æŸ@°œ íFUF}é®Ï'üvºfš Ž_è^ŸŽkèþ–æðÖŒ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýSݯ«ÄJ±Dõ ô*èŸ@°œ íFUF}é®Ï'üvºfš Ž_è^ŸŽkèþ–æðÖŒ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýFÆþdIá²l5H¢ÈG,êŸ@°œ íFUF}é®Ï'üvºfš Ž_è^ŸŽkèþ–æðÖŒ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýŠß#rvK«Ÿ[Ç6¡ ìŸ@°œ íFUF}é®Ï'üvºfš Ž_è^ŸŽkèþ–æðÖŒ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ý²Åðÿ‰ëOp’ÅXjØRîŸ@°œ íFUF}é®Ï'üvºfš Ž_è^ŸŽkèþ–æðÖŒ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýùÏ"S|K@`²ä|~°¼áðŸ@°œ íFUF}é®Ï'üvºfš Ž_è^ŸŽkèþ–æðÖŒ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýŸ¤ª€aKxŸ‰Î˶EòŸ@°œ íFUF}é®Ï'üvºfš Ž_è^ŸŽkèþ–æðÖŒ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec whoami20ÜS7[AIF¬•pd± (ýǺá»ÐCOõE/… hYôŸ°œ íFUF}é®Ï'üvºfš Ž_è^ŸŽkèþ–æðÖŒ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491exec whoami20ÜS7[AIF¬•pd± (ýzkWSGB…™‹ÍÏRã®öŸb°œ íFUF}é®Ï'üvºÏU…¹^…•öþ¹€ÜæðÖŒ¢Èñ‹+aue_write +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491exec whoami20ÜS7[AIF¬•pd± (ýÄå@»J˜Î\ï**øŸ°œ íFUF}é®Ï'üvºíFUF}é®Ï'üvºæðÖŒ¢Èñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491exec whoami20ÜS7[AIF¬•pd± (ýƒ­m<7FšZÌT°¬>ÚúŸ@²œ ì«?yF}é®Ï'üvº€ËâÞ + êFj‚@L@µM€ °œ íF€wF}é®Ï'üvº€ËâÞ +OE²øãB#{² 2°œ íF€wF}é®Ï'üvºyõÔÑC¼,_¼Cðgß,òEæðÖŒ¢Èñ‹+aue_mmap€ÀÁ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý)P×2GdHÓ•˜„m¯ûài´ 2°œ íF€wF}é®Ï'üvºyõÔÑC¼,_¼Cðgß,òEæðÖŒ¢Èñ‹+aue_mmap€À arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýŸ4m¼ížIÅ°' +GaîÊ”¶ 2°œ íF€wF}é®Ï'üvºyõÔÑC¼,_¼Cðgß,òEæðÖŒ¢Èñ‹+aue_mmap€À arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý³åyÌe·NU®DÒÉäcÉo¸ 2°œ íF€wF}é®Ï'üvºyõÔÑC¼,_¼Cðgß,òEæðÖŒ¢Èñ‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýdÍ" }FI±3¸,ÊôŽŸº 2°œ íF€wF}é®Ï'üvºyõÔÑC¼,_¼Cðgß,òEæðÖŒ¢Èñ‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýn‘ë¿×A½ ÷=μ °œ íF€wF}é®Ï'üvºyõÔÑC¼,_¼Cðgß,òEæðÖŒ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execnetstat20ÜS7[AIF¬•pd± (ýÄ;̶ÒHÉ‘~â7–ÛQ¾ <°œ íF€wF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœ/lib/libxo.so.0æðÖŒ¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýÑܤ]€¨CÒ÷-TL½*À 2°œ íF€wF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœæðÖŒ¢Èñ‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý’G¹8¹RIiŒ‚⇯¡‡× 2°œ íF€wF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœæðÖŒ¢Èñ‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýyF—+Î…HÎÄcv¢a1.Ä 2°œ íF€wF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœæðÖŒ¢Èñ‹+aue_mmap€ÀÄ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý僢´ÓLà¿Ù,Mîk٘Ơ2°œ íF€wF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœæðÖŒ¢Èñ‹+aue_mmap€ÀÄ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý$9§E +J—š#òöÊÐ [È 2°œ íF€wF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœæðÖŒ¢Èñ‹+aue_mmap€ÀÈ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýÞIE_ˆH¦°Îh}•­a Ê 2°œ íF€wF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœæðÖŒ¢Èñ‹+aue_mmap€ÀÈ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýP‹âk¸²BP‹ ºªi JÌ 2°œ íF€wF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœæðÖŒ¢Èñ‹+aue_mmap€€Ó arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýÈÕw¹¨D8Óúu ¹ƒΠ2°œ íF€wF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœæðÖŒ¢Èñ‹+aue_mmap€€Ó arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýÀ¯´ÜO»¡¼ÁÜ.£ÐР°œ íF€wF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœæðÖŒ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execnetstat20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ˆ„ý£·ÂvAƳ\Ê.pªyÒ <°œ íF€wF}é®Ï'üvº5‹s{¯lœZ¬¯ª}Zœµj"/lib/libutil.so.9æðÖŒ¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýµO®î¨B™~ °ˆ¯²Ô 2°œ íF€wF}é®Ï'üvº5‹s{¯lœZ¬¯ª}ZœµjæðÖŒ¢Èñ‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýg:¥ÒOA>¢ßVÉ)Ö 2°œ íF€wF}é®Ï'üvº5‹s{¯lœZ¬¯ª}ZœµjæðÖŒ¢Èñ‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý¯††c³Kô–A‰Ò{³y7Ø 2°œ íF€wF}é®Ï'üvº5‹s{¯lœZ¬¯ª}ZœµjæðÖŒ¢Èñ‹+aue_mmap€ÀÔ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýiôú”]c@½ÖÄDûÒYÚ 2°œ íF€wF}é®Ï'üvº5‹s{¯lœZ¬¯ª}ZœµjæðÖŒ¢Èñ‹+aue_mmap€ÀÔ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý±æ¢¸Jo£òšù"âÉÜ 2°œ íF€wF}é®Ï'üvº5‹s{¯lœZ¬¯ª}ZœµjæðÖŒ¢Èñ‹+aue_mmap€ÀØ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýðDF¿ÍhOf£ð…9÷f±9Þ 2°œ íF€wF}é®Ï'üvº5‹s{¯lœZ¬¯ª}ZœµjæðÖŒ¢Èñ‹+aue_mmap€ÀØ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý˜_¸ÎtCc È´°vguLà 2°œ íF€wF}é®Ï'üvº5‹s{¯lœZ¬¯ª}ZœµjæðÖŒ¢Èñ‹+aue_mmap€€Þ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý¯peHí@v¾¸^Ԧߛæâ 2°œ íF€wF}é®Ï'üvº5‹s{¯lœZ¬¯ª}ZœµjæðÖŒ¢Èñ‹+aue_mmap€€Þ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý“oå ÂÙNŽ®ÈçnÁ¬ÝÉä °œ íF€wF}é®Ï'üvº5‹s{¯lœZ¬¯ª}ZœµjæðÖŒ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execnetstat20ÜS7[AIF¬•pd± (ýOÚŽe,DTŸ¤ï¢2{mæ <°œ íF€wF}é®Ï'üvº`;‡à2RŒ^’2¬øžŒ““2/usr/lib/libnetgraph.so.4æðÖŒ¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýÙ,”rHË€ÓýpUmè 2°œ íF€wF}é®Ï'üvº`;‡à2RŒ^’2¬øžŒ““æðÖŒ¢Èñ‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýƒOoCH¢§™Ñiê 2°œ íF€wF}é®Ï'üvº`;‡à2RŒ^’2¬øžŒ““æðÖŒ¢Èñ‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýt­Ý!¤H3·v ‚9üLì 2°œ íF€wF}é®Ï'üvº`;‡à2RŒ^’2¬øžŒ““æðÖŒ¢Èñ‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýô’¬ ãG¤ž_íÀ£K¥î 2°œ íF€wF}é®Ï'üvº`;‡à2RŒ^’2¬øžŒ““æðÖŒ¢Èñ‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýÊ_A_¬=Bk·ˆ“9·M^ð 2°œ íF€wF}é®Ï'üvº`;‡à2RŒ^’2¬øžŒ““æðÖŒ¢Èñ‹+aue_mmap€€á arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýÂ|ÃÓƒOËŽü:Œ X]°ò 2°œ íF€wF}é®Ï'üvº`;‡à2RŒ^’2¬øžŒ““æðÖŒ¢Èñ‹+aue_mmap€€á arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýG·GÆkmMj˜Gk{|²hô 2°œ íF€wF}é®Ï'üvº`;‡à2RŒ^’2¬øžŒ““æðÖŒ¢Èñ‹+aue_mmap€€â arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýóÞÕIZðNúªÉ”£Áð0ö 2°œ íF€wF}é®Ï'üvº`;‡à2RŒ^’2¬øžŒ““æðÖŒ¢Èñ‹+aue_mmap€€â arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ým»C» D+¾{¹r</ø °œ íF€wF}é®Ï'üvº`;‡à2RŒ^’2¬øžŒ““æðÖŒ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execnetstat20ÜS7[AIF¬•pd± (ý¢üæeAeŽxùúyƒ3Tú <°œ íF€wF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7æðÖŒ¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýZ ˜’X@m®¶g¶8ü 2°œ íF€wF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý æÚ?ÃFÝ¢N¹ƒ†'¨þ 2°œ íF€wF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýUË \9$EŽë1æ«8b=€¡2°œ íF€wF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýÐ!X+D0¼ä)¿èÉ‚¡2°œ íF€wF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýý€PT@Ž˜‘½†¬¬%„¡2°œ íF€wF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý4ÔTM·½]W}mÛ¹†¡2°œ íF€wF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý/G8oM¤‡‹,åÐí÷wˆ¡2°œ íF€wF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý:Á ,LóHœ˜îЦú@Š¡2°œ íF€wF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýØ +_p—l@d¢üâubÅfŒ¡°œ íF€wF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œæðÖŒ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execnetstat20ÜS7[AIF¬•pd± (ýPc$Ç2ðIª¦‚Þ¯»`-뎡<°œ íF€wF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’Íç /lib/libelf.so.2æðÖŒ¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýS§ ? øDïš47ùP¼ó¡2°œ íF€wF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’ÍçæðÖŒ¢Èñ‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýTáÁ²¿¦Lu­ÖQ”=’¡2°œ íF€wF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’ÍçæðÖŒ¢Èñ‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý]ñüñ€3A •+ôñÙD»”¡2°œ íF€wF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’ÍçæðÖŒ¢Èñ‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý)ö‰)[OHÍ•þñ²ÔâÏm–¡2°œ íF€wF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’ÍçæðÖŒ¢Èñ‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý5v…y…DsˆŽÝD*ˆt¸˜¡2°œ íF€wF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’ÍçæðÖŒ¢Èñ‹+aue_mmap€Àã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý©“[ŠVLœ>k¤ó/š¡2°œ íF€wF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’ÍçæðÖŒ¢Èñ‹+aue_mmap€Àã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýß× „G· ýc-œ¡2°œ íF€wF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’ÍçæðÖŒ¢Èñ‹+aue_mmap€€ì arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ýE&%ÛÐ@½n=7ù•œž¡2°œ íF€wF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’ÍçæðÖŒ¢Èñ‹+aue_mmap€€ì arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnetstat20ÜS7[AIF¬•pd± (ý3%˜A~€á™÷Ž¥W ¡°œ íF€wF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’ÍçæðÖŒ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execnetstat20ÜS7[AIF¬•pd± (ýE|±½Eÿ¥.“U1¢¡:°œ íF€wF}é®Ï'üvºæðÖŒ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execnetstat20ÜS7[AIF¬•pd± (ýõFRw²AÉŠãíÚœŠ'¤¡:°œ íF€wF}é®Ï'üvºæðÖŒ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execnetstat20ÜS7[AIF¬•pd± (ý iÑ H&¿@”Á¡ÃĦ¡:°œ íF€wF}é®Ï'üvºæðÖŒ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execnetstat20ÜS7[AIF¬•pd± (ý+MúUW>LŸ‘ +ÇF‘ü^¨¡:°œ íF€wF}é®Ï'üvºæðÖŒ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execnetstat20ÜS7[AIF¬•pd± (ýºòoŒCˆªñ¶`˜€‡ª¡:°œ íF€wF}é®Ï'üvºæðÖŒ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execnetstat20ÜS7[AIF¬•pd± (ý€u-Q#E§GkkA7¬¡:°œ íF€wF}é®Ï'üvºæðÖŒ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execnetstat20ÜS7[AIF¬•pd± (ýjòLR8G³ƒý=ÉlÎ管:°œ íF€wF}é®Ï'üvºæðÖŒ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execnetstat20ÜS7[AIF¬•pd± (ý¦¬‰Ú¦M¶Nc(ÜåE°¡:°œ íF€wF}é®Ï'üvºæðÖŒ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execnetstat20ÜS7[AIF¬•pd± (ý« G½æ;J@–r¢ç·“²¡b°œ íF€wF}é®Ï'üvºÏU…¹^…•öþ¹€ÜæðÖŒ¢Èñ‹+aue_writeš2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491execnetstat20ÜS7[AIF¬•pd± (ýålúwÁJ¸©±ÚWV¡´¡°œ íF€wF}é®Ï'üvºíF€wF}é®Ï'üvºæðÖŒ¢Èñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execnetstat20ÜS7[AIF¬•pd± (ýê®5ò?Mɘó‚µÄE¶¡@²œ ì«?yF}é®Ï'üvº€ËâÞ +$nÕjä¡°œ íGE‘F}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œ¦ÓÚ•¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execcat20ÜS7[AIF¬•pd± (ý·zȶ-ÚAó½ºxdá0Ïæ¡:°œ íGE‘F}é®Ï'üvº¦ÓÚ•¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execcat20ÜS7[AIF¬•pd± (ýíèS2°G#€â1•Y²è¡:°œ íGE‘F}é®Ï'üvº¦ÓÚ•¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execcat20ÜS7[AIF¬•pd± (ýH×—îˆæO–üªÇ‹8ê¡b°œ íGE‘F}é®Ï'üvºí( ö~R¶ ~{‚~¯¦ÓÚ•¢Èñ‹+aue_write +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1491execcat20ÜS7[AIF¬•pd± (ýNNõ2dÐDP5= €Ó›ì¡b°œ íGE‘F}é®Ï'üvºí( ö~R¶ ~{‚~¯¦ÓÚ•¢Èñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1491execcat20ÜS7[AIF¬•pd± (ýÿcC+QÆG¶˜Ðeï Ð&î¡b°œ íGE‘F}é®Ï'üvºí( ö~R¶ ~{‚~¯¦ÓÚ•¢Èñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1491execcat20ÜS7[AIF¬•pd± (ýQ&%M:ŸGP‹žL+-éð¡b°œ íGE‘F}é®Ï'üvºí( ö~R¶ ~{‚~¯¦ÓÚ•¢Èñ‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1491execcat20ÜS7[AIF¬•pd± (ý*ŸG¦i-ÝóÙ2 ò¡°œ íGE‘F}é®Ï'üvºÏU…¹^…•öþ¹€Ü¦ÓÚ•¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1491execcat20ÜS7[AIF¬•pd± (ýßgä™ÚOŠ¥;}­/ ô¡°œ íGE‘F}é®Ï'üvºíGE‘F}é®Ï'üvº¦ÓÚ•¢Èñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execcat20ÜS7[AIF¬•pd± (ýµa0bE¦¥Â™P0 +0\ö¡@²œ ì«?yF}é®Ï'üvº€ËâÞ +J–™¼¢$²œ ì«?yF}é®Ï'üvºíH#rF}é®Ï'üvº¦ÓÚ•¢Èñ‹+aue_fork +arg_pid1497hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1497ppid1282execbash20ÜS7[AIF¬•pd± (ý‹¢’(§Q@ç²ÍTá=Xɾ¢°œ íH#rF}é®Ï'üvº€ËâÞ +/bin/ps'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¦ÓÚ•¢Èñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineps auxxppid1491execbash20ÜS7[AIF¬•pd± (ýêÅQM@0›ÑX‡©–`Æ¢<°œ íH#rF}é®Ï'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¦ÓÚ•¢Èñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execps20ÜS7[AIF¬•pd± (ýÑ"Ôb‹3Jž†­HmÃ!®'È¢@°œ íH#rF}é®Ï'üvº‰oý©äÇU¤©A)Eǹ ¦ÓÚ•¢Èñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýhˆú¶CMDf™òÜ3$®SÊ¢°œ íH#rF}é®Ï'üvº‰oý©äÇU¤©A)Eǹ ¦ÓÚ•¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execps20ÜS7[AIF¬•pd± (ý³ò sR­E±aiZò˜òÌ¢<°œ íH#rF}é®Ï'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¦ÓÚ•¢Èñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execps20ÜS7[AIF¬•pd± (ýÒ}(É}§L@Šž<íêòÑ΢@°œ íH#rF}é®Ï'üvºXꎩð®…\®ð@JÌ…¼â¦ÓÚ•¢Èñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý“† øS@u‘²’ÿIêТ@°œ íH#rF}é®Ï'üvºXꎩð®…\®ð@JÌ…¼â¦ÓÚ•¢Èñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý…~φe‹FF»rŽò‹Ô£•Ò¢°œ íH#rF}é®Ï'üvºXꎩð®…\®ð@JÌ…¼â¦ÓÚ•¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execps20ÜS7[AIF¬•pd± (ýQŠÄnFå‘s}¹E)ºªÔ¢<°œ íH#rF}é®Ï'üvºLÓÅ:îtX®:îXte˜/lib/libm.so.5¦ÓÚ•¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execps20ÜS7[AIF¬•pd± (ý¦çNb¶ZG‡à9å¬Ö¢2°œ íH#rF}é®Ï'üvºLÓÅ:îtX®:îXte˜¦ÓÚ•¢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý¦Äy¦B’hàGÞ«’<Ø¢2°œ íH#rF}é®Ï'üvºLÓÅ:îtX®:îXte˜¦ÓÚ•¢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý¼ÕˆG‡K³•Á}~kœÚ¢2°œ íH#rF}é®Ï'üvºLÓÅ:îtX®:îXte˜¦ÓÚ•¢Èñ‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýÝÔ:dþC·‚O˜ Ù”VÜ¢2°œ íH#rF}é®Ï'üvºLÓÅ:îtX®:îXte˜¦ÓÚ•¢Èñ‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýw I}¶¢F¶œ¸·šKñt´Þ¢2°œ íH#rF}é®Ï'üvºLÓÅ:îtX®:îXte˜¦ÓÚ•¢Èñ‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý ›jæFp ƒÖf‹¦à¢2°œ íH#rF}é®Ï'üvºLÓÅ:îtX®:îXte˜¦ÓÚ•¢Èñ‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýÕ1üvñI³¼~ö=y¿®Ôâ¢2°œ íH#rF}é®Ï'üvºLÓÅ:îtX®:îXte˜¦ÓÚ•¢Èñ‹+aue_mmap€€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý¬··F阕]10^Ÿä¢2°œ íH#rF}é®Ï'üvºLÓÅ:îtX®:îXte˜¦ÓÚ•¢Èñ‹+aue_mmap€€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"„îüÇe¼IŸD¾ +nJ ˆ 械œ íH#rF}é®Ï'üvºLÓÅ:îtX®:îXte˜¦ÓÚ•¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execps20ÜS7[AIF¬•pd± (ýŽC->çJ¨°Tlˆ?¦{­è¢<°œ íH#rF}é®Ï'üvºþáï›é”W“éÛJ—”gs /lib/libkvm.so.7¦ÓÚ•¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execps20ÜS7[AIF¬•pd± (ýµ¿dJØ¿IE™Ök¯ê¢2°œ íH#rF}é®Ï'üvºþáï›é”W“éÛJ—”gs¦ÓÚ•¢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý5%Œ´¢@]¢F¶lHTÈì¢2°œ íH#rF}é®Ï'üvºþáï›é”W“éÛJ—”gs¦ÓÚ•¢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýa j´õ Bg’h}ÆЙî¢2°œ íH#rF}é®Ï'üvºþáï›é”W“éÛJ—”gs¦ÓÚ•¢Èñ‹+aue_mmap€ÀÁ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýC0罟AM´•Õ KZBð¢2°œ íH#rF}é®Ï'üvºþáï›é”W“éÛJ—”gs¦ÓÚ•¢Èñ‹+aue_mmap€ÀÁ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýbXÎOBK†&gø4S³Zò¢2°œ íH#rF}é®Ï'üvºþáï›é”W“éÛJ—”gs¦ÓÚ•¢Èñ‹+aue_mmap€ÀÄ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý½yUè­˜Nƹ·{HÀÇô¢2°œ íH#rF}é®Ï'üvºþáï›é”W“éÛJ—”gs¦ÓÚ•¢Èñ‹+aue_mmap€ÀÄ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý1^7B¶ªÎÈ :9w³ö¢2°œ íH#rF}é®Ï'üvºþáï›é”W“éÛJ—”gs¦ÓÚ•¢Èñ‹+aue_mmap€ÀÉ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýì´žŽ›žJÀºÖ"Ʊfø¢2°œ íH#rF}é®Ï'üvºþáï›é”W“éÛJ—”gs¦ÓÚ•¢Èñ‹+aue_mmap€ÀÉ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýKác(" @R›ÜZ/*ÇÃú¢°œ íH#rF}é®Ï'üvºþáï›é”W“éÛJ—”gs¦ÓÚ•¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execps20ÜS7[AIF¬•pd± (ýžÃ*_ßJžŸ¤°]_pŸü¢<°œ íH#rF}é®Ï'üvº]¸&g [ gÃo{„£"/lib/libjail.so.1¦ÓÚ•¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execps20ÜS7[AIF¬•pd± (ýýŸžSŸéH"½røµtùŽ þ¢2°œ íH#rF}é®Ï'üvº]¸&g [ gÃo{„£¦ÓÚ•¢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýWœÀkÍ[Aæ¡íÐùV;‰€£2°œ íH#rF}é®Ï'üvº]¸&g [ gÃo{„£¦ÓÚ•¢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýø´Va­BE¯“žH¡š‚£2°œ íH#rF}é®Ï'üvº]¸&g [ gÃo{„£¦ÓÚ•¢Èñ‹+aue_mmap€€Ë arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýÊÆd6L7F—¥Ó«ÖŠ‡X„£2°œ íH#rF}é®Ï'üvº]¸&g [ gÃo{„£¦ÓÚ•¢Èñ‹+aue_mmap€€Ë arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýãeIýÕH +¨|Š)B<†£2°œ íH#rF}é®Ï'üvº]¸&g [ gÃo{„£¦ÓÚ•¢Èñ‹+aue_mmap€€Ì arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýQ’}Ba[sÇô?Ĉ£2°œ íH#rF}é®Ï'üvº]¸&g [ gÃo{„£¦ÓÚ•¢Èñ‹+aue_mmap€€Ì arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý°4åD±¾™Y‹˜OŠ£2°œ íH#rF}é®Ï'üvº]¸&g [ gÃo{„£¦ÓÚ•¢Èñ‹+aue_mmap€€Î arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýðÉ32™Kz±—¤þ®êU9Œ£2°œ íH#rF}é®Ï'üvº]¸&g [ gÃo{„£¦ÓÚ•¢Èñ‹+aue_mmap€€Î arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý-ÞŽDœÃ®kJŽ£°œ íH#rF}é®Ï'üvº]¸&g [ gÃo{„£¦ÓÚ•¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execps20ÜS7[AIF¬•pd± (ýCàK´>BÀ mÌ-v­ú£<°œ íH#rF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœ/lib/libxo.so.0¦ÓÚ•¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execps20ÜS7[AIF¬•pd± (ý™&`nÞæJ ‚7ÖûÐj3’£2°œ íH#rF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¦ÓÚ•¢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý˜ 9øc0Drå"§;øúV”£2°œ íH#rF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¦ÓÚ•¢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý{65D“@´6™º‚6S–£2°œ íH#rF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¦ÓÚ•¢Èñ‹+aue_mmap€ÀÏ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýo±·—ÂIJm£µ!n 䘣2°œ íH#rF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¦ÓÚ•¢Èñ‹+aue_mmap€ÀÏ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýX˜lF8H¼–:õÒ89Óš£2°œ íH#rF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¦ÓÚ•¢Èñ‹+aue_mmap€ÀÓ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýC…hƒ¹E&¯VßÐW-£œ£2°œ íH#rF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¦ÓÚ•¢Èñ‹+aue_mmap€ÀÓ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýô÷Ùj”A³®á™uö_é¿ž£2°œ íH#rF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¦ÓÚ•¢Èñ‹+aue_mmap€€Þ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýübrM‰ £_}UЇ £2°œ íH#rF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¦ÓÚ•¢Èñ‹+aue_mmap€€Þ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý‹®>iɽAt•W•t@x+.¢£°œ íH#rF}é®Ï'üvºAÑúÚ¹ËNU‹¹Êì…NNœ¦ÓÚ•¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execps20ÜS7[AIF¬•pd± (ýÍѼ¦¬@Û5|#^…»¤£<°œ íH#rF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¦ÓÚ•¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execps20ÜS7[AIF¬•pd± (ý«¦­vMá¼HeVáFé*¦£2°œ íH#rF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œ¦ÓÚ•¢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýJ :÷±"DƒÔ‘ð>›™¨£2°œ íH#rF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œ¦ÓÚ•¢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýY"]@ƒ˜56l2ïz²£2°œ íH#rF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œ¦ÓÚ•¢Èñ‹+aue_mmap€€Á arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýÛrMÓOâ¿\îtHEœ´£2°œ íH#rF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œ¦ÓÚ•¢Èñ‹+aue_mmap€€Á arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýhs\Rñ@Cþ²¯âlÒì¾ÿ¶£°œ íH#rF}é®Ï'üvºÞA`ì•øËQ¸•bxñË"œ¦ÓÚ•¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execps20ÜS7[AIF¬•pd± (ýO…oê”I¯±»ÎÀ‚f=¸£<°œ íH#rF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’Íç /lib/libelf.so.2¦ÓÚ•¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execps20ÜS7[AIF¬•pd± (ýßÁdÑaLú•¤n9>n̺£2°œ íH#rF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’Íç¦ÓÚ•¢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý^»$y¾M¤¸L.ˆ®i¼¼£2°œ íH#rF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’Íç¦ÓÚ•¢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý +añ™SAß²YxÓZº×¾£2°œ íH#rF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’Íç¦ÓÚ•¢Èñ‹+aue_mmap€€Ü arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýb0“ £@‹¨Ïe)Ù£^¼À£2°œ íH#rF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’Íç¦ÓÚ•¢Èñ‹+aue_mmap€€Ü arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýw•Ô©pÇGN¿Ï1ÆMŽ£2°œ íH#rF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’Íç¦ÓÚ•¢Èñ‹+aue_mmap€Àß arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýK5¯FºÝL9•,VX3 ½Ä£2°œ íH#rF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’Íç¦ÓÚ•¢Èñ‹+aue_mmap€Àß arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý:†l”N  øt§ÖŽoÆ£2°œ íH#rF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’Íç¦ÓÚ•¢Èñ‹+aue_mmap€€è arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýºL¶÷:FKâ€áAŠ(È£2°œ íH#rF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’Íç¦ÓÚ•¢Èñ‹+aue_mmap€€è arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý]†‚&ïæMq¸Tp­tbxˆÊ£°œ íH#rF}é®Ï'üvº1ßö¯È’Wˆ¯BRç’Íç¦ÓÚ•¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execps20ÜS7[AIF¬•pd± (ýà%5JÏrFõŽ«zCözRÌ£<°œ íH#rF}é®Ï'üvº5‹s{¯lœZ¬¯ª}Zœµj"/lib/libutil.so.9¦ÓÚ•¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execps20ÜS7[AIF¬•pd± (ý= ~îGŒ–Kw¥×׃9Σ2°œ íH#rF}é®Ï'üvº5‹s{¯lœZ¬¯ª}Zœµj¦ÓÚ•¢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý%€°–bN¶´Îk(L¸У2°œ íH#rF}é®Ï'üvº5‹s{¯lœZ¬¯ª}Zœµj¦ÓÚ•¢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýØ_ø?­N–ê… >"¦Ò£2°œ íH#rF}é®Ï'üvº5‹s{¯lœZ¬¯ª}Zœµj¦ÓÚ•¢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýö¡‡*Ø I˜ª s†"F=Ô£2°œ íH#rF}é®Ï'üvº5‹s{¯lœZ¬¯ª}Zœµj¦ÓÚ•¢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýOëµß¶F¡¨¾ùÌηÿRÖ£2°œ íH#rF}é®Ï'üvº5‹s{¯lœZ¬¯ª}Zœµj¦ÓÚ•¢Èñ‹+aue_mmap€€í arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý¦2¬¥NIxº¿Ur˜²]Ø£2°œ íH#rF}é®Ï'üvº5‹s{¯lœZ¬¯ª}Zœµj¦ÓÚ•¢Èñ‹+aue_mmap€€í arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýêññ -…GÚŸWýª\ .„Ú£2°œ íH#rF}é®Ï'üvº5‹s{¯lœZ¬¯ª}Zœµj¦ÓÚ•¢Èñ‹+aue_mmap€Àò arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ý‚ÉýC6IJž›èå±]·Ü£2°œ íH#rF}é®Ï'üvº5‹s{¯lœZ¬¯ª}Zœµj¦ÓÚ•¢Èñ‹+aue_mmap€Àò arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execps20ÜS7[AIF¬•pd± (ýOE†ýIT«E)d+†Þ£°œ íH#rF}é®Ï'üvº5‹s{¯lœZ¬¯ª}Zœµj¦ÓÚ•¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execps20ÜS7[AIF¬•pd± (ýäX]-ÞN@‹aO#=^Á%à£:°œ íH#rF}é®Ï'üvº¦ÓÚ•¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execps20ÜS7[AIF¬•pd± (ýÁ^:ï:™HתP>n¼¨kæâ£:°œ íH#rF}é®Ï'üvº¦ÓÚ•¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execps20ÜS7[AIF¬•pd± (ýª_Ký2\BܹXíÒ9‰ä£:°œ íH#rF}é®Ï'üvº¦ÓÚ•¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execps20ÜS7[AIF¬•pd± (ýû`;_ºB ™ã¯ìºk¹Ûæ£:°œ íH#rF}é®Ï'üvº¦ÓÚ•¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execps20ÜS7[AIF¬•pd± (ý”Ëe_mLˆ´·Yèc"è£:°œ íH#rF}é®Ï'üvº¦ÓÚ•¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execps20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"– û®Ò§tEòB,?çÂȆ±ê£:°œ íH#rF}é®Ï'üvº¦ÓÚ•¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execps20ÜS7[AIF¬•pd± (ýý !¼bgIc¹m‚ʇÊÊì£:°œ íH#rF}é®Ï'üvº¦ÓÚ•¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execps20ÜS7[AIF¬•pd± (ýmxyÙ8FN‡É¯wú¬óî£:°œ íH#rF}é®Ï'üvºŒØœŸ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execps20ÜS7[AIF¬•pd± (ýí”ø™óiHá¡1.Y³8ð£<°œ íH#rF}é®Ï'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nullŒØœŸ¢Èñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execps20ÜS7[AIF¬•pd± (ýlõ¹lc0@çý©cÖtò£<°œ íH#rF}é®Ï'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nullŒØœŸ¢Èñ‹+aue_openat_rwtc +flagsmode ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value4ppid1491execps20ÜS7[AIF¬•pd± (ýRûà3(OP£ ØX`dLô£<°œ íH#rF}é®Ï'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.confŒØœŸ¢Èñ‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1491execps20ÜS7[AIF¬•pd± (ýßr,wÄC’­cò Í{£ö£@°œ íH#rF}é®Ï'üvºÜN½Ëê¯+^¯êZ£®+VŒØœŸ¢Èñ‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execps20ÜS7[AIF¬•pd± (ýqzm™xF«‚%«€óZOñø£@°œ íH#rF}é®Ï'üvºÜN½Ëê¯+^¯êZ£®+VŒØœŸ¢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execps20ÜS7[AIF¬•pd± (ý8š‰÷½J‚1°xúØMú£°œ íH#rF}é®Ï'üvºÜN½Ëê¯+^¯êZ£®+VŒØœŸ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1491execps20ÜS7[AIF¬•pd± (ý[P».F%•wì뮊Éü£<°œ íH#rF}é®Ï'üvºfš Ž_è^ŸŽkèþ–/etc/pwd.dbŒØœŸ¢Èñ‹+aue_open_rwtc +flagsmode +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1491execps20ÜS7[AIF¬•pd± (ýÊRª¿=C¹‹.× +ï­·çþ£@°œ íH#rF}é®Ï'üvºfš Ž_è^ŸŽkèþ–ŒØœŸ¢Èñ‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execps20ÜS7[AIF¬•pd± (ýÀàÙáH„‹n®SX³Ç€¤@°œ íH#rF}é®Ï'üvºfš Ž_è^ŸŽkèþ–ŒØœŸ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execps20ÜS7[AIF¬•pd± (ý#ý°|m–DtX>è¿á•‚¤@°œ íH#rF}é®Ï'üvºfš Ž_è^ŸŽkèþ–ŒØœŸ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execps20ÜS7[AIF¬•pd± (ý:-»N_¥ÿƒü¤4´Ù„¤<°œ íH#rF}é®Ï'üvºª®bŠ;_ƒŠÖVŸ;*H./usr/share/zoneinfo/UTCŒØœŸ¢Èñ‹+aue_open_rwtc +flagsmode +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1491execps20ÜS7[AIF¬•pd± (ýƒVš¹—£D‘©ž:^¥ù†¤@°œ íH#rF}é®Ï'üvºª®bŠ;_ƒŠÖVŸ;*HŒØœŸ¢Èñ‹+aue_readìhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1491execps20ÜS7[AIF¬•pd± (ýZöÞ.PƒMׇÿS«HkkÙˆ¤°œ íH#rF}é®Ï'üvºª®bŠ;_ƒŠÖVŸ;*HŒØœŸ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1491execps20ÜS7[AIF¬•pd± (ývíÕ‚*Cѳ¢“~³ +;Š¤<°œ íH#rF}é®Ï'üvºR‘GVË–D[–Ë.P+Dö}Q3À¤Öœ íIVâF}é®Ð'üvºXꎩð®…\®ð@JÌ…¼âŒØœŸ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýq&nMS½?Ìf@[ü|¤<Öœ íIVâF}é®Ð'üvº5‹s{¯lœZ¬¯ª}Zœµj"/lib/libutil.so.9ŒØœŸ¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execsudo20ÜS7[AIF¬•pd± (ýèJQ”`KƃÁ~Èœã\ÆĤ2Öœ íIVâF}é®Ð'üvº5‹s{¯lœZ¬¯ª}ZœµjŒØœŸ¢Èñ‹+aue_mmap€€² arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ýä‘g.ý¦N®›¶‹`b#2Ƥ2Öœ íIVâF}é®Ð'üvº5‹s{¯lœZ¬¯ª}ZœµjŒØœŸ¢Èñ‹+aue_mmap€€² arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ý¸pJ˜ÚM"ŠçŽtQ¹èùȤ2Öœ íIVâF}é®Ð'üvº5‹s{¯lœZ¬¯ª}ZœµjŒØœŸ¢Èñ‹+aue_mmap€À² arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ý㿶0­BÏš¬&%5Jt*ʤ2Öœ íIVâF}é®Ð'üvº5‹s{¯lœZ¬¯ª}ZœµjŒØœŸ¢Èñ‹+aue_mmap€À² arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ýX6’È‘OAï¯JŸk'v¯Î̤2Öœ íIVâF}é®Ð'üvº5‹s{¯lœZ¬¯ª}ZœµjŒØœŸ¢Èñ‹+aue_mmap€À¶ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ý?Cg„ÍNA +Ïöz²Τ2Öœ íIVâF}é®Ð'üvº5‹s{¯lœZ¬¯ª}ZœµjŒØœŸ¢Èñ‹+aue_mmap€À¶ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ýtF¾"¿°G»˜Ê‘dÂÒФ2Öœ íIVâF}é®Ð'üvº5‹s{¯lœZ¬¯ª}ZœµjŒØœŸ¢Èñ‹+aue_mmap€€¼ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ýpóP>ÕFôwTàø‰·Ò¤2Öœ íIVâF}é®Ð'üvº5‹s{¯lœZ¬¯ª}ZœµjŒØœŸ¢Èñ‹+aue_mmap€€¼ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ýxc¸“É«O"¨(õ"ÍTräÔ¤Öœ íIVâF}é®Ð'üvº5‹s{¯lœZ¬¯ª}ZœµjŒØœŸ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý¥‹ÜÈ”ˆG}•1;¡×²'tÖ¤<Öœ íIVâF}é®Ð'üvºcŠCU–…¥ôûô;Ɔ¥2Öœ íIVâF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œŒØœŸ¢Èñ‹+aue_mmap€ÀÐ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ý@´â¨K³Œ³$ð+Ñ¥ˆ¥2Öœ íIVâF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œŒØœŸ¢Èñ‹+aue_mmap€À arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ý·gNýÓ8OV–‰ÿK½Ü.¡Š¥2Öœ íIVâF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œŒØœŸ¢Èñ‹+aue_mmap€À arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ý¤ó»ê½J3½{œo˜?øüŒ¥2Öœ íIVâF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œŒØœŸ¢Èñ‹+aue_mmap€€² arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ý%ãrÙ rCw¬&Nnw\²Ž¥2Öœ íIVâF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œŒØœŸ¢Èñ‹+aue_mmap€€² arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ýXç7__AT¾c2èËv:=¥Öœ íIVâF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œŒØœŸ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýƒ¤«éxJFª»aË/HivA’¥:Öœ íIVâF}é®Ð'üvºŒØœŸ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý.,ÕûŠC‹˜öâà>+>”¥:Öœ íIVâF}é®Ð'üvºŒØœŸ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý ? +)§K´“ö@þ¹–¥:Öœ íIVâF}é®Ð'üvºŒØœŸ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý¹{CÂAý©É{ùñ*˜¥:Öœ íIVâF}é®Ð'üvºŒØœŸ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý<Õ½TÑSKIˆk!£« +Ÿš¥:Öœ íIVâF}é®Ð'üvºŒØœŸ¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ým-9!ÖC‚ŸÏ6ye”ù3œ¥"Öœ íIVâF}é®Ð'üvºŒØœŸ¢Èñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1491execsudo20ÜS7[AIF¬•pd± (ý3'Rþ @"“ƒ¤t#ç5ž¥"Öœ íIVâF}é®Ð'üvºŒØœŸ¢Èñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1491execsudo20ÜS7[AIF¬•pd± (ýð!˜ÃãK¦«Œ>}©H;K ¥"Öœ íIVâF}é®Ð'üvºŒØœŸ¢Èñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1491execsudo20ÜS7[AIF¬•pd± (ýðšqMØ—°AÓ“Õ颥<Öœ íIVâF}é®Ð'üvºª®bŠ;_ƒŠÖVŸ;*H./usr/share/zoneinfo/UTCŒØœŸ¢Èñ‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1491execsudo20ÜS7[AIF¬•pd± (ý5zÁ¿rMyˆ¹ +…Ï°‚¤¥@Öœ íIVâF}é®Ð'üvºª®bŠ;_ƒŠÖVŸ;*HŒØœŸ¢Èñ‹+aue_readìhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ýƒ†DU®ICœQë…Øybg¦¥Öœ íIVâF}é®Ð'üvºª®bŠ;_ƒŠÖVŸ;*HŒØœŸ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýô…±ñ(ïKá”p@(µM¨¥<Öœ íIVâF}é®Ð'üvºR‘GVË–D[–Ë.P+Dög/etc/spwd.dbŒØœŸ¢Èñ‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1491execsudo20ÜS7[AIF¬•pd± (ý[Ó¤/ê@ºWÇPîÂܸ¥@Öœ íIVâF}é®Ð'üvºôì{M6N?^Ž6%â?>gŒØœŸ¢Èñ‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ý¨ïOè¢]Dš¶ +“™\ë®ïº¥@Öœ íIVâF}é®Ð'üvºôì{M6N?^Ž6%â?>gŒØœŸ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ý˜(.¦zH•á÷Æ„'¼¥<Öœ íIVâF}é®Ð'üvºZ2°Ë1]±m‘¨/etc/groupŒØœŸ¢Èñ‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1491execsudo20ÜS7[AIF¬•pd± (ýy1Ÿ•S˜BØ–¯Œ¯ï“]]¾¥<Öœ íIVâF}é®Ð'üvºí( ö~R¶ ~{‚~¯/dev/ttyŒØœŸ¢Èñ‹+aue_openat_rwtc +flagsmode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1491execsudo20ÜS7[AIF¬•pd± (ýU›Ô|tÌME¿ŽhЮ 2À¥Öœ íIVâF}é®Ð'üvºí( ö~R¶ ~{‚~¯ŒØœŸ¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýñ„©c +K,‰U´çëÝÂ¥@Öœ íIVâF}é®Ð'üvºôì{M6N?^Ž6%â?>gŒØœŸ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ýQ2„;Š@K=‡‰ælÞrÄ¥@Öœ íIVâF}é®Ð'üvºôì{M6N?^Ž6%â?>gŒØœŸ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ýá5â‚·IOÿª\B£ªâ\ Æ¥@Öœ íIVâF}é®Ð'üvºôì{M6N?^Ž6%â?>gŒØœŸ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ý‹¾xéƒB‘¨Ýí§Ïj7€È¥@Öœ íIVâF}é®Ð'üvºôì{M6N?^Ž6%â?>gŒØœŸ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ý +½Ë÷÷]F}Ž@ñÖ§ú‚Ê¥@Öœ íIVâF}é®Ð'üvºôì{M6N?^Ž6%â?>gŒØœŸ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ýÚ×(‹7ÂNl´)ét ¡¡Ì¥@Öœ íIVâF}é®Ð'üvºôì{M6N?^Ž6%â?>gŒØœŸ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ýÇ"8CF"¬ÌÚÁPØqÎ¥@Öœ íIVâF}é®Ð'üvºôì{M6N?^Ž6%â?>gŒØœŸ¢Èñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execsudo20ÜS7[AIF¬•pd± (ýÒù„œïL‘°ÕÕ!g1]Ð¥6Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvºŒØœŸ¢Èñ‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1491execsudo20ÜS7[AIF¬•pd± (ý8£Ã¦I5²,Æ[( ÆuÒ¥6Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvºŒØœŸ¢Èñ‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý³wE–ÃFožÕ±—ºÔ¥<Öœ íIVâF}é®Ð'üvº"9#;–"s^¢–‰8Ns“]D/usr/local/libexec/sudo/sudoers.so†Ç䨢Èñ‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1491execsudo20ÜS7[AIF¬•pd± (ý§OºRQJƒ¸D[Ù3¦mÖ¥2Öœ íIVâF}é®Ð'üvº"9#;–"s^¢–‰8Ns“]†Ç䨢Èñ‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýɶ/Í ÒA槌cÅ‹(¤4Ø¥2Öœ íIVâF}é®Ð'üvº"9#;–"s^¢–‰8Ns“]†Ç䨢Èñ‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý —Äf…ÌM¹âûìÚ¥2Öœ íIVâF}é®Ð'üvº"9#;–"s^¢–‰8Ns“]†Ç䨢Èñ‹+aue_mmap€Àý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý3|†ê^0FW­§ü—aŠrÜ¥2Öœ íIVâF}é®Ð'üvº"9#;–"s^¢–‰8Ns“]†Ç䨢Èñ‹+aue_mmap€Àý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý“žuÝ:‹Mrü@z¦cvøÞ¥2Öœ íIVâF}é®Ð'üvº"9#;–"s^¢–‰8Ns“]†Ç䨢Èñ‹+aue_mmap€À‹ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý#íZóCé«æŠdr\Ë£à¥2Öœ íIVâF}é®Ð'üvº"9#;–"s^¢–‰8Ns“]†Ç䨢Èñ‹+aue_mmap€À‹ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý€÷6VeD›²•QNèûâ¥2Öœ íIVâF}é®Ð'üvº"9#;–"s^¢–‰8Ns“]†Ç䨢Èñ‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý(ÆC?„rƒƒÆ`eä¥2Öœ íIVâF}é®Ð'üvº"9#;–"s^¢–‰8Ns“]†Ç䨢Èñ‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý«ßÐéOJ,¸³íÝQ09aæ¥Öœ íIVâF}é®Ð'üvº"9#;–"s^¢–‰8Ns“]†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýï© FDˆ‹aÅ&ÇQ‡è¥<Öœ íIVâF}é®Ð'üvºöâÜ-ŽTš-æTŽ¹(/usr/lib/libbsm.so.3†Ç䨢Èñ‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1491execsudo20ÜS7[AIF¬•pd± (ý˜#)uöÀD¿¢ØÀ ‰ê¥2Öœ íIVâF}é®Ð'üvºöâÜ-ŽTš-æTŽ¹†Ç䨢Èñ‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýøpˆV}â@B%ƒ«#äžMì¥2Öœ íIVâF}é®Ð'üvºöâÜ-ŽTš-æTŽ¹†Ç䨢Èñ‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýÿ{Žÿ +C]Û¦Êg Æî¥2Öœ íIVâF}é®Ð'üvºöâÜ-ŽTš-æTŽ¹†Ç䨢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý2Ç®‡D”¤vŽ'8ºð¥2Öœ íIVâF}é®Ð'üvºöâÜ-ŽTš-æTŽ¹†Ç䨢Èñ‹+aue_mmap€€¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý–71ÅOGŸŸL6èåm~žò¥2Öœ íIVâF}é®Ð'üvºöâÜ-ŽTš-æTŽ¹†Ç䨢Èñ‹+aue_mmap€€­ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý ÁðÑO³¹U[ZqŒ}ô¥2Öœ íIVâF}é®Ð'üvºöâÜ-ŽTš-æTŽ¹†Ç䨢Èñ‹+aue_mmap€€­ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýûG²È¡&M¡IĆKDÇ›ö¥2Öœ íIVâF}é®Ð'üvºöâÜ-ŽTš-æTŽ¹†Ç䨢Èñ‹+aue_mmap€Àµ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýíõדèíE\‡Uê×´Êø¥2Öœ íIVâF}é®Ð'üvºöâÜ-ŽTš-æTŽ¹†Ç䨢Èñ‹+aue_mmap€Àµ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý6þ"ÁO«@ЙÞ LE¡!ú¥Öœ íIVâF}é®Ð'üvºöâÜ-ŽTš-æTŽ¹†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýA¼³¢> JA£Õ–K¹Iü¥<Öœ íIVâF}é®Ð'üvº ªV.x±h^±xåNhžõ(/usr/lib/libpam.so.6†Ç䨢Èñ‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1491execsudo20ÜS7[AIF¬•pd± (ýYL¶£ OgºËȃR;¸Àþ¥2Öœ íIVâF}é®Ð'üvº ªV.x±h^±xåNhžõ†Ç䨢Èñ‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý$gIÎŒ§H~½gþ–ZJKµ€¦2Öœ íIVâF}é®Ð'üvº ªV.x±h^±xåNhžõ†Ç䨢Èñ‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"†¼üs—FCÇÜ@ä‘[ëÄqÿ›‚¦2Öœ íIVâF}é®Ð'üvº ªV.x±h^±xåNhžõ†Ç䨢Èñ‹+aue_mmap€€· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýn I¨Nå™ö¥j>vI|„¦2Öœ íIVâF}é®Ð'üvº ªV.x±h^±xåNhžõ†Ç䨢Èñ‹+aue_mmap€€· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýûU eý—O£®³0Œ+n冦2Öœ íIVâF}é®Ð'üvº ªV.x±h^±xåNhžõ†Ç䨢Èñ‹+aue_mmap€€º arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý¥r·D Fè®Ë/²gŽáˆ¦2Öœ íIVâF}é®Ð'üvº ªV.x±h^±xåNhžõ†Ç䨢Èñ‹+aue_mmap€€º arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýÄu{eOÛ¼ÏI®ø–Š¦2Öœ íIVâF}é®Ð'üvº ªV.x±h^±xåNhžõ†Ç䨢Èñ‹+aue_mmap€À½ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý 'K3 L¤Jp”àØ|vŒ¦2Öœ íIVâF}é®Ð'üvº ªV.x±h^±xåNhžõ†Ç䨢Èñ‹+aue_mmap€À½ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý.¸_>ÜK׉†'®èz.öŽ¦Öœ íIVâF}é®Ð'üvº ªV.x±h^±xåNhžõ†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýeÞNUËéJŽžW2wÆdÓ¦<Öœ íIVâF}é®Ð'üvº¥_¤!0rtQ²0 ñt¿ñ/lib/libz.so.6†Ç䨢Èñ‹+aue_openat_rwtc +flags0mode ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value5ppid1491execsudo20ÜS7[AIF¬•pd± (ýº†R‹~'Jœ›øɼóc’¦2Öœ íIVâF}é®Ð'üvº¥_¤!0rtQ²0 ñt¿ñ†Ç䨢Èñ‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý‰Þ6v$NX§Ú>¼Ó;BQ”¦2Öœ íIVâF}é®Ð'üvº¥_¤!0rtQ²0 ñt¿ñ†Ç䨢Èñ‹+aue_mmap€€ý arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýpþi + LŽ”h–ª«n–¦2Öœ íIVâF}é®Ð'üvº¥_¤!0rtQ²0 ñt¿ñ†Ç䨢Èñ‹+aue_mmap€€¿ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý¸ƒ-úR#M£˜;Æ*þÑ4˜˜¦2Öœ íIVâF}é®Ð'üvº¥_¤!0rtQ²0 ñt¿ñ†Ç䨢Èñ‹+aue_mmap€€¿ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý`\Eb£ÇE8’'*|ÇhUš¦2Öœ íIVâF}é®Ð'üvº¥_¤!0rtQ²0 ñt¿ñ†Ç䨢Èñ‹+aue_mmap€€Ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý£Ÿ>Ù>ÒDú-ïež!„Žœ¦2Öœ íIVâF}é®Ð'üvº¥_¤!0rtQ²0 ñt¿ñ†Ç䨢Èñ‹+aue_mmap€€Ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý–«­bÌBƘ‘jªÈáf"ž¦2Öœ íIVâF}é®Ð'üvº¥_¤!0rtQ²0 ñt¿ñ†Ç䨢Èñ‹+aue_mmap€ÀË arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýžlÊ~&œFÚŸü½Ìï ¦2Öœ íIVâF}é®Ð'üvº¥_¤!0rtQ²0 ñt¿ñ†Ç䨢Èñ‹+aue_mmap€ÀË arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýŽÝGJäXDe¡í¼Í³¢¦Öœ íIVâF}é®Ð'üvº¥_¤!0rtQ²0 ñt¿ñ†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý²8'RGjCLC¢ÆÇà‚¤¦:Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýì …9@јy„3‡z'¦¦:Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý+§#€Q*AGº£zIk¨¦:Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýÃÛQ…|rI¨-¤÷sð^ª¦:Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý*%3gzqA‹¢}ìRD:¬¦ +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_setresuiduideuidÿsuidÿarg_euid-1arg_ruid0arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý jÔe!Må–ÀϧWï冷¦ +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_setresgidgidÿegidsgidÿarg_egid0arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý)ÿXj¯ClšG~‡d‘v°¦ +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_setresuiduidÿeuidsuidÿarg_euid1arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýºm\‚%F¬Ž#B°,𧲦<Öœ íIVâF}é®Ð'üvºã.Ú×Wš.«ÆW×(Í,/usr/local/etc/sudoers†Ç䨢Èñ‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1491execsudo20ÜS7[AIF¬•pd± (ýZÀ%·1HP½šIH{T´¦@Öœ íIVâF}é®Ð'üvºã.Ú×Wš.«ÆW×(͆Ç䨢Èñ‹+aue_read¼9hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýe¸ÉóJ½½ÍôSGØ]…¶¦0Öœ íIVâF}é®Ð'üvºã.Ú×Wš.«ÆW×(͆Ç䨢Èñ‹+aue_lseek¼9hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýü—BÎêÆIá–<ØOo}Ã$¸¦"Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý®š²#ÿ›ÀE»¦¾ÍƒÀÉÖýΦ0Öœ íIVâF}é®Ð'üvºZ2°Ë1]±m‘¨†Ç䨢Èñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ýS-‚C‡NL»º2f»\vÉáЦ@Öœ íIVâF}é®Ð'üvºZ2°Ë1]±m‘¨†Ç䨢Èñ‹+aue_readðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ýõj[BƒI‡€!óp>ó°Ò¦@Öœ íIVâF}é®Ð'üvºZ2°Ë1]±m‘¨†Ç䨢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ýÔ•Æ 2Ds´Éºóy!¦Ô¦Öœ íIVâF}é®Ð'üvºZ2°Ë1]±m‘¨†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýS›ñQ}N¦4zxí8»?Ö¦ +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_setresgidgidÿegidësgidÿarg_egid1003arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýn @ÆXK´­9“V,Ù¶Ïئ +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_setresuiduidÿeuidÿsuidÿarg_euid-1arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý)í'HFO誥úÅDÒKÚ¦ +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_setresgidgidÿegidsgidÿarg_egid0arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý_TyIÌEþ Áq¤¼ܦ<Öœ íIVâF}é®Ð'üvºZ2°Ë1]±m‘¨/etc/group†Ç䨢Èñ‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1491execsudo20ÜS7[AIF¬•pd± (ý0è«“ÿ6B¥°õxµ9aŒÞ¦@Öœ íIVâF}é®Ð'üvºZ2°Ë1]±m‘¨†Ç䨢Èñ‹+aue_readðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ýi-I¨,9JÞ¨Cî9ÈÙ@à¦Öœ íIVâF}é®Ð'üvºZ2°Ë1]±m‘¨†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýZßý3îAŇÍ7¡ç â¦<Öœ íIVâF}é®Ð'üvºZ2°Ë1]±m‘¨/etc/group†Ç䨢Èñ‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1491execsudo20ÜS7[AIF¬•pd± (ý¶.J…‰ŸFn£tØY-ìTä¦@Öœ íIVâF}é®Ð'üvºZ2°Ë1]±m‘¨†Ç䨢Èñ‹+aue_readðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ý,mE÷œ¾¶¹Æ³€/æ¦Öœ íIVâF}é®Ð'üvºZ2°Ë1]±m‘¨†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý›ŸAo»ÞQä^” è¦ +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_setresgidgidÿegidësgidÿarg_egid1003arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý»)ø°VKƒ±gDEIË]ê¦ +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_setresuiduidÿeuidÿsuidÿarg_euid-1arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýÌ=êç²KAý¹l2œ½2ì¦<Öœ íIVâF}é®Ð'üvºHÞp¬«#®R£«ö)â®42/usr/local/etc/pam.d/sudo†Ç䨢Èñ‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1491execsudo20ÜS7[AIF¬•pd± (ýÄÔ”3ç‚E8¶TDkÿ®>î¦@Öœ íIVâF}é®Ð'üvºHÞp¬«#®R£«ö)â®4†Ç䨢Èñ‹+aue_read†hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ý4‘„G–J… +·ì;Ä{Çð¦<Öœ íIVâF}é®Ð'üvºÀ‹kB¼Ñ^¼B<.Ñë,"/etc/pam.d/system†Ç䨢Èñ‹+aue_open_rwtc +flagsmode¶ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1491execsudo20ÜS7[AIF¬•pd± (ýÛR•ÖMV“à-W)}.ò¦@Öœ íIVâF}é®Ð'üvºÀ‹kB¼Ñ^¼B<.Ñë,†Ç䨢Èñ‹+aue_read +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1491execsudo20ÜS7[AIF¬•pd± (ýU fHWM[‘\Gr®ri€ô¦<Öœ íIVâF}é®Ð'üvºzËŽw•ÏT•w{³tÏy“,/usr/lib/pam_opie.so.6†Ç䨢Èñ‹+aue_openat_rwtc +flagsmode ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value7ppid1491execsudo20ÜS7[AIF¬•pd± (ý Vhß>Dž£w] ¼W´“ö¦"Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_fcntlcmd ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value8ppid1491execsudo20ÜS7[AIF¬•pd± (ýZÁm‡¡I ¦"\LPEsÇø¦2Öœ íIVâF}é®Ð'üvºzËŽw•ÏT•w{³tÏy“†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý«ŸÔÖNOŒ»ñ2)ìÇÃRú¦2Öœ íIVâF}é®Ð'üvºzËŽw•ÏT•w{³tÏy“†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý'qC#‚®åýÆiü¦2Öœ íIVâF}é®Ð'üvºzËŽw•ÏT•w{³tÏy“†Ç䨢Èñ‹+aue_mmap€Àé arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý[šBâžÛO¿-ÔþÓIþ¦2Öœ íIVâF}é®Ð'üvºzËŽw•ÏT•w{³tÏy“†Ç䨢Èñ‹+aue_mmap€Àé arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýFfŽæweOH¾ñõœ@É€§2Öœ íIVâF}é®Ð'üvºzËŽw•ÏT•w{³tÏy“†Ç䨢Èñ‹+aue_mmap€€ê arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý‘¤q¦›7OÝ¢›FŸ¡€ö‚§2Öœ íIVâF}é®Ð'üvºzËŽw•ÏT•w{³tÏy“†Ç䨢Èñ‹+aue_mmap€€ê arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý ç÷„í=N¯†À„Y¼É„§2Öœ íIVâF}é®Ð'üvºzËŽw•ÏT•w{³tÏy“†Ç䨢Èñ‹+aue_mmap€Àê arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý&`ï ú$B¼²¹cß3„n†§2Öœ íIVâF}é®Ð'üvºzËŽw•ÏT•w{³tÏy“†Ç䨢Èñ‹+aue_mmap€Àê arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"„¾ý%Êz¡FD§­—¹?ã—ˆ§Öœ íIVâF}é®Ð'üvºzËŽw•ÏT•w{³tÏy“†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý1X"JŒ2@µF]ÌthÙMŠ§<Öœ íIVâF}é®Ð'üvºsºæ1ÀZ± þZÀm¨*/usr/lib/libopie.so.8†Ç䨢Èñ‹+aue_openat_rwtc +flags0mode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1491execsudo20ÜS7[AIF¬•pd± (ýtß…´@—‚)[P—Œ§2Öœ íIVâF}é®Ð'üvºsºæ1ÀZ± þZÀm¨†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý¼»†dîXHû¼ðÐj4.\»Ž§2Öœ íIVâF}é®Ð'üvºsºæ1ÀZ± þZÀm¨†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý'ÝŽÈÙKL€5®6ôð§2Öœ íIVâF}é®Ð'üvºsºæ1ÀZ± þZÀm¨†Ç䨢Èñ‹+aue_mmap€Àë arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýs,Û¡Nû»9Ü#ˆ˜œ/’§2Öœ íIVâF}é®Ð'üvºsºæ1ÀZ± þZÀm¨†Ç䨢Èñ‹+aue_mmap€Àë arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý´~#¦«KE†î-›÷l­”§2Öœ íIVâF}é®Ð'üvºsºæ1ÀZ± þZÀm¨†Ç䨢Èñ‹+aue_mmap€€í arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý³¢o&©Må–׌3w†¨–§2Öœ íIVâF}é®Ð'üvºsºæ1ÀZ± þZÀm¨†Ç䨢Èñ‹+aue_mmap€€í arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý(X*E–N“ƒ}×/=U›˜§2Öœ íIVâF}é®Ð'üvºsºæ1ÀZ± þZÀm¨†Ç䨢Èñ‹+aue_mmap€€ï arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýg.w4ðOĨhjþZ…þš§2Öœ íIVâF}é®Ð'üvºsºæ1ÀZ± þZÀm¨†Ç䨢Èñ‹+aue_mmap€€ï arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý;i« òKЬâç *•ñ—œ§Öœ íIVâF}é®Ð'üvºsºæ1ÀZ± þZÀm¨†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýC]¨ +}¡Eš®Tšž§<Öœ íIVâF}é®Ð'üvº¤×†eo'ŠQ§o{ö¡Šé/lib/libmd.so.6†Ç䨢Èñ‹+aue_openat_rwtc +flags0mode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1491execsudo20ÜS7[AIF¬•pd± (ýHm!a¹˜Nî›p¾óC… §2Öœ íIVâF}é®Ð'üvº¤×†eo'ŠQ§o{ö¡Šé†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýÚ1¾¤kIJ™ŽéAòMßÒ좧2Öœ íIVâF}é®Ð'üvº¤×†eo'ŠQ§o{ö¡Šé†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýÒàÙQÇ¢Dp¢v¥qù„í¤§2Öœ íIVâF}é®Ð'üvº¤×†eo'ŠQ§o{ö¡Šé†Ç䨢Èñ‹+aue_mmap€€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý»QÞª²¿O¾¨ëAhÇI¦§2Öœ íIVâF}é®Ð'üvº¤×†eo'ŠQ§o{ö¡Šé†Ç䨢Èñ‹+aue_mmap€€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýˆMËv"ŸDµ¿2ó’¯°h¨§2Öœ íIVâF}é®Ð'üvº¤×†eo'ŠQ§o{ö¡Šé†Ç䨢Èñ‹+aue_mmap€€„ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý9“ó«®@Ck˜¶s|Ö›ª§2Öœ íIVâF}é®Ð'üvº¤×†eo'ŠQ§o{ö¡Šé†Ç䨢Èñ‹+aue_mmap€€„ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýn;“EÅK®)Þ´2ج§2Öœ íIVâF}é®Ð'üvº¤×†eo'ŠQ§o{ö¡Šé†Ç䨢Èñ‹+aue_mmap€€Ž arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý>óøˆ»I¼…^.U¡ô®§2Öœ íIVâF}é®Ð'üvº¤×†eo'ŠQ§o{ö¡Šé†Ç䨢Èñ‹+aue_mmap€€Ž arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý†&<‚†ºIï•'$g^"É°§Öœ íIVâF}é®Ð'üvº¤×†eo'ŠQ§o{ö¡Šé†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý£ª¦žlHT¨åÄ5²§:Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý¢ +…:B°NôÎöö´§:Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýøê@KËEEš „Åß"Å&}¶§:Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýä[Žår^GT‘;À_…£T¸§Öœ íIVâF}é®Ð'üvºzËŽw•ÏT•w{³tÏy“†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý¶†0±²H–‹&.cn}Òº§<Öœ íIVâF}é®Ð'üvºLv‹ t½P´ T‹ð½Ï18/usr/lib/pam_opieaccess.so.6†Ç䨢Èñ‹+aue_openat_rwtc +flagsmode ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value7ppid1491execsudo20ÜS7[AIF¬•pd± (ýj&8‡_°E‚s¦Ôw|º¼§"Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_fcntlcmd ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value8ppid1491execsudo20ÜS7[AIF¬•pd± (ýÇð3òÌI>¿ ¯§æ/x¾§2Öœ íIVâF}é®Ð'üvºLv‹ t½P´ T‹ð½Ï1†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýuìlg +JŶÙí´”·‡‚À§2Öœ íIVâF}é®Ð'üvºLv‹ t½P´ T‹ð½Ï1†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý¾´éã*At§ç0°÷¹F§2Öœ íIVâF}é®Ð'üvºLv‹ t½P´ T‹ð½Ï1†Ç䨢Èñ‹+aue_mmap€Àñ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýÇ1PÃöE…7ÛÚ„®\ħ2Öœ íIVâF}é®Ð'üvºLv‹ t½P´ T‹ð½Ï1†Ç䨢Èñ‹+aue_mmap€Àñ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýK&LèlG‰ßËg]vóƧ2Öœ íIVâF}é®Ð'üvºLv‹ t½P´ T‹ð½Ï1†Ç䨢Èñ‹+aue_mmap€€ò arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýéŸC ÄðEQ™¨y$×ȧ2Öœ íIVâF}é®Ð'üvºLv‹ t½P´ T‹ð½Ï1†Ç䨢Èñ‹+aue_mmap€€ò arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýe„° ¿ÍOŸ‚þh4¨ƒʧ2Öœ íIVâF}é®Ð'üvºLv‹ t½P´ T‹ð½Ï1†Ç䨢Èñ‹+aue_mmap€Àò arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýïi׌›„Gú²ƒcÅYà̧2Öœ íIVâF}é®Ð'üvºLv‹ t½P´ T‹ð½Ï1†Ç䨢Èñ‹+aue_mmap€Àò arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý”ŠÛ‚ež@„£¬µ‡íÏ2ΧÖœ íIVâF}é®Ð'üvºLv‹ t½P´ T‹ð½Ï1†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý&®)oN¶bE€ñm3¢Ч:Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýBžya%‹O”–ð˜NÙ@"Ò§Öœ íIVâF}é®Ð'üvºLv‹ t½P´ T‹ð½Ï1†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý)6ž‡uB JîA¥µµÔ§<Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR,/usr/lib/pam_unix.so.6†Ç䨢Èñ‹+aue_openat_rwtc +flagsmode ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value7ppid1491execsudo20ÜS7[AIF¬•pd± (ý(Xâ¼ïøBÌV;§ÄÏâiÖ§"Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_fcntlcmd ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value8ppid1491execsudo20ÜS7[AIF¬•pd± (ý,}«ÊÓE¨XŽð¶î¡kا2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý¼`E¢ÇüM„ƒ„P¥ ¡©Ú§2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýu‰¦>¥K¾v”"Îgtܧ2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€Àó arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýô M -#GfƒH¯op†•øÞ§2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€Àó arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý‹ÄiÁlF¿¤c«VWÊà§2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€Àô arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý/:1ž¬OK¶"Ôz Hæ†â§2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€Àô arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý?ÄäÌIxH5éÞŒ•›Ëåä§2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€Àõ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý‚—é›ÝHþš1 5L¶æ§2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€Àõ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýU©€î½JC£€¶ l²¨ºè§Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý ±DÄŽ@ ¯šw ˆp³ê§<Öœ íIVâF}é®Ð'üvº6'üiiU©ihÿõ$/lib/libcrypt.so.5†Ç䨢Èñ‹+aue_openat_rwtc +flags0mode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1491execsudo20ÜS7[AIF¬•pd± (ý,ÜbøÏÊLÁ’ðúÝaZjì§2Öœ íIVâF}é®Ð'üvº6'üiiU©ihÿõ†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý@x´ÝšD¨²²ÐáŠ0=î§2Öœ íIVâF}é®Ð'üvº6'üiiU©ihÿõ†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýœ+^|'C¿¡,Ô [3ÚLð§2Öœ íIVâF}é®Ð'üvº6'üiiU©ihÿõ†Ç䨢Èñ‹+aue_mmap€ÀŸ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýòP%à½o@0˜ø1Õf š‰ò§2Öœ íIVâF}é®Ð'üvº6'üiiU©ihÿõ†Ç䨢Èñ‹+aue_mmap€ÀŸ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýÑçÌD¬BOµ¯-çòJãßô§2Öœ íIVâF}é®Ð'üvº6'üiiU©ihÿõ†Ç䨢Èñ‹+aue_mmap€À¡ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý`d`žðM뇛½+„ƒlö§2Öœ íIVâF}é®Ð'üvº6'üiiU©ihÿõ†Ç䨢Èñ‹+aue_mmap€À¡ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýɺ í gG*´õ>Âö.ø§2Öœ íIVâF}é®Ð'üvº6'üiiU©ihÿõ†Ç䨢Èñ‹+aue_mmap€À¦ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý£;0#h¦G^-ÓÁe%@Sú§2Öœ íIVâF}é®Ð'üvº6'üiiU©ihÿõ†Ç䨢Èñ‹+aue_mmap€À¦ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý˜ÛÜ”`wB\¯„ü÷d¼ ü§Öœ íIVâF}é®Ð'üvº6'üiiU©ihÿõ†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý}G\ÂðK·†™:a“þ§<Öœ íIVâF}é®Ð'üvºëPï9•^•9Cy^R„./usr/lib/libypclnt.so.4†Ç䨢Èñ‹+aue_openat_rwtc +flags0mode ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value8ppid1491execsudo20ÜS7[AIF¬•pd± (ý$Ýô!ªG^†ŒØ­éV\£€¨2Öœ íIVâF}é®Ð'üvºëPï9•^•9Cy^R„†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýÐø~F÷O1­Õ³Dߥ‚¨2Öœ íIVâF}é®Ð'üvºëPï9•^•9Cy^R„†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý5dc.š„L0€•7 +¿„¨2Öœ íIVâF}é®Ð'üvºëPï9•^•9Cy^R„†Ç䨢Èñ‹+aue_mmap€Àö arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýŒæ”„I?†Œ?’”u†¨2Öœ íIVâF}é®Ð'üvºëPï9•^•9Cy^R„†Ç䨢Èñ‹+aue_mmap€Àö arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýß%)ž%…O_¿¬1qÿw3ˆ¨2Öœ íIVâF}é®Ð'üvºëPï9•^•9Cy^R„†Ç䨢Èñ‹+aue_mmap€€ø arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýgŽµOŠ)L–»ôônŸáÄŠ¨2Öœ íIVâF}é®Ð'üvºëPï9•^•9Cy^R„†Ç䨢Èñ‹+aue_mmap€€ø arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ŠÀû +á¡Ä>HÁ´äf_Ÿ¬´VŒ¨2Öœ íIVâF}é®Ð'üvºëPï9•^•9Cy^R„†Ç䨢Èñ‹+aue_mmap€€ù arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýãúÄ1…^Kƒµ÷fnòlýŽ¨2Öœ íIVâF}é®Ð'üvºëPï9•^•9Cy^R„†Ç䨢Èñ‹+aue_mmap€€ù arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý¼ª7eQ M=°_«t£Ã\¨Öœ íIVâF}é®Ð'üvºëPï9•^•9Cy^R„†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý¸v>ÒÄHa¤£’ðôV’¨:Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý¤b³×EÜEÖ+Z7_?`”¨:Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýãjù¶ØrC·“¶‹—c©–¨:Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý­ëe±ÿïJöº|½]P˜¨Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýù[(™ÀBJ?ª0’¸Ä|À@Öœ íIVâF}é®Ð'üvºÀ‹kB¼Ñ^¼B<.Ñë,†Ç䨢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1491execsudo20ÜS7[AIF¬•pd± (ýavè@éE÷„_ rP4~Èœ¨Öœ íIVâF}é®Ð'üvºÀ‹kB¼Ñ^¼B<.Ñë,†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýº“÷|y"BlŸ— Üõyž¨<Öœ íIVâF}é®Ð'üvºÀ‹kB¼Ñ^¼B<.Ñë,"/etc/pam.d/system†Ç䨢Èñ‹+aue_open_rwtc +flagsmode¶ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1491execsudo20ÜS7[AIF¬•pd± (ý…¬¤ÙM”³XEX',€ú ¨@Öœ íIVâF}é®Ð'üvºÀ‹kB¼Ñ^¼B<.Ñë,†Ç䨢Èñ‹+aue_read +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1491execsudo20ÜS7[AIF¬•pd± (ý&žì˜%‹M‘±HµýÉ°`¢¨<Öœ íIVâF}é®Ð'üvº<;Иä®QäkQ®ßû•ª°¨2Öœ íIVâF}é®Ð'üvº<;Иä®QäkQ®ßû†Ç䨢Èñ‹+aue_mmap€€û arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýø@Qº0B¯p–AP6,¬²¨2Öœ íIVâF}é®Ð'üvº<;Иä®QäkQ®ßû†Ç䨢Èñ‹+aue_mmap€Àû arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýmÝ´‰£BsªVW ŽP¯´¨2Öœ íIVâF}é®Ð'üvº<;Иä®QäkQ®ßû†Ç䨢Èñ‹+aue_mmap€Àû arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýÚ8é«{F¦¤“~›ɇ¶¨Öœ íIVâF}é®Ð'üvº<;Иä®QäkQ®ßû†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý;pf>G‘ ‡x§%&ca¸¨:Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýÅ|îÜE•ƒÄŠFvá²úº¨Öœ íIVâF}é®Ð'üvº<;Иä®QäkQ®ßû†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýZ§S8šÂKs¬…Øj.áj¼¨<Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR,/usr/lib/pam_unix.so.6†Ç䨢Èñ‹+aue_openat_rwtc +flagsmode ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value7ppid1491execsudo20ÜS7[AIF¬•pd± (ý[¯?RqVLZˆÚ§Go\¾¨"Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_fcntlcmd ret_fd18hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value8ppid1491execsudo20ÜS7[AIF¬•pd± (ýð_Õµ$'L ±|¢<–eÀ¨2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýÿÑÝs»ìC?‹ÕnÓË€qû¨2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýòDö*›«NX–à4ìèÊÍĨ2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€Àü arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý¥,wvQ×G­šp7‡1=eÌƨ2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€Àü arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý,B%†Û'IÊŸ ¨ +Ȩ2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€Àý arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýAØNüBþ—×?­Ô¹6ʨ2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€Àý arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýæ¹Á¹}B]—4í–Ìt̨2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€Àþ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýaõŽGù‹IÌž|ù[(¥¿€Ψ2Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_mmap€Àþ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ýX:>½ËbH8˜X* fN¯ШÖœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý!t»BÇšJ«ƒÖ»µî}ÂÒ¨:Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýË¥¸== I_¯*¬ñPtTÔ¨Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý×€ƒú2@ š9¥ä>Âþ€Ö¨@Öœ íIVâF}é®Ð'üvºÀ‹kB¼Ñ^¼B<.Ñë,†Ç䨢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1491execsudo20ÜS7[AIF¬•pd± (ý§f6¢HŽˆWXn¥[ˆ بÖœ íIVâF}é®Ð'üvºÀ‹kB¼Ñ^¼B<.Ñë,†Ç䨢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýìü¦‘ä'DÈçù“Z_àäÚ¨<Öœ íIVâF}é®Ð'üvº±…tBc„ ]„c “ ã´0/usr/lib/pam_permit.so.6†Ç䨢Èñ‹+aue_openat_rwtc +flagsmode ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value6ppid1491execsudo20ÜS7[AIF¬•pd± (ýî>Át N¿Šs¸!gpÎ?ܨ"Öœ íIVâF}é®Ð'üvº†Ç䨢Èñ‹+aue_fcntlcmd ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value7ppid1491execsudo20ÜS7[AIF¬•pd± (ýÌ`*¢jG³{¬ŸVƒó¦Þ¨2Öœ íIVâF}é®Ð'üvº±…tBc„ ]„c “ ã´†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1491execsudo20ÜS7[AIF¬•pd± (ý´ˆ225FM«ÞžÏ>à¨2Öœ íIVâF}é®Ð'üvº±…tBc„ ]„c “ ã´†Ç䨢Èñ‹+aue_mmap€€é arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1491execsudo20ÜS7[AIF¬•pd± (ýãçÂ,ÚÍA-“ãâÐJâ¨2Öœ íIVâF}é®Ð'üvº±…tBc„ ]„c “ ã´†Ç䨢Èñ‹+aue_mmap€À° arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1491execsudo20ÜS7[AIF¬•pd± (ýpÒɼ]Kš“³„YØ]µä¨2Öœ íIVâF}é®Ð'üvº±…tBc„ ]„c “ ã´†Ç䨢Èñ‹+aue_mmap€À° arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1491execsudo20ÜS7[AIF¬•pd± (ý|,!:²GD1±`¤4 æ¨2Öœ íIVâF}é®Ð'üvº±…tBc„ ]„c “ ã´†Ç䨢Èñ‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1491execsudo20ÜS7[AIF¬•pd± (ýçnÃM¨šMç;OJ'è¨2Öœ íIVâF}é®Ð'üvº±…tBc„ ]„c “ ã´†Ç䨢Èñ‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1491execsudo20ÜS7[AIF¬•pd± (ý…vø;„F÷™|8ľÖQðê¨2Öœ íIVâF}é®Ð'üvº±…tBc„ ]„c “ ã´†Ç䨢Èñ‹+aue_mmap€À± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1491execsudo20ÜS7[AIF¬•pd± (ýàü=üzmKè·ûbLCžˆì¨2Öœ íIVâF}é®Ð'üvº±…tBc„ ]„c “ ã´†Ç䨢Èñ‹+aue_mmap€À± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1491execsudo20ÜS7[AIF¬•pd± (ý¤óÕèF °¥ÿ?ó#uŒ©Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýýÅo”RC)­±é ± QŽ©:Öœ íIVâF}é®Ð'üvº–„£³¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýÉÔÝ=ÆHŽ…wœS6XÞ(©Öœ íIVâF}é®Ð'üvº½O7PQ\V‘ѤÖ\ŒR–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýº•¡›^cM{´‹ ©RL‡W’©@Öœ íIVâF}é®Ð'üvºÀ‹kB¼Ñ^¼B<.Ñë,–„£³¢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1491execsudo20ÜS7[AIF¬•pd± (ýtE·åÈ^A²GåûïÜÚ”©Öœ íIVâF}é®Ð'üvºÀ‹kB¼Ñ^¼B<.Ñë,–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¤ºúáã>ÁSCJ–ß´«(IÇ–©@Öœ íIVâF}é®Ð'üvºHÞp¬«#®R£«ö)â®4–„£³¢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ýjªUÚÁD„-žÊQPΘ©Öœ íIVâF}é®Ð'üvºHÞp¬«#®R£«ö)â®4–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýež'EnE‡ò„kqÒš©<Öœ íIVâF}é®Ð'üvºÓŠsñŸdX—Ÿ“¿XdgÖ"/etc/login.access–„£³¢Èñ‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1491execsudo20ÜS7[AIF¬•pd± (ý¥û+(]&JØœ¶Ëüˆ\뜩@Öœ íIVâF}é®Ð'üvºÓŠsñŸdX—Ÿ“¿XdgÖ–„£³¢Èñ‹+aue_readòhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ý@úþ™(Mµžƒ c¿Ÿ·ž©@Öœ íIVâF}é®Ð'üvºÓŠsñŸdX—Ÿ“¿XdgÖ–„£³¢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ý±m±0[L@·ï–ü?p{ ©Öœ íIVâF}é®Ð'üvºÓŠsñŸdX—Ÿ“¿XdgÖ–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý‚nAÏTC¶Œ%¶iW2¢©<Öœ íIVâF}é®Ð'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.conf–„£³¢Èñ‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1491execsudo20ÜS7[AIF¬•pd± (ýFfvEÞÞNŠ†|¢x|“ø¤©@Öœ íIVâF}é®Ð'üvºMTZŸ2S²ŸâÓ‚ˆ–„£³¢Èñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ý¥œ±J!˜FÞ«mÈø™þH¦©@Öœ íIVâF}é®Ð'üvºMTZŸ2S²ŸâÓ‚ˆ–„£³¢Èñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ý9*hõzÚ@Œ¾ÉD=è&¨©Öœ íIVâF}é®Ð'üvºMTZŸ2S²ŸâÓ‚ˆ–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý»€^uzý@¯‡ õÕ­¬Eª©<Öœ íIVâF}é®Ð'üvºù.Rmb}[˜biæ‹}}Ï/etc/ttys–„£³¢Èñ‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1491execsudo20ÜS7[AIF¬•pd± (ý 1VŽ»ïDa^:ðu -¬©@Öœ íIVâF}é®Ð'üvºù.Rmb}[˜biæ‹}}Ï–„£³¢Èñ‹+aue_readÌ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ý—©‘8ÆM ¦*/Ÿuׇ—®©@Öœ íIVâF}é®Ð'üvºù.Rmb}[˜biæ‹}}Ï–„£³¢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ý à£à­ëAý´ÞêÖRe_­°©Öœ íIVâF}é®Ð'üvºù.Rmb}[˜biæ‹}}Ï–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý‡¿ €êEÛ¸©îö¸"+²© +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº–„£³¢Èñ‹+aue_setresuiduideuidÿsuidÿarg_euid-1arg_ruid0arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýkT5È ˜F“ðáäz@´© +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº–„£³¢Èñ‹+aue_setresgidgidÿegidsgidÿarg_egid0arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý +íL2AF}é®Ð'üvº 20 +ÜS7[AIF¬•pd± (ý¹î©°÷@?™‰Ã‘rÕº=¶©Öœ íIVâF}é®Ð'üvºíL2AF}é®Ð'üvº–„£³¢Èñ‹+aue_connect hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1491address /var/run/logprivexecsudo20ÜS7[AIF¬•pd± (ýÞRBeŠAx¢Ý>qíéwv¸©JÖœ íIVâF}é®Ð'üvºíL2AF}é®Ð'üvº–„£³¢Èñ‹+aue_sendtoÈ +ret_msgid +16956hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ý´h]ˆC²‡òT𳕇º©Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–„£³¢Èñ‹+aue_recvfromÈ ret_msgid +16956hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÿ] ·[CeªþDÜ È˜¼©bê› µ dôFzé®{'üvºªûzJÙR†]’Ù?òí†Ód–„£³¢Èñ‹+aue_writev˜hostHdc53375b-4149-46ac-9570-64b1090f28fdfd16ppid1execsyslogd20ÜS7[AIF¬•pd± (ýò8ocwN³¸ÛAc’ ßо©Öœ íIVâF}é®Ð'üvºíL2AF}é®Ð'üvº–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýw6W Kl†Õöå´aKÀ© +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº–„£³¢Èñ‹+aue_setresgidgidÿegidësgidÿarg_egid1003arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý: –NÒŽB6¢½T‘»¢Â© +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº–„£³¢Èñ‹+aue_setresuiduidëeuidÿsuidÿarg_euid-1arg_ruid1003arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýý‡û7ôO×” V†%…§±Ä©Öœ íIVâF}é®Ð'üvºã.Ú×Wš.«ÆW×(Í–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýß„…ä7ÜD£4ÿ^Áï]Æ©<Öœ íIVâF}é®Ð'üvº‘Oè´¼s>W³¼AÑ7>í<2/etc/security/audit_event–„£³¢Èñ‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1491execsudo20ÜS7[AIF¬•pd± (ýÙýœ²ZLc²Ò +õ5™‚hÈ©@Öœ íIVâF}é®Ð'üvº‘Oè´¼s>W³¼AÑ7>í<–„£³¢Èñ‹+aue_read̳hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ýT:—oížGy°Ø.{‹?ÕÊ©<Öœ íIVâF}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR2/etc/security/audit_class–„£³¢Èñ‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1491execsudo20ÜS7[AIF¬•pd± (ýwô“ ‹CäˆßO”ŠöŸÌ©@Öœ íIVâF}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR–„£³¢Èñ‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýÎ}=Qf~@>Ž<6ªkΩ0Öœ íIVâF}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR–„£³¢Èñ‹+aue_lseekàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ým⮸®{OQ¥¼ÒÎÜûKЩ@Öœ íIVâF}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR–„£³¢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý1P—<ÙE÷­CyÓŽ‹êäÒ©0Öœ íIVâF}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR–„£³¢Èñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýR +àåEð„ ÁyPíÔ©@Öœ íIVâF}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR–„£³¢Èñ‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýi‘mæ-öMáœÙµŠóÖÖ©@Öœ íIVâF}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR–„£³¢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý £D»‚ßC!´Áb<¢Ý•{Ø©0Öœ íIVâF}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR–„£³¢Èñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý0,ÝâÎ@2­º·?¡4L^Ú©@Öœ íIVâF}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR–„£³¢Èñ‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýªçõ–èD;–ÝÉRÚ@qÜ©@Öœ íIVâF}é®Ð'üvº‘Oè´¼s>W³¼AÑ7>í<–„£³¢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ýž‚ + IͤÏŒ×]‡Þ©0Öœ íIVâF}é®Ð'üvº‘Oè´¼s>W³¼AÑ7>í<–„£³¢Èñ‹+aue_lseek̳hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ý",äæJUN]…ÈÖíäŽøà©0Öœ íIVâF}é®Ð'üvº‘Oè´¼s>W³¼AÑ7>í<–„£³¢Èñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ý ó¬Ô»J¸"™¬ þ¢bâ©@Öœ íIVâF}é®Ð'üvº‘Oè´¼s>W³¼AÑ7>í<–„£³¢Èñ‹+aue_read̳hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ý”¤ºY‘O™¹FÐM'Còýä©@Öœ íIVâF}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR–„£³¢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý/OÙó„ßN…‡ƒRa“æ©0Öœ íIVâF}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR–„£³¢Èñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ý{i(ÚÞJé° '¹{ .è©@Öœ íIVâF}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR–„£³¢Èñ‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýŽ04J'¥­žÔh”mê©@Öœ íIVâF}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR–„£³¢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýí^B§ôN‚â,Ó]—ÈŠì©0Öœ íIVâF}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR–„£³¢Èñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýÆW„ÈuˆFÔ¡ÝRbÈü¥î©@Öœ íIVâF}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR–„£³¢Èñ‹+aue_readàhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1491execsudo20ÜS7[AIF¬•pd± (ýcßÊBàHšÜþc¥ì)]ð©@Öœ íIVâF}é®Ð'üvº‘Oè´¼s>W³¼AÑ7>í<–„£³¢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execsudo20ÜS7[AIF¬•pd± (ýÙ«t'ÉFBºåñ $žjKò© +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº–„£³¢Èñ‹+aue_setresgidgidÿegidÿsgidÿarg_egid-1arg_rgid-1arg_sgid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý«üդΎI_ \FÇašòô© +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº–„£³¢Èñ‹+aue_setresuiduidÿeuidÿsuidÿarg_euid-1arg_ruid-1arg_suid-1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý+z<£M™¯rnl™›HÛö©6Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº–„£³¢Èñ‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1491execsudo20ÜS7[AIF¬•pd± (ýyfnZDZ‚oç˜oëNø©6Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº–„£³¢Èñ‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value63ppid1491execsudo20ÜS7[AIF¬•pd± (ýé óm~…IÝ•TŸôÍX‘ ú© +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº–„£³¢Èñ‹+aue_setuiduid +arg_uid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýŽÔ‹­H£žHàx¶‘Avü© +Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvº–„£³¢Èñ‹+aue_setgidgid +arg_gid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýíLÔPF}é®Ð'üvºô20ÜS7[AIF¬•pd± (ýíLÔOF}é®Ð'üvºô20ÜS7[AIF¬•pd± (ý jcEHµ•_r¹F‚˸ðeíLÔOF}é®Ð'üvºíLÔPF}é®Ð'üvº20 ÜS7[AIF¬•pd± (ýX” ‡RsK¹©w><œ£þ©Öœ íIVâF}é®Ð'üvºjcEHµ•_r¹F‚˸ðe–„£³¢Èñ‹+aue_pipe ret_fd16ret_fd27hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýíLÚ>F}é®Ð'üvº¸íIVâF}é®Ð'üvº™, Bª¢T$µ„äý`Ú–„£³¢Èñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý–µ ûMD±´!“¹Kâ°€ª$Öœ íIVâF}é®Ð'üvºíLÚ>F}é®Ð'üvº–„£³¢Èñ‹+aue_fork +arg_pid1500hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1500ppid1491execsudo20ÜS7[AIF¬•pd± (ýíMEF}é®Ð'üvºô20ÜS7[AIF¬•pd± (ýíMDF}é®Ð'üvºô20ÜS7[AIF¬•pd± (ý á˜çöyU]®P/ªû9'âíMDF}é®Ð'üvºíMEF}é®Ð'üvº20 ÜS7[AIF¬•pd± (ýt¤D±µ•Gð˜DˆH`¾‚ªÖœ íIVâF}é®Ð'üvºá˜çöyU]®P/ªû9'â–„£³¢Èñ‹+aue_pipe ret_fd17ret_fd28hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý*­ž[LI¬ÃtŧX¡T„ª6°œ íLÚ>F}é®Ð'üvºíLÚ>F}é®Ð'üvº–„£³¢Èñ‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1499execsudo20ÜS7[AIF¬•pd± (ýψ¸øtH®á®(Ê*Ž†ª +°œ íLÚ>F}é®Ð'üvºíLÚ>F}é®Ð'üvº–„£³¢Èñ‹+aue_setresuiduideuidsuidarg_euid0arg_ruid0arg_suid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1499execsudo20ÜS7[AIF¬•pd± (ýÜÉa–³FÞ»¼$¿¨C ˆª"°œ íLÚ>F}é®Ð'üvº–„£³¢Èñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value1ppid1499execsudo20ÜS7[AIF¬•pd± (ýÈÖƒ^éìHÅ›¡m'k>1Šª°œ íLÚ>F}é®Ð'üvºôì{M6N?^Ž6%â?>g–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1499execsudo20ÜS7[AIF¬•pd± (ýNúŽxÄL©­‘·”Á‡Œª°œ íLÚ>F}é®Ð'üvº‘Oè´¼s>W³¼AÑ7>í<–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1499execsudo20ÜS7[AIF¬•pd± (ýÒFG¾L¿ž}&›¯Ç«Žª°œ íLÚ>F}é®Ð'üvºÞI²Ÿ!qÁ_±!@9ÁR–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1499execsudo20ÜS7[AIF¬•pd± (ýY] Õ™ÓOÝ™\°€Ù–Ϫ"°œ íLÚ>F}é®Ð'üvº–„£³¢Èñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1499execsudo20ÜS7[AIF¬•pd± (ý1:Þ€¡ªCªWXþd»ŠI’ª°œ íLÚ>F}é®Ð'üvºíLÔPF}é®Ð'üvº/bin/ls'ìAzX™¦}˜¹(/libexec/ld-elf.so.1–„£³¢Èñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinelsppid1499execsudo20ÜS7[AIF¬•pd± (ýktίáNÀ„©®j…Y‡”ª@Öœ íIVâF}é®Ð'üvºíLÔOF}é®Ð'üvº–„£³¢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1491execsudo20ÜS7[AIF¬•pd± (ýjÍE€¥ÁLF½&¦suÀM–ªÖœ íIVâF}é®Ð'üvºíLÔOF}é®Ð'üvº–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý®aµé»I6§ÅE¤ÚÚ3˜ª<°œ íLÚ>F}é®Ð'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf–„£³¢Èñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1499execls20ÜS7[AIF¬•pd± (ýa@%ŽMDñ;¼5zšª@°œ íLÚ>F}é®Ð'üvº‰oý©äÇU¤©A)Eǹ –„£³¢Èñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ý'ÎWéâ*Cš¸¾.µt²¥µœª°œ íLÚ>F}é®Ð'üvº‰oý©äÇU¤©A)Eǹ –„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1499execls20ÜS7[AIF¬•pd± (ýŒà€ ëûJǦ@¼.‹Ežª<°œ íLÚ>F}é®Ð'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints–„£³¢Èñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1499execls20ÜS7[AIF¬•pd± (ý%á;ó¢Iæš­6ÛÎù³e ª@°œ íLÚ>F}é®Ð'üvºXꎩð®…\®ð@JÌ…¼â–„£³¢Èñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýM–Ê…IîH +«{€'ÃwŒ¢ª@°œ íLÚ>F}é®Ð'üvºXꎩð®…\®ð@JÌ…¼â–„£³¢Èñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýµÎì‹ÑÓN˹a¿òxÑà ¤ª°œ íLÚ>F}é®Ð'üvºXꎩð®…\®ð@JÌ…¼â–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1499execls20ÜS7[AIF¬•pd± (ýnh–«›Å@3©Üúlƒ!¦ª<°œ íLÚ>F}é®Ð'üvº5‹s{¯lœZ¬¯ª}Zœµj"/lib/libutil.so.9–„£³¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1499execls20ÜS7[AIF¬•pd± (ý´Ž­Ä"DA,CL„¨ª2°œ íLÚ>F}é®Ð'üvº5‹s{¯lœZ¬¯ª}Zœµj–„£³¢Èñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"’Îü–Á¬3Jg­á€^Ptakªª2°œ íLÚ>F}é®Ð'üvº5‹s{¯lœZ¬¯ª}Zœµj–„£³¢Èñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýÿ{ÒúþN´‹oMÍ¢§¬ª2°œ íLÚ>F}é®Ð'üvº5‹s{¯lœZ¬¯ª}Zœµj–„£³¢Èñ‹+aue_mmap€À§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýŠM)›¶õA:¡¤ ùâ>V®ª2°œ íLÚ>F}é®Ð'üvº5‹s{¯lœZ¬¯ª}Zœµj–„£³¢Èñ‹+aue_mmap€À§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýJ4;ypçAL¶±3T|¯°ª2°œ íLÚ>F}é®Ð'üvº5‹s{¯lœZ¬¯ª}Zœµj–„£³¢Èñ‹+aue_mmap€À« arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ý˜D2® @°ýÈ€ö‹8Ú²ª2°œ íLÚ>F}é®Ð'üvº5‹s{¯lœZ¬¯ª}Zœµj–„£³¢Èñ‹+aue_mmap€À« arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýÆçiÌ;Fù.ŸE±b´ª2°œ íLÚ>F}é®Ð'üvº5‹s{¯lœZ¬¯ª}Zœµj–„£³¢Èñ‹+aue_mmap€€± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýU<¦å›ÙB>¢ŠÜ"‡¶ª2°œ íLÚ>F}é®Ð'üvº5‹s{¯lœZ¬¯ª}Zœµj–„£³¢Èñ‹+aue_mmap€€± arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýEÞ8‹Gœµor33c]¸ª°œ íLÚ>F}é®Ð'üvº5‹s{¯lœZ¬¯ª}Zœµj–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1499execls20ÜS7[AIF¬•pd± (ý÷7oçJ¸®ÙsåÊyGcºª<°œ íLÚ>F}é®Ð'üvºÚ6n $.\¤ ¸­ü.+¦*/lib/libncursesw.so.8–„£³¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1499execls20ÜS7[AIF¬•pd± (ýÆöãšÉI}³¸umÿé·¼ª2°œ íLÚ>F}é®Ð'üvºÚ6n $.\¤ ¸­ü.+¦–„£³¢Èñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ý ÐÑWØHÕž€âýZu¾ª2°œ íLÚ>F}é®Ð'üvºÚ6n $.\¤ ¸­ü.+¦–„£³¢Èñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýNIcíÃ>B¤¤†¢¯´`xwÀª2°œ íLÚ>F}é®Ð'üvºÚ6n $.\¤ ¸­ü.+¦–„£³¢Èñ‹+aue_mmap€€³ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ý¦X]zL•A©œáÜôF¿Œª2°œ íLÚ>F}é®Ð'üvºÚ6n $.\¤ ¸­ü.+¦–„£³¢Èñ‹+aue_mmap€€³ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýGA¢ç Iˆ‹>}j~c>9Ī2°œ íLÚ>F}é®Ð'üvºÚ6n $.\¤ ¸­ü.+¦–„£³¢Èñ‹+aue_mmap€ÀÇ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýb “æaB ±µ¯‡–Õ§Gƪ2°œ íLÚ>F}é®Ð'üvºÚ6n $.\¤ ¸­ü.+¦–„£³¢Èñ‹+aue_mmap€ÀÇ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ý h$a–‚I8¡‰_PB´Ȫ2°œ íLÚ>F}é®Ð'üvºÚ6n $.\¤ ¸­ü.+¦–„£³¢Èñ‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ý(PàF%¼óÚÏÏ· ʪ2°œ íLÚ>F}é®Ð'üvºÚ6n $.\¤ ¸­ü.+¦–„£³¢Èñ‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýøhóÁ$Lšªzã"ˆ7Ä9̪°œ íLÚ>F}é®Ð'üvºÚ6n $.\¤ ¸­ü.+¦–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1499execls20ÜS7[AIF¬•pd± (ýNsƒœðiL†—(MÛ€ÏÀΪ<°œ íLÚ>F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7–„£³¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1499execls20ÜS7[AIF¬•pd± (ýOÃØ´§ï@u«¦>×¹’êЪ2°œ íLÚ>F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ–„£³¢Èñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýƒºl¶H:¢Ó±¹Ö5Òª2°œ íLÚ>F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ–„£³¢Èñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ý²§OqwÑL¸œŸºgAc‚Ôª2°œ íLÚ>F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ–„£³¢Èñ‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýƒÔfMD´ÌJaiÖª2°œ íLÚ>F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ–„£³¢Èñ‹+aue_mmap€Àã arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ý¸YIsÚ¥O퇿¸=Ü9Ëûت2°œ íLÚ>F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ–„£³¢Èñ‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýçi\¢¹JÕ¿t†Ro`¦Úª2°œ íLÚ>F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ–„£³¢Èñ‹+aue_mmap€À¢ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ýÃÎÈúúGÔ˜p†šÈ)Òóܪ2°œ íLÚ>F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ–„£³¢Èñ‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ý¸Á´’rdKU¯ B²Ÿ˜™sÞª2°œ íLÚ>F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ–„£³¢Èñ‹+aue_mmap€€Å arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1499execls20ÜS7[AIF¬•pd± (ý#?°?Dˆ¸½ª"Äýરœ íLÚ>F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ–„£³¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1499execls20ÜS7[AIF¬•pd± (ýXMŽZñG?£ýúæl³„ âª:°œ íLÚ>F}é®Ð'üvº–„£³¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1499execls20ÜS7[AIF¬•pd± (ý»ZÜ_ùMFƒç¹ód30äª:°œ íLÚ>F}é®Ð'üvº–„£³¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1499execls20ÜS7[AIF¬•pd± (ýÙ!A²ŠDGŒ|z¶ÐåÁiæª:°œ íLÚ>F}é®Ð'üvº–„£³¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1499execls20ÜS7[AIF¬•pd± (ýy³aX… +EK“×N–¿¿p¶èª:°œ íLÚ>F}é®Ð'üvºîðÓ¼¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1499execls20ÜS7[AIF¬•pd± (ýÖÞPÉ_XEQ—ú>ï%{¶]êª<°œ íLÚ>F}é®Ð'üvºÞç=š8§T¸šm9D§bZ/usr/home/user/ripe-prov-tests-master/Linux/.îðÓ¼¢Èñ‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1499execls20ÜS7[AIF¬•pd± (ýö³£S¾ÄMSˆ)c#•¶Šìª6°œ íLÚ>F}é®Ð'üvºíLÚ>F}é®Ð'üvºÞç=š8§T¸šm9D§bîðÓ¼¢Èñ‹+aue_fchdir +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1499execls20ÜS7[AIF¬•pd± (ýI®íŽQOJµš ©Äõ Øîª<°œ íLÚ>F}é®Ð'üvºÞç=š8§T¸šm9D§bZ/usr/home/user/ripe-prov-tests-master/Linux/.îðÓ¼¢Èñ‹+aue_open_rwtc +flagsmode +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1499execls20ÜS7[AIF¬•pd± (ý`ôxàPGô˜]Í_¿ìÓðª<°œ íLÚ>F}é®Ð'üvºÞç=š8§T¸šm9D§bZ/usr/home/user/ripe-prov-tests-master/Linux/.îðÓ¼¢Èñ‹+aue_open_rwtc +flagsmode +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1499execls20ÜS7[AIF¬•pd± (ýúf[uK™{3d\8žÄòª°œ íLÚ>F}é®Ð'üvºÞç=š8§T¸šm9D§bîðÓ¼¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1499execls20ÜS7[AIF¬•pd± (ýð7wg0E«ÃÓšJ¸pôª6°œ íLÚ>F}é®Ð'üvºíLÚ>F}é®Ð'üvºÞç=š8§T¸šm9D§bîðÓ¼¢Èñ‹+aue_fchdir +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1499execls20ÜS7[AIF¬•pd± (ý鿾5@饼'@¯;UWöª°œ íLÚ>F}é®Ð'üvºÞç=š8§T¸šm9D§bîðÓ¼¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1499execls20ÜS7[AIF¬•pd± (ýq~-"ÉE܆D­h©$øªb°œ íLÚ>F}é®Ð'üvºí( ö~R¶ ~{‚~¯îðÓ¼¢Èñ‹+aue_writeîhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1499execls20ÜS7[AIF¬•pd± (ý㪃OxVAa‡qžg[”èˆúªb°œ íLÚ>F}é®Ð'üvºí( ö~R¶ ~{‚~¯îðÓ¼¢Èñ‹+aue_writeÖhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1499execls20ÜS7[AIF¬•pd± (ýŠTB†“=+K•ä˜˜üªb°œ íLÚ>F}é®Ð'üvºí( ö~R¶ ~{‚~¯îðÓ¼¢Èñ‹+aue_writeÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1499execls20ÜS7[AIF¬•pd± (ýaÔß% Hœf ¼0ÐÚþªb°œ íLÚ>F}é®Ð'üvºí( ö~R¶ ~{‚~¯îðÓ¼¢Èñ‹+aue_write°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1499execls20ÜS7[AIF¬•pd± (ýí‹þõKƒµ~ÿ[Ñûl€«b°œ íLÚ>F}é®Ð'üvºí( ö~R¶ ~{‚~¯îðÓ¼¢Èñ‹+aue_writeÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1499execls20ÜS7[AIF¬•pd± (ý„TàŠCøKÖ¿c&¦ +l_Ñ‚«b°œ íLÚ>F}é®Ð'üvºí( ö~R¶ ~{‚~¯îðÓ¼¢Èñ‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1499execls20ÜS7[AIF¬•pd± (ýŽišªˆHw™ž_ð)¸'„«°œ íLÚ>F}é®Ð'üvºíLÚ>F}é®Ð'üvºîðÓ¼¢Èñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1499execls20ÜS7[AIF¬•pd± (ýÕ=RþÿI‘±fÿþ”膫bÖœ íIVâF}é®Ð'üvºíMEF}é®Ð'üvºîðÓ¼¢Èñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1491execsudo20ÜS7[AIF¬•pd± (ý‘Ú4KEš£©JHpĈ«@Öœ íIVâF}é®Ð'üvºíMDF}é®Ð'üvºîðÓ¼¢Èñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1491execsudo20ÜS7[AIF¬•pd± (ýh(<Ê÷Cõ²Ó|ñßGƒôŠ«Öœ íIVâF}é®Ð'üvºíMDF}é®Ð'üvºîðÓ¼¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýv—I©¿âCÔ® …Æ:¯Œ«Öœ íIVâF}é®Ð'üvºíMEF}é®Ð'üvºîðÓ¼¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8return_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ý±ßÊ‚ÅC|’©é0ÿÚÈ©Ž«Öœ íIVâF}é®Ð'üvºíIVâF}é®Ð'üvºîðÓ¼¢Èñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execsudo20ÜS7[AIF¬•pd± (ýÙ»Óøa²BÊ°Ñ–ƒCÞ«@²œ ì«?yF}é®Ï'üvº€ËâÞ +”Ó¨Î^¨«$²œ ì«?yF}é®Ï'üvºíNa`F}é®Ð'üvºîðÓ¼¢Èñ‹+aue_fork +arg_pid1502hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1502ppid1282execbash20ÜS7[AIF¬•pd± (ýu¹—²ZÈH•™Üº7졪«@Öœ íN(F}é®Ð'üvº‰oý©äÇU¤©A)Eǹ îðÓ¼¢Èñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ýŒÝ|#cJFÌ6B?!Œ¬«Öœ íN(F}é®Ð'üvº‰oý©äÇU¤©A)Eǹ îðÓ¼¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execnc20ÜS7[AIF¬•pd± (ýÁ)ûçCSOiº×b²Àˆè®«<Öœ íN(F}é®Ð'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsîðÓ¼¢Èñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execnc20ÜS7[AIF¬•pd± (ýH’Êi¿VDÄ´Œ÷+êúÕ°«@Öœ íN(F}é®Ð'üvºXꎩð®…\®ð@JÌ…¼âîðÓ¼¢Èñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ý …1L±ªZ÷ÂgS²«@Öœ íN(F}é®Ð'üvºXꎩð®…\®ð@JÌ…¼âîðÓ¼¢Èñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ýÅiJ÷5J9½bõUÓÖ«2Öœ íN(F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œîðÓ¼¢Èñ‹+aue_mmap€Àë arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ýã¿IWD'œùj#y>í-Ø«2Öœ íN(F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œîðÓ¼¢Èñ‹+aue_mmap€€Ž arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ýî«]Ù\Öœ íN(F}é®Ð'üvºíNÛ6F}é®Ð'üvºîðÓ¼¢Èñ‹+aue_listen +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execnc20ÜS7[AIF¬•pd± (ýï›lx%EiŽJ£ˆ¡,ð«@°œ íNa`F}é®Ð'üvº‰oý©äÇU¤©A)Eǹ îðÓ¼¢Èñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec +sleep20ÜS7[AIF¬•pd± (ýléûè 6A’_ðÞ & +ò«°œ íNa`F}é®Ð'üvº‰oý©äÇU¤©A)Eǹ îðÓ¼¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491exec +sleep20ÜS7[AIF¬•pd± (ýžl¸%vMþªãžqÂ\ô«<°œ íNa`F}é®Ð'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints˜â¹Å¢Èñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491exec +sleep20ÜS7[AIF¬•pd± (ýBÇÀ't”M+‘ˆyȬÖLö«@°œ íNa`F}é®Ð'üvºXꎩð®…\®ð@JÌ…¼â˜â¹Å¢Èñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec +sleep20ÜS7[AIF¬•pd± (ýä–Ž‹@FóºiuµB øø«@°œ íNa`F}é®Ð'üvºXꎩð®…\®ð@JÌ…¼â˜â¹Å¢Èñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec +sleep20ÜS7[AIF¬•pd± (ýn!`I½1ÊÏÅ› òú«°œ íNa`F}é®Ð'üvºXꎩð®…\®ð@JÌ…¼â˜â¹Å¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491exec +sleep20ÜS7[AIF¬•pd± (ýyg“aîEl‚O˜Lp<ÙÇü«<°œ íNa`F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7˜â¹Å¢Èñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491exec +sleep20ÜS7[AIF¬•pd± (ýŽ}QÇPfF_‚±ïµhÓ¡þ«2°œ íNa`F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ˜â¹Å¢Èñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec +sleep20ÜS7[AIF¬•pd± (ý +–‡ßS/K/”—ã'2€¬2°œ íNa`F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ˜â¹Å¢Èñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec +sleep20ÜS7[AIF¬•pd± (ý0àTÞ¾D* ŠÈÀêF;‚¬2°œ íNa`F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ˜â¹Å¢Èñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec +sleep20ÜS7[AIF¬•pd± (ý¤½ ™†*H ‘+#5Äé„J„¬2°œ íNa`F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ˜â¹Å¢Èñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec +sleep20ÜS7[AIF¬•pd± (ý|(…6Eq°=ÂÐ +¡ý‹†¬2°œ íNa`F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ˜â¹Å¢Èñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec +sleep20ÜS7[AIF¬•pd± (ýFQqÉ«Fùˆ˨ê”õ«ˆ¬2°œ íNa`F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ˜â¹Å¢Èñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec +sleep20ÜS7[AIF¬•pd± (ý¢}eFi°O¬,fÔü«fŠ¬2°œ íNa`F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ˜â¹Å¢Èñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec +sleep20ÜS7[AIF¬•pd± (ý¾•9¦JB/®yþzZf“£Œ¬2°œ íNa`F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ˜â¹Å¢Èñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491exec +sleep20ÜS7[AIF¬•pd± (ýO¦C„:CY„×â +àÖâWŽ¬°œ íNa`F}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ˜â¹Å¢Èñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491exec +sleep20ÜS7[AIF¬•pd± (ýØÉÿ ¥wHb­¤(™’è¬:°œ íNa`F}é®Ð'üvº˜â¹Å¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491exec +sleep20ÜS7[AIF¬•pd± (ýÈTìÝûKl´ñû5Èኒ¬:°œ íNa`F}é®Ð'üvº˜â¹Å¢Èñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491exec +sleep20ÜS7[AIF¬•pd± (ýƒOÇsþBæ²Zg(œ†·”¬0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒ‡’“¥Èñ‹+aue_lseekÚ–?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«„ç¡O¼Ë5ãœú#˜¬ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒ‡’“¥Èñ‹+20ÜS7[AIF¬•pd± (ý½ÐßÝ­LP©!dÏ6¸b%–¬@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒ‡’“¥Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZPýìA˜Q½XguB圬 ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒ‡’“¥Èñ‹+20ÜS7[AIF¬•pd± (ýˆ|>¨µ@”“îü«þWš¬@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒ‡’“¥Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9ý¤ÚèHü k/-hNœ ¬ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒ‡’“¥Èñ‹+20ÜS7[AIF¬•pd± (ý9È'†X)L«¬ÁY¯˜?@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒ‡’“¥Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýUŽ¨¹™IÿqÌÁíºéЬìœ íéxðF}é®Ñ'üvºçEEÔÒ—S’Ô%ñS—m´/usr/bin/nc'ìAzX™¦}˜¹(/libexec/ld-elf.so.1‘ˆŠªÈñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine$nc localhost 54321ppid1491execbash20ÜS7[AIF¬•pd± (ýÛÏ™ì^LF\€7ÎÜï·óâÒ¬<ìœ íéxðF}é®Ñ'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf‘ˆŠªÈñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execnc20ÜS7[AIF¬•pd± (ýÍ•++ÒDÿ¥c ÍÍ×OÔ¬@°œ íéhF}é®Ð'üvº‰oý©äÇU¤©A)Eǹ ‘ˆŠªÈñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ýN‰éi±BGˆ±•€¾0ìÖ¬°œ íéhF}é®Ð'üvº‰oý©äÇU¤©A)Eǹ ‘ˆŠªÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execcat20ÜS7[AIF¬•pd± (ý Á‘—D´²ÓȉCÿ›ج<°œ íéhF}é®Ð'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints‘ˆŠªÈñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execcat20ÜS7[AIF¬•pd± (ýó_;d¢Oè«DCG“ß%Ú¬@°œ íéhF}é®Ð'üvºXꎩð®…\®ð@JÌ…¼â‘ˆŠªÈñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ýæ|Ÿq½²CÆ»B¢‹ ì¨ ܬ@°œ íéhF}é®Ð'üvºXꎩð®…\®ð@JÌ…¼â‘ˆŠªÈñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ý›àBØ—ÂG2®‚ÓÎôï­Þ¬°œ íéhF}é®Ð'üvºXꎩð®…\®ð@JÌ…¼â‘ˆŠªÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execcat20ÜS7[AIF¬•pd± (ýñÌ"Í;Av€ãóJc3Zëà¬<°œ íéhF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7‘ˆŠªÈñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execcat20ÜS7[AIF¬•pd± (ý—Äj<šH°ž¿Ûn+mÝèâ¬2°œ íéhF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ý é/W,B±©áÌÙÉæ1ä¬2°œ íéhF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ýÈ*Ò§§ÚO­‚é›7µ³í3æ¬2°œ íéhF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ýË4žw8$EʱW:ÖyBè¬2°œ íéhF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ýßÒê”@GBg»´|è%mŽê¬2°œ íéhF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ýðq“)z¯IîŸÛíИtyNì¬2°œ íéhF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ý/’)WHa¬„,xž\±šî¬2°œ íéhF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ýÃŒ›rIŽ¬´!’ñ%ùOð¬2°œ íéhF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ý›\‚g3%H½•îªøà¬èò¬°œ íéhF}é®Ð'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execcat20ÜS7[AIF¬•pd± (ý3&€4gL\µ9žÑÉq\ô¬:°œ íéhF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execcat20ÜS7[AIF¬•pd± (ý¤p”\cM¾£"„ÍM1Ãö¬:°œ íéhF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execcat20ÜS7[AIF¬•pd± (ýá.Jøo2GüƒýÊ?¯3€ø¬<°œ íéhF}é®Ð'üvºÏU…¹^…•öþ¹€Ü‚/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat‘ˆŠªÈñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execcat20ÜS7[AIF¬•pd± (ýxœ¤Æv‡F÷‰ ¨Ð +Pú¬@°œ íéhF}é®Ð'üvºÏU…¹^…•öþ¹€Ü‘ˆŠªÈñ‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ý]çËØtoBY‚;] Þêü¬b°œ íéhF}é®Ð'üvºíéaF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491execcat20ÜS7[AIF¬•pd± (ýy{P[HÑ‹¡YÚÏbþ¬@°œ íéhF}é®Ð'üvºÏU…¹^…•öþ¹€Ü‘ˆŠªÈñ‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ý„ÛWÊ)OAXHHõS䀭b°œ íéhF}é®Ð'üvºíéaF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491execcat20ÜS7[AIF¬•pd± (ý÷xYzÅÑJQ¥½^PÁ2sX‚­@°œ íéhF}é®Ð'üvºÏU…¹^…•öþ¹€Ü‘ˆŠªÈñ‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ý.(84[+H•Ãáw3g„­b°œ íéhF}é®Ð'üvºíéaF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491execcat20ÜS7[AIF¬•pd± (ýå§"«ÑJ ½¨àæ +†­@°œ íéhF}é®Ð'üvºÏU…¹^…•öþ¹€Ü‘ˆŠªÈñ‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ýGJÚC2‰Má£\þJOÆ"˜ˆ­b°œ íéhF}é®Ð'üvºíéaF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491execcat20ÜS7[AIF¬•pd± (ý /Ì FˆO„}%=™óŠ­@°œ íéhF}é®Ð'üvºÏU…¹^…•öþ¹€Ü‘ˆŠªÈñ‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ýpï³ù€E »ïÁ>qzuŒ­b°œ íéhF}é®Ð'üvºíéaF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491execcat20ÜS7[AIF¬•pd± (ýØa¢œOöµ #òHvŽ­@°œ íéhF}é®Ð'üvºÏU…¹^…•öþ¹€Ü‘ˆŠªÈñ‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ý`m#Ñ¡@Eê‘*‚jÒ z3­b°œ íéhF}é®Ð'üvºíéaF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491execcat20ÜS7[AIF¬•pd± (ýéQªxrÄ@L»6!rwkf1’­@°œ íéhF}é®Ð'üvºÏU…¹^…•öþ¹€Ü‘ˆŠªÈñ‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ýc¢˜úYNˆ°Ê­NDêmÿ”­b°œ íéhF}é®Ð'üvºíéaF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491execcat20ÜS7[AIF¬•pd± (ýÝЗ]ªKE¥[8H& +÷„–­@°œ íéhF}é®Ð'üvºÏU…¹^…•öþ¹€Ü‘ˆŠªÈñ‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ýX[D• aAo˜£\P®;˜­b°œ íéhF}é®Ð'üvºíéaF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491execcat20ÜS7[AIF¬•pd± (ý'J!ĺ•Nƒ¢W¼­9 +üSš­@°œ íéhF}é®Ð'üvºÏU…¹^…•öþ¹€Ü‘ˆŠªÈñ‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ý&ØÄ…r´H¥Š˜’ä[Àœ­b°œ íéhF}é®Ð'üvºíéaF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491execcat20ÜS7[AIF¬•pd± (ýäÌ^´îåN¨°LDUDë\ž­@°œ íéhF}é®Ð'üvºÏU…¹^…•öþ¹€Ü‘ˆŠªÈñ‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ýxÊ=dOr›„ºþþ…iÀ ­b°œ íéhF}é®Ð'üvºíéaF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491execcat20ÜS7[AIF¬•pd± (ýòµ*×Cª™]Yu°ßÂJ¢­@°œ íéhF}é®Ð'üvºÏU…¹^…•öþ¹€Ü‘ˆŠªÈñ‹+aue_read€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ýGöKÿ|B;©=ë7¡”¤­b°œ íéhF}é®Ð'üvºíéaF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_write€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491execcat20ÜS7[AIF¬•pd± (ý^È7mŸ€NŒŒW·­´ó¦­@°œ íéhF}é®Ð'üvºÏU…¹^…•öþ¹€Ü‘ˆŠªÈñ‹+aue_read”"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ý#U!NR›ÎrçÕbë5¨­b°œ íéhF}é®Ð'üvºíéaF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_write”"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491execcat20ÜS7[AIF¬•pd± (ýŽzúÁKLB„MNDµ #…ª­@°œ íéhF}é®Ð'üvºÏU…¹^…•öþ¹€Ü‘ˆŠªÈñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execcat20ÜS7[AIF¬•pd± (ý9î±U¾gC©‘ apOÈÕ|¬­°œ íéhF}é®Ð'üvºÏU…¹^…•öþ¹€Ü‘ˆŠªÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execcat20ÜS7[AIF¬•pd± (ýËñS1»>IC¼.`Êã:UÑ®­°œ íéhF}é®Ð'üvºíéaF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1491execcat20ÜS7[AIF¬•pd± (ýS}NL[žK£…—^Gë‹m°­°œ íéhF}é®Ð'üvºíéhF}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execcat20ÜS7[AIF¬•pd± (ýáÖ’øеGŸ§:Ê}¨~'²­@àœ íépoF}é®Ñ'üvº‰oý©äÇU¤©A)Eǹ ‘ˆŠªÈñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýäGäõä0I›ªŽ +"g#õ´­àœ íépoF}é®Ñ'üvº‰oý©äÇU¤©A)Eǹ ‘ˆŠªÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execgzip20ÜS7[AIF¬•pd± (ýufY>]MŒ® †`Jɳ¶­<àœ íépoF}é®Ñ'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints‘ˆŠªÈñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execgzip20ÜS7[AIF¬•pd± (ýèDvdž@–£óų¨¸­@àœ íépoF}é®Ñ'üvºXꎩð®…\®ð@JÌ…¼â‘ˆŠªÈñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ý ecN8Añ¯;:sœÐ»†º­@àœ íépoF}é®Ñ'üvºXꎩð®…\®ð@JÌ…¼â‘ˆŠªÈñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ý¯éôÉJ뻧7Ê"é>¼­àœ íépoF}é®Ñ'üvºXꎩð®…\®ð@JÌ…¼â‘ˆŠªÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execgzip20ÜS7[AIF¬•pd± (ýàp7”Ä@l•}íÚ%B¾­<àœ íépoF}é®Ñ'üvº¥_¤!0rtQ²0 ñt¿ñ/lib/libz.so.6‘ˆŠªÈñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execgzip20ÜS7[AIF¬•pd± (ýéð´%“|K#ª@V}ÆRÀ­2àœ íépoF}é®Ñ'üvº¥_¤!0rtQ²0 ñt¿ñ‘ˆŠªÈñ‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýÖÿ¨ èK_ˆ»3—êôöÛ­2àœ íépoF}é®Ñ'üvº¥_¤!0rtQ²0 ñt¿ñ‘ˆŠªÈñ‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ý³ÍJ5ò@]¾Ýi±z:>Ä­2àœ íépoF}é®Ñ'üvº¥_¤!0rtQ²0 ñt¿ñ‘ˆŠªÈñ‹+aue_mmap€€© arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýM$Q¬è»Lœ´ümǽ-FÆ­2àœ íépoF}é®Ñ'üvº¥_¤!0rtQ²0 ñt¿ñ‘ˆŠªÈñ‹+aue_mmap€€© arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ý%ëÐx\M¿¹iì;/°õÐù¢ôTî­2àœ íépoF}é®Ñ'üvºñ…&´iºU“i5kEºGQ‘ˆŠªÈñ‹+aue_mmap€€Ì arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýÕ²C˜¿ÐC#ŠIó¸ŸÑBð­2àœ íépoF}é®Ñ'üvºñ…&´iºU“i5kEºGQ‘ˆŠªÈñ‹+aue_mmap€ÀÍ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýh©Žì>H~›˜À°5Tò­2àœ íépoF}é®Ñ'üvºñ…&´iºU“i5kEºGQ‘ˆŠªÈñ‹+aue_mmap€ÀÍ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýka×oÅAB®:ò稢äŽô­2àœ íépoF}é®Ñ'üvºñ…&´iºU“i5kEºGQ‘ˆŠªÈñ‹+aue_mmap€ÀÕ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ý[Ù¯OÀ¥˜`6Waþö­2àœ íépoF}é®Ñ'üvºñ…&´iºU“i5kEºGQ‘ˆŠªÈñ‹+aue_mmap€ÀÕ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ý.¾­OãNI¦ SLªø­àœ íépoF}é®Ñ'üvºñ…&´iºU“i5kEºGQ‘ˆŠªÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execgzip20ÜS7[AIF¬•pd± (ý$"VCEª›®CÜ1ÛL¥ú­<àœ íépoF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7‘ˆŠªÈñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execgzip20ÜS7[AIF¬•pd± (ýUaµ íUG<š>œ»ÑQü­2àœ íépoF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýÕ0:ÉJײÖêÇ'¶¥›þ­2àœ íépoF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýÍ¢àÆGÉpåƒ|ê=Q€®2àœ íépoF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€ÀÖ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ý8Éžvo×O²ò M#:°8‚®2àœ íépoF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€ÀÖ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ý{FÌ^¤Dò„ÁDåVP„®2àœ íépoF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€À• arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ý²’+J²JUÈ‹NÊÿ¼†®2àœ íépoF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€À• arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýÊ0üÒDA° +@òÎÛšˆ®2àœ íépoF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€€¸ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ý z}®®ÔKoS„hIÞ‰FŠ®2àœ íépoF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_mmap€€¸ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýZ·Ê·®K¹y¾%<Œ®àœ íépoF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÂ‘ˆŠªÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execgzip20ÜS7[AIF¬•pd± (ý%úö@uII¥CñrÚÑXÙŽ®<àœ íépoF}é®Ñ'üvºÇ8N¢¹V¢NY¤6¹< /lib/libthr.so.3‘ˆŠªÈñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execgzip20ÜS7[AIF¬•pd± (ýÖսƿ.A˜ ½¸¿Ÿ´®2àœ íépoF}é®Ñ'üvºÇ8N¢¹V¢NY¤6¹<‘ˆŠªÈñ‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ý'#µ÷‡J1”þ•…šDg#’®2àœ íépoF}é®Ñ'üvºÇ8N¢¹V¢NY¤6¹<‘ˆŠªÈñ‹+aue_mmap€À¨ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýW"´³ÐGÇ–qº €’”®2àœ íépoF}é®Ñ'üvºÇ8N¢¹V¢NY¤6¹<‘ˆŠªÈñ‹+aue_mmap€€Ó arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýP¨OH÷Šç‘O¨â@–®2àœ íépoF}é®Ñ'üvºÇ8N¢¹V¢NY¤6¹<‘ˆŠªÈñ‹+aue_mmap€€Ó arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ý8›ksÁC Œ!ð8#q˜®2àœ íépoF}é®Ñ'üvºÇ8N¢¹V¢NY¤6¹<‘ˆŠªÈñ‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýtߢpÓC̺}øud¨š®2àœ íépoF}é®Ñ'üvºÇ8N¢¹V¢NY¤6¹<‘ˆŠªÈñ‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýÑ- +Ö3øHù»ª°‰¼b‹¨œ®2àœ íépoF}é®Ñ'üvºÇ8N¢¹V¢NY¤6¹<‘ˆŠªÈñ‹+aue_mmap€€â arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýØÅ­¦ï¶G¹³södñ)ÜXž®2àœ íépoF}é®Ñ'üvºÇ8N¢¹V¢NY¤6¹<‘ˆŠªÈñ‹+aue_mmap€€â arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execgzip20ÜS7[AIF¬•pd± (ýÜ9vÖ=Iù›š¯ç~‚€| ®àœ íépoF}é®Ñ'üvºÇ8N¢¹V¢NY¤6¹<‘ˆŠªÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execgzip20ÜS7[AIF¬•pd± (ýÙÓ¾xA¡u™°óÄÁF¢®:àœ íépoF}é®Ñ'üvºÂ‘ˆŠªÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execgzip20ÜS7[AIF¬•pd± (ý/UNocN™KÕ¨­´:0¤®:àœ íépoF}é®Ñ'üvºÂ‘ˆŠªÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execgzip20ÜS7[AIF¬•pd± (ý›w˜ô +D—å-µâ pø¦®:àœ íépoF}é®Ñ'üvºÂ‘ˆŠªÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execgzip20ÜS7[AIF¬•pd± (ýPL÷‡‹Gr†y^nýòËܨ®:àœ íépoF}é®Ñ'üvºÂ‘ˆŠªÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execgzip20ÜS7[AIF¬•pd± (ýõ÷†(0Gb¯{qÊj{™—ª®:àœ íépoF}é®Ñ'üvºÂ‘ˆŠªÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execgzip20ÜS7[AIF¬•pd± (ý³ k®†£Bš1 ¼]èC¬®:àœ íépoF}é®Ñ'üvºÂ‘ˆŠªÈñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execgzip20ÜS7[AIF¬•pd± (ýr¿F4ÍB‘•ñ¼©¬j®®:àœ íépoF}é®Ñ'üvºÂ‘ˆŠªÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execgzip20ÜS7[AIF¬•pd± (ýn#áêîËD½6\÷lª ï°®@àœ íépoF}é®Ñ'üvºíéa^F}é®Ð'üvºÂ‘ˆŠªÈñ‹+aue_read”âhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1491execgzip20ÜS7[AIF¬•pd± (ý*\½ @‘™:åFõp2²®@àœ íépoF}é®Ñ'üvºíéa^F}é®Ð'üvº¦ì£’ªÈñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1491execgzip20ÜS7[AIF¬•pd± (ýª Ë—…wI˜ƒ*Q*oÒ ™´®bàœ íépoF}é®Ñ'üvºíém F}é®Ñ'üvº¦ì£’ªÈñ‹+aue_writeØ;hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491execgzip20ÜS7[AIF¬•pd± (ýUpœïå@;”±}ß”„£S¶®bàœ íépoF}é®Ñ'üvºíém F}é®Ñ'üvº¦ì£’ªÈñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1491execgzip20ÜS7[AIF¬•pd± (ýºm+¶´{LÖƒo¬µþ£¸®àœ íépoF}é®Ñ'üvºíépoF}é®Ñ'üvº¦ì£’ªÈñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execgzip20ÜS7[AIF¬•pd± (ýº‚=²)UI>²ÁÞ¶ÄNº®@ìœ íéxðF}é®Ñ'üvº‰oý©äÇU¤©A)Eǹ ¦ì£’ªÈñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ý)a§fj Jò«,ÙWAG ž¼®ìœ íéxðF}é®Ñ'üvº‰oý©äÇU¤©A)Eǹ ¦ì£’ªÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execnc20ÜS7[AIF¬•pd± (ýe2=‘uÂBΩlBÔÕý¾®<ìœ íéxðF}é®Ñ'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¦ì£’ªÈñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1491execnc20ÜS7[AIF¬•pd± (ýžúœr¸ +E"¯4ú¾Iõ»À®@ìœ íéxðF}é®Ñ'üvºXꎩð®…\®ð@JÌ…¼â¦ì£’ªÈñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ýmÃȯŒÓ*%Í”RÜ®2ìœ íéxðF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ¦ì£’ªÈñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ýþy¼\MnŽ  G’”´òÞ®2ìœ íéxðF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ¦ì£’ªÈñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬”úW‚ÊA“¤ÂXÖ:`n]à®2ìœ íéxðF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ¦ì£’ªÈñ‹+aue_mmap€À¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ý xêVC°„zK`šŒæâ®2ìœ íéxðF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ¦ì£’ªÈñ‹+aue_mmap€À¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ýNÐÄRqNZ« ™›·ÙŠøä®2ìœ íéxðF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ¦ì£’ªÈñ‹+aue_mmap€Àë arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ý!&žÕN‰Q代Ïñƒæ®2ìœ íéxðF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ¦ì£’ªÈñ‹+aue_mmap€Àë arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ýà{@îSÕAƯ¿ÒMÆŽDè®2ìœ íéxðF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ¦ì£’ªÈñ‹+aue_mmap€€Ž arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ý°‘ &@œ¥eØ© =2ê®2ìœ íéxðF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ¦ì£’ªÈñ‹+aue_mmap€€Ž arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ýêã>¾IÛ¸÷&ãà;ì®ìœ íéxðF}é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ¦ì£’ªÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execnc20ÜS7[AIF¬•pd± (ýzD6x°áDž—)©‘ØòE(î®:ìœ íéxðF}é®Ñ'üvº¦ì£’ªÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execnc20ÜS7[AIF¬•pd± (ý]äðîIЉˠzûcgð®:ìœ íéxðF}é®Ñ'üvº¦ì£’ªÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execnc20ÜS7[AIF¬•pd± (ýØhÕ[„³N ºµc°Rò®:ìœ íéxðF}é®Ñ'üvº¦ì£’ªÈñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execnc20ÜS7[AIF¬•pd± (ý³‡f]Ù7C±‘îª\b•ãô®<ìœ íéxðF}é®Ñ'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.conf¦ì£’ªÈñ‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1491execnc20ÜS7[AIF¬•pd± (ý÷"Ä:G™¨ „ƒ‹7áö®@ìœ íéxðF}é®Ñ'üvºÜN½Ëê¯+^¯êZ£®+V¦ì£’ªÈñ‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ýVŵ3*¶Eò³ð¥ÝÁàø®@ìœ íéxðF}é®Ñ'üvºÜN½Ëê¯+^¯êZ£®+V¦ì£’ªÈñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ý34ž"»LN9œF«Jh,ú®ìœ íéxðF}é®Ñ'üvºÜN½Ëê¯+^¯êZ£®+V¦ì£’ªÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execnc20ÜS7[AIF¬•pd± (ýÜÙ¯7­N¹.íѵ¨ü®<ìœ íéxðF}é®Ñ'üvºÉòæò¢Ñ[¢ò¥›ÑÍ /etc/hosts¦ì£’ªÈñ‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1491execnc20ÜS7[AIF¬•pd± (ý7º‹qõ„@E‰˜KdLmÿiþ®@ìœ íéxðF}é®Ñ'üvºÉòæò¢Ñ[¢ò¥›ÑÍ ¦ì£’ªÈñ‹+aue_readŽhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ýÐ5³F#½ÃË£Ù‰€¯@ìœ íéxðF}é®Ñ'üvºÉòæò¢Ñ[¢ò¥›ÑÍ ¦ì£’ªÈñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1491execnc20ÜS7[AIF¬•pd± (ý.\‘Å@Þ«ùÒÛ‚¶¯ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+20ÜS7[AIF¬•pd± (ý¢†Á(¡B`šÅAZ(YŒ´¯@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄmùÊ¿+ER½3*Ðyº¯ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+20ÜS7[AIF¬•pd± (ý~Ž"~´§L§Šú}7àÌ=Û¸¯@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýòFöG×/(yþ¾Í¾¯ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+20ÜS7[AIF¬•pd± (ý ûÂvaGþBL–?ª8¼¯@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{*×8„DrŠÀ*›²ú¯ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+20ÜS7[AIF¬•pd± (ýçA¼N㜩€¯{¢EÀ¯@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ã/¢Y%I´1Ãæ^í7²Ư ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+20ÜS7[AIF¬•pd± (ý.»£„ÞM‰_¼Ü/Wį@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýî.dR9M;§ñMÔ¤w„ʯ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+20ÜS7[AIF¬•pd± (ýÙ4ñ¦žiF³‘ÎæÒo¯­µȯ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈģqKŒŒ}4Üdfºί ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+20ÜS7[AIF¬•pd± (ý-º‘™?L »3ç­¢̯@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉÜåÔÙhKÓ¨ÖÀw +ZÒ¯ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+20ÜS7[AIF¬•pd± (ýÇ~;/¿øGošô=yü<­Я@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6 p'RI¡"œ|›"%Ö¯ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+20ÜS7[AIF¬•pd± (ýûW4¦@õO«ÔèHØŒàÔ¯@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒô÷"KB±¨Cc +ŒÔÚ¯ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+20ÜS7[AIF¬•pd± (ý%&6.o±Gï‹÷vI“­د@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýABB9 Dt£š´W8BÞ¯ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+20ÜS7[AIF¬•pd± (ýkDSMR×E}uøéÿ <ܯ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñõ(§QðNŽz{7 AbŽâ¯ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+20ÜS7[AIF¬•pd± (ý²¸D@ì¶ÀG•@LUà¯@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|”Ò‚Lr•ÃÉkÃ1ÒVæ¯ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+20ÜS7[AIF¬•pd± (ýÜ7–üÿ!Eéˆ.­b®­ä¯@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáôECÀkD¢†P_ÒC è¯:‚œ Ê +ÙKFzé®›'üvºàéÔ†´Èñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1ØêJF ´ h\R¨×ê¯@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V àéÔ†´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ˆDeÕˆCá—©‹ëFöì¯@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾_Ü7^¹J@°•÷þéœ}dî¯@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadªKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅ[wéoK¼ca™ê4âóð¯b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áàéÔ†´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQ¾VLrA + dv°ò¯b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºàéÔ†´Èñ‹+aue_write”LhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðOºE™Óø·kÿG|ô¯@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V àéÔ†´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýã³yÑÍ@œ¿&ª¶öf£Òö¯@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>+\‚ãB +‘½g*!Àvø¯@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadîDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚ͯPøBy³2€à öpú¯b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áàéÔ†´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý䜘3P LP§}cËøÿ ü¯b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºàéÔ†´Èñ‹+aue_writeØEhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆ £úN_©ÔR‹GÓB+þ¯@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V àéÔ†´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚçýÚùØ@q«@PléIðÈ€°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽ˜å+,D/²ÞŸ-‚h‚°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàéÔ†´Èñ‹+aue_preadæ?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆ }ÆlJúÍIk‰„°b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áàéÔ†´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxØóg`Mµ° Q´É8TÚ†°b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÞâ‚´Èñ‹+aue_writeÐ@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýàh …ñI÷‡¹FÄo0k@ˆ°@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýBrå0|@h§ÒÂ8fÅœŠ°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"°Ôú5Š +õ+@Ǫ1¹È…oŒ°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadÎChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚SœwoLc­&×w˜ÏºŽ°b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýrº“q¯Aj…E´„§0¼0°@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_tµJÎJo½1I\h ’°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýbµ$HÔA»÷|hTÐ_>”°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡S9ŽrôJ|¢aÆ®–°b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcµ‡ã6†IÀ… z@á,˜°@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/EÀÖzEî¬1ŠxÊHš°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏ“ÞZÆÏAô’#ÎÐà“Vœ°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadðBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýɬUtCFØ—_ßœÝÂØpž°b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæsŠ1‘Fd¾cX¼Øä °@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢éß´¦Jî‹×⤆h—*¢°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©³#gvCÍŠ ºP:Á=/¤°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadœ=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŇéKBF–gˇ÷G†¦°b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýv‡÷4ÂÇH÷¨›*cq‰sL¨°@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈ\™RFMu¢²ý3.~uª°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýzÀÆoè•L²— µªG\ Ä¬°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadˆKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄ:BÏO®­D"¦Á¢í®°b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎ…ðÍ´F1ŒE$œgRÓ°°@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýžYYãIä‡Uî%œ?¸²°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýaý|@Ëò@Ù˜ ½)~‡`´°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_pread¦=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸× ‰gDñ§£ ÁÂŒfð¶°b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(B[Ÿƒ@A¿¶æÓ¦b㸰@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýy]AÑ:yHÝ‘aݵgÒ׺°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸÔïJ²Búµz1y¼°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadìAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøõIæ°ÌD©ÃPP¶~y¾°b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýì ¯ +'Kü“Y@.jåkÀ°@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢¯VHäS@]¶W¶çT7&°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyãÚùúK{·ÿ:窢 +Ä°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_pread¦>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýß_#ÔÝL;¢}ŠpÇ%Ö*Æ°b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™Ú˜À-INø–•äH»ß5È°@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýR¹~Ì›F_¿EE[_©•Ê°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýC‡´˜¿tOˆœþ¤éýrÌ°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadÂBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý êxLïžá>jÁµ¹ΰb¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[ËHúD½š#ÔÏ(а@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýo"žü¨¢JlÅ®´¹ñ@Ò°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý휲€ÜËJ)¹ ˆäÅ^=Ô°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_pread€BhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçÀÞ¦ ñM—ö•åÍkóÖ°b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖͦ JDü¬"}žèIuØ°@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒêÖ½;¸Ka‹ñ+0ÎF Ú°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡(%¢G“˜O©ÌÝ­Ü°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadÌChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåA‰l·]JÔŒ7¨j´¯ÜHÞ°b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨0ó†ìuF©¸ªA 5à°@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~·Y/‘TCY•F÷p8_WQâ°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõ.šª¼5H°ªcÁu”ºä°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadÖGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…Cþ5C$›°•´R.´æ°b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøEŽÍ%JEªµpG‚Ëè°@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\Nu¼IB´’õåÝ ê°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©I³6%D¼‚éê§Råèfì°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_pread€>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²"ƒz"K9—S:Ý +/î°b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%›êô™ Ey¿^ºžëxÍð°@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýïgi°ÐC¼ˆwÑ}–nˆ“ò°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4têÝãMô«,d†Mpüô°@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_pread°@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµ í^¥^B3½óô··úžtö°b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU[`"L‡k4MŠÂåø°D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÞâ‚´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõD“ëEž¡Q€v¦dú°D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÞâ‚´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýfk3>mHÓ·H·ã^^œü°b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÞâ‚´Èñ‹+aue_write¸DhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌc¦v@øK0¯Qȯë1¤þ°@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýöO¿«K«v”µé•E€±@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý⤜ŒM·² +#lCÞp ‚±@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_pread†KhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³Š.lîN€®¢1-Êß}„±b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^J/Š§G+¡ F3_1†±@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5Ô±~ãJc£ùÏ‘ZÚBÖˆ±@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýpÛQ²ÜM›¬ÐF´ó:›ÙŠ±@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadŒFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎ#)| JÚ°í¥Uæ¼SHŒ±b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýiÜM®xàE ›­|¶¢È¹ñŽ±@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýoAŒœd”Aÿ¥uâ濾TI±@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûŠKL~†Ÿ)¯4_ã’±@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadôQhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉvƒ¹ÔE“ŽÆѳ“/<”±b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(ŠµJryB³§€©–fââû–±@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹É lQBOX™. +n i˜±@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:©Â÷ƒÒIl +IÃÁ%_š±@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadÈGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒãÆBïëFø¹XߥiÛq휱b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\lƆÈÇF΂|œ#ö“Ëßž±@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýe7ülK¯qmžWi¦© ±@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6™*jFX£[#–„¢±@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadˆ>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCøWàG‘4ÛÑÏ$l¤±b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒÈ«’¡AŽ¬YkF8ŽË¦±@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃO&d¡HE“§4šFÓ ó¨±@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€ì-!.M6±ZUòx–Ë&ª±@¢ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞâ‚´Èñ‹+aue_pread¼=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]¿®GórO˜»ŽLËCÎ଱b¢ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÞâ‚´Èñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨íÀ>Cм§W%8ü®±@¢ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Þâ‚´Èñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×ö³KÌ»š¹2“n‚,°±J¢ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÞâ‚´Èñ‹+aue_sendtoà +ret_msgid +16958hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýãÛø`KK¤ydU;«ðð²±Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÞâ‚´Èñ‹+aue_recvfromà ret_msgid +16958hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÄ)¥…¿áCs¯.3?ô„´±bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÞâ‚´Èñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýïglöäHpŽÞû›Óǹ\¶±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÖ„È™´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý12~f£O5²zf¼Òhür¸±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÖ„È™´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒnöYwDß‘Ñ‘¯^çÔº±b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÖ„È™´Èñ‹+aue_writeúLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®ûO=BX÷Cƒö­½$ˆ¼±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº’Û‘¨´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìL™šÞÆEç—ïgÐ ú¾±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº’Û‘¨´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýrªâJßE˪‚W…WNÀ±b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº’Û‘¨´Èñ‹+aue_writeÚChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýéj¼B|2Eúˆ:é©Ãmh±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºê¢å®´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýž%YÃò»Oö¿¡Á/å–¯ıD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºê¢å®´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñÚ‚ r–IŒ–Ô¼ö¹Ì»Ʊb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºê¢å®´Èñ‹+aue_write†>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿA§€[KE¥â>/ t•ȱD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºê¢å®´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†|˜±UµN ´È¿hù`>ʱD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºê¢å®´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$ë—O”Œ@Y¿9=$}M5̱b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºê¢å®´Èñ‹+aue_writeòKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕŒ¤ÍùkH ¯ƒÀk8²Á?αD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvººû̶´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍ ŽÅ6OOÝ—3,Ì™4ÃïбD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvººû̶´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQOÊÈb@õ‘ð?¥ö&Ò±b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvººû̶´Èñ‹+aue_write>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±ó7éæJƒ¡%=™7Õ'Ô±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÄÕªÀ´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒ&bbS˜C‹„•ãŠ®z˜Ö±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÄÕªÀ´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýk À M–‰Øž²ˆ‘äرb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÄÕªÀ´Èñ‹+aue_writeÖBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý, EîKØ—ü4>Ì^òÚ±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÄÕªÀ´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.,RBn¸µ¦í øDܱD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÄÕªÀ´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`š¸«šÓGì«kuÞ±b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÄÕªÀ´Èñ‹+aue_write?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYõ?CjO™ƒHM¥%ï3óà±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº‚‘£É´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýØC´¦'B~»Ï¾ï­”Ôˆâ±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº‚‘£É´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQlô¶U`LƒªU[ÌYëä±b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº‚‘£É´Èñ‹+aue_write¬ChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×»³Å‚L*¥PÕ}æÀ’æ±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÆÇæÒ´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥ Ex”9ÞÅ’îç,è±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÆÇæÒ´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,“ìjfJX¾Z3÷fØäê±b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÆÇæÒ´Èñ‹+aue_writeêBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýV‘B· z¼ù,‹Öì±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÆÇæÒ´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýHÉ>ºQL£¢N +ÞÇTúî±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÆÇæÒ´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýFª!åUOü— ¿ýe +›®ð±b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÆÇæÒ´Èñ‹+aue_write¶DhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<1iNA\F{¦õ¦Ó’Öò±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºøò÷Ü´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýN;ýÃyAó…8ÝmîIô±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºøò÷Ü´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +2*ö+/JY­NôÞ†œ±ö±b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºøò÷Ü´Èñ‹+aue_writeÀHhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýö½bÞA›N°¦â`½Ä®&zø±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤þŸæ´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý §m™ñUF¾Ÿ$sI-“rœú±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤þŸæ´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYÝtb¯êCŠ!¡¨ªü±b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤þŸæ´Èñ‹+aue_writeê>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖÝCAO<¢"PÀlA.sþ±D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤þŸæ´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„!prHÚJ>žâŠŽÊ]4ó€²D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤þŸæ´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýtŽàb¦K2ˆKæÉÌ|»‚²b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤þŸæ´Èñ‹+aue_writešAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwÞ|\©C¾ X„ ¾3É„²D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¼¶²ï´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑ)›•2©L°#¬½jï`†²D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¼¶²ï´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +=HÔ¦FLº2±„Œb鈲b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¼¶²ï´Èñ‹+aue_writeðKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýw¡ƒ°ôLrƒ?Ã${Ø‹Š²D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶‹ýø´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿ<ˆ*Ž/O¨F@Ó¤¾½ÕŒ²D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶‹ýø´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßn¥*aD{ƒòÀʶ÷­®Ž²b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶‹ýø´Èñ‹+aue_writeöFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýhöHšÌö@8€`ô›j'R²D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶‹ýø´Èñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýVK},.LQº>žbb†³’²D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶‹ýø´Èñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðæ#@§hL¥Ÿ¶!ED”²b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶‹ýø´Èñ‹+aue_writeÞRhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýöjœÜ\@3¾*=µ\c³ã–²D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºæª»‚µÈñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜ!!&ñcL9”a·3SòG—˜²D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºæª»‚µÈñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý d* CCçµ UÅþFÔùš²b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºæª»‚µÈñ‹+aue_write²HhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýý©«%+Moœà*΋眲D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºªÙƒŒµÈñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðÀ·ä)ºKv©õ{Šõ„sž²D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºªÙƒŒµÈñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„'‚ºQ>Iè™éBzIif ²b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºªÙƒŒµÈñ‹+aue_writeò>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^!hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®²üDCü•€!äæW lö²@¤ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆ‘¥úÂÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§^÷²[ÂJ«¶2‚@CäÂø²@¤ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆ‘¥úÂÈñ‹+aue_preadì4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåÉ?›%ILE¸Uè˜ÕýU]ú²b¤ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆ‘¥úÂÈñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-!—u¡M(¾Õæ«2½v ü²@¤ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Æ‘¥úÂÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâ/?ɳ¸MßžÁ"¾/‘™”þ²@¤ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆ‘¥úÂÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšƒ¯}kôK ©5—°âVš¿€³@¤ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆ‘¥úÂÈñ‹+aue_pread¦hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅ BÿŠ¢Og†Ò¤ÀêIû‚³b¤ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆ‘¥úÂÈñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«²¶Ù¢N—þØRÿˆæœ„³@¤ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Æ‘¥úÂÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙÆ“êD©®¹ÐXg†³J¤ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÆ‘¥úÂÈñ‹+aue_sendtoà +ret_msgid +16963hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)ÌãÖY@Ø©ƒÚˇƒGõ—y)•ZÚ’¾ȳ@¦ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄ ±íÑÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýjaÓS›9DŠ¹eÑ›„j¶Lʳ@¦ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄ ±íÑÈñ‹+aue_preadŽ@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœaó†N»˜””“X̳b¦ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÄ ±íÑÈñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýGsÎE3@¾€È«­’rÿ&γb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÄ ±íÑÈñ‹+aue_writeø@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýø[Aª•G6‰-IJgËг@¦ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ä ±íÑÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜9ÕTÆ•Kï¢q|8[—WÒ³@¦ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄ ±íÑÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýk|Ô\*FÅ°äZØ©–Ô³@¦ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄ ±íÑÈñ‹+aue_pread´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýè/ªsO:–3m!=ÔÈ8Ö³b¦ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÄ ±íÑÈñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·ÄêêO¤Ÿ³ù°åñ|سb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÄ ±íÑÈñ‹+aue_writežhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇr¥yOÿ±)‡³ èbÜ«ú¨´JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–‰ÇçãÈñ‹+aue_sendto¬ +ret_msgid +16972hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýBžѱBäž'?2ìÙšª´JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–‰ÇçãÈñ‹+aue_sendto˜ +ret_msgid +16973hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýh;t9KÊDž¶C›L”A2*¬´Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–‰ÇçãÈñ‹+aue_recvfromÚ ret_msgid +16970hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýþotL·dGÓŸ!{/ó¡®´Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–‰ÇçãÈñ‹+aue_recvfrom˜ ret_msgid +16971hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÜâ×СJI¦¤ã +Fë„°´Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–‰ÇçãÈñ‹+aue_recvfrom¬ ret_msgid +16972hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýaå—+©@~¡—÷@íç–²´Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–‰ÇçãÈñ‹+aue_recvfrom˜ ret_msgid +16973hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýcÊæ¿Eˆ¤—‚Ÿ¦%BQ´´0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U€‹¢´äÈñ‹+aue_lseekÈâNhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸ˜¬`ÔCº¤I[øs#+˜¶´0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´Ç÷ëÈñ‹+aue_lseekšèNhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½P©îKPA¶(,¸\:{Ǹ´0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ÅˆÔïÈñ‹+aue_lseekšèNhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæ¢Å“|I~‡eÁ»=ï5¼´ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U®ÅˆÔïÈñ‹+20ÜS7[AIF¬•pd± (ý9ƒÜ#–^@Ä™!,r¢âº´@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ÅˆÔïÈñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýsOX NHµâ¶:ßó§0À´ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U®ÅˆÔïÈñ‹+20ÜS7[AIF¬•pd± (ýV‘_ÇôíMF¿kµèÀ!¾´@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ÅˆÔïÈñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6³b¤åN—M :C +Ä´ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U®ÅˆÔïÈñ‹+20ÜS7[AIF¬•pd± (ýº}ß-Iá€,ÃœÕÐ6´@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ÅˆÔïÈñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:ç7?=üKH8?LÍÀÆ´:‚œ Ê +ÙKFzé®›'üvº®ÅˆÔïÈñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹ÍÃNBÓ‡úO îQ(EÈ´@ª Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ®ÅˆÔïÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛbò0úòMc£­¾¦³ÝîÊ´@ª Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ÅˆÔïÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍ ›¿LôºÌVG¸,7Ì´@ª Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ÅˆÔïÈñ‹+aue_pread°2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[ÃË{' +K\”/¬+ªÕÿHδbª Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á®ÅˆÔïÈñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7S¶ÞßH”‡Ãb tËwдb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®ÅˆÔïÈñ‹+aue_writeš3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ývMÁµG´Ž®S*€OyÒ´@ª Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ®ÅˆÔïÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€æeödÞB‹!|ÀÄ%dXÔ´@ª Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ÅˆÔïÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý2ÏZ¬ËëC’Á£‚.—þÖ´@ª Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ÅˆÔïÈñ‹+aue_preadÊhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…ψQÖ‘B“½[È£làØ´b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®ÅˆÔïÈñ‹+aue_write´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+s?¿î¯M“­óò¡ÜE¯Ú´bª Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á®ÅˆÔïÈñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµc fÃTDý™z!,ÇIÜ´@ª Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ®ÅˆÔïÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠ›W8cN»¤#æàÞÞ´Jª Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº®ÅˆÔïÈñ‹+aue_sendtoà +ret_msgid +16974hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýpØ8íL,¼ )yŸø†à´Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ÅˆÔïÈñ‹+aue_recvfromà ret_msgid +16974hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýËæW¹Õ%IP¼WhÅ€Dj0â´bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK®ÅˆÔïÈñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýZ|!¡ªNB°“<ï|„âä´D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®ÅˆÔïÈñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÔWZ#LÿµjÁ~ gæ´D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®ÅˆÔïÈñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýîh‹È A3…åÕäˆüè´D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®ÅˆÔïÈñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýNÓf2Mê²½[ŒôKê´D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®ÅˆÔïÈñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýDB‰’OA1‡è©lŸwì´0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒÒàºóÈñ‹+aue_lseekˆŽOhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýE¦ü¿BÞž;–¤háVî´@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e̬ǔúÈñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýa@(²YEÜU6[¾v#ð´JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÌ¬Ç”úÈñ‹+aue_sendtoÚ +ret_msgid +16975hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý …˜M}ÍM÷©‹7(H¸÷ ò´JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÌ¬Ç”úÈñ‹+aue_sendto˜ +ret_msgid +16976hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý}ÉñаN¥“Ê¡ýèºô´JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÌ¬Ç”úÈñ‹+aue_sendto¬ +ret_msgid +16977hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýôi=®ÔMg£?Æ`U û +ö´JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÌ¬Ç”úÈñ‹+aue_sendto˜ +ret_msgid +16978hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý‡¢¸'ÿD(´v-¢9²Ødø´Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÌ¬Ç”úÈñ‹+aue_recvfromÚ ret_msgid +16975hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÑ!1:Ê;BšÉÁ×^(ú´Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÌ¬Ç”úÈñ‹+aue_recvfrom˜ ret_msgid +16976hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýxCÐ_ËKb­¡³è¡\ü´Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÌ¬Ç”úÈñ‹+aue_recvfrom¬ ret_msgid +16977hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýôm34ƒO“ŸvU€FLí^þ´Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÌ¬Ç”úÈñ‹+aue_recvfrom˜ ret_msgid +16978hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýyN+³I¶$å»ßx€µ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uª³öýúÈñ‹+aue_lseek OhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýi +f·@FD$¹¦ þ¹ŒÓ‚µ<Þ› µxÏFzé®’'üvº €ja·*XYª·CÿùX?Ü/etc/cron.dê´§ÞýÈñ‹+aue_open_rwtc +flagsmodeè +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1execcron20ÜS7[AIF¬•pd± (ý¤:/(õ`F÷‡áú-ê&>„µÞ› µxÏFzé®’'üvº €ja·*XYª·CÿùX?Üê´§ÞýÈñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1execcron20ÜS7[AIF¬•pd± (ýrítºœÞC‚¤˜ãJe;oÛ†µ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒóÏÇþÈñ‹+aue_lseek OhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]=´(Có¢~Yb?}­Šµ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒóÏÇþÈñ‹+20ÜS7[AIF¬•pd± (ýl„Àq‰/C¬š‘j²x¦.-ˆµ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒóÏÇþÈñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýädTŒNO`•’gùWûŽµ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒóÏÇþÈñ‹+20ÜS7[AIF¬•pd± (ýƒÁ‹A1²‘¢…¼ÎŒµ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒóÏÇþÈñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½èšÐJôµ˜¿’±—Ü’µ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒóÏÇþÈñ‹+20ÜS7[AIF¬•pd± (ý;Í¡l‰ù@+§»f8Güüµ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒóÏÇþÈñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýëñZÃ2¼O–‘ŽGÈŸ ”µ:‚œ Ê +ÙKFzé®›'üvºÒóÏÇþÈñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]A GGƒ¿$ÿä,–µ@¬ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒóÏÇþÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3Ú +GJ ©PLMs +昵@¬ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒóÏÇþÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýz/ÌÙXlA6‚膻Zªšµ@¬ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒóÏÇþÈñ‹+aue_preadæ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨9É*Jh§EÑzÖAœµb¬ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒóÏÇþÈñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýXM²ê€I(„Ü /jG&žµb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÒóÏÇþÈñ‹+aue_writeÐ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝÄ +»ÖJ!‚AvË72A µ@¬ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒóÏÇþÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýš†@Eú¤SèÕO¢µ@¬ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒóÏÇþÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>'¤½ãA ž†Žùè¦Ð…¤µ@¬ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒóÏÇþÈñ‹+aue_pread²hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýPynBù°þbÀ ïb4¦µb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÒóÏÇþÈñ‹+aue_writeœhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛï¾ü¦àI¸´´×&0H’ú¨µb¬ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÒóÏÇþÈñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.,ù„š›Nš¨7iMF7 ªµ@¬ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒóÏÇþÈñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!XTÈ€GŽ{ɬ¤Š›/¬µJ¬ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÒóÏÇþÈñ‹+aue_sendtoà +ret_msgid +16979hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýM1pLHQH;¿ÊEv(ý4Ÿ®µDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÒóÏÇþÈñ‹+aue_recvfromà ret_msgid +16979hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýwƒ¯–5îF ‹º 6GÆò°µbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÒóÏÇþÈñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÅð¢{Ø&Oxš¹Ïjç°iO²µD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÒóÏÇþÈñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§I¼šB@ü™ÿÆ–)´µD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÒóÏÇþÈñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýWôQ1²¤B—›sU¶µD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÒóÏÇþÈñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀAÈ­ÏJÌ´ä×|:Í“¸µD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÒóÏÇþÈñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚ—ë_ß1B2Š7ÕïÀ‡ÈŸºµ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uì÷°Á‚Éñ‹+aue_lseek¸ÌOhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌ[€mê'JU‚‹‡/êª ¼µ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uð’õƒŠÉñ‹+aue_lseek”ÒOhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{cFÄk3L¿7õ¹ +¾µ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uú§ÈºÉñ‹+aue_lseek”ÒOhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýk¯=\Cu¡÷¿e4n@.µ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uú§ÈºÉñ‹+20ÜS7[AIF¬•pd± (ýo:0À@N–Ç¢dÀµ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uú§ÈºÉñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬°û8‰(7›êMÙšF;}%Ƶ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uú§ÈºÉñ‹+20ÜS7[AIF¬•pd± (ýŠª{)BÝ‹Fõj×@³~ĵ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uú§ÈºÉñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýïêÝ¢šGr„‰Ð=ʵ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uú§ÈºÉñ‹+20ÜS7[AIF¬•pd± (ý´º /…vJTr##.>ȵ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uú§ÈºÉñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@kÇG€Ó@¸”|6Kß²̵:‚œ Ê +ÙKFzé®›'üvºú§ÈºÉñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀãft-K¦—Ã\eÆε@® Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ú§ÈºÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýoÆÉ4€òHUº¾~óVе@® Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uú§ÈºÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýhÃWà‹éD†›5a­°†ãÒµ@® Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uú§ÈºÉñ‹+aue_preadî+hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8/}½•@-¾âé]&¢ZGÔµb® Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áú§ÈºÉñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýºöÆ¥‰Hx½çþ\ã›æ=Öµb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºú§ÈºÉñ‹+aue_writeØ,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýê²ÁµC²‚*º3`—xص@® Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ú§ÈºÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµ¶KXZëG,…»6ïùð™¬Úµ@® Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uú§ÈºÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýô¹“mxîF~€³…ì¯ç¸ܵ@® Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uú§ÈºÉñ‹+aue_preadÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇ‹Ž©…B†±¾S·/¼]lÞµb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºú§ÈºÉñ‹+aue_write¾hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýíV}ÞÑAî³» Ý¿àµb® Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áú§ÈºÉñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«kw—LÍ¡•R9eV—pâµ@® Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ú§ÈºÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýS‘MÄO ³ì^Ê‹xTäµJ® Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºú§ÈºÉñ‹+aue_sendtoà +ret_msgid +16980hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘ÕàJ¨K)w!—; æµDê› µ dôFzé®{'üvºµ CjFzé®{'üvºú§ÈºÉñ‹+aue_recvfromà ret_msgid +16980hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýN°•oŒŽIq·VAi(»†4èµbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKú§ÈºÉñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ým[âÍVbE¸¯˜j2Qy=rêµD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºú§ÈºÉñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.GSD×{Cî•u {wèýìµD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºú§ÈºÉñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8É¢Lè OåœGL§(ŒîµD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºú§ÈºÉñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŒJ†Ø>ÈG8”-<Ú‡ˆ °ðµD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºú§ÈºÉñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýjÐ<ŸOãAX•û]ʆžÑòµ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e°ˆÒÁÉñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýòìκvëLT‘üψxô ôµJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº°ˆÒÁÉñ‹+aue_sendtoÚ +ret_msgid +16981hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÁ5¦‡GÅJxøµ‹q»öµJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº°ˆÒÁÉñ‹+aue_sendto˜ +ret_msgid +16982hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýMnî'ŒèIá¯ñc¨Ú'Z…øµJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº°ˆÒÁÉñ‹+aue_sendto¬ +ret_msgid +16983hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýr:C«$eL•¸˜/@Á§©úµJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº°ˆÒÁÉñ‹+aue_sendto˜ +ret_msgid +16984hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý·r;¥ƒMœµ&Sšg1šüµDê› µ dôFzé®{'üvºµ CjFzé®{'üvº°ˆÒÁÉñ‹+aue_recvfromÚ ret_msgid +16981hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýF^¹šåG‘ÍíNþµDê› µ dôFzé®{'üvºµ CjFzé®{'üvº°ˆÒÁÉñ‹+aue_recvfrom˜ ret_msgid +16982hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý áºmOIѦ4`ç›Ý5€¶Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº°ˆÒÁÉñ‹+aue_recvfrom¬ ret_msgid +16983hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýkzÙ³OÛNnŽN-·wÏ‚¶Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº°ˆÒÁÉñ‹+aue_recvfrom˜ ret_msgid +16984hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýv—Èk~DŠ¦NÕ5Ö<„¶0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UþÖ´Ç‘Éñ‹+aue_lseek„PhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýX44M'ªñ½Ñ³80†¶0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦‡°Š™Éñ‹+aue_lseek”ŠPhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·åÝé%ÚA¨Ÿ™:ê…eñˆ¶0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ºø­œÉñ‹+aue_lseek”ŠPhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýpÝr+aÇCú“r3OŽ5¯Œ¶ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U–ºø­œÉñ‹+20ÜS7[AIF¬•pd± (ý Æ¤ç¦B+“ÔPC +NŠ¶@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ºø­œÉñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýëJÎuJ CͬgÜWœ®²J¶ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U–ºø­œÉñ‹+20ÜS7[AIF¬•pd± (ýˆñÍËB¹°!HYõC¸Ž¶@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ºø­œÉñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý b„ÖµO}““>2’e”¶ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U–ºø­œÉñ‹+20ÜS7[AIF¬•pd± (ýÐ3ÌFðFÊŸŸd[˜¡# ’¶@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ºø­œÉñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎgG0™wLŽ¸QOE¯þ®–¶:‚œ Ê +ÙKFzé®›'üvº–ºø­œÉñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþ!i^^bM.rÇá*Èo˜¶@° Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V –ºø­œÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýiÜjþaOðŽ5ô,~Ù$¯š¶@° Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ºø­œÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý? ëð¸ Dê»A‘¢{¢—œ¶@° Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ºø­œÉñ‹+aue_pread¦2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇ´!ŠÝC‡†TòÁC‘ž¶b° Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á–ºø­œÉñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3½kqÏ»A¬¦’æô=„ ¶b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–ºø­œÉñ‹+aue_write3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýãÛÁ„ùBt´·/ºuµ±¢¶@° Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V –ºø­œÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU¤'aÒI¨‹ˆ(, Ý1¤¶@° Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ºø­œÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðg}º³IÇ…w–ªo”ƒ¦¶@° Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ºø­œÉñ‹+aue_preadÊhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýkjr¸2n@É=Gå§þÒ¨¶b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–ºø­œÉñ‹+aue_write´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`olêÄ9NºuTGÝæ;ª¶b° Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á–ºø­œÉñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎA`d7LˆlNuüeò¬¶@° Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V –ºø­œÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,LÑk×O{p¼w4áß®¶J° Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº–ºø­œÉñ‹+aue_sendtoà +ret_msgid +16985hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýe{?­ Mo·w&WüΪ°¶Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–ºø­œÉñ‹+aue_recvfromà ret_msgid +16985hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý5žM‹òuB‚¢Í #”±U²¶bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK–ºø­œÉñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýEdx_þ6N5•#%h^ƒÜ´¶D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–ºø­œÉñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿¨þõ~@ËŸŽŒ§Á…BT¶¶D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–ºø­œÉñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQÍËÙ7NŪÔXa(ìH¸¸¶D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–ºø­œÉñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèîœ\O”îjÛ¡úº¶D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–ºø­œÉñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>å9Í»ŒCI¸Â†¬×÷¼¶0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UèÖÜÍ Éñ‹+aue_lseek‚°PhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»]í§J“„å`¦È¨¾¶@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eøšï¦Éñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýH‰ÐÍãO‹šzØbó +À¶JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøšï¦Éñ‹+aue_sendtoÚ +ret_msgid +16986hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýê|!`ýJ®•ŠÅD¯WE,¶JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøšï¦Éñ‹+aue_sendto˜ +ret_msgid +16987hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý_Ú”²½C¬îq×ë”»ĶJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøšï¦Éñ‹+aue_sendto¬ +ret_msgid +16988hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýúþ­Ö¡Nø¢Ò {âƶJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøšï¦Éñ‹+aue_sendto˜ +ret_msgid +16989hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÎüçßNI©“ÐÂgl‚O|ȶDê› µ dôFzé®{'üvºµ CjFzé®{'üvºøšï¦Éñ‹+aue_recvfromÚ ret_msgid +16986hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý³¦ÇL¶IC•Q¦VìòUuʶDê› µ dôFzé®{'üvºµ CjFzé®{'üvºøšï¦Éñ‹+aue_recvfrom˜ ret_msgid +16987hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýq=8ÿD~‚öÍÜvÏ á̶Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºøšï¦Éñ‹+aue_recvfrom¬ ret_msgid +16988hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýNÕ[nÇ·I¸½™Rßk$ζDê› µ dôFzé®{'üvºµ CjFzé®{'üvºøšï¦Éñ‹+aue_recvfrom˜ ret_msgid +16989hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýeÓ¯·ôL£·5||ί/¢ж0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖ¨é¨Éñ‹+aue_lseek¼ÂPhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶‚éq&NbTÕ­›ö.Ò¶0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–í¢«Éñ‹+aue_lseek¼ÂPhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$Be) ŸAóƒË›Ö ’§JÖ¶ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U–í¢«Éñ‹+20ÜS7[AIF¬•pd± (ý órv…Oƒžª³Dx„-Ô¶@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–í¢«Éñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáãë|(óJ²Á ­¥bGèÚ¶ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U–í¢«Éñ‹+20ÜS7[AIF¬•pd± (ý7™qÜ ÑMŽ¼÷mËíãض@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–í¢«Éñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1†}¢KŽ—ö~-Èp—.Þ¶ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U–í¢«Éñ‹+20ÜS7[AIF¬•pd± (ý÷΃.  FÏ·6Ä.cÿq…ܶ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–í¢«Éñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµŠ• qüC/¤‚½Bts¬à¶:‚œ Ê +ÙKFzé®›'üvº–í¢«Éñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢~£ó ™Kµ•{äs´-®îâ¶@² Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V –í¢«Éñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxÒ§¼¯]K±žãË@Ú‰^þä¶@² Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–í¢«Éñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯SÑèéBÁ¦ÞJƒp‘èæ¶@² Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–í¢«Éñ‹+aue_preadæ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý74_O‰!‚bušè¶b² Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á–í¢«Éñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwÑÄWÄìO¥Š8÷êj¨—*ê¶b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–í¢«Éñ‹+aue_writeÐ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)•¾Ž*;AÅ®¤.UŒý6ì¶@² Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V –í¢«Éñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*gÍ6œ×EŽ¦ ~ˆ¼Û›·î¶@² Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–í¢«Éñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬Äü;ærð„OT¸‰ z¯ð¶@² Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–í¢«Éñ‹+aue_pread²hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•eq–ÈÉKP¹gÊ×ÓUEò¶b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–í¢«Éñ‹+aue_writeœhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcÕm_uMÂy*û:‹Àô¶b² Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á–í¢«Éñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕ -[ÛK¿‰/—ÄÔAîö¶@² Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V –í¢«Éñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý99o0ÿH@€¼Ô6ÜsXø¶J² Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº–í¢«Éñ‹+aue_sendtoà +ret_msgid +16990hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýY§£÷|N=—¢áç>ν»ú¶Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–í¢«Éñ‹+aue_recvfromà ret_msgid +16990hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý”g&\h™OßžßÄ!-/;Cü¶bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK–í¢«Éñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¤~žéROä•CȇàtzCþ¶D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–í¢«Éñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸàñ_ +0F‚ŸO”ñ›T€·D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–í¢«Éñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»T ÅYG„`YWLšÎ±‚·D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–í¢«Éñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýmzm%ÕRAD½Ø!u]E„·D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–í¢«Éñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^(û[ßM²Ž ´v¬‡¾†·0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uê£ÂÔ¯Éñ‹+aue_lseek¨èPhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýë·Œf!}CN“O¥Üaö߆ˆ·0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U싳—·Éñ‹+aue_lseekþíPhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýäCzn§ÇK˜ŒÀ/èV4Ê·0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UԻ͔ºÉñ‹+aue_lseekþíPhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýMs,µgM ´‰C-£Ž· ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UԻ͔ºÉñ‹+20ÜS7[AIF¬•pd± (ýßÕñ׶Nw¦iþ؉«ØÐŒ·@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UԻ͔ºÉñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝšfcßA‡ä1FiÇõà’· ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UԻ͔ºÉñ‹+20ÜS7[AIF¬•pd± (ýŸkH¬õBk¾¡N((מ·@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UԻ͔ºÉñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýØÚSDГEÏ7X ]h–· ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UԻ͔ºÉñ‹+20ÜS7[AIF¬•pd± (ýQk£ÔD—˜{°"Ü Â”·@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UԻ͔ºÉñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅÕ;îÚAG ž­ËúR£8™˜·:‚œ Ê +ÙKFzé®›'üvºÔ»Í”ºÉñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýò‚MmDJ_Ÿ¾¢Õ[F?Yš·@´ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ի͔ºÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýq$ËØÿúNø—XÛ;×þËœ·@´ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UԻ͔ºÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýx^”©[O¥ ,Ðÿ 1?ž·@´ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UԻ͔ºÉñ‹+aue_preadä%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝh|=\ŒF¬—æonf• ·b´ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áԻ͔ºÉñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýv>1TjcI±Õ] Jé1k¢·b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÔ»Í”ºÉñ‹+aue_writeÎ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýtÿÁJ‚„¾Žåot +ú¤·@´ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ի͔ºÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)£R¢ñuBŠÞ~sÂ4Ò¦·@´ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UԻ͔ºÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâELÇllO’滦rÐtr¨·@´ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UԻ͔ºÉñ‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-~1SAN$ŠË:FmŸšª·b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÔ»Í”ºÉñ‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýTxŠ×I¢’`hÎÿÑ|a¬·b´ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áԻ͔ºÉñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýö\yÆðçA{ƒý3ïBš})®·@´ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ի͔ºÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýNVÓ|C£~ãe¹u+°·J´ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÔ»Í”ºÉñ‹+aue_sendtoà +ret_msgid +16991hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/VÄ?°@,¢AÞkùä²·Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔ»Í”ºÉñ‹+aue_recvfromà ret_msgid +16991hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýAÅœ'ëL‚¨ÚLótÐà´·bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKԻ͔ºÉñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÿÑļ$¼L´¢Ô2=u¶·D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÔ»Í”ºÉñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý· F»´¡=Ú——攸Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÖŒÑÈÓÉñ‹+aue_recvfromÚ ret_msgid +16997hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý ‡á}oœD–ˆØúò¤‘Jo–¸Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÖŒÑÈÓÉñ‹+aue_recvfrom˜ ret_msgid +16998hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýBrD1NKLŸ§=^…'²¾˜¸Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÖŒÑÈÓÉñ‹+aue_recvfrom¬ ret_msgid +16999hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý/ä^ó¼ýFÞ/&ŸÐ $š¸Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÖŒÑÈÓÉñ‹+aue_recvfrom˜ ret_msgid +17000hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®ôûìëWââO‰‚MÃQ e›Õœ¸0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”±¨¤ÕÉñ‹+aue_lseekÈÞQhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`-µßlBò¹äžl™Kž¸0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬—µÿ×Éñ‹+aue_lseekÈÞQhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýù.3ASIŒÃÙã€-🢸 ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬—µÿ×Éñ‹+20ÜS7[AIF¬•pd± (ýžE¸—D«¨¹`”w ¸@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬—µÿ×Éñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€DŸ|JBn_’áÜ'¦¸ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬—µÿ×Éñ‹+20ÜS7[AIF¬•pd± (ý‰†ÒÏCݺ͛’Gß$¤¸@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬—µÿ×Éñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–zƒr!Hþ¨wA  ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¬—µÿ×Éñ‹+20ÜS7[AIF¬•pd± (ý¹m%€nL-ƒŒ¢]wJii¨¸@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬—µÿ×Éñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆÃÜF­…É"¾xdÇk¬¸:‚œ Ê +ÙKFzé®›'üvº¬—µÿ×Éñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}‡xt’@3œ‰ÉùÒÝÍ®¸@¸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬—µÿ×Éñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°õeëG Ž}«ôu°¸@¸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬—µÿ×Éñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèÓ×C‚æJ¡ßõ—T‰&µ²¸@¸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬—µÿ×Éñ‹+aue_preadü%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýýÔXòxJù¸`æy@iE´¸b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¬—µÿ×Éñ‹+aue_writeæ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýîo¨)7LœÊŠw-â1¶¸b¸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬—µÿ×Éñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýUa¤uƒBd°”F‰ “Gm¸¸@¸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬—µÿ×Éñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹áa ¿Bƒ‘u|Õz%­zº¸@¸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬—µÿ×Éñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZ]8|ð¢LÞ„JPå§lí¼¸@¸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬—µÿ×Éñ‹+aue_pread¾hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈuN%šyûáõ$鋾¸b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¬—µÿ×Éñ‹+aue_write¨hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­ìДŸJöšüœ yd#À¸b¸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¬—µÿ×Éñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýzü–_Ký¬ê4že¢¢¸@¸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¬—µÿ×Éñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•Mt»Oá¥YÐÏgœĸJ¸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¬—µÿ×Éñ‹+aue_sendtoà +ret_msgid +17001hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýë6ÑI†IäŸ#ªP»^ÛƸDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¬—µÿ×Éñ‹+aue_recvfromà ret_msgid +17001hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÜæÒbdG9ªèB“¯Xxµȸbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¬—µÿ×Éñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý÷‡yg×,K&–šÆ˜/ʸD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÞë„ØÉñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýRu=ÊoØL3 TÃükì½̸D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÞë„ØÉñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýúíÃtº7Oèµ>‚/KòθD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÞë„ØÉñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýT}OæV1IE…‡¨<ïèqäиD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÞë„ØÉñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§sW C^½(ê(rјÒ¸0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U䪻çÜÉñ‹+aue_lseek´„RhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{dÇif“MM¿HN‹?7ûÔ¸0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº”¶ªäÉñ‹+aue_lseek’ŠRhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèÀVxºñKçž+ æÙy¿Ö¸0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ú­ïæÉñ‹+aue_lseek’ŠRhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=uˆõö2LÅ£ðý‘'ü4Ú¸ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤ú­ïæÉñ‹+20ÜS7[AIF¬•pd± (ýG–ZXçEk–Whd@…7éظ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ú­ïæÉñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰Ôñ ÕHð¬ÙNæû¹­Þ¸ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤ú­ïæÉñ‹+20ÜS7[AIF¬•pd± (ýáÐN§&BŒ†@@m ’ &ܸ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ú­ïæÉñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,öùIÐN;µYüU "íÑ⸠‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤ú­ïæÉñ‹+20ÜS7[AIF¬•pd± (ýÇG¢Ä,GZ¶l¢3%lâìà¸@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ú­ïæÉñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýB¾s>ÃúB#¿Xùìc™E6ä¸:‚œ Ê +ÙKFzé®›'üvº¤ú­ïæÉñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZ‡•Ó¯NòŸ´O–€—Îuæ¸@º Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤ú­ïæÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÔüW0A/»Ïü +W0è¸@º Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ú­ïæÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%T •wEë²´/%µéÑtê¸@º Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ú­ïæÉñ‹+aue_preadä%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*VZýDA·Ü &ú–ì¸b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤ú­ïæÉñ‹+aue_writeÎ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊ£½:¬PH¾€ËÑs%î¸bº Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤ú­ïæÉñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7®f—9äNÙ¥˜÷å~¶ð¸@º Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤ú­ïæÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛ‘Âd L¯½ó†‰ÖhÒò¸@º Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ú­ïæÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§”XùÁ•Ló¯g²¦¡ÿZô¸@º Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ú­ïæÉñ‹+aue_preadÖhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýäsq›4dBý©Æ‚c8Yö¸b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤ú­ïæÉñ‹+aue_writeÀhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»JK³mFúCH£`¤Aø¸bº Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤ú­ïæÉñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýXW¨æíçARœxn†×?Fªú¸@º Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤ú­ïæÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý òTߣB6°rH—Èã’øü¸Jº Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¤ú­ïæÉñ‹+aue_sendtoà +ret_msgid +17002hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒ#¡¯A¿—£p…*Pþ¸Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¤ú­ïæÉñ‹+aue_recvfromà ret_msgid +17002hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýå“ž÷ÍM¥¾±%É=¶Š€¹bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¤ú­ïæÉñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý$õ¾d›I\ŠÌ­M¹¶‚¹D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤ú­ïæÉñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýl%ÒÓHµ±§¿ÈýöüË„¹D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤ú­ïæÉñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀáÞ5Û@û¨ØÜ«×PËB†¹D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤ú­ïæÉñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýúšK투I­»ÊØ›ò`gˆ¹D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤ú­ïæÉñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”ìǬá·EX‘R{…H?ÖŠ¹@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÖŽØõéÉñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý_ß7 +h@@¶DHÉ÷R·gŒ¹JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÖŽØõéÉñ‹+aue_sendtoÚ +ret_msgid +17003hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý|ô¿³H¥¾r˜Þ8| Ž¹JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÖŽØõéÉñ‹+aue_sendto˜ +ret_msgid +17004hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý(ØÇFOGš%íûrœ“%¹JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÖŽØõéÉñ‹+aue_sendto¬ +ret_msgid +17005hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýchý×ñÎBCC°¹@¼ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦¸ŽâõÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýK[ÆBPyI$—lȿЫԲ¹@¼ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦¸ŽâõÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýs0È)sIK²‚#ç|·´¹@¼ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦¸ŽâõÉñ‹+aue_pread˜2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&*^ŸGØ¿IBöwïﶹb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦¸ŽâõÉñ‹+aue_write‚3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýXp-‘¬LFô.˜´ï +¸¹b¼ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦¸ŽâõÉñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyæÜDK¤–gíûÏ|?Lº¹@¼ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦¸ŽâõÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯÷£oK4”« +±®É`¼¹@¼ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦¸ŽâõÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý觜Yù½L9ºÖ¼ Ø‚÷š¾¹@¼ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦¸ŽâõÉñ‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'¹X‹@z«u‹1¶saÀ¹b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦¸ŽâõÉñ‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜äáË!Br¢”26&¼¹b¼ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦¸ŽâõÉñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñ¶¤t| GŽ0WIP«Ĺ@¼ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦¸ŽâõÉñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸æÖsMy·)"*áÊ4ƹJ¼ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¦¸ŽâõÉñ‹+aue_sendtoà +ret_msgid +17007hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌ£2ŽYA™Fšóþ¿MȹDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦¸ŽâõÉñ‹+aue_recvfromà ret_msgid +17007hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬®ûÆ›’sÂK׬$:ôŸ3ʹbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¦¸ŽâõÉñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý×Oõ*uDšŠM:ÿ.“̹D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦¸ŽâõÉñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýé¾n¿/üCÛ£ˆ,)iιD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦¸ŽâõÉñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|yȼÊEÆ®å»?åÞœйD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦¸ŽâõÉñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀ  +£âAy¾žéÀ.¯ÅÒ¹D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦¸ŽâõÉñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹¬)áˉHk¡ºå+—§ýÔ¹0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚ‰ÀôúÉñ‹+aue_lseekêçRhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËg½÷áöHP•1QüE-fÖ¹@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e×–£€Êñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýïUã–³CŠ’]œbá]عJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº×–£€Êñ‹+aue_sendtoÚ +ret_msgid +17008hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýâ¬í÷´ò¹ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÎÒÚÕ„Êñ‹+20ÜS7[AIF¬•pd± (ýîZ§îA˟ʼn'Êôð¹@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÒÚÕ„Êñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýct–XñFu¼ÄŸøÈ"m@ö¹ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÎÒÚÕ„Êñ‹+20ÜS7[AIF¬•pd± (ý;´rNYJ§1”"äܨ +ô¹@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÒÚÕ„Êñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐ\œÈ‰H¶’³ÃfpÀ†ø¹:‚œ Ê +ÙKFzé®›'üvºÎÒÚÕ„Êñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…(âlÉ›L0—ÝÊòHÂ$”ºbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÎÒÚÕ„Êñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýš6ŽïN&O'“¿„ìLûdÚ–ºD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎÒÚÕ„Êñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAÓŽJ™ºƒ†Ðz8v1˜ºD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎÒÚÕ„Êñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛ¯/€`Ü@»;Vä íšºD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎÒÚÕ„Êñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýB«á!ªÛN"»…iû“:ÌœºD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎÒÚÕ„Êñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáå–«_ÖN7´èlE0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜¾ôú‰Êñ‹+aue_lseek’ ShostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýß÷H²iIc£¶3¨÷ º0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uª«Ý½‘Êñ‹+aue_lseekä¥ShostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýàŒþÌFž©XŠãTöžÒ¢º0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢³àÈ“Êñ‹+aue_lseekä¥ShostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýô•I%uI涌9¬M„=¦º ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¢³àÈ“Êñ‹+20ÜS7[AIF¬•pd± (ýö³ËÊŸ¿L@—ôæ4ôóö¤º@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢³àÈ“Êñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡‡Éƨ@¶±#¯hnyݪº ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¢³àÈ“Êñ‹+20ÜS7[AIF¬•pd± (ý:³¡¯K$·ð¯ÛO±¨º@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢³àÈ“Êñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›šÿüTŠJ¦¢ã%Qowo®º ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¢³àÈ“Êñ‹+20ÜS7[AIF¬•pd± (ý úÅ[AX¦M1”ùÊÓ¬º@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢³àÈ“Êñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`7™©ÅÀN1Ü°_´4°º:‚œ Ê +ÙKFzé®›'üvº¢³àÈ“Êñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’é^4r²C&©”潘›²º@À Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢³àÈ“Êñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýn®BOPIo¶ +^¿ædu ´º@À Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢³àÈ“Êñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõ¿Ô ˜óHÑ¥&hš´C¶º@À Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢³àÈ“Êñ‹+aue_preadä%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýr@j¥ÇFG¤$ËŸøkY¸ºb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢³àÈ“Êñ‹+aue_writeÎ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†*‡‰çH­irˆ±žÖººbÀ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¢³àÈ“Êñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýz;熟ŠO"€Oòƒ‰,šÔ¼º@À Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢³àÈ“Êñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýx‹%¼–3KøŸÛ%qØ.ú¾º@À Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢³àÈ“Êñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýpû%<%KW™ó=ŸÒIÀº@À Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢³àÈ“Êñ‹+aue_preadÊhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„Owó™C\£³<œZåžãºb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢³àÈ“Êñ‹+aue_write´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýH ³tAJ²Hâgê3QôĺbÀ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¢³àÈ“Êñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý» žv¼¶G}µT†‚“ ­ƺ@À Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢³àÈ“Êñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýH³v¥…¬G¨¥Š!ØQùUȺJÀ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¢³àÈ“Êñ‹+aue_sendtoà +ret_msgid +17013hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±ŸŒõù#B¾†äí•\ÔMʺDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢³àÈ“Êñ‹+aue_recvfromà ret_msgid +17013hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýRª¢œE—KÇŽÔ:Pi¬-Y̺bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¢³àÈ“Êñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýKžï¦ÀÙHª × Ÿ²òκD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢³àÈ“Êñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯|báBXA Œv<ß*>`кD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢³àÈ“Êñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@•Lâ¸*ظ`»wÒºD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢³àÈ“Êñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýHë«D)N¿¾=¶½v˜ÝÔºD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢³àÈ“Êñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýC•è2âèE¥™v!ÅZQÀÖº@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¤ŽáÏ–Êñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýú£éÖ×J¥Ÿ4{!aÛغJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¤ŽáÏ–Êñ‹+aue_sendtoÚ +ret_msgid +17014hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý{aß¾ü®A¿ŸŽô®:ÃÀQÚºJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¤ŽáÏ–Êñ‹+aue_sendto˜ +ret_msgid +17015hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýQË/:±ÑN††ZØDZí@ŸܺJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¤ŽáÏ–Êñ‹+aue_sendto¬ +ret_msgid +17016hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÇ9 +q»ŽL1“AU”:•ÞºJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¤ŽáÏ–Êñ‹+aue_sendto˜ +ret_msgid +17017hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¿Þê®ÆDA|ŠþçVjp…àºDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¤ŽáÏ–Êñ‹+aue_recvfromÚ ret_msgid +17014hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýˆøõ?u@é·ƒô"HN£âºDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¤ŽáÏ–Êñ‹+aue_recvfrom˜ ret_msgid +17015hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý½èã=$4IËš0f2 ŒäºDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¤ŽáÏ–Êñ‹+aue_recvfrom¬ ret_msgid +17016hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýݼT,èKtlT#vBæºDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¤ŽáÏ–Êñ‹+aue_recvfrom˜ ret_msgid +17017hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý0»17I§Ã]p<´#èº0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°éõ€™Êñ‹+aue_lseekˆØShostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýò’-ZpÝD ¹Ê¥Ë„çqêº0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜ŸâÄ Êñ‹+aue_lseekÞÝShostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYôä7¾F,¿¬ +Ó%ô«ìº0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ïä¿¢Êñ‹+aue_lseekÞÝShostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰P¤O,3JØ´{õr­ 𺠂œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ïä¿¢Êñ‹+20ÜS7[AIF¬•pd± (ýå&¾ßžC³»Ø”à*xHîº@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ïä¿¢Êñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýó\+ì‘H¬‰y>¼ž5ôº ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ïä¿¢Êñ‹+20ÜS7[AIF¬•pd± (ýÉ{z‡ŒXIÏ¿ÉÒO,Äpòº@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ïä¿¢Êñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®Èü²hÏœw£Ay«Ï•ð†Ÿ”øº ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦ïä¿¢Êñ‹+20ÜS7[AIF¬•pd± (ýÿTh³.yD¬«røU“ôöº@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ïä¿¢Êñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÔ*¯LŽ¥œÂ…t&úº:‚œ Ê +ÙKFzé®›'üvº¦ïä¿¢Êñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèzÌ'qCS°%„5yÃóøüº@ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ïä¿¢Êñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3ÌzÄ°mE>‡*ä¯5àþº@ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ïä¿¢Êñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!ôÕ(>@§¢•+àµu€»@ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ïä¿¢Êñ‹+aue_preadœ2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'OœƒanC¡¿¼ä¢îÜÌ‚»b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦ïä¿¢Êñ‹+aue_write†3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝñL|GßnýÈœ¡œ¡„»b Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ïä¿¢Êñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐe£ BOµM“JJ€„†»@ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ïä¿¢Êñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏØ}v¿NŽ s TÈ°àˆ»@ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ïä¿¢Êñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊ´ÛèvNu¯vLómšZŠ»@ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦ïä¿¢Êñ‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$˜<í‹IùŸ™Êpja‘ˆŒ»b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦ïä¿¢Êñ‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛõì…ôK?œ_UÎrÕŽ»b Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦ïä¿¢Êñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁ{j¾{@£°èñÝ(>y»@ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦ïä¿¢Êñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŪ^ØcK=¡trÂ'ÊÃ\’»J Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¦ïä¿¢Êñ‹+aue_sendtoà +ret_msgid +17018hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{R~ij×G ŸñªcKÈÎÍ”»Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦ïä¿¢Êñ‹+aue_recvfromà ret_msgid +17018hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý=ë¬Î&$N_¶·r90Šé‚–»bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¦ïä¿¢Êñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý#VçŽDH\ O%”wúº˜»D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvººùÆ¢Êñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýlí,ÜPqF·â[èÛýš»D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvººùÆ¢Êñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýhûÓîšqKöƒ ûŽ8 ¶œ»D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvººùÆ¢Êñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎW®ãmF=HšÑâu¹ž»D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvººùÆ¢Êñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷©E:ºEƒ¤ "£‚0ú »0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆþþ‡¨Êñ‹+aue_lseek؃ThostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI®>WXç@•ƒÄ+lÛêÅ¢»@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e˜Ëáü¬Êñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýå;º¨hNÜŠWtS€Ü‡¤»JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº˜Ëáü¬Êñ‹+aue_sendtoÚ +ret_msgid +17019hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýG UìGIA6r„a¦»JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº˜Ëáü¬Êñ‹+aue_sendto˜ +ret_msgid +17020hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýX伧‹†@ý¿ÕªÆÐD«ç¨»JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº˜Ëáü¬Êñ‹+aue_sendto¬ +ret_msgid +17021hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýæÅjSÇ»Dãœðþ3ß0/ª»JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº˜Ëáü¬Êñ‹+aue_sendto˜ +ret_msgid +17022hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý=irD¡âJŠ¬®쩜ʟ¬»Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº˜Ëáü¬Êñ‹+aue_recvfromÚ ret_msgid +17019hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýé÷c)E«IO¥hg¿Îü½®»Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº˜Ëáü¬Êñ‹+aue_recvfrom˜ ret_msgid +17020hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýøh*ÈV Dªç{€‚ °»Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº˜Ëáü¬Êñ‹+aue_recvfrom¬ ret_msgid +17021hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý·Ü5Mé-H_ƒg ¨@¿Sí²»Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº˜Ëáü¬Êñ‹+aue_recvfrom˜ ret_msgid +17022hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýýoi| xG¢¨ß+y7-´»0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌøʯÊñ‹+aue_lseek–ThostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýSž ÁRNg‘xÄÇ£Nzü¶»0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U£Ù¯±Êñ‹+aue_lseek–ThostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´ÚôAù¾ +`ÖÖšÕº» ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U£Ù¯±Êñ‹+20ÜS7[AIF¬•pd± (ý\†ÍaöG“œ#þÝÚj¸»@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U£Ù¯±Êñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýv$äæJEÓ½'h­f¾» ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U£Ù¯±Êñ‹+20ÜS7[AIF¬•pd± (ýuŠèŠJ¤ž{–Õz}g¼»@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U£Ù¯±Êñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤³ýÊÊM°½îä|¥ìd#» ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U£Ù¯±Êñ‹+20ÜS7[AIF¬•pd± (ýb6) 5KÞ³b‚º é×À»@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U£Ù¯±Êñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýž:„ôHàŽŸ¿Ó‚WÄ»:‚œ Ê +ÙKFzé®›'üvº£Ù¯±Êñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼—ò{Ff¹Qk1Ù¤xÆ»@Ä Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V £Ù¯±Êñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAé¯ß N£kü+²•“xÈ»@Ä Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U£Ù¯±Êñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬¿,¹}Mf¸å•-%Ê»@Ä Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U£Ù¯±Êñ‹+aue_preadò%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—•£¡·XF$ž'_îëO^“Ì»b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº£Ù¯±Êñ‹+aue_writeÜ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿v¨"£G|¤/ŒÐ¹¥èHλbÄ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á£Ù¯±Êñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©Fl +4˜By¬yrC‚×õл@Ä Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V £Ù¯±Êñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýó^9B†WD…¨ŽL§uQÒ»@Ä Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U£Ù¯±Êñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—5Áƒv CšÌ›)™ÊÔ»@Ä Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U£Ù¯±Êñ‹+aue_pread°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±Ú±e}7GÕ³ñÏ|0ý¬ªÖ»b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº£Ù¯±Êñ‹+aue_writešhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´CÉaAвdr'îö!©Ø»bÄ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á£Ù¯±Êñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌQìYdO‚±ˆ·dpèxÚ»@Ä Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V £Ù¯±Êñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýg š÷xI˜ŸF„=öüzÜ»JÄ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº£Ù¯±Êñ‹+aue_sendtoà +ret_msgid +17023hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýç:äúlªN`¹‡ü=ä@ŠÞ»Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº£Ù¯±Êñ‹+aue_recvfromà ret_msgid +17023hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‡Q½¨¬,KQ»ŸCæ1\Çà»bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK£Ù¯±Êñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý”VézjÝ@›¥¯EÏduâ»D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº£Ù¯±Êñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýe;×C@ŠqòM(‡‡ä»D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº£Ù¯±Êñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìæ9Vœ¨OÍžzY“ AWcæ»D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºšò¡¹±Êñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýªú+Y¼Oá°^¿™8~ +è»D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºšò¡¹±Êñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýVÌqÛHȧYhï'LÓê»0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂÙŽ·Êñ‹+aue_lseek‚¼ThostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðù¥šÈ]L«‡Ù°R~HÈì»0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŠë’ѾÊñ‹+aue_lseekÖÁThostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýnÕpèñrA´7Ñ-CœTKî»0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ìç¢ÀÊñ‹+aue_lseekÖÁThostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýs^ã_r®Fu¶SŠ!¦—ò» ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U®ìç¢ÀÊñ‹+20ÜS7[AIF¬•pd± (ýö¯ŒmÝE©¤š«»JWð»@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ìç¢ÀÊñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáϳëËÄG$Š;ˆ¦…T‡ö» ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U®ìç¢ÀÊñ‹+20ÜS7[AIF¬•pd± (ývÊ!.‘a@Ò†ÿj,õÑt)ô»@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ìç¢ÀÊñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽ +1KóŠÀÏî|½[9ú» ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U®ìç¢ÀÊñ‹+20ÜS7[AIF¬•pd± (ýK4èmø@)«Ez‰ÖÓ”¿ø»@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ìç¢ÀÊñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýPðeŒfBFuŽg‰rìWü»:‚œ Ê +ÙKFzé®›'üvº®ìç¢ÀÊñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýf']3DHÒ»Ù&.Pâþ»@Æ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ®ìç¢ÀÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@è>:\íDv¡ˆyV|:=€¼@Æ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ìç¢ÀÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'AæˆNZ˜jÚž‚¼@Æ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ìç¢ÀÊñ‹+aue_preadê%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒ>‚’–O—üÅk4a„¼b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®ìç¢ÀÊñ‹+aue_writeÔ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáw€R9¦Jd‡£º^K3 S†¼bÆ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á®ìç¢ÀÊñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙ}LÃou@¢Àw±Ã»ˆ¼@Æ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ®ìç¢ÀÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýëcÎç‰Bª "ɳ=o¡Š¼@Æ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ìç¢ÀÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýh×aIk@(šë 1xoÛŒ¼@Æ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ìç¢ÀÊñ‹+aue_preadÌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý *5„T@Cc³ ìQ3u.Ž¼b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®ìç¢ÀÊñ‹+aue_write¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý óG8Ç”FùŽÇ¨½÷ 87¼bÆ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á®ìç¢ÀÊñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[ê!•¹NÜ·/Æ*5þ ’¼@Æ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ®ìç¢ÀÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýd’ÛŠÉF¶Š`ÏC${”¼JÆ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº®ìç¢ÀÊñ‹+aue_sendtoà +ret_msgid +17024hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCpüLúJiš"‹˜NBoÏ–¼Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ìç¢ÀÊñ‹+aue_recvfromà ret_msgid +17024hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý·ì»”C^ ƒY(ܶ˜¼bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK®ìç¢ÀÊñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý_…eõX)Dª¸ÊrÑü°öš¼D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºú§¥¬ÀÊñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—ðÓ×RE­¡ +ãm²Åvvœ¼D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºú§¥¬ÀÊñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8 †–ØÙCߤW½úÙuWCž¼D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºú§¥¬ÀÊñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆzE¤ÓB“‹†ƒŠ¯ ‰T ¼D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºú§¥¬ÀÊñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý L†oÜG ½'eºIêj¢¼@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eØñ©ÃÊñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬žûÃw†Ð‡¥@†¡âÌÖCÚm¤¼JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØñ©ÃÊñ‹+aue_sendtoÚ +ret_msgid +17025hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýèɦæÒoLœç½Áý_M¦¼JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØñ©ÃÊñ‹+aue_sendto˜ +ret_msgid +17026hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýS+ X‡E­_Bÿ/…¾.¨¼JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØñ©ÃÊñ‹+aue_sendto¬ +ret_msgid +17027hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¾df;ëMʃÂýç«’€ª¼JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØñ©ÃÊñ‹+aue_sendto˜ +ret_msgid +17028hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÚôqÎ1@x©Ì ÑUج¼Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºØñ©ÃÊñ‹+aue_recvfromÚ ret_msgid +17025hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý••®~eJ:•„ ˜ƒœ®¼Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºØñ©ÃÊñ‹+aue_recvfrom˜ ret_msgid +17026hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýúÒçÀ OŠ àûíG°¼Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºØñ©ÃÊñ‹+aue_recvfrom¬ ret_msgid +17027hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýù :9“9Od®PÛl{‘_ì²¼Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºØñ©ÃÊñ‹+aue_recvfrom˜ ret_msgid +17028hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýAžkÙLF{¨w[ºnÖVè´¼0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UüÏ„ÆÆÊñ‹+aue_lseekŽôThostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýV„™gH“C=“è>’¶¼0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖ‚œ‡ÎÊñ‹+aue_lseekâùThostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$zœ|Ú÷Cv¹â¥úÜÝþ¸¼0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U…’–ÏÊñ‹+aue_lseekâùThostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµ}WòÃHýœDî­e„ʼ¼ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U…’–ÏÊñ‹+20ÜS7[AIF¬•pd± (ý]t +HbNg ©Ã‡0;#º¼@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U…’–ÏÊñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙ‡ö»®E[¤nAæTž‰ÜÀ¼ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U…’–ÏÊñ‹+20ÜS7[AIF¬•pd± (ýP÷šaPHq²‘°`~2 G¾¼@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U…’–ÏÊñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®ãE/æIž„nsZQ”ļ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U…’–ÏÊñ‹+20ÜS7[AIF¬•pd± (ý XDPps@ϧˆÿýƒ¼@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U…’–ÏÊñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýa¹'÷N|™™1yðRR1Ƽ:‚œ Ê +ÙKFzé®›'üvº…’–ÏÊñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’'RüEÜ‘ ,¸!÷<‘ȼ@È Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V …’–ÏÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýy~¹H+›á3úøÔýʼ@È Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U…’–ÏÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™~u \@c®«´úBD”̼@È Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U…’–ÏÊñ‹+aue_pread°2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÔL6øT¿M¢¸A‹,jïNμb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº…’–ÏÊñ‹+aue_writeš3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³v5ëEK°¿ÅâÅôùEáмbÈ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á…’–ÏÊñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆ> :t«I½>‰R/2™Ò¼@È Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V …’–ÏÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛƒyD̓•"4ÌåPÔ¼@È Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U…’–ÏÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹6‹«YCƵ±údkëÜ£Ö¼@È Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U…’–ÏÊñ‹+aue_preadÌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýêêPÔ•øK­¡Õ_´¼Oؼb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº…’–ÏÊñ‹+aue_write¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁWÅ‹ž•E[‘f¢§@¬yÚ¼bÈ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á…’–ÏÊñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/'V>ý™K¥)u\„Mÿܼ@È Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V …’–ÏÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎõ~=ÉÔBݪ4Äåj±wÞ¼JÈ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº…’–ÏÊñ‹+aue_sendtoà +ret_msgid +17029hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâš-¿`æJźb#˜÷~à¼Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº…’–ÏÊñ‹+aue_recvfromà ret_msgid +17029hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýc m±—ÈA†Æ ‡Ò£_â¼bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK…’–ÏÊñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý³f!t›C±¬õìÖ%̯ä¼D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¸”¾ÏÊñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýj”bÛ¦L7­©ª=µóÕæ¼D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¸”¾ÏÊñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽˆÊ;±L=‰òd_ÍEv è¼D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¸”¾ÏÊñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyDrª_G˜™×r¹Ã$¸ê¼D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¸”¾ÏÊñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýV +æƤK+—*F¢„Ÿì¼0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ‚¹ðÕÊñ‹+aue_lseekÖŸUhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)Øšö E@š²ò™n¶ÎÝî¼@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e’âƒôÙÊñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý–ÜöÝ9ƒLS™L—HeÀð¼JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’âƒôÙÊñ‹+aue_sendtoÚ +ret_msgid +17030hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýî±xñƒNiŠqv÷•™WTò¼JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’âƒôÙÊñ‹+aue_sendto˜ +ret_msgid +17031hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý}MÕfAÒ‘Hf®þ \'ô¼JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’âƒôÙÊñ‹+aue_sendto¬ +ret_msgid +17032hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý@(YêD¼Nýztá¾ö¼JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº’âƒôÙÊñ‹+aue_sendto˜ +ret_msgid +17033hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý4ëÏ£æ3A +Ž¾£Ï‡V0ø¼Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’âƒôÙÊñ‹+aue_recvfromÚ ret_msgid +17030hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý2F|¬ŠìM½V~‰®&\óú¼Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’âƒôÙÊñ‹+aue_recvfrom˜ ret_msgid +17031hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýôh»¶I(ªË¯N(Ìü¼Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’âƒôÙÊñ‹+aue_recvfrom¬ ret_msgid +17032hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý˦ÓÉf„N­žOC¦æ‚þ¼Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº’âƒôÙÊñ‹+aue_recvfrom˜ ret_msgid +17033hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý%g\3UjDB¥×ÎG+ƒÖð€½0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄ­¶ÖÝÊñ‹+aue_lseek–²UhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýkRz âOþœ´8ÒoU=<‚½0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uê罉ÞÊñ‹+aue_lseek–²UhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+DEoËLÙ£—‹…|M9"†½ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uê罉ÞÊñ‹+20ÜS7[AIF¬•pd± (ý}¯9Ç;Nj‹Ò¦Ÿˆv„½@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uê罉ÞÊñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±e+Ž9eBÞ›ÙK±× >Š½ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uê罉ÞÊñ‹+20ÜS7[AIF¬•pd± (ý~Z°Ès–K™§qi‚ÉÛȽ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uê罉ÞÊñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJßõ&F³¼ÍÐÏ©{ðŽ½ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uê罉ÞÊñ‹+20ÜS7[AIF¬•pd± (ýñ¿vwÑoMR’ý}ÓM[Œ½@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uê罉ÞÊñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞ(¸—FAµ¸í{r8)O½:‚œ Ê +ÙKFzé®›'üvºê罉ÞÊñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýTªÙ@B«Š'ÙÜÄD’½@Ê Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ê罉ÞÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0+]r«â@v•ß"(õ$B”½@Ê Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uê罉ÞÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý MR¿/@—†E3M—PG“–½@Ê Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uê罉ÞÊñ‹+aue_preadì%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†+5‚Nü¨‹‡LÙ!£…˜½b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºê罉ÞÊñ‹+aue_writeÖ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýéå÷妢A±£=Ns¶ßôš½bÊ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áê罉ÞÊñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýt„¸‹K‘µ_2s¬—Æ +œ½@Ê Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ê罉ÞÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóþ—‰ÔOò›„’¨¤µ\*ž½@Ê Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uê罉ÞÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚)ÀÝCÆ@d¢ ë±/` ½@Ê Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uê罉ÞÊñ‹+aue_pread¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶ÇYÓˆ@¨§+Þ† {¢½b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºê罉ÞÊñ‹+aue_write¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^ÛnåC²”aË/*Cò¤½bÊ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áê罉ÞÊñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×ô28³¨E@ˆDÅ° g&¦½@Ê Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ê罉ÞÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwnHlìI_‚Ç®žû¯Ý樽JÊ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºê罉ÞÊñ‹+aue_sendtoà +ret_msgid +17034hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´=¡ŠÖIè’’}ž¥4#ª½Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºê罉ÞÊñ‹+aue_recvfromà ret_msgid +17034hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý,¹çîh C>¶ ì!ðt'<¬½bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKê罉ÞÊñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýíܦBáM›Ñ5JÚŸß®½D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºðô¡°ÞÊñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©šÂFrœY}-šùÌp°½D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºðô¡°ÞÊñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýäù¿E¹ +I¹¿¿š+Är²½D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºðô¡°ÞÊñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙàîñ˜A·î[ÃŒ£&I´½D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºðô¡°ÞÊñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýY–ÚÅûJ‹]7œ”§¶½0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ› ¾åÊñ‹+aue_lseekœØUhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘¬RÔj6DÝ‘g¶ËÇiƒ¸½0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽùëüìÊñ‹+aue_lseekðÝUhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿ• iQCt¹Ó•Ïì*º½0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽùëüìÊñ‹+aue_lseekðÝUhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½ôDNö‚—¤ðÝÉh;¾½ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŽùëüìÊñ‹+20ÜS7[AIF¬•pd± (ýÊ˱7C±C0¶ªYؼ½@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽùëüìÊñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$]m!ÅF§ƒÀ÷E\±Z½ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŽùëüìÊñ‹+20ÜS7[AIF¬•pd± (ý'ÙA>ÿ±IQ‰1+,kÁÀ½@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽùëüìÊñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxǘ¹BA–'ùõþƽ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŽùëüìÊñ‹+20ÜS7[AIF¬•pd± (ýWKVZêSJŠ‘£è•ÄèAÈĽ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽùëüìÊñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½Kíc}ÙE¿½w%áÁȤÛȽ:‚œ Ê +ÙKFzé®›'üvºŽùëüìÊñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=Q.{©D¯ v"Ж0Ì'ʽ@Ì Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŽùëüìÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcýÄU=MI½€X±_¬—̽@Ì Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽùëüìÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑ2ýT‚nHj’£öÙå{-ν@Ì Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽùëüìÊñ‹+aue_preadþ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬œüöSD*:LY±RˆÕ ÌÀнb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽùëüìÊñ‹+aue_writeè&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýê'û§>KvŽÒ,}á«TÒ½bÌ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŽùëüìÊñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘DÙf…@¥‡ û¨2Ô½@Ì Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŽùëüìÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýí#ŸÈ)ØO+ƒ‘XaÜ€ÝÖ½@Ì Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽùëüìÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõÍäx.íH3¼áÔo$20gؽ@Ì Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽùëüìÊñ‹+aue_preadÌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýVI×¼'F©…ŒÞ¬Ú½b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽùëüìÊñ‹+aue_write¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒÅèÑÝ„Hü¤,ÆèÃúܽbÌ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŽùëüìÊñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåûg"L\ªÐ—? c Þ½@Ì Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŽùëüìÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqÑp¤Dþƒ´¸Ñà½JÌ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºŽùëüìÊñ‹+aue_sendtoà +ret_msgid +17035hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýéf¥°kLg”î½j-+uâ½Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŽùëüìÊñ‹+aue_recvfromà ret_msgid +17035hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý6¢Ë% +CÕš +SòéÂã9ä½bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKŽùëüìÊñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýyÙÿ?Hï’ÈÍW(ü°æ½D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽùëüìÊñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹u:ŸsD‰ø€Ó ªë#è½D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽùëüìÊñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓ Ú;˜K`°ñ¹09Ø—ÿê½D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽùëüìÊñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿T¸Ã§)L)µŸY9+Ž%ì½D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽùëüìÊñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_ËÄIàGŠ¨¸mD /?,î½@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eŒ¢™žðÊñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý×s”¶´éJׂ*ÂT˜bð½JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŒ¢™žðÊñ‹+aue_sendtoÚ +ret_msgid +17036hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý³‘ý7?Jsµ¿r4±£¤fò½JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŒ¢™žðÊñ‹+aue_sendto˜ +ret_msgid +17037hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýBz©§CÔ„Ybo-¦®Âô½JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŒ¢™žðÊñ‹+aue_sendto¬ +ret_msgid +17038hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý (ÁºP7@Þ Xʾ¢§1¨ö½JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºŒ¢™žðÊñ‹+aue_sendto˜ +ret_msgid +17039hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ým& +`ó6D¨˜œgÖ¼ ´ø½Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŒ¢™žðÊñ‹+aue_recvfromÚ ret_msgid +17036hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý_&w™DôŽóÀŽwéú½Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŒ¢™žðÊñ‹+aue_recvfrom˜ ret_msgid +17037hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýMÒ­¤*@ˆ5œ$Ÿkßéü½Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŒ¢™žðÊñ‹+aue_recvfrom¬ ret_msgid +17038hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýª§[ë;BsŒY‰ŸxÄãyþ½Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŒ¢™žðÊñ‹+aue_recvfrom˜ ret_msgid +17039hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýkt1¤@"ˆ÷)ÿ’w€¾0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶„õÊñ‹+aue_lseek‚VhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýäš#êiÝ@ùœ¹\+¥ù£•‚¾0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦Š ðûÊñ‹+aue_lseek‚VhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýó÷·ð‚FH„-Ö;‹†¾ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦Š ðûÊñ‹+20ÜS7[AIF¬•pd± (ýg7¶%ì„H˜œE³=X„¾@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦Š ðûÊñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýu:V=kžGb¸Õº^©¶Š¾ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦Š ðûÊñ‹+20ÜS7[AIF¬•pd± (ý¹e‹‡±˜@<´ +þ§ñs6Uˆ¾@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦Š ðûÊñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_e ùK‚¯,îBêýŒ¾:‚œ Ê +ÙKFzé®›'üvº¦Š ðûÊñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹gÆ\0 F¿°ür5_жŽ¾@Î Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦Š ðûÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAј2æNäšl9ßÁÇÄξ@Î Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦Š ðûÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜N}Mc>IæÓ/ÄÝ’¾@Î Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦Š ðûÊñ‹+aue_preadŠ2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_£_›ÝF7èÔT(À”¾b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦Š ðûÊñ‹+aue_writeô2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/QòíÉÅI˜`Ð¿ðŽ–¾bÎ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦Š ðûÊñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýWM§W™A˜ŠõŒáA˜¾@Î Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦Š ðûÊñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæ3Ñí(èJz‡€ÛþË&š¾JÎ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¦Š ðûÊñ‹+aue_sendtoà +ret_msgid +17040hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýùžV +¿AÕ˜šá§ nþœ¾Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦Š ðûÊñ‹+aue_recvfromà ret_msgid +17040hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýFZ”Y£©G>§k¨-Ð.þfž¾bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¦Š ðûÊñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÿWòRH‹K!˜“™á'„ä ¾D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠÕ’•üÊñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:"¿,N—F¹;5®ìû¢¾D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠÕ’•üÊñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌ”™ýÿIƒßíoCÈÑ­¤¾0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÀîÝóüÊñ‹+aue_lseekÒ¬VhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,²KÄâíO«…”|Ð+ðÈ ¦¾0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœúæ°„Ëñ‹+aue_lseek¬²VhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹0vâKÅDè®è•I´4‹Ñ¨¾@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eú‰ÛʆËñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý½çœgCùŽFŠHna>üª¾JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºú‰ÛʆËñ‹+aue_sendtoÚ +ret_msgid +17041hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýs}ì¾NœFõ“eĬ(Ò¬¾JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºú‰ÛʆËñ‹+aue_sendto˜ +ret_msgid +17042hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýo. ‰IOM.À¤¨g®¾JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºú‰ÛʆËñ‹+aue_sendto¬ +ret_msgid +17043hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýz“}sYÎA¼—‡KŒÁ C°¾JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºú‰ÛʆËñ‹+aue_sendto˜ +ret_msgid +17044hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý?(ÝÚ-E@Ž¼^Z +œ'B¢²¾Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºú‰ÛʆËñ‹+aue_recvfromÚ ret_msgid +17041hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý%Øl ²Kc€ØmŠ °ˆ0´¾Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºú‰ÛʆËñ‹+aue_recvfrom˜ ret_msgid +17042hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¬åŠ`vC¿ßô©O;E¶¾Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºú‰ÛʆËñ‹+aue_recvfrom¬ ret_msgid +17043hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÙ¢ÒáEF½²3¨še;ÿ¸¾Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºú‰ÛʆËñ‹+aue_recvfrom˜ ret_msgid +17044hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý“4¥åFs«eøëDwèɺ¾0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uü¤æãŠËñ‹+aue_lseek¬²VhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýR¼Ñ6wÓKW‘YlÑŽ³M>¾¾ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uü¤æãŠËñ‹+20ÜS7[AIF¬•pd± (ýR–.gìûASš5|„(Á˼¾@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uü¤æãŠËñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáµãpç¯@Š—˜oÜ`;4¾ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uü¤æãŠËñ‹+20ÜS7[AIF¬•pd± (ý x¡×4bO`žé·;‘Ñ<À¾@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uü¤æãŠËñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜ €&õ'KÙš^×¥øƾ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uü¤æãŠËñ‹+20ÜS7[AIF¬•pd± (ýé©ÍN©­L»ÁUƒPø +ľ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uü¤æãŠËñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’(weDD’Š!x‡¢›KȾ:‚œ Ê +ÙKFzé®›'üvºü¤æãŠËñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýß0ÒH¼C;µ"K{ iʾ@Ð Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ü¤æãŠËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýK#}vKK‘Ƥ·tA̾@Ð Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uü¤æãŠËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýfïIâ÷eK–-eQ`¼ξ@Ð Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uü¤æãŠËñ‹+aue_preadÈhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›2؇9ÅIÆ¥fI˜t|êоb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºü¤æãŠËñ‹+aue_write²hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9£*„®›Kl‰z“H¿DSÅÒ¾bÐ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áü¤æãŠËñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýg?Tâ˜E3–¥4âÀÂÔ¾@Ð Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ü¤æãŠËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!Jºh”L*'ìKå‘ŸÖ¾@Ð Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uü¤æãŠËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑalñ#Dr¸ypøÐú5 ؾ@Ð Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uü¤æãŠËñ‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"Û©ÌèC‡}ºÏ²‡ +MÚ¾b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºü¤æãŠËñ‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýY¸”$÷²O‰… Ìz8^§ܾbÐ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áü¤æãŠËñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿTèîviCõ¬+ÇÆv®Þ¾@Ð Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ü¤æãŠËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýu”X€÷B\’u 0Õìpà¾JÐ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºü¤æãŠËñ‹+aue_sendtoà +ret_msgid +17045hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZQ2ŠààM3¾mC®ßÃIƒâ¾Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºü¤æãŠËñ‹+aue_recvfromà ret_msgid +17045hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýL¦Yð¨J¤—.À²0>ÑTä¾bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKü¤æãŠËñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý›q‰ŽêCž¸n£”¢Œ#æ¾D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºªÄƒüŠËñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQm£ à­Dú¶G9*ƒ±è¾D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºªÄƒüŠËñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝG þÙM’ ¨¼w;ê¾D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºªÄƒüŠËñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýO¥+žÙúL2¯-#!Íij¢ì¾D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºªÄƒüŠËñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»ž'ŠÐªHÒ™D5’ÐY î¾0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–íËñ‹+aue_lseekœæVhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýu¯–Œ†]Kdš„`H²¸.ð¾0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŠË¦Ü“Ëñ‹+aue_lseekòëVhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýRöÿa~·@n—sÛ\’áò¾0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U‚©÷Ö™Ëñ‹+aue_lseekòëVhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýv|©=ÙKئV=ƒâBö¾ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U‚©÷Ö™Ëñ‹+20ÜS7[AIF¬•pd± (ý®¦†°Jò¢(5¼¼ŠÚ¯ô¾@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U‚©÷Ö™Ëñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈVs?ÛI¸„ƒ—yCëÇú¾ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U‚©÷Ö™Ëñ‹+20ÜS7[AIF¬•pd± (ý2¡&вKˆ1ñ †ªž~ø¾@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U‚©÷Ö™Ëñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬ÐûÁûÌ ‹¸A¬é0Ц|©þ¾ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U‚©÷Ö™Ëñ‹+20ÜS7[AIF¬•pd± (ýÓNÀ)VJ“šmjéS®ü¾@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U‚©÷Ö™Ëñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷»Èl‹M£ºïÆÍ­°,“€¿:‚œ Ê +ÙKFzé®›'üvº‚©÷Ö™Ëñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€×Š¾½+Eû‰$~¼_lP‚¿@Ò Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ‚©÷Ö™Ëñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠ6¦=¾O˜•ðµ„^•Ë—„¿@Ò Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U‚©÷Ö™Ëñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýRG~ÿÐüK¥»{»‹TfÛ¾†¿@Ò Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U‚©÷Ö™Ëñ‹+aue_preadè3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxâc^EÊ®˜ÊœUâwrˆ¿b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº‚©÷Ö™Ëñ‹+aue_writeÒ4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýSË ~Ò]Jz‡CÙ°T:ߊ¿bÒ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á‚©÷Ö™Ëñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³øoýý>E§–•=dî»>Œ¿@Ò Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ‚©÷Ö™Ëñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛã„ñ}KØ» šAñš¦Ž¿@Ò Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U‚©÷Ö™Ëñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍI2Þ0O„’»ìÛ-È;¿@Ò Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U‚©÷Ö™Ëñ‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâ·£1Þ½GAºu«Ì–@á“’¿b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº‚©÷Ö™Ëñ‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%yfËMBKŸÅùL—¹ÓŸ”¿bÒ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á‚©÷Ö™Ëñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™zŠŒDöAíʉ«Pر!–¿@Ò Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ‚©÷Ö™Ëñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5à?@kBA–)t)$Lݘ¿JÒ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº‚©÷Ö™Ëñ‹+aue_sendtoà +ret_msgid +17046hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?ÎDoE㌲mi€p4š¿Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº‚©÷Ö™Ëñ‹+aue_recvfromà ret_msgid +17046hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýõMØñ£TL@¿o i°hÙßœ¿bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK‚©÷Ö™Ëñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýgÈh‚HĕΨfÄÈ hž¿D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¼’¯ã™Ëñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\wžé:CK"‹d®$ ¿D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¼’¯ã™Ëñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýl‡PØ[³Nj‹ß‰¹w¢¿D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¼’¯ã™Ëñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚dÁ½öaOª¼­ŸLÚæÝ⤿D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¼’¯ã™Ëñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™]ª¡Œ÷G¶©3g$ºc䦿0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàÖÞ¨›Ëñ‹+aue_lseek€’WhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝ'HJàUMn8M^ÚÆt†¨¿@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¤ˆçñœËñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÃ!")%ñD_©žÿÞY¨Êª¿JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¤ˆçñœËñ‹+aue_sendtoÚ +ret_msgid +17047hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý9Ÿ/>rÿGï¬3ÖÀŒš=׬¿JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¤ˆçñœËñ‹+aue_sendto˜ +ret_msgid +17048hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý›[Uò"àA°šíþ-_nu®¿JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¤ˆçñœËñ‹+aue_sendto¬ +ret_msgid +17049hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý=«­(Z`Dç4¦.¨ý °¿JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¤ˆçñœËñ‹+aue_sendto˜ +ret_msgid +17050hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÿ (^5aFÂ’yÛžçu/²¿Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¤ˆçñœËñ‹+aue_recvfromÚ ret_msgid +17047hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý>)ƒø”4N4±kàš0<´¿Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¤ˆçñœËñ‹+aue_recvfrom˜ ret_msgid +17048hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýO ý»„OÁ›VDˆk5¶¿Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¤ˆçñœËñ‹+aue_recvfrom¬ ret_msgid +17049hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‘ÛîÊhB¢º£ Äíó¸¿Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¤ˆçñœËñ‹+aue_recvfrom˜ ret_msgid +17050hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýAèºC]­˜©Ä”œUº¿0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÅ‚ì¢Ëñ‹+aue_lseek¼¤WhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý! Y©zbL?ŒÍl¾÷h꼿0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ¢˜Ë¨Ëñ‹+aue_lseek¼¤WhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýk%¬ +tJÓ½Ù#ž# õ‰À¿ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U ¢˜Ë¨Ëñ‹+20ÜS7[AIF¬•pd± (ý4ÙºÉåçO­™?ƒ‚†o¾¿@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ¢˜Ë¨Ëñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿÚÁé@ ›ømägôgÄ¿ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U ¢˜Ë¨Ëñ‹+20ÜS7[AIF¬•pd± (ýhÖ¯•LTN3˜Í”¬(¨I¿@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ¢˜Ë¨Ëñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýð¼‘L\EŽöpžÒ÷RÈ¿ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U ¢˜Ë¨Ëñ‹+20ÜS7[AIF¬•pd± (ýJy˜ÄGCŠº…h™¼·ÏÆ¿@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ¢˜Ë¨Ëñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬5?]Eú·$S;!ž|Ê¿:‚œ Ê +ÙKFzé®›'üvº ¢˜Ë¨Ëñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍËH‰@~aœ _6~Ì¿@Ô Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V  ¢˜Ë¨Ëñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3zÀ]Ã@¹„ÎXþàýο@Ô Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ¢˜Ë¨Ëñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;•t,"/Hº‡QÑr/п@Ô Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ¢˜Ë¨Ëñ‹+aue_pread†&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓÐáñÒOͶ³j+×ìíÒ¿b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº ¢˜Ë¨Ëñ‹+aue_writeð&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,§5ÿ²ZE‘“Ž‰.fáÔ¿bÔ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á ¢˜Ë¨Ëñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýô².®VôF­ˆªÓTq)ÎcÖ¿@Ô Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V  ¢˜Ë¨Ëñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•ŒuâK-„ª·\ÿ]FØ¿@Ô Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ¢˜Ë¨Ëñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýï5nAöËI°œño¿[v ñÚ¿@Ô Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ¢˜Ë¨Ëñ‹+aue_pread´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwÈ·}n·GH¬·oxí>ºKÜ¿b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº²ºöÓ¨Ëñ‹+aue_writežhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½¹ªíD#Oo»uoÉá OqÞ¿bÔ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á²ºöÓ¨Ëñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýGQhZ$B‹Û: ¬¨¡à¿@Ô Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ²ºöÓ¨Ëñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýpÝÁüM¡ŸæžNoC-â¿JÔ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº²ºöÓ¨Ëñ‹+aue_sendtoà +ret_msgid +17051hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³PÿOMô»<³YPßYoä¿Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº²ºöÓ¨Ëñ‹+aue_recvfromà ret_msgid +17051hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÙ¸-!I÷¥æǯŒg æ¿bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK²ºöÓ¨Ëñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÛ,ò +&æMøšÛÞÁ³‘Ó‰è¿D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº²ºöÓ¨Ëñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙ>Ã%æL’”©Wœii­ê¿D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº²ºöÓ¨Ëñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôøžjÝ;G›žö²Åº_Ãiì¿D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº²ºöÓ¨Ëñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀ­Í­DF™ÆðZ:2Z€î¿D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº²ºöÓ¨Ëñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýgÕÃ|G?‹ðsDJ ð¿0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄÑû¸ªËñ‹+aue_lseek¼ÊWhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀ-rþŒ²Jü²ë—¦‡;ò¿0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà÷®ü±Ëñ‹+aue_lseek’ÐWhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼Ú£ P`H|¸¤Ôyvfô¿@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eºÝø³Ëñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý ·xOÀ» ›dåÖEIö¿JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvººÝø³Ëñ‹+aue_sendtoÚ +ret_msgid +17052hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýGª'š"‰F>¦§y\BÒÛ¤ø¿JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvººÝø³Ëñ‹+aue_sendto˜ +ret_msgid +17053hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¾ÚÿýUK*¬Ý@E«2ú¿JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvººÝø³Ëñ‹+aue_sendto¬ +ret_msgid +17054hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý?kÃ[F-³üX.xÓŠàü¿JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvººÝø³Ëñ‹+aue_sendto˜ +ret_msgid +17055hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý)ö sF¹E¯‰„ÛQ^þ¿Dê› µ dôFzé®{'üvºµ CjFzé®{'üvººÝø³Ëñ‹+aue_recvfromÚ ret_msgid +17052hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýšŒ·|V¤I…ÂøÃ|µ€ÀDê› µ dôFzé®{'üvºµ CjFzé®{'üvººÝø³Ëñ‹+aue_recvfrom˜ ret_msgid +17053hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý½7M° ÂJ‘ÎÜ•;|‚ÀDê› µ dôFzé®{'üvºµ CjFzé®{'üvººÝø³Ëñ‹+aue_recvfrom¬ ret_msgid +17054hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÜÀä@´‡HTÐeƒ$µ„ÀDê› µ dôFzé®{'üvºµ CjFzé®{'üvººÝø³Ëñ‹+aue_recvfrom˜ ret_msgid +17055hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý®ž~pJͪ>ZjDA«²!ÐðŸE©€ÁDê› µ dôFzé®{'üvºµ CjFzé®{'üvºì¿ƒËÉËñ‹+aue_recvfrom˜ ret_msgid +17059hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý`©"ý>ÇG^µjê ×” +É‚ÁDê› µ dôFzé®{'üvºµ CjFzé®{'üvºì¿ƒËÉËñ‹+aue_recvfrom¬ ret_msgid +17060hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý(8-2Ú^ORŽ§¥›bb{›„ÁDê› µ dôFzé®{'üvºµ CjFzé®{'üvºì¿ƒËÉËñ‹+aue_recvfrom˜ ret_msgid +17061hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý4)ØBý¢ä‘¹ó–Á:‚œ Ê +ÙKFzé®›'üvº¨Èà¤ÕËñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçI'-96MÉ£¢ÜÏ«¿B˜Á@Ú Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¨Èà¤ÕËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­†Ÿ÷’Ln¿ân¨ÁPvšÁ@Ú Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨Èà¤ÕËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýMË©1¢X@°:ÅO¢ËœÁ@Ú Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨Èà¤ÕËñ‹+aue_preadø%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýBÓO-ÁH‚üªs‘àü‰žÁb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¨Èà¤ÕËñ‹+aue_writeâ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýeŠeÁ;LG ”#i^‹ ÁbÚ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¨Èà¤ÕËñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýA;`Ó¬B1ºýø•jWÁT¢Á@Ú Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¨Èà¤ÕËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢˜ÆFçD˜ŠÖ:LîÑG¤Á@Ú Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨Èà¤ÕËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]ê{— ÅFˆ²Ö4Sá¦Á@Ú Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨Èà¤ÕËñ‹+aue_pread¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýS=õÒ…‰Khœó h°¾¨Áb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¨Èà¤ÕËñ‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +€ˆýñrDÕŠ¢èbqSÒvªÁbÚ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¨Èà¤ÕËñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿ +´•|{Cá¼l­•Ų9¬Á@Ú Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¨Èà¤ÕËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý R5í~ÉFH¡ °*í¸®ÁJÚ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¨Èà¤ÕËñ‹+aue_sendtoà +ret_msgid +17062hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøþ)ÆþJ’­i É;>°ÁDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¨Èà¤ÕËñ‹+aue_recvfromà ret_msgid +17062hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýDl-òwJAƒÛçâ­²Ábê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¨Èà¤ÕËñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý8¡96wD1”²¢—@´ÁD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºúÖô­ÕËñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôøê§z«O=¬3nþB*Þ+¶ÁD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºúÖô­ÕËñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýN“ ¿F§±dÓSR1¸ÁD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºúÖô­ÕËñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœb/Oè•¥…:L†ÌºÁD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºúÖô­ÕËñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*[“F~é®Ñ'üvº138.68.201.49ö20ÜS7[AIF¬•pd± (ýKºÔæ,ûCWr¢/ý,¼Áø› µ5Ž«Fz鮉'üvº*[“F~é®Ñ'üvºòØã ÖËñ‹+aue_connecthostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1address138.68.201.49port123execntpd20ÜS7[AIF¬•pd± (ý1ÓD,ñÁLø„9ÿ‡’ØÒW¾Áø› µ5Ž«Fz鮉'üvº*[“F~é®Ñ'üvºòØã ÖËñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ý¶»:F݆PóP¥ýŽGÀÁJø› µ5Ž«Fz鮉'üvºµCJœFz鮉'üvºòØã ÖËñ‹+aue_sendto`ret_msgid +17063hostHdc53375b-4149-46ac-9570-64b1090f28fdfd22ppid1address138.68.201.49port123execntpd20ÜS7[AIF¬•pd± (ýθä,«@½ºõTFV2hoÂÁJø› µ5Ž«Fz鮉'üvºµA¬ÐFz鮉'üvºòØã ÖËñ‹+aue_sendtoÊ +ret_msgid +17064hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execntpd20ÜS7[AIF¬•pd± (ýˆÄxÄzíD–®:T`ß©ÄÁDê› µ dôFzé®{'üvºµ !Fzé®{'üvºòØã ÖËñ‹+aue_recvfromÊ ret_msgid +17064hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÑiÑugFo€ÊÓ9W³ ÆÁ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖ³øè×Ëñ‹+aue_lseekðóXhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý  +ÃN’Š"qˆ¿{ÈÁ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼¸ê«ßËñ‹+aue_lseekÈùXhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢¢x`àLƒœÍŸ1Hg#ÊÁ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¶Š¼øßËñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÕOtkküBô¡ÿ#p°-rÍÌÁJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¶Š¼øßËñ‹+aue_sendtoÚ +ret_msgid +17065hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý1="²fB2ƒ@™ÓËÔ7¥ÎÁJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¶Š¼øßËñ‹+aue_sendto˜ +ret_msgid +17066hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý)ª¹&ËEAŒä@Í÷CˆÂÐÁJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¶Š¼øßËñ‹+aue_sendto¬ +ret_msgid +17067hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬®û®ô2!·CHΖ{ûf¢"\‰ÒÁJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¶Š¼øßËñ‹+aue_sendto˜ +ret_msgid +17068hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý;/ÅKQ¦ýq„ÕÍÈGÔÁDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¶Š¼øßËñ‹+aue_recvfromÚ ret_msgid +17065hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý³> ã@wªVGøžg7ÖÁDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¶Š¼øßËñ‹+aue_recvfrom˜ ret_msgid +17066hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý'æ2¥CkJþ¨ªj!½­šØÁDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¶Š¼øßËñ‹+aue_recvfrom¬ ret_msgid +17067hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÀߟLFÕ‰„{Æç¶ÚÁDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¶Š¼øßËñ‹+aue_recvfrom˜ ret_msgid +17068hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýmņÄ]ŸDÕ“ºT¦í”DÅÜÁ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®®Ë—äËñ‹+aue_lseekÈùXhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|yBaL)…hvýVôLœàÁ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U®®Ë—äËñ‹+20ÜS7[AIF¬•pd± (ýnª­3¯ÝKÓ´¯D¯eÚ ÞÁ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®®Ë—äËñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7* òNpKP®¯ŒúŽ'äÁ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U®®Ë—äËñ‹+20ÜS7[AIF¬•pd± (ýyM¬pÒMr¾º +jV“ïâÁ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®®Ë—äËñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•_ݦ„D@½>  âÿèÁ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U®®Ë—äËñ‹+20ÜS7[AIF¬•pd± (ýLfª}ÇóE7†êV{©~æÁ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®®Ë—äËñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖhÏ]Œ³@w¨Ê¨jçÎrêÁ:‚œ Ê +ÙKFzé®›'üvº®®Ë—äËñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ZÔõIÝHožK,›^ˆìÁ@Ü Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ®®Ë—äËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓ 4¶J©œNP¸…sc îÁ@Ü Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®®Ë—äËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<fÙÿOk›Rô²'cðÁ@Ü Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®®Ë—äËñ‹+aue_preadô1hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýüjX%ÙIIJªÉ÷±ÌûòÁb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®®Ë—äËñ‹+aue_writeÞ2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýVÉÂzõJ ª²j>0 ZÝôÁbÜ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á®®Ë—äËñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8{ ÇèD: { !®9ªoöÁ@Ü Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ®®Ë—äËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚ(ZäÇ~ë’N2”"¹4ç՜ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÖ톋óËñ‹+20ÜS7[AIF¬•pd± (ý¯“úB®I¦‰ Bé?šÂ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖ톋óËñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨ÿŽ&I¿ŽRç¡eª Â ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÖ톋óËñ‹+20ÜS7[AIF¬•pd± (ýŒžbKѲLF—1,­lrFžÂ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖ톋óËñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýR N|ÌFH£APQú@¢Â:‚œ Ê +ÙKFzé®›'üvºÖ톋óËñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&Hñí£IÉ‚uUϳ…&¤Â@Þ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ö톋óËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬üÕ3KN‹eê¦ûŒ/ŦÂ@Þ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖ톋óËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“{Dº"E/Ÿ5§ÿ:5À´¨Â@Þ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖ톋óËñ‹+aue_preadÜ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýݲL~U¿LZšþ#ÎlfªÂb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÖ톋óËñ‹+aue_writeÆ4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’e:¥³ëGÚt‹£Yjô¬ÂbÞ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÖ톋óËñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡PhcFk†×ä¤$ +"®Â@Þ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ö톋óËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýà`Æ/–GŒ»¹A ^Œ°°Â@Þ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖ톋óËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²à˜*EFŽí"U–7˲Â@Þ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖ톋óËñ‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷ô†ÍKþ¨¦tá:ÿZ´Âb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÖ톋óËñ‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ¸¬öåAÔ“^Þ}›l ¶ÂbÞ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÖ톋óËñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýd5Ãû}ÆO[“t:©’z¸Â@Þ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ö톋óËñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøt™G^J‘Ê÷.ñX«ýºÂJÞ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÖ톋óËñ‹+aue_sendtoà +ret_msgid +17070hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀìD£å+M×€{ì¸7âõÞ¼ÂDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÖ톋óËñ‹+aue_recvfromà ret_msgid +17070hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý"H¦íI¶C̸Žq=¿ÛŒ]¾Âbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÖ톋óËñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý3¢“—I4M‚åakœåúÀÂD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºäýâ”óËñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8²Þø§K‡Œê‰œþmúžÂÂD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºäýâ”óËñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇû¾GâÄNaµ‹ÁÙ‚EqÄÂD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºäýâ”óËñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýaÆQ™ëM¬¾è.FºóÆÂD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºäýâ”óËñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâí×£.‰I˃¬ÅZ²°%ÈÂ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ²¹ˆöËñ‹+aue_lseekŒÙYhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýK& +Ô$ŠG!![}|tÁ”ÊÂ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¨Úƒ¥öËñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýSíö¾‡•LÚ¨7õoÇüÌÂJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¨Úƒ¥öËñ‹+aue_sendtoÚ +ret_msgid +17071hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý™TåMðDB‘qÓŸu”hDÎÂJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¨Úƒ¥öËñ‹+aue_sendto˜ +ret_msgid +17072hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¾ÞH0¹µÙpi[ÐÂJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¨Úƒ¥öËñ‹+aue_sendto¬ +ret_msgid +17073hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýî³æOŸªí€‘…ÒÂJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¨Úƒ¥öËñ‹+aue_sendto˜ +ret_msgid +17074hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýyDè¸Dç°ÐÝ–ÁÈæÔÂDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¨Úƒ¥öËñ‹+aue_recvfromÚ ret_msgid +17071hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýrGPyêOw¿N‡ö–Aü‚ÖÂDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¨Úƒ¥öËñ‹+aue_recvfrom˜ ret_msgid +17072hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÕ,G½H* ”J'nØÂDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¨Úƒ¥öËñ‹+aue_recvfrom¬ ret_msgid +17073hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýífKŠ3>Eû¿âÅ[˜DÚÂDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¨Úƒ¥öËñ‹+aue_recvfrom˜ ret_msgid +17074hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý +íë ÊF}é®Ñ'üvº20 +ÜS7[AIF¬•pd± (ýG"1E¢‹Pªg]JÜÂ@Öœ íN(F}é®Ð'üvºíë ÊF}é®Ñ'üvºÄ†“ÂýËñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1491execnc20ÜS7[AIF¬•pd± (ý8KǯZB™€±ª"’B;ÞÂÖœ íN(F}é®Ð'üvºíë ÊF}é®Ñ'üvºÄ†“ÂýËñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1491execnc20ÜS7[AIF¬•pd± (ý–•XÇýI »pWêÚë\àÂÖœ íN(F}é®Ð'üvºíNÛ6F}é®Ð'üvºÄ†“ÂýËñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1491execnc20ÜS7[AIF¬•pd± (ýÛöæröH—´rš©ýåywâÂÖœ íN(F}é®Ð'üvºíN(F}é®Ð'üvºÄ†“ÂýËñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1491execnc20ÜS7[AIF¬•pd± (ýôUÑ ^Cõµ#ºŸÔýù!äÂR²œ ì«?yF}é®Ï'üvºì«?yF}é®Ï'üvºÄ†“ÂýËñ‹+aue_killpidÓ signumarg_pid1491arg_euid1003arg_ruid1003arg_egid1003arg_rgid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý=ï„ÊÒ G"Ÿ†>8'EwæÂb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ä†“ÂýËñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1281execbash20ÜS7[AIF¬•pd± (ý ®ž[ï;Dg™¢Ê ±­ èÂ"–œ ×µ¨Fz鮩'üvºÄ†“ÂýËñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1281execbash20ÜS7[AIF¬•pd± (ýð)JP>µIb¼!ú|²êÂb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ä†“ÂýËñ‹+aue_writedhostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý’Ûˆ²ëM"6¢+„ƒÍ +ìÂ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uì—ÐÌýËñ‹+aue_lseekìøYhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýW.[¼#IIˆ”Û*ú#æîÂ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯äÙµ÷þËñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýäªq+ÜLú´²µnyt­6ðÂb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯äÙµ÷þËñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý|•=¯J¦ŠAAwÜT,òÂ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯œœÊ¿€Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýµXûHÄ7H6®¶ù¨‹ˆ63ôÂb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯œœÊ¿€Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý‘呶{–DL©·St¿˜ìöÂ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ä‡åáÌñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý”°¹gý‹ELŸ[n¨g6«øÂb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ä‡åáÌñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÐï*™VKž„²›Æw„ˆúÂ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÕ¬þÌñ‹+aue_lseekìøYhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®Øûß­!ÆÕBÏ’,ªËAɘþ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UˆÕ¬þÌñ‹+20ÜS7[AIF¬•pd± (ýQ$%AdC¡³5s2*ƒs®üÂ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÕ¬þÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"C\蜚BD¯á¥âFaÙõ‚à ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UˆÕ¬þÌñ‹+20ÜS7[AIF¬•pd± (ý_½QþÝN@¦•†ó€V씀Ã@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÕ¬þÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_$êviyBZ]íô;Žz†Ã ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UˆÕ¬þÌñ‹+20ÜS7[AIF¬•pd± (ý¯”›}¡EŸñüáö Œ­„Ã@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÕ¬þÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýoÞc ~‡H²”¦æ¯$ŒXˆÃ:‚œ Ê +ÙKFzé®›'üvºˆÕ¬þÌñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃŒ°í]Ih¾w[ÉóVnÛŠÃ@à Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆÕ¬þÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅž—ãÑÊF ±æÀ(ŽÅ³ŒÃ@à Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÕ¬þÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}QtéC³œÏ0•›äèŽÃ@à Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÕ¬þÌñ‹+aue_pread‚&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂz_1#ML” +£ZGô Ãb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºˆÕ¬þÌñ‹+aue_writeì&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁ¨-H¦M·›éÄnœ§’Ãbà Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áˆÕ¬þÌñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU]>eKX­Ÿ!’8JHû”Ã@à Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆÕ¬þÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU63¶ròHø°ÿ4xþÒ´–Ã@à Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÕ¬þÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý 95ôK¸˜Zì‰:õ˜Ã@à Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÕ¬þÌñ‹+aue_preadØhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:`¥ªíðGŸ±OËßÖˆšÃb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºˆÕ¬þÌñ‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõÙݼÙDË£TÔŸçGœÃbà Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áˆÕ¬þÌñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼õ‚&¿ÈJ¡P)‘¡ñºžÃ@à Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆÕ¬þÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.µyõK@ÖŽœ\%1ƒ{ ÃJà Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºˆÕ¬þÌñ‹+aue_sendtoà +ret_msgid +17075hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶ÏŠ$ç`@d·Ýc +ÿ Ç¢ÃDê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆÕ¬þÌñ‹+aue_recvfromà ret_msgid +17075hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÑ ÷ÑoIr¯s0r©rV¤Ãbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKˆÕ¬þÌñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÕ²·mEA„( %T¦ÃD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶Æõ‡‚Ìñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýh/ ´Ç“CÍ®ø@Ó¥h ¨ÃD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶Æõ‡‚Ìñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­fÃV[@¬ø²Ö¼0Ö1ªÃD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶Æõ‡‚Ìñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8—"ˆ2L¹¦Rïsq®¬ÃD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶Æõ‡‚Ìñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#âõþD»à¹‡Õ°š®Ã@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯âõÑ‘‚Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý”Ƨ\G1³Ot]"Ô3°Ãb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯âõÑ‘‚Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý.çÙ¥5–F<¨1Ynñ{û²Ã@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ä¶à·‚Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý¡kL»ûúNÉ‚]*ÆJÑ•—´Ãb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ä¶à·‚Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýy´Y¦–eLÚ®+¹©¹Ê¶Ã@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ôÔ…—ƒÌñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýŠ0jã˜)Jt­½–±ìpr¸Ãb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ôÔ…—ƒÌñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÚ?ÀÐ#¯L9€ÕÔ²¤¬|ºÃ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯À¯œÌ„Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý$¯È²æJÔŸ8}*%£P5¼Ãb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯À¯œÌ„Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý¨h#HüN^¿~Ÿ²Y¾Ã0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬¥´˜…Ìñ‹+aue_lseekâ°ZhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýC?½YSJ‡—Íàå SUÀÃ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯êʬŒÌñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýžýn8@ýµ´°|&=ÂÃb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯êʬŒÌñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýP+²0SíK†¦%iÛFŠ-ÄÃ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯êʬŒÌñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýJ[AxN[KدIÄÉíŠ*ÆÃb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯êʬŒÌñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýp~zwÝEjº‘3Õ]ENRÈÃ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯êʬŒÌñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýF8ß7‚ÏJ,¤(iµŒP¬ÊÃb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯êʬŒÌñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÁ7òøý/I÷”­8¼ïñ#nÌÃ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯êʬŒÌñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý +5)ð1áI?˜žz€ïõu‰ÎÃb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯êʬŒÌñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýzå‡aìAE´¯öîK³LÏÐÃ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÀ›‰ÒŒÌñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý7ßÔÈBݽÆd³a¦ÒÃJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀ›‰ÒŒÌñ‹+aue_sendtoÚ +ret_msgid +17076hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýæT' ©LD}¡žuÉ¥¯9¥ÔÃJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀ›‰ÒŒÌñ‹+aue_sendto˜ +ret_msgid +17077hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýœè@þ[@ÓÏ1æ±-éóÖÃJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀ›‰ÒŒÌñ‹+aue_sendto¬ +ret_msgid +17078hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÍ8ÆôEO’·kë![,ØÃJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀ›‰ÒŒÌñ‹+aue_sendto˜ +ret_msgid +17079hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýŒÉ˜0EAB›°[€’©ÚÃDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀ›‰ÒŒÌñ‹+aue_recvfromÚ ret_msgid +17076hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý™„C.ÞDõŸanÛ’V kÜÃDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀ›‰ÒŒÌñ‹+aue_recvfrom˜ ret_msgid +17077hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýû^øšÉ8O±´NŠóI¿àÞÃDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀ›‰ÒŒÌñ‹+aue_recvfrom¬ ret_msgid +17078hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ývÂmÇ^HÿªK²…¤)××àÃDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀ›‰ÒŒÌñ‹+aue_recvfrom˜ ret_msgid +17079hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¾0’™F÷’€°Ù¸kiâÃ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÀ’äÛŒÌñ‹+aue_lseek°ÌZhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýFVÙˆ O÷€ºCC¸p¸ÛäÃ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâùññÌñ‹+aue_lseek°ÌZhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½ó žÞ"HË“'=®ÃÃèà ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UâùññÌñ‹+20ÜS7[AIF¬•pd± (ýVÍdG©N|¢Ÿ6ƒñKÕ[æÃ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâùññÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!iëO§¶É+FbiŽìà ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UâùññÌñ‹+20ÜS7[AIF¬•pd± (ý7±·ÀLJ‰ŸCcœÅ àZêÃ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâùññÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜Ã0—û@  É®i¡M¶ðà ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UâùññÌñ‹+20ÜS7[AIF¬•pd± (ýõ6×Ã×GøŸ×¿ÿY8vîÃ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâùññÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýK^Ö¸JêH ‰kj’GðÉèòÃ:‚œ Ê +ÙKFzé®›'üvºâùññÌñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý aM8—ôN,ž$Ü´Û°¦ôÃ@â Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V âùññÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸â'ä kCÅ”÷_LNöÃ@â Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâùññÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœèüËSÁE08)—íÊ›øÃ@â Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâùññÌñ‹+aue_preadî7hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýnÇæH\HH©šÕ[N!ÇʆúÃb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâùññÌñ‹+aue_writeØ8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýg -æ kKÇ¡)_u²IZáüÃbâ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áâùññÌñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>ˆk[ÿ¼H„l~£ä®½þÃ@â Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V âùññÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒœI'DÉH‰ 8uq80û€Ä@â Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâùññÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýª‹ÁǹþOc°ÍÀX²xþR‚Ä@â Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâùññÌñ‹+aue_preadÆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6hºq¼KŠ£Gm=sÊûh„Äb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâùññÌñ‹+aue_write°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™˜‡ @•8sþ Å£†Äbâ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áâùññÌñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýnïMÒûéBû¨›³žŒgˆÄ@â Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V âùññÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_Ë[tKº°ê/½“ó§ŠÄJâ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºâùññÌñ‹+aue_sendtoà +ret_msgid +17080hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂ<…ÃÍBÔ²®“B¹qWŒÄDê› µ dôFzé®{'üvºµ CjFzé®{'üvºâùññÌñ‹+aue_recvfromà ret_msgid +17080hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÜȦÀn½Nјh/ÂŽ»ŽÄbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKâùññÌñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý×|;Î#Kn€OÌËüóŽƒÄD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâùññÌñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_o¢`7Kj‚Lc"êµ’ÄD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâùññÌñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁr +ŠjtBœŽÓ½3z4M”ÄD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽÄ¦ûÌñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýGES)N“· +J^‘Ü–ÄD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽÄ¦ûÌñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýº;zHCAªùooÄÊš˜Ä@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¢¡î¬“Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÙpB.6Aܱ3ÖË›öšÄb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¢¡î¬“Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý[³-YÛæM¦†ÕîéZ·EœÄ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯þèðµ“Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý<*`Íÿ+Fâ¾y¡Ÿ†žÄb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯þèðµ“Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý§W3ˆzJ¬¡àÅÈ6th“ Ä@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯þèðµ“Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý†Çœ~PŠC_´&FVÍ)µ¢Äb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯þèðµ“Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý ð¥I‚ Mݘ¹?#1õ²¤Ä@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯þèðµ“Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýgAµ~Š´E“ö5ÔYÌà¦Äb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯þèðµ“Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýü™Y}¤oF|­Ó«µ`­O¨Ä0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UºÑ¼¨”Ìñ‹+aue_lseek°ûZhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®ìú~Ó²ZF軞„ÖF3AöªÄ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯öÏ‘ùšÌñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý^ýãXüJß-ÀN÷ Ÿ÷¬Äb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯öÏ‘ùšÌñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÄn’Ú@¶WuT ®Ä@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯öÏ‘ùšÌñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÎW­“¤E}»—%Ûfi°Äb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯öÏ‘ùšÌñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý¨cxYL]¥;g¬$¬Yå²Ä@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯öÏ‘ùšÌñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýp™ÍXMa¯ü‡EJõ´Äb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯öÏ‘ùšÌñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý§Ñtß”£E°¯ìGÜ°üö¶Ä@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ˆòÞ‚›Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýCLÂU/‰K%•"nf8«í¹¸Äb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ˆòÞ‚›Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý»=3‡ZN¾€ ¢H Ah2ºÄ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶ñÖë›Ìñ‹+aue_lseek¨Š[hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉ“žõCh¦ÆsWX©¼Ä@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯˜€˜ÞœÌñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý—R8NAcž¦ºÊ=úì¾Äb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯˜€˜ÞœÌñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýï¼ÐvzªFu¾®ˆo* µÀÄ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯šÛ“€žÌñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýíUªí Hü—§Ö”:y@ÂÄb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯šÛ“€žÌñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÏOq:OÖ†êf?ú}$ÙÄÄ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Šì«ŸÌñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýY‡ÜϧC9¿S ©d9ŠÆÄb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Šì«ŸÌñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý÷ÆJš„ÃÛžRü!\ÈÄ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆ«ÍåŸÌñ‹+aue_lseek¨Š[hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8 ¥‹öTK;:նкĄÌÄ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆ«ÍåŸÌñ‹+20ÜS7[AIF¬•pd± (ýþIµ(šMQŒÚlýKS3ÁÊÄ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆ«ÍåŸÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,wHØô®OÛ¾ËÌZÌNF9ÐÄ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆ«ÍåŸÌñ‹+20ÜS7[AIF¬•pd± (ý @an·‰G"®]P‘ ){ÎÄ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆ«ÍåŸÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@U‚ºH›Œbæ\ÜNÔÄ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆ«ÍåŸÌñ‹+20ÜS7[AIF¬•pd± (ýi¦¬|˜A‰tñf´ó×ÒÄ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆ«ÍåŸÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉ2rÇS»B +®9ÁS¢ùÕäÖÄ:‚œ Ê +ÙKFzé®›'üvºÆ«ÍåŸÌñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýª¶2€ûKŽe-Lƒ02CØÄ@ä Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Æ«ÍåŸÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýš(¼˜ŒíCmšCÙ¢¢Âè;ÚÄ@ä Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆ«ÍåŸÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:· éoJ˜„"F5;ÿÌÜÄ@ä Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆ«ÍåŸÌñ‹+aue_preadø.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉ.|­O„^¢ñ)5õmÞÄb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÆ«ÍåŸÌñ‹+aue_writeâ/hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýž^׋‚D°¶÷7ZibéxàÄbä Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆ«ÍåŸÌñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËôç Ø(@¿¢”¬h4kÚâÄ@ä Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Æ«ÍåŸÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉ"bÿ«ÐGÞ-ÒgðæäÄ@ä Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆ«ÍåŸÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐ¥„¤÷H*·¬AÐû n¢æÄ@ä Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆ«ÍåŸÌñ‹+aue_preadðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+¨Ø~BÚ¬ ˜š¼¿'.èÄb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÆ«ÍåŸÌñ‹+aue_writeÚhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖó(O¢¶B‰£ª|T¬ðêÄbä Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆ«ÍåŸÌñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠb1ŠzBk¶g+áåŠüìÄ@ä Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Æ«ÍåŸÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýN40‡@€Zϲ@êÏîÄJä Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÆ«ÍåŸÌñ‹+aue_sendtoà +ret_msgid +17081hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$ êß +C^$šþÖÞ.ðÄDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆ«ÍåŸÌñ‹+aue_recvfromà ret_msgid +17081hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý\‡WÅ8F©¡þ)‚à ùõòÄbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÆ«ÍåŸÌñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý="ä;'×E•%bÅ›P“côÄD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºš®ÒîŸÌñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýh­¼:6wDÕ‚§¥[‹lk‡öÄD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºš®ÒîŸÌñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>@ô„õæN µõÚÏœ!²>øÄD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºš®ÒîŸÌñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’ÍꇄYIª¶4j= À‹#úÄD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºš®ÒîŸÌñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓú ¿œH0¦çð8KéLüÄ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯®ÈøŸÌñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýôÂAš¢D¨‰‘ZÓgk ·þÄb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯®ÈøŸÌñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý€ÂÎËFL[¦¼ãÃ>ë°€Å@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¨ˆúù¡Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý™£Õ¿L¾Mþ¶°”ÜÛ\ÒP‚Åb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¨ˆúù¡Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý±¶9]!F¾˜ óÞJÒÅ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯æ™¤Æ¢Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÓ²0˜E”If…‹Gmm…²†Åb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯æ™¤Æ¢Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýC°”p6‡@ÿ|)FtPmZˆÅ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÿ¢Ìñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÀÜI‡ˆLü™ÌSàìT†KŠÅJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºîŸ¯ÿ¢Ìñ‹+aue_sendtoÚ +ret_msgid +17082hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý·–SƒBµ 6$F¶0ŒÅJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºîŸ¯ÿ¢Ìñ‹+aue_sendto˜ +ret_msgid +17083hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý'š÷"mfL“«Ò¹„MÌíŽÅJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºîŸ¯ÿ¢Ìñ‹+aue_sendto¬ +ret_msgid +17084hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý(åùÔ8G ±P²õ°2‚ÅJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºîŸ¯ÿ¢Ìñ‹+aue_sendto˜ +ret_msgid +17085hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýª;Ó?‹ÈKÂŽ2l‘G#ô9’ÅDê› µ dôFzé®{'üvºµ CjFzé®{'üvºîŸ¯ÿ¢Ìñ‹+aue_recvfromÚ ret_msgid +17082hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýdÈxy7ÑMG†ß[*”ÅDê› µ dôFzé®{'üvºµ CjFzé®{'üvºîŸ¯ÿ¢Ìñ‹+aue_recvfrom˜ ret_msgid +17083hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‰ˆÈ›hmI®’ ¹ÓÜB3K–ÅDê› µ dôFzé®{'üvºµ CjFzé®{'üvºîŸ¯ÿ¢Ìñ‹+aue_recvfrom¬ ret_msgid +17084hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý^…"¾ EÞÊ¡ýUˆ›˜ÅDê› µ dôFzé®{'üvºµ CjFzé®{'üvºîŸ¯ÿ¢Ìñ‹+aue_recvfrom˜ ret_msgid +17085hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý Ñ›vÚ’C`¥“HJSz ¬šÅ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌÞíÁ£Ìñ‹+aue_lseekÐÌ[hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇ@õK()Cªr^PVã+>œÅ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÌÞíÁ£Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÊ@ÊÔÈAö0ØQ.höžÅb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÌÞíÁ£Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýD&oÃßD“Ÿˆ‰$”“Ø. Å@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯æö¡´¤Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý´ëŒ^„E`‰òqWñ~w¢Åb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯æö¡´¤Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÉû ¿¸¸KîŸrãSÉú¤Å@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯æ•«Ã¥Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýK 1;ÿHAƒÙIŒ¦Åb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯æ•«Ã¥Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýš¾j@Lή°zãs®L‹¨Å0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ظ…«Ìñ‹+aue_lseekæÙ[hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞÚ½óaðBŽ4àDìw¿ªÅ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Æòûé¬Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý ?úU¾8Cd Pë¥jIÀ¬Åb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Æòûé¬Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý½Vöê¼@\”{VìZe®Å@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Æòûé¬Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý®N…Š’Hq¶k. 0“zF°Åb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Æòûé¬Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýøõ»CÉÍ(dx±LÞ²Å@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¬ÎÍó¬Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý%ÇuœDD·´íkä´Åb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¬ÎÍó¬Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý+Á×&2K|¥ODk Þï¶Å@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¬ÎÍó¬Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý2Ì] +ÒAOá¨EÔ㿤†¸Åb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¬ÎÍó¬Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý—?2LžD”³Ç­äoêF;ºÅ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¬ÎÍó¬Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýT +ÀȸDš£+Ø:'õUżÅb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¬ÎÍó¬Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýšLËÙªB)ŠÓá÷¤o#¾Å0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàÖåØ®Ìñ‹+aue_lseekæÙ[hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýü¦î3I%…÷6LßÂÅ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàÖåØ®Ìñ‹+20ÜS7[AIF¬•pd± (ýÇœš¾Y¼E–<ú| Nb8ÀÅ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàÖåØ®Ìñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼ús*&gIª¿°›*&Š ÆÅ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàÖåØ®Ìñ‹+20ÜS7[AIF¬•pd± (ý’Ôßû@G¡§²–¡í¥˜ÌÄÅ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàÖåØ®Ìñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœn'f¨B᤼Ì vÊÅ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UàÖåØ®Ìñ‹+20ÜS7[AIF¬•pd± (ýå GvpCÓŠ_Ÿ!ö*ÄÈÅ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàÖåØ®Ìñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýG>¹ŽÃLêœæ*£Ç ÌÅ:‚œ Ê +ÙKFzé®›'üvºàÖåØ®Ìñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýb¼G§RKi‡[£%N¬ÎÅ@æ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V àÖåØ®Ìñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõCÀ¾/J5”‡É·sÄJGÐÅ@æ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàÖåØ®Ìñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôÆ<ÒüjN¸Œ©:ïL˜ÒÅ@æ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàÖåØ®Ìñ‹+aue_pread BhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9‹ +˜Æ!B…¢’ŸéÖM¸QÔÅb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºàÖåØ®Ìñ‹+aue_writeŠChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýeè@Ð-SDo7æ+1ÀÖÅbæ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áàÖåØ®Ìñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"’ûsÕ˜BÏBC»Äk¥PÑ ÖØÅ@æ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V àÖåØ®Ìñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤¢Ù(WÄG=©t§p¼õÚÅ@æ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàÖåØ®Ìñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!ªObÀN^§îí_ôaëÁÜÅ@æ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàÖåØ®Ìñ‹+aue_preadŽ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýg^Ë9“K¶€~·>5âûÞÅb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºàÖåØ®Ìñ‹+aue_writeø hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU©NøèIL…»l©ãê(àÅbæ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áàÖåØ®Ìñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡p`½ÓDK’»4(ø'EâÅ@æ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V àÖåØ®Ìñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡«W A¼„„LÑ€+­äÅJæ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºàÖåØ®Ìñ‹+aue_sendtoà +ret_msgid +17086hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²R’Àÿ'Oh+‹Ã)§°æÅDê› µ dôFzé®{'üvºµ CjFzé®{'üvºàÖåØ®Ìñ‹+aue_recvfromà ret_msgid +17086hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý>g)Y{˜M#½ +Wó=©)èÅbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKàÖåØ®Ìñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýE`›GHL‰ôÕ¹òž§êÅD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎ¢àâ®Ìñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýC3)™—Oþó)Ñ1Ú0ìÅD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎ¢àâ®Ìñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýêçÿŠ¬Bf¯·&5†BUîÅD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎ¢àâ®Ìñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7­¶Ö*…JG°7ÛZ¹QðÅD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎ¢àâ®Ìñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾ÛÓ“PMu‰ŽÈ¯æòÅ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ÏŸÈ²Ìñ‹+aue_lseekŒŒ\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´É  =A“©ß®÷‘†ôÅ@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ ¶Î׳Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÅtOI$O—°ò˜D8öÅb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ ¶Î׳Ìñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý¤‡ðF~é®Ñ'üvºÄ×µ¨Fz鮩'üvº°äÿ§®]vRS<„äB± ¶Î׳Ìñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý %iÖR@¡—sß2ÁönøÅ$–œ ×µ¨Fz鮩'üvº¤‡ðF~é®Ñ'üvº ¶Î׳Ìñ‹+aue_fork +arg_pid1506hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1506ppid1281execbash20ÜS7[AIF¬•pd± (ý +x’†¶aYÊR™aç2ʾ<20 +ÜS7[AIF¬•pd± (ýåø‡s§K’¤¥ÁCò~húŲœ ¤‡ðF~é®Ñ'üvºx’†¶aYÊR™aç2ʾ</sbin/ping'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Š£óà³Ìñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine2ping -c 20 www.google.comppid1282execbash20ÜS7[AIF¬•pd± (ý¡IåSBÿ¨6—ââ/ãŠüÅ<²œ ¤‡ðF~é®Ñ'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confŠ£óà³Ìñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execping20ÜS7[AIF¬•pd± (ý—„ÑYÞLOºâИþÅ@²œ ¤‡ðF~é®Ñ'üvº‰oý©äÇU¤©A)Eǹ Š£óà³Ìñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý¡ßŸÕ×ÙJ e°õôµX€Æ²œ ¤‡ðF~é®Ñ'üvº‰oý©äÇU¤©A)Eǹ Š£óà³Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execping20ÜS7[AIF¬•pd± (ý…éÀØ*¸G‚,%¥tVyõ‚Æ<²œ ¤‡ðF~é®Ñ'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsŠ£óà³Ìñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execping20ÜS7[AIF¬•pd± (ýÚ\?£MƒÏÏXhž„Æ@²œ ¤‡ðF~é®Ñ'üvºXꎩð®…\®ð@JÌ…¼âŠ£óà³Ìñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýIÝËþUN´¯×–T“2­†Æ@²œ ¤‡ðF~é®Ñ'üvºXꎩð®…\®ð@JÌ…¼âŠ£óà³Ìñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý®K÷Ÿ†ö$8ŽÆ2²œ ¤‡ðF~é®Ñ'üvºLÓÅ:îtX®:îXte˜Š£óà³Ìñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý×Ý]NGU¯n´Õ­±,Æ2²œ ¤‡ðF~é®Ñ'üvºLÓÅ:îtX®:îXte˜Š£óà³Ìñ‹+aue_mmap€À§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýÌbŒVÓPD¥r?º•˜Ý’Æ2²œ ¤‡ðF~é®Ñ'üvºLÓÅ:îtX®:îXte˜Š£óà³Ìñ‹+aue_mmap€À§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý0M,ÄCF±”[cèüü»”Æ2²œ ¤‡ðF~é®Ñ'üvºLÓÅ:îtX®:îXte˜Š£óà³Ìñ‹+aue_mmap€€° arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý4="§A)Ž¯@Þ’¯–Æ2²œ ¤‡ðF~é®Ñ'üvºLÓÅ:îtX®:îXte˜Š£óà³Ìñ‹+aue_mmap€€° arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýù£)©Q@Æ»dö™nXG˜Æ2²œ ¤‡ðF~é®Ñ'üvºLÓÅ:îtX®:îXte˜Š£óà³Ìñ‹+aue_mmap€€¿ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý(^·7Ã$Iã0Sœð·MUšÆ2²œ ¤‡ðF~é®Ñ'üvºLÓÅ:îtX®:îXte˜Š£óà³Ìñ‹+aue_mmap€€¿ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý–|u>ä½MjK)›RÓïTœÆ²œ ¤‡ðF~é®Ñ'üvºLÓÅ:îtX®:îXte˜Š£óà³Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execping20ÜS7[AIF¬•pd± (ý +àûj:øf\R¦øÇC2\‡20 +ÜS7[AIF¬•pd± (ýç/Y(ò£Iç¼J=r3þ›žÆ<²œ ¤‡ðF~é®Ñ'üvºàûj:øf\R¦øÇC2\‡&/lib/libcasper.so.1Š£óà³Ìñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execping20ÜS7[AIF¬•pd± (ý 2ÐV™Fy.IZBÒÄX Æ2²œ ¤‡ðF~é®Ñ'üvºàûj:øf\R¦øÇC2\‡Š£óà³Ìñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýêœXXçFGE¾hì}Ô¼— ¢Æ2²œ ¤‡ðF~é®Ñ'üvºàûj:øf\R¦øÇC2\‡Š£óà³Ìñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýHrŒF@…µcƒý –|5¤Æ2²œ ¤‡ðF~é®Ñ'üvºàûj:øf\R¦øÇC2\‡Š£óà³Ìñ‹+aue_mmap€ÀÀ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý­‰Oñ¦SJ°¿&Ý…Pf¡¦Æ2²œ ¤‡ðF~é®Ñ'üvºàûj:øf\R¦øÇC2\‡Š£óà³Ìñ‹+aue_mmap€ÀÀ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý*b”~¯#Oo¡>­¢¢Z¨Æ2²œ ¤‡ðF~é®Ñ'üvºàûj:øf\R¦øÇC2\‡Š£óà³Ìñ‹+aue_mmap€€Â arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý*ÆÑ+%A¥Âæ·1(YªÆ2²œ ¤‡ðF~é®Ñ'üvºàûj:øf\R¦øÇC2\‡Š£óà³Ìñ‹+aue_mmap€€Â arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýrä#û¶I¦ªñò󂼬Æ2²œ ¤‡ðF~é®Ñ'üvºàûj:øf\R¦øÇC2\‡Š£óà³Ìñ‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýgãê¼éJü„µ~Äf h®Æ2²œ ¤‡ðF~é®Ñ'üvºàûj:øf\R¦øÇC2\‡Š£óà³Ìñ‹+aue_mmap€Àà arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý}È^`ZE «Ÿ9zö¾)[!ÎÆ2²œ ¤‡ðF~é®Ñ'üvº +vlYùÖN_–ù³ðNHŠ£óà³Ìñ‹+aue_mmap€ÀÈ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýéAK•CCLG¼é\ÿ#{ÐÆ2²œ ¤‡ðF~é®Ñ'üvº +vlYùÖN_–ù³ðNHŠ£óà³Ìñ‹+aue_mmap€ÀÊ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý–øî¡BÙC|ˆ5ˆÒf²=ÒÆ2²œ ¤‡ðF~é®Ñ'üvº +vlYùÖN_–ù³ðNHŠ£óà³Ìñ‹+aue_mmap€ÀÊ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý¼‡ÃÚúdL³£“›žåXºôÔÆ2²œ ¤‡ðF~é®Ñ'üvº +vlYùÖN_–ù³ðNHŠ£óà³Ìñ‹+aue_mmap€ÀÌ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýÖÔzîsŸE¤ŸŠ•0n,¾ÖÆ2²œ ¤‡ðF~é®Ñ'üvº +vlYùÖN_–ù³ðNHŠ£óà³Ìñ‹+aue_mmap€ÀÌ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý¬Dx¼7Nu“¿ñãô¥…ØƲœ ¤‡ðF~é®Ñ'üvº +vlYùÖN_–ù³ðNHŠ£óà³Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execping20ÜS7[AIF¬•pd± (ý1ǹÎaîD,°â¾yÝïÚÆ<²œ ¤‡ðF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Š£óà³Ìñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execping20ÜS7[AIF¬•pd± (ýœE‹ G%—ë^}VòkÏÜÆ2²œ ¤‡ðF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œŠ£óà³Ìñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý&ÒG9GkCr´ én™‡“ ÞÆ2²œ ¤‡ðF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œŠ£óà³Ìñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ª´üùŽL¨|G¨¬ÂcS'\øîàÆ2²œ ¤‡ðF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œŠ£óà³Ìñ‹+aue_mmap€€Î arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýP›IîNØN™­;uí.âÆ2²œ ¤‡ðF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œŠ£óà³Ìñ‹+aue_mmap€€Î arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýÛ°rKlõAH¿þ VÆ‹©äÆ2²œ ¤‡ðF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œŠ£óà³Ìñ‹+aue_mmap€€ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý£q“/)zL’ºNÃtXf´æÆ2²œ ¤‡ðF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œŠ£óà³Ìñ‹+aue_mmap€€ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýUtÝæÔ³IÁ¬ž~é&ÐöèÆ2²œ ¤‡ðF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œŠ£óà³Ìñ‹+aue_mmap€À¯ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýñÉè´+A—£â7iÞ{xêÆ2²œ ¤‡ðF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œŠ£óà³Ìñ‹+aue_mmap€À¯ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý°Ê÷iEIDœÂ—é(éìƲœ ¤‡ðF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œŠ£óà³Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execping20ÜS7[AIF¬•pd± (ý +›yi&Ê]ZŠ&Ú]Î20 +ÜS7[AIF¬•pd± (ý çTÞC +@Ò”¦¢YèYîÆ<²œ ¤‡ðF~é®Ñ'üvº›yi&Ê]ZŠ&Ú]Î/lib/libnv.so.0Š£óà³Ìñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execping20ÜS7[AIF¬•pd± (ýÓ-.ïA•Áˆî] ¢ðÆ2²œ ¤‡ðF~é®Ñ'üvº›yi&Ê]ZŠ&Ú]Ί£óà³Ìñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý¦Z¦¢+Fgvþ)JòÆ2²œ ¤‡ðF~é®Ñ'üvº›yi&Ê]ZŠ&Ú]Ί£óà³Ìñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýzËz„ôOG ¡’”ßpÁ©ÇôÆ2²œ ¤‡ðF~é®Ñ'üvº›yi&Ê]ZŠ&Ú]Ί£óà³Ìñ‹+aue_mmap€ÀÊ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýé-®¯OD©˜œÓ&*8>öÆ2²œ ¤‡ðF~é®Ñ'üvº›yi&Ê]ZŠ&Ú]Ί£óà³Ìñ‹+aue_mmap€ÀÊ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýÃ*2^JAÇ­ÏîO”ZöøÆ2²œ ¤‡ðF~é®Ñ'üvº›yi&Ê]ZŠ&Ú]Ί£óà³Ìñ‹+aue_mmap€ÀÏ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýHï– @/ˆ—«em-íúÆ2²œ ¤‡ðF~é®Ñ'üvº›yi&Ê]ZŠ&Ú]Ί£óà³Ìñ‹+aue_mmap€ÀÏ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý±«…éR3AćpiæÈ:üÆ2²œ ¤‡ðF~é®Ñ'üvº›yi&Ê]ZŠ&Ú]Ί£óà³Ìñ‹+aue_mmap€€Ö arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý€Y) zZDä‰tžß˲uþÆ2²œ ¤‡ðF~é®Ñ'üvº›yi&Ê]ZŠ&Ú]Ί£óà³Ìñ‹+aue_mmap€€Ö arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý‚iC›P.Cד–•µA½3€Ç²œ ¤‡ðF~é®Ñ'üvº›yi&Ê]ZŠ&Ú]Ί£óà³Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execping20ÜS7[AIF¬•pd± (ý!qD§áâM>ƒÆw€!Ý¿‚Ç:²œ ¤‡ðF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execping20ÜS7[AIF¬•pd± (ýu.ª„Q‚M¿­™\*çΪ„Ç:²œ ¤‡ðF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execping20ÜS7[AIF¬•pd± (ýí IQRB¯©²õH§3S†Ç:²œ ¤‡ðF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execping20ÜS7[AIF¬•pd± (ý„KŽ)1G:§ZŠ TøK¼ˆÇ:²œ ¤‡ðF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execping20ÜS7[AIF¬•pd± (ýG¯®e@Hó”sEÁüÏ ŠÇ:²œ ¤‡ðF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execping20ÜS7[AIF¬•pd± (ýXÂM«N +·Oû¤8 !ŒÇ:²œ ¤‡ðF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execping20ÜS7[AIF¬•pd± (ýqÌŒ~t>Kfš ÐàŇ#£ŽÇ:²œ ¤‡ðF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execping20ÜS7[AIF¬•pd± (ýëk\ª³žE>’åF=Ÿ9ªRÇ +²œ ¤‡ðF~é®Ñ'üvº¤‡ðF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_setuiduidë +arg_uid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execping20ÜS7[AIF¬•pd± (ý¦IVF~é®Ñ'üvºô20ÜS7[AIF¬•pd± (ý¦IJF~é®Ñ'üvºô20ÜS7[AIF¬•pd± (ý ÀIÇ%[o®Ÿ6C€îž€¦IJF~é®Ñ'üvº¦IVF~é®Ñ'üvº20 ÜS7[AIF¬•pd± (ý´7\S$PG‹«ƒÆÑ--^’Dzœ ¤‡ðF~é®Ñ'üvºÀIÇ%[o®Ÿ6C€îž€¦IVF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_socketpair ret_fd15ret_fd26hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execping20ÜS7[AIF¬•pd± (ý¦N F~é®Ñ'üvºÆ¤‡ðF~é®Ñ'üvº°äÿ§®]vRS<„äB±Š£óà³Ìñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÁ™Ä‡H4¯~$’{”Ç$²œ ¤‡ðF~é®Ñ'üvº¦N F~é®Ñ'üvºŠ£óà³Ìñ‹+aue_pdfork arg_pid1507ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1507ppid1282execping20ÜS7[AIF¬•pd± (ý«X@-@K†Úò?gÝ–Ç"²œ ¤‡ðF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value6ppid1282execping20ÜS7[AIF¬•pd± (ý Ô•úO¶¨“] #†7˜Ç"²œ ¤‡ðF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1282execping20ÜS7[AIF¬•pd± (ýœ +#ëMHRìÊàã‹}2šÇJ²œ ¤‡ðF~é®Ñ'üvº¦IJF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_sendtoªhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1282execping20ÜS7[AIF¬•pd± (ý¦\üF~é®Ñ'üvºô20ÜS7[AIF¬•pd± (ý¦\óF~é®Ñ'üvºô20ÜS7[AIF¬•pd± (ý °>æX|è_J»ÅaÇâöh¦\óF~é®Ñ'üvº¦\üF~é®Ñ'üvº20 ÜS7[AIF¬•pd± (ýKILS2-N†Hå¡/’œÇÖœ ¦N F~é®Ñ'üvº°>æX|è_J»ÅaÇâöh¦\üF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_socketpair ret_fd15ret_fd27hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1506execping20ÜS7[AIF¬•pd± (ý¦`F~é®Ñ'üvºÈ¦N F~é®Ñ'üvº°äÿ§®]vRS<„äB±Š£óà³Ìñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýœ=ébm„K9ÑÖƒš€UžÇ$Öœ ¦N F~é®Ñ'üvº¦`F~é®Ñ'üvºŠ£óà³Ìñ‹+aue_fork +arg_pid1508hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1508ppid1506execping20ÜS7[AIF¬•pd± (ý¨7šÎH÷Mu‹!”¯_MËì Ç"Öœ ¦N F~é®Ñ'üvºŠ£óà³Ìñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value6ppid1506execping20ÜS7[AIF¬•pd± (ýE8€8 ôK‰,Šmx»t¢ÇDÖœ ¦N F~é®Ñ'üvº¦IVF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_recvfrom&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1506execping20ÜS7[AIF¬•pd± (ýÖXv% +zHß²î5çwÛ¤ÇDÖœ ¦N F~é®Ñ'üvº¦IVF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_recvfrom„hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1506execping20ÜS7[AIF¬•pd± (ý»~ËRe>OU¼‡ýõ°DѦÇJÖœ ¦N F~é®Ñ'üvº¦\óF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_sendtolhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1506execping20ÜS7[AIF¬•pd± (ýËÅ©IèGK¼ix>Åoç¨ÇDìœ ¦`F~é®Ñ'üvº¦\üF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_recvfrom&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1507execping20ÜS7[AIF¬•pd± (ý +Q4¦M@ð§Àª–|Ñ˼ªÇDìœ ¦`F~é®Ñ'üvº¦\üF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_recvfromFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1507execping20ÜS7[AIF¬•pd± (ý¦›=F~é®Ñ'üvºô20ÜS7[AIF¬•pd± (ý¦›1F~é®Ñ'üvºô20ÜS7[AIF¬•pd± (ý  $©9êP”³Ð±V,œ¦›1F~é®Ñ'üvº¦›=F~é®Ñ'üvº20 ÜS7[AIF¬•pd± (ý#•+’ÚF—•†à8Mé¬Çìœ ¦`F~é®Ñ'üvº $©9êP”³Ð±V,œ¦›=F~é®Ñ'üvºŠ£óà³Ìñ‹+aue_socketpair ret_fd15ret_fd28hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1507execping20ÜS7[AIF¬•pd± (ý¦ #F~é®Ñ'üvºÊ¦`F~é®Ñ'üvº°äÿ§®]vRS<„äB±Š£óà³Ìñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýjyR©÷²M žŠô4y®Ç$ìœ ¦`F~é®Ñ'üvº¦ #F~é®Ñ'üvºŠ£óà³Ìñ‹+aue_pdfork arg_pid1509ret_fd19hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1509ppid1507execping20ÜS7[AIF¬•pd± (ýX¦'ÄDÀ€¬p3úTÇx°Ç"ìœ ¦`F~é®Ñ'üvºŠ£óà³Ìñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1507execping20ÜS7[AIF¬•pd± (ýäJê¤6QG"³ÎG=¨€Ñ²Ç"ìœ ¦`F~é®Ñ'üvºŠ£óà³Ìñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1507execping20ÜS7[AIF¬•pd± (ý·à›†$E¾ƒ“×N"©´ÇJìœ ¦`F~é®Ñ'üvº¦\üF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_sendto®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1507execping20ÜS7[AIF¬•pd± (ý~&V»€F™´Ólk›'1›¶ÇLìœ ¦`F~é®Ñ'üvº¦\üF~é®Ñ'üvºŠ£óà³Ìñ‹+aue_sendmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1507execping20ÜS7[AIF¬•pd± (ýX‚ˆ‹FE³)gJA8¹¨¸ÇDÖœ ¦N F~é®Ñ'üvº¦\óF~é®Ñ'üvºê½µê³Ìñ‹+aue_recvfrom&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1506execping20ÜS7[AIF¬•pd± (ýè_Ó!ØJ‚ƒU!%OºÇDÖœ ¦N F~é®Ñ'üvº¦\óF~é®Ñ'üvºê½µê³Ìñ‹+aue_recvfromˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1506execping20ÜS7[AIF¬•pd± (ý®-E)—cFæ¸på3ØAž¼ÇFÖœ ¦N F~é®Ñ'üvº¦\óF~é®Ñ'üvºê½µê³Ìñ‹+aue_recvmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1506execping20ÜS7[AIF¬•pd± (ýT­KoäO‰®†} +¹Ü.¾Ç"Öœ ¦N F~é®Ñ'üvºê½µê³Ìñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1506execping20ÜS7[AIF¬•pd± (ýö ì,mDt¸âØܺ%Ó-ÀÇJÖœ ¦N F~é®Ñ'üvº¦›1F~é®Ñ'üvºê½µê³Ìñ‹+aue_sendto¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1506execping20ÜS7[AIF¬•pd± (ýp8>4ëMÓª†Ì/+vÂÇLÖœ ¦N F~é®Ñ'üvº¦›1F~é®Ñ'üvºê½µê³Ìñ‹+aue_sendmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1506execping20ÜS7[AIF¬•pd± (ý½ŒÔëN£–>ËÇÕ +ÇÄÇ"Öœ ¦N F~é®Ñ'üvºê½µê³Ìñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1506execping20ÜS7[AIF¬•pd± (ýÒ­"©»èDO¢O(R_ ÆÇJÖœ ¦N F~é®Ñ'üvº¦IVF~é®Ñ'üvºê½µê³Ìñ‹+aue_sendtoöhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1506execping20ÜS7[AIF¬•pd± (ý öØ>@>NÐGáZÈÇD²œ ¤‡ðF~é®Ñ'üvº¦IJF~é®Ñ'üvºê½µê³Ìñ‹+aue_recvfrom&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1282execping20ÜS7[AIF¬•pd± (ý KŠ¤ôK ¨òÅà#ÖKÊÇD²œ ¤‡ðF~é®Ñ'üvº¦IJF~é®Ñ'üvºê½µê³Ìñ‹+aue_recvfromÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1282execping20ÜS7[AIF¬•pd± (ýg Ɉe#C<„Íòå’·ÚÌÇLÖœ ¦N F~é®Ñ'üvº¦IVF~é®Ñ'üvºê½µê³Ìñ‹+aue_sendmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1506execping20ÜS7[AIF¬•pd± (ý¡hJ.hMS‰©§%¬°DÎÇF²œ ¤‡ðF~é®Ñ'üvº¦IJF~é®Ñ'üvºê½µê³Ìñ‹+aue_recvmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1282execping20ÜS7[AIF¬•pd± (ý`jƒqOJ}¹âäð§O0×ÐÇ"²œ ¤‡ðF~é®Ñ'üvºê½µê³Ìñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value6ppid1282execping20ÜS7[AIF¬•pd± (ýHnvLq…B-¤UF*Ê|1ÒDzœ ¤‡ðF~é®Ñ'üvº¦N F~é®Ñ'üvºê½µê³Ìñ‹+aue_closearg_pid1507arg_euid1003arg_ruid1003arg_egid1003arg_rgid1003hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7return_value0ppid1282execping20ÜS7[AIF¬•pd± (ýµ €Ë“–G§¡ÜixZÑfÔDzœ ¤‡ðF~é®Ñ'üvº¦IJF~é®Ñ'üvºê½µê³Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1282execping20ÜS7[AIF¬•pd± (ýñä÷ÞCÒ´NZ>{‹NÖÇJ²œ ¤‡ðF~é®Ñ'üvº¦›1F~é®Ñ'üvºê½µê³Ìñ‹+aue_sendtohhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1282execping20ÜS7[AIF¬•pd± (ý~E >“Gñš±¡ˆ–ä§üØÇD°œ ¦ #F~é®Ñ'üvº¦›=F~é®Ñ'üvºê½µê³Ìñ‹+aue_recvfrom&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1508execping20ÜS7[AIF¬•pd± (ý—×–ÇwBÄ°Þ\dà¹-²ÚÇD°œ ¦ #F~é®Ñ'üvº¦›=F~é®Ñ'üvºê½µê³Ìñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1508execping20ÜS7[AIF¬•pd± (ý¯O¤IŠOزX?õîƬÜÇF°œ ¦ #F~é®Ñ'üvº¦›=F~é®Ñ'üvºê½µê³Ìñ‹+aue_recvmsghostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1508execping20ÜS7[AIF¬•pd± (ýñð¸É_,C6´rðHmaÁÞÇ<°œ ¦ #F~é®Ñ'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nullê½µê³Ìñ‹+aue_openat_rwtc +flagsmode ret_fd17hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value7ppid1508execping20ÜS7[AIF¬•pd± (ý#9´E’ÈD²œ ¤‡ðF~é®Ñ'üvº¦›1F~é®Ñ'üvºê½µê³Ìñ‹+aue_recvfrom&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1282execping20ÜS7[AIF¬•pd± (ý èÕNwM¼š:Ôx ý”ÈD²œ ¤‡ðF~é®Ñ'üvº¦›1F~é®Ñ'üvºê½µê³Ìñ‹+aue_recvfromBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1282execping20ÜS7[AIF¬•pd± (ýb>ËCÝ¥HŒ²§¸Àã|s~–ÈJ²œ ¤‡ðF~é®Ñ'üvº¦›1F~é®Ñ'üvºê½µê³Ìñ‹+aue_sendto‚hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1282execping20ÜS7[AIF¬•pd± (ý!Ëë‰pH_˜„aïÂ{˜ÈD°œ ¦ #F~é®Ñ'üvº¦›=F~é®Ñ'üvºê½µê³Ìñ‹+aue_recvfrom&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execping20ÜS7[AIF¬•pd± (ý÷ŸÞ7¢ñDÕ¡èU7ˆj›ÜšÈD°œ ¦ #F~é®Ñ'üvº¦›=F~é®Ñ'üvºê½µê³Ìñ‹+aue_recvfromÜhostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execping20ÜS7[AIF¬•pd± (ýCöb©ƒ&B +µõ ´[ã4³œÈ<°œ ¦ #F~é®Ñ'üvºaOr;ó7S³;IF£7;— /etc/resolv.confê½µê³Ìñ‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1execping20ÜS7[AIF¬•pd± (ýV†LZ^G.µ“ïãÞžÈ@°œ ¦ #F~é®Ñ'üvºaOr;ó7S³;IF£7;—ê½µê³Ìñ‹+aue_readÌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execping20ÜS7[AIF¬•pd± (ýèj75u@2£wrÒÕ<½6 È@°œ ¦ #F~é®Ñ'üvºaOr;ó7S³;IF£7;—ê½µê³Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execping20ÜS7[AIF¬•pd± (ý•œíµAõ§ˆ!Fýè¢È°œ ¦ #F~é®Ñ'üvºaOr;ó7S³;IF£7;—ê½µê³Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execping20ÜS7[AIF¬•pd± (ý½Eº³ÑjLݸq?ÍP]¤È<°œ ¦ #F~é®Ñ'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.confê½µê³Ìñ‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1execping20ÜS7[AIF¬•pd± (ýŠS–ŠŒ¾Ir—î¢&Ã8‹¦È@°œ ¦ #F~é®Ñ'üvºÜN½Ëê¯+^¯êZ£®+Vê½µê³Ìñ‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execping20ÜS7[AIF¬•pd± (ý-—g«lK!½”#>dÖŨÈ@°œ ¦ #F~é®Ñ'üvºÜN½Ëê¯+^¯êZ£®+Vê½µê³Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execping20ÜS7[AIF¬•pd± (ýM|˜Ë‚D…‚gBh­ªÈ°œ ¦ #F~é®Ñ'üvºÜN½Ëê¯+^¯êZ£®+Vê½µê³Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execping20ÜS7[AIF¬•pd± (ý5š ¸nM¨Èâ‹£Žg¬È<°œ ¦ #F~é®Ñ'üvºÉòæò¢Ñ[¢ò¥›ÑÍ /etc/hostsê½µê³Ìñ‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1execping20ÜS7[AIF¬•pd± (ýO´ÅMxDìŒ_*‘R©@¶®È@°œ ¦ #F~é®Ñ'üvºÉòæò¢Ñ[¢ò¥›ÑÍ ê½µê³Ìñ‹+aue_readŽhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execping20ÜS7[AIF¬•pd± (ýK›óý(N “Œ˜L{°È@°œ ¦ #F~é®Ñ'üvºÉòæò¢Ñ[¢ò¥›ÑÍ ê½µê³Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execping20ÜS7[AIF¬•pd± (ýuÊØTGOg‹n§¡0šª¾²È°œ ¦ #F~é®Ñ'üvºÉòæò¢Ñ[¢ò¥›ÑÍ ê½µê³Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execping20ÜS7[AIF¬•pd± (ý§~~F~é®Ñ'üvº149.32.200.97j20ÜS7[AIF¬•pd± (ýTë:iCø³õŠãûF¡À´È°œ ¦ #F~é®Ñ'üvº§~~F~é®Ñ'üvºê½µê³Ìñ‹+aue_connecthostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1address149.32.200.97port53execping20ÜS7[AIF¬•pd± (ýàZ>AWSŽ7ïÓr«°ö10.0.2.15ºÕ149.32.200.97j20ÜS7[AIF¬•pd± (ýÌT¬ÒmCR«Œú(OÅè߶Ȱœ §~~F~é®Ñ'üvºàZ>AWSŽ7ïÓr«°öê½µê³Ìñ‹+20ÜS7[AIF¬•pd± (ý>š K·¢{O*ÀX°¸ÈJ°œ ¦ #F~é®Ñ'üvº§~~F~é®Ñ'üvºê½µê³Ìñ‹+aue_sendto@ +ret_msgid +17087hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execping20ÜS7[AIF¬•pd± (ý#^ŒKNòD]ª4Æ&^‹áVºÈ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uªàó±ºÌñ‹+aue_lseekØŽ^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +¦CáF~é®Ñ'üvº 20 +ÜS7[AIF¬•pd± (ý²?ÝØž%E(¯ú,úÂðƒ¼ÈJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvºÔý‰Á»Ìñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý +¦EÀF~é®Ñ'üvº 20 +ÜS7[AIF¬•pd± (ý’Ûåq0ôHšI· ø ÀÈ ²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvºˆ‘âð»Ìñ‹+20ÜS7[AIF¬•pd± (ýtôöú/šM5¶‰—cDLö¾ÈF²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvºˆ‘âð»Ìñ‹+aue_recvmsg¨ret_miouuidH17a645c0-467e-11e9-aed1-080027fc76bahostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1282address172.217.9.4port0execping20ÜS7[AIF¬•pd± (ý æèA<@Yƒ•C­^ÌÂÈb²œ ¤‡ðF~é®Ñ'üvºí( ö~R¶ ~{‚~¯ˆ‘âð»Ìñ‹+aue_writexhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execping20ÜS7[AIF¬•pd± (ý2m*LbÿHO“âo,KXâ/ÄÈ<Þ› µxÏFzé®’'üvº €ja·*XYª·CÿùX?Ü/etc/cron.dÖ—ªã¼Ìñ‹+aue_open_rwtc +flagsmodeè +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1execcron20ÜS7[AIF¬•pd± (ýýîà>2OJ¬BáëA[™<ÆÈÞ› µxÏFzé®’'üvº €ja·*XYª·CÿùX?ÜÖ—ªã¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1execcron20ÜS7[AIF¬•pd± (ý^èF~é®Ñ'üvºÌµxÏFzé®’'üvº™, Bª¢T$µ„äý`ÚÖ—ªã¼Ìñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýnct<7˜Eù¢¶!$5pîÈÈ$Þ› µxÏFzé®’'üvº^èF~é®Ñ'üvºÖ—ªã¼Ìñ‹+aue_fork +arg_pid1510hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1510ppid1execcron20ÜS7[AIF¬•pd± (ý +\£?Æ¢3ÂX³¢””ØÂ0020 +ÜS7[AIF¬•pd± (ý¹}s©SåEŒ ‰ëÖL +qàÊÈÖœ ^èF~é®Ñ'üvº\£?Æ¢3ÂX³¢””ØÂ00Ö—ªã¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1141execcron20ÜS7[AIF¬•pd± (ý +2+kƒä~4W¾äØ—ç4%µ20 +ÜS7[AIF¬•pd± (ý1pØNç´OQ˜? úH…íÌÈÖœ ^èF~é®Ñ'üvº2+kƒä~4W¾äØ—ç4%µÖ—ªã¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1141execcron20ÜS7[AIF¬•pd± (ý^(àF~é®Ñ'üvºô20ÜS7[AIF¬•pd± (ý^(ßF~é®Ñ'üvºô20ÜS7[AIF¬•pd± (ý YE3æHå\÷–m¸ÞEò¬^(ßF~é®Ñ'üvº^(àF~é®Ñ'üvº20 ÜS7[AIF¬•pd± (ýS§`³ÈCq˜y‡RŸrÎÈÖœ ^èF~é®Ñ'üvºYE3æHå\÷–m¸ÞEò¬Ö—ªã¼Ìñ‹+aue_pipe ret_fd13ret_fd24hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1141execcron20ÜS7[AIF¬•pd± (ý^-HF~é®Ñ'üvºô20ÜS7[AIF¬•pd± (ý^-GF~é®Ñ'üvºô20ÜS7[AIF¬•pd± (ý Øæ"à]+ºG 5‹'w^-GF~é®Ñ'üvº^-HF~é®Ñ'üvº20 ÜS7[AIF¬•pd± (ý’Ïžôè}Iù·’º­`¨óÐÈÖœ ^èF~é®Ñ'üvºØæ"à]+ºG 5‹'wÖ—ªã¼Ìñ‹+aue_pipe ret_fd15ret_fd26hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1141execcron20ÜS7[AIF¬•pd± (ý^1£F~é®Ñ'üvºÎ^èF~é®Ñ'üvº™, Bª¢T$µ„äý`ÚÖ—ªã¼Ìñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýa;ÄÏAõ¥GO-”ITÒÈ$Öœ ^èF~é®Ñ'üvº^1£F~é®Ñ'üvºÖ—ªã¼Ìñ‹+aue_vfork +arg_pid1511hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1511ppid1141execcron20ÜS7[AIF¬•pd± (ý +^ÊÓ·I5®ø2}߶˜ÞÈìœ ^1£F~é®Ñ'üvº3P ÓK€X‹Ó«·Ø€‘^Ö—ªã¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1510execcron20ÜS7[AIF¬•pd± (ý¸è]‚Czpòû¡ôÉtàÈ<ìœ ^1£F~é®Ñ'üvºôì{M6N?^Ž6%â?>g/etc/spwd.dbÖ—ªã¼Ìñ‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1510execcron20ÜS7[AIF¬•pd± (ý3ÏÏyx‘K‹¢Jkâr âÈ@ìœ ^1£F~é®Ñ'üvºôì{M6N?^Ž6%â?>gÖ—ªã¼Ìñ‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ýÇ=Ø"ŸuMçŽ'¾¼É’ÙäÈ@ìœ ^1£F~é®Ñ'üvºôì{M6N?^Ž6%â?>gÖ—ªã¼Ìñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ý¢ªÔÍfDV› @Y*ô›,æÈ@ìœ ^1£F~é®Ñ'üvºôì{M6N?^Ž6%â?>gÖ—ªã¼Ìñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ýÃÏ·ïHŠ†³´Æ%üy¯èÈìœ ^1£F~é®Ñ'üvºôì{M6N?^Ž6%â?>gÖ—ªã¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1510execcron20ÜS7[AIF¬•pd± (ý؃í.KÜž7%À=¶GqêÈ<ìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confÖ—ªã¼Ìñ‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1510execcron20ÜS7[AIF¬•pd± (ý›±®ÝZIˆuB-Î5BÍìÈ@ìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆÖ—ªã¼Ìñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ýž¥XhµòO榲—^N«¯eîÈ@ìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆÖ—ªã¼Ìñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ý£­çZ°BðœLv“µ ðÈ0ìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆÖ—ªã¼Ìñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ý€ÔILëM œÁf¦,HòÈ@ìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆÖ—ªã¼Ìñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ý·QÏõ{{O —èòþAuöôÈ@ìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆÖ—ªã¼Ìñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ý3êÒ+ GŒIz»C¹öÈìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆÖ—ªã¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1510execcron20ÜS7[AIF¬•pd± (ýÛÒexB˜½Pƒ£!>øÈ +ìœ ^1£F~é®Ñ'üvº^1£F~é®Ñ'üvºÖ—ªã¼Ìñ‹+aue_setgidgid +arg_gid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510execcron20ÜS7[AIF¬•pd± (ý±zöÞ(SE Žù@ÿXÐfúÈ<ìœ ^1£F~é®Ñ'üvºZ2°Ë1]±m‘¨/etc/groupÖ—ªã¼Ìñ‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1510execcron20ÜS7[AIF¬•pd± (ýc p‰ÑNú‰:s¡˜7®aüÈ0ìœ ^1£F~é®Ñ'üvºZ2°Ë1]±m‘¨Ö—ªã¼Ìñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ýÑd­£5‡F©€M®döþÈ@ìœ ^1£F~é®Ñ'üvºZ2°Ë1]±m‘¨Ö—ªã¼Ìñ‹+aue_readðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ýòýøȘO©wíû¸hQ7€É0ìœ ^1£F~é®Ñ'üvºZ2°Ë1]±m‘¨Ö—ªã¼Ìñ‹+aue_lseekðhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ýz_€ûÛjH6žðŒ X:‚É@ìœ ^1£F~é®Ñ'üvºZ2°Ë1]±m‘¨Ö—ªã¼Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ýfbÎ7Ù{OÈ·’|œãÎ't„Éìœ ^1£F~é®Ñ'üvºZ2°Ë1]±m‘¨Ö—ªã¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1510execcron20ÜS7[AIF¬•pd± (ýüˆÉ‘¥nC¤•Y%þÐÞà†É,ìœ ^1£F~é®Ñ'üvºÖ—ªã¼Ìñ‹+aue_setlogin +hostHdc53375b-4149-46ac-9570-64b1090f28fd +loginrootreturn_value0ppid1510execcron20ÜS7[AIF¬•pd± (ý¤©Ÿv•NW½Á×ÎÐ`¼ˆÉ6ìœ ^1£F~é®Ñ'üvº^1£F~é®Ñ'üvºÖ—ªã¼Ìñ‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1510execcron20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬üOo,R F©,9–fÙgŠÉ +ìœ ^1£F~é®Ñ'üvº^1£F~é®Ñ'üvºÖ—ªã¼Ìñ‹+aue_setuiduid +arg_uid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510execcron20ÜS7[AIF¬•pd± (ý‡ªGG‘µMm›fË6K¹ŒÉ +ìœ ^1£F~é®Ñ'üvº^1£F~é®Ñ'üvºÖ—ªã¼Ìñ‹+aue_setegidegid +arg_egid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510execcron20ÜS7[AIF¬•pd± (ýŠ'£ºåKs¢×Ä^™RÆŽÉ +ìœ ^1£F~é®Ñ'üvº^1£F~é®Ñ'üvºÖ—ªã¼Ìñ‹+aue_seteuideuid +arg_euid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510execcron20ÜS7[AIF¬•pd± (ýµjjtŒ‚E[©Våp‹òÀÉ<ìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆ/etc/login.confÖ—ªã¼Ìñ‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1510execcron20ÜS7[AIF¬•pd± (ýíN%$ø„@ñ°î0y…ÂGÝ’É@ìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆÖ—ªã¼Ìñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ý;rkÔØG‚­ƒàg#=”É@ìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆÖ—ªã¼Ìñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ýÜä{›sëCb–Í—¤¡RHË–É@ìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆÖ—ªã¼Ìñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ý%ÉÉÊ@™†P4qÑÄS˜É@ìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆÖ—ªã¼Ìñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ýAþp³éN†²ÄX|?]’šÉ@ìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆÖ—ªã¼Ìñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ý›mýÑù÷Cɶš}V¥Ø玜É@ìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆÖ—ªã¼Ìñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ý7£•à_AC©aÀÿ¦DUžÉ@ìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆÖ—ªã¼Ìñ‹+aue_read’ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ýƒèßGBÒM®†¢½U|ãP É@ìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆÖ—ªã¼Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execcron20ÜS7[AIF¬•pd± (ýÀø‚¯H¢FáœÃ>(h0éÕ¢Éìœ ^1£F~é®Ñ'üvºMTZŸ2S²ŸâÓ‚ˆÖ—ªã¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1510execcron20ÜS7[AIF¬•pd± (ýˆyÝXDƒ¢Î‡<+~sÌ¤É +ìœ ^1£F~é®Ñ'üvº^1£F~é®Ñ'üvºÖ—ªã¼Ìñ‹+aue_seteuideuid +arg_euid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510execcron20ÜS7[AIF¬•pd± (ýãƒùHˆ»J7•Â<š¢g;ö¦É +ìœ ^1£F~é®Ñ'üvº^1£F~é®Ñ'üvºÖ—ªã¼Ìñ‹+aue_setegidegid +arg_egid0hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510execcron20ÜS7[AIF¬•pd± (ý[þ&.É%OQ Ÿg½ˆ3C¨É6ìœ ^1£F~é®Ñ'üvº^1£F~é®Ñ'üvºÖ—ªã¼Ìñ‹+aue_umaskhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value18ppid1510execcron20ÜS7[AIF¬•pd± (ý +NÖc÷ctS£DVt­l20 +ÜS7[AIF¬•pd± (ýfYñÓ]C2¸%©”½$™ªÉ6ìœ ^1£F~é®Ñ'üvº^1£F~é®Ñ'üvºNÖc÷ctS£DVt­l +/rootÖ—ªã¼Ìñ‹+aue_chdirhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510execcron20ÜS7[AIF¬•pd± (ý{ÑzôÇJ®uϵñˆƒ¬Éìœ ^1£F~é®Ñ'üvºó÷êßZyºU¹Zˆºä$/bin/sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ö—ªã¼Ìñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine:/bin/sh -c /usr/libexec/atrunppid1510execcron20ÜS7[AIF¬•pd± (ýGÕ/€+C³¹N¡®,Púb®É<ìœ ^1£F~é®Ñ'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÖ—ªã¼Ìñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1510execsh20ÜS7[AIF¬•pd± (ý„BtŽ¢ÙLþ’£S-:°É@ìœ ^1£F~é®Ñ'üvº‰oý©äÇU¤©A)Eǹ Ö—ªã¼Ìñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ý‚èw Ù|L¾>,2ø~²Éìœ ^1£F~é®Ñ'üvº‰oý©äÇU¤©A)Eǹ Ö—ªã¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1510execsh20ÜS7[AIF¬•pd± (ýe=*EãGö°¡…’Òl²´É<ìœ ^1£F~é®Ñ'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÖ—ªã¼Ìñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1510execsh20ÜS7[AIF¬•pd± (ý© àÈ®”Cð¤z}a°Ûè¶É@ìœ ^1£F~é®Ñ'üvºXꎩð®…\®ð@JÌ…¼âÖ—ªã¼Ìñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ý9ü:¥p­EO·¨-¯Ýž-¹¸É@ìœ ^1£F~é®Ñ'üvºXꎩð®…\®ð@JÌ…¼âÖ—ªã¼Ìñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýkù¬ìLD¡‰þóöj…NºÉìœ ^1£F~é®Ñ'üvºXꎩð®…\®ð@JÌ…¼âÖ—ªã¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1510execsh20ÜS7[AIF¬•pd± (ýê”"˜0Kö¾îO'éêOD¼É<ìœ ^1£F~é®Ñ'üvº*‡qo&\¯q׬&¬Ÿ"/lib/libedit.so.7Ö—ªã¼Ìñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1510execsh20ÜS7[AIF¬•pd± (ýsöñ4Bj‡©àŠ~=’:¾É2ìœ ^1£F~é®Ñ'üvº*‡qo&\¯q׬&¬ŸÖ—ªã¼Ìñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ý˜F¹!¡Cíž(¹I©êÀÉ2ìœ ^1£F~é®Ñ'üvº*‡qo&\¯q׬&¬ŸÖ—ªã¼Ìñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýÊ=ÛIéB¥§¢)ï{GÂÉ2ìœ ^1£F~é®Ñ'üvº*‡qo&\¯q׬&¬ŸÖ—ªã¼Ìñ‹+aue_mmap€À¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýߦZ³jv@ +¼ä i•d»ÄÉ2ìœ ^1£F~é®Ñ'üvº*‡qo&\¯q׬&¬ŸÖ—ªã¼Ìñ‹+aue_mmap€À¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýc ¨bw@X·ŠïîœjVÆÉ2ìœ ^1£F~é®Ñ'üvº*‡qo&\¯q׬&¬ŸÖ—ªã¼Ìñ‹+aue_mmap€Àà arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ý‡úA–º©Gž²#…}Œ¿ÈÉ2ìœ ^1£F~é®Ñ'üvº*‡qo&\¯q׬&¬ŸÖ—ªã¼Ìñ‹+aue_mmap€Àà arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ý¼är%KG©'îZ~ï<ÊÉ2ìœ ^1£F~é®Ñ'üvº*‡qo&\¯q׬&¬ŸÖ—ªã¼Ìñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ý)ÏÀs™mK …hZ—žCÌÉ2ìœ ^1£F~é®Ñ'üvº*‡qo&\¯q׬&¬ŸÖ—ªã¼Ìñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýŸÄÊËßCºËî-_Ê·ÎÉìœ ^1£F~é®Ñ'üvº*‡qo&\¯q׬&¬ŸÖ—ªã¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1510execsh20ÜS7[AIF¬•pd± (ýeš£ãEË®bÀa7¡~OÐÉ<ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Ö—ªã¼Ìñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1510execsh20ÜS7[AIF¬•pd± (ý… +'Z#A ¹³w]5¬PÊÒÉ2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÖ—ªã¼Ìñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ý7>4u†CHœ½XH2ÚX\¿ÔÉ2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÖ—ªã¼Ìñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýIö‰¡ÀJ£1á +råTIÖÉ2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_mmap€€Ø arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýÆ‘$°Õ{AS”•Ð$™gŽŒØÉ2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_mmap€€Ø arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýEÂU×KB»»K¿záýÚÉ2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_mmap€€— arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýÓ²µ<ä·FRšC³6ÿ hðÜÉ2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_mmap€€— arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýŒÚ«1Ò¦D ­¾…±†5ÛƒÞÉ2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_mmap€À¹ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýMumG±‚G¯füÿ¸àÉ2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_mmap€À¹ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýôý~sóƒBð±¬iƒsŠâÉìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1510execsh20ÜS7[AIF¬•pd± (ý42vlÁH±„Ìi喙àäÉ<ìœ ^1£F~é®Ñ'üvºÚ6n $.\¤ ¸­ü.+¦*/lib/libncursesw.so.8®ùÕì¼Ìñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1510execsh20ÜS7[AIF¬•pd± (ý¦¿A N¬¤€<¡;êaæÉ2ìœ ^1£F~é®Ñ'üvºÚ6n $.\¤ ¸­ü.+¦®ùÕì¼Ìñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ý§XmàöOÛ¡ïM²@'+èÉ2ìœ ^1£F~é®Ñ'üvºÚ6n $.\¤ ¸­ü.+¦®ùÕì¼Ìñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ý'Ž ÚLID …ƒºÂÀB8êÉ2ìœ ^1£F~é®Ñ'üvºÚ6n $.\¤ ¸­ü.+¦®ùÕì¼Ìñ‹+aue_mmap€ÀÔ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýHC¥YNPI1Œ‰­™å³wìÉ2ìœ ^1£F~é®Ñ'üvºÚ6n $.\¤ ¸­ü.+¦®ùÕì¼Ìñ‹+aue_mmap€ÀÔ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýì•9]°&D6²¤þDjîÉ2ìœ ^1£F~é®Ñ'üvºÚ6n $.\¤ ¸­ü.+¦®ùÕì¼Ìñ‹+aue_mmap€€é arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýN⻈pFq™æR’à¯ðÉ2ìœ ^1£F~é®Ñ'üvºÚ6n $.\¤ ¸­ü.+¦®ùÕì¼Ìñ‹+aue_mmap€€é arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýÞßXŽtG Ö’9þjøQòÉ2ìœ ^1£F~é®Ñ'üvºÚ6n $.\¤ ¸­ü.+¦®ùÕì¼Ìñ‹+aue_mmap€€‚ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýpý´Ë6ÐFª¡‡N~ åÄôÉ2ìœ ^1£F~é®Ñ'üvºÚ6n $.\¤ ¸­ü.+¦®ùÕì¼Ìñ‹+aue_mmap€€‚ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510execsh20ÜS7[AIF¬•pd± (ýZDÏ'›öC^¬_› F,öÉìœ ^1£F~é®Ñ'üvºÚ6n $.\¤ ¸­ü.+¦®ùÕì¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1510execsh20ÜS7[AIF¬•pd± (ý„ŽCªBHꬹSøéA”—øÉ:ìœ ^1£F~é®Ñ'üvº®ùÕì¼Ìñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510execsh20ÜS7[AIF¬•pd± (ýQ¤²u::Iñ¿,Ï ?lúÉ:ìœ ^1£F~é®Ñ'üvº®ùÕì¼Ìñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510execsh20ÜS7[AIF¬•pd± (ý™¾dëŽzMW¾åî=ÌÝeüÉ:ìœ ^1£F~é®Ñ'üvº®ùÕì¼Ìñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510execsh20ÜS7[AIF¬•pd± (ý?ðEN¾²^~m,Ôz€þÉ:ìœ ^1£F~é®Ñ'üvº®ùÕì¼Ìñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510execsh20ÜS7[AIF¬•pd± (ý +_È ‰$X¤‰=ؾ20 +ÜS7[AIF¬•pd± (ýIÂ*± Ló‡ŒÕc§Û€Êìœ ^1£F~é®Ñ'üvº_È ‰$X¤‰=ؾ$/usr/libexec/atrun'ìAzX™¦}˜¹(/libexec/ld-elf.so.1®ùÕì¼Ìñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine$/usr/libexec/atrunppid1510execsh20ÜS7[AIF¬•pd± (ýKɶ³ofM'®N…‘Ìj‚Ê<ìœ ^1£F~é®Ñ'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf®ùÕì¼Ìñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý–¬ò»A¯£áÓ„R"„Ê@ìœ ^1£F~é®Ñ'üvº‰oý©äÇU¤©A)Eǹ ®ùÕì¼Ìñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý#3œ8KAežþÊ‚Y:¿†Êìœ ^1£F~é®Ñ'üvº‰oý©äÇU¤©A)Eǹ ®ùÕì¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýñζå4îDû¦I-¢­"úˆÊ<ìœ ^1£F~é®Ñ'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints®ùÕì¼Ìñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýß“ÕnlžI§‹rÐ.Rˆ¾ŠÊ@ìœ ^1£F~é®Ñ'üvºXꎩð®…\®ð@JÌ…¼â®ùÕì¼Ìñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý“/A +iD¹´›¯M‘4ŒÊ@ìœ ^1£F~é®Ñ'üvºXꎩð®…\®ð@JÌ…¼â®ùÕì¼Ìñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýh@ôJ™º­$Š5¬ŽÊìœ ^1£F~é®Ñ'üvºXꎩð®…\®ð@JÌ…¼â®ùÕì¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý_]~/³H ¡Ÿ™ìÅΠÊ<ìœ ^1£F~é®Ñ'üvº ªV.x±h^±xåNhžõ(/usr/lib/libpam.so.6®ùÕì¼Ìñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý'Ô£k#LÛ˜ÕÞÂB’Ê2ìœ ^1£F~é®Ñ'üvº ªV.x±h^±xåNhžõ®ùÕì¼Ìñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýÓQMúOÚ¤nå°v±”Ê2ìœ ^1£F~é®Ñ'üvº ªV.x±h^±xåNhžõ®ùÕì¼Ìñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"šªúÅÐK¦VMQq®‹Ï£°–Ê2ìœ ^1£F~é®Ñ'üvº ªV.x±h^±xåNhžõ®ùÕì¼Ìñ‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýævJ­CEINœz¡*÷³#+˜Ê2ìœ ^1£F~é®Ñ'üvº ªV.x±h^±xåNhžõ®ùÕì¼Ìñ‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý4•ùÅBYCþ¿Öþ yà> šÊ2ìœ ^1£F~é®Ñ'üvº ªV.x±h^±xåNhžõ®ùÕì¼Ìñ‹+aue_mmap€€¨ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýp¶(ѧÎEm¾ùºVªPdœÊ2ìœ ^1£F~é®Ñ'üvº ªV.x±h^±xåNhžõ®ùÕì¼Ìñ‹+aue_mmap€€¨ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýŽ‹‡IJŒB ÍUüžÊ2ìœ ^1£F~é®Ñ'üvº ªV.x±h^±xåNhžõ®ùÕì¼Ìñ‹+aue_mmap€À« arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý‚Ãâñh‘@Û“qu=3Y Ê2ìœ ^1£F~é®Ñ'üvº ªV.x±h^±xåNhžõ®ùÕì¼Ìñ‹+aue_mmap€À« arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý%ÀŒ/ÙEÞ¸ŒNøaIÁ¢Êìœ ^1£F~é®Ñ'üvº ªV.x±h^±xåNhžõ®ùÕì¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý¾Íåˆ$€D)¥NE b2Þ¤Ê<ìœ ^1£F~é®Ñ'üvº5‹s{¯lœZ¬¯ª}Zœµj"/lib/libutil.so.9®ùÕì¼Ìñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýP'ñ…Oo™!²DtɦÊ2ìœ ^1£F~é®Ñ'üvº5‹s{¯lœZ¬¯ª}Zœµj®ùÕì¼Ìñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýŽaŠST©A.š‘§™…Y?©¬Ê2ìœ ^1£F~é®Ñ'üvº5‹s{¯lœZ¬¯ª}Zœµj®ùÕì¼Ìñ‹+aue_mmap€€­ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýŽ8x2q¸J£Üïš2®Ê2ìœ ^1£F~é®Ñ'üvº5‹s{¯lœZ¬¯ª}Zœµj®ùÕì¼Ìñ‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý%"ÚhADc­.QÆå÷©A°Ê2ìœ ^1£F~é®Ñ'üvº5‹s{¯lœZ¬¯ª}Zœµj®ùÕì¼Ìñ‹+aue_mmap€€± arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý!‘ÔðåEþ„‡vîòÛ§²Ê2ìœ ^1£F~é®Ñ'üvº5‹s{¯lœZ¬¯ª}Zœµj®ùÕì¼Ìñ‹+aue_mmap€À¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý`SèT„ÖC“¡ù^ásôÊ2ìœ ^1£F~é®Ñ'üvº5‹s{¯lœZ¬¯ª}Zœµj®ùÕì¼Ìñ‹+aue_mmap€À¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýeÔèUDœÝm i[¶¶Êìœ ^1£F~é®Ñ'üvº5‹s{¯lœZ¬¯ª}Zœµj®ùÕì¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýhÓs$ÉGM‡[?‹$D¸Ê<ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7®ùÕì¼Ìñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýö×|Û]§D^µqd§he®ºÊ2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýZÅJâ\WC•„Ñ>5íÏ¿¼Ê2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý”a¹EiÛL ‡‰ˆQÀ+‡¾Ê2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_mmap€À¸ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý¨.gD»nIV†c H²Û˜RÀÊ2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_mmap€À¸ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýSe+HèCEëUcÑ©ÂÊ2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_mmap€À÷ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý‚ɶD#ÁF_»‡l3•6ÔuÄÊ2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_mmap€À÷ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýgEóÙ€ÞLw®d{•»lOÆÊ2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_mmap€€š arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý`U9¾LôöŒIˆKÍÈÊ2ìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_mmap€€š arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýïwäýîD<–%ö÷ÊiÊÊìœ ^1£F~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œ®ùÕì¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýÿ –{)Lò®j;űö˜\ÌÊ:ìœ ^1£F~é®Ñ'üvº®ùÕì¼Ìñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý[l³ä÷OK ¸Œå;%ÃIÎÊ:ìœ ^1£F~é®Ñ'üvº®ùÕì¼Ìñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý¤£íÆH¡NJµŠmÂœ@ëÐÊ:ìœ ^1£F~é®Ñ'üvº®ùÕì¼Ìñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýMB…ÃóBKoŠnìÖ¶E}®ÒÊ:ìœ ^1£F~é®Ñ'üvº¸“òõ¼Ìñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýʬ´˜d@‘®ÍW„AƒüÔÊ +ìœ ^1£F~é®Ñ'üvº^1£F~é®Ñ'üvº¸“òõ¼Ìñ‹+aue_setegidegid +arg_egid1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýÌ´úôo@"¨J¢| €Ö½ÖÊ +ìœ ^1£F~é®Ñ'üvº^1£F~é®Ñ'üvº¸“òõ¼Ìñ‹+aue_seteuideuid +arg_euid1hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý +‹çjj +ñ4]± +9S 4¹¹20 +ÜS7[AIF¬•pd± (ýñF¹6ÜEÔ„5ÜéšÙkØÊ6ìœ ^1£F~é®Ñ'üvº^1£F~é®Ñ'üvº‹çjj +ñ4]± +9S 4¹¹/var/at/jobs/¸“òõ¼Ìñ‹+aue_chdirhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýæÈC÷SýI)µxq¶y«Û¨ÚÊ<ìœ ^1£F~é®Ñ'üvº‹çjj +ñ4]± +9S 4¹¹/var/at/jobs/.¸“òõ¼Ìñ‹+aue_open_rwtc +flagsmodeì| +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý’¹i;üŒH­ìƒÿß3õñÜÊìœ ^1£F~é®Ñ'üvº‹çjj +ñ4]± +9S 4¹¹¸“òõ¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1510exec +atrun20ÜS7[AIF¬•pd± (ý˜£¥›qJ;•À­Š^³ÊÄÞÊìœ ^1£F~é®Ñ'üvº^1£F~é®Ñ'üvº¸“òõ¼Ìñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1510exec +atrun20ÜS7[AIF¬•pd± (ýJ¥(³@‡±Š½|vtdàÊDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¸“òõ¼Ìñ‹+aue_recvfromÒ ret_msgid +17092hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý +Ü3ë¸ÖXY_˜Ö·Y’Ì20 +ÜS7[AIF¬•pd± (ý6ÇvfÁE‰§¥9ö…/ÂjâÊbê› µ dôFzé®{'üvºÜ3ë¸ÖXY_˜Ö·Y’̸“òõ¼Ìñ‹+aue_writev¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd18ppid1execsyslogd20ÜS7[AIF¬•pd± (ýS5‹„'f@ø§Ñh&§w±ÊäÊÖœ ^èF~é®Ñ'üvº^(ßF~é®Ñ'üvº¸“òõ¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1141execcron20ÜS7[AIF¬•pd± (ýTLäFšFª³=âîkæÊÖœ ^èF~é®Ñ'üvº^-HF~é®Ñ'üvº¸“òõ¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1141execcron20ÜS7[AIF¬•pd± (ýѦ=¹­¿L¸#Íß„Ý%0èÊÖœ ^èF~é®Ñ'üvº^(àF~é®Ñ'üvº¸“òõ¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1141execcron20ÜS7[AIF¬•pd± (ýÉ!¡eKlO!E3©:êÊ"Öœ ^èF~é®Ñ'üvº¸“òõ¼Ìñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1141execcron20ÜS7[AIF¬•pd± (ý’²šî{CÑ}'ÂÎãìÊ@Öœ ^èF~é®Ñ'üvº^-GF~é®Ñ'üvº¸“òõ¼Ìñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1141execcron20ÜS7[AIF¬•pd± (ým;»" +OÉR¯ËýÕ• îÊÖœ ^èF~é®Ñ'üvº^-GF~é®Ñ'üvº¸“òõ¼Ìñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1141execcron20ÜS7[AIF¬•pd± (ý»†=A_Ic¸/w-°¢Í:ðÊÖœ ^èF~é®Ñ'üvº^èF~é®Ñ'üvº¸“òõ¼Ìñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1141execcron20ÜS7[AIF¬•pd± (ý ÊvÚ®B‘£:Ûþ”IPZòÊ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+aue_lseekØŽ^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõb·ŽÏ—Oõ´uqpV¤X·öÊ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+20ÜS7[AIF¬•pd± (ýJAƒÃ/[Fiˆäë­1ôÊ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý| fû‚kE2°IËçs&fúÊ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+20ÜS7[AIF¬•pd± (ýò‡m‡ÁÍO1—w:~»€JøÊ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýùrehìK ›Úâ +µP_þÊ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+20ÜS7[AIF¬•pd± (ý—÷0vCú“@i4}ÝüÊ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˘ÑÄhL>ƒR#ä啶‚Ë ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+20ÜS7[AIF¬•pd± (ýz@†ˆLɘ :pÜ;‹€Ë@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýHÍÄ~€°J§…¾9CÈÄpŽ†Ë ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+20ÜS7[AIF¬•pd± (ý-æÿPhO¸¡¨œËƒ „Ë@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþ kxì[KGˆ¥èý_iq7ŠË ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+20ÜS7[AIF¬•pd± (ýXÝXC„‹A2ƒf›gæ„õ™ˆË@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdYó¿ŠK+-Ô®&ḌË:‚œ Ê +ÙKFzé®›'üvº˜Ÿø˽Ìñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8£—*(½CÕ­";·”¡Š×ŽË@è Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˜Ÿø˽Ìñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOwåÛy„D.ƒM!q7œË@è Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&´Ý!¾1A€†z¿Có’Ë@è Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+aue_preadž2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýî‹ãB3@JZ¯rì¹6M ±”Ëb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº˜Ÿø˽Ìñ‹+aue_writeˆ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒcØ¿X>F<ˆ×«ô«Œ™3–Ëbè Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á˜Ÿø˽Ìñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýfÌR.‰KÅ’CÉ´#A–¹˜Ë@è Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˜Ÿø˽Ìñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓtó1B阧Ytw65šË@è Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.þ„ ~cAGªŸØRù̶œË@è Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+aue_preadÌFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýn˜)¥~àNWª‡æßÏžËb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº˜Ÿø˽Ìñ‹+aue_write¶GhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6]±hH׆éÚò•UРËbè Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á˜Ÿø˽Ìñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýíÆÏFˆ¦ÌMdPá¢Ë@è Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˜Ÿø˽Ìñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýthÌþdxEt—#^˜‰û{¤Ë@è Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3“’uWIÁ¼(´T+AT¦Ë@è Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜Ÿø˽Ìñ‹+aue_pread†?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽ[~ºbFçª:¦­/8 ¨Ë0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÑæÊÂÌñ‹+aue_lseek´—`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬/âNõŒMôºÕU(:4ĪËJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvº–è·„ÃÌñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"°êû ++k×6Kñ¥Ÿ€\å-Ä®Ë ²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvºˆõÖ³ÃÌñ‹+20ÜS7[AIF¬•pd± (ý»åAgê$FU×>$J2–y¬ËF²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvºˆõÖ³ÃÌñ‹+aue_recvmsg¨ret_miouuidH17a645c0-467e-11e9-aed1-080027fc76bahostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1282address172.217.9.4port0execping20ÜS7[AIF¬•pd± (ýËi•ž-LÝ¡¬‘ËŒ °Ëb²œ ¤‡ðF~é®Ñ'üvºí( ö~R¶ ~{‚~¯ˆõÖ³ÃÌñ‹+aue_writexhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execping20ÜS7[AIF¬•pd± (ýCŸøßëIµ¯æ’W‘F²Ë0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÙ‹ŽÊÌñ‹+aue_lseek¾£`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæ)Ù}2úA͢ൔ@áOV´ËJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvºî˜ÐÇÊÌñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýùøÝÐ&IÌ‘,Ú}Ò’6$¸Ë ²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvºìÍÕ÷ÊÌñ‹+20ÜS7[AIF¬•pd± (ýã\N'-Gô’|l6…E¦›¶ËF²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvºìÍÕ÷ÊÌñ‹+aue_recvmsg¨ret_miouuidH17a645c0-467e-11e9-aed1-080027fc76bahostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1282address172.217.9.4port0execping20ÜS7[AIF¬•pd± (ýäSÒìM‰1)•jºËb²œ ¤‡ðF~é®Ñ'üvºí( ö~R¶ ~{‚~¯ìÍÕ÷ÊÌñ‹+aue_writexhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execping20ÜS7[AIF¬•pd± (ý¥z6[¼vM÷¤ŠÀo„Z’¼Ë0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+aue_lseek¾£`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýú»lÃLüŸ¥i=¢hµÀË ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+20ÜS7[AIF¬•pd± (ý_•%Ñ;ŒI`–>¯Qò¾Ë@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý2©2@KÍJý‡ñßBÝM-ÄË ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+20ÜS7[AIF¬•pd± (ýsç%û/@æ°o ‰;BÂÂË@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýéî™=/>Nr¥¦S_j’~ÈË ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+20ÜS7[AIF¬•pd± (ýâ‹ <·aEγqU[KÛÆË@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›õw‹áA0ºÚq {–ÛÌË ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+20ÜS7[AIF¬•pd± (ýFób›aWCñ¾ÝºžŸn2…ÊË@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³yñèŒG ›‘º^+@ÐË ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+20ÜS7[AIF¬•pd± (ýOM„:mMø²äÆ÷&52ÎË@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃA*™M–ñi¾ÃúôÔË ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+20ÜS7[AIF¬•pd± (ý=[`ƒ4±F‰ÞäD™IbÒË@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýeô í¯ªNØlË+G‚A +ÖË:‚œ Ê +ÙKFzé®›'üvºêáÀ¿ÌÌñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý sñ?£B(®.ŸÆÅh†ØË@ê Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V êáÀ¿ÌÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(u2ŽjƒJb°‹P×dôµöÚË@ê Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.@"j½êJr¹e÷Ù¦¸Ñ~ÜË@ê Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+aue_pread¦EhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{ðnOA¯°*8G‰÷ÑÞËb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºêáÀ¿ÌÌñ‹+aue_writeFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýîî"iâ·NS¶B7Ë1{KàËbê Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áêáÀ¿ÌÌñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’·Ý&ÛD\‡VöéF‰z-âË@ê Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V êáÀ¿ÌÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—KâÓèÞKÓ»õe〚ìäË@ê Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýzéû‰æF“+#ŽbE%æË@ê Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+aue_pread¾>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýýÛ¼”ùAcåvMq‚èËb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºêáÀ¿ÌÌñ‹+aue_write¨?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛþN#2Bµ¨rÎÝÊ êËbê Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áêáÀ¿ÌÌñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸÑòdé L— ²ïóìûìË@ê Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V êáÀ¿ÌÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýê™x³VC¶©<ž·!.ËîË@ê Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`Ú'¾Ã"Kè‡-8_s¬˜ðË@ê Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêáÀ¿ÌÌñ‹+aue_preadÜBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™úÔXWFÕ ¥—>rêòËb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºêáÀ¿ÌÌñ‹+aue_writeÆChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂ1á÷Æ@‡ÑK Z³áNôËbê Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áêáÀ¿ÌÌñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµ·\a¢ŽN¾'(å‘ïzöË@ê Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V êáÀ¿ÌÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýãjþì-£ÜCÔ‡5ÓëÁ{¹Ý’Ìb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºØÞÌÈÌÌñ‹+aue_writeæBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýýýÜ73ŒNÁ‹ŽmoQ.Œ”ÌD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÈé÷ÍÌñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=ˆïàCS¸™eX±Ç–ÌD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÈé÷ÍÌñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ©q6˜KŸ«>3KªíܘÌb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÈé÷ÍÌñ‹+aue_writeì hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñ¸»}~DC¾¥sšÎÍÍn¦šÌD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÈé÷ÍÌñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~.¡ÖD‡»§<ÑmÆ4ƒœÌ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U»•äÑÌñ‹+aue_lseekØè`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡O#‡M‡I˜ EkBaö&/žÌJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvº¨‰°ŠÒÌñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý‘±­†1AN‘F罨(d¢Ì ²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvº®€„ºÒÌñ‹+20ÜS7[AIF¬•pd± (ýÂF†Ÿ°âGà¶K“÷³“f ÌF²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº®€„ºÒÌñ‹+aue_recvmsg¨ret_miouuidH17a645c0-467e-11e9-aed1-080027fc76bahostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1282address172.217.9.4port0execping20ÜS7[AIF¬•pd± (ý(I‘^êA©?:“*¢p<¤Ìb²œ ¤‡ðF~é®Ñ'üvºí( ö~R¶ ~{‚~¯®€„ºÒÌñ‹+aue_writexhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execping20ÜS7[AIF¬•pd± (ýôO‹çÆÃM¡ Yµgwy^›¦Ì0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–§Ø§ÙÌñ‹+aue_lseekêô`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýîG3øWN{¼\[‰v•}¨ÌJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvºžýÊÍÙÌñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý¯Ÿ|„ŽCÚ§•vÎ!Òñ¬Ì ²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvºÖ‰ªýÙÌñ‹+20ÜS7[AIF¬•pd± (ý™,ß¡Hב&#Ëe á–ªÌF²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvºÖ‰ªýÙÌñ‹+aue_recvmsg¨ret_miouuidH17a645c0-467e-11e9-aed1-080027fc76bahostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1282address172.217.9.4port0execping20ÜS7[AIF¬•pd± (ý çz<]H䞇J šò®Ìb²œ ¤‡ðF~é®Ñ'üvºí( ö~R¶ ~{‚~¯Ö‰ªýÙÌñ‹+aue_writexhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execping20ÜS7[AIF¬•pd± (ýdÈÕ |Iã¹óiñm#»°Ì0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô¤õ²ÛÌñ‹+aue_lseekêô`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²©šô—ÌAEŠIQNc«D´Ì ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uô¤õ²ÛÌñ‹+20ÜS7[AIF¬•pd± (ýB[­ ežB¼–ý[Þ=7—²Ì@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô¤õ²ÛÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯õƬgHô¨©‚aÑà¸Ì ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uô¤õ²ÛÌñ‹+20ÜS7[AIF¬•pd± (ýýhtH0eF¼¯ø>’'UY¶Ì@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô¤õ²ÛÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏ=­í©eKY ´Ê°î}Þ¼Ì ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uô¤õ²ÛÌñ‹+20ÜS7[AIF¬•pd± (ý‡w!2“ŠJ¸€Ö¸4mOaºÌ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô¤õ²ÛÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝKBówCP˜öÖg+"£¾Ì:‚œ Ê +ÙKFzé®›'üvºô¤õ²ÛÌñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýkqIvÝDY¼o¦8’D‰ÀÌ@ì Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ô¤õ²ÛÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘T¶CŸ_¿£¶ŽóÂÌ@ì Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô¤õ²ÛÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠœì õFg„4ì@*‘¬cÄÌ@ì Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô¤õ²ÛÌñ‹+aue_pread’EhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜ9ÑN°áJ¨GŒˆ{Z€ÆÌb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºô¤õ²ÛÌñ‹+aue_writeüEhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóûÒ±ç$Dç‰JŸ«j¢ÈÌbì Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áô¤õ²ÛÌñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥gtŠè@{‹¦!›eXÚHÊÌ@ì Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ô¤õ²ÛÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´kˆÔüjC]ŽÒµÁHrHÌÌ@ì Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô¤õ²ÛÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáÃÏÖõ”M››§ÃV;wýÎÌ@ì Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uô¤õ²ÛÌñ‹+aue_preadŠ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÔï¶ \ÛM)ˆMxœuµá„ÐÌb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºô¤õ²ÛÌñ‹+aue_writeô hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýh9£´]eCB‹ ow–i\ÒÌbì Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áô¤õ²ÛÌñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®ˆM¶@HÙº/4M}ÜÔÌ@ì Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ô¤õ²ÛÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýIW)½ÙKñƒsZYà§ùžÖÌJì Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºô¤õ²ÛÌñ‹+aue_sendtoà +ret_msgid +17099hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†â©h•âF +³c4tiÞØÌDê› µ dôFzé®{'üvºµ CjFzé®{'üvºô¤õ²ÛÌñ‹+aue_recvfromà ret_msgid +17099hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý`ú¥»ó·LÊœ:ìg£bœoÚÌbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKô¤õ²ÛÌñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬Œú Ú,ÖJΈ-”©3# ÜÌD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºî×¼ÛÌñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýf^±s}HËòè=¤£üÞÌD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºî×¼ÛÌñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýh¡Š#£ýN²7KÔ—ÛÓàÌD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºî×¼ÛÌñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9©FêùFÕ°PÊŸ¯NSåâÌD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºî×¼ÛÌñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#È|¦9L¯™€Û±jýäÌ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UØûÚôàÌñ‹+aue_lseek¤¢ahostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý??LËþü@¯˜*ÂzUvçåæÌJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvºÒúôáÌñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýÉúçgLMZª-9þ®×IêÌ ²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvºü©÷ÀáÌñ‹+20ÜS7[AIF¬•pd± (ýOõ J¤TOö¦º0{™2 èÌF²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvºü©÷ÀáÌñ‹+aue_recvmsg¨ret_miouuidH17a645c0-467e-11e9-aed1-080027fc76bahostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1282address172.217.9.4port0execping20ÜS7[AIF¬•pd± (ý÷í(A£Bužœ¼¾ÕqìÌb²œ ¤‡ðF~é®Ñ'üvºí( ö~R¶ ~{‚~¯ü©÷ÀáÌñ‹+aue_writexhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execping20ÜS7[AIF¬•pd± (ý¥¡îÇê Hž³¤ÿ¢ƒø{ÐîÌ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eðÜœ†æÌñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýóhÜÝÀÌDÞ·ñ& ÜøTðÌJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºðÜœ†æÌñ‹+aue_sendtoÚ +ret_msgid +17100hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý.A@N­…b´…Ú4òÌJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºðÜœ†æÌñ‹+aue_sendto˜ +ret_msgid +17101hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÝ„â÷)O?ª¶µ÷Ê&š!ôÌJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºðÜœ†æÌñ‹+aue_sendto¬ +ret_msgid +17102hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý«:o^@ ½q¦í©!+öÌJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºðÜœ†æÌñ‹+aue_sendto˜ +ret_msgid +17103hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¿àWÏåD½…E¼“íàïWøÌDê› µ dôFzé®{'üvºµ CjFzé®{'üvºðÜœ†æÌñ‹+aue_recvfromÚ ret_msgid +17100hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¡ïnxº-C‹†<€r¥ÈPúÌDê› µ dôFzé®{'üvºµ CjFzé®{'üvºðÜœ†æÌñ‹+aue_recvfrom˜ ret_msgid +17101hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý}­_§¹œNž‹×™M‚‹… üÌDê› µ dôFzé®{'üvºµ CjFzé®{'üvºðÜœ†æÌñ‹+aue_recvfrom¬ ret_msgid +17102hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý åæ?m*IÒ¨i6·Þ°þÌDê› µ dôFzé®{'üvºµ CjFzé®{'üvºðÜœ†æÌñ‹+aue_recvfrom˜ ret_msgid +17103hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý ±Ë@=¾R9ºz©,€Í0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uð÷½·èÌñ‹+aue_lseek€»ahostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥ Tð"®Ix¡ÌfƒeC¬î‚ÍJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvº´ºŠÔèÌñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý8Ñ-T*J ¨E Úò°§†Í ²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvºÖijéÌñ‹+20ÜS7[AIF¬•pd± (ýe½ï–²FCª›´ƒ§–„ÍF²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvºÖijéÌñ‹+aue_recvmsg¨ret_miouuidH17a645c0-467e-11e9-aed1-080027fc76bahostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1282address172.217.9.4port0execping20ÜS7[AIF¬•pd± (ýøÂb7(5@7´) +KÏ&¸üˆÍb²œ ¤‡ðF~é®Ñ'üvºí( ö~R¶ ~{‚~¯ÖijéÌñ‹+aue_writexhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execping20ÜS7[AIF¬•pd± (ýÀñ·?–Bn«­/A= PŠÍ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžÑ†¦êÌñ‹+aue_lseek€»ahostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÔHód¸E¬/í_þg¡ŽÍ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UžÑ†¦êÌñ‹+20ÜS7[AIF¬•pd± (ýn‚ÂïLߦÒL80©ŒÍ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžÑ†¦êÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8f²Ô:@궩~ ûÅU’Í ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UžÑ†¦êÌñ‹+20ÜS7[AIF¬•pd± (ý†8â1TBÒ²ü‚˜â©Í@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžÑ†¦êÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$޵Ɔ™Jš¯*$QK[¬–Í ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UžÑ†¦êÌñ‹+20ÜS7[AIF¬•pd± (ýå¢RÆ…Bz¤Œê<“gCî”Í@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžÑ†¦êÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰HM)öLæ­ÐS–k9²˜Í:‚œ Ê +ÙKFzé®›'üvºžÑ†¦êÌñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýù&–°$¥Jɶæ§ÃW•ó:šÍ@î Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V žÑ†¦êÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%R® äEú´ tïûœÍ@î Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžÑ†¦êÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­­mH…MO§Éãò´,ì2žÍ@î Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžÑ†¦êÌñ‹+aue_pread²-hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýiãë;iNµ¦§K|Çtê Íb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºžÑ†¦êÌñ‹+aue_writeœ.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý «˜:š@#Ÿr¦ —m¢Íbî Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡ážÑ†¦êÌñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýw/N̉BKôœ‰}pKZ¤Í@î Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V žÑ†¦êÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýol^rRÌNTžÂÖz…,C)¦Í@î Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžÑ†¦êÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(ýéu[Iɬø@³ØÃ0¨Í@î Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžÑ†¦êÌñ‹+aue_preadÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýe§ìpOG»˜K¶ó­p¹¼ªÍb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºžÑ†¦êÌñ‹+aue_write¾hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³ÔɹHrŽVñܱÚU¬Íbî Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡ážÑ†¦êÌñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶>öI;‡CC§*}ç„ñ®ä®Í@î Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V žÑ†¦êÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–—TU³†J£ª,ý_ ?•°ÍJî Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºžÑ†¦êÌñ‹+aue_sendtoà +ret_msgid +17104hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý2jÍ=ÆMo«;˜ÝèLç²ÍDê› µ dôFzé®{'üvºµ CjFzé®{'üvºžÑ†¦êÌñ‹+aue_recvfromà ret_msgid +17104hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý«ª ÐrE[Ž¸«} õ´Íbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKžÑ†¦êÌñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýŠ·wŽ6OøöL‡Á +¼<¶ÍD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ—ƒ°êÌñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýɉeé ¾J¡“q%çÔz7¸ÍD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ—ƒ°êÌñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýs¬#—ñLE ¾€8½!齺ÍD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ—ƒ°êÌñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý Y–6ÄJ’™àº=Ã[ý¼ÍD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ—ƒ°êÌñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóìFþjÕFX€²4 ¾Í0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UöÈ„ðÌñ‹+aue_lseekÐèahostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý׳öQŒOð¾ë ±6"ÀÍJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvºôýÅ—ðÌñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý¡»»ÓLWC0šìï3ém{ÄÍ ²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvºìŠçÆðÌñ‹+20ÜS7[AIF¬•pd± (ýá>ÌuþûMN·ã/çú2Ä}ÂÍF²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvºìŠçÆðÌñ‹+aue_recvmsg¨ret_miouuidH17a645c0-467e-11e9-aed1-080027fc76bahostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1282address172.217.9.4port0execping20ÜS7[AIF¬•pd± (ý×9ø¦ö]Bþ»µcRŠ©Ú¨ÆÍb²œ ¤‡ðF~é®Ñ'üvºí( ö~R¶ ~{‚~¯ìŠçÆðÌñ‹+aue_writexhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execping20ÜS7[AIF¬•pd± (ý-­ 4ôüH+ ’üˆm°ñ`ÈÍ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U€»È÷Ìñ‹+aue_lseekâôahostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-È¢²ÎCËönNSÝÀÊÍJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvºÜð½Ú÷Ìñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý¹­§³[DѹPÚ±ü* ÕÎÍ ²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvºÈÔùŠøÌñ‹+20ÜS7[AIF¬•pd± (ý°Ü +“é—M¤ª(fcËÈÃÌÍF²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvºÈÔùŠøÌñ‹+aue_recvmsg¨ret_miouuidH17a645c0-467e-11e9-aed1-080027fc76bahostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1282address172.217.9.4port0execping20ÜS7[AIF¬•pd± (ý.DÀzÀ‹F—¥¬\ÌOxÐÍb²œ ¤‡ðF~é®Ñ'üvºí( ö~R¶ ~{‚~¯ÈÔùŠøÌñ‹+aue_writexhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execping20ÜS7[AIF¬•pd± (ýH0¥‡ÂJ‚ðZD"‘ ÒÍ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÎ™ùÌñ‹+aue_lseekâôahostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£w*î¬HF¾fBAϽÖÍ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒÎ™ùÌñ‹+20ÜS7[AIF¬•pd± (ýé_ÿD›ˆÖüÖ¹§EÔÍ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÎ™ùÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdÍ1ÀD JÁ¥”Ù.NŠÊ³ÚÍ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒÎ™ùÌñ‹+20ÜS7[AIF¬•pd± (ý[¨hùÛ¤LeŠ°>+ƒkàªØÍ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÎ™ùÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈ4DªhN© ;¹?¤ÞÍ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒÎ™ùÌñ‹+20ÜS7[AIF¬•pd± (ýrPÒŸèFw¿™â£=/¯ÜÍ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÎ™ùÌñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=™´kK¯íX7x1ÿàÍ:‚œ Ê +ÙKFzé®›'üvºŒÎ™ùÌñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦Ùl‹”XLj—ˆ÷…¡Kû#âÍ@ð Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŒÎ™ùÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²X…è‡E§ˆêŒñáŸäÍ@ð Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÎ™ùÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«…›ÊùÓNø©RÛªÀ/{êæÍ@ð Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÎ™ùÌñ‹+aue_preadÈ-hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`ÆûPJ`A#…7¦”â’rèÍb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŒÎ™ùÌñ‹+aue_write².hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýF-ßÌ`çJð¬B2>¡ÁÔ1êÍbð Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŒÎ™ùÌñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_ö‚Êïñ@I¡sF¸:Ö 3ìÍ@ð Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŒÎ™ùÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýhÚÐþ^D»·„Üðs® +îÍ@ð Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÎ™ùÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJž™ø ƒCÊ“èN,,[çzðÍ@ð Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒÎ™ùÌñ‹+aue_preadŠ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷¤ëÞ‹CÌ¡C>:î¾òÍb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŒÎ™ùÌñ‹+aue_writeô hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýì%3 Jƒ’8ËzfÇôÍbð Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŒÎ™ùÌñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýjúžcOJ1‘R@!2Þí€öÍ@ð Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŒÎ™ùÌñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›•>Ù½°H¨‚`rËPšpøÍJð Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºŒÎ™ùÌñ‹+aue_sendtoà +ret_msgid +17105hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸½Júˆ´GT¬§Â^ï4,úÍDê› µ dôFzé®{'üvºµ CjFzé®{'üvºŒÎ™ùÌñ‹+aue_recvfromà ret_msgid +17105hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý^ߣd€tLž‰8†¶ÐMfüÍbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKŒÎ™ùÌñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¥°ªÂ ŠHÁ»ê64îµêþÍD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŒÎ™ùÌñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýtiÖ +÷O¸,¦ñ€´‡€ÎD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŒÎ™ùÌñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·«ÛžOª‚|xH²Ó‹‚ÎD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºæª¨£ùÌñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýžÿ ›B½¤Þ ­ÉFŠ„ÎD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºæª¨£ùÌñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6ŸG˜ËáCŸøÅM² r¨†Î@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eˆƒ²³üÌñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬ÖüT‡˜,—2N•ŠL¤AN¾ˆÎJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºˆƒ²³üÌñ‹+aue_sendtoÚ +ret_msgid +17106hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý„ÝÝ#þ¨@ åýâ=Y¼•ŠÎJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºˆƒ²³üÌñ‹+aue_sendto˜ +ret_msgid +17107hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý.žnç;öL~¢6eðß•XfŒÎJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºˆƒ²³üÌñ‹+aue_sendto¬ +ret_msgid +17108hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýœ©÷]Ü LÁ¨JüÐ*¶VŽÎJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºˆƒ²³üÌñ‹+aue_sendto˜ +ret_msgid +17109hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýPÔ-q4™F?²·ŒÅQ°ÎDê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆƒ²³üÌñ‹+aue_recvfromÚ ret_msgid +17106hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýJH§£©zA™¿<ƒé\ܬ™’ÎDê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆƒ²³üÌñ‹+aue_recvfrom˜ ret_msgid +17107hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýüœ¸ñ‚Bó¯œN";€M/”ÎDê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆƒ²³üÌñ‹+aue_recvfrom¬ ret_msgid +17108hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýΛTnªCµ—4e´¹Ü–ÎDê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆƒ²³üÌñ‹+aue_recvfrom˜ ret_msgid +17109hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýŽah^õG ƒx\rOQD¾˜Î0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸¡©”ÿÌñ‹+aue_lseekÈ®bhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOE7¹LÁBÿ˜ŒónyAšÎJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvº¾µçÿÌñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý¢n¡‰4Gw— ¯t™|̞Π²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvº˜¢ÍÿÌñ‹+20ÜS7[AIF¬•pd± (ý’†¦(,ëMe­ îò°×eœÎF²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº˜¢ÍÿÌñ‹+aue_recvmsg¨ret_miouuidH17a645c0-467e-11e9-aed1-080027fc76bahostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1282address172.217.9.4port0execping20ÜS7[AIF¬•pd± (ýâÐÔ<Ü’A-™M "QâM Îb²œ ¤‡ðF~é®Ñ'üvºí( ö~R¶ ~{‚~¯˜¢ÍÿÌñ‹+aue_writezhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execping20ÜS7[AIF¬•pd± (ýŽ@,D˜ÿ™ÖËÇ&¢Î0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚåã׆Íñ‹+aue_lseekÚºbhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýí¯˜Eçµ4÷ØþÆå¤ÎJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvºžžåà†Íñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýÉ2ÕWKÀ·Mø9Ø„R¨Î ²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvº°„¿‡Íñ‹+20ÜS7[AIF¬•pd± (ýúÄHò¬8E ®ÌscGØŠb¦ÎF²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº°„¿‡Íñ‹+aue_recvmsg¨ret_miouuidH17a645c0-467e-11e9-aed1-080027fc76bahostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1282address172.217.9.4port0execping20ÜS7[AIF¬•pd± (ýƒÝ—BHµKÌ"v«>îªÎb²œ ¤‡ðF~é®Ñ'üvºí( ö~R¶ ~{‚~¯°„¿‡Íñ‹+aue_writezhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execping20ÜS7[AIF¬•pd± (ý~:UV/@µ¼¶!/qÿg¬Î0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ÕÙŒˆÍñ‹+aue_lseekÚºbhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýBey°ÇÝKo¾”E &rw°Î ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²ÕÙŒˆÍñ‹+20ÜS7[AIF¬•pd± (ý³²` NЬ×ðnåX2,®Î@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ÕÙŒˆÍñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøVùùDKo¡ÁG+BËY´Î ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²ÕÙŒˆÍñ‹+20ÜS7[AIF¬•pd± (ýÉÕ,ZA‰›†Ã¯×¥…²Î@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²ÕÙŒˆÍñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýEÉ(‘O©¿;²ÿ'D øΠ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²ÕÙŒˆÍñ‹+20ÜS7[AIF¬•pd± (ýÉÈJb²8èÅ¢Ï@ô Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ øÿ–Íñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<¤—b†Eš«x)ŒŽ(Zô¤Ï@ô Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ øÿ–Íñ‹+aue_preadÊhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄÖ3Å+“K½ˆ…Tý%a%ì¦Ïb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºœ øÿ–Íñ‹+aue_write´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ým{pKID<Ž?ÃO¨Ïbô Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áœ øÿ–Íñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™@õûšù@5¶‡Ó¸ü;FvªÏ@ô Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ øÿ–Íñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰âèKgE¶ºßCÆo:n¬ÏJô Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºœ øÿ–Íñ‹+aue_sendtoà +ret_msgid +17115hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆкš¾@'”ü(ô÷€žã®ÏDê› µ dôFzé®{'üvºµ CjFzé®{'üvºœ øÿ–Íñ‹+aue_recvfromà ret_msgid +17115hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýcÒBLpˆð+ç2r¿~°Ïbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKœ øÿ–Íñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¾µx¹ãnIͨPÝ–fM²ÏD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºªõ݉—Íñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬’úyÁc +1N{¿dOb&bJ´ÏD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºªõ݉—Íñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9aOš<¦@Š°VôÞ›§¶ÏD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºªõ݉—Íñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýd¼X¾cþH%‹˜Øˆ‹ì˜¸ÏD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºªõ݉—Íñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…­VëTF¯¼‹W„ â/QºÏ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ’›´Íñ‹+aue_lseek¼®chostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýoµ;ãDM±Y²jˆ¼ÏJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvºæ’›´Íñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýI¦¼–ÙN㮣ésdë­ŸÀÏ ²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvºŒ žíÍñ‹+20ÜS7[AIF¬•pd± (ýs µjãÀF/NpÍü¾ÏF²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvºŒ žíÍñ‹+aue_recvmsg¨ret_miouuidH17a645c0-467e-11e9-aed1-080027fc76bahostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1282address172.217.9.4port0execping20ÜS7[AIF¬•pd± (ý¢'”æ,Eè ©Û•uÚÂÏb²œ ¤‡ðF~é®Ñ'üvºí( ö~R¶ ~{‚~¯Œ žíÍñ‹+aue_writezhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execping20ÜS7[AIF¬•pd± (ý¿ÖM.DF¼x€4¡±ÄÏ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uü°Þ÷¤Íñ‹+aue_lseekºchostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýh ìËÞC ª"Ô¤WBÆÏJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvº¾ÄŽ¥Íñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý•Mª¹»ñEº•ä_fM@SÄÊÏ ²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¾€Ö°¥Íñ‹+20ÜS7[AIF¬•pd± (ý$ŽnÒgÈDú›.'¦"ŒÛ‚ÈÏF²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¾€Ö°¥Íñ‹+aue_recvmsg¨ret_miouuidH17a645c0-467e-11e9-aed1-080027fc76bahostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1282address172.217.9.4port0execping20ÜS7[AIF¬•pd± (ý( UÅCª»5;Ò`yéuÌÏb²œ ¤‡ðF~é®Ñ'üvºí( ö~R¶ ~{‚~¯¾€Ö°¥Íñ‹+aue_writezhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execping20ÜS7[AIF¬•pd± (ýÜö®žå;DH¯Ÿ)-­x_ÎÏ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒ¬žó¥Íñ‹+aue_lseekºchostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý eÚ_«D¸÷ç§-/KÒÏ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒ¬žó¥Íñ‹+20ÜS7[AIF¬•pd± (ýþF²ËØ@uµÙ!¾Ù%/ÐÏ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒ¬žó¥Íñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,M¨Ï iG‡³vq6þÒs–ÖÏ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒ¬žó¥Íñ‹+20ÜS7[AIF¬•pd± (ý%¬^©^Jh² û]T²LqÔÏ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒ¬žó¥Íñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)™´ E8KrŒâ\@õ»îÚÏ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒ¬žó¥Íñ‹+20ÜS7[AIF¬•pd± (ýïv§J-©¤¯ç3‡¥°ØÏ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒ¬žó¥Íñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýžÄ¦D¼O H¨‰?ÐÎÒÜÏ:‚œ Ê +ÙKFzé®›'üvºŒ¬žó¥Íñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@K‡ÛG‹’iÖþÏ›¤ÞÏ@ö Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Œ¬žó¥Íñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{±ué¬PM®ƒXêHïéI†àÏ@ö Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒ¬žó¥Íñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýD½ù€wÞN>£ÛVpŸ½âÏ@ö Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒ¬žó¥Íñ‹+aue_preadº-hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU½ +H%ŒJŽZ@Á¼ˆõäÏb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŒ¬žó¥Íñ‹+aue_write¤.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+! kÑFSµŸKºzîðæÏbö Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŒ¬žó¥Íñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôŒG„$vIꪗü0ìéŽ+èÏ@ö Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Œ¬žó¥Íñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýB}"ÿé/C÷žJ;áÿ…c7êÏ@ö Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒ¬žó¥Íñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýG"aÞ!ØFØ—•à åãìÏ@ö Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒ¬žó¥Íñ‹+aue_preadþ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠýØà¢VF[‰–ÉB¦½6+îÏb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŒ¬žó¥Íñ‹+aue_writeè hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýi“¢¯@€ŸÙ°îª ððÏbö Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŒ¬žó¥Íñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰OgkTÿK…¤Kœ­×.òÏ@ö Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Œ¬žó¥Íñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýrÃì6L¹³‰=·@…Ñ"ôÏJö Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºŒ¬žó¥Íñ‹+aue_sendtoà +ret_msgid +17116hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&¹´ ¤IÍŽ´BXÑ®†öÏDê› µ dôFzé®{'üvºµ CjFzé®{'üvºŒ¬žó¥Íñ‹+aue_recvfromà ret_msgid +17116hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýˆòŠÖ)DJ¡çCWß6øÏbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKŒ¬žó¥Íñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý·W¢e¶âOD”ð|õ’ñF•úÏD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ÷ˆý¥Íñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐuÝ"ïK0†ú´[®A^–üÏD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ÷ˆý¥Íñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýäªL_þA)‡;:(tÚþÏD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ÷ˆý¥Íñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!¶ÛžœbLUªÃð,(©Ç|€ÐD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ÷ˆý¥Íñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼h~bA®M_˜YžSŸ9á‚Ð@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eäÒ ©Íñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýv8,#®}Np»Y¬ÕU^ª/„ÐJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºäÒ ©Íñ‹+aue_sendtoÚ +ret_msgid +17117hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýJý’ÉHË•ßöu]Y¥ä†ÐJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºäÒ ©Íñ‹+aue_sendto˜ +ret_msgid +17118hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý䶈‚Z«J„¦Ý?L=AˆÐJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºäÒ ©Íñ‹+aue_sendto¬ +ret_msgid +17119hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÓ‰;{‹Le™sÎ¥vëAoŠÐJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºäÒ ©Íñ‹+aue_sendto˜ +ret_msgid +17120hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý† +Ã+AÀdZ#îÉ“ŒÐDê› µ dôFzé®{'üvºµ CjFzé®{'üvºäÒ ©Íñ‹+aue_recvfromÚ ret_msgid +17117hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýgþÑËõOœ½ñÝq!z.ŽÐDê› µ dôFzé®{'üvºµ CjFzé®{'üvºäÒ ©Íñ‹+aue_recvfrom˜ ret_msgid +17118hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýêÈãM‰BL¶U¢?=O XÐDê› µ dôFzé®{'üvºµ CjFzé®{'üvºäÒ ©Íñ‹+aue_recvfrom¬ ret_msgid +17119hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý"€¼ªLb‡’ ÄÈxqk’ÐDê› µ dôFzé®{'üvºµ CjFzé®{'üvºäÒ ©Íñ‹+aue_recvfrom˜ ret_msgid +17120hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý^)Ù-J.„h¢VÓ?Ç”Ð0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄûùìÍñ‹+aue_lseekÀôchostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ,ƒMÈI<§±¢r„‚–ÐJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvºÄûùìÍñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ýˉÊ,ÊJ­Ò@ø‰ýšÐ ²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvº²»ý¬Íñ‹+20ÜS7[AIF¬•pd± (ý|h +ÚRDGV°ŠØrì ˜ÐF²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº²»ý¬Íñ‹+aue_recvmsg¨ret_miouuidH17a645c0-467e-11e9-aed1-080027fc76bahostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1282address172.217.9.4port0execping20ÜS7[AIF¬•pd± (ý&Ú01_I=“+áTÊn(¸œÐb²œ ¤‡ðF~é®Ñ'üvºí( ö~R¶ ~{‚~¯²»ý¬Íñ‹+aue_writezhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execping20ÜS7[AIF¬•pd± (ýÔú¦ýþBX„NÏ|ǵ#3žÐ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÐ܇´Íñ‹+aue_lseek¼€dhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×$yO +±èÌKzM»¹ ÐJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvºà—Ø´Íñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý¾vÿÉ4lAçš!·ÉRk¥e¤Ð ²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvº‹çÀ´Íñ‹+20ÜS7[AIF¬•pd± (ý±÷jyJaLžì©ÉÌ<¢ÐF²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº‹çÀ´Íñ‹+aue_recvmsg¨ret_miouuidH17a645c0-467e-11e9-aed1-080027fc76bahostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1282address172.217.9.4port0execping20ÜS7[AIF¬•pd± (ý¼éÞå¶5B󙶯Ü}té¦Ðb²œ ¤‡ðF~é®Ñ'üvºí( ö~R¶ ~{‚~¯‹çÀ´Íñ‹+aue_writezhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execping20ÜS7[AIF¬•pd± (ý€)’`7E¬g¢ ç ‰9¨Ð0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒïåæ´Íñ‹+aue_lseek¼€dhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[”ÀŽ–E|•¿u£cg*ØæÐ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÔ£œº¿Íñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýàÌô³ÿFãJ‹Í@¯ÇéèÐJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔ£œº¿Íñ‹+aue_sendtoÚ +ret_msgid +17122hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý5T¬{¬F¶”«]ø¤|øêÐJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔ£œº¿Íñ‹+aue_sendto˜ +ret_msgid +17123hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý^š{³H ‚@„nå=hìÐJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔ£œº¿Íñ‹+aue_sendto¬ +ret_msgid +17124hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýlEL7‹Iª˜ä «óÄÿîÐJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔ£œº¿Íñ‹+aue_sendto˜ +ret_msgid +17125hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýØ{Ï´ èM`‡Rª[%ðÐDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔ£œº¿Íñ‹+aue_recvfromÚ ret_msgid +17122hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÎ-,ÆA»çÊ™^­òÐDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔ£œº¿Íñ‹+aue_recvfrom˜ ret_msgid +17123hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýñðoâ9 Bä¼Ò˜¹ú2ôÐDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔ£œº¿Íñ‹+aue_recvfrom¬ ret_msgid +17124hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýQ37AH)›| +äèÊBöÐDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔ£œº¿Íñ‹+aue_recvfrom˜ ret_msgid +17125hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÁU_#¸C{‘$‘Ë*Á;øÐ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌÝÀŽÃÍñ‹+aue_lseeköÆdhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£Z°-M@â‰ùŠ²½ÝíúÐJ²œ ¤‡ðF~é®Ñ'üvº¦CáF~é®Ñ'üvºöûŒ—ÃÍñ‹+aue_sendto€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execping20ÜS7[AIF¬•pd± (ý˜Ðÿæ׬FÛ¨qU{øÊ„ZþÐ ²œ ¤‡ðF~é®Ñ'üvº¦EÀF~é®Ñ'üvº¦EÀF~é®Ñ'üvº°õçÆÃÍñ‹+20ÜS7[AIF¬•pd± (ýÆkÇYa‰Fü¸ÌBà­AùÏÎîªÑ@ú Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà©òÙÃÍñ‹+aue_preadÔ-hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\œžó%K«»Ï53чPU¬Ñb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºà©òÙÃÍñ‹+aue_write¾.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýg©µ6¬@‡gÛ¶G.Ú®Ñbú Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áà©òÙÃÍñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜Q¸ÌŸF(¦XÑà4i"k°Ñ@ú Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V à©òÙÃÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷ëˆ5ýB•¬ÛxXkòH²Ñ@ú Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà©òÙÃÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇ–«’ÜC@¥Ÿ¢i‚çG´Ñ@ú Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà©òÙÃÍñ‹+aue_preadÖhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdqÁ° LS»(¾Ç{Éû¶Ñb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºà©òÙÃÍñ‹+aue_writeÀhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(ÔBƒ‚G®åëc©ú¸Ñbú Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áà©òÙÃÍñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ¸‰åJµ‡®^£¥\ºÑ@ú Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V à©òÙÃÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýš C€€ÖB²žüÏ—nÓ¼ÑJú Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºà©òÙÃÍñ‹+aue_sendtoà +ret_msgid +17126hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*Å­Ž*†H7»êÆìEù¾ÑDê› µ dôFzé®{'üvºµ CjFzé®{'üvºà©òÙÃÍñ‹+aue_recvfromà ret_msgid +17126hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý˜+2g…Kx¶?C07öÀÑbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKà©òÙÃÍñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¨Äñb³Fó´V©wÊ8ðâÂÑD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºøÛ°ãÃÍñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤Ê÷¨IýI-€MËÍ4eÄÑD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºøÛ°ãÃÍñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßýdöpgG!ª4žzHÁóöÆÑD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºøÛ°ãÃÍñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýhiu§? +D‘ˆË•k‰æÈÑD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºøÛ°ãÃÍñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸Sh§‡Lɺ¡è:•ÉÄÊÑ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈ­äÊÍñ‹+aue_lseek¢€ehostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýg¿¤cz0I–©¡‚rlnKaÌÑ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”»º§ÒÍñ‹+aue_lseekø…ehostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]ô‚º^tL³€#)¥$àÞÎÑ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U– ùÍÒÍñ‹+aue_lseekø…ehostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýTãð sA–¬¾E­· ÒÑ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U– ùÍÒÍñ‹+20ÜS7[AIF¬•pd± (ý-M³Ü Aa¢ˆš½gìx#ÐÑ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U– ùÍÒÍñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@[Ù”šFÈi,qÞá%ôÖÑ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U– ùÍÒÍñ‹+20ÜS7[AIF¬•pd± (ýo÷¯ +KÖ@Rª »VEÔÑ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U– ùÍÒÍñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýF¢‡“ÄèE<€ºâüÄÚÑ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U– ùÍÒÍñ‹+20ÜS7[AIF¬•pd± (ýiŸ9ÿ¦N‘›çEí[ÿ2ØÑ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U– ùÍÒÍñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#É£@™…êR}‚ê(wÜÑ:‚œ Ê +ÙKFzé®›'üvº– ùÍÒÍñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/?OŽp¤B´’žÿClv`ÞÑ@ü Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V – ùÍÒÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýL[ðØÄQD¼¶R‘B(ªZËàÑ@ü Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U– ùÍÒÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*&dŽÐH¿Y}ëmÞÅâÑ@ü Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U– ùÍÒÍñ‹+aue_pread¤9hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.“ Èj¼BR‚-èQÙf`aäÑb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº– ùÍÒÍñ‹+aue_writeŽ:hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýº=¯:LL®¯À—ÑìnèæÑbü Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á– ùÍÒÍñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýϤ왱[B<¿áC°Mt±ÌèÑ@ü Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V – ùÍÒÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7ªkm IÜ‘±J]a¦ êÑ@ü Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U– ùÍÒÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýö¡ÌMEEŸóùDPTùìÑ@ü Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U– ùÍÒÍñ‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍ^yinF£ŸM¬.Ù ,îÑb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº– ùÍÒÍñ‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7—âpžwNH¡cÑŠ#ÈGnðÑbü Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á– ùÍÒÍñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•6tgB®|rÐçBÆbòÑ@ü Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V – ùÍÒÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘óqÙ>©H»¤"¥¼o(^ôÑJü Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº– ùÍÒÍñ‹+aue_sendtoà +ret_msgid +17127hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅ¡¼+ã§N÷¬fƒÍOÒ'öÑDê› µ dôFzé®{'üvºµ CjFzé®{'üvº– ùÍÒÍñ‹+aue_recvfromà ret_msgid +17127hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýõ1ûÓI)¥™° +-’@øøÑbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK– ùÍÒÍñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý˜N\º$D8Š+½8͘úÑD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºìœýÖÒÍñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕßïÍ€˜A…ÍÕàÞ;üÑD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºìœýÖÒÍñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýP¯tÃ"mFcYW%â±nþÑD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºìœýÖÒÍñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚;BŽW@ƒ‘ÑGIá]€ÒD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºìœýÖÒÍñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìçØC­@÷œOÆÖMlž—‚Ò@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eòëŸèÕÍñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÌLÆ„1DÞ tX©‚Á„ÒJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºòëŸèÕÍñ‹+aue_sendtoÚ +ret_msgid +17128hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý{Am)ðLo„÷P·¤¼Í܆ÒJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºòëŸèÕÍñ‹+aue_sendto˜ +ret_msgid +17129hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýTY‡ûºÈC'‰WWšã R…ˆÒJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºòëŸèÕÍñ‹+aue_sendto¬ +ret_msgid +17130hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÝc?Fï\I·¹I†•œI¦ŠÒJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºòëŸèÕÍñ‹+aue_sendto˜ +ret_msgid +17131hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬¦ûý÷Ô¦f¹I³‹Åu” +/MŒÒDê› µ dôFzé®{'üvºµ CjFzé®{'üvºòëŸèÕÍñ‹+aue_recvfromÚ ret_msgid +17128hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÚƒT0øØB?³”©|¤¿VˆŽÒDê› µ dôFzé®{'üvºµ CjFzé®{'üvºòëŸèÕÍñ‹+aue_recvfrom˜ ret_msgid +17129hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýX;l.¥E¼ˆÞêÊ• –ÒDê› µ dôFzé®{'üvºµ CjFzé®{'üvºòëŸèÕÍñ‹+aue_recvfrom¬ ret_msgid +17130hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ývžøR¾E´™ÿ-¼ÿ’ÒDê› µ dôFzé®{'üvºµ CjFzé®{'üvºòëŸèÕÍñ‹+aue_recvfrom˜ ret_msgid +17131hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýBÉÆiE«Bn’4þ¬F¾E”Ò0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ¯ôóÙÍñ‹+aue_lseek¶¸ehostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜt½My–ý­îÂìw1–Ò0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U’¹À·áÍñ‹+aue_lseek’¾ehostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZó‘´}Bì€î‚;cŸú‹˜Ò0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĪŽÁáÍñ‹+aue_lseek’¾ehostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%@ñŽwGЃ²8 MWš<œÒ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UĪŽÁáÍñ‹+20ÜS7[AIF¬•pd± (ý–0£X/™Dø 99µ½%ðšÒ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĪŽÁáÍñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇ^Ôj7>H±²;rû›ðja Ò ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UĪŽÁáÍñ‹+20ÜS7[AIF¬•pd± (ýW˜¶¥CœJN¼À¨½˜~ºžÒ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĪŽÁáÍñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆ9[iõC˜–KIâsКU¤Ò ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UĪŽÁáÍñ‹+20ÜS7[AIF¬•pd± (ý2õɹ41M› +Ü×S•¢Ò@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĪŽÁáÍñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@YÜ¥FÅE±—Îͤ(̦Ò:‚œ Ê +ÙKFzé®›'üvºÄªŽÁáÍñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€[*Ö9ÆE­ÂîpxýŨÒ@þ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ĪŽÁáÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓ… äíE¼£Ñãy¡{9—ªÒ@þ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĪŽÁáÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛV¹>ÕŒO>´À>üUÚ̬Ò@þ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĪŽÁáÍñ‹+aue_pread¶2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_ô .è²HWº?#¿'¬‡®Òb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÄªŽÁáÍñ‹+aue_write 3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšþ¨šhšCÒ•éã ðãöÓ°Òbþ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áĪŽÁáÍñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýM3ÿ²Çr@î®[^¶-|ƒ†²Ò@þ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ĪŽÁáÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýE?EÓšK²€zÉñÄjˆ±´Ò@þ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĪŽÁáÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýfƒæhUBX£”P€e°i¶Ò@þ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UĪŽÁáÍñ‹+aue_preadÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍ?á×spIQ™ ;ÀH'FI¸Òb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÄªŽÁáÍñ‹+aue_write¾hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´vü`L0§O>ŸÖ‹R ºÒbþ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áĪŽÁáÍñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý p«Mj&L‚¼I å;ƒ¼Ò@þ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ĪŽÁáÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙé0 ³ÎE&•‰Áë³ÇоÒJþ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÄªŽÁáÍñ‹+aue_sendtoà +ret_msgid +17132hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×Ès{Óˆ@ ‚¿Ä«Ó¯·ÀÒDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÄªŽÁáÍñ‹+aue_recvfromà ret_msgid +17132hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý÷(Ó#¯I†·2óaÌ{ÄÂÒbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKĪŽÁáÍñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÚ±:ŽLr³Àå,œŸ¤ÄÒD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ£°ÊáÍñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×tÖùMAr•ç­¼$¦ÐÆÒD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ£°ÊáÍñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦(ðÜ£"A%®à¬§ƒÔÈÒD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ£°ÊáÍñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’sË~E2…ºí”) +âêÊÒD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ£°ÊáÍñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=è¾ÄÃ@s‘ûz7\R÷ÉÌÒ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº€ðƒéÍñ‹+aue_lseek˜äehostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýå_IöÇLw‹P†ú¼dýQÎÒ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eâÛ¦”ìÍñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý̸-–οF? ÞÅä¥n¦ÐÒJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºâÛ¦”ìÍñ‹+aue_sendtoÚ +ret_msgid +17133hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýmæ±F–?öE¬îbÒÒJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºâÛ¦”ìÍñ‹+aue_sendto˜ +ret_msgid +17134hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý»½O I‡™£²ì_B ÔÒJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºâÛ¦”ìÍñ‹+aue_sendto¬ +ret_msgid +17135hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýa„ðŽüO<1€Œï•0ÖÒJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºâÛ¦”ìÍñ‹+aue_sendto˜ +ret_msgid +17136hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÎÁwÏ­Jv¬Ô\x¿þ’ØÒDê› µ dôFzé®{'üvºµ CjFzé®{'üvºâÛ¦”ìÍñ‹+aue_recvfromÚ ret_msgid +17133hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‡8(©HCÀ’MËü–ÍŸ/ÚÒDê› µ dôFzé®{'üvºµ CjFzé®{'üvºâÛ¦”ìÍñ‹+aue_recvfrom˜ ret_msgid +17134hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý5iWíYN·¦\!!b¥ÜÒDê› µ dôFzé®{'üvºµ CjFzé®{'üvºâÛ¦”ìÍñ‹+aue_recvfrom¬ ret_msgid +17135hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‹¿™ŒðAP‘a›§çYÞÒDê› µ dôFzé®{'üvºµ CjFzé®{'üvºâÛ¦”ìÍñ‹+aue_recvfrom˜ ret_msgid +17136hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÌ’¯¬fJ‡ªÞâlzG¿àÒ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°—ð´ðÍñ‹+aue_lseek˜äehostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYÛBôÆ3N€šÅ¹v>»OäÒ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U°—ð´ðÍñ‹+20ÜS7[AIF¬•pd± (ý/¥|K©€K=´h‰g<–âÒ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°—ð´ðÍñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõ5Ÿ G߯£s˜€UCùèÒ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U°—ð´ðÍñ‹+20ÜS7[AIF¬•pd± (ý "¬²ééF-‰N¯LŽ’úoæÒ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°—ð´ðÍñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýd_˜0Dá‚âæ¶`êÒ:‚œ Ê +ÙKFzé®›'üvº°—ð´ðÍñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–AÝ¥(Mä²2VU¼PˆìÒ@€ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V °—ð´ðÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýȵY‘FO zÂŽµ!­îÒ@€ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°—ð´ðÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýzÌ\]0GA@-ð CðÒ@€ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°—ð´ðÍñ‹+aue_preadþ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýn×;ÊÂ@ĺ^I¦ÈœòÒb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº°—ð´ðÍñ‹+aue_writeè&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýUk}*×4D+—cÛäÝâØôÒb€ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á°—ð´ðÍñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—J8Ç®IU¡µ[&?aöÒ@€ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V °—ð´ðÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1ºSÔœCªƒ#T\£óA¾øÒJ€ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº°—ð´ðÍñ‹+aue_sendtoà +ret_msgid +17137hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýªÕ3pûhOZ HKÿoõÔúÒDê› µ dôFzé®{'üvºµ CjFzé®{'üvº°—ð´ðÍñ‹+aue_recvfromà ret_msgid +17137hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýCƒþ.Jè­ý"t¯v¥úüÒbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK°—ð´ðÍñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýèueØ2BF¯Ík 7‚þÒD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº°—ð´ðÍñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýØ”­³ÕúMŒfA‰)n¨€ÓD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº°—ð´ðÍñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀ×ÇxxIS­5J³”žÈŒ‚Ó0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U‚ÀÐðÍñ‹+aue_lseek¾ŽfhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýì&åž/.C‚¹”@ŒõÆì„Ó0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄöô“øÍñ‹+aue_lseek’”fhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýW,©PO¬3çÛ^Œ‚†Ó0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÑƧÿÍñ‹+aue_lseek’”fhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýó—'óŸDq™Îœ‡Šï{ŠÓ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆÑƧÿÍñ‹+20ÜS7[AIF¬•pd± (ý›¸„.‰ÉOM/Z¿`›×ˆÓ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÑƧÿÍñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýêÝoÈ!¿Ns³|ä2±‡ÍŽÓ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆÑƧÿÍñ‹+20ÜS7[AIF¬•pd± (ý¬nž¨ ÷CUŠG‚…“ŒÓ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÑƧÿÍñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAwæ¢N +¿ôÈ–7æiü’Ó ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÆÑƧÿÍñ‹+20ÜS7[AIF¬•pd± (ý»âæì4IÈŒbI„¾¸|Ó@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÑƧÿÍñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<ŽêVFªŸVj±ðyÕ”Ó:‚œ Ê +ÙKFzé®›'üvºÆÑƧÿÍñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýà +cÂJK§¾æ:¦±Ñ²–Ó@‚ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÑƧÿÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­-æ¨ÉòE?ˆâDÀm}˜Ó@‚ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÑƧÿÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£A?æÉmD +—.m‰XGšÓ@‚ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÑƧÿÍñ‹+aue_preadž*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•ìJ)® H:ƒö(ØãUÆœÓb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÆÑƧÿÍñ‹+aue_writeˆ+hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿R©ßöLz€K ÿ†yDžÓb‚ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆÑƧÿÍñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖû 4 Cd˜ž«&ðM Ó@‚ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÑƧÿÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™ÚBPTCÒ´fûVÄS¢Ó@‚ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÑƧÿÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­`ß^ÆIu¹gjä ’¯‡¤Ó@‚ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆÑƧÿÍñ‹+aue_preadÌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀø±ò®Gm°ô˜õ¦Ób Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÆÑƧÿÍñ‹+aue_write¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=íäO.l¤ó(0Ö¨Ób‚ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÆÑƧÿÍñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢C0jJ¨ÜéLÑc–ªÓ@‚ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÆÑƧÿÍñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýS-³råC÷ 9£Ý¨IW¬ÓJ‚ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÆÑƧÿÍñ‹+aue_sendtoà +ret_msgid +17138hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%æ`=+Dz™7ÅÈëñs®ÓDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆÑƧÿÍñ‹+aue_recvfromà ret_msgid +17138hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý "¥Ž­D ®NÝ%­HOÉ°Óbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÆÑƧÿÍñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýFÐ`ÌOã¾ ððòÓ~ã²ÓD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÆÑƧÿÍñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýsEŠÄŒèC¢–jO›×¯´ÓD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÆÑƧÿÍñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý "ê5.YB½”(@~&u]ƒ¶ÓD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠÂ±ÿÍñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬¢ûÙ˜ù!à;Mn‡ÈÇxB¸¸ÓD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠÂ±ÿÍñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘£³îXÏMžö›<¿PºÓ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒóÅàÿÍñ‹+aue_lseekžºfhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`Lã©QoBi“"2ÌÈ|š¼Ó@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eȪâÁ‚Îñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý¯wdÞGŠŠspUQš¾ÓJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÈªâÁ‚Îñ‹+aue_sendtoÚ +ret_msgid +17139hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý—J=-§E ¶A +"=ÈÀÓJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÈªâÁ‚Îñ‹+aue_sendto˜ +ret_msgid +17140hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý ˾Lw–ÀoÇí¾ÂÓJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÈªâÁ‚Îñ‹+aue_sendto¬ +ret_msgid +17141hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¿Îö[ ÂMÒCýø3SâÄÓJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÈªâÁ‚Îñ‹+aue_sendto˜ +ret_msgid +17142hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¢k’ˆhEO¾xY¡ã«ÔÆÓDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÈªâÁ‚Îñ‹+aue_recvfromÚ ret_msgid +17139hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýšÉ,SªœBg¿Ñk7/pÈÓDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÈªâÁ‚Îñ‹+aue_recvfrom˜ ret_msgid +17140hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýlÁ€š|N¥šh`#THÊÓDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÈªâÁ‚Îñ‹+aue_recvfrom¬ ret_msgid +17141hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý6s!9 µN8‘}fFý¬ØÕÌÓDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÈªâÁ‚Îñ‹+aue_recvfrom˜ ret_msgid +17142hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýQ0%çNr¿ ‡F¶OÎÓ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UšÓƤ‡Îñ‹+aue_lseekôÌfhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +§Ô¤ZOU§8zÇ#ÄÍ;ÐÓ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UúöÞšŽÎñ‹+aue_lseekôÌfhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœóˆ$×Jm”–ùÞôÔÓ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UúöÞšŽÎñ‹+20ÜS7[AIF¬•pd± (ýq¤¢C~ÝKƒ‰ò»W >­dÒÓ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UúöÞšŽÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@`ò€Ü“@ѱ4Æ ”a$!ØÓ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UúöÞšŽÎñ‹+20ÜS7[AIF¬•pd± (ýÞW}75_Dý°ì](˜%¿«ÖÓ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UúöÞšŽÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýªæC®+ùIÄ·ÀuõÓF·ˆÜÓ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UúöÞšŽÎñ‹+20ÜS7[AIF¬•pd± (ý—¹ÖæBvƒ6d©÷:“HÚÓ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UúöÞšŽÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨æÛ­šKø†s,qémÐKÞÓ:‚œ Ê +ÙKFzé®›'üvºúöÞšŽÎñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%Aö_'‰@«=×ÄqKƒÄàÓ@„ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V úöÞšŽÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý88»IFK³Æ‰ÍÀâÓ@„ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UúöÞšŽÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ývþï#Dý ®vwȾαäÓ@„ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UúöÞšŽÎñ‹+aue_pread„&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýß(Ô…‡G­39ïãw©æÓb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºúöÞšŽÎñ‹+aue_writeî&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞ³gþA}9ÚDP#èÓb„ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áúöÞšŽÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9í<û,pMópßrϬêÓ@„ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V úöÞšŽÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµ7õ™MMöµÂEE¼ö“ìÓ@„ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UúöÞšŽÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQ«¸ ìFJlˆ¿=^MÊêáîÓ@„ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UúöÞšŽÎñ‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýH3.„NŒ^ ñB§NðÓb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºúöÞšŽÎñ‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·:¹¿©ÒLE”ÒSêy•òÓb„ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áúöÞšŽÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖÝ;häRMì‰)G¶h}™)ôÓ@„ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V úöÞšŽÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“ŸŠp@•¯¥š‚ÞÑàöÓJ„ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºúöÞšŽÎñ‹+aue_sendtoà +ret_msgid +17143hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýIKÖùãÃFhˆÄ"~E¶àÄøÓDê› µ dôFzé®{'üvºµ CjFzé®{'üvºúöÞšŽÎñ‹+aue_recvfromà ret_msgid +17143hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‡xØk*pL<±¼~”<ÕúÓbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKúöÞšŽÎñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýBïYd|Hw¬Ž£^ÖÀüÓD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºúöÞšŽÎñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«Q%Mà MNe±ŒTRþÓD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºúöÞšŽÎñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹Ý\‘ tK©ÂÂX1ͧ€ÔD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº°ç¤¤ŽÎñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0HÝ>rgF똥7ÒöKž‚ÔD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº°ç¤¤ŽÎñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñuèž“XB䀲ì³ohl•„Ô0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U⇸ðŽÎñ‹+aue_lseekôòfhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=¿*þ3FK—·Yè¯Ó†Ô0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬Ì̳–Îñ‹+aue_lseekÈøfhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcM¼Â€Fë· ÅJ¥iˆÔ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¶öÈî˜Îñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýø\ö¦lGÞ‰íUÏzØáŠÔJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¶öÈî˜Îñ‹+aue_sendtoÚ +ret_msgid +17144hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýMo¤tª†Nk”íÇër¥´¤ŒÔJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¶öÈî˜Îñ‹+aue_sendto˜ +ret_msgid +17145hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý‚ááP@¡OEªUÿDt ŽÔJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¶öÈî˜Îñ‹+aue_sendto¬ +ret_msgid +17146hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýµ(”ÎáÙO÷žP<Š¥?ôWÔJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¶öÈî˜Îñ‹+aue_sendto˜ +ret_msgid +17147hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýdœDsH±²#™"z›“%’ÔDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¶öÈî˜Îñ‹+aue_recvfromÚ ret_msgid +17144hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý[ý J‚Hy‘ã7¯O…”ÔDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¶öÈî˜Îñ‹+aue_recvfrom˜ ret_msgid +17145hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýBö3ŒK¾’#Œ/&ßwš–ÔDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¶öÈî˜Îñ‹+aue_recvfrom¬ ret_msgid +17146hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýža7§„G¿‚v¯Z‰Ã˜ÔDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¶öÈî˜Îñ‹+aue_recvfrom˜ ret_msgid +17147hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýPZ/›;OAR†ÎÀ„ÚH +gšÔ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌسŽÎñ‹+aue_lseekÈøfhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáay\„þAÐKFþpóžÔ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÌسŽÎñ‹+20ÜS7[AIF¬•pd± (ýÄ+XâÛ!I“€Ü)Ô:™ØœÔ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌسŽÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýVS® CÈ™ w汓Ó¢Ô ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÌسŽÎñ‹+20ÜS7[AIF¬•pd± (ý¾Ïrž!³Nf“àŒ†z­å Ô@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌسŽÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçDn0,ªNš¹cùdˆî'¦Ô ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÌسŽÎñ‹+20ÜS7[AIF¬•pd± (ýwïÛ93Aדã 1Jš£‹¤Ô@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌسŽÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýE„5 gõG½¸%ÌEÊ´-¨Ô:‚œ Ê +ÙKFzé®›'üvºÌسŽÎñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý豩“ª @ª”©PëÍÍ)UªÔ@†ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÌسŽÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýë×£eCÝ—Š×KH¬Ô@†ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌسŽÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.\q£•;Iú @©Õ_ƒŽ®Ô@†ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌسŽÎñ‹+aue_preadø%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5[iþâL߃l½æ:¨(p°Ôb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÌسŽÎñ‹+aue_writeâ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€y¼Î•ÃB*Œø—1‚Lö²Ôb†ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÌسŽÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛÃ.þþO4‘Þ¹³ÿü­_´Ô@†ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÌسŽÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆç³ÕØâK© gr(Ý–¶Ô@†ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌسŽÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýå$¿XÒ´Fš…T²-ɘî¸Ô@†ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌسŽÎñ‹+aue_preadÌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/ï©Q'äH–.dMòÀºÔb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÌسŽÎñ‹+aue_write¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`óƒ`Ñ8F¼&LÊ ÊÓ©¼Ôb†ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÌسŽÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýîª ò£TEŠ¯ª¶v íî¾Ô@†ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÌسŽÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤Ñ]sÎD֌Ӗ ù¢FÀÔJ†ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÌسŽÎñ‹+aue_sendtoà +ret_msgid +17148hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½¿‘‡†¦F}†Ä={Lé«ÂÔDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÌسŽÎñ‹+aue_recvfromà ret_msgid +17148hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý`ÀŸUTO·‰×O8b‰ÄÔbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÌسŽÎñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýn±-XÒ?Lص)‹>i#_ÆÔD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºàÇÅ—Îñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎ×>ðEC—ýqŠcØÍÈÔD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºàÇÅ—Îñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇ®…@hŒFz˜†£w˜ü-OÊÔD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºàÇÅ—Îñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýC…þSÌH‹ÏΑAqWÌÔD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºàÇÅ—Îñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸(€ÇžNS‹ ŸŠ2š9‡ÎÔ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UöØ·€žÎñ‹+aue_lseekª¬ghostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýK”{[áêC"°IZDÛq”ÐÔ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆˆÄ¥Îñ‹+aue_lseekþ±ghostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1ðsÝþN®³µTpŠ´T ÒÔ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâûǬÎñ‹+aue_lseekþ±ghostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýüZ$VMã¡l‰râÈŽˆÖÔ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UâûǬÎñ‹+20ÜS7[AIF¬•pd± (ýhù®—@O‡üú[ÔÔ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâûǬÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýaÅt}3gAOëÔhiPùlÚÔ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UâûǬÎñ‹+20ÜS7[AIF¬•pd± (ý÷Ôv2qú@²‰ÖoÈiM»ÕØÔ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâûǬÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýETˆl@ƒ”^³@ ÚÞÔ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UâûǬÎñ‹+20ÜS7[AIF¬•pd± (ýÊ€Eo SEć»ÇºÅœÜÔ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâûǬÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý];mtDA*™úw`€-ÆÙàÔ:‚œ Ê +ÙKFzé®›'üvºâûǬÎñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"YàT˜ NO†î零 ²lâÔ@ˆž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V âûǬÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®ÆúDõ»?zèJÔ¦·ˆérÿäÔ@ˆž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâûǬÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýù¡âW;žEÔ©¶y˜¬ÔTæÔ@ˆž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâûǬÎñ‹+aue_preadÚ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý Z¤r?ËIšµ£Ûz ´|èÔb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâûǬÎñ‹+aue_writeÄ4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåÅÑÿE|·§Œ½"aãùêÔbˆž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áâûǬÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«&5Ø›Fj²Ù5GÀ¤Œ3ìÔ@ˆž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V âûǬÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆ™GéE‹ŽPÄú],ÙîÔ@ˆž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâûǬÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý U48y6BÒŠ$xÑqØåðÔ@ˆž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâûǬÎñ‹+aue_preadÌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI#]A¨RBUžü,­òÔb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâûǬÎñ‹+aue_write¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[Ö\kéGi‘\ûܯwDôÔbˆž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áâûǬÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑ‹AºãbA˜´;o¿ám[öÔ@ˆž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V âûǬÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý »fBJΨøIj—øÔJˆž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºâûǬÎñ‹+aue_sendtoà +ret_msgid +17149hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«mp¥ÊL—·zºÕsÎ2úÔDê› µ dôFzé®{'üvºµ CjFzé®{'üvºâûǬÎñ‹+aue_recvfromà ret_msgid +17149hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÌlïúæErˆÂ†èúÙ®CüÔbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKâûǬÎñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý/“L¤á?Bq´rà)HÂþÔD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠÞõŠ¬Îñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*Ù.»ÇLv¦]®¶‘Ã[€ÕD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠÞõŠ¬Îñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýC‹„15;@*‰¢x©úx¥‚ÕD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠÞõŠ¬Îñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹žxûɤBW™ž¡vŒ B>„ÕD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠÞõŠ¬Îñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +™EABSMÉ“èô¦²Šåê†Õ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uܹµ­Îñ‹+aue_lseekþ×ghostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉ]Pñå.H㆘´îãN$ˆÕ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e”º®›¯Îñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýi›‹IK~—ëˆ<4ÕJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº”º®›¯Îñ‹+aue_sendtoÚ +ret_msgid +17150hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýèÚù×xVEqŠ®3ŽþìŒÕJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº”º®›¯Îñ‹+aue_sendto˜ +ret_msgid +17151hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÍ@ªâM¶‰å9¡Î’o7ŽÕJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº”º®›¯Îñ‹+aue_sendto¬ +ret_msgid +17152hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýêÅG“Dñ’·º^[ ÕJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº”º®›¯Îñ‹+aue_sendto˜ +ret_msgid +17153hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý m9ŽÜEŸ³ppÛåÙ|’ÕDê› µ dôFzé®{'üvºµ CjFzé®{'üvº”º®›¯Îñ‹+aue_recvfromÚ ret_msgid +17150hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý³m8ç8BÖLûÁîê‹”ÕDê› µ dôFzé®{'üvºµ CjFzé®{'üvº”º®›¯Îñ‹+aue_recvfrom˜ ret_msgid +17151hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýMï4¨RE›†Ån@d8(Á–ÕDê› µ dôFzé®{'üvºµ CjFzé®{'üvº”º®›¯Îñ‹+aue_recvfrom¬ ret_msgid +17152hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýw¿Y·C ³ë>Ñ#!Õ˜ÕDê› µ dôFzé®{'üvºµ CjFzé®{'üvº”º®›¯Îñ‹+aue_recvfrom˜ ret_msgid +17153hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¡—mò¦¿GŒ]¸(ÇšÕ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U‚‚ÓÓ´Îñ‹+aue_lseek²êghostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨n™1EN*¢]½Á(xoœÕ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´¿ÿôºÎñ‹+aue_lseek²êghostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñ¶ØJ-AU¥DĢˌñ Õ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U´¿ÿôºÎñ‹+20ÜS7[AIF¬•pd± (ýéPó}ÉãIžýºwòžÕ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´¿ÿôºÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôŠw½§JE¡‹‰ãÒ¤Õ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U´¿ÿôºÎñ‹+20ÜS7[AIF¬•pd± (ýMãs”·MO¦«háÿž/„¢Õ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´¿ÿôºÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý㛳þ UGã¨ÄÄ`¡wM‹¨Õ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U´¿ÿôºÎñ‹+20ÜS7[AIF¬•pd± (ýΈJ)‹H¸Üü0´sr¦Õ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´¿ÿôºÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ”%¸€5@o¥²*/ËõוªÕ:‚œ Ê +ÙKFzé®›'üvº´¿ÿôºÎñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•qiVëF“€#¡/3p¤q¬Õ@Šž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ´¿ÿôºÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýá2š°šBû›µ±–w"®Õ@Šž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´¿ÿôºÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýf-C¨'×N_­·‰H¶ ^ª°Õ@Šž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´¿ÿôºÎñ‹+aue_preadø%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚·Mb©Ml¼¡Ú@Ÿah²Õb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº´¿ÿôºÎñ‹+aue_writeâ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼z(…ÙDI¡R»âˆþ°´ÕbŠž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á´¿ÿôºÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1óR ´çGO›dxì¤ø\¶Õ@Šž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ´¿ÿôºÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdü€)âNŒª,rd;Êxí¸Õ@Šž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´¿ÿôºÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌG;ý¢Oƒˆ‹3ÅIÛºÕ@Šž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´¿ÿôºÎñ‹+aue_pread¬hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýov@ÚöoN{Šæô‡|õ¼Õb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº´¿ÿôºÎñ‹+aue_write–hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠÎ;ïL2"¯2{M›¾ÕbŠž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á´¿ÿôºÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýt}¼zÞÿB­r\ÜÀX°ÉÀÕ@Šž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ´¿ÿôºÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­Úp…Âþ@c ì/æÕI®}ÂÕJŠž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº´¿ÿôºÎñ‹+aue_sendtoà +ret_msgid +17154hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýlxòZ-·FžPiªäC‚²ÄÕDê› µ dôFzé®{'üvºµ CjFzé®{'üvº´¿ÿôºÎñ‹+aue_recvfromà ret_msgid +17154hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýê\ƒ $pFОF#Ã娿‰ÆÕbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK´¿ÿôºÎñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý—÷O=HGµN0ÅÇÁïÖÈÕD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº´¿ÿôºÎñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*¶Tóì BÜ¢~ûQ5Ú +vÊÕD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº´¿ÿôºÎñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–^pðŸbF¼‚,QȹÑúâÌÕD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¸¸íþºÎñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷ky@l÷¼„•K·[ÎÕD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¸¸íþºÎñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQàúpFFi´„´2F@Ê_ÐÕ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U€±Ö ¼Îñ‹+aue_lseek´hhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +¹6F}é®Ã'üvº20 +ÜS7[AIF¬•pd± (ýÒ£)\ŒçL=€)M—]`}áÒÕbŽ µ5Ž«Fz鮉'üvºÂ¹6F}é®Ã'üvºÚæýªÃÎñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd29ppid1execntpd20ÜS7[AIF¬•pd± (ý +¹F}é®Ã'üvº20 +ÜS7[AIF¬•pd± (ýL¢¢‰¾J“º>ˆ}KøÁ…ÔÕ@ø› µ5Ž«Fz鮉'üvºÂ¹F}é®Ã'üvºÚæýªÃÎñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd28ppid1execntpd20ÜS7[AIF¬•pd± (ý&‡'@L/„4|#|AÏÖÕø› µ5Ž«Fz鮉'üvºÂ¹6F}é®Ã'üvºÚæýªÃÎñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd29return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ýa/B_IÑŸnP²®~ØÕø› µ5Ž«Fz鮉'üvºÂ¹F}é®Ã'üvºÚæýªÃÎñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd28return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ýdg÷“å“D‰Ð²7I³ÚÕ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄÓ½ãÃÎñ‹+aue_lseekò›hhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€æáR™BǸÍöm›U\pÜÕ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{ež¶ÙÈÅÎñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý±›¨áä@J¤áô\Û¨MTÞÕJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºž¶ÙÈÅÎñ‹+aue_sendtoÚ +ret_msgid +17155hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýèiöqÝNZ†¿ØvA‰ àÕJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºž¶ÙÈÅÎñ‹+aue_sendto˜ +ret_msgid +17156hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýmYq4ýøAœ‰"wŒ!øâÕJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºž¶ÙÈÅÎñ‹+aue_sendto¬ +ret_msgid +17157hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý0¡—N%xEh¹?û§æ] äÕJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºž¶ÙÈÅÎñ‹+aue_sendto˜ +ret_msgid +17158hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¡«o€ÎÚGʆx¶£M:áæÕDê› µ dôFzé®{'üvºµ CjFzé®{'üvºž¶ÙÈÅÎñ‹+aue_recvfromÚ ret_msgid +17155hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýï‘äúÕ´M$± @Só@ÍèÕDê› µ dôFzé®{'üvºµ CjFzé®{'üvºž¶ÙÈÅÎñ‹+aue_recvfrom˜ ret_msgid +17156hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¹N^’O¼¡ï,3?õkêÕDê› µ dôFzé®{'üvºµ CjFzé®{'üvºž¶ÙÈÅÎñ‹+aue_recvfrom¬ ret_msgid +17157hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýr¨.¼6K誅PíUxiÿìÕDê› µ dôFzé®{'üvºµ CjFzé®{'üvºž¶ÙÈÅÎñ‹+aue_recvfrom˜ ret_msgid +17158hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýBn ˆ•ÄA†´À=Š^UM_îÕ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UЊ¡èÉÎñ‹+aue_lseekò›hhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#í›b}ìA¸¤=‚´Ð +fòÕ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UЊ¡èÉÎñ‹+20ÜS7[AIF¬•pd± (ýG®Öo.L½®Uì¾í{ rðÕ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UЊ¡èÉÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒmÙV9ËD¥éOJbùÌ öÕ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UЊ¡èÉÎñ‹+20ÜS7[AIF¬•pd± (ýé¸fünLý¨²½9PÔôÕ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UЊ¡èÉÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýu“±MôEê…¿Žõ”eáúÕ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UЊ¡èÉÎñ‹+20ÜS7[AIF¬•pd± (ýö¥«æìöL0¹Y—F~ÔÐqøÕ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UЊ¡èÉÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈßé;çLƒœnöŠ“îü×üÕ:‚œ Ê +ÙKFzé®›'üvºÐŠ¡èÉÎñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýX»uCŽ–G­»Ó‚ó§1eþÕ@Œž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Њ¡èÉÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýk +­ñð!NB«9Xú´õ¸Ò€Ö@Œž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UЊ¡èÉÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJå@Qõ—DGšÍã…‡æŠ#‚Ö@Œž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UЊ¡èÉÎñ‹+aue_preadú%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶Jo@OA ¾ðJsÊÂ!„Öb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÐŠ¡èÉÎñ‹+aue_writeä&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹ YÈHB˜ºëmGƒ¿Å†ÖbŒž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áЊ¡èÉÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸ßuýIO²±Xåw° ˆÖ@Œž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Њ¡èÉÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý! ­N±¡‘“T°ìoŠÖ@Œž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UЊ¡èÉÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýr§4•ÆBFÕ…ÍúµˆadìŒÖ@Œž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UЊ¡èÉÎñ‹+aue_pread¶ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬Æü:ÛœweHÄ®óPiÖ`õyŽÖb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÐŠ¡èÉÎñ‹+aue_write  hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýýü@ò«ÒBnâÖ 4 p#ÖbŒž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áЊ¡èÉÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøYäØAg®tŸ’ª'Ñß’Ö@Œž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Њ¡èÉÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŒ¸&Q^C¤«ƒ˜-ÓJa”ÖJŒž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÐŠ¡èÉÎñ‹+aue_sendtoà +ret_msgid +17159hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýå³6@ý•²koˆ\†–ÖDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÐŠ¡èÉÎñ‹+aue_recvfromà ret_msgid +17159hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¹é‘QÀÌC؆œÿ¯1bè˜Öbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKЊ¡èÉÎñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý]ÆìX¼ÚAh›²gâheåfšÖD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÐŠ¡èÉÎñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇ ’zÝA‰ª²c_í°!jœÖD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÐŠ¡èÉÎñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™w»ŸNXˆLžž¬›*žÖD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºîÇñÉÎñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂÞ ÀUÖOÊŠ¯ZºsRb ÖD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºîÇñÉÎñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwqç‰K[¨Ÿ&ÌÙ «ó¢Ö0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº»¸°ËÎñ‹+aue_lseekÚÏhhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýHºÉ6CÒ½Š,Î7”1¤Ö0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²‘ÀóÒÎñ‹+aue_lseek´ÕhhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<ñVîH‹®_-ÇZ ¦Ö0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾¸îÛØÎñ‹+aue_lseek´ÕhhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™'ûˆÃBýy_}ÜÌªÖ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¾¸îÛØÎñ‹+20ÜS7[AIF¬•pd± (ýBª&þ¬4Clˆq`‚Áûñ¨Ö@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾¸îÛØÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜÈv;èO³‹¼íZª»®Ö ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¾¸îÛØÎñ‹+20ÜS7[AIF¬•pd± (ý½òÇ¿‡=´Ö:‚œ Ê +ÙKFzé®›'üvº¾¸îÛØÎñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ¦3±åḦת$OÀ¶Ö@Žž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¾¸îÛØÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóñŽ‰ ¨I0‹Ê‰vú| ¸Ö@Žž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾¸îÛØÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<‰¢®6F¾ŒÂãg×Ã_ºÖ@Žž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾¸îÛØÎñ‹+aue_preadà3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýç¬ê­:Aøº‹XE¥:Ù¼Öb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¾¸îÛØÎñ‹+aue_writeÊ4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚèÍÊOyË{þ±JQ¾ÖbŽž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¾¸îÛØÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾×CÎDuðaPe?{7ÀÖ@Žž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¾¸îÛØÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´© w3GÖ”o;ˆÕùð ÂÖ@Žž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾¸îÛØÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýi {PGº³‡žüŠ†ÛÄÖ@Žž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾¸îÛØÎñ‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸ø›2Ä`Dëœl¿¾+Á=xÆÖb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¾¸îÛØÎñ‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\LŠ)#GZ DV”{‚ÈÖbŽž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¾¸îÛØÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýc$=ÑBE†Êÿø}ÚÊ0ÊÖ@Žž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¾¸îÛØÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœ”å# +Ij¾‘bq$!#ßÌÖJŽž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¾¸îÛØÎñ‹+aue_sendtoà +ret_msgid +17160hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×7þ$·Gž‚Nú% ¯€ ÎÖDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¾¸îÛØÎñ‹+aue_recvfromà ret_msgid +17160hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý ?é¹ñÙJ²³…”/™×ÐÖbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¾¸îÛØÎñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýNÎ ®FAEœ>·ì”,îÒÖD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¾¸îÛØÎñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“W;BoK»€eb žyúŽÔÖD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¾¸îÛØÎñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>‡;&ŠñK³³‹%*°3«ÖÖD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÐ°îäØÎñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}{uw@‚®lGŠ5ØÖD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÐ°îäØÎñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý! ‹›)@ €ô”+$:6(ÚÖ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Ì¨ÀÚÎñ‹+aue_lseekÀûhhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{/Â0HŒºyr,‡‘CyÜÖ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eØßõÛÎñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÄ".ÞE¶­DA¶Ô1ÞÖJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØßõÛÎñ‹+aue_sendtoÚ +ret_msgid +17161hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÇÙºyqûB×™W/{p 6àÖJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØßõÛÎñ‹+aue_sendto˜ +ret_msgid +17162hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýHdº½sF‚ +@Ú@ÈÛâÖJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØßõÛÎñ‹+aue_sendto¬ +ret_msgid +17163hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý-N,™Þ6Cj…ÑÅsQÞ,äÖJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØßõÛÎñ‹+aue_sendto˜ +ret_msgid +17164hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý°ÆwÏì³O$’7¢ÌÃ=rÏæÖDê› µ dôFzé®{'üvºµ CjFzé®{'üvºØßõÛÎñ‹+aue_recvfromÚ ret_msgid +17161hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý3¹ŒÛ$DΨÈt» èÖDê› µ dôFzé®{'üvºµ CjFzé®{'üvºØßõÛÎñ‹+aue_recvfrom˜ ret_msgid +17162hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‚ªD‘vB ‘Q30©ÿêÖDê› µ dôFzé®{'üvºµ CjFzé®{'üvºØßõÛÎñ‹+aue_recvfrom¬ ret_msgid +17163hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý +¤AÃI@M†B»+9§1ìÖDê› µ dôFzé®{'üvºµ CjFzé®{'üvºØßõÛÎñ‹+aue_recvfrom˜ ret_msgid +17164hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý.÷R;(xNp–èöíÖØîÖ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”è…„âÎñ‹+aue_lseek€ŽihostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýt»v\p NÁ¾} Än‘hðÖ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÅæÎçÎñ‹+aue_lseek€ŽihostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýq'»b£eMÞ²“᳜Ã$ôÖ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÎÅæÎçÎñ‹+20ÜS7[AIF¬•pd± (ýÝŽÆÕÚòBøœ$Û›s·±jòÖ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÅæÎçÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]k~ätCÙ«¨Û%C´øÖ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÎÅæÎçÎñ‹+20ÜS7[AIF¬•pd± (ýÐõƒ¾žGm½Ÿ’2rj6¬öÖ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÅæÎçÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£œèßZ6F¦•’ÜYµøüÖ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÎÅæÎçÎñ‹+20ÜS7[AIF¬•pd± (ý´«¹ÃFÅG˜ªØáíNÉLúÖ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÅæÎçÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýºÙ#ÐC¬OJˆˆÀ ÆaC´þÖ:‚œ Ê +ÙKFzé®›'üvºÎÅæÎçÎñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ‰+3ÂéAa‚€‰°—ÏGI€×@ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÎÅæÎçÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂY÷§xGœ^,ˆø¡¤©‚×@ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÅæÎçÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý 7–h9 N›„ ¿ ·¾„×@ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÅæÎçÎñ‹+aue_pread„&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦0s-3M²ß[£†Óφ×b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎÅæÎçÎñ‹+aue_writeî&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³ˆ€ô„A)]¸¦Jñ_*ˆ×bž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÎÅæÎçÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8Â(NŠKµ­¬¬q ·‡$Š×@ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÎÅæÎçÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý 8Þíƒ2K¿²†dª' +FŒ×@ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÅæÎçÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&@+ë[D™“@{/¿ÜUàŽ×@ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÅæÎçÎñ‹+aue_pread¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ývEÌ>EÞI¬M>M!6µó×b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎÅæÎçÎñ‹+aue_write¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýH%†!âIl˜jÀi°Ç„’×bž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÎÅæÎçÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨ÈÁÁ@fHÌ€ÔÈ/äþ¡”×@ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÎÅæÎçÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>ŸŠ°Mæ¨qf5 ê–×Jž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÎÅæÎçÎñ‹+aue_sendtoà +ret_msgid +17165hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕ‰è fSGK—ƒ2`]õÿИ×Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÎÅæÎçÎñ‹+aue_recvfromà ret_msgid +17165hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¸ú Ï‚ B¹ ¬Šµb,Áš×bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÎÅæÎçÎñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý‹6×éKë˜t…zi‡O¿œ×D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢£÷ØçÎñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýBŸjnCsD¼£¢¥ÌSCž×D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢£÷ØçÎñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþp¶ # A݈ŽYáŒ:öu ×D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢£÷ØçÎñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@ T/iQC&¡)9…‰«B“¢×D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢£÷ØçÎñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7ý¿ˆE •ìð1—™9ñ¤×0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UœöÄÐéÎñ‹+aue_lseekö³ihostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅ`0%žJš£ ÷¢ßT½¦×0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UæÁÄ“ñÎñ‹+aue_lseekйihostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬„Î^ä K;‹bðRzר×@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¦†´¢òÎñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý+‰~ÀütNZ•´)÷ÕP§zª×JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦†´¢òÎñ‹+aue_sendtoÚ +ret_msgid +17166hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýDò‰a A6œ‚UoKW¬ç¬×JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦†´¢òÎñ‹+aue_sendto˜ +ret_msgid +17167hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýk³ 6ò(O#ªùHëËÕÃü®×JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦†´¢òÎñ‹+aue_sendto¬ +ret_msgid +17168hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýìî=?e¹H½—à èæc¼°×JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¦†´¢òÎñ‹+aue_sendto˜ +ret_msgid +17169hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¶ÄžSDOn§±ë yN^j²×Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦†´¢òÎñ‹+aue_recvfromÚ ret_msgid +17166hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýËÔBÝjDk™ë^PÐE`´×Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦†´¢òÎñ‹+aue_recvfrom˜ ret_msgid +17167hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýëý9w¼DR­ +IIø A¶×Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦†´¢òÎñ‹+aue_recvfrom¬ ret_msgid +17168hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÿÚ•r +CØ“˜¿&Mh[»¸×Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦†´¢òÎñ‹+aue_recvfrom˜ ret_msgid +17169hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®úû¶<ZE¬B›ƒiž Ê•º×0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÉ«ÂöÎñ‹+aue_lseekйihostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(u¢-Ï6O9Ÿßš”G¾× ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÚÉ«ÂöÎñ‹+20ÜS7[AIF¬•pd± (ý¸iˆå-DA–g)EC¤¼×@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÉ«ÂöÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýfÿ¥ÜD­œï¡B[Ó×Â× ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÚÉ«ÂöÎñ‹+20ÜS7[AIF¬•pd± (ý%pÚw\H<§‰Ñ:æ—@¢À×@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÉ«ÂöÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+Ý;J¶¾X…ALºézÆ× ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÚÉ«ÂöÎñ‹+20ÜS7[AIF¬•pd± (ý$ ¥˜´K؆ò‘é—²Ä×@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÉ«ÂöÎñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJ âvtA‘“b™®/#È×:‚œ Ê +ÙKFzé®›'üvºÚÉ«ÂöÎñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýG¿¼K8¶IRècuŒÒVÊ×@’ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÚÉ«ÂöÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýaõßBůŒ¢)cŸ¿jÌ×@’ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÉ«ÂöÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáù­¼£KM–³QõJšÎ×@’ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÉ«ÂöÎñ‹+aue_preadî%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾áŠ¶ÁðI%·rïf@JÆóÐ×b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚÉ«ÂöÎñ‹+aue_writeØ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜@‹HI5GŠÍ¨ŽÞ$‰BÒ×b’ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÚÉ«ÂöÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\$:f©M§ŠgØy›Ö-Ô×@’ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÚÉ«ÂöÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘rY )BD‚–ûS9!ƒpÖ×@’ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÉ«ÂöÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýå +¸¿zM¿Ò`ÁÔŠìØ×@’ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÉ«ÂöÎñ‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýäûĸ‡áHWŸå@ *ˆ•VÚ×b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚÉ«ÂöÎñ‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍ’€G´Ev‘"´B]\õÜ×b’ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÚÉ«ÂöÎñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýY·–ÕBó@¿ #R OÒ™%Þ×@’ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÚÉ«ÂöÎñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎJÕï†fOœ—œIã_,¶à×J’ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÚÉ«ÂöÎñ‹+aue_sendtoà +ret_msgid +17170hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýågÍÙá;OO™—Cìvâ×Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÚÉ«ÂöÎñ‹+aue_recvfromà ret_msgid +17170hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÄçŽ$ïNN›ÏÈ-.¶ä×bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÚÉ«ÂöÎñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýæÞN†.°LIš:b),‘o_æ×D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦„ÊËöÎñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•¬ñ×TNJ'”GœP@-=è×D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦„ÊËöÎñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†ÉSØÔECó´·9«ˆ1‡Iê×D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦„ÊËöÎñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýpA­¨ìAƉ#â¼`Rì×D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦„ÊËöÎñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠ®µ“L)¿ª@W>ÍÇî×0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆŽÄàøÎñ‹+aue_lseek¬íihostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—}Té¹D¼Æåʤ· 1ð×0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖ‘Í£€Ïñ‹+aue_lseek„óihostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9Pò‰LÙ±XáK´Ëò×0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÖßµ…Ïñ‹+aue_lseek„óihostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1üÄê-XNðŒÒµ¥'û¿ö× ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UˆÖßµ…Ïñ‹+20ÜS7[AIF¬•pd± (ý«¿eÔ]öKuŽ9…/±Lhô×@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÖßµ…Ïñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý –eÙÉèMÀ•ÎE[ nxú× ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UˆÖßµ…Ïñ‹+20ÜS7[AIF¬•pd± (ý"¾2ÃÊHj‡2U„sS1hø×@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÖßµ…Ïñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýA¼ƒWE›æÞ„ëEþ× ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UˆÖßµ…Ïñ‹+20ÜS7[AIF¬•pd± (ýßPõU:K”­¥R4+åúü×@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÖßµ…Ïñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏÜû¥±ÒKË“gi ÎÚ¥î€Ø:‚œ Ê +ÙKFzé®›'üvºˆÖßµ…Ïñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýýÕÚ \LÚ—¼ï&ŸÈ‚Ø@”ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆÖßµ…Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐÿ¬¶¤Gгj,°×Ðêc„Ø@”ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÖßµ…Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒ!iÛ(DÑ«6šq͆Ø@”ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÖßµ…Ïñ‹+aue_preadÔ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸYÓ8'Hu±½È–ƒØþìˆØb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºˆÖßµ…Ïñ‹+aue_write¾4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©)߇DSO‰Žsþ0„%:ŠØb”ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áˆÖßµ…Ïñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJk÷“÷OÇ’9†p¸8#èŒØ@”ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆÖßµ…Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1ßnµRKШÈR=…1ÖöŽØ@”ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÖßµ…Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑÞPÒoI†Òˆú¥:òØ@”ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÖßµ…Ïñ‹+aue_preadÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*=Ú¾ôJ™‰* +¤‹™@’Øb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºˆÖßµ…Ïñ‹+aue_writeºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²?¼,ïE¤½êg^*”Øb”ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áˆÖßµ…Ïñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýò$uÐÅEq’ãXŸ0w¤Î–Ø@”ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆÖßµ…Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]8ú§ÏCG‹¾\ÒD‘˜ØJ”ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºˆÖßµ…Ïñ‹+aue_sendtoà +ret_msgid +17171hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄ +³¢ÝGN¨At>HjG—šØDê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆÖßµ…Ïñ‹+aue_recvfromà ret_msgid +17171hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýkl>#=A#Žã{ÊZXµkœØbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKˆÖßµ…Ïñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý§5_¦EEA¡šç–ÿH|žØD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºè‹™¿…Ïñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýn8k¿³J·%-þ`Ãï ØD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºè‹™¿…Ïñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇü̦â[@™¤•ÊŸ€OÂú¢ØD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºè‹™¿…Ïñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓ2Ò’BKq¥ô`?ß°—¤ØD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºè‹™¿…Ïñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1×`y­FQ”§õBÜ€ò|¦Ø0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖ¿ð‡Ïñ‹+aue_lseekŠ™jhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâ(ÂEXD%€\ÞýºOÞ6¨Ø@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eöÜëψÏñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý¸‡íضF«‚áÓö1ÆÎìªØJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºöÜëψÏñ‹+aue_sendtoÚ +ret_msgid +17172hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¬ä9vaFÔ½Äuá¾Pì¬ØJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºöÜëψÏñ‹+aue_sendto˜ +ret_msgid +17173hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÖ¨löÔIì¿Wqݶóh®ØJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºöÜëψÏñ‹+aue_sendto¬ +ret_msgid +17174hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÛáHcQ`Mr·Ò™cò'GŒ°ØJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºöÜëψÏñ‹+aue_sendto˜ +ret_msgid +17175hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý+þµK Ex«“ô{t‘²ØDê› µ dôFzé®{'üvºµ CjFzé®{'üvºöÜëψÏñ‹+aue_recvfromÚ ret_msgid +17172hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýMü¥UCï“ø°äKça´ØDê› µ dôFzé®{'üvºµ CjFzé®{'üvºöÜëψÏñ‹+aue_recvfrom˜ ret_msgid +17173hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý­t‘—šB€¾Õ+èsYk¶ØDê› µ dôFzé®{'üvºµ CjFzé®{'üvºöÜëψÏñ‹+aue_recvfrom¬ ret_msgid +17174hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýJþÕ!XA[™çBd¥³¸ØDê› µ dôFzé®{'üvºµ CjFzé®{'üvºöÜëψÏñ‹+aue_recvfrom˜ ret_msgid +17175hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýšîÍt +]Mx­\¥á_ÌäºØ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uò¦¾³Ïñ‹+aue_lseekÆ«jhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“Ô×uz@ó’Ä¡T–H +¼Ø0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uʿܨ”Ïñ‹+aue_lseekÆ«jhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýº£Ké™Ef·ŒŒ;ž¥=ÀØ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uʿܨ”Ïñ‹+20ÜS7[AIF¬•pd± (ýM5ÂX8F²ý{ÛÃP ¾Ø@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uʿܨ”Ïñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!s^òf2H ‘ùÎÞ8Ñð$ÄØ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uʿܨ”Ïñ‹+20ÜS7[AIF¬•pd± (ýk÷DO @”ˆM0½yOÂØ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uʿܨ”Ïñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýbÒ²îOæ“/„’ÈØ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uʿܨ”Ïñ‹+20ÜS7[AIF¬•pd± (ýŒøÃä|Å@¸ä‹ËâHÆØ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uʿܨ”Ïñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýΪ€D3ž¬«‚•ÊØ:‚œ Ê +ÙKFzé®›'üvºÊ¿Ü¨”Ïñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³UÕð[ÕNóÝA~û²uÌØ@–ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ʿܨ”Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšOI2RFC²¤ ʵ­´ÎØ@–ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uʿܨ”Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýc$’¶ÝE[ƒsyø¼¼SÐØ@–ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uʿܨ”Ïñ‹+aue_preadþ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýR±å1C¾®ž‡Ñ(‡AsÒØb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÊ¿Ü¨”Ïñ‹+aue_writeè&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýè¡fQLf„"—ÒqóSÔØb–ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áʿܨ”Ïñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈŒ¤tEæH·òP{ ¡M0ÖØ@–ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ʿܨ”Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁꩵfM4”-”²*“ñðØØ@–ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uʿܨ”Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³Ð;{ÃC~·_{E‚ì/ÚØ@–ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uʿܨ”Ïñ‹+aue_pread´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAŨ½Dó”I=ðn5 ÜØb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÊ¿Ü¨”Ïñ‹+aue_writežhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰•òù”J•ï10G@wÞØb–ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áʿܨ”Ïñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞph¿ _@9¾Gt4‡¿à¥àØ@–ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ʿܨ”Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾AðŒ-HÈ£3f~YâØJ–ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÊ¿Ü¨”Ïñ‹+aue_sendtoà +ret_msgid +17176hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýïUó¸îE쇭Òò^P»äØDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊ¿Ü¨”Ïñ‹+aue_recvfromà ret_msgid +17176hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýƒW«gK†ž6ë6J ¼SæØbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKʿܨ”Ïñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"º ü¢)ƒÿYAXBÓø1›–®èØD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºò¨Æ²”Ïñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýë½ÃáÏ„I¯†k3ÍŸŽ.êØD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºò¨Æ²”Ïñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈïOÃÂL ‘i)l÷“ôìØD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºò¨Æ²”Ïñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýVÇÉÕSC £Ûعúi¹îØD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºò¨Æ²”Ïñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +3펅F~é®Ñ'üvº20 +ÜS7[AIF¬•pd± (ýðB'RkcOžÌ*Ï"(ðØø› µ5Ž«Fz鮉'üvº3펅F~é®Ñ'üvº‚Ñ洛Ïñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ý +3í—SF~é®Ñ'üvº20 +ÜS7[AIF¬•pd± (ýaåkløGO°D~ª­†òØø› µ5Ž«Fz鮉'üvº3í—SF~é®Ñ'üvº‚Ñ洛Ïñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ý +3힬F~é®Ñ'üvº20 +ÜS7[AIF¬•pd± (ý_ùæotO«ˆiú~v/|…ôØø› µ5Ž«Fz鮉'üvº3힬F~é®Ñ'üvº‚Ñ洛Ïñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ý +3í§òF~é®Ñ'üvº20 +ÜS7[AIF¬•pd± (ýêæ|æªC̾´¾¬= Ì{öØø› µ5Ž«Fz鮉'üvº3í§òF~é®Ñ'üvº‚Ñ洛Ïñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ý +3í¯~F~é®Ñ'üvº20 +ÜS7[AIF¬•pd± (ýÈšíÄiS@s«úLhüÛqæøØø› µ5Ž«Fz鮉'üvº3í¯~F~é®Ñ'üvº‚Ñ洛Ïñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ý +3í¶¿F~é®Ñ'üvº20 +ÜS7[AIF¬•pd± (ýå‰:¶ÊNK½¨Á}&™Ù£úØø› µ5Ž«Fz鮉'üvº3í¶¿F~é®Ñ'üvº‚Ñ洛Ïñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ý +3í½ôF~é®Ñ'üvº20 +ÜS7[AIF¬•pd± (ýšíC§ŒAØ­×Þð)Ÿ£üØø› µ5Ž«Fz鮉'üvº3í½ôF~é®Ñ'üvº‚Ñ洛Ïñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ý +3íƧF~é®Ñ'üvº20 +ÜS7[AIF¬•pd± (ýÍÜOË›¶J·@P²‰ÆûþØø› µ5Ž«Fz鮉'üvº3íƧF~é®Ñ'üvº‚Ñ洛Ïñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ý +3íÍêF~é®Ñ'üvº20 +ÜS7[AIF¬•pd± (ýý£æ´ÙgIÉ¥{¶ ªP#€Ùø› µ5Ž«Fz鮉'üvº3íÍêF~é®Ñ'üvº‚Ñ洛Ïñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ýS#T/pDÛª†Á 4Ì&‚Ù0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´ŽÛ‰—Ïñ‹+aue_lseek†èjhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýT#|ÔM¢¬ÙÙ‰@¶;„Ù0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾®ñÌžÏñ‹+aue_lseekÖíjhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýY¥®÷-A(ƒ÷TèrŒŸ„†Ù@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eà×ùüžÏñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýsúì…IA–kº*ß e߈ÙJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºà×ùüžÏñ‹+aue_sendtoÚ +ret_msgid +17177hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý,-˜ H䉻ӫdIàùŠÙJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºà×ùüžÏñ‹+aue_sendto˜ +ret_msgid +17178hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÈ%%NåCFïvÞÌæ$6ŒÙJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºà×ùüžÏñ‹+aue_sendto¬ +ret_msgid +17179hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýt¢µ>Á²A‚¹‘ÁÈÄoÎŽÙJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºà×ùüžÏñ‹+aue_sendto˜ +ret_msgid +17180hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý醕5Š D¸“aOÚäãüÙDê› µ dôFzé®{'üvºµ CjFzé®{'üvºà×ùüžÏñ‹+aue_recvfromÚ ret_msgid +17177hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÇ%„róMp€ŠAºï#¤r’ÙDê› µ dôFzé®{'üvºµ CjFzé®{'üvºà×ùüžÏñ‹+aue_recvfrom˜ ret_msgid +17178hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý±N’&OKjµ €8ó>ú”ÙDê› µ dôFzé®{'üvºµ CjFzé®{'üvºà×ùüžÏñ‹+aue_recvfrom¬ ret_msgid +17179hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýSÖh œyL׶¸~5Ý ~–ÙDê› µ dôFzé®{'üvºµ CjFzé®{'üvºà×ùüžÏñ‹+aue_recvfrom˜ ret_msgid +17180hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý{TGÀ¤8Cú’…GüpyИÙ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊüÀœ£Ïñ‹+aue_lseekÖíjhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#¡\6ID-³IƒjžXEœÙ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÊüÀœ£Ïñ‹+20ÜS7[AIF¬•pd± (ýèV¦3%MF–Ó»ŽQªïšÙ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊüÀœ£Ïñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$NP´vëDÙœP$ +6Ø Ù ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÊüÀœ£Ïñ‹+20ÜS7[AIF¬•pd± (ýCWð†UôAºëœËxžÙ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊüÀœ£Ïñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°¡#s„AºqS(¹eH¤Ù ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÊüÀœ£Ïñ‹+20ÜS7[AIF¬•pd± (ýÏÜ°arM:ƒ×7ská6¢Ù@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊüÀœ£Ïñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýºä•^c@|¿×^¹±w¦Ù:‚œ Ê +ÙKFzé®›'üvºÊüÀœ£Ïñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"3Jç&KS¥ˆ €j/¨Ù@˜ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÊüÀœ£Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒZ}Ô¬FP ÅŒT|q? ªÙ@˜ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊüÀœ£Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•ÛúWòM߈/êg$¬'í¬Ù@˜ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊüÀœ£Ïñ‹+aue_pread¸<hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyÄ`ÐáK¼èmeÕA÷E®Ùb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÊüÀœ£Ïñ‹+aue_write¢=hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýB†žœ BJ¼‡BÀí[5(À°Ùb˜ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÊüÀœ£Ïñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–Œ¥FÉnMð­ÆïB"X5¤²Ù@˜ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÊüÀœ£Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý éšÂdB$‚…²ˆz)qò´Ù@˜ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊüÀœ£Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼Û›éHIœÜ¯ëëW/’¶Ù@˜ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊüÀœ£Ïñ‹+aue_preadÈhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥‘r«ÄO3¥Þ³—kóŽý¸Ùb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÊüÀœ£Ïñ‹+aue_write²hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°†r«jXA’¯}ª[õÊ•úºÙb˜ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÊüÀœ£Ïñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý [½¾CÁ¨JMÍ¿‹\>¼Ù@˜ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÊüÀœ£Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýé!îêHÙEt'0ý÷»¾ÙJ˜ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÊüÀœ£Ïñ‹+aue_sendtoà +ret_msgid +17181hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýy*’IL¨@“’mb,1ÀÙDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊüÀœ£Ïñ‹+aue_recvfromà ret_msgid +17181hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýËoQ¼ÌÏJ<´ÉüΞÕÂÙbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÊüÀœ£Ïñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýŠyüžC4²üvöhïâœÄÙD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎŒ¾¦£Ïñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcÌ#d·»DN† ABµãÆÙD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎŒ¾¦£Ïñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"rgI'±¸¿å¡}ÀÈÙD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎŒ¾¦£Ïñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýé-Ê(Ä2K„ƒ/‡Ÿ{ÐÊÙD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎŒ¾¦£Ïñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý + ¬DCœág +üŒê¶ÌÙ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–¨û™¦Ïñ‹+aue_lseek¼¡khostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +“xX.Eø®îì¿žÞþÎÙ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–¸Ý­Ïñ‹+aue_lseekŽ§khostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJÄ_gÞ©@Úª}ëtv #‘ÐÙ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uóç²Ïñ‹+aue_lseekŽ§khostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡Ñ¶aAµƒ ‹î ÿÔÙ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uóç²Ïñ‹+20ÜS7[AIF¬•pd± (ý‰ÿÒã`ªBõ‰$À¾-l†ªÒÙ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uóç²Ïñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7żNÓ@‡Âô ¡2ØÙ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uóç²Ïñ‹+20ÜS7[AIF¬•pd± (ý6?KJC¨ÝcDªgÖÙ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uóç²Ïñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýy‚Ãc Lƒ«8ûTž*ÜÙ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uóç²Ïñ‹+20ÜS7[AIF¬•pd± (ýÿ‹è÷lÍK\›ví$´„&ÚÙ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uóç²Ïñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7G"ò¥/Kì VSWeyëÞÙ:‚œ Ê +ÙKFzé®›'üvºóç²Ïñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌkÛ +×ÝM ¯È jo’ËæàÙ@šž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V óç²Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýB g_ÊåN˺<Û«q[âÙ@šž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uóç²Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýf3Fí¬wA»€SኣTäÙ@šž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uóç²Ïñ‹+aue_preadÞ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒ¥ºB­ÄM®™‡ØímkæÙb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºóç²Ïñ‹+aue_writeÈ4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýz˜$ó3·Fǘô2v S»èÙbšž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áóç²Ïñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýПlf8OÙ‡øEviÊêÙ@šž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V óç²Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/ïËLE˜]1è•ìÙ@šž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uóç²Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ùxŸ´Oà(ð +œ}hÁîÙ@šž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uóç²Ïñ‹+aue_preadÊhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸà÷v[Jî‘Ó¥èê'¾ðÙb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºóç²Ïñ‹+aue_write´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU½èGÞÍLÙšÌéj¢´ØøòÙbšž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áóç²Ïñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬GL G½B/°!ºF¢~,ËôÙ@šž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V óç²Ïñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨ø[ùšÇC•¤_–Žm-úùöÙJšž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºóç²Ïñ‹+aue_sendtoà +ret_msgid +17182hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3·êÔ@í‰JI +.ŒÈøÙDê› µ dôFzé®{'üvºµ CjFzé®{'üvºóç²Ïñ‹+aue_recvfromà ret_msgid +17182hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýwÌt÷ŽM˜‚h9ø`B úÙbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKóç²Ïñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý Òà~™1DÛˆìz,ñüÙD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâ¬¡™²Ïñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™hAJÊF‰²áôñ€ÊþÙD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâ¬¡™²Ïñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸lV[C†¥*ð_Ä´Æ€ÚD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâ¬¡™²Ïñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËÍý ½D‰ÜTA4”ü0‚ÚD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâ¬¡™²Ïñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6O÷;F~é®Ñ'üvº23.31.21.163ö20ÜS7[AIF¬•pd± (ý?æ„?˼C¦êαK^=„Úø› µ5Ž«Fz鮉'üvº6O÷;F~é®Ñ'üvºø¥õ‹³Ïñ‹+aue_connecthostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1address23.31.21.163port123execntpd20ÜS7[AIF¬•pd± (ýó²É²9O(š!Í ¦Ç7†Úø› µ5Ž«Fz鮉'üvº6O÷;F~é®Ñ'üvºø¥õ‹³Ïñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ýЈ +ë§LG— Vöê‡w¼ˆÚJø› µ5Ž«Fz鮉'üvºµCJœFz鮉'üvºø¥õ‹³Ïñ‹+aue_sendto`ret_msgid +17183hostHdc53375b-4149-46ac-9570-64b1090f28fdfd22ppid1address23.31.21.163port123execntpd20ÜS7[AIF¬•pd± (ý­æqÏØGŸ®ƒ êïXŠÚJø› µ5Ž«Fz鮉'üvºµA¬ÐFz鮉'üvºø¥õ‹³Ïñ‹+aue_sendtoÈ +ret_msgid +17184hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execntpd20ÜS7[AIF¬•pd± (ýišñ,J›ŠJKÆa}ÍŒÚDê› µ dôFzé®{'üvºµ !Fzé®{'üvºø¥õ‹³Ïñ‹+aue_recvfromÈ ret_msgid +17184hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬šû£ëªsI Nwãû+“ŽÚ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ³¾©µÏñ‹+aue_lseek”ÙkhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýü‡UœffH…#nõ/ëÚ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÔ³¾©µÏñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý±TÞß+­IZ¶#=•E’ÚJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔ³¾©µÏñ‹+aue_sendtoÚ +ret_msgid +17185hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¨äÖ¨J½I£€\ž¨YpV”ÚJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔ³¾©µÏñ‹+aue_sendto˜ +ret_msgid +17186hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¶±ÝòH«›µñ ¤ydË–ÚJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔ³¾©µÏñ‹+aue_sendto¬ +ret_msgid +17187hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý»rHÏK.šn¤ßê ¶m˜ÚJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔ³¾©µÏñ‹+aue_sendto˜ +ret_msgid +17188hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý·$IßLŒœ^¤Î0ƒšÚDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔ³¾©µÏñ‹+aue_recvfromÚ ret_msgid +17185hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýéØœ™».EO˜wQÍï½™œÚDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔ³¾©µÏñ‹+aue_recvfrom˜ ret_msgid +17186hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýRÄfâÄI¤z²e®äEžÚDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔ³¾©µÏñ‹+aue_recvfrom¬ ret_msgid +17187hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýVÕÙ¶9AèžM­}͸ ÚDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔ³¾©µÏñ‹+aue_recvfrom˜ ret_msgid +17188hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýß®Tî“F +(;¡C•|ï¢Ú0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UþŒçì¼Ïñ‹+aue_lseekÂëkhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆã®ò—G=€²©ñ¤Ú0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà´˜ƒÁÏñ‹+aue_lseekÂëkhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýø¤¥{·ÌGv†“Z\ëºé¨Ú ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uà´˜ƒÁÏñ‹+20ÜS7[AIF¬•pd± (ý™Ú‡Ë˜ H›–—ŠVÓǦÚ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà´˜ƒÁÏñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸgÄáOåM`‰sqØëNO¬Ú ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uà´˜ƒÁÏñ‹+20ÜS7[AIF¬•pd± (ýÍC‡âêfAN¹þ*Y‰5ŒªÚ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà´˜ƒÁÏñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýž: +;!ÑIÇ’Ú£Æ>Çõ…°Ú ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uà´˜ƒÁÏñ‹+20ÜS7[AIF¬•pd± (ýFI¼-~NH ¥+‚LÀ¼®Ú@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà´˜ƒÁÏñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±|Ú¦[CH1£bmÓc[8²Ú:‚œ Ê +ÙKFzé®›'üvºà´˜ƒÁÏñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”ßOAA¡Gàšæììé[â[´Ú@œž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V à´˜ƒÁÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý2Ñ(ðR†OP„‹l—õSlÓ¶Ú@œž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà´˜ƒÁÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-!]¢)Iÿ´"ÎO¸Ú@œž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà´˜ƒÁÏñ‹+aue_preadþ1hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/Î5ö°Jnœnb X$ºÚb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºà´˜ƒÁÏñ‹+aue_writeè2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?!;yÖK ¤³0ת8ž¼Úbœž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áà´˜ƒÁÏñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýê”ÛJžž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºêÊÔöÏÏñ‹+aue_sendtoà +ret_msgid +17194hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§@lØO™¼ÅŒ†uUu–ÛDê› µ dôFzé®{'üvºµ CjFzé®{'üvºêÊÔöÏÏñ‹+aue_recvfromà ret_msgid +17194hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý0AŒäGAµåƒÌ=¿`˜Ûbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKêÊÔöÏÏñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýo+ø) ŸO^½êîçR\šÛD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºæ•ÑÿÏÏñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýüO+!öTHç³pŸ4Íà‚œÛD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºæ•ÑÿÏÏñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\ÿ.äwJ=»/™IÈÁžÛD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºæ•ÑÿÏÏñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýέ†Çô¥J~º2v\9e ÛD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºæ•ÑÿÏÏñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=hÎ NŒ*w75çߢÛ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶Ë½ÉÓÏñ‹+aue_lseeküÉlhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxS€.ª©EF…— p¨5¤Û0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uä؆ÛÏñ‹+aue_lseekÐÏlhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýBÆÛ¤h@J¶–ZÁ›Lþù¦Û0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ¦ìéÞÏñ‹+aue_lseekÐÏlhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚ð`ÀH/Mä‘Ék{%;íªÛ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uæ¦ìéÞÏñ‹+20ÜS7[AIF¬•pd± (ýÃxÔŸ(Kp¾àÚÚ”üɨÛ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ¦ìéÞÏñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý© +Ej WAéšú8=3ÇÔ®Û ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uæ¦ìéÞÏñ‹+20ÜS7[AIF¬•pd± (ýUEŸE•pJx-;^¬Û@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ¦ìéÞÏñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýeq…/þ¯B䀎]9ña‡²Û ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uæ¦ìéÞÏñ‹+20ÜS7[AIF¬•pd± (ý0óë?~ZO׎tZþÜøˤ°Û@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ¦ìéÞÏñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·Âuw*‹Gþ‰IÊ›…'Wq´Û:‚œ Ê +ÙKFzé®›'üvºæ¦ìéÞÏñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýq8‡g%#B²½äÇ„!§¶Û@ ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ¦ìéÞÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcý¾ÐG¸ŠîB¬Ð[¸Û@ ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ¦ìéÞÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ª€ú^× 4îÌI͵§E‘!shºÛ@ ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ¦ìéÞÏñ‹+aue_preadô%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%Ú&Àu‡C_™8²g‡àLмÛb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºæ¦ìéÞÏñ‹+aue_writeÞ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹² ¥Fѯ#lÜv›iû¾Ûb ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ¦ìéÞÏñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýí#½ B½—ßÿWû¢UFÀÛ@ ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ¦ìéÞÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýúÖ%ŸxC<«€©|”W,]ÂÛ@ ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ¦ìéÞÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýª¼,D´ÕE!¤— Ó’ûìÄÛ@ ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ¦ìéÞÏñ‹+aue_preadÌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾®GûF,°ÀØKϸÀÆÛb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºæ¦ìéÞÏñ‹+aue_write¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥ Bo”‹EH‚—êg›Y·nÈÛb ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áæ¦ìéÞÏñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcì[NCÍ´fPÎ:,Î-ÊÛ@ ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æ¦ìéÞÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄ:rÐCµ·ÁX°¸‰"ÌÛJ ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºæ¦ìéÞÏñ‹+aue_sendtoà +ret_msgid +17195hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛf”ªt%G6¦p€"ˆsÎÛDê› µ dôFzé®{'üvºµ CjFzé®{'üvºæ¦ìéÞÏñ‹+aue_recvfromà ret_msgid +17195hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýr÷Ïp·±LŸ§?«ÜÖQ®ËÐÛbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKæ¦ìéÞÏñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýĪÓNI“¥úѵÕésÒÛD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºæ¦ìéÞÏñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´3u–£F8˜?|€a¯nÔÛD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºæ¦ìéÞÏñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0å22I—…ÞUÈqBÖÛD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºæ¦ìéÞÏñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜hkoqRCv˜9 ôÝ\-ÐØÛD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºæ¦ìéÞÏñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý 4näG¨­«†ì0ßÚÛ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eøÙõƒâÏñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýè/OàÏN™” H5´%ÜÛJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøÙõƒâÏñ‹+aue_sendtoÚ +ret_msgid +17196hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¦mJÛÆCŸ•º£1’"µÞÛJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøÙõƒâÏñ‹+aue_sendto˜ +ret_msgid +17197hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¬ð†õÁùJy€Êµ$ àÛJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøÙõƒâÏñ‹+aue_sendto¬ +ret_msgid +17198hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýhØX¨­hG/Ÿ³Â…r›âÛJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøÙõƒâÏñ‹+aue_sendto˜ +ret_msgid +17199hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÛªrˆDü¥àsöO}ÇäÛDê› µ dôFzé®{'üvºµ CjFzé®{'üvºøÙõƒâÏñ‹+aue_recvfromÚ ret_msgid +17196hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý®mÁuJE•˜q»,­¨/æÛDê› µ dôFzé®{'üvºµ CjFzé®{'üvºøÙõƒâÏñ‹+aue_recvfrom˜ ret_msgid +17197hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýcš;ÜåB]€OÇ]6‚òèÛDê› µ dôFzé®{'üvºµ CjFzé®{'üvºøÙõƒâÏñ‹+aue_recvfrom¬ ret_msgid +17198hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýê;ÌʳWAŒ¬pf•Rz’êÛDê› µ dôFzé®{'üvºµ CjFzé®{'üvºøÙõƒâÏñ‹+aue_recvfrom˜ ret_msgid +17199hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÿ£(‹EÈO œò‹eäÇìÛ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà€ÂÙâÏñ‹+aue_lseek‚‚mhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²-‰äý®N ¥stæ_ú7îÛ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦×ÜœêÏñ‹+aue_lseekÚ‡mhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýöĸZ$Bò®y6Ò=¤€ðÛ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ‰­ÝíÏñ‹+aue_lseekÚ‡mhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜’¿8±Nõ…ôà‹àÏ :ôÛ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uœ‰­ÝíÏñ‹+20ÜS7[AIF¬•pd± (ýhÈÝ#¹D7¨55n>þF'òÛ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ‰­ÝíÏñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀcgÇz¿H…©ž¤0ÔøÛ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uœ‰­ÝíÏñ‹+20ÜS7[AIF¬•pd± (ý½^£5B!‰àèäöÛ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ‰­ÝíÏñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“þ<äÌ×Ci‰ã¼\M$üÛ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uœ‰­ÝíÏñ‹+20ÜS7[AIF¬•pd± (ý`a²¥F‡ÏŸ²iê—júÛ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ‰­ÝíÏñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉé·™yN¯¨•¤RÎá¦SþÛ:‚œ Ê +ÙKFzé®›'üvºœ‰­ÝíÏñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„¬å*/Hó¢Ëõ#Û³GÓ€Ü@¢ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ‰­ÝíÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^&™lKŠÕŸiQR2‚Ü@¢ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ‰­ÝíÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ±ïÇbeO¿UV޹Ɋ„Ü@¢ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ‰­ÝíÏñ‹+aue_preadª2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬|P´rKE„þm +Fè_$†Üb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºœ‰­ÝíÏñ‹+aue_write”3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýGþÍxGAµõi8R—$ˆÜb¢ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áœ‰­ÝíÏñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ývù+{ógN­£IÉ xÜŠÜ@¢ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ‰­ÝíÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýš’{Á­B”§Ñ”µ‡‰(ŒÜ@¢ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ‰­ÝíÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýب$ï®KK°>*ïÜ݃JŽÜ@¢ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ‰­ÝíÏñ‹+aue_preadÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€¨ÀÖ‘@—RÂHÕ¯Üb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºœ‰­ÝíÏñ‹+aue_writeºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAAºb‡ÉL¼¿ {ƒõ¥/’Üb¢ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áœ‰­ÝíÏñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýàÓ<ýL§¦éÝŸ®õ:”Ü@¢ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ‰­ÝíÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQ½µƒÈáF¥Xž¿SÿŒ–ÜJ¢ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºœ‰­ÝíÏñ‹+aue_sendtoà +ret_msgid +17200hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_ztŠ­K³µ<Þ=˜ÜDê› µ dôFzé®{'üvºµ CjFzé®{'üvºœ‰­ÝíÏñ‹+aue_recvfromà ret_msgid +17200hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý`ØÁºkA›‰²Z Û{GšÜbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKœ‰­ÝíÏñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý½wï_nM‹ `Ñ(ÙFœÜD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº´Ñ¾æíÏñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍ¥ë½CâE ¦‘¯çØ>žÜD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº´Ñ¾æíÏñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýº½ª"ΈI»Tá"àÞ*V ÜD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº´Ñ¾æíÏñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—#‹ñ;KGáª!¼¿×èZÖ¢ÜD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº´Ñ¾æíÏñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýé;yz%LÌ’ +&5 hÏJ¤Ü0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžˆÅéñÏñ‹+aue_lseekÆ­mhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚú SN†Þîpûç¦Ü@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eò¿±øÏñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýî4ì†FÒ„;Jv–†ëë¨ÜJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºò¿±øÏñ‹+aue_sendtoÚ +ret_msgid +17201hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý#‰#Ÿ—›Ož½;+’UŽdªÜJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºò¿±øÏñ‹+aue_sendto˜ +ret_msgid +17202hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýéÈ?øÄéFy½H"S¼¼ºÒ¬ÜJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºò¿±øÏñ‹+aue_sendto¬ +ret_msgid +17203hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÎÔJ?LsC|*Æcô3w®ÜJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºò¿±øÏñ‹+aue_sendto˜ +ret_msgid +17204hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý)×%uGg²‘y«¹žé­°ÜDê› µ dôFzé®{'üvºµ CjFzé®{'üvºò¿±øÏñ‹+aue_recvfromÚ ret_msgid +17201hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÐ4lPJ†Ÿbàí7ݱ²ÜDê› µ dôFzé®{'üvºµ CjFzé®{'üvºò¿±øÏñ‹+aue_recvfrom˜ ret_msgid +17202hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý5còUSKf« «DÇHÓô´ÜDê› µ dôFzé®{'üvºµ CjFzé®{'üvºò¿±øÏñ‹+aue_recvfrom¬ ret_msgid +17203hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýɇfðãáN¬‚­Ú@HÕvì¶ÜDê› µ dôFzé®{'üvºµ CjFzé®{'üvºò¿±øÏñ‹+aue_recvfrom˜ ret_msgid +17204hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýl0Õ×äNݤ[}ß=”¸Ü0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞ¬Ú¬ùÏñ‹+aue_lseek€ÀmhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýSŒ¿TáHÎŽ&QwòŸ¿ÕºÜ<Þ› µxÏFzé®’'üvº €ja·*XYª·CÿùX?Ü/etc/cron.dœ¸öçûÏñ‹+aue_open_rwtc +flagsmodeè +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1execcron20ÜS7[AIF¬•pd± (ý($œ[7CÉ«ïæ7®Þ/¼ÜÞ› µxÏFzé®’'üvº €ja·*XYª·CÿùX?Üœ¸öçûÏñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1execcron20ÜS7[AIF¬•pd± (ý¢-¿à?ØLï€$rÅ*Þ‰õ¾Ü0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº¬˜ÐüÏñ‹+aue_lseek€ÀmhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýC­eeMv­·]òPúÈÂÜ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uº¬˜ÐüÏñ‹+20ÜS7[AIF¬•pd± (ý¤Ü›v*‰DŶgž,+iUeÀÜ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº¬˜ÐüÏñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýíÅŠDX’¼žõDüÜÆÜ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uº¬˜ÐüÏñ‹+20ÜS7[AIF¬•pd± (ý¢pªô3ªJ\†xRd÷ƒXÄÜ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº¬˜ÐüÏñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýsb°Œ14HÓ’Î2E0ŠÊÜ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uº¬˜ÐüÏñ‹+20ÜS7[AIF¬•pd± (ýà~'\SFÛ²|!/AYOÈÜ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº¬˜ÐüÏñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYâ.G µŽ¢r—hÌÜ:‚œ Ê +ÙKFzé®›'üvºº¬˜ÐüÏñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂóÞ8B€Sª[ SÝÎÜ@¤ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V º¬˜ÐüÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡Ïþ#ÜþJ—L~½Ã%)pÐÜ@¤ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº¬˜ÐüÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼&B<÷ÄKC—dÕi{Ø„xÒÜ@¤ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº¬˜ÐüÏñ‹+aue_preadä%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýG7aÉ›…J ¥¨t›ê;ÔÜb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºº¬˜ÐüÏñ‹+aue_writeÎ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖPDÇ°Og«^+=˜ÈAEÖÜb¤ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áº¬˜ÐüÏñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²¯aºµL;‡þó᱉¾ØÜ@¤ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V º¬˜ÐüÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýW¼Y¤õ°@V¸ßoÏ Ö MÚÜ@¤ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº¬˜ÐüÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýh1Ÿti_J¡N‹f·pöÜÜ@¤ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº¬˜ÐüÏñ‹+aue_pread²hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýlù}ŽÃAœ–YÞðÃq|çÞÜb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºº¬˜ÐüÏñ‹+aue_writeœhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.GWnË‹@c¬*!j˜…ˆàÜb¤ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áº¬˜ÐüÏñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;Žs®iáF5©²È…drÆâÜ@¤ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V º¬˜ÐüÏñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬ªüˆ¡Û±_‰Az—›¥µ×3=ßäÜJ¤ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºº¬˜ÐüÏñ‹+aue_sendtoà +ret_msgid +17205hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£™ÚPtJ\’Øh¼æÜDê› µ dôFzé®{'üvºµ CjFzé®{'üvºº¬˜ÐüÏñ‹+aue_recvfromà ret_msgid +17205hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýŒ£^!Jz—è¤x¯áþRèÜbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKº¬˜ÐüÏñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýúFö ¡ýK>‹b–n+°*÷êÜD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ«ØÙüÏñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýªDwåtEŠ½âjŸé"ë>ìÜD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ«ØÙüÏñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý 2“Ÿ²²Au´È7Å2[ìGîÜD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ«ØÙüÏñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢›·8âLH´…ù°¶ìðÜD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ«ØÙüÏñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈí陘éIš£Px-[—c/òÜ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢Š¨ù€Ðñ‹+aue_lseekîëmhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøqª‡JÉ@¢Ž0ÕÓJ>¾ôÜ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂÃÞ¼ˆÐñ‹+aue_lseekÈñmhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾dÅZ¼Hô¬øX<|§åöÜ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒßÍËÐñ‹+aue_lseekÈñmhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýó&7m•çOÒ¯ÅÐ ©;ìúÜ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒßÍËÐñ‹+20ÜS7[AIF¬•pd± (ýÉEÎxØHŒöQБæ—øÜ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒßÍËÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýëV­nIùBñ¥é¾Š{®|þÜ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒßÍËÐñ‹+20ÜS7[AIF¬•pd± (ýJûé­diHb ë§\œ¨à=üÜ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒßÍËÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜€fC܆> +>)G2?‚Ý ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŒßÍËÐñ‹+20ÜS7[AIF¬•pd± (ýï4mÓÔ@Ò·?¾p$3€Ý@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒßÍËÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4åÛwÍD °‘—õÁcß„Ý:‚œ Ê +ÙKFzé®›'üvºŒßÍËÐñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŒ´«PG‰Ÿ‘á×·¿n†Ý@¦ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŒßÍËÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèÁŒ[wD¢§U P¼¸Î…ˆÝ@¦ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒßÍËÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý _1Š×Jå£Ñy9öÑsŠÝ@¦ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒßÍËÐñ‹+aue_preadæ+hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦ °]°FK†ÀµÊÉÞ×—ŒÝb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŒßÍËÐñ‹+aue_writeÐ,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*St¡$‘JJ§®ÂYDâŽÝb¦ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŒßÍËÐñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯âo–B,–Ò4WÅ‚Ý@¦ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŒßÍËÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåYЙ÷CFm¾®\E?uð’Ý@¦ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒßÍËÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýv¥MFô¿†ŽÖ?Ép€”Ý@¦ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŒßÍËÐñ‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡¼#Òeß@Eº±g3‚RPË–Ýb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŒßÍËÐñ‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!ÑÐRq³N麙s>q§äטÝb¦ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŒßÍËÐñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5hêD¯FeŽ]×* +ÓšÝ@¦ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŒßÍËÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7NÓ"Nù–’¡)wÁ@œÝJ¦ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºŒßÍËÐñ‹+aue_sendtoà +ret_msgid +17206hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýúà‘Óf|K㎢Á©7®pžÝDê› µ dôFzé®{'üvºµ CjFzé®{'üvºŒßÍËÐñ‹+aue_recvfromà ret_msgid +17206hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýúÌW4{Aí¼Röndÿ Ýbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKŒßÍËÐñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý@aÊÞžF·êŒÃǘ×s¢ÝD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŒßÍËÐñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!–ÁmEFœ´+jGýe.¤ÝD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŒßÍËÐñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯iÐ3á"EÝŠ8~œ§Â¦ÝD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº°ÿÍ‹Ðñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõã’k :BaŒhúÄ’pJ­¨ÝD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº°ÿÍ‹Ðñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšêRÔ*ÈO‹ÿÿÈ\¼ªÝ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e óÝŽÐñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýk6·©¼Mý­|¦*Gà¬ÝJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº óÝŽÐñ‹+aue_sendtoÚ +ret_msgid +17207hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý.¬–[õ_G‡%›µ®2~®ÝJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº óÝŽÐñ‹+aue_sendto˜ +ret_msgid +17208hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÖ_ÂQ Cj–ävÑŒIS°ÝJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº óÝŽÐñ‹+aue_sendto¬ +ret_msgid +17209hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÿw²èG™†’7}狲ÝJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº óÝŽÐñ‹+aue_sendto˜ +ret_msgid +17210hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýãÏür´ÕGëŠe@Fjm´ÝDê› µ dôFzé®{'üvºµ CjFzé®{'üvº óÝŽÐñ‹+aue_recvfromÚ ret_msgid +17207hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÂ2‡‡Kì¯7lØ%Viy¶ÝDê› µ dôFzé®{'üvºµ CjFzé®{'üvº óÝŽÐñ‹+aue_recvfrom˜ ret_msgid +17208hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý›eRLͤH3‹:@%CiÀ¸ÝDê› µ dôFzé®{'üvºµ CjFzé®{'üvº óÝŽÐñ‹+aue_recvfrom¬ ret_msgid +17209hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýqØ@HmæIo¾ŒÜ¸2ãuºÝDê› µ dôFzé®{'üvºµ CjFzé®{'üvº óÝŽÐñ‹+aue_recvfrom˜ ret_msgid +17210hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý+Ñ€UF]«I¦- +Ù9¼Ý0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ²®‰Ðñ‹+aue_lseekú£nhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýªÆ­e„ÀGFŸú=?uéU¾Ý0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UȬãÌ—Ðñ‹+aue_lseekЩnhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýH˜L H‘dûn³–‹8ÀÝ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼ÁÐñ‹+aue_lseekЩnhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÔ< “úM­¦‹¸Ò>ÄÝ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¼ÁÐñ‹+20ÜS7[AIF¬•pd± (ýÔ‰Câ8lK Š t¢Ô›û5ÂÝ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼ÁÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxaîÖ{ÿCª€|B€³iYÈÝ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¼ÁÐñ‹+20ÜS7[AIF¬•pd± (ýw4;C¨©«æ™šÆÝ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼ÁÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊÆÅÍAw¨ ¾\\ÌÝ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¼ÁÐñ‹+20ÜS7[AIF¬•pd± (ýä^àQs|A¿±FÈ‹HïjÊÝ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼ÁÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏÝ0bjOF™SMÄ×h‚ÎÝ:‚œ Ê +ÙKFzé®›'üvº¼ÁÐñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýe#ìGµÑàRçôyðÐÝ@¨ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¼ÁÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýéK•§Ah/H—òÜ&ÒÝ@¨ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼ÁÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸS ù=>B¶ç”yüHaÔÝ@¨ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼ÁÐñ‹+aue_preadª2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýMyΗ»àI€eaiK,Á7ÖÝb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¼ÁÐñ‹+aue_write”3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ÅsVNLòŠDßžF¯ÇØÝb¨ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¼ÁÐñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)Þ,¹oGN§°ìòÎ%×ÚÝ@¨ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¼ÁÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýmhZnK¤]vvV +wÞÜÝ@¨ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼ÁÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂß +s8`DU¸©G{¸ÞÝ@¨ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼ÁÐñ‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰óaž3Ló…ï½á^óàÝb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¼ÁÐñ‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿ}5ƒIæ±®¾Ñ¹.oâÝb¨ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¼ÁÐñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýR÷+.n)@x”fÛB…åäÝ@¨ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¼ÁÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +ÁÑÒ$GU“óý9ÉZYæÝJ¨ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¼ÁÐñ‹+aue_sendtoà +ret_msgid +17211hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚì×<ÐN“ãÚYóâõwèÝDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¼ÁÐñ‹+aue_recvfromà ret_msgid +17211hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý3IÀ[uFL‘‘ ÂµõêÝbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¼ÁÐñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¢Fí²;OÒu!13ˆÝìÝD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâ˾ÀšÐñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5>çã +B³Œk„s«æ“îÝD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâ˾ÀšÐñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýã}ñL@‰•cì,9ÿÁðÝD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâ˾ÀšÐñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµºc:ÞO©µÚAØáÎfòÝD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâ˾ÀšÐñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐaNÓÎFݵø(7OŽ3MôÝ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†‹Ø™ŸÐñ‹+aue_lseekØÏnhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýwÓ«(#HÂ%±ÀSÈã©öÝ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e€±ËŠ¥Ðñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý¨ Ób\íOG–¾M”ŽqøÝJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€±ËŠ¥Ðñ‹+aue_sendtoÚ +ret_msgid +17212hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý@@6;#J ¸¿ï&ЈuþúÝJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€±ËŠ¥Ðñ‹+aue_sendto˜ +ret_msgid +17213hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýê‘rHª@â¾P`Û—ãÉ=üÝJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€±ËŠ¥Ðñ‹+aue_sendto¬ +ret_msgid +17214hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýVíŽï/@ɉn´×1ÀÑÙþÝJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº€±ËŠ¥Ðñ‹+aue_sendto˜ +ret_msgid +17215hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýhxÁŠ‰J˜)Èxƒ €ÞDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€±ËŠ¥Ðñ‹+aue_recvfromÚ ret_msgid +17212hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýôl=VæO²4àñ‚ÞDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€±ËŠ¥Ðñ‹+aue_recvfrom˜ ret_msgid +17213hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý“s™žF*°Áœ +725„ÞDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€±ËŠ¥Ðñ‹+aue_recvfrom¬ ret_msgid +17214hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÍCÝjN„¹[Ô^lµX†ÞDê› µ dôFzé®{'üvºµ CjFzé®{'üvº€±ËŠ¥Ðñ‹+aue_recvfrom˜ ret_msgid +17215hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÙÅ¥°CJ£gÉŸëåˆÞ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UœãµÜ¦Ðñ‹+aue_lseek¤ânhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+bþ JiK/Ž +^«§Ã™&ŠÞ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜýšª©Ðñ‹+aue_lseek¤ânhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}#¢ôˆ¸C”‰×óy¹”TŽÞ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÜýšª©Ðñ‹+20ÜS7[AIF¬•pd± (ý™õRI‡Ÿ(]ȪéŒÞ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜýšª©Ðñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®¨üá]ƒ‚ÕGé–¿ßmä·œ’Þ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÜýšª©Ðñ‹+20ÜS7[AIF¬•pd± (ý :GÖ IµÕÚ…ŒM9Þ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜýšª©Ðñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZ×ù}´I¼‰åjJÞ´°€–Þ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÜýšª©Ðñ‹+20ÜS7[AIF¬•pd± (ýeÄŠ ³VCÇ¢ƒSÝßô™³”Þ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜýšª©Ðñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­ÕR÷ë·H;ª´PÞÔH¨H˜Þ:‚œ Ê +ÙKFzé®›'üvºÜýšª©Ðñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡ˆÁÝD+DÍ’šœÕ ö ·šÞ@ªž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Üýšª©Ðñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýd½’"BmJ`êmûfßœÞ@ªž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜýšª©Ðñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýȶõh5LG’é8ZÐ ¾užÞ@ªž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜýšª©Ðñ‹+aue_pread€&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸYû59KO<ƒC` Â^ Þb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÜýšª©Ðñ‹+aue_writeê&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCÙ‘zñ|H–²J€ì¾±så¢Þbªž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÜýšª©Ðñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýXˆ:ÅyïC+§ 8Ÿ¿‡ï†¤Þ@ªž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Üýšª©Ðñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËUG‰ÔAIm§ß寿;¦Þ@ªž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜýšª©Ðñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬x\BDIEó·²íRå @ø¨Þ@ªž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜýšª©Ðñ‹+aue_preadÄhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýúo}Ú,óC™˜Á¡ƒcj9ºªÞb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÜýšª©Ðñ‹+aue_write®hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆŠžôØNe DŒ‚Ó÷¬Þbªž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÜýšª©Ðñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýi0 §D‚¤±(” B®Þ@ªž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Üýšª©Ðñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜YLi'L}‘ëßB$ +°ÞJªž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÜýšª©Ðñ‹+aue_sendtoà +ret_msgid +17216hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýì}bdþCœ¡aòï; å²ÞDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÜýšª©Ðñ‹+aue_recvfromà ret_msgid +17216hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¤&ºÛkCŠ·6t†c¦Ù´Þbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÜýšª©Ðñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýËgJ{I™†A„ 7E¶ÞD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÜýšª©Ðñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ‚@”QB±­ZU0¸ u,¸ÞD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÜýšª©Ðñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýG³ ÿ˜šJ#¹b$‡QlºÞD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº’ξ´©Ðñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒtØ*¾ÆMX¯€M.³Ù¼ÞD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº’ξ´©Ðñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý2m +È@`E„% Ö\†¾Þ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆþù©®Ðñ‹+aue_lseek¤ˆohostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§u¨Òí€LÑ;³IÌ}ÿóÀÞ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂÑöìµÐñ‹+aue_lseeküohostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•!hxN–‚ýƒç@ŽÚÂÞ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ÀʸÐñ‹+aue_lseeküohostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýf’âZö’Lt¿^׿±ÞCËÆÞ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¢ÀʸÐñ‹+20ÜS7[AIF¬•pd± (ý§Í×›M(¶l,ez,ªÄÞ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ÀʸÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýgTvDF±¸'7 yÛªÊÞ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¢ÀʸÐñ‹+20ÜS7[AIF¬•pd± (ýây½[AÒ™Ù¦¨Ï¼«•ÈÞ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ÀʸÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝ÷d³×¤@ƒ—ìÌ_)Þ%ÎÞ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¢ÀʸÐñ‹+20ÜS7[AIF¬•pd± (ýÓDKÖE_¶5Â4ÌÞ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ÀʸÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜÚm‰áB{­ vÛZ‚dýÐÞ:‚œ Ê +ÙKFzé®›'üvº¢ÀʸÐñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞ‰oiF¸¤SþgÈ=”ÒÞ@¬ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢ÀʸÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæ´àðí`C‡ó†¼ –íÔÞ@¬ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ÀʸÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®÷=Ü Mè›Ñn&.ÉÔ£ÖÞ@¬ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ÀʸÐñ‹+aue_preadø%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýaouȺEt“¤vÒTµVØÞb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢ÀʸÐñ‹+aue_writeâ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýó)»L(¸Þô¶ÓzSøÚÞb¬ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¢ÀʸÐñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"Õév0Lx™}ûm pÜÞ@¬ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢ÀʸÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±€²ÚŸvIF®l/"GÈ‹ÞÞ@¬ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ÀʸÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅÈî½K“¥Vþë+L WàÞ@¬ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ÀʸÐñ‹+aue_preadÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°Bú¬pH¬{®b:z[âÞb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢ÀʸÐñ‹+aue_writeºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJ;êpUè@â·Pá‚dÔvHäÞb¬ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¢ÀʸÐñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ým‚ßDê› µ dôFzé®{'üvºµ CjFzé®{'üvºœôØ·»Ðñ‹+aue_recvfrom˜ ret_msgid +17219hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýû'5!ÍCI€¦bGô¯$„ßDê› µ dôFzé®{'üvºµ CjFzé®{'üvºœôØ·»Ðñ‹+aue_recvfrom¬ ret_msgid +17220hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý0±˜‹YA|•©'f†ßDê› µ dôFzé®{'üvºµ CjFzé®{'üvºœôØ·»Ðñ‹+aue_recvfrom˜ ret_msgid +17221hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýXïl|ƒEʦc™+,ë¸uˆß0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊ“§¹½Ðñ‹+aue_lseek¦ÀohostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýüBý G†‹Á WâŠß0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ¨ÚüÄÐñ‹+aue_lseekþÅohostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýºbÉ‘3KFê’»_ÂáŒqŒß0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UºµŸ‘ÇÐñ‹+aue_lseekþÅohostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐ¥qD$Ne¶a?5¨ô•Éß ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UºµŸ‘ÇÐñ‹+20ÜS7[AIF¬•pd± (ýú/Ý*ç>D“È’£0¨-ïŽß@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UºµŸ‘ÇÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’î€ +Kv…:õñ«íQ¼”ß ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UºµŸ‘ÇÐñ‹+20ÜS7[AIF¬•pd± (ý@}>óO›ë($tEÆ’ß@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UºµŸ‘ÇÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýe;ª1pFo¨‚;³p ½ò˜ß ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UºµŸ‘ÇÐñ‹+20ÜS7[AIF¬•pd± (ýÊKr"ˆ´LE¬FòjªÉ¡–ß@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UºµŸ‘ÇÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýXr~çCBM»3¤ßb®ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áºµŸ‘ÇÐñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†*ö4\˜Eo· <&iN¦ß@®ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ºµŸ‘ÇÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜*Û–K±¦îlâ4ëD]¨ß@®ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UºµŸ‘ÇÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýð‡¼Ê÷zMþ¼‹qûr>ªß@®ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UºµŸ‘ÇÐñ‹+aue_preadÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßw ²bE’ôJJ”W Ȭßb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvººµŸ‘ÇÐñ‹+aue_writeºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõL5æA¸ŒI; ˜ŠÐ®ßb®ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áºµŸ‘ÇÐñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™KS]GX¬­¶Ò1É!b°ß@®ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ºµŸ‘ÇÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—­4µJÓƒ*Ì»ˆŸ®²ßJ®ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvººµŸ‘ÇÐñ‹+aue_sendtoà +ret_msgid +17222hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\…Cëo®AnŒ:¾„‚)6a´ßDê› µ dôFzé®{'üvºµ CjFzé®{'üvººµŸ‘ÇÐñ‹+aue_recvfromà ret_msgid +17222hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýs›íïÛGX²‚.7Ó;ä¶ßbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKºµŸ‘ÇÐñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýû1‡ÅBö¡ ½?Uæg¸ßD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÊîКÇÐñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?“p JÜAä‡i^B‰ºßD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÊîКÇÐñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšrç¹ÉHƒ¦kq>ðš ¼ßD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÊîКÇÐñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬¢ûÊëŽø“fE¶˜d64Û›¾ßD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÊîКÇÐñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘³ª«LB‘°Yéèª6Ü.QrD<|‚‰$ím¨Âß@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e ‰ÖäÑÐñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýêÜ^:D–¥sxóÀ¼½ÄßJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº ‰ÖäÑÐñ‹+aue_sendtoÚ +ret_msgid +17223hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýU­®ÎR@:’dĘYŠüÆßJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº ‰ÖäÑÐñ‹+aue_sendto˜ +ret_msgid +17224hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý3`sµD6ƒ+êǸˆÅÈßJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº ‰ÖäÑÐñ‹+aue_sendto¬ +ret_msgid +17225hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýW5†\õEùªÔ –I¸VDÊßJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº ‰ÖäÑÐñ‹+aue_sendto˜ +ret_msgid +17226hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýŒºÙ3ÜÐMබæZãÍvfÌßDê› µ dôFzé®{'üvºµ CjFzé®{'üvº ‰ÖäÑÐñ‹+aue_recvfromÚ ret_msgid +17223hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý’Ô¬¯1DÚ–ˆÂ½Î:mÎßDê› µ dôFzé®{'üvºµ CjFzé®{'üvº ‰ÖäÑÐñ‹+aue_recvfrom˜ ret_msgid +17224hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýßÔRM ÈC ¸äAêÃþðÐßDê› µ dôFzé®{'üvºµ CjFzé®{'üvº ‰ÖäÑÐñ‹+aue_recvfrom¬ ret_msgid +17225hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¦ŸOÓìEŸh-¶âÒßDê› µ dôFzé®{'üvºµ CjFzé®{'üvº ‰ÖäÑÐñ‹+aue_recvfrom˜ ret_msgid +17226hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýNØ÷ƒO›•½|Iá.¶–Ôß0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uøæ…ÔÐñ‹+aue_lseek¸þohostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\zŸDýN½¥&â,àÏŸÖß0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŠ³ƒ…ÖÐñ‹+aue_lseek¸þohostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý鿵¦¨I¯”ÄÓBÇz§Úß ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŠ³ƒ…ÖÐñ‹+20ÜS7[AIF¬•pd± (ýMïõXÍ0FÚ°½AŸB¬ö1Øß@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŠ³ƒ…ÖÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýfoÇúãCŽ5‹WÖXvÞß ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŠ³ƒ…ÖÐñ‹+20ÜS7[AIF¬•pd± (ýAë25ÉJƒ»aq‰UPyôÜß@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŠ³ƒ…ÖÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:e$¶ÈvOr ˆjœæâß ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŠ³ƒ…ÖÐñ‹+20ÜS7[AIF¬•pd± (ý›P´w$G_¶\gøp6Ǽàß@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŠ³ƒ…ÖÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾5ÿrôKNS•.'«ñ»äß:‚œ Ê +ÙKFzé®›'üvºŠ³ƒ…ÖÐñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«m>kO´¸ÂZÊ)–0æß@°ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Š³ƒ…ÖÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹à!š C¨œm£æ¾¤‚òèß@°ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŠ³ƒ…ÖÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸>Ì7óýB‡GÚª%ëêß@°ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŠ³ƒ…ÖÐñ‹+aue_preadô%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖ²ØäùàO3™doÛƒÿ2ìßb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ³ƒ…ÖÐñ‹+aue_writeÞ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýgòšE+E§“Ë3̇ôXZîßb°ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŠ³ƒ…ÖÐñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7j‘§’ÇAZ“cŽ×¼®é[ðß@°ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Š³ƒ…ÖÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬‚+%§‡Hñ°F”J*xòß@°ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŠ³ƒ…ÖÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤cRhL³—b| ã†8ôß@°ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŠ³ƒ…ÖÐñ‹+aue_pread¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyÚþ,Š@£¦söoîGiößb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ³ƒ…ÖÐñ‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7¹wôöA}©ýk×vÔuVøßb°ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŠ³ƒ…ÖÐñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýUjZÀNKÌ¿®ºuyÄúß@°ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Š³ƒ…ÖÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýàØÐúfÎLŸ„L +”8Ç’üßJ°ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºŠ³ƒ…ÖÐñ‹+aue_sendtoà +ret_msgid +17227hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚ¥m³J8¥~jÚÒ~SþßDê› µ dôFzé®{'üvºµ CjFzé®{'üvºŠ³ƒ…ÖÐñ‹+aue_recvfromà ret_msgid +17227hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýŸÀŠF~ÁOYŸ˜“(¬ä›€àbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKŠ³ƒ…ÖÐñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ývÊ‹ãIì·Òrô "‚àD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºúƒòÖÐñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹¿­NÔ¿VgØð%&„àD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºúƒòÖÐñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"§c.?CŽ9®Úô­)~†àD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºúƒòÖÐñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,ã•ÛOõšîˆ I°%ˆàD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºúƒòÖÐñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýø^0CŒ…LÅŒÌÃWµ‚Ü5Šà0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ·ˆÙÛÐñ‹+aue_lseek¶¤phostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñ‚„‚çKD¶ +Š¾dnŠŒà0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄЦœãÐñ‹+aue_lseek’ªphostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿a*ôÓOÉ•Øͪg#Žà0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UƨÏ÷äÐñ‹+aue_lseek’ªphostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýîBNÎÆF¦ªX€Bdä±’à ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UƨÏ÷äÐñ‹+20ÜS7[AIF¬•pd± (ýË9‚©@«ÿî^ÁÂ~Úà@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UƨÏ÷äÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­NÎ)j^J%…{ »ùè61–à ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UƨÏ÷äÐñ‹+20ÜS7[AIF¬•pd± (ý”»½'•¤B½‚á——Sk©t”à@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UƨÏ÷äÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®ú0â­É@ã—‰¿ðÕÎ}dšà ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UƨÏ÷äÐñ‹+20ÜS7[AIF¬•pd± (ý+aÀ•k¦N˜»&e¸›µõɘà@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UƨÏ÷äÐñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_¯Vi»I ©Ñâ)(?Ïœà:‚œ Ê +ÙKFzé®›'üvºÆ¨Ï÷äÐñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿%õ¹D=»½Ö!?ßžà@²ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ƨÏ÷äÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤öO:~D‰¨oÌ#! à@²ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UƨÏ÷äÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒ>NóˆoO¤ÿ#Z3-gè¢à@²ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UƨÏ÷äÐñ‹+aue_preadö%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓ3·6ÂBËžŸ+@G$‚¤àb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÆ¨Ï÷äÐñ‹+aue_writeà&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿH8TMH´¶°¬-öïc¦àb²ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áƨÏ÷äÐñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎ"Tµv@Í ¤gð,µ¨à@²ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ƨÏ÷äÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀ’çÕF™®‰äxË ·ªà@²ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UƨÏ÷äÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏ°ÃmæïNK«úYvÍ3Ðì¬à@²ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UƨÏ÷äÐñ‹+aue_preadÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿŠ2k±5K“‚ËÏ|f£d®àb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÆ¨Ï÷äÐñ‹+aue_write¾hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶ƒL{K§BP«Qâ’„òO®°àb²ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áƨÏ÷äÐñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥‡ó–C³¯•™y~Ë-ž²à@²ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ƨÏ÷äÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³þ“S ŽJ滨‹3 üÙŸ´àJ²ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÆ¨Ï÷äÐñ‹+aue_sendtoà +ret_msgid +17228hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷â”@£Hw£ŠWñN#öé¶àDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÆ¨Ï÷äÐñ‹+aue_recvfromà ret_msgid +17228hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÇTÛr0AÏ…(4”]êL¸àbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKƨÏ÷äÐñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¡‰¨o"Ei‚××yÿR©^ºàD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº’Å®åÐñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜ŠÐå]èM‘¥Û®ÿàè¼àD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº’Å®åÐñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀKÞÕžõKÝ€NÆñR¹cs¾àD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº’Å®åÐñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»:ÖÈH,F»‡Ø¬q’üÀàD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº’Å®åÐñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçkª}NB¹’çšvìÂÝÂà@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¢›Ù‘èÐñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÝ‘rWötN¯ªŒ¿fÐGÄàJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¢›Ù‘èÐñ‹+aue_sendtoÚ +ret_msgid +17229hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý_›‘¶âKîžñàÃú–ÏÆàJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¢›Ù‘èÐñ‹+aue_sendto˜ +ret_msgid +17230hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý%ÿrhõÚO(ˆÕ==„OÈàJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¢›Ù‘èÐñ‹+aue_sendto¬ +ret_msgid +17231hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý­zìÙaF ´YëE¤7k˜ÊàJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¢›Ù‘èÐñ‹+aue_sendto˜ +ret_msgid +17232hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýE…òŒM™¥ZRœSikOÌàDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢›Ù‘èÐñ‹+aue_recvfromÚ ret_msgid +17229hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýcø¿ t1E[®$”l&ÞÎàDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢›Ù‘èÐñ‹+aue_recvfrom˜ ret_msgid +17230hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý™¬²ÏNO»ó“#º†ºÐàDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢›Ù‘èÐñ‹+aue_recvfrom¬ ret_msgid +17231hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‘„úêBä¼(&†d ÒÒàDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢›Ù‘èÐñ‹+aue_recvfrom˜ ret_msgid +17232hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýO‡¿ kwL²¾ofCÑ5Ôà0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎœ„éêÐñ‹+aue_lseekØÜphostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏ•ÄK"ŠÔqVN‰¹Öà0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬à›¬òÐñ‹+aue_lseek®âphostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóGFoO„,xÄ8Þ–·Øà0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨»¯ëóÐñ‹+aue_lseek®âphostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý e=È@+Kœ„,uŽ Ñ”àÜà ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¨»¯ëóÐñ‹+20ÜS7[AIF¬•pd± (ýL÷ixÿ úàb´ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¨»¯ëóÐñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýªó×Ë;B§ÝLðn1ÍPüà@´ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¨»¯ëóÐñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[9‘±©LLŠ«†æ¢ÁþàJ´ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¨»¯ëóÐñ‹+aue_sendtoà +ret_msgid +17233hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;XÿnòV-‚ábê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¨»¯ëóÐñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý€2p®þ4Am‘êÿ¸šF„‚„áD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâÃÂôóÐñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñ¶TÃJbŽ36Ψè†áD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâÃÂôóÐñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæ¢IELð1F¤XˆáD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâÃÂôóÐñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýXX½-F¾ƒ8}q$éËXŠáD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºâÃÂôóÐñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥œv‰+eG.–ë|0„cŒá0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uèõ¶ïùÐñ‹+aue_lseek°ˆqhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×80U;H]¸JvêYZ£}Žá@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÔÙÚ¾þÐñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý9¶ÀcÈáI˳i¸ +<ÍjáJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔÙÚ¾þÐñ‹+aue_sendtoÚ +ret_msgid +17234hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÚ?MŽ0JˆƒR–C²,˜’áJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔÙÚ¾þÐñ‹+aue_sendto˜ +ret_msgid +17235hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ývàкÖG¶ô=É8Ī”áJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔÙÚ¾þÐñ‹+aue_sendto¬ +ret_msgid +17236hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýZˆùü;àD9”!.¤«™–áJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔÙÚ¾þÐñ‹+aue_sendto˜ +ret_msgid +17237hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¿£­ìƒC¿öšÆcB˜áDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔÙÚ¾þÐñ‹+aue_recvfromÚ ret_msgid +17234hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¨¥!ÝOO²8IMÛ šáDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔÙÚ¾þÐñ‹+aue_recvfrom˜ ret_msgid +17235hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýª;K=cN™Pª?…°œáDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔÙÚ¾þÐñ‹+aue_recvfrom¬ ret_msgid +17236hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýcYWj߆Kx€mbf¤•Â£žáDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔÙÚ¾þÐñ‹+aue_recvfrom˜ ret_msgid +17237hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý ”š{(@p„–åË<òÞ á0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UުвÑñ‹+aue_lseekêšqhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›8Â&Kð„3<ñhL¢á0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖ‰¯Þ‚Ññ‹+aue_lseekêšqhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂíòT_J¦¸ƒ«Þá;¦á ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÖ‰¯Þ‚Ññ‹+20ÜS7[AIF¬•pd± (ý”hŒ¯˜?@#¦Ç[\AL¼¶Ï=ë(Ð(‹ÐáD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºþ§ïç‚Ññ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåÊäèÈBºV;`ÆÃÒáD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºþ§ïç‚Ññ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·,fˆ˜HK‹R–Õò:°tÔáD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºþ§ïç‚Ññ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýUoólŒC£Ÿ]Ã_S;YáÖá0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ¸´ÿˆÑñ‹+aue_lseekàÀqhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹ˆ4ôEb¡Ëf•b1±žØá0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼’åÂÑñ‹+aue_lseek¶ÆqhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßîÜ^G¾·€õx†mÄ›Úá0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜšéÑ‘Ññ‹+aue_lseek¶ÆqhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýTÛ¤¹¦N-–Eÿc Äù)Þá ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÜšéÑ‘Ññ‹+20ÜS7[AIF¬•pd± (ýãТ~B"›˜°­B é¿Üá@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜšéÑ‘Ññ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈS'‡±Fö†oí;Õ.dÍâá ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÜšéÑ‘Ññ‹+20ÜS7[AIF¬•pd± (ýáF颵M_½™64/zVàá@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜšéÑ‘Ññ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙWiØ„Et–Ñå~&s¬æá ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÜšéÑ‘Ññ‹+20ÜS7[AIF¬•pd± (ý•}íLK…¡R1™²ºöòäá@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜšéÑ‘Ññ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞɃ› KጔFlÓö„èá:‚œ Ê +ÙKFzé®›'üvºÜšéÑ‘Ññ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“ðsDÜ‹ñí{;fêá@¸ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÜšéÑ‘Ññ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊC+qÇ(MTŠ£Œ¿"Žìá@¸ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜšéÑ‘Ññ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6DO¡}rO£­»Äv×Gîá@¸ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜšéÑ‘Ññ‹+aue_preadî%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°°ÅêúdA +£Ê_¶&,AÚðáb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÜšéÑ‘Ññ‹+aue_writeØ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýׄþ³GB°™¿J9$òáb¸ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÜšéÑ‘Ññ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡Ô‚àG}ºQþÏ ×Àôá@¸ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÜšéÑ‘Ññ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^dáŽK/“Ó5:Šöá@¸ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜšéÑ‘Ññ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdò~±4)EÄ©áWZÛ××Öøá@¸ž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜšéÑ‘Ññ‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸Aãhr@ĽïÆêFÇúáb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÜšéÑ‘Ññ‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµ›ÏðÆqL —(d˜\+c7üáb¸ž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÜšéÑ‘Ññ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýy2úeKû´Lu6ÚÑþá@¸ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÜšéÑ‘Ññ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃV1pñïBN†`n SZ>€âJ¸ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÜšéÑ‘Ññ‹+aue_sendtoà +ret_msgid +17239hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸýÆ€SD#“ÂmÉÒô‚âDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÜšéÑ‘Ññ‹+aue_recvfromà ret_msgid +17239hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý²zð){C7µÅ—ÙÔäjÒ„âbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÜšéÑ‘Ññ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÒz zMí»ô# ¥‡v†âD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºØÞ¨Û‘Ññ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚG«•PE0œÑáßòØ;¾ˆâD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºØÞ¨Û‘Ññ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐL½nÞ@c©4îì¥ÃèÜŠâD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºØÞ¨Û‘Ññ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“þ2‚;­F[¾*ßÎŒúŒâD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºØÞ¨Û‘Ññ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýé£Ù N¾¦_m/äúÞ;Žâ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eæÝë”Ññ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý]VxLDr–  ÷ØYâJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºæÝë”Ññ‹+aue_sendtoÚ +ret_msgid +17240hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý$ƒ€à̲JTº±gÛo1[’âJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºæÝë”Ññ‹+aue_sendto˜ +ret_msgid +17241hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýòäº# +´@æºNM1Â%”âJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºæÝë”Ññ‹+aue_sendto¬ +ret_msgid +17242hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬¾úðÓO¥/O|Šo ÓëÑ–âJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºæÝë”Ññ‹+aue_sendto˜ +ret_msgid +17243hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý\™Ù@¬:Eÿ§ZÒw®Ú˜âDê› µ dôFzé®{'üvºµ CjFzé®{'üvºæÝë”Ññ‹+aue_recvfromÚ ret_msgid +17240hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¸ió~G;Aƒ”DÎIF€ßšâDê› µ dôFzé®{'üvºµ CjFzé®{'üvºæÝë”Ññ‹+aue_recvfrom˜ ret_msgid +17241hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýôk•–’A@½°5¿Du—HœâDê› µ dôFzé®{'üvºµ CjFzé®{'üvºæÝë”Ññ‹+aue_recvfrom¬ ret_msgid +17242hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÙÀˆ¾œ÷N»¤h3Ûò7ÓnžâDê› µ dôFzé®{'üvºµ CjFzé®{'üvºæÝë”Ññ‹+aue_recvfrom˜ ret_msgid +17243hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý˜C$‘ÍDؾ>BÖãSe â0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾½µ˜Ññ‹+aue_lseekàøqhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/ÑàŽÅN8‘¾ßÙˆói¢â0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžôóÒŸÑñ‹+aue_lseek¶þqhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1¨j#GjŒDxÅsö|¤â0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂø„Å Ññ‹+aue_lseek¶þqhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒ«€ÄŠ1I£;™ÌýŸ¨â ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÂø„Å Ññ‹+20ÜS7[AIF¬•pd± (ý|Ø^2P»A÷–Mèc!¾û¦â@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂø„Å Ññ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘BØ‹5Jë†ÜM\*ð§¬â ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÂø„Å Ññ‹+20ÜS7[AIF¬•pd± (ýæñ*ÙD"¾=ärkñ ªâ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂø„Å Ññ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýö‰òrÄ@U†ÿƒº€jÁY°â ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÂø„Å Ññ‹+20ÜS7[AIF¬•pd± (ýå Äm¨åL$¨cƒ—×Á®â@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂø„Å Ññ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)ÓÚsk5I4®ä'gF-Ʋâ:‚œ Ê +ÙKFzé®›'üvºÂø„Å Ññ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%]D—@âM¥³?ê*z(´â@ºž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Âø„Å Ññ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýù`qÇM½Á›<˜nYæ¶â@ºž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂø„Å Ññ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%Z,"ŸBÆ•à,¤O>¬ä¸â@ºž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂø„Å Ññ‹+aue_pread¢2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎmúƒÒIq…v(Ï+1ºâb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÂø„Å Ññ‹+aue_writeŒ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóÿ´„ôGÍ¡­`0 +Ýs=¼âbºž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÂø„Å Ññ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU¼ƒèøF£W5L„f‹ +¾â@ºž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Âø„Å Ññ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýØà8¤ôuH€€0¡j’<ûÀâ@ºž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂø„Å Ññ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýϨåñYwN¿¾ˆ!éEpPòÂâ@ºž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂø„Å Ññ‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýVµ-¦i0HÇ’mÍŽ­geÄâb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÂø„Å Ññ‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­‘ÈnMÙ@„/2íO@æ'Æâbºž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÂø„Å Ññ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(ŽLIGðöï”éÍÒÈâ@ºž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Âø„Å Ññ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬aû>s[K2ˆKøƒ¾ä!4ÊâJºž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÂø„Å Ññ‹+aue_sendtoà +ret_msgid +17244hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýy»ËBÁïAú­‚ !žNÊÌâDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÂø„Å Ññ‹+aue_recvfromà ret_msgid +17244hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÒFìb+¯N@ƒS7ô™ðä[Îâbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÂø„Å Ññ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýŽ^u2›E ‘I…a°5uÐâD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶¸ÇΠÑñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…‰$dFN«FGa® ßÒâD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶¸ÇΠÑñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóf—W}—K » 8&¿ÃÔâD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶¸ÇΠÑñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²¦4Õ{B ð­«1–οÖâD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶¸ÇΠÑñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=Ðù¶N`ªÜ}‰ÐF¿Øâ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uî¹ÚŸ§Ññ‹+aue_lseek̤rhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~Öóg¶C6•ºÿÌëÚùÚâ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÖàò˜«Ññ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý1@•{Ôd@ ‰ó"WÜâJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÖàò˜«Ññ‹+aue_sendtoÚ +ret_msgid +17245hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý­de a„Eਚx>‹öÚÞâJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÖàò˜«Ññ‹+aue_sendto˜ +ret_msgid +17246hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÑØ_Ó|PDVˆue^~® NàâJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÖàò˜«Ññ‹+aue_sendto¬ +ret_msgid +17247hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý0Ô5‹L3¢1e¸aŠ!°ââJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÖàò˜«Ññ‹+aue_sendto˜ +ret_msgid +17248hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýQÌê)ßO$Ž\ÛI äâDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÖàò˜«Ññ‹+aue_recvfromÚ ret_msgid +17245hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýq ʪ‰¾A¿––,Ó…ŠlæâDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÖàò˜«Ññ‹+aue_recvfrom˜ ret_msgid +17246hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¿Óð†aDÿœB|p¹¬èâDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÖàò˜«Ññ‹+aue_recvfrom¬ ret_msgid +17247hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýp³™ÆbNµ¦©Mt™ .ñêâDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÖàò˜«Ññ‹+aue_recvfrom˜ ret_msgid +17248hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÒÝ>ÝVõIä‹qjD8?yìâ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uв‚ã®Ññ‹+aue_lseekˆ·rhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹ÃËQ ÒHà†¢A/@‡©Xîâ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UðĬ¸¯Ññ‹+aue_lseekˆ·rhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×\û ¶ Oj™ Òõsdpòâ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UðĬ¸¯Ññ‹+20ÜS7[AIF¬•pd± (ýj³ˆˆnÛL†r’%‰:Uðâ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UðĬ¸¯Ññ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`µZå¹Ò_³ÌãJ¾ž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¨âŒ¬¾Ññ‹+aue_sendtoà +ret_msgid +17250hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8§õÚ9L½êÊ{¨I¦MÎãDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¨âŒ¬¾Ññ‹+aue_recvfromà ret_msgid +17250hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý-ÐËF$3EU¦rÅÞE»ÕÐãbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¨âŒ¬¾Ññ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýJfÈÛÈÊE £Þ£«uÒãD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¨âŒ¬¾Ññ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥Ë¡ë Aꌦ + âý€ÔãD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¨âŒ¬¾Ññ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýgãëA¼[·kiÖãD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¨âŒ¬¾Ññ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿J;ñGf·.‡zªE ÒØãD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¨âŒ¬¾Ññ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýnÛVü¿F­™4Q(qâÚã@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¨ÿƒÆÁÑñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý2 >jc„I ®ŠFü1_þŒÜãJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¨ÿƒÆÁÑñ‹+aue_sendtoÚ +ret_msgid +17251hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýjÄÄAÉ”èt¡pdþàãJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¨ÿƒÆÁÑñ‹+aue_sendto¬ +ret_msgid +17253hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýøãÜö`A´³É'1¥+ÙâãJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¨ÿƒÆÁÑñ‹+aue_sendto˜ +ret_msgid +17254hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýV»èúBy¹¨ïÌ"^+äãDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¨ÿƒÆÁÑñ‹+aue_recvfromÚ ret_msgid +17251hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýœ4$CûŸ?>RÌ–æãDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¨ÿƒÆÁÑñ‹+aue_recvfrom˜ ret_msgid +17252hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýZµ,¿7Z@ÕŽí!VK2XèãDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¨ÿƒÆÁÑñ‹+aue_recvfrom¬ ret_msgid +17253hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÌÉÅœÒAŒ«{ñ,☒$êãDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¨ÿƒÆÁÑñ‹+aue_recvfrom˜ ret_msgid +17254hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýZî'«˜ C£¢óñ â—kìã0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨ã ¿ÅÑñ‹+aue_lseek¤•shostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýv<ì†ã,H¦¸¼Ý :b†|îã0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬˜ñ‚ÍÑñ‹+aue_lseekúšshostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßÞz¯ÃBÿ·Ë²´¿‚9¹ðã0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ýâŸÍÑñ‹+aue_lseekúšshostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<÷Ô ÈÂGœµV¯¨I0Çôã ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U–ýâŸÍÑñ‹+20ÜS7[AIF¬•pd± (ý'G_ÑWÓJ0ŽŠŠ=÷5²òã@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ýâŸÍÑñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰ì(Bz6Iƒ…$×Õ ¯oøã ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U–ýâŸÍÑñ‹+20ÜS7[AIF¬•pd± (ýS¯a +I®½OÀ£ÃH_öã@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ýâŸÍÑñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxá;}ªýEÉ»«¢µ¥K>”üã ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U–ýâŸÍÑñ‹+20ÜS7[AIF¬•pd± (ýÈ´áÝÝcFÁ™ó(ˆ‹½R=úã@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ýâŸÍÑñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýn²Ûa$šFLˆçG_²Ô„~þã:‚œ Ê +ÙKFzé®›'üvº–ýâŸÍÑñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæÀ!³öF³FB›:4&€ä@Àž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V –ýâŸÍÑñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýú9-cçuO—Ç?ä_8¶Ö‚ä@Àž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ýâŸÍÑñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýž}&ó?Lƒº§Vœ_¹„ä@Àž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ýâŸÍÑñ‹+aue_pread´2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†|U­¦N£…¢‹ö Æy†äb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–ýâŸÍÑñ‹+aue_writež3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-O*½ K׌µÚÓ 0ˆäbÀž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á–ýâŸÍÑñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ým{CNŸ¾œÄnÜç-Šä@Àž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V –ýâŸÍÑñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËOÛ…ÜKÚ ØÇ]²ª˜Œä@Àž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ýâŸÍÑñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|yTS•NH™;¿C»C‡ÁŽä@Àž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–ýâŸÍÑñ‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýP¨7sŸBÌ’Ks7ÚOŒHäb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–ýâŸÍÑñ‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýHSTä£õCŒ§t1¸¨Å’äbÀž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á–ýâŸÍÑñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýO6ëQÁH@ø·M›ìþ9‚”ä@Àž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V –ýâŸÍÑñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„cj­1uOã¼à¾Ó„´Ê–äJÀž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº–ýâŸÍÑñ‹+aue_sendtoà +ret_msgid +17255hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿõñA› ×’ +…›à˜äDê› µ dôFzé®{'üvºµ CjFzé®{'üvº–ýâŸÍÑñ‹+aue_recvfromà ret_msgid +17255hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý-‚ê¨GÔˆÞ -ŽÌšäbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK–ýâŸÍÑñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýŒÛ=O–±Ká¨ØÍ4ßOžœäD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºìñå¨ÍÑñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýš”‹€_dMƤ…p,/㘞äD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºìñå¨ÍÑñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`‡y˜«G{¢^ŠÉ ± äD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºìñå¨ÍÑñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(nëLZ«à;úŠ€¢äD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºìñå¨ÍÑñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^H `lmJÚœL t†#7ò¤ä0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàÀÉÏÔÑñ‹+aue_lseekøÀshostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýß8žá§DM€ +ÙˆÂÖ¦ä@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e”ɬó×Ññ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýñRúÑGâ·FÑŽõÚºð¨äJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº”ɬó×Ññ‹+aue_sendtoÚ +ret_msgid +17256hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý’ëpÅC­€ý -goüaªäJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº”ɬó×Ññ‹+aue_sendto˜ +ret_msgid +17257hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýǹöì‚K/¹¬9ù‘Pá¬äJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº”ɬó×Ññ‹+aue_sendto¬ +ret_msgid +17258hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý2xýÁ?ºN Ž€ÂéuO²®äJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº”ɬó×Ññ‹+aue_sendto˜ +ret_msgid +17259hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÅëŠ@"‰Œ¢#èL{,°äDê› µ dôFzé®{'üvºµ CjFzé®{'üvº”ɬó×Ññ‹+aue_recvfromÚ ret_msgid +17256hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýWDÏ@a‹åvk%F²äDê› µ dôFzé®{'üvºµ CjFzé®{'üvº”ɬó×Ññ‹+aue_recvfrom˜ ret_msgid +17257hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý «•ðK*±Sº-ËRD·´äDê› µ dôFzé®{'üvºµ CjFzé®{'üvº”ɬó×Ññ‹+aue_recvfrom¬ ret_msgid +17258hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÖ¹KƒpM·¨]·%3¹¹¾¶äDê› µ dôFzé®{'üvºµ CjFzé®{'üvº”ɬó×Ññ‹+aue_recvfrom˜ ret_msgid +17259hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýhÐ^ ]GG˜«,œ|^¹¸ä0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UæÄÕ’ÜÑñ‹+aue_lseekªÓshostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­çÊiÁD±ÊÛ ˜;ºä0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UæÄÕ’ÜÑñ‹+aue_lseekªÓshostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,Wæ§BI½‰|h8Kx¾ä ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UæÄÕ’ÜÑñ‹+20ÜS7[AIF¬•pd± (ýŽÍÔn64Lí°™+¼±€M¼ä@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UæÄÕ’ÜÑñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅì[1i„E°ß ‚§mÂä ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UæÄÕ’ÜÑñ‹+20ÜS7[AIF¬•pd± (ýYú¨¢ýN¨«×q{é}¶Àä@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UæÄÕ’ÜÑñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýXÛ˜$®-BߟUEŠÑÐÞ¼Æä ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UæÄÕ’ÜÑñ‹+20ÜS7[AIF¬•pd± (ýÔh[ŸVÖNC­=—ŽÔ]mÛÄä@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UæÄÕ’ÜÑñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖ4Ë%¹C«ªhg|k‘¬ãÈä:‚œ Ê +ÙKFzé®›'üvºæÄÕ’ÜÑñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI倶 –@ö³»šE$8 KÊä@ž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V æÄÕ’ÜÑñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”ÎC²¾I¢ºA‘êÉÄësRàäJž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºðèö›ÜÑñ‹+aue_sendtoà +ret_msgid +17260hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýD- B%!E‹˜¢Ø¼¿¢iâäDê› µ dôFzé®{'üvºµ CjFzé®{'üvºðèö›ÜÑñ‹+aue_recvfromà ret_msgid +17260hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýËZÿ•fF¤¸Œ¥r±;š¬ääbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKðèö›ÜÑñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýΙ“±27F¾í®= /FæäD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºðèö›ÜÑñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤†Î}ÏD‹£$2Ìm„èäD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºðèö›ÜÑñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýo‰RíD]¸s°^ÇšêäD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºðèö›ÜÑñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞ™I-ìN÷›×ä_ÚìäD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºðèö›ÜÑñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬Ìûîmet,ÊL§º¿W"® îä0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²Î™ßãÑñ‹+aue_lseekšùshostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=ô{ÏMx†Q˜Ããô¬èðä0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”ú…ëÑñ‹+aue_lseekšùshostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQR~AÎ~A¼*K;X¼ôä ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”ú…ëÑñ‹+20ÜS7[AIF¬•pd± (ýgYš3~E¶œ¿b3òä@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”ú…ëÑñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZ\þÿB“½Geš*øä ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”ú…ëÑñ‹+20ÜS7[AIF¬•pd± (ýÓë@{ÍÒG›‰0+Á®™,öä@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”ú…ëÑñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýL¾F¹GD2·–µXŽ4Œoúä:‚œ Ê +ÙKFzé®›'üvº”ú…ëÑñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýý Î/ÑO꘰#b)~™¤üä@Äž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”ú…ëÑñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•úy°6H‚¼¥Îts6ù4þä@Äž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”ú…ëÑñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸‚‰:NϾ[]¥>ÿ€å@Äž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”ú…ëÑñ‹+aue_preadè%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸ð[âO)¿(U&VD«‚åb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº”ú…ëÑñ‹+aue_writeÒ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyáÊ‘ù±Ið››iD(Õú„åbÄž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”ú…ëÑñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†xtÿÇYN° ýiñ$¼E†å@Äž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”ú…ëÑñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[g,÷]H?™ó®w¶¼eqˆåJÄž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº”ú…ëÑñ‹+aue_sendtoà +ret_msgid +17261hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®7”JÌüHu’wŤ¯2ŠåDê› µ dôFzé®{'üvºµ CjFzé®{'üvº”ú…ëÑñ‹+aue_recvfromà ret_msgid +17261hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý6€÷ΉNÖÁR·Ó'q÷Œåbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK”ú…ëÑñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý\šÎèòYEYsÑj7nJŽåD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº²§ØëÑñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ?–üMÉIgµ®Y]'=ÖsåD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº²§ØëÑñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýEº— +?ÃD%¨±Ë¢å4’å0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŠÇÓ¢ëÑñ‹+aue_lseekæ•thostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYƒI‚¤‘NQ ³ÐB«”å@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÄ°äŸîÑñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýŸhi´×@¡Š>¦¨q!–åJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÄ°äŸîÑñ‹+aue_sendtoÚ +ret_msgid +17262hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýìóÓgYvLd—eÕøÚ¸Q˜åJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÄ°äŸîÑñ‹+aue_sendto˜ +ret_msgid +17263hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýQÈÙ¿‹Nå¨øvœŽšåJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÄ°äŸîÑñ‹+aue_sendto¬ +ret_msgid +17264hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý â)|C´©‰«É~›¦œåJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÄ°äŸîÑñ‹+aue_sendto˜ +ret_msgid +17265hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý~_yI¿.]žtžžåDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÄ°äŸîÑñ‹+aue_recvfromÚ ret_msgid +17262hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý°1ù ­±OJŠ•L6˜ åDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÄ°äŸîÑñ‹+aue_recvfrom˜ ret_msgid +17263hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýßåÑwHI ‘>þ.l<¢åDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÄ°äŸîÑñ‹+aue_recvfrom¬ ret_msgid +17264hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýé§Ði"K†þå ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UêÌ»ìˆÒñ‹+20ÜS7[AIF¬•pd± (ýƒóàpÔ_D„¹ +l‘rL¸aüå@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÌ»ìˆÒñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOÿ»ªØkAì‚`ʹ"ô‘’€æ:‚œ Ê +ÙKFzé®›'üvºêÌ»ìˆÒñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙ,®šeFl²Ai³©Ÿ5‚æ@Èž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V êÌ»ìˆÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáîðJZíH •¡#ú}½¹C„æ@Èž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÌ»ìˆÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸ~šöv°@ЫÒ £ƒÿ¨†æ@Èž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÌ»ìˆÒñ‹+aue_preadú%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜LûC±L,‰.èÁH!«?ˆæb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºêÌ»ìˆÒñ‹+aue_writeä&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´£Œ(F?@„… 5äδôŠæbÈž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áêÌ»ìˆÒñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒßqø.ÍM䟼ÝòV§¦MŒæ@Èž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V êÌ»ìˆÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"Á~åw@*H7®Ÿ6¯Žæ@Èž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÌ»ìˆÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖû`§|O ¶GÆLêÑÙæ@Èž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÌ»ìˆÒñ‹+aue_preadÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýعÓY:þFç…E·üÒÉö€’æb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºêÌ»ìˆÒñ‹+aue_writeºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨ªÍ ÊòIò§‚Ì&yó÷þ”æbÈž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áêÌ»ìˆÒñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæBí´CíJ…®c÷R à…ê–æ@Èž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V êÌ»ìˆÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýc}Dv7Ff˜ÜyÃ,÷˜æJÈž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºêÌ»ìˆÒñ‹+aue_sendtoà +ret_msgid +17271hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬ˆûÀcÆÅn¿Lßí 92òšæDê› µ dôFzé®{'üvºµ CjFzé®{'üvºêÌ»ìˆÒñ‹+aue_recvfromà ret_msgid +17271hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÛ6Ä„¨Gµ‘¾ƒAþœœæbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKêÌ»ìˆÒñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÈ`ŽñsH~Ÿê” +Î61žæD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº‚ºŸöˆÒñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3QiRHì‰jä²øT æD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº‚ºŸöˆÒñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§v ÃþÍN7´N)r9‰”Ó¢æD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº‚ºŸöˆÒñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉn:3A»ßv×%ô¤æD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº‚ºŸöˆÒñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&4áHéCÎÙ¸Z¦æ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨´Â‰Òñ‹+aue_lseekÞ‡uhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°-¿UDK+‡ +ܳqúʨæ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uê¦Ý…‘Òñ‹+aue_lseek¸uhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽ“EÝNšF¹œ +Ρ^úªæ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ¾à—Òñ‹+aue_lseek¸uhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷Ô…çJ=Aߊ3Øb€ïó®æ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uþ¾à—Òñ‹+20ÜS7[AIF¬•pd± (ýCýv_£@\¨I½þ†.¬æ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ¾à—Òñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]Z€ÎüDdŸ OÏ‹Ä6$²æ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uþ¾à—Òñ‹+20ÜS7[AIF¬•pd± (ýØÒÎ «IâƒS›jøbæ°æ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ¾à—Òñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'‰Ê®Bï­‡¯œe[– ¶æ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uþ¾à—Òñ‹+20ÜS7[AIF¬•pd± (ý“íQ:NmG÷ªËú­W’R´æ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ¾à—Òñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýHT[.ˆIü™•ÕÑlP¸æ:‚œ Ê +ÙKFzé®›'üvºþ¾à—Òñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“ çë ˆD¶p“qâ'ºæ@Êž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V þ¾à—Òñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷È÷zGG¥»ž­¢y)¬‘¼æ@Êž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ¾à—Òñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý6(y ;]I¯)Æ ‹Yr¾æ@Êž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ¾à—Òñ‹+aue_preadâ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕpŠD²¯HŠ‡_£(aúÀæb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºþ¾à—Òñ‹+aue_writeÌ4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñ¯›6?eNÉ‡Ç |å uÂæbÊž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áþ¾à—Òñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýB,²|XgB~Ô… +­ÐdÄæ@Êž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V þ¾à—Òñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸ Z«oK5žùº„Ò”Ææ@Êž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ¾à—Òñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕ8ž`Ay•ci.m“G·Èæ@Êž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ¾à—Òñ‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞŠ8öËH Òz Ø÷«Êæb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºþ¾à—Òñ‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8$½E I"Ÿ'Tz” µÌæbÊž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áþ¾à—Òñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­ÀrMÎKέ3mAžäÎæ@Êž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V þ¾à—Òñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,J]GÛ*I²œTèИroGÐæJÊž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºþ¾à—Òñ‹+aue_sendtoà +ret_msgid +17272hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\`³:1ÍDÄ!»ê“ÒæDê› µ dôFzé®{'üvºµ CjFzé®{'üvºþ¾à—Òñ‹+aue_recvfromà ret_msgid +17272hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÕÉvo GC²Ë…Íò½5Ôæbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKþ¾à—Òñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýIºW€.>GþµÒòöÛ8ÔÖæD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº€†Ëé—Òñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓƒGG‹§©^0ÕNØæD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº€†Ëé—Òñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7›âkRC¢îÝOÚæD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº€†Ëé—Òñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›Ðc´t‡E}˜wÿ‘êÆ0ÜæD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº€†Ëé—Òñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý춡ÊEAæ™fv…2c#Þæ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÇ¤Ò˜Òñ‹+aue_lseekƳuhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”¸>Õ‹E‡Ì”Vß©üàæ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¢¢ïùšÒñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýk7R¨ºˆL !ˆÜp>ï#âæJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¢¢ïùšÒñ‹+aue_sendtoÚ +ret_msgid +17273hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýãѶiE‰­VÂ@ýÛõäæJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¢¢ïùšÒñ‹+aue_sendto˜ +ret_msgid +17274hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý–ƒoóã&G‘Ž‰’nà\‚ ææJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¢¢ïùšÒñ‹+aue_sendto¬ +ret_msgid +17275hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý1À¨»„Cˆ«9\—¥®èæJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¢¢ïùšÒñ‹+aue_sendto˜ +ret_msgid +17276hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýïº-}÷M:…ý•y‡þêæDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢¢ïùšÒñ‹+aue_recvfromÚ ret_msgid +17273hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýIèÁ‘{äI» +»&>’ìæDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢¢ïùšÒñ‹+aue_recvfrom˜ ret_msgid +17274hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýSRžÙ+I†‡èš¡²îæDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢¢ïùšÒñ‹+aue_recvfrom¬ ret_msgid +17275hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýìçRZ"IØ®CŒ²@ÎðæDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢¢ïùšÒñ‹+aue_recvfrom˜ ret_msgid +17276hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýPɦ¹V÷C+¬ºßl¥qòæ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”òñ• Òñ‹+aue_lseek†ÆuhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI\ëå~Hž„Pf¨Ë=(ôæ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ™•Ó¦Òñ‹+aue_lseek†ÆuhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýàÜó€mE7²ÿZHÑtƒøæ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uœ™•Ó¦Òñ‹+20ÜS7[AIF¬•pd± (ýHìJÆ#þI „…úÏâ¾öæ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ™•Ó¦Òñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýì¯'‰@©]£Ó„˜E›üæ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uœ™•Ó¦Òñ‹+20ÜS7[AIF¬•pd± (ýÍÏ0¤½¹LÄ ôVÚ¬à=úæ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ™•Ó¦Òñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõð~…ÔL¸qd¿™ÜJ€ç ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uœ™•Ó¦Òñ‹+20ÜS7[AIF¬•pd± (ýNNð=[@(‚ñWvfj¢ûþæ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ™•Ó¦Òñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+rê-TkOO“3ƒz|R‚ç:‚œ Ê +ÙKFzé®›'üvºœ™•Ó¦Òñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐÊÀk$rI¥¡w½&¾ißa„ç@Ìž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ™•Ó¦Òñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåÚ×"›JN¬62øØ[2Ö†ç@Ìž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ™•Ó¦Òñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&Mg¾ô/JS¼¹Ó8Šç++ˆç@Ìž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ™•Ó¦Òñ‹+aue_pread†&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁ˜øþ>3@gq¢iá—Šçb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºœ™•Ó¦Òñ‹+aue_writeð&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýHzΰÎ;Jü£Tt£@p‰ÚŒçbÌž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áœ™•Ó¦Òñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½îñÜžKJ"¤|¨÷:ÌnâŽç@Ìž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ™•Ó¦Òñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·•áúá¨@™Ž mªtn¡ç@Ìž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ™•Ó¦Òñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +3¾ðx›Hõ˜Yt¤,½É’ç@Ìž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uœ™•Ó¦Òñ‹+aue_pread¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýSˆ·û›YEœšÆ[Ëš³·H”çb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºœ™•Ó¦Òñ‹+aue_write¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý' WXÐXG]½ø«ÇÁÌ––çbÌž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áœ™•Ó¦Òñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5Õ(é6K•¼§¹/ö–|˜ç@Ìž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œ™•Ó¦Òñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏ_¾ç^g@µcfe‘ˆ„¬šçJÌž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºœ™•Ó¦Òñ‹+aue_sendtoà +ret_msgid +17277hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñªinÎ|C+WK^>—Ž¹œçDê› µ dôFzé®{'üvºµ CjFzé®{'üvºœ™•Ó¦Òñ‹+aue_recvfromà ret_msgid +17277hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÃGY©HNe añ“é‡äžçbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKœ™•Ó¦Òñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý Ü>›2¿L´AØ‘ |r˜ çD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºœ™•Ó¦Òñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯Y§@¦°Î’0|'X¢çD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºœ™•Ó¦Òñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5ZÉU½JÕ’þã$ëìP¤çD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÈæàܦÒñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}›•žÎHò´§Š"9?}¦çD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÈæàܦÒñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶ÐÖ’³BÔ¢ÿ›VîE“¨ç0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´à—â§Òñ‹+aue_lseek‚ìuhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûÇ——N#¾6l¯PªmÁªç0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨“²¥¯Òñ‹+aue_lseekÚñuhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕ`:ØWÜ@¦žnA…$ÞWö¬ç@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¬œô¦±Òñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýmuƾ>óCŤ¯þ7'ÒÛ®çJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¬œô¦±Òñ‹+aue_sendtoÚ +ret_msgid +17278hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÛ"F?ÿ¯H4 ’&#RSaw°çJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¬œô¦±Òñ‹+aue_sendto˜ +ret_msgid +17279hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýýÊÚÞFŒ›óÐ#*óô¢²çJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¬œô¦±Òñ‹+aue_sendto¬ +ret_msgid +17280hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýìÙû¢ÝK(«›:aïP‡´çJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¬œô¦±Òñ‹+aue_sendto˜ +ret_msgid +17281hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýtYaŸþmAÒüs£1Ò K¶çDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¬œô¦±Òñ‹+aue_recvfromÚ ret_msgid +17278hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý*Îï–?GóŠ9ò-ÞÚåN¸çDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¬œô¦±Òñ‹+aue_recvfrom˜ ret_msgid +17279hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý&YqÕ¹LMºà›ön‡KºçDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¬œô¦±Òñ‹+aue_recvfrom¬ ret_msgid +17280hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý[÷¨BÀ¯?cw¤ÈlÙ¼çDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¬œô¦±Òñ‹+aue_recvfrom˜ ret_msgid +17281hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý}Ë è‘©BÇÊv=ânØ9¾ç0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¥îƵÒñ‹+aue_lseekÚñuhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyvs¿Õ NŸ«ths¤äÂç ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¥îƵÒñ‹+20ÜS7[AIF¬•pd± (ý` ä*,Fãµñ’¶´I¯Àç@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¥îƵÒñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉReæàWHs¢tª>ðïÀ¨Æç ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¥îƵÒñ‹+20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬¼úî[»7wìMQ˜Sð4ø‡£Äç@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¥îƵÒñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-:suq FB¶‰d³‹ïÊç ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¥îƵÒñ‹+20ÜS7[AIF¬•pd± (ýÌ5| s4DûŠ7&Œ³j;Èç@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¥îƵÒñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;psæŠNY„;¯8cÌç:‚œ Ê +ÙKFzé®›'üvº¥îƵÒñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-8%•ÛCu±üsºÃcÙØÎç@Ξ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¥îƵÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8?ðp1QLç ´W–$í>Ðç@Ξ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¥îƵÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸Åˆ²”!O«ŠX[x·§{Òç@Ξ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¥îƵÒñ‹+aue_preadô%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾‚`p3A 0Ö‹KÔçb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¥îƵÒñ‹+aue_writeÞ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏ Ê,„KL¡‘0‡|@*ÖçbΞ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¥îƵÒñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒ_M£ÃFÖ½/MŽº·^ÚØç@Ξ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¥îƵÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽÌz©±Eб_–‹F—¢ÇÚç@Ξ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¥îƵÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}Eq1saBW˜¥ .pÉÜç@Ξ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¥îƵÒñ‹+aue_preadÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýtËÙȳBäªKôcßg–Þçb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¥îƵÒñ‹+aue_writeºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\ +w"4êFP¶p/Î…O*ÖàçbΞ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¥îƵÒñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@4lj—@½®ÈÝ3ÿܼâç@Ξ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¥îƵÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýuÂܺ•…DŽ”çÞ³×gLfäçJΞ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¥îƵÒñ‹+aue_sendtoà +ret_msgid +17282hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅ-›¦Ù€K—¬îýà»ù<æçDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¥îƵÒñ‹+aue_recvfromà ret_msgid +17282hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÂÍ=OtI#³-ÝúPG@èçbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¥îƵÒñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý&êòQb"Ošƒ óWü«ÝQêçD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚî¾ÐµÒñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýüì@È™Hû¿²Ý‡À÷/ìçD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚî¾ÐµÒñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýç÷ß3B´Nº) âziîçD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚî¾ÐµÒñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýž×0•×M˜¦=-¤„PëDðçD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚî¾ÐµÒñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿ïa~ÃG­‹ÐvÚŸ¶vòç0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÐ÷Ðò¶Òñ‹+aue_lseekÌ¥vhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýó#P:N"LUž?ÝSþ‹sôç0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uòýǵ¾Òñ‹+aue_lseek¦«vhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýC®ÇUQÕB¦ ìÙgöç0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ýœºÄÒñ‹+aue_lseek¦«vhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâî|I±£Lá3ŽÑ¦½Ñôúç ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¢ýœºÄÒñ‹+20ÜS7[AIF¬•pd± (ýÐ`©nôC1«ûÉιoøç@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ýœºÄÒñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎUAr&Bç´b'+71 ¥þç ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¢ýœºÄÒñ‹+20ÜS7[AIF¬•pd± (ýÞfØò¾M­£x·4•7üç@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ýœºÄÒñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýv ¯™†ÍL+šz-ňÃ{h‚è ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¢ýœºÄÒñ‹+20ÜS7[AIF¬•pd± (ýBì ‘‡D؈Z9¼Ì.ï€è@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ýœºÄÒñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁÐŒô_Lžræþxƒòù„è:‚œ Ê +ÙKFzé®›'üvº¢ýœºÄÒñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýê<êXA¸µvEàyg7†è@О Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢ýœºÄÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\ºW‡¬&CḄ@n89×Lˆè@О Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ýœºÄÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýýôþ|ßLÖ¥0úFŒŠè@О Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ýœºÄÒñ‹+aue_preadê3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀ)tI„μó¯vŒèb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢ýœºÄÒñ‹+aue_writeÔ4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|DÇŽ@å·S¼–S>}ŽèbО Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¢ýœºÄÒñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀº.”íB.»µSÁÒ§è@О Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢ýœºÄÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOÎEÝŽjB2­Lä™VãS²’è@О Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ýœºÄÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýs”•!9O^–/÷ìƒÒÏ8”è@О Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ýœºÄÒñ‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚ßµ ÛD·˜;,Â)—–èb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢ýœºÄÒñ‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5ZPÃÔÓ@ôŸ´º…àùµ¢˜èbО Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¢ýœºÄÒñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýô—KYBªòh§ušè@О Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢ýœºÄÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨9µ„dN͸šEa&A(œèJО Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¢ýœºÄÒñ‹+aue_sendtoà +ret_msgid +17283hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆqdŸºLKNo¡c4ïžèDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢ýœºÄÒñ‹+aue_recvfromà ret_msgid +17283hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý©NÔªg±Dé 9JçÞ? èbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¢ýœºÄÒñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¬`oÔD¼µyþ7ÀÓ\Ž¢èD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÀì³ÃÄÒñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9ýwQF‘«©íVºð‹¤èD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÀì³ÃÄÒñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”û¼¡¿LϽ®!4ÄÈ<¦èD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÀì³ÃÄÒñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“âõù˜8Ho¼á ÄöüÉ~¨èD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÀì³ÃÄÒñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýGKˆ3ÕïEqŒÀ5, -ªè0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uöß·‚ÆÒñ‹+aue_lseekÄÑvhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3öééŽHB\ˆmÄy~8¬è@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e²õÔÇÒñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý!×GsUfAä‡êÒ:Žœm®èJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº²õÔÇÒñ‹+aue_sendtoÚ +ret_msgid +17284hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÃã ¹B ŒL¨ã³oä°èJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº²õÔÇÒñ‹+aue_sendto˜ +ret_msgid +17285hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý;©¦1Fš’BE[°Œ™²èJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº²õÔÇÒñ‹+aue_sendto¬ +ret_msgid +17286hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýô…_Õv÷I —ÎyÛlÜö´èJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº²õÔÇÒñ‹+aue_sendto˜ +ret_msgid +17287hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý*ÿH›üçNïŠdl™…¥»K¶èDê› µ dôFzé®{'üvºµ CjFzé®{'üvº²õÔÇÒñ‹+aue_recvfromÚ ret_msgid +17284hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýC{ŸtG‚@åžìJH&¢³Å¸èDê› µ dôFzé®{'üvºµ CjFzé®{'üvº²õÔÇÒñ‹+aue_recvfrom˜ ret_msgid +17285hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý£ kÕo(K¤‹Q½ì OH¿ºèDê› µ dôFzé®{'üvºµ CjFzé®{'üvº²õÔÇÒñ‹+aue_recvfrom¬ ret_msgid +17286hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý œ¾kJâ¿…òlÞkü¼èDê› µ dôFzé®{'üvºµ CjFzé®{'üvº²õÔÇÒñ‹+aue_recvfrom˜ ret_msgid +17287hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý>©bÖEѯûà&Ÿ¾è0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uä’ŠÆÍÒñ‹+aue_lseek€ävhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýöWÄè ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U躹­ÓÒñ‹+20ÜS7[AIF¬•pd± (ýRÝ'0”ÀGZ“]qDBt³Âè@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U躹­ÓÒñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýA¬²¡D„² ³)úxBÈè ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U躹­ÓÒñ‹+20ÜS7[AIF¬•pd± (ýåܽ~¨Fû˜{¬•”¨ë¶Æè@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U躹­ÓÒñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)™†@LM¥ÜV˜…Ìè ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U躹­ÓÒñ‹+20ÜS7[AIF¬•pd± (ýÍænNf;@¿šÆJÇŸOWÊè@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U躹­ÓÒñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1åD±¬ßJEàp[¼Îè:‚œ Ê +ÙKFzé®›'üvºèº¹­ÓÒñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­Cq¿mîM¡¼B³è1|Š»Ðè@Òž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V 躹­ÓÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌ …¨À§‘Ù$xêÔè@Òž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U躹­ÓÒñ‹+aue_pread–&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýØ_æ·«FBº¢™½*ÁÖèb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºèº¹­ÓÒñ‹+aue_write€'hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½@eG*œá–’€í‹ØèbÒž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á躹­ÓÒñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýª~»;o~Lq @eÅ;£ÆeÚè@Òž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V 躹­ÓÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýY»‹Ý‘P@’ŽD&iO¾Üè@Òž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U躹­ÓÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@ÑÀÀçLK„¥»bFb‘Þè@Òž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U躹­ÓÒñ‹+aue_pread´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬`X€ÂOÀ£Dá7 íL{àèb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºèº¹­ÓÒñ‹+aue_writežhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­ ¦ÝÄ A®™üáëÊ& [âèbÒž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á躹­ÓÒñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7*ì Jé™í;QH¼2èäè@Òž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V 躹­ÓÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕIúå?›G$vI€+qfæèJÒž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºèº¹­ÓÒñ‹+aue_sendtoà +ret_msgid +17288hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýX*ué.O&•ú°üóqçÙèèDê› µ dôFzé®{'üvºµ CjFzé®{'üvºèº¹­ÓÒñ‹+aue_recvfromà ret_msgid +17288hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýu9K‘ãI°‚Ìcïò~4Õêèbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK躹­ÓÒñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý·®ƒ’ÛJ«­H/¬NtQYìèD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºê‡·ÓÒñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxÁcY·W@r„h5‡<8ÎîèD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºê‡·ÓÒñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼|1]{D¶^Ôb•$š”ðèD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºê‡·ÓÒñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬¢û¾úºÉ™^@¿º ŠÏÚ¼ òèD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºê‡·ÓÒñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýê¼¥•§AGšÎ@ûN’ôè0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨¹’’ÕÒñ‹+aue_lseek„ŠwhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýöƒœ˜††MÁ‘ÿ÷…7GFêöè0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uèô·ÕÜÒñ‹+aue_lseekàwhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýb,ò¡ÍE¿WÝÿëøè@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¢¾û€ÞÒñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýï`5ó¥­Fá„®/6 úèJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¢¾û€ÞÒñ‹+aue_sendtoÚ +ret_msgid +17289hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý;E{7 wIã·QG +¯,PüèJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¢¾û€ÞÒñ‹+aue_sendto˜ +ret_msgid +17290hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý™!ñyCé³äR@É™þèJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¢¾û€ÞÒñ‹+aue_sendto¬ +ret_msgid +17291hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýYsÉU­FD£Xº}®€Ç‰€éJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¢¾û€ÞÒñ‹+aue_sendto˜ +ret_msgid +17292hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý‘ü+Š‘M5aFP*µ«¸‚éDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢¾û€ÞÒñ‹+aue_recvfromÚ ret_msgid +17289hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý\`™PpJQ“TjŠšéÌÓ„éDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢¾û€ÞÒñ‹+aue_recvfrom˜ ret_msgid +17290hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÁ1w#<÷H†œ”·Îú2φéDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢¾û€ÞÒñ‹+aue_recvfrom¬ ret_msgid +17291hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¯z¬›ãþO…½º9Îhú)êˆéDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢¾û€ÞÒñ‹+aue_recvfrom˜ ret_msgid +17292hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý€îù(âI^±En)C¸÷Šé0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UªÜÊ âÒñ‹+aue_lseekàwhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®"½0È=A9˜»i‡]8B"Žé ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UªÜÊ âÒñ‹+20ÜS7[AIF¬•pd± (ý­zã÷üDŒÑâ^ãDîéŒé@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UªÜÊ âÒñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“5¦K±èOU­Â[z$ð‰’é ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UªÜÊ âÒñ‹+20ÜS7[AIF¬•pd± (ýÈŒg¾‡F8•ô„B‡¨&´òì¢Æé ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UΔ”ñÒñ‹+20ÜS7[AIF¬•pd± (ýJ¿ÎNŸOM˜×ÎETåÝ™Äé@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UΔ”ñÒñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©B9G¨©‰€þ'÷ÿÊé ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UΔ”ñÒñ‹+20ÜS7[AIF¬•pd± (ýNéá¬F€²Ÿ l +=iÈé@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UΔ”ñÒñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³R%§eHMP°e=ÀsTÎé ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UΔ”ñÒñ‹+20ÜS7[AIF¬•pd± (ý -“ËjNs²d(ÙOß ­Ìé@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UΔ”ñÒñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ¼K¸ÖOPƒ³<Û ¦Ðé:‚œ Ê +ÙKFzé®›'üvºÎ””ñÒñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýºð\ûÛBàŸÄÈ ß½¶Òé@Öž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Δ”ñÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆs è"]OU™1JÿV—€cÔé@Öž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UΔ”ñÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦j!êG7¢û¼‹„Ò×­Öé@Öž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UΔ”ñÒñ‹+aue_preadà3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«Ò7ÁÖjI¤˜°—Žè]gãØéb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎ””ñÒñ‹+aue_writeÊ4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý sÁ+D™¼* þFî¨ÂÚébÖž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áΔ”ñÒñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/«=¶ðšD™¸½sù9pS¿Üé@Öž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Δ”ñÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡jè@ø•Sì#)a‹Þé@Öž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UΔ”ñÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»71ã=êLs°r¨¢Ó Ëûàé@Öž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UΔ”ñÒñ‹+aue_preadÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®:™ÜIhK\ƒ=,P½Äâéb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎ””ñÒñ‹+aue_writeºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿ7«,¦Ne±WDœõ§äébÖž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áΔ”ñÒñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)Z06%´Fx´ËSØíŠæé@Öž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Δ”ñÒñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýí¢"‡+FF»Ê"¶¢„nèéJÖž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÎ””ñÒñ‹+aue_sendtoà +ret_msgid +17294hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶ƒY½(M.švô$´i_êéDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÎ””ñÒñ‹+aue_recvfromà ret_msgid +17294hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý*: <îSEe»\}-ºR´­ìébê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKΔ”ñÒñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¤K7Ûo·MДÀÛh,mç~îéD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚßëñÒñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèRMYƒùC̯ +  §4ðéD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚßëñÒñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘u +{O#§Ì´‘q¹òéD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚßëñÒñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>VþÚ‰~Bçžù0SÔ AôéD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚßëñÒñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýEª{Ù@"‘ͨaÆÒO öé0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®³²óÒñ‹+aue_lseek´ïwhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬{{êA?Kš‘èfïâj‹øé@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eØÇž®ôÒñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý×&I¼AMŽëÉŽyª>úéJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØÇž®ôÒñ‹+aue_sendtoÚ +ret_msgid +17295hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýl.2 KÑ¥k4.§ .üéJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØÇž®ôÒñ‹+aue_sendto˜ +ret_msgid +17296hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýæ§Ñ”†E6ºÄérM—þéJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØÇž®ôÒñ‹+aue_sendto¬ +ret_msgid +17297hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýgÁhl×Bs°åñÎTçH€êJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØÇž®ôÒñ‹+aue_sendto˜ +ret_msgid +17298hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¢oæöeFã´izÞ/qÆÓ‚êDê› µ dôFzé®{'üvºµ CjFzé®{'üvºØÇž®ôÒñ‹+aue_recvfromÚ ret_msgid +17295hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¸®¦"¯CF£„|[g‹ÆBJ„êDê› µ dôFzé®{'üvºµ CjFzé®{'üvºØÇž®ôÒñ‹+aue_recvfrom˜ ret_msgid +17296hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý±[ëjuA +‚\Ëjo„>†êDê› µ dôFzé®{'üvºµ CjFzé®{'üvºØÇž®ôÒñ‹+aue_recvfrom¬ ret_msgid +17297hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýC¿gÛ?Cÿ––ê¿>,e߈êDê› µ dôFzé®{'üvºµ CjFzé®{'üvºØÇž®ôÒñ‹+aue_recvfrom˜ ret_msgid +17298hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýªIbëöHœw'Œ…¯—èŠê0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°¹ÐõúÒñ‹+aue_lseekôxhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýš*µm{Gž„j^©¶iþ¶Œê0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ¯ß‡€Óñ‹+aue_lseekôxhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕÑ|·©?IƉ& ÑÔ¶ìê ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uˆ¯ß‡€Óñ‹+20ÜS7[AIF¬•pd± (ýzB?–B0CÙµ·¨ç˜“_Žê@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ¯ß‡€Óñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýA•oóL¦¨>î©ò”ê ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uˆ¯ß‡€Óñ‹+20ÜS7[AIF¬•pd± (ýÌævèΆKº&¨|ÉÏÑ›’ê@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ¯ß‡€Óñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾}usønFü„´±X) ˜ê ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uˆ¯ß‡€Óñ‹+20ÜS7[AIF¬•pd± (ýmQ׬_KJ%¶ÞvwÃ…5–ê@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ¯ß‡€Óñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#2ú7¤O=†æ£YbEšê:‚œ Ê +ÙKFzé®›'üvºˆ¯ß‡€Óñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýû¥kÏ`ÇAù–žzÚŸ¿w œê@Øž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆ¯ß‡€Óñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®Âühàö¥DN檉q½>Èžê@Øž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ¯ß‡€Óñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒ×M·|úM,€Xåa!ia% ê@Øž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ¯ß‡€Óñ‹+aue_preadŒ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýª&5W!¥@ë¨èÁ'Cì’¢êb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºˆ¯ß‡€Óñ‹+aue_writeö&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýH­ÍËøJÜ¿g"rÓ÷4¤êbØž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áˆ¯ß‡€Óñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýq_ó;B[§÷ÅĤ¥¦ê@Øž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆ¯ß‡€Óñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[÷Ú”}Jå„Ž‹ˆ tIY¨ê@Øž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ¯ß‡€Óñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅxª3T(C‚žq²Òœ–™ªê@Øž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ¯ß‡€Óñ‹+aue_pread¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQªãE¯CC‹JŠ\Úo>©¬êb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºˆ¯ß‡€Óñ‹+aue_write¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#ˆÅ¿Å›@¥¨ÄRñÈìI®êbØž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áˆ¯ß‡€Óñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýan¶¤ÁÝI9°q’7È÷¸°ê@Øž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆ¯ß‡€Óñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚm‹Ÿ™]MY¼²*ó&²êJØž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºˆ¯ß‡€Óñ‹+aue_sendtoà +ret_msgid +17299hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýêv>blGX°F8i´´êDê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆ¯ß‡€Óñ‹+aue_recvfromà ret_msgid +17299hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÒÙ¹Ï_JE$„pÃöATg¶êbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKˆ¯ß‡€Óñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý?È{ërDÚ¸ùê_U±s¸êD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®¶ø€Óñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶'œ^š@Á¾á˜P‘úÔºêD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®¶ø€Óñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcáX¯XI1Ÿº82`9]мêD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®¶ø€Óñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨H.ªM…Xefhbº¾êD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®¶ø€Óñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡T{þN¦ª’ôì9eXˆÀê0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uª¸¿Â‚Óñ‹+aue_lseekú§xhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§R÷ ÈA²•kB-Ë ˜‹Âê0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶â”…ŠÓñ‹+aue_lseekέxhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘éq +?zBè‚š;r/÷IÄê@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÔýÿÚŠÓñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýàAÂØDÆ¢ê‘#=µ¼=ÆêJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔýÿÚŠÓñ‹+aue_sendtoÚ +ret_msgid +17300hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý VÖ ¥a@Ï•9ù¾iÈêJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔýÿÚŠÓñ‹+aue_sendto˜ +ret_msgid +17301hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýˆÙüëš9AOŸ¹v´<ÌÊêJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔýÿÚŠÓñ‹+aue_sendto¬ +ret_msgid +17302hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýôe…Ú ²M´…¸v(ûSÌêJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÔýÿÚŠÓñ‹+aue_sendto˜ +ret_msgid +17303hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý™XLÉÍ@Ö®€ju’E/{ÎêDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔýÿÚŠÓñ‹+aue_recvfromÚ ret_msgid +17300hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýVÈŸ ðB…•âœã¿‡qÐêDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔýÿÚŠÓñ‹+aue_recvfrom˜ ret_msgid +17301hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýà–ì¸ýµM;¦8ÓYîåbÒêDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔýÿÚŠÓñ‹+aue_recvfrom¬ ret_msgid +17302hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý€T{0¾ØAè‹làÿ¦éÔêDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔýÿÚŠÓñ‹+aue_recvfrom˜ ret_msgid +17303hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýŠÂÛwJGs=r?ÑõøÖê0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ®ˆûŽÓñ‹+aue_lseekέxhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ]ï+?ŠA_…e5•]ÇÏ[Úê ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U ®ˆûŽÓñ‹+20ÜS7[AIF¬•pd± (ýe7˜4X¬Cµ¸‰@¸ø©ö<Øê@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ®ˆûŽÓñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýLÅgÔ1B˜h¾õcð¤Þê ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U ®ˆûŽÓñ‹+20ÜS7[AIF¬•pd± (ý7.­‹ÅHlœ™ÏiôÌȆÜê@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ®ˆûŽÓñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý):=cÌFV“)rŽL{¶câê ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U ®ˆûŽÓñ‹+20ÜS7[AIF¬•pd± (ýÃ˨c@çò† †|ÁXàê@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ®ˆûŽÓñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖdý=ttFð€{"Ï´Gäê:‚œ Ê +ÙKFzé®›'üvº ®ˆûŽÓñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©‡G÷K ˆrI5`-Èæê@Úž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V  ®ˆûŽÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`tp¾6KU‰G8¶hSŒèê@Úž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ®ˆûŽÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŘO®ã?(øéñêê@Úž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ®ˆûŽÓñ‹+aue_preadþ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™ŽÎUòœH}¨ÍÉÌK¥ ìêb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº ®ˆûŽÓñ‹+aue_writeè&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆ.}rË¢GƳÆRcÙÉFîêbÚž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á ®ˆûŽÓñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@å`Á’$L„ 82ñ6Ü>ðê@Úž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V  ®ˆûŽÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ývMz‹GàG˜°~³c +Tòê@Úž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ®ˆûŽÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæJX·;EÊ»÷- ¶$lœôê@Úž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ®ˆûŽÓñ‹+aue_preadÌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxiGf;@a›­Q“éšÙöêb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº ®ˆûŽÓñ‹+aue_write¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–“cÏ]`Ng£dàÂÂÄ6øêbÚž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á ®ˆûŽÓñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+'ƒÉå—IÝ£ùûii„Æúê@Úž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V  ®ˆûŽÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøþIÛêFn˜ÓÏXï¨üêJÚž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº ®ˆûŽÓñ‹+aue_sendtoà +ret_msgid +17304hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQXÈöósJ·ˆV‘uÚ0?¿þêDê› µ dôFzé®{'üvºµ CjFzé®{'üvº ®ˆûŽÓñ‹+aue_recvfromà ret_msgid +17304hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýVûYÕ=Jp™®™Ò›àT€ëbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK ®ˆûŽÓñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýPŸ° ÄE‹àþñ+múF‚ëD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº ®ˆûŽÓñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýbæF$LMø„×}–ÀÕ^&„ëD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº ®ˆûŽÓñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèuí|{Is¨“ ¢•ÚA†ëD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÐ—„Óñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýòF!k^/Kó¦ÊÒCê焈ëD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÐ—„Óñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÃ7 A©¿noSCÍçŠë0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uâ»ïÑ‘Óñ‹+aue_lseekªáxhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+2?á0ÖN°cV„ºµDŒë0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UàßÁ•™Óñ‹+aue_lseek„çxhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâ·ŸŽ¬‹@2¯mKW„K[&Žë@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯šëŠ¢Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý1¼,„@ɬ´±p€V`sëb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯šëŠ¢Óñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÅ:fƒo¹FBVǘ”l2ó’ë0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´ñ…îÓñ‹+aue_lseek„çxhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛòýyAäB’¡‹µã„–ë ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U´ñ…îÓñ‹+20ÜS7[AIF¬•pd± (ý²Z=>Kk¨Ù9_u~?¬”ë@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´ñ…îÓñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdìÜ­»üE½£J¥Ã=šë ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U´ñ…îÓñ‹+20ÜS7[AIF¬•pd± (ýi_ÍÒ.Lh§ÒˆH_¢§‰˜ë@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´ñ…îÓñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5kà­±ãEˈ8„¹1"–Ÿžë ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U´ñ…îÓñ‹+20ÜS7[AIF¬•pd± (ýJ— ®AEM¤ú‚ÉÄÞT„œë@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´ñ…îÓñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍ4—tJQKåŒl*¨š Øä ë:‚œ Ê +ÙKFzé®›'üvº´ñ…îÓñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý e=ôE£CŽWbÍRn${¢ë@Üž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ´ñ…îÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýb‡¾SFAì¿ž7¡8Ù3¤ë@Üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´ñ…îÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýëíE0sùG­Èg¦l°¦ë@Üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´ñ…îÓñ‹+aue_preadÔ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåÌe¢HOÖˆ¥Ü廊ëb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº´ñ…îÓñ‹+aue_write¾4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý" ݹs¿@Ÿ»±Õñ°ÎVªëbÜž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á´ñ…îÓñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýª–nà_IN¢õaN,Ùâ¬ë@Üž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ´ñ…îÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýin‰Z~Kùˆ6zKÝN6­®ë@Üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´ñ…îÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽÜÈÎ^ëK‘ÚyÃØðÇ°ë@Üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U´ñ…îÓñ‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŒ!è0EJš½îsT“‰²ëb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº´ñ…îÓñ‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌË›¯c´C]…ëÅéüñ]ú´ëbÜž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á´ñ…îÓñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'z"ÒOÇc„±Oõ¶ë@Üž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ´ñ…îÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿFÃ8M­™‚Ó})¸ëJÜž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº´ñ…îÓñ‹+aue_sendtoà +ret_msgid +17305hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýü +â&4^Cõ”‹ræs8ºëDê› µ dôFzé®{'üvºµ CjFzé®{'üvº´ñ…îÓñ‹+aue_recvfromà ret_msgid +17305hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýbT:ʵOŠ¡Hd&”¼ëbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK´ñ…îÓñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¸“§8n×Að¹k¾¾Ü." ¾ëD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºðþ»÷Óñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýSwƒ¨BŠ±©a÷¾ÌÁÀëD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºðþ»÷Óñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýD„ϸ!LÙ€Þ£ß|PÂëD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºðþ»÷Óñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáAÅÀJB¤ƒg…¿ÛzÄëD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºðþ»÷Óñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀµY¥‰$@G³"ªXgºù%Æë@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¾¿ªÍžÓñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÛ}INNALž‚¢:bÙc,Èëb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¾¿ªÍžÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýdN#=jE_—ïAs)ý‰Êë@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Â ‡ÀŸÓñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¢Îûéž%¼—ALŽ§ÿö§{ŸÌëb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Â ‡ÀŸÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý¸=xaöKŽõÊúz +'Îë@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ôË¡Å Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý‡#A–;5MðÐÁ›¤v KÐëb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ôË¡Å Óñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ývÆ›é“CÏž‚pðÈÃx Òë0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌëùá Óñ‹+aue_lseekþ˜yhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýh8ßøU›JF¢ÚŒ"žˆ>Ôë@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e®ð¾ˆ¡Óñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÇWÜ#1L±œ)aT4œ3ÖëJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®ð¾ˆ¡Óñ‹+aue_sendtoÚ +ret_msgid +17306hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý,S/ +M° N——ÊŦØëJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®ð¾ˆ¡Óñ‹+aue_sendto˜ +ret_msgid +17307hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýOY¾åoB˜ƒ¡eCIÚëJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®ð¾ˆ¡Óñ‹+aue_sendto¬ +ret_msgid +17308hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý@ÐF0E6­Ñˆè,nÜëJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®ð¾ˆ¡Óñ‹+aue_sendto˜ +ret_msgid +17309hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÁÆ +8,ãH¿*ÐܬåÞëDê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ð¾ˆ¡Óñ‹+aue_recvfromÚ ret_msgid +17306hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýé7‡çuAš}õÍx"AàëDê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ð¾ˆ¡Óñ‹+aue_recvfrom˜ ret_msgid +17307hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý™Œ³ž3EJL›ñ>i¼ÑR/âëDê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ð¾ˆ¡Óñ‹+aue_recvfrom¬ ret_msgid +17308hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýmÝS‚þ–Gè€Z'Ì1ÞÚfäëDê› µ dôFzé®{'üvºµ CjFzé®{'üvº®ð¾ˆ¡Óñ‹+aue_recvfrom˜ ret_msgid +17309hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýói¦Á7èG*€økšx‘æë@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¶†Í›¡Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý7uQp²—Nõƒâyu¦èëb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¶†Í›¡Óñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýO «•Ü@T¦ D|œ²ƒêë@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Î¢Ã¢Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýã§Ù³U†OR oï•š$éGìëb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Î¢Ã¢Óñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý,ð[–˾KõˆÛîÛ +E›Íîë@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÊÉÀ¢¤Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÌîâ †ˆH$´ˆŒ#ÎKõðëb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÊÉÀ¢¤Óñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý^ÎÜF~é®Ñ'üvºÐ×µ¨Fz鮩'üvº°äÿ§®]vRS<„äB±ÔÉ™¬¤Óñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý$õï^–Oq‰sUDpÔ2»òë$–œ ×µ¨Fz鮩'üvº^ÎÜF~é®Ñ'üvºÔÉ™¬¤Óñ‹+aue_fork +arg_pid1512hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1512ppid1281execbash20ÜS7[AIF¬•pd± (ýÿ¯¤€ßòCÕ¨Ý|¸eVL)ôë°œ ^ÎÜF~é®Ñ'üvºÑROÄ:^…[ž:]!+…í/usr/bin/whoami'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ÔÉ™¬¤Óñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine whoamippid1282execbash20ÜS7[AIF¬•pd± (ý>?Q+ ¥L¬ºÅJ-¨{Šöë<°œ ^ÎÜF~é®Ñ'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÔÉ™¬¤Óñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282exec whoami20ÜS7[AIF¬•pd± (ý•š4ÝÞrCR¡Òj$ˆç¥røë@°œ ^ÎÜF~é®Ñ'üvº‰oý©äÇU¤©A)Eǹ ÔÉ™¬¤Óñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ý—ý*ªí±F®³?µFÓ4úë°œ ^ÎÜF~é®Ñ'üvº‰oý©äÇU¤©A)Eǹ ÔÉ™¬¤Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282exec whoami20ÜS7[AIF¬•pd± (ýŠ,vØ^Iâƒü0YÜ*Müë<°œ ^ÎÜF~é®Ñ'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÔÉ™¬¤Óñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýwå9Œ¤{Fû„ˆaxG¼Oþë@°œ ^ÎÜF~é®Ñ'üvºXꎩð®…\®ð@JÌ…¼âÔÉ™¬¤Óñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýþÿá˜S‡Jxž(*üö²“€ì@°œ ^ÎÜF~é®Ñ'üvºXꎩð®…\®ð@JÌ…¼âÔÉ™¬¤Óñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýXv¸Ì0sÉñïMI©—ÂL¾ÄÎŒì2°œ ^ÎÜF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÔÉ™¬¤Óñ‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ývºÑ°Aç¶=GÛ““#TŽì2°œ ^ÎÜF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÔÉ™¬¤Óñ‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýþKAVJDÚ¡ºÙÛÓîúì2°œ ^ÎÜF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÔÉ™¬¤Óñ‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýɽæ.í=Ma§êŠÐvÄ|’ì2°œ ^ÎÜF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÔÉ™¬¤Óñ‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ý&‹I¢½£D‚ íD ð”ì2°œ ^ÎÜF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÔÉ™¬¤Óñ‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ý Y yšA ƒ´†´™pÃ:–ì°œ ^ÎÜF~é®Ñ'üvºÞA`ì•øËQ¸•bxñË"œÔÉ™¬¤Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282exec whoami20ÜS7[AIF¬•pd± (ý¾rfˆë8Ar³fAÈÍ‹§˜ì:°œ ^ÎÜF~é®Ñ'üvºÔÉ™¬¤Óñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282exec whoami20ÜS7[AIF¬•pd± (ý»`­ˆ:Ok¤ㇺËKhšì:°œ ^ÎÜF~é®Ñ'üvºÔÉ™¬¤Óñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282exec whoami20ÜS7[AIF¬•pd± (ý&w™JAôOÓæÇ Áœì<°œ ^ÎÜF~é®Ñ'üvºÜN½Ëê¯+^¯êZ£®+V$/etc/nsswitch.confÔÉ™¬¤Óñ‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýEÔ}ª!L?–}Í÷—¶þâžì@°œ ^ÎÜF~é®Ñ'üvºÜN½Ëê¯+^¯êZ£®+VÔÉ™¬¤Óñ‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýqé —–O›q_¢Ä?GŽ ì@°œ ^ÎÜF~é®Ñ'üvºÜN½Ëê¯+^¯êZ£®+VÔÉ™¬¤Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ý9£f„MHN‹©P´%ÄgA¢ì°œ ^ÎÜF~é®Ñ'üvºÜN½Ëê¯+^¯êZ£®+VÔÉ™¬¤Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282exec whoami20ÜS7[AIF¬•pd± (ý( ;Ú)Kî©k(ȃ¤ì<°œ ^ÎÜF~é®Ñ'üvºfš Ž_è^ŸŽkèþ–/etc/pwd.dbÔÉ™¬¤Óñ‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýÕH°B†B: U±ˆÅl7q¦ì@°œ ^ÎÜF~é®Ñ'üvºfš Ž_è^ŸŽkèþ–ÔÉ™¬¤Óñ‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýÈK \ÖEú~ +Ôå¨ì@°œ ^ÎÜF~é®Ñ'üvºfš Ž_è^ŸŽkèþ–ÔÉ™¬¤Óñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýú/¶ažH½°9¥.Ümªì@°œ ^ÎÜF~é®Ñ'üvºfš Ž_è^ŸŽkèþ–ÔÉ™¬¤Óñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ý©û{¥¾EšÆzm…¡W¬ì@°œ ^ÎÜF~é®Ñ'üvºfš Ž_è^ŸŽkèþ–ÔÉ™¬¤Óñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýáåk¹vÚFîž ×åÏÇ®ì@°œ ^ÎÜF~é®Ñ'üvºfš Ž_è^ŸŽkèþ–ÔÉ™¬¤Óñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýg·˜Æ,Gº‰+ε6É]°ì@°œ ^ÎÜF~é®Ñ'üvºfš Ž_è^ŸŽkèþ–ÔÉ™¬¤Óñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ý²˜c»>L‚®óRÂ9 í²ì@°œ ^ÎÜF~é®Ñ'üvºfš Ž_è^ŸŽkèþ–ÔÉ™¬¤Óñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýRf}ñ»C4°ì5˜šõa´ì@°œ ^ÎÜF~é®Ñ'üvºfš Ž_è^ŸŽkèþ–ÔÉ™¬¤Óñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ý¨BhŸ§ºB-ª!½´_6“ݶì@°œ ^ÎÜF~é®Ñ'üvºfš Ž_è^ŸŽkèþ–ÔÉ™¬¤Óñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýï†:$µBw¿ÏÂU~€*½¸ì°œ ^ÎÜF~é®Ñ'üvºfš Ž_è^ŸŽkèþ–ÔÉ™¬¤Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282exec whoami20ÜS7[AIF¬•pd± (ý1‘„%C@€Wû%C~Ñuºìb°œ ^ÎÜF~é®Ñ'üvºí( ö~R¶ ~{‚~¯ÔÉ™¬¤Óñ‹+aue_write +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282exec whoami20ÜS7[AIF¬•pd± (ýµ?ÏHþ§@õ²¿ ÂTÎÀ¼ì°œ ^ÎÜF~é®Ñ'üvº^ÎÜF~é®Ñ'üvºÔÉ™¬¤Óñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282exec whoami20ÜS7[AIF¬•pd± (ýܾŸeV÷@€…ò ÿ¸Ç’¾ì"–œ ×µ¨Fz鮩'üvºÔÉ™¬¤Óñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1281execbash20ÜS7[AIF¬•pd± (ýOÓ-ª:D.•Óñ` ÙFÀìb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÔÉ™¬¤Óñ‹+aue_writedhostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý^?IòF~é®Ò'üvºô20ÜS7[AIF¬•pd± (ý^?IòF~é®Ñ'üvºô20ÜS7[AIF¬•pd± (ý –±ü]/Xž}„™òw]9^?IòF~é®Ñ'üvº^?IòF~é®Ò'üvº20 ÜS7[AIF¬•pd± (ýdL$ÞßlG"¦Ì¡‰Sµ·KÂìø› µ5Ž«Fz鮉'üvº–±ü]/Xž}„™òw]9^?IòF~é®Ò'üvº°ˆß£¦Óñ‹+aue_socketpair ret_fd14ret_fd25hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execntpd20ÜS7[AIF¬•pd± (ýí˜ÊŽó>IèŒúÅûmÄì"ø› µ5Ž«Fz鮉'üvº°ˆß£¦Óñ‹+aue_fcntlcmd ret_fd128hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value28ppid1execntpd20ÜS7[AIF¬•pd± (ýð"þÅeEÌ›!rÔ¬<Æì"ø› µ5Ž«Fz鮉'üvº°ˆß£¦Óñ‹+aue_fcntlcmd ret_fd129hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value29ppid1execntpd20ÜS7[AIF¬•pd± (ý@ëêòYIa» ».q"ßÈì"ø› µ5Ž«Fz鮉'üvº°ˆß£¦Óñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1execntpd20ÜS7[AIF¬•pd± (ýåŒ"„p6@f†Üë2ƒö'Êì"ø› µ5Ž«Fz鮉'üvº°ˆß£¦Óñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ýçÕ¹.Z¢MΑ¹i\F&Ìì<Þž µ5Ž«Fz鮉'üvºaOr;ó7S³;IF£7;— /etc/resolv.conf°ˆß£¦Óñ‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1execntpd20ÜS7[AIF¬•pd± (ý§å jBºãAU-uí¡Îì@Þž µ5Ž«Fz鮉'üvºaOr;ó7S³;IF£7;—°ˆß£¦Óñ‹+aue_readÌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1execntpd20ÜS7[AIF¬•pd± (ýûWNîH}§`³²•Ðì@Þž µ5Ž«Fz鮉'üvºaOr;ó7S³;IF£7;—°ˆß£¦Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1execntpd20ÜS7[AIF¬•pd± (ý¹oÁ—“}Lâæ2„BÒìÞž µ5Ž«Fz鮉'üvºaOr;ó7S³;IF£7;—°ˆß£¦Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ý +öÖišÑa^‘š4gna0¶20 +ÜS7[AIF¬•pd± (ý¶ZbbH@ŽO¦­×K,HÔì<Þž µ5Ž«Fz鮉'üvºöÖišÑa^‘š4gna0¶/etc/services°ˆß£¦Óñ‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1execntpd20ÜS7[AIF¬•pd± (ý¾eTçLN­ x¡³÷%Öì0Þž µ5Ž«Fz鮉'üvºöÖišÑa^‘š4gna0¶°ˆß£¦Óñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1execntpd20ÜS7[AIF¬•pd± (ýôâðÿ‚#G†¿ Û:‹0WØì0Þž µ5Ž«Fz鮉'üvºöÖišÑa^‘š4gna0¶°ˆß£¦Óñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1execntpd20ÜS7[AIF¬•pd± (ý‚JVz¥Be˜ Wlö.O‡Úì@Þž µ5Ž«Fz鮉'üvºöÖišÑa^‘š4gna0¶°ˆß£¦Óñ‹+aue_read€€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1execntpd20ÜS7[AIF¬•pd± (ý™9 U/ ODCŠr±[ËÜìÞž µ5Ž«Fz鮉'üvºöÖišÑa^‘š4gna0¶°ˆß£¦Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ý•‚C:ÃÎB7”À;™E2×KÞì<Þž µ5Ž«Fz鮉'üvºÉòæò¢Ñ[¢ò¥›ÑÍ /etc/hosts°ˆß£¦Óñ‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1execntpd20ÜS7[AIF¬•pd± (ýN£s OÎŽ@$¨oðPàì@Þž µ5Ž«Fz鮉'üvºÉòæò¢Ñ[¢ò¥›ÑÍ °ˆß£¦Óñ‹+aue_readŽhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1execntpd20ÜS7[AIF¬•pd± (ýèbÇùùM€¦Ü!ÚX(2<âì@Þž µ5Ž«Fz鮉'üvºÉòæò¢Ñ[¢ò¥›ÑÍ °ˆß£¦Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1execntpd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"°€ú¡#ʯ…dGM¡ZtçäìÞž µ5Ž«Fz鮉'üvºÉòæò¢Ñ[¢ò¥›ÑÍ °ˆß£¦Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ý^?¨˜F~é®Ò'üvº149.32.200.97j20ÜS7[AIF¬•pd± (ý€Ú +¥qEU•…x +W}ÈÆæìÞž µ5Ž«Fz鮉'üvº^?¨˜F~é®Ò'üvº°ˆß£¦Óñ‹+aue_connecthostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1address149.32.200.97port53execntpd20ÜS7[AIF¬•pd± (ýrÁ +@Þ\p¹Å—0Å}'10.0.2.15”Î149.32.200.97j20ÜS7[AIF¬•pd± (ý¦x«`ÍòKOŒ¬ƒ@D iÑèìÞž ^?¨˜F~é®Ò'üvºrÁ +@Þ\p¹Å—0Å}'°ˆß£¦Óñ‹+20ÜS7[AIF¬•pd± (ýpZ aéKC¬<› k•‹äêìJÞž µ5Ž«Fz鮉'üvº^?¨˜F~é®Ò'üvº°ˆß£¦Óñ‹+aue_sendtoP +ret_msgid +17310hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1execntpd20ÜS7[AIF¬•pd± (ý¬” h0ÍD@‡.fuÕ<ÃììDÞž µ5Ž«Fz鮉'üvº^?¨˜F~é®Ò'üvºÔ¹ÍŒ§Óñ‹+aue_recvfromÐ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1address149.32.200.97port53execntpd20ÜS7[AIF¬•pd± (ýYQŠ’LŽµ®‘¸p$ÍîìÞž µ5Ž«Fz鮉'üvº^?¨˜F~é®Ò'üvºÔ¹ÍŒ§Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ý^QN…F~é®Ò'üvº149.32.200.97j20ÜS7[AIF¬•pd± (ýáKª-ÐC¼´í*”]ðìÞž µ5Ž«Fz鮉'üvº^QN…F~é®Ò'üvºÔ¹ÍŒ§Óñ‹+aue_connecthostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1address149.32.200.97port53execntpd20ÜS7[AIF¬•pd± (ýI1„ª@P[´3›ÿ§p­N10.0.2.15П149.32.200.97j20ÜS7[AIF¬•pd± (ýCý0°\}CàŸdHCDž½òìÞž ^QN…F~é®Ò'üvºI1„ª@P[´3›ÿ§p­NԹ͌§Óñ‹+20ÜS7[AIF¬•pd± (ýR^&TD Jr•dŸ-ë Š‚ôìJÞž µ5Ž«Fz鮉'üvº^QN…F~é®Ò'üvºÔ¹ÍŒ§Óñ‹+aue_sendtoP +ret_msgid +17311hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1execntpd20ÜS7[AIF¬•pd± (ý爅y…•K¤Kn$ɦžTöìDÞž µ5Ž«Fz鮉'üvº^QN…F~é®Ò'üvº˜¾ÍŸ§Óñ‹+aue_recvfrom¾ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1address149.32.200.97port53execntpd20ÜS7[AIF¬•pd± (ýXUpÑK\M6ƒ×ämþ*ÙøìÞž µ5Ž«Fz鮉'üvº^QN…F~é®Ò'üvº˜¾ÍŸ§Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ýƒ”iÜIBžv¯Á¸K£zúì<Þž µ5Ž«Fz鮉'üvºöÖišÑa^‘š4gna0¶/etc/services˜¾ÍŸ§Óñ‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1execntpd20ÜS7[AIF¬•pd± (ýú±Öî»JEŠ£ðaH’üì0Þž µ5Ž«Fz鮉'üvºöÖišÑa^‘š4gna0¶˜¾ÍŸ§Óñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1execntpd20ÜS7[AIF¬•pd± (ýÕsøðO׃î@rÈ]Ë©þì0Þž µ5Ž«Fz鮉'üvºöÖišÑa^‘š4gna0¶˜¾ÍŸ§Óñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1execntpd20ÜS7[AIF¬•pd± (ýFú‰˜¹ D»M ÷îïy€í@Þž µ5Ž«Fz鮉'üvºöÖišÑa^‘š4gna0¶˜¾ÍŸ§Óñ‹+aue_read€€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1execntpd20ÜS7[AIF¬•pd± (ý×,³åDn@2 ¦* V²Ò‚íÞž µ5Ž«Fz鮉'üvºöÖišÑa^‘š4gna0¶˜¾ÍŸ§Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ýä¨m[YKU¢Î Lí&N·„í0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŠ›¡¸¨Óñ‹+aue_lseekþ zhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýàp0« %Aí€vXøݸ†í@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯”Æ·Ò«Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÕ—#(òAʺ}•Î,ˆí@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯”Æ·Ò«Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý/oM¦G™L$ƒ"Q=«‘!Ší@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯”Æ·Ò«Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý`ø©ÂJÅ‚’,;)]1Œíb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯”Æ·Ò«Óñ‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý§ÀnßáKÔ¥Þb›æ÷Ží@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯”Æ·Ò«Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý댩nä-M”•aGµýj£í@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯”Æ·Ò«Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýƒýðýmB鼎²kºëÚe’í@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯”Æ·Ò«Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýœù?É“Eî«<¹àK_Дíb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯”Æ·Ò«Óñ‹+aue_write>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý•m4ˆ¦QH,ˆO D+,–í0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÆ á¬Óñ‹+aue_lseekþ zhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!qޢŒB9·7ªÈ‡«Jší ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UêÆ á¬Óñ‹+20ÜS7[AIF¬•pd± (ýWô”ÆïB=˜¨]Š‡.@˜í@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÆ á¬Óñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜ®ß_>²AŒ«* £”âZØží ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UêÆ á¬Óñ‹+20ÜS7[AIF¬•pd± (ýÈRÊÁê:Fë‘þl¿úÆozœí@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÆ á¬Óñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†Ë:AK¾c2ï‘_J%¢í ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UêÆ á¬Óñ‹+20ÜS7[AIF¬•pd± (ý¹I&oôõJu‡¾´o“Ý« í@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÆ á¬Óñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=žPÒDI ›ãb)m2¦í ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UêÆ á¬Óñ‹+20ÜS7[AIF¬•pd± (ýŸüŒÝ)DŠØ˜iÌßÉ¢¤í@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÆ á¬Óñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýùÖ±h£Oï2,­¨í:‚œ Ê +ÙKFzé®›'üvºêÆ á¬Óñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|òŽM¶CCnª¿[ÞüÌO +ªí@àž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V êÆ á¬Óñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8JRMŽ—õª/E챬í@àž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÆ á¬Óñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJÖNáI_³NZ5=Rήí@àž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÆ á¬Óñ‹+aue_preadò1hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýb^Eyîý@™¸T>Û + /°íb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºêÆ á¬Óñ‹+aue_writeÜ2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3°P±’ÕAOšÚÚù2Kû²íbàž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áêÆ á¬Óñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼ÅÚ>¬@(¡âqUêè]´í@àž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V êÆ á¬Óñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾™‹hd\K~¹â:Š‹ «¶í@àž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÆ á¬Óñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°×Â!’Br±†ƒá’C-N¸í@àž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÆ á¬Óñ‹+aue_preadôDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+€bÉ©¢@˜ˆ _ž²¯H·ºíb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºêÆ á¬Óñ‹+aue_writeÞEhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýé²vAÁAw˜ô±sH…k¼íbàž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áêÆ á¬Óñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýð[@OÈCt£ÏA'H‡ù¾í@àž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V êÆ á¬Óñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJh‡ÿšE’Œl ;¦]—ÛÀí@àž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÆ á¬Óñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8‚òP°Lµ­â8:UKÂí@àž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÆ á¬Óñ‹+aue_preadüBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýi/ñÏ@_¿ˆs8ÈS'Äíb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºêÆ á¬Óñ‹+aue_writeæChostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxH-)J:MJ† + ÿŽ1ŒëÆíbàž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áêÆ á¬Óñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡AUC”sH +Ž;ŸìY®­Èí@àž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V êÆ á¬Óñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓxöïVÇC¾‰@UØ™YžèÊíJàž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºêÆ á¬Óñ‹+aue_sendtoà +ret_msgid +17314hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢Å³Ð,ùK‰F:Ž°ÌíDê› µ dôFzé®{'üvºµ CjFzé®{'üvºêÆ á¬Óñ‹+aue_recvfromà ret_msgid +17314hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý}4ÂÞÉÓMT® ^  ›ðŠÎíbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKêÆ á¬Óñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýRiœ·ïHM}´†} ­§²ÓÐíD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºþÃöê¬Óñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑ€=ë{YF4²0ù–ËðÒíD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºþÃöê¬Óñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹— ž|CˆÜ±2âø ÐÔíD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº„ÆËô¬Óñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½¶•G|”À¨ßn>úLÖíD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº„ÆËô¬Óñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU~aJ÷ª7Û¼;ØíD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº„ÆËô¬Óñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐuI‡_AH¶ºgõâÒJJÚíD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº„ÆËô¬Óñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;Tþ +ÿGº´¥ÿËñŠÜí0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UКÞû¯Óñ‹+aue_lseek–ÚzhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQ/¦N… š¦51OÞí@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯æÁ†­²Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÑÂ)ž°Nu£0½ûDt³¤àí@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯æÁ†­²Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÉ%¤ºˆ‡A-£|.)éÓ–âí@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯æÁ†­²Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý]Þv¯8ûA›£!õ«]²³‡äíb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯æÁ†­²Óñ‹+aue_write`hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýUK–b·GY¿}Úpýopµæí@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÎɃµ·Óñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý5ÒÎ0„]C¥¿m¼ñj|oèíJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÎɃµ·Óñ‹+aue_sendtoÚ +ret_msgid +17315hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý„1‘ËÕD³”Ð|2'äÃÊêíJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÎɃµ·Óñ‹+aue_sendto˜ +ret_msgid +17316hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýUwPžéŠBFôI/KìíJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÎɃµ·Óñ‹+aue_sendto¬ +ret_msgid +17317hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¿Á¼^AKd¶ÒuÚø/všîíJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÎɃµ·Óñ‹+aue_sendto˜ +ret_msgid +17318hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÚId8gFúšº ˆn”ŒðíDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÎɃµ·Óñ‹+aue_recvfromÚ ret_msgid +17315hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýã+½0³Fñˆó&äy òíDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÎɃµ·Óñ‹+aue_recvfrom˜ ret_msgid +17316hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý11¦ø§¹EK²yåãÁÊÀôíDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÎɃµ·Óñ‹+aue_recvfrom¬ ret_msgid +17317hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýè½Î²I@6¯)V8×ÈöíDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÎɃµ·Óñ‹+aue_recvfrom˜ ret_msgid +17318hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý 4ulãE¯•Æ6‘CÒ¬¬îJâž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¦¨êÔ»Óñ‹+aue_sendtoà +ret_msgid +17319hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýEV©K0C…W|HS©š|®îDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦¨êÔ»Óñ‹+aue_recvfromà ret_msgid +17319hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÓê-Œ"XEpïxê?àÕ°îbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¦¨êÔ»Óñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýIjñâûG…Ëi—Dòý²îD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦¨êÔ»Óñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›Õ®.;»A¼žgs—Àx ´îD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦¨êÔ»Óñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦“7) D÷‚›qêÎÞ²¶îD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº†îõÞ»Óñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýê(õS¯fMË»rÜ’­µ`¸îD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº†îõÞ»Óñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡_CYFŽ‹s%jë+8íºî0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÂõ½‚¿Óñ‹+aue_lseek†¢{hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýªÂBéÃùKò±V ƒuqy[¼î@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯À™öê¿Óñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý˜¡¼9AæŽÖú›VAi¾îb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯À™öê¿Óñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý`J¾QF~é®Ò'üvºÒ×µ¨Fz鮩'üvº°äÿ§®]vRS<„äB±À™öê¿Óñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýkÚTïEÓ²Ú߯ÅÀî$–œ ×µ¨Fz鮩'üvº`J¾QF~é®Ò'üvºÀ™öê¿Óñ‹+aue_fork +arg_pid1513hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1513ppid1281execbash20ÜS7[AIF¬•pd± (ýÀc¤Im©IÇ‘¡-X; Âî°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc't/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1À™öê¿Óñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine@/usr/bin/env bash ../Bash/all.shppid1282execbash20ÜS7[AIF¬•pd± (ý§40þ6F"›Q4uìdçeÄî<°œ `J¾QF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÀ™öê¿Óñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execenv20ÜS7[AIF¬•pd± (ý=äñ4´EˆÆ§db}÷ÚÆî@°œ `J¾QF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ À™öê¿Óñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýC «BŨ[ú5¨uñÈî°œ `J¾QF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ À™öê¿Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execenv20ÜS7[AIF¬•pd± (ým²ÉOB¤‰C.«<ó¬Êî<°œ `J¾QF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÀ™öê¿Óñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execenv20ÜS7[AIF¬•pd± (ýg[eJFMoë».d»¢Ìî@°œ `J¾QF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÀ™öê¿Óñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý•»ÞZHH¸Å¨,ø$¾Îî@°œ `J¾QF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÀ™öê¿Óñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýaOÄeþèOA²^WÝö\ÿáÐî°œ `J¾QF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÀ™öê¿Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execenv20ÜS7[AIF¬•pd± (ý]zŠWTNĉ‘ñ uÔØòÒî<°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7À™öê¿Óñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execenv20ÜS7[AIF¬•pd± (ýUªÒz‚K`©F”3lË]Ôî2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýÐÃúN=¹ëôï'±TÖî2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý®¨hÔqB…åÄx]°9Øî2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý˜è’±º.MÂz ®r TÚî2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýÀr+V­Mp°i6ÁyŠÜî2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýž5‚M?K¿‚2ºxp»Þî2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ý^Âù fA…w~S§ªÆÍàî2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýv$ªPn¹K#”/÷‚Kjò¹âî2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execenv20ÜS7[AIF¬•pd± (ýyníÍ7LŒ¿‘I`FÉì×äî°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execenv20ÜS7[AIF¬•pd± (ýdì“©TqAk¹]¾ðäÁfóæî:°œ `J¾QF~é®Ò'üvºÀ™öê¿Óñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execenv20ÜS7[AIF¬•pd± (ý‹-hýTJK¶úA)VHC‰èî:°œ `J¾QF~é®Ò'üvºÀ™öê¿Óñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execenv20ÜS7[AIF¬•pd± (ý($±‰ìuH‰ÄäÏV„Cêî°œ `J¾QF~é®Ò'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1À™öê¿Óñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine&bash ../Bash/all.shppid1282execenv20ÜS7[AIF¬•pd± (ý,®6LšÆI)˜‘N=Uù8ìî<°œ `J¾QF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÀ™öê¿Óñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýëý@bÇîD ú5øìê‰îî@°œ `J¾QF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ À™öê¿Óñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýò[ë>A ¶©‚Òk ÉÕðî°œ `J¾QF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ À™öê¿Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýÞüˆrø*K2›Â¦4š°"òî<°œ `J¾QF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÀ™öê¿Óñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý¡WMr”³H^†áüÝõÌ?ôî@°œ `J¾QF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÀ™öê¿Óñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý–$±Òÿ-N¸¥í ùý΢öî@°œ `J¾QF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÀ™öê¿Óñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýl<ÜÞ0E%¶Åt#ÇWK"øî°œ `J¾QF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÀ™öê¿Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýµm÷P‹×GT¤ «„s£à—úî<°œ `J¾QF~é®Ò'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8À™öê¿Óñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý±^¦ÿ‡IÓ¡ù·¦Bþüî2°œ `J¾QF~é®Ò'üvºâpÑ +m.×W®mAs××¼›À™öê¿Óñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¡ÝJ þH™¨v4Jú®þî2°œ `J¾QF~é®Ò'üvºâpÑ +m.×W®mAs××¼›À™öê¿Óñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý—}PqóMšÃp®€ï2°œ `J¾QF~é®Ò'üvºâpÑ +m.×W®mAs××¼›À™öê¿Óñ‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÛ"ƒºvÉKZ÷­¼Åä*‚ï2°œ `J¾QF~é®Ò'üvºâpÑ +m.×W®mAs××¼›À™öê¿Óñ‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¢òÁ#G}—Y~í³kýÒ„ï2°œ `J¾QF~é®Ò'üvºâpÑ +m.×W®mAs××¼›À™öê¿Óñ‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¾ ¸×¥C ¯_Ç¢ H†ï2°œ `J¾QF~é®Ò'üvºâpÑ +m.×W®mAs××¼›À™öê¿Óñ‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¾Ln`èD ¢+¥sNœzýˆï2°œ `J¾QF~é®Ò'üvºâpÑ +m.×W®mAs××¼›À™öê¿Óñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýICe+M +KR–ì#ÿƒ|¦Šï2°œ `J¾QF~é®Ò'üvºâpÑ +m.×W®mAs××¼›À™öê¿Óñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý©L|ÛÝE^’nf²ßÕ.«Œï°œ `J¾QF~é®Ò'üvºâpÑ +m.×W®mAs××¼›À™öê¿Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýÖ~bT·J÷®€tY” Žï<°œ `J¾QF~é®Ò'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8À™öê¿Óñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý¦¿PÐçvA  CÜË£­ï2°œ `J¾QF~é®Ò'üvºm/"P;=\»P½¤¬=P_À™öê¿Óñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÅÃ¥AÇL…~á•Xz½t’ï2°œ `J¾QF~é®Ò'üvºm/"P;=\»P½¤¬=P_À™öê¿Óñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÒŸ (sÌO瑤Ù`ô.éã”ï2°œ `J¾QF~é®Ò'üvºm/"P;=\»P½¤¬=P_À™öê¿Óñ‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý炸wF3º•ø>/Vi°–ï2°œ `J¾QF~é®Ò'üvºm/"P;=\»P½¤¬=P_À™öê¿Óñ‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýsȈ‘ÏMMQ€d!íJGm˜ï2°œ `J¾QF~é®Ò'üvºm/"P;=\»P½¤¬=P_À™öê¿Óñ‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýL'§~äWK8±F ÿ°°ÔÍšï2°œ `J¾QF~é®Ò'üvºm/"P;=\»P½¤¬=P_À™öê¿Óñ‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý2ähè–@)œ»ž¸ m†œï2°œ `J¾QF~é®Ò'üvºm/"P;=\»P½¤¬=P_À™öê¿Óñ‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ŽÀýN›çQ–N´ŸLKu?ß@žï2°œ `J¾QF~é®Ò'üvºm/"P;=\»P½¤¬=P_À™öê¿Óñ‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýY4Yu-.Gv ±ú»Ž6û ï°œ `J¾QF~é®Ò'üvºm/"P;=\»P½¤¬=P_À™öê¿Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý³)ÙÍ7`J¨–.Sˆ;;¢ï<°œ `J¾QF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1À™öê¿Óñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý¯ÃÒâLNXNLfA1ñ¤ï2°œ `J¾QF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÀ™öê¿Óñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýêV°ÑKL“— +¶_ƒØ¦ï2°œ `J¾QF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÀ™öê¿Óñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýàB\™…iN"ƒ7Áõ¬Y>ð¨ï2°œ `J¾QF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÀ™öê¿Óñ‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýn?âÚ=f@œ§˜¸âùóªï2°œ `J¾QF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÀ™öê¿Óñ‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýå¸NB1°hnj©=Ý”¬ï2°œ `J¾QF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÀ™öê¿Óñ‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýêÀÇ›‹µJ¢•/h¬§ÍÉ®ï2°œ `J¾QF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÀ™öê¿Óñ‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý)>1” +CGê¦ÍtlfÆ°ï2°œ `J¾QF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÀ™öê¿Óñ‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¡¬HÿcOX‰*…W‹ƒ|Ö²ï2°œ `J¾QF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÀ™öê¿Óñ‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý=í Åb©Dô’8ÿÒ©ó´ï°œ `J¾QF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÀ™öê¿Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýTz%íôJr³ºiz/¶ï<°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7À™öê¿Óñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý` àxONM€>­.RåÙ¸ï2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýËŠ ýÝDQ²¤/©- +uĺï2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýJþÙ£™\Mã‡gw ,D\c¼ï2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýIîþðNô†Ãfÿâ‚]™¾ï2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýç˜âéŸ.DÑŽšº‰ ÌÏÀï2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýÛü%Y—þB!–œÌ“q(¢UÂï2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýêlì(äá@çªH @NSðÄï2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý æià C2¶FOgQh]Æï2°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý‘™ ž?LœÆpäfï!Èï°œ `J¾QF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÀ™öê¿Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýåöÚóB…”+p6,*Êï:°œ `J¾QF~é®Ò'üvºÀ™öê¿Óñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý‹yàÍáGMUŒwÅMð:£Ìï:°œ `J¾QF~é®Ò'üvºÀ™öê¿Óñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý‚ž#_›œNÖ”…)涸Îï:°œ `J¾QF~é®Ò'üvºÀ™öê¿Óñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý€™¨Ú…@+¦¤§A[S'¨Ðï:°œ `J¾QF~é®Ò'üvºÀ™öê¿Óñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý.Ð;¾`gIŒâxK°ñÒï:°œ `J¾QF~é®Ò'üvºÀ™öê¿Óñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý(ê±=õIÍ•7¸AäÔï<°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯/dev/ttyÀ™öê¿Óñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý’EMVµO“¶>*-¸¿–Öï°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯À™öê¿Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý;ì—³™óEŒ!`€ÄXòØï<°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc't/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.shÀ™öê¿Óñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282execbash20ÜS7[AIF¬•pd± (ýœ?÷‘ƒKA$™’؃ý´KYÚï0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'À™öê¿Óñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýu/òk.ŒFø³ÛÂqôXq¤Üï@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'À™öê¿Óñ‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýI°ÁžEAô‚†<°Þï0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'À™öê¿Óñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý³  4r§K7ïô;ÈIàï°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'À™öê¿Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý±mý2XMj„2¬±—‰Ê›âï"°œ `J¾QF~é®Ò'üvºÀ™öê¿Óñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýVFïÁt±MÀ°ÌIøú èäï"°œ `J¾QF~é®Ò'üvºÀ™öê¿Óñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ýñx‰8›^J{žZX‚¡Xüæï0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'À™öê¿Óñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý{"GÞ©H4¬J`ËIe0èï@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'À™öê¿Óñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý4‹öX6@®½’:˜<ˆ½ºêï0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'À™öê¿Óñ‹+aue_lseekˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý`KçF~é®Ò'üvºÔ`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±À™öê¿Óñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý…óçßN Š—³‰‡w,ìï$°œ `J¾QF~é®Ò'üvº`KçF~é®Ò'üvºÀ™öê¿Óñ‹+aue_fork +arg_pid1514hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1514ppid1282execbash20ÜS7[AIF¬•pd± (ý×Ç@# ØG`3XT'¯€îﲜ `KçF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'À™öê¿Óñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýRDvØ…Jb³ô 3KËyðï0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ‡ØÆÓñ‹+aue_lseek¢®|hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý"Â҈ɄEZ´Låˆúãòﲜ `KçF~é®Ò'üvº`KçF~é®Ò'üvºš¨ö·ÇÓñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýX©¯ôAÙƒ1&øpå ¼ôï<°œ `J¾QF~é®Ò'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.dbš¨ö·ÇÓñ‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1282execbash20ÜS7[AIF¬•pd± (ý3ññOEΟók§þ&Ťöï@°œ `J¾QF~é®Ò'üvº–Ø%™wyïR¹wT’ï9š¨ö·ÇÓñ‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ýžü>ÿnKGŽfÞMÑŽøï@°œ `J¾QF~é®Ò'üvº–Ø%™wyïR¹wT’ï9š¨ö·ÇÓñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý¼ ·šÅ®@Šß:}:Ø8Ùúï@°œ `J¾QF~é®Ò'üvº–Ø%™wyïR¹wT’ï9š¨ö·ÇÓñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282execbash20ÜS7[AIF¬•pd± (ý>èØÊxBš“Ï8ɯ/Ý©üï°œ `J¾QF~é®Ò'üvº–Ø%™wyïR¹wT’ï9š¨ö·ÇÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý6¬#!½MH ñŽA!þïb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯š¨ö·ÇÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýduÜj®NÀ«J Í‚Xp +€ðb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯š¨ö·ÇÓñ‹+aue_writeDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý`æ«-F~é®Ò'üvºÖ`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±š¨ö·ÇÓñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý¦JIËo@•©†]Ê=‚ð$°œ `J¾QF~é®Ò'üvº`æ«-F~é®Ò'üvºš¨ö·ÇÓñ‹+aue_fork +arg_pid1515hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1515ppid1282execbash20ÜS7[AIF¬•pd± (ýBÝrÒ-L¥‘žŸîêã„𲜠`æ«-F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'š¨ö·ÇÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýБø›L?ˆí[8F†ð²œ `æ«-F~é®Ò'üvºVìÁ®x{Y¸a5 {€0Š/usr/home/user/ripe-prov-tests-master/Linux/./change_file_permissions'ìAzX™¦}˜¹(/libexec/ld-elf.so.1š¨ö·ÇÓñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine4./change_file_permissions ppid1513execbash20ÜS7[AIF¬•pd± (ýñ£R¨GI–”%"¹±)/Òˆð<²œ `æ«-F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confš¨ö·ÇÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ýèñäÇ—¨A¿ÒX;ò~Ò¨Šð@²œ `æ«-F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ š¨ö·ÇÓñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ýëœóèÚ/GÖºŒ‰µÔ‘¨Œð²œ `æ«-F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ š¨ö·ÇÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ý”g¨åyOµ±’É «ÞRŽð<²œ `æ«-F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsš¨ö·ÇÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ýl)MúO±¢M(c@ÇÝ™ð@²œ `æ«-F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âš¨ö·ÇÓñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ý€½bfM´õy,úÖð@²œ `æ«-F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âš¨ö·ÇÓñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ý×Ü+|IKλÖ ûÆä”𲜠`æ«-F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âš¨ö·ÇÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ý;Ñ ½Û8H—V‘2Y÷y–ð<²œ `æ«-F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7š¨ö·ÇÓñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ýÛÂfCk¾¾„Õ?k˜ð2²œ `æ«-F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ýOø6U¿@X„A?ÔlÓyšð2²œ `æ«-F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ý8{Zö¥ûC>³ËÕ™P}œð2²œ `æ«-F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ý+P |ÁýCŸŒ ×?žð2²œ `æ«-F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ýùxÜFŸ¹šênÂ㳑 ð2²œ `æ«-F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ýÅè„+WyFo’ ¥èé%¢ð2²œ `æ«-F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ýöËÃ>Mv…‘üX¤z(ɤð2²œ `æ«-F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ýlûÜR¦IJغydbËé¦ð2²œ `æ«-F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ž€ûRj‘)&«I£«qDsf¯t¨ð²œ `æ«-F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ýÀ[¦ù€îGÁœÅE†£©ªð:²œ `æ«-F~é®Ò'üvºš¨ö·ÇÓñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ýž«a–îJƒ]ÆÈ>AÞ<¬ð:²œ `æ«-F~é®Ò'üvºš¨ö·ÇÓñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ýC:–ÿ ²B”™#ÚÑâQEM®ð4²œ `æ«-F~é®Ò'üvºj/°®¨¢¤_¢¨gIÿ¤ïj/usr/home/user/ripe-prov-tests-master/Linux/README.mdš¨ö·ÇÓñ‹+aue_chmodmode¶hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ýóÅ­ˆ+YJǶ¼Ñ(-ºI°ð4²œ `æ«-F~é®Ò'üvºj/°®¨¢¤_¢¨gIÿ¤ïj/usr/home/user/ripe-prov-tests-master/Linux/README.mdš¨ö·ÇÓñ‹+aue_chmodmode·hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ý©Šn# IÔìE‹Õ0)ÿ²ð²œ `æ«-F~é®Ò'üvº`æ«-F~é®Ò'üvºš¨ö·ÇÓñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec&change_file_permiss20ÜS7[AIF¬•pd± (ý¬«M˜ yO¥çe2‡èî´ð@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'š¨ö·ÇÓñ‹+aue_read°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý@×U}ýFJ’˜BÀ +bEŠ¹¶ð0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'š¨ö·ÇÓñ‹+aue_lseek¨hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý`çb‚F~é®Ò'üvºØ`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±š¨ö·ÇÓñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýᏰH(®P¼s¸ð$°œ `J¾QF~é®Ò'üvº`çb‚F~é®Ò'üvºš¨ö·ÇÓñ‹+aue_fork +arg_pid1516hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1516ppid1282execbash20ÜS7[AIF¬•pd± (ý÷Rk$ZMdˆ $%òPIк𲜠`çb‚F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'š¨ö·ÇÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýUŒ$s|K7« +öóÀF?¼ð²œ `çb‚F~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1š¨ö·ÇÓñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1513execbash20ÜS7[AIF¬•pd± (ý½ÄŠ?;O‰¡¦ñY¶èw†¾ð<²œ `çb‚F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confš¨ö·ÇÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÜúOYSÂHð€Ò( 0`äÀð@²œ `çb‚F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ š¨ö·ÇÓñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý%—\Joœz@=?Â𲜠`çb‚F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ š¨ö·ÇÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý–*ˆ¤\YK¦=œ‡Ó°ãZÄð<²œ `çb‚F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsš¨ö·ÇÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýMõ±¦œÙFA´ìZAƒrŠÿÆð@²œ `çb‚F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âš¨ö·ÇÓñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýƒ5ælZL-¤Æm~E*S_Èð@²œ `çb‚F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âš¨ö·ÇÓñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýï–¿6›CµžÏÿѽÊ𲜠`çb‚F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âš¨ö·ÇÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý‹¹+¿AÔƒÚuC]Ž¡–Ìð<²œ `çb‚F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7š¨ö·ÇÓñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÿÚœ˜CJŠ*þ2;š2ýÎð2²œ `çb‚F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý³úW¯N{©a9xIÐð2²œ `çb‚F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý 6œ H€š¨Äöº+)Òð2²œ `çb‚F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÀq)ÝJ¾›bíyä­0Ôð2²œ `çb‚F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýñì¸3G¥½ªÅ`ëgò‡Öð2²œ `çb‚F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýyƒf£ü6Kk]]! jéØð2²œ `çb‚F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý1i‰½œ'Oó‡)!U®?Úð2²œ `çb‚F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý‹ˆ¶“ÏJ6šŸh8ó˜©Üð2²œ `çb‚F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýCiÒÌÚ[Jf¬S«¶iÞ𲜠`çb‚F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œš¨ö·ÇÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýl9½l$C>µ[[G_Z¿tàð:²œ `çb‚F~é®Ò'üvºš¨ö·ÇÓñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý–€±½ÏAŒ®¤ñE¬izâð:²œ `çb‚F~é®Ò'üvºÄñÄÁÇÓñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýZ„Áíƒ@=¿N©¥¬”õäð0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ•ÓÈÊÓñ‹+aue_lseek¢®|hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀîjKKF"9üŽèð ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÔ•ÓÈÊÓñ‹+20ÜS7[AIF¬•pd± (ýt˜°ëk€@u¯[T™ì\Ë¢æð@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ•ÓÈÊÓñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýIJGS€–M݆œ~ë\ÊÌìð ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÔ•ÓÈÊÓñ‹+20ÜS7[AIF¬•pd± (ý W‚•ì­ümFî†ñ@äž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ•ÓÈÊÓñ‹+aue_pread²KhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýA.Ñ6Aî‹Kôéˆñb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÔ•ÓÈÊÓñ‹+aue_writeœLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýEë +€ð–I€ˆƒº9+p€ØŠñbäž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÔ•ÓÈÊÓñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýéBNj¶E`¡–´?ëŒñ@äž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ô•ÓÈÊÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒb»-?øNw¸®à"9ÉTùŽñ@äž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ•ÓÈÊÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!úL¼[\iùÞeñ@äž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ•ÓÈÊÓñ‹+aue_preadÚ@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿŽ8¢êH¾Dsò+ æ’ñb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÔ•ÓÈÊÓñ‹+aue_writeÄAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOü^OØCI¿ƒƒ2áü”ñbäž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÔ•ÓÈÊÓñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁÎa(_JŽ ¼Ùž<6ŒA–ñ@äž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ô•ÓÈÊÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâŠÏhÂ@ö¤C¿ò¢å6˜ñJäž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÔ•ÓÈÊÓñ‹+aue_sendtoà +ret_msgid +17320hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýäDŒ.Lú„½Hñ ÝAäšñDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔ•ÓÈÊÓñ‹+aue_recvfromà ret_msgid +17320hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¶þ‹.néOͨ õ£C#hœñbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÔ•ÓÈÊÓñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýä{9¢;§N¦¥ñ·½fpEžñD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎ¦ôÑÊÓñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰n‰ëŸ_BÔ£3ý…ðvl ñD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎ¦ôÑÊÓñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1½2–JôœjVLñâˆü¢ñD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¸Ð®ÛÊÓñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞ%ks‰,M­‘7x¥†þB®¤ñD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¸Ð®ÛÊÓñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèbç±~÷O¢.ûP³–7¦ñD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¸Ð®ÛÊÓñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]$Ãix{M­ŠænZ]Š2¨ñD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¸Ð®ÛÊÓñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýý’M7‹A·Âáý4Àr«ªñ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eν…âÍÓñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý¯öZ‘ AO­ô¯ ®¬ñJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÎ½…âÍÓñ‹+aue_sendtoÚ +ret_msgid +17321hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýp¥Â€ %@i‘þy¡KC¡ý®ñJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÎ½…âÍÓñ‹+aue_sendto˜ +ret_msgid +17322hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýä¿DR_ÞEn«ëP¯¸¡ÿº°ñ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ô¢ÂÎÓñ‹+aue_lseekè¾}hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁ6z@Eš«¦?b֞ʲñ²œ `çb‚F~é®Ò'üvº`çb‚F~é®Ò'üvºÎÓóÏÓñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý±'RE(€N ¸»"vf†KZ´ñb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯ÎÓóÏÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý§÷¦]ò@α÷A㪪æi¶ñb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯ÎÓóÏÓñ‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýaƒŽÅF~é®Ò'üvºÚ`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±ÎÓóÏÓñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÑH½`a8Hv½3ì’ÄdѸñ$°œ `J¾QF~é®Ò'üvºaƒŽÅF~é®Ò'üvºÎÓóÏÓñ‹+aue_fork +arg_pid1517hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1517ppid1282execbash20ÜS7[AIF¬•pd± (ýWKö×ØMï­"AR¹^RÕºñ²œ aƒŽÅF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ÎÓóÏÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý,og9d+KT”'4+õ÷0\¼ñ²œ aƒŽÅF~é®Ò'üvº ÜY|¸Þ[¸|5®ëÞÔ¿n/usr/home/user/ripe-prov-tests-master/Linux/./copy_file'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ÎÓóÏÓñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./copy_file ppid1513execbash20ÜS7[AIF¬•pd± (ý ehnu,OW¿¥ù„r¥Y®¾ñ<²œ aƒŽÅF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÎÓóÏÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý«à'ðI!·J{ôŠ¦ç±Àñ@²œ aƒŽÅF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ÎÓóÏÓñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"’öüáŸâï]ÑFa•Ã- +ÐwGÂñ²œ aƒŽÅF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ÎÓóÏÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý0jyx¿†M´ÓªéÊ_?Äñ<²œ aƒŽÅF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÎÓóÏÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý+ÚqCU¤1dhe´ôÆñ@²œ aƒŽÅF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÎÓóÏÓñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý5CÓA=ŸT©¥+wÿÈñ@²œ aƒŽÅF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÎÓóÏÓñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ýáŒu¦cKó +ó+U¸?Êñ²œ aƒŽÅF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÎÓóÏÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý»ŽH„Ožƒt:D‡ÒHÌñ<²œ aƒŽÅF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ÎÓóÏÓñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ýì”ä=ÔrC#d6ó,mÎñ2²œ aƒŽÅF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÎÓóÏÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ýg3¤¤€M‹…ŸøÂêìÐñ2²œ aƒŽÅF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÎÓóÏÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý÷çà«+ýAy^MA†kÒñ2²œ aƒŽÅF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÎÓóÏÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ýØÍ„˜EAEj(“3ÄÿÅßÔñ2²œ aƒŽÅF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÎÓóÏÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý†ÒŠTG©ƒ]u_ñf÷Öñ2²œ aƒŽÅF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÎÓóÏÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ýNeŒ¥þbF’Þ6Êe*Œ"Øñ2²œ aƒŽÅF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÎÓóÏÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý˜’^#‚F©‹¨Î>)‘çÚñ2²œ aƒŽÅF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÎÓóÏÓñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ýÍ/Ä;sEš¸E5R¥§ JÜñ2²œ aƒŽÅF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÎÓóÏÓñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý¸NÒß„/E΃¼]'ô¿ŽÞñ²œ aƒŽÅF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÎÓóÏÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execcopy_file20ÜS7[AIF¬•pd± (ýEöxÎ(Kåm$@âv¶àñ:²œ aƒŽÅF~é®Ò'üvºÎÓóÏÓñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý +^RÇCø“e>7`§©âñ:²œ aƒŽÅF~é®Ò'üvºÎÓóÏÓñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execcopy_file20ÜS7[AIF¬•pd± (ýN¥ðEÅM§HŸ:ü³)Òäñ<²œ aƒŽÅF~é®Ò'üvºj/°®¨¢¤_¢¨gIÿ¤ïj/usr/home/user/ripe-prov-tests-master/Linux/README.mdÎÓóÏÓñ‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý + üU×ím]­×T=MmñÓ20 +ÜS7[AIF¬•pd± (ýM§ƒâF.GÙfŒÀŠêæñ<²œ aƒŽÅF~é®Ò'üvº üU×ím]­×T=MmñÓf/usr/home/user/ripe-prov-tests-master/Linux/out.tmpÎÓóÏÓñ‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1513execcopy_file20ÜS7[AIF¬•pd± (ýAü!†XÊO‘„å¡aÊÜèñ@²œ aƒŽÅF~é®Ò'üvºj/°®¨¢¤_¢¨gIÿ¤ïÎÓóÏÓñ‹+aue_read„'hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý§:'/JoFŒ»Q%IÌêñ@²œ aƒŽÅF~é®Ò'üvºj/°®¨¢¤_¢¨gIÿ¤ïÎÓóÏÓñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execcopy_file20ÜS7[AIF¬•pd± (ýÇ%Ð@-ƒM -¤¾ïªìñ²œ aƒŽÅF~é®Ò'üvºí( ö~R¶ ~{‚~¯ÎÓóÏÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd0return_value0ppid1513execcopy_file20ÜS7[AIF¬•pd± (ýð*Ûf@½á¶üüRÓ±îñ²œ aƒŽÅF~é®Ò'üvºí( ö~R¶ ~{‚~¯ÎÓóÏÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1return_value0ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý~¤ÈJ¸Dxž…Ò rÑ„ðñ²œ aƒŽÅF~é®Ò'üvºí( ö~R¶ ~{‚~¯ÎÓóÏÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1513execcopy_file20ÜS7[AIF¬•pd± (ýùäKc÷Hc›yþý¼k8†òñ²œ aƒŽÅF~é®Ò'üvºj/°®¨¢¤_¢¨gIÿ¤ïÎÓóÏÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý|Œ5`AѶ„g“q£m“ôñb²œ aƒŽÅF~é®Ò'üvº üU×ím]­×T=MmñÓÎÓóÏÓñ‹+aue_write„'hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1513execcopy_file20ÜS7[AIF¬•pd± (ýXÁùjñ‚@¶ˆÄ«áF˜êöñ²œ aƒŽÅF~é®Ò'üvº üU×ím]­×T=MmñÓÎÓóÏÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý%Cfí3M8ž¡&­xc@øñ²œ aƒŽÅF~é®Ò'üvºaƒŽÅF~é®Ò'üvºÎÓóÏÓñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execcopy_file20ÜS7[AIF¬•pd± (ý9B¦Ò^Lë¦KßúŸçkúñ@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ÎÓóÏÓñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý²+Ðe+N¨E_8à\ñüñ0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ÎÓóÏÓñ‹+aue_lseekÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýa„´ŽF~é®Ò'üvºÜ`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±ÎÓóÏÓñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÒj§.‘GšóJ`tz&ˆþñ$°œ `J¾QF~é®Ò'üvºa„´ŽF~é®Ò'üvºÎÓóÏÓñ‹+aue_fork +arg_pid1518hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1518ppid1282execbash20ÜS7[AIF¬•pd± (ýy¸¬Ä>Aë•÷LV û#(€ò²œ a„´ŽF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ÎÓóÏÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýƒ@ˆ'6K¤šRÃ¥Ýû¢q‚ò²œ a„´ŽF~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ÎÓóÏÓñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1513execbash20ÜS7[AIF¬•pd± (ým>¹´aÅJkšöœO‡öW„ò<²œ a„´ŽF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÎÓóÏÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýFÿ€‚üB ¼úS"”gRZ†ò@²œ a„´ŽF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ÎÓóÏÓñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý Î.°÷¶D<§”*¨fÞ–ˆò²œ a„´ŽF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ÎÓóÏÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýáz ÂEƒ«Qa2Ôëù¯Šò<²œ a„´ŽF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÎÓóÏÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÔé¯=SnMõ„×Ü„§7Œò0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÆà—ÖÓñ‹+aue_lseekôŒ~hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´äÍã8÷I¶°çN(†êŽò²œ a„´ŽF~é®Ò'üvºa„´ŽF~é®Ò'üvºÒå‡äÖÓñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý"Ò}3MLež Ó쉗Hòb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯Òå‡äÖÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý ïäï Lž¿ –ª;æY’òb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯Òå‡äÖÓñ‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýb µF~é®Ò'üvºÞ`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±Òå‡äÖÓñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý±µfÕÆò$°œ `J¾QF~é®Ò'üvºb!i¡F~é®Ò'üvºÒå‡äÖÓñ‹+aue_fork +arg_pid1520hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1520ppid1282execbash20ÜS7[AIF¬•pd± (ý1­½6ÔMMŒ‡( +š&VÈò²œ b!i¡F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'Òå‡äÖÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý‚¥F3ÞMª`ܹÉ,ÎÊò²œ b!i¡F~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Òå‡äÖÓñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1513execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"Ž¦ý”H›±"A'…Iö7CÇÌò<²œ b!i¡F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÒå‡äÖÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýò°€•“­N'¸6+v-æÎò@²œ b!i¡F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ Òå‡äÖÓñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý·ÄdVC,O̘½Ûeæ +ŸÐò²œ b!i¡F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ Òå‡äÖÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý7ËŠQ>×K•:£áé*uÒò<²œ b!i¡F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÒå‡äÖÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý'GQzªDë²XþP¶Á®ÆÔò@²œ b!i¡F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÒå‡äÖÓñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÍŸ;˜­H¥ˆ‡äˆVøCÖò@²œ b!i¡F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÒå‡äÖÓñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý´ERÑ\«G¾ o…{(Ë°Øò²œ b!i¡F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÒå‡äÖÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýB¤Å¡lKt„îmXà`Úò<²œ b!i¡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Òå‡äÖÓñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÄó@ó­3Cï +&9žÐ„¾Üò2²œ b!i¡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÒå‡äÖÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý~l•~Ð¥C·²uÜ /´pÞò2²œ b!i¡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÒå‡äÖÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýYö8…ñPIOb¦•B+]àò2²œ b!i¡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÒå‡äÖÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý”¡¥4ÀI-µ +Ç€Š¯uâò2²œ b!i¡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÒå‡äÖÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýXÄ~+ŠDA0¯zÛX ùäò2²œ b!i¡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÒå‡äÖÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý\Ð,öÐÞD‚¬þôä3øCæò2²œ b!i¡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÒå‡äÖÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýmï)©1"E¸ó".`F‘èò0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒ²îÝÓñ‹+aue_lseek’Ù~hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ývXÎ|UIjŽª[VŠêò²œ b!i¡F~é®Ò'üvºb!i¡F~é®Ò'üvº¾„ø°ÞÓñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýmØâZ,NK¶wàáì ìòb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯¾„ø°ÞÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýÓkêÚügJع­qýÝåÕžîòb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯¾„ø°ÞÓñ‹+aue_writeLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýb¼T F~é®Ò'üvºâ`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±¾„ø°ÞÓñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýOˆ?·ärEˆŽdÞgeÉåðò$°œ `J¾QF~é®Ò'üvºb¼T F~é®Ò'üvº¾„ø°ÞÓñ‹+aue_fork +arg_pid1521hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1521ppid1282execbash20ÜS7[AIF¬•pd± (ý“Su@wIŸ‡æõKúQµòò²œ b¼T F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'¾„ø°ÞÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý`ÃíaêÃK·‹éŒc±›=ôò²œ b¼T F~é®Ò'üvº)Az€^ºAÎÏ^€L¯’/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_stack_frame'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¾„ø°ÞÓñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine<./copy_static_buf_stack_frame ppid1513execbash20ÜS7[AIF¬•pd± (ý¥òà€ôEŒ¯Æáyÿ ©Jöò<²œ b¼T F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¾„ø°ÞÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý¹3×]¥¾LI„: Õøò@²œ b¼T F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ¾„ø°ÞÓñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýiÐÙK¸‡ÙJŽ·µKËúò²œ b¼T F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ¾„ø°ÞÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý.©d­YœI»¤­NÃa§üò<²œ b¼T F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¾„ø°ÞÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý„õš¨CU¸ºÍvçžÎ)þò@²œ b¼T F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â¾„ø°ÞÓñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý{‰ÆãÖ\Kv·|{H݆€ó@²œ b¼T F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â¾„ø°ÞÓñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý¬Ow™ièBT³f7(1À‚ó²œ b¼T F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â¾„ø°ÞÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý-Ï"¯”õKiŠ8þËÅ†Ü „ó<²œ b¼T F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¾„ø°ÞÓñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýƒ·.kZÚF—¿žQF1ÙŒ†ó2²œ b¼T F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¾„ø°ÞÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý{öˆÞµ‚A9»2W…C‘cˆó2²œ b¼T F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¾„ø°ÞÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýí˜JßBE¡õ²¼u`“Šó2²œ b¼T F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¾„ø°ÞÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýâ—tG=›Yñ‘–IŒó2²œ b¼T F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¾„ø°ÞÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýÇ8í¨IŽ´ÏV‚*EWêŽó2²œ b¼T F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¾„ø°ÞÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý[ûå3sòNE¸~‘ÃA1Ñó2²œ b¼T F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¾„ø°ÞÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý{7„¥ýFƒ°8QÌK2‡’ó2²œ b¼T F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¾„ø°ÞÓñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý¿=:?AÁ¤Gð¤JL”ó2²œ b¼T F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¾„ø°ÞÓñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ý¨üšØ A¯€énx\( ¡–ó²œ b¼T F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¾„ø°ÞÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýj c¿!DÙ©ŠýMi÷¬³˜ó:²œ b¼T F~é®Ò'üvº¾„ø°ÞÓñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýZ†§P…ÂOk°¢–Íq¡jšó:²œ b¼T F~é®Ò'üvº¾„ø°ÞÓñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýÂù."£áD³¾H­ýFû­œó²œ b¼T F~é®Ò'üvºb¼T F~é®Ò'üvº¾„ø°ÞÓñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec©_static_buf_sta20ÜS7[AIF¬•pd± (ýào*yX1A¾™é`cΪµ*žó@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'¾„ø°ÞÓñ‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý*Ï.·LÞB>‡¥‘9½  ó0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'¾„ø°ÞÓñ‹+aue_lseekÒ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýb½,F~é®Ò'üvºä`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±¾„ø°ÞÓñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýBÏÜ1xRO.‰² 5˜¥þž¢ó$°œ `J¾QF~é®Ò'üvºb½,F~é®Ò'üvº¾„ø°ÞÓñ‹+aue_fork +arg_pid1522hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1522ppid1282execbash20ÜS7[AIF¬•pd± (ýŸ%@ÕíàJE¼ b]á¤ó²œ b½,F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'¾„ø°ÞÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý©é¶‰ÒLM°ÄC2uÕ ¦ó²œ b½,F~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¾„ø°ÞÓñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1513execbash20ÜS7[AIF¬•pd± (ýFq >ÈD=±®F“€A6¨ó<²œ b½,F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¾„ø°ÞÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý¢¢+ߺl@ +’ȇêtôéåªó@²œ b½,F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ¾„ø°ÞÓñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý?Ûï7³mEÒ¥vl³½;¬ó²œ b½,F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ¾„ø°ÞÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý—ˆÖÕnG­¦¶[úDîX)®ó<²œ b½,F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¾„ø°ÞÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýKØ4¹f@£œÝ~wÞ̉°ó@²œ b½,F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â¾„ø°ÞÓñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý1J‡¼¿«AN½÷ìEîR¶²ó@²œ b½,F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â¾„ø°ÞÓñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýבhN[‚FG–n:ì½v̱´ó²œ b½,F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â¾„ø°ÞÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÀî†RE» E÷[N‹‹{¶ó<²œ b½,F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¾„ø°ÞÓñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýî¢Ä‡9²AóžÎìÜ)E¸ó2²œ b½,F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¾„ø°ÞÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýIžýwŒœO •%ÄŒ>ò9‹ºó2²œ b½,F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¾„ø°ÞÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý÷ðxýûŠHvˆßÙòöc¹ê¼ó2²œ b½,F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¾„ø°ÞÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý›®ôü¥D졲„0{Ÿ·¾ó2²œ b½,F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¾„ø°ÞÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýç5ÊâŸI”§?d¯áîñÀó2²œ b½,F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¾„ø°ÞÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÇÒý²4K㫬fj¡ãÂó2²œ b½,F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¾„ø°ÞÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÂpø\Fl£üª0, Äó0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®å¨ÄåÓñ‹+aue_lseek¤¥hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;uLr>ÈCcªxpH·zKÆó²œ b½,F~é®Ò'üvºb½,F~é®Ò'üvºªà‚þåÓñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýãG”^˜nBX™U‰ÛjuiÈób°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯ªà‚þåÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýM´ùÛ‰’AŠ¸¦'–#וÊób°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯ªà‚þåÓñ‹+aue_writeBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýcX¶F~é®Ò'üvºæ`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±ªà‚þåÓñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýC1Ö¶úÏJÖ­||@ÅuÌó$°œ `J¾QF~é®Ò'üvºcX¶F~é®Ò'üvºªà‚þåÓñ‹+aue_fork +arg_pid1523hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1523ppid1282execbash20ÜS7[AIF¬•pd± (ý·þiË–óJiS!kφÎó²œ cX¶F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ªà‚þåÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýwg,ìEE®·‹½nÐó²œ cX¶F~é®Ò'üvºelp„zQ-S‘z`ôƒ-åˆ/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_string'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ªà‚þåÓñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine2./copy_static_buf_string ppid1513execbash20ÜS7[AIF¬•pd± (ýsw2bºnD “J‹Q6ÆÒó<²œ cX¶F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confªà‚þåÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec©_static_buf_str20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"Œþú7™†'ç‰Mƒƒߔ̵>&Ôó@²œ cX¶F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ªà‚þåÓñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_buf_str20ÜS7[AIF¬•pd± (ý鶷1•ŒMQ±-‘Zü)Öó²œ cX¶F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ªà‚þåÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec©_static_buf_str20ÜS7[AIF¬•pd± (ý` ~åÆNУÝn.§÷Ø1Øó<²œ cX¶F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsªà‚þåÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec©_static_buf_str20ÜS7[AIF¬•pd± (ýŽðŠðXC#•Ç þy¶3Úó@²œ cX¶F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âªà‚þåÓñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_buf_str20ÜS7[AIF¬•pd± (ýìñŸD…§ßê9X[ÂÜó@²œ cX¶F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âªà‚þåÓñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_buf_str20ÜS7[AIF¬•pd± (ý±t©¬Ø­A¥¯ºgB—‚Þó²œ cX¶F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âªà‚þåÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec©_static_buf_str20ÜS7[AIF¬•pd± (ýt*ŒeS¯Aa¦“„Znò‘àó<²œ cX¶F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ªà‚þåÓñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec©_static_buf_str20ÜS7[AIF¬•pd± (ýÏíy™"D¸Ù²®ÙÛßÜ1TF[¸oµU‰.‰|ˆô@²œ cXÁôF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ªà‚þåÓñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýšhÓq$ŸOͬ­^«ýeÇŠô²œ cXÁôF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ªà‚þåÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýœ«µ‘nKCUäÕ³EŒô<²œ cXÁôF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsªà‚þåÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý ‡Ïš±¢D¦’µâ•x³Žô@²œ cXÁôF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âªà‚þåÓñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý[jóܦM†·rîÉP“ô@²œ cXÁôF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âªà‚þåÓñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý®'x}OKü•>Ld଒ô²œ cXÁôF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âªà‚þåÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý,XòÈ€;F‡Ž“[ +œ²/”ô<²œ cXÁôF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ªà‚þåÓñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý"OÙML—>Ò{‰YÓ¦–ô2²œ cXÁôF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œªà‚þåÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýôLæÎRJ'ª,¡Nš3˜ô2²œ cXÁôF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œªà‚þåÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý´Î_×­îG@¶k‚>"n¦Cšô2²œ cXÁôF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œªà‚þåÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý™µnr’Lš™*°ÙCŒ³ œô2²œ cXÁôF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œªà‚þåÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý!až£^E››ÑOÞS3"ƒžô2²œ cXÁôF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œªà‚þåÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÏ_»7ÛIC¸Ò¬í(O ô0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UþÞŠ›íÓñ‹+aue_lseek¼òhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýéÈÅ"/K%ˆO:NqØO¢ô²œ cXÁôF~é®Ò'üvºcXÁôF~é®Ò'üvºôžãÊíÓñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýYЉ½^N¥…-Iþ4J¤ôb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯ôžãÊíÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý®„¿D¸¯£&€Y§¦ôb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯ôžãÊíÓñ‹+aue_write>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýcóÊ·F~é®Ò'üvºê`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±ôžãÊíÓñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýJó´S))Ff²¢Gœß†³/¨ô$°œ `J¾QF~é®Ò'üvºcóÊ·F~é®Ò'üvºôžãÊíÓñ‹+aue_fork +arg_pid1525hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1525ppid1282execbash20ÜS7[AIF¬•pd± (ýs¿Í¨ñAê„´µ? 6ðªô²œ cóÊ·F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ôžãÊíÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý æÓ` DÇ›ô±¿¤Ús¬ô²œ cóÊ·F~é®Ò'üvº¤ üx¡\¡ô׬½i„/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_heap_buf'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ôžãÊíÓñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine../copy_static_heap_buf ppid1513execbash20ÜS7[AIF¬•pd± (ýߢþ„ÛNÓ¥Xû ?½ÿ®ô<²œ cóÊ·F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confôžãÊíÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýÚš7Ju…A•k+³äýn°ô@²œ cóÊ·F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ôžãÊíÓñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý®±-3=DG§ÄÔiûžï9²ô²œ cóÊ·F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ôžãÊíÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý¢eãkR£Hw®òí$Ïs3#´ô<²œ cóÊ·F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsôžãÊíÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýO‹Õý)ŒJÜ£:‰|¶ô@²œ cóÊ·F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âôžãÊíÓñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýW„ZhOB™§nA‰.!¸ô@²œ cóÊ·F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âôžãÊíÓñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýKù®©&uDô˜IÖ¸Ț)ºô²œ cóÊ·F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âôžãÊíÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýžF¤â¥ÍIM¼§(À¡UyW¼ô<²œ cóÊ·F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ôžãÊíÓñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýy q&ùO*‰ê®·Hß4º¾ô2²œ cóÊ·F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œôžãÊíÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýÄÿ"&jL{©\ë®kÆÓÄÀô2²œ cóÊ·F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œôžãÊíÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýZ¹ÁºzŸEž–et„OÕÂô2²œ cóÊ·F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œôžãÊíÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýØ `#kOŸðøUÝ£÷bÄô2²œ cóÊ·F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œôžãÊíÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý"i4(pI‰¤Mé ºÓÆô2²œ cóÊ·F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œôžãÊíÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýäд”sD÷¢Žxƒß.5(Èô2²œ cóÊ·F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œôžãÊíÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý·y«iÖÙH»‘vFŽ3]Êô2²œ cóÊ·F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œôžãÊíÓñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý„¨ùäD‰’¹A\%BÌô2²œ cóÊ·F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œôžãÊíÓñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý{ K¤;Js±ºôa»Ó¡Îô²œ cóÊ·F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œôžãÊíÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýáeõ3šJ•ùÞðïuZ|Ðô:²œ cóÊ·F~é®Ò'üvºôžãÊíÓñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýgH_<íEë”æ¾ F ƒÒô:²œ cóÊ·F~é®Ò'üvºôžãÊíÓñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ý‰Eà#VM%œÂ­Â¹ÒÃÔô²œ cóÊ·F~é®Ò'üvºcóÊ·F~é®Ò'üvºôžãÊíÓñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec©_static_heap_bu20ÜS7[AIF¬•pd± (ýgXÄVƒLXžíˆKÿ¤èÖô@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ôžãÊíÓñ‹+aue_read°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýoøþùßìNã«å·¬SÿØô0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ôžãÊíÓñ‹+aue_lseek® +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýcôv†F~é®Ò'üvºì`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±ôžãÊíÓñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"š–þÐÏPngœHc§bgûŽÚô$°œ `J¾QF~é®Ò'üvºcôv†F~é®Ò'üvºôžãÊíÓñ‹+aue_fork +arg_pid1526hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1526ppid1282execbash20ÜS7[AIF¬•pd± (ý¬Þ•,›¨L¼Ò¶»"fo¼Üô²œ côv†F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ôžãÊíÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý©2ÌäoåE˜CDT(žÞô²œ côv†F~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ôžãÊíÓñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1513execbash20ÜS7[AIF¬•pd± (ý®«2ç¢JÍ¿Pÿ@p81àô<²œ côv†F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confôžãÊíÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý¤NH\…MªŽ%¥Î= ÝÆâô@²œ côv†F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ôžãÊíÓñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÓµ.öÎþHR¿G?’–ð_äô²œ côv†F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ôžãÊíÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý۲ƂLJAƒ½Ã*D§nÙ–æô<²œ côv†F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsôžãÊíÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýüNBýÇ Eéº4PþØ„gèô@²œ côv†F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âôžãÊíÓñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýô¾´ÞºñGv¶ø“‰hÓêô@²œ côv†F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âôžãÊíÓñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý$§pF’»q-Îî×ðô2²œ côv†F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œôžãÊíÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýâ)NX}ÍEn°ß€3Œƒdòòô2²œ côv†F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œôžãÊíÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý‚ýzr”C&ˆ‡Gm¯¯¹›ôô2²œ côv†F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œôžãÊíÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýú3\Ö;ÙMo®cn àü“Úöô2²œ côv†F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œôžãÊíÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýˆr3&+A^‹²¥§±ãºøô2²œ côv†F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œôžãÊíÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÏr\3B¶šxjo§ +FÜúô2²œ côv†F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œôžãÊíÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýˆOj“‘G‚«;¢ËÎCæüô0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„‡ÇñôÓñ‹+aue_lseek̾€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæEÓ®œqAȵI“DvK~Ñ€õ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U„‡ÇñôÓñ‹+20ÜS7[AIF¬•pd± (ýˆrå6˜Hfƒ‰•uHÐBÔþô@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„‡ÇñôÓñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰H—zMRŒ®ˆtwÿ„õ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U„‡ÇñôÓñ‹+20ÜS7[AIF¬•pd± (ý mž&3Oÿ¨/’ÇR^?ô‚õ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„‡ÇñôÓñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýzÔõ’-‹G<˜ºñâóZ˜ˆõ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U„‡ÇñôÓñ‹+20ÜS7[AIF¬•pd± (ýåÝI©NJ üVî2†õ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„‡ÇñôÓñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]z¡dtOI¯­œ@Ö¦Õ¡µŠõ:‚œ Ê +ÙKFzé®›'üvº„‡ÇñôÓñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8Óþ©~vH +—à/p™?£Œõ@êž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V „‡ÇñôÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁ9‘wÆ×O°ûÝ€äDF¶Žõ@êž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„‡ÇñôÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýäþM2 NV²×ocöNT¥õ@êž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„‡ÇñôÓñ‹+aue_preadMhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯äÑ:@%ƒš=gdΠ’õb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº„‡ÇñôÓñ‹+aue_writeúMhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@®WTh8L—ËpEù }”õbêž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á„‡ÇñôÓñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý} ©ñ~FDÚ‰0ßQAk–õ@êž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V „‡ÇñôÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†Ÿg:C*š¶M˜õ@êž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„‡ÇñôÓñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|Rà¹M’´)ã…(šõ@êž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„‡ÇñôÓñ‹+aue_preadˆLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕmõ³þéAÚ±Bw<“Fµ£VÄ4*øÌežöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯¢ÌäüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýÜ'zÇC¤¶ã¥h“…  öb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯¢ÌäüÓñ‹+aue_write +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý¦ƒvëÍ_OE´½Ö¢TÊt˜¢öb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯¢ÌäüÓñ‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýµFdžÒÕ@†Š!Ê›/c¼5¤öb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯¢ÌäüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý¨IÊuDr¼³+}9k¦öb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯¢ÌäüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýÄ–ý=°GÀ†VCcb\Š¨öb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯¢ÌäüÓñ‹+aue_write8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý>¹F$Gvõƒ—UÆBªöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯¢ÌäüÓñ‹+aue_write0hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý×éEÂODÀ®1»Šê›Š¬öb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯¢ÌäüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý‚hùK¬²C¹^ñ#,!®öb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯¢ÌäüÓñ‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýß|°£ÈòLb“S`ºl3°öb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯¢ÌäüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý39Æî;ÑH3¤I5ku“i²öb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯¢ÌäüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýB DÇKŸÁ¸¦⫯´öb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯¢ÌäüÓñ‹+aue_write.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýî0f÷.A©¹Yñc{*¶öb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_write*hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýý]œ?’}NÔT«:•í;¸öb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý“äóÝ€±Mº”Á9ìºöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_write,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý%¶}øF%¡£ÓöOÕK¼öb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_write.hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýçô}æqlJפÕ5ïdŒU¾öb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_write0hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý¾ “)‡µFV¨%Õ7tÝÀöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýSìó§ÚDG´¡ÿó'4N{ÃÂöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýˆkê‹ÊFe®,0tw>„Äöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýÖÓæ?;˜Lr€T>‡Ü]Æöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýKqÙûÌAÊ…>õ ™lÈöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýzh4Ü[Hc±É€ðŒíåÊöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý"MÙÌ1z@,£cs8_ÁfÌöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý(›ö£G‰…ò( ³œžÎöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýz +¤b‹òEŠ†mSＯ–Ðöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýIÚ©ÎXÊN– \õ@Ïïö±Òöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýÊüìÅðF÷­ï§ˆgjçÔöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýýŒ9£ö&JÚ°ä—ç´ÙÛDÖöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýoz¬õHCþ¬4Ø Z2ËØöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýe˜—Œ ÒFÞ¬±‰ü¯ðOÚöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý‘8ÂhA¿cá«)¸æ!Üöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý£çBânFD·UfDa÷Þöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ýÉÚ<äc AB´q‡ f…äàöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý¨xòz±Jf€þ2ÌnËŒ´âöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý´ú¨‡»M€Ê:¥ÉŸÔäöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý¼L IiµäEÃœÆI„æöb²œ e*è:F~é®Ò'üvºí( ö~R¶ ~{‚~¯ÌÆ£íüÓñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execlistdir20ÜS7[AIF¬•pd± (ý1Ìô³âˆG˨²‘«)Xsèö²œ e*è:F~é®Ò'üvºÞç=š8§T¸šm9D§bÌÆ£íüÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execlistdir20ÜS7[AIF¬•pd± (ýYÞ×FK‹újÙ/º Ôêö²œ e*è:F~é®Ò'üvºe*è:F~é®Ò'üvºÌÆ£íüÓñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execlistdir20ÜS7[AIF¬•pd± (ýùÒÿ NâFâŽàɇäÿ8Áìö@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ÌÆ£íüÓñ‹+aue_readîhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýo äøKüŸîº¸‘Î[îö0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ÌÆ£íüÓñ‹+aue_lseekô +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýe-s€F~é®Ò'üvºö`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±ÌÆ£íüÓñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýCÒ*SHfœŽ;2%®ðö$°œ `J¾QF~é®Ò'üvºe-s€F~é®Ò'üvºÌÆ£íüÓñ‹+aue_fork +arg_pid1531hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1531ppid1282execbash20ÜS7[AIF¬•pd± (ý!"›µýG1£b§ʆØfòö²œ e-s€F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ÌÆ£íüÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý RéeáÖMžµØÌU¢Aôö²œ e-s€F~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ÌÆ£íüÓñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1513execbash20ÜS7[AIF¬•pd± (ý¯ÊA§ÌJ´Š©½‹}æöö<²œ e-s€F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÌÆ£íüÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý¬…ŠA ŒßÖTWÝ}øö@²œ e-s€F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ÌÆ£íüÓñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý$•(¹m{@m¤ÃÛ>Çëìúö²œ e-s€F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ÌÆ£íüÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý„ç1)Œ*EM¤ +Zù6üö<²œ e-s€F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÌÆ£íüÓñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý…JàÂ"xO*¢ýßî!æÆ0þö@²œ e-s€F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÌÆ£íüÓñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýUÝÑ)@ƒ‡Íßá"ÖÓî€÷@²œ e-s€F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÌÆ£íüÓñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý>}£µçM¥M+Üåù ‚÷²œ e-s€F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÌÆ£íüÓñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý÷ /cŽG)‹·iˆ„]v„÷<²œ e-s€F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ÌÆ£íüÓñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýûþ#`²}JTº5Gqý”†÷2²œ e-s€F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÌÆ£íüÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý·½ÜZ“`DŠäW{¿Ìéˆ÷2²œ e-s€F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÌÆ£íüÓñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ìýÆìCô»ø1{H“Š÷2²œ e-s€F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÌÆ£íüÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÖÎúâK.L —FfŒ÷2²œ e-s€F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÌÆ£íüÓñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý1}´šJ=‘ Cš Ž÷2²œ e-s€F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÌÆ£íüÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýW¤bC¨N·¦Çw–m ¸Û÷2²œ e-s€F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÌÆ£íüÓñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýñ3ÞŸ#0Ll®Ø2Å—»ª’÷2²œ e-s€F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ âðöüÓñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýâh DÌDE·vcÈ"¨q”÷2²œ e-s€F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ âðöüÓñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÛpz:…NP©›þ r}ô–÷0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ—Ô°„Ôñ‹+aue_lseek¤ƒ‚hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]Dt(tA½Ú6zÀsô˜÷²œ e-s€F~é®Ò'üvºe-s€F~é®Ò'üvºÔ¨ÊÄÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýzvðèuNŸŠkz~º`¨š÷b°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯Ô¨ÊÄÔñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý††] èwIr†þjž÷$°œ `J¾QF~é®Ò'üvºeÉ©¦F~é®Ò'üvºÔ¨ÊÄÔñ‹+aue_fork +arg_pid1532hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1532ppid1282execbash20ÜS7[AIF¬•pd± (ýå™óËpfJ1£‰à¨„®w ÷²œ eÉ©¦F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'Ô¨ÊÄÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýB5féèG>‘ ðäÖÁ%¢÷²œ eÉ©¦F~é®Ò'üvºËë F>X†·CX>OYx/usr/home/user/ripe-prov-tests-master/Linux/./make_directory'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ô¨ÊÄÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"./make_directory ppid1513execbash20ÜS7[AIF¬•pd± (ýàýà™IíŒÎ,qþ¯(¤÷<²œ eÉ©¦F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÔ¨ÊÄÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execmake_directory20ÜS7[AIF¬•pd± (ý¥áJ!Ž@%‰¯>úEg¦÷@²œ eÉ©¦F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ Ô¨ÊÄÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execmake_directory20ÜS7[AIF¬•pd± (ý}à ,‡vOûpÂmv#¨÷²œ eÉ©¦F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ Ô¨ÊÄÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execmake_directory20ÜS7[AIF¬•pd± (ýµœ}tjN@‰¸× ¹lC]ת÷<²œ eÉ©¦F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÔ¨ÊÄÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execmake_directory20ÜS7[AIF¬•pd± (ý„Ô/4bE‡¹äÄB˜»{ó¬÷@²œ eÉ©¦F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÔ¨ÊÄÔñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execmake_directory20ÜS7[AIF¬•pd± (ýÊ®å=cF@"þ®‰^!˜®÷@²œ eÉ©¦F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÔ¨ÊÄÔñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execmake_directory20ÜS7[AIF¬•pd± (ýçó®vI׺ÿ¾µÝ•”×°÷²œ eÉ©¦F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÔ¨ÊÄÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execmake_directory20ÜS7[AIF¬•pd± (ýûmüÆɼA†ÚSmFJ²÷<²œ eÉ©¦F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Ô¨ÊÄÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execmake_directory20ÜS7[AIF¬•pd± (ýE'W{2nM±b+ñ®ûšà´÷2²œ eÉ©¦F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÔ¨ÊÄÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execmake_directory20ÜS7[AIF¬•pd± (ýb•1îAãJÜ‘pÕ +Fцæ¶÷2²œ eÉ©¦F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÔ¨ÊÄÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execmake_directory20ÜS7[AIF¬•pd± (ýVn™þÒBTˆ s=ß º¸÷2²œ eÉ©¦F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÔ¨ÊÄÔñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execmake_directory20ÜS7[AIF¬•pd± (ýcÕóòôK—95íha©º÷2²œ eÉ©¦F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÔ¨ÊÄÔñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execmake_directory20ÜS7[AIF¬•pd± (ý˜’-?FË@ž·®L•ù¾­ž¼÷2²œ eÉ©¦F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÔ¨ÊÄÔñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execmake_directory20ÜS7[AIF¬•pd± (ý߇âDù¢B(•ëbv«H´­¾÷2²œ eÉ©¦F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÔ¨ÊÄÔñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execmake_directory20ÜS7[AIF¬•pd± (ý&¼ïk@U«/¶R­`ŽºÀ÷2²œ eÉ©¦F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÔ¨ÊÄÔñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execmake_directory20ÜS7[AIF¬•pd± (ý_Þ¾8ÊF$š +Æ9BNÚÔÂ÷2²œ eÉ©¦F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÔ¨ÊÄÔñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execmake_directory20ÜS7[AIF¬•pd± (ýMÚŒz=J¤}ÓðJ8ˆýÄ÷²œ eÉ©¦F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÔ¨ÊÄÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execmake_directory20ÜS7[AIF¬•pd± (ýÇïbÏJ¦‡,EÎøHLÇÆ÷:²œ eÉ©¦F~é®Ò'üvºÔ¨ÊÄÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execmake_directory20ÜS7[AIF¬•pd± (ýá,Ü©)GÈ•ÞÛø+Ò÷È÷:²œ eÉ©¦F~é®Ò'üvºÔ¨ÊÄÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execmake_directory20ÜS7[AIF¬•pd± (ý +ž-–Ý:º¢_º:[á/¢g¬20 +ÜS7[AIF¬•pd± (ýÈnÝEÿ?Ifž¡0 _¯zÊ÷²œ eÉ©¦F~é®Ò'üvºž-–Ý:º¢_º:[á/¢g¬j/usr/home/user/ripe-prov-tests-master/Linux/temporaryÔ¨ÊÄÔñ‹+aue_mkdirhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execmake_directory20ÜS7[AIF¬•pd± (ýi&1YM¾G|€¶4[\ðsØÌ÷²œ eÉ©¦F~é®Ò'üvºeÉ©¦F~é®Ò'üvºÔ¨ÊÄÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execmake_directory20ÜS7[AIF¬•pd± (ý´fÆ£Š•@¨¶:§ÿaÆj7Î÷@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'Ô¨ÊÄÔñ‹+aue_readÄhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýê¸ÿm†@r¬WÌ\À¼Ð÷0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'Ô¨ÊÄÔñ‹+aue_lseek® hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýeÊ‹lF~é®Ò'üvºú`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±Ô¨ÊÄÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýò¼¹WðCPŒk!R½§ŸÒ÷$°œ `J¾QF~é®Ò'üvºeÊ‹lF~é®Ò'üvºÔ¨ÊÄÔñ‹+aue_fork +arg_pid1533hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1533ppid1282execbash20ÜS7[AIF¬•pd± (ýÅÚÄ9áHM‰F׌íGÔ÷²œ eÊ‹lF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'Ô¨ÊÄÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý5Ì½Þ +åHO“ž¥-…èx«Ö÷²œ eÊ‹lF~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ô¨ÊÄÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1513execbash20ÜS7[AIF¬•pd± (ý‹vÒ%ºD­#K<‘‰c¢Ø÷<²œ eÊ‹lF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÔ¨ÊÄÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý!‹²ÿ­F×·òŠ R¹ìÊÚ÷@²œ eÊ‹lF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ Ô¨ÊÄÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýõgWìGî‚1Ýk38Ü÷²œ eÊ‹lF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ Ô¨ÊÄÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýµ +ýÉHyD¤®!iüWsÞ÷<²œ eÊ‹lF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÔ¨ÊÄÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýx&„áFáMK¨5eÈ}ο8à÷@²œ eÊ‹lF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÔ¨ÊÄÔñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý¤ò…É,aFc‰ûB¿©zâ÷@²œ eÊ‹lF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÔ¨ÊÄÔñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýz.sù9IŽèWÓ±ßXä÷²œ eÊ‹lF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÔ¨ÊÄÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýësjÕåLu¯1™wE%¿æ÷<²œ eÊ‹lF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Ô¨ÊÄÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý;–Ά¨B®”ñ#>ö+›«è÷2²œ eÊ‹lF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÔ¨ÊÄÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý…¹ µô&E ¹2ªÑšöRëê÷2²œ eÊ‹lF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÔ¨ÊÄÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý; )ˆI‘·CQÿ jçì÷2²œ eÊ‹lF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÔ¨ÊÄÔñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý6éû¶ÞîFB—”>¶ª%‹áî÷2²œ eÊ‹lF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÔ¨ÊÄÔñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýf¤[zRÆI¬É¯Û +sFð÷2²œ eÊ‹lF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÔ¨ÊÄÔñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý‚W¨sŽ5GjŸ$vÀïï$ò÷0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uâó册Ôñ‹+aue_lseek¼Ñ‚hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAÓ“›JɱpHÌùîô÷²œ eÊ‹lF~é®Ò'üvºeÊ‹lF~é®Ò'üvºâó册Ôñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýàeÖpxœE|‡õ£Óñ{Õö÷b°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯âó册Ôñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýßÈëSªÕF™²î‘Jø<*ø÷b°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯âó册Ôñ‹+aue_writeBhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýfdf«F~é®Ò'üvºü`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±âó册Ôñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý-—©fÕLבŸ—9ü*ôDú÷$°œ `J¾QF~é®Ò'üvºfdf«F~é®Ò'üvºâó册Ôñ‹+aue_fork +arg_pid1534hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1534ppid1282execbash20ÜS7[AIF¬•pd± (ýùßÕmžZCµ¡û땧Hü÷²œ fdf«F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'âó册Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýfýn1O±O͸/>©~öþ÷²œ fdf«F~é®Ò'üvºgAÅŸŒãŽP£ŒðÑ€Ž¡Åˆ/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_multi_write'ìAzX™¦}˜¹(/libexec/ld-elf.so.1âó册Ôñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine2./multi_read_multi_write ppid1513execbash20ÜS7[AIF¬•pd± (ýËw´u¸{Nm”ƒ_Wŋʹ€ø<²œ fdf«F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confâó册Ôñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýÏšÍ2QLœ¶êÁ@|õs‚ø@²œ fdf«F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ âó册Ôñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý4Á‹(&'M7˜:šY4ð}è„ø²œ fdf«F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ âó册Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý©âü«ð"@³4·U¾Ž†ø<²œ fdf«F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsâó册Ôñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýã>ú'³{MÁ²Q‰ÖŽ¡ˆø@²œ fdf«F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼ââó册Ôñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýjKôYôH˜´èœ˜—°Šø@²œ fdf«F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼ââó册Ôñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýBov›Õ*Bœ¸l¨²ødŒø²œ fdf«F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼ââó册Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý*“eÀ´M“šz_á@þ$Žø<²œ fdf«F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7âó册Ôñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýíD€R G~çÄÑΚø2²œ fdf«F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œâó册Ôñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ˆšûj3™QF˜@ ªÕ–dB ù’ø2²œ fdf«F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œâó册Ôñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý£×¥þ{âNž° BŽ…¾!ð”ø2²œ fdf«F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œâó册Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýƒ;ù±D Ž¤L¤i¤¢‚–ø2²œ fdf«F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œâó册Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýlþ^ÁÑiFº™½jS«(ù˜ø2²œ fdf«F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œâó册Ôñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýŒ3rQGÌ‚zè¡ vÊšø2²œ fdf«F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œâó册Ôñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý\ɽ·E!EUê:æsœø2²œ fdf«F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œâó册Ôñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýM‹.ÍCJCºkîI-äÌfžø2²œ fdf«F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œâó册Ôñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýþ['e¿H5‘ wúwŽL ø²œ fdf«F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œâó册Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý+]ƒO¡å©…Œdçc¢ø:²œ fdf«F~é®Ò'üvºâó册Ôñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý!SÁ»-LO,¨ƒðMϤø:²œ fdf«F~é®Ò'üvºâó册Ôñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý‚‘½ŽMCí·TXªÜ÷…]¦ø<²œ fdf«F~é®Ò'üvºf*qÛ^žqaþ>Û“Á€/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.câó册Ôñ‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý“a°JQ±³÷†´x=x¨ø<²œ fdf«F~é®Ò'üvº1ž‰+_\‘+öý<_îæ˜/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.câó册Ôñ‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý3 ã ÍBò­Ä(ŒVväÞªø<²œ fdf«F~é®Ò'üvº–yÓžÇJ8UŠÇ>;å8¦&x/usr/home/user/ripe-prov-tests-master/Linux/output_file1.tmp挦ŒÔñ‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýtjŽP·EÖ¹ÀKîE<Ѭø<²œ fdf«F~é®Ò'üvº•Þ©R‹8¦Y¸‹5RI¦Qx/usr/home/user/ripe-prov-tests-master/Linux/output_file2.tmp挦ŒÔñ‹+aue_open_rwtc +flagsmode¶ +ret_fd16hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value6ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý$üÝ3‘KÛlU&O˜W®ø@²œ fdf«F~é®Ò'üvºf*qÛ^žqaþ>Û“Á挦ŒÔñ‹+aue_read¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýÔ×­GŠAñ„Þ¹AÊÓv@°ø@²œ fdf«F~é®Ò'üvº1ž‰+_\‘+öý<_îæ挦ŒÔñ‹+aue_readühostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý¬ë„6®œJr‹ˆ$d¡9²ø²œ fdf«F~é®Ò'üvºf*qÛ^žqaþ>Û“Á挦ŒÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý–! +µ€G•¡vˆXk—´ø²œ fdf«F~é®Ò'üvº1ž‰+_\‘+öý<_îæ挦ŒÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý™nÔŠ³N¹ô·Kµ;6G¶øb²œ fdf«F~é®Ò'üvº–yÓžÇJ8UŠÇ>;å8¦&挦ŒÔñ‹+aue_writeþhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý¡ó¼Â¦;å8¦&挦ŒÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýô…7w£eCV®CÁgÝ>åºøb²œ fdf«F~é®Ò'üvº•Þ©R‹8¦Y¸‹5RI¦Q挦ŒÔñ‹+aue_writeöhostHdc53375b-4149-46ac-9570-64b1090f28fdfd6ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ýÍ°=¦p Jົ”¨Å3¼ø²œ fdf«F~é®Ò'üvº•Þ©R‹8¦Y¸‹5RI¦Q挦ŒÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd6return_value0ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý™föqÒMjÆPOú´¾ø²œ fdf«F~é®Ò'üvºfdf«F~é®Ò'üvºæŒ¦ŒÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec&multi_read_multi_wr20ÜS7[AIF¬•pd± (ý-ZI¨ÅÁN®³Š rYÉÀø@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'挦ŒÔñ‹+aue_readŠhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýJŸ>Mý‹Oùµ +ËB¹.€,Âø0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'挦ŒÔñ‹+aue_lseekê hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýfevÕF~é®Ò'üvºþ`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±挦ŒÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýopMN¨¾Ã¼,`çÄø$°œ `J¾QF~é®Ò'üvºfevÕF~é®Ò'üvºæŒ¦ŒÔñ‹+aue_fork +arg_pid1535hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1535ppid1282execbash20ÜS7[AIF¬•pd± (ý_¥ êEóœ1Ij¶î+kÆø²œ fevÕF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'挦ŒÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýJPëÅDÂNèªS™îoTÈø²œ fevÕF~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1挦ŒÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1513execbash20ÜS7[AIF¬•pd± (ýëÖÏ’tBŶ]_yèÃyÊø<²œ fevÕF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf挦ŒÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý%ÜÕJmœLç»8~ðÂMgÌø@²œ fevÕF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ 挦ŒÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÅÈ…Wk—Dî¼ý¬—ŦX…Îø0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ëÐÝ“Ôñ‹+aue_lseekê ƒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±öY†N„K¯qlËz9Ðø²œ fevÕF~é®Ò'üvºfevÕF~é®Ò'üvº ëÐÝ“Ôñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýK2EË”LW±¿ßϦկÒøb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯ ëÐÝ“Ôñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý¸\ÜávšNû¦ñê»*GöÔøb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯ ëÐÝ“Ôñ‹+aue_writeDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýgrJF~é®Ò'üvº€`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB± ëÐÝ“Ôñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÒ1ÿ©ÄNUˆÉ™[ûoŠ/Öø$°œ `J¾QF~é®Ò'üvºgrJF~é®Ò'üvº ëÐÝ“Ôñ‹+aue_fork +arg_pid1536hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1536ppid1282execbash20ÜS7[AIF¬•pd± (ý!Z¤L‚“£¬Ðª9Øø²œ grJF~é®Ò'üvº¥µîgµÑUµg¨eµÑc' ëÐÝ“Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý-ÞÚ,WI•¬ ¥ÔnaÚø²œ grJF~é®Ò'üvºظõa0øX°Óøø/åŠ/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_single_write'ìAzX™¦}˜¹(/libexec/ld-elf.so.1 ëÐÝ“Ôñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine4./multi_read_single_write ppid1513execbash20ÜS7[AIF¬•pd± (ýQã÷ʸº@Ǥ ʪö‘Üø<²œ grJF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf ëÐÝ“Ôñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýÔb³ÕoG…‘T™>ÛwèÞø@²œ grJF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  ëÐÝ“Ôñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý‡ÊGÔóuNâ€,ÉEª"Z¦àø²œ grJF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  ëÐÝ“Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýŠ¦³?°B¬¨çÖ‘‹âø<²œ grJF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints ëÐÝ“Ôñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý}²IGÉ_BR¹ ¤3r@»ªäø@²œ grJF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â ëÐÝ“Ôñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý±`>”GJ2™€/2k1ªÛæø@²œ grJF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â ëÐÝ“Ôñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýu7¢2œBˆ‘Åp»-ÅÉèø²œ grJF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â ëÐÝ“Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý‰ì@E@b¬€Ëk–k®êø<²œ grJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7 ëÐÝ“Ôñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý :û±ÏÒFÆ‹?Çm]ïÚìø2²œ grJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ ëÐÝ“Ôñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý=uT‡Lb­ž‘&tÉîø2²œ grJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ ëÐÝ“Ôñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý"®vG‡Œ˜õÔÚuæiðø2²œ grJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ ëÐÝ“Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýªÑ>uüMŠ<ôæýôsoòø2²œ grJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ ëÐÝ“Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýí´á,mlBS› +á7D Ýôø2²œ grJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ ëÐÝ“Ôñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýD(›)A¾K<…ûæR‹öø2²œ grJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ ëÐÝ“Ôñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý˜A.'æOw™x +WT(øø2²œ grJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ ëÐÝ“Ôñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýP djF ±á™üÝPúø2²œ grJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ ëÐÝ“Ôñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýŒÙäßò=Mù¾PÐÍäñ]‹üø²œ grJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ ëÐÝ“Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýì7p¢oDôÅsÈÌ@0þø:²œ grJF~é®Ò'üvº ëÐÝ“Ôñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý+|P€[D&¶îàK·ÐŸ€ù:²œ grJF~é®Ò'üvº ëÐÝ“Ôñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý¥²+„t NNŽ^0¸¢½‚ù<²œ grJF~é®Ò'üvºf*qÛ^žqaþ>Û“Á€/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c ëÐÝ“Ôñ‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýë8“”RnF¯>ÊUkkH„ù<²œ grJF~é®Ò'üvº1ž‰+_\‘+öý<_îæ˜/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c ëÐÝ“Ôñ‹+aue_open_rwtc +flagsmode¶ +ret_fd14hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value4ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýÇ*1VÚFrž:0¿¨^p†ù<²œ grJF~é®Ò'üvº“§UŽÞ*PªÞG $Pv/usr/home/user/ripe-prov-tests-master/Linux/merged_file.tmp ëÐÝ“Ôñ‹+aue_open_rwtc +flagsmode¶ +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýIëÌ=ïZBȇ˜Ît³ETOˆù@²œ grJF~é®Ò'üvºf*qÛ^žqaþ>Û“Á ëÐÝ“Ôñ‹+aue_read¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýtpœ žõEZº‚ž%A6>ÖŠù@²œ grJF~é®Ò'üvº1ž‰+_\‘+öý<_îæ ëÐÝ“Ôñ‹+aue_readühostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýêÒ¶÷_M¸šI¼öŒù²œ grJF~é®Ò'üvºf*qÛ^žqaþ>Û“Á ëÐÝ“Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý Ð~D¬²•(B®@ñŽù²œ grJF~é®Ò'üvº1ž‰+_\‘+öý<_îæ ëÐÝ“Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý­Ì”é¡F‚—OdËh’Ú|ùb²œ grJF~é®Ò'üvº“§UŽÞ*PªÞG $P ëÐÝ“Ôñ‹+aue_writeôhostHdc53375b-4149-46ac-9570-64b1090f28fdfd5ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ý;;½×r„MÕ½× ’>J_’ù²œ grJF~é®Ò'üvº“§UŽÞ*PªÞG $P ëÐÝ“Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýuÍIBKGí¾an ]õ‰”ù²œ grJF~é®Ò'üvºgrJF~é®Ò'üvº ëÐÝ“Ôñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec&multi_read_single_w20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"’¨üω»ïHû«yÕngP¬û–ù@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc' ëÐÝ“Ôñ‹+aue_readÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýšŽw}GŒ”`ýNÙ9˜„˜ù0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc' ëÐÝ“Ôñ‹+aue_lseek˜ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýgM—F~é®Ò'üvº‚`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB± ëÐÝ“Ôñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý +¶«‰,Gü®ÂpË‘«¤Øšù$°œ `J¾QF~é®Ò'üvºgM—F~é®Ò'üvº ëÐÝ“Ôñ‹+aue_fork +arg_pid1537hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1537ppid1282execbash20ÜS7[AIF¬•pd± (ý)E›^ƒ¾B<•–8‹ï?gœù²œ gM—F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'œ‘Œç“Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýLßäf¾ÔMϪæýÅÆ +¸èžù²œ gM—F~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1œ‘Œç“Ôñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1513execbash20ÜS7[AIF¬•pd± (ýÒ²1›÷@Â….éØà!ó ù<²œ gM—F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confœ‘Œç“Ôñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýëV“]äE“dÚB¾*k§¢ù@²œ gM—F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ œ‘Œç“Ôñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý•¨:A”|/usr/home/user/ripe-prov-tests-master/Linux/./remove_directory'ìAzX™¦}˜¹(/libexec/ld-elf.so.1¦²¸³›Ôñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine&./remove_directory ppid1513execbash20ÜS7[AIF¬•pd± (ý š•¿ÏE÷†æ~‘Fúl;¸ù<²œ gžåF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf¦²¸³›Ôñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ý¨–œQGô“¶>¨è>[ºù@²œ gžåF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ¦²¸³›Ôñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ýHg­t¢FÿŽZH@±”$©¼ù²œ gžåF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ¦²¸³›Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ý‘lì8Š®Nƒ àÑ\û@þK¾ù<²œ gžåF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¦²¸³›Ôñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ý×mH›XD9ªb1É?³Àù@²œ gžåF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â¦²¸³›Ôñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ýñ|gŽ¼Aýƒõ6)ËÁ–áÂù@²œ gžåF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â¦²¸³›Ôñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ýàr†!žG@>†lÊÂË­ßhÄù²œ gžåF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â¦²¸³›Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ýN˜¿U•FÒ·8Å5LeÈÆù<²œ gžåF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¦²¸³›Ôñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ý Q$Э*@3³ä—Áˆ^oÈù2²œ gžåF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¦²¸³›Ôñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ýú¨ä<ÚJ ˆL†#ÆCÿ0Êù2²œ gžåF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¦²¸³›Ôñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ý WŽ-GEm¬Í<.·KÌù2²œ gžåF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¦²¸³›Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ýG9w;žAÚ½ÇU½6u²Îù2²œ gžåF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¦²¸³›Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ýÅeÔéU±@º…°½ÈeíÐù2²œ gžåF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¦²¸³›Ôñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ý|ä>º‰îFšQÎÕ¦òÒù2²œ gžåF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¦²¸³›Ôñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ý³83ú1OJ ‹5:åwÉÔù2²œ gžåF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¦²¸³›Ôñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ýç%*•b Fi¾~Òú¤=T¦Öù2²œ gžåF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¦²¸³›Ôñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ý-õ½JüOõŒ0@‚(ŠØù²œ gžåF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¦²¸³›Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ý ©þï3As™€z3O¦å7Úù:²œ gžåF~é®Ò'üvº¦²¸³›Ôñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ý.>–a Aþ¾r^ç抜lÜù:²œ gžåF~é®Ò'üvº¦²¸³›Ôñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ý?Ñ.?ßJþ‹è;&ÄÒwÞù\²œ gžåF~é®Ò'üvºž-–Ý:º¢_º:[á/¢g¬j/usr/home/user/ripe-prov-tests-master/Linux/temporaryð¨þ¼›Ôñ‹+aue_rmdirhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ýþ¡ÎAMS™ˆA¸åa òàù²œ gžåF~é®Ò'üvºgžåF~é®Ò'üvºð¨þ¼›Ôñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec remove_directory20ÜS7[AIF¬•pd± (ýOhßláJÅÉ*ä¢>âù@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ð¨þ¼›Ôñ‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýþbâ«AœÂ¬ i&»äù0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ð¨þ¼›Ôñ‹+aue_lseek¼ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýgŸ­ÎF~é®Ò'üvº†`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±ð¨þ¼›Ôñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýµœ÷OC‘À°"î!æù$°œ `J¾QF~é®Ò'üvºgŸ­ÎF~é®Ò'üvºð¨þ¼›Ôñ‹+aue_fork +arg_pid1539hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1539ppid1282execbash20ÜS7[AIF¬•pd± (ýß-˜ÉäI6­~è/c aèù²œ gŸ­ÎF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ð¨þ¼›Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý"y5ÓÁëBXµÏVØ(µùêù²œ gŸ­ÎF~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ð¨þ¼›Ôñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1513execbash20ÜS7[AIF¬•pd± (ý¤£>w½G JjgŒÄìù<²œ gŸ­ÎF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confð¨þ¼›Ôñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý W04m8Hƒßg9Âîù@²œ gŸ­ÎF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ð¨þ¼›Ôñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý¯R°Êê3D1 ªÔ5Æjðù²œ gŸ­ÎF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ð¨þ¼›Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýKÃҴŵIªŸýñ’aü~ òù<²œ gŸ­ÎF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsð¨þ¼›Ôñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýòX•˜`Aú¯ÄåHàxͳôù@²œ gŸ­ÎF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âð¨þ¼›Ôñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýï.ËñKL*‹öO Çy§öù@²œ gŸ­ÎF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âð¨þ¼›Ôñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÑJâþ@˜®ƒ±EhE©øù²œ gŸ­ÎF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âð¨þ¼›Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÄ?yŶFE‡ÈìgîZúù<²œ gŸ­ÎF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ð¨þ¼›Ôñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýr!¦¦TLuŽÅ @úŒCHüù2²œ gŸ­ÎF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œð¨þ¼›Ôñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýe±·-{ÛEä¬<\”õ†åþù2²œ gŸ­ÎF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œð¨þ¼›Ôñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýiJý{¯¸L1–÷)ÁfõX߀ú2²œ gŸ­ÎF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œð¨þ¼›Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý5ÀöCÀ«µ6²³3KÈ‚ú2²œ gŸ­ÎF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œð¨þ¼›Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý\ÆBŸåïC¢ŠU8Áú?Š„ú2²œ gŸ­ÎF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œð¨þ¼›Ôñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýõe|Ð…=HA­'<}Qcò†ú0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸Œ”Š£Ôñ‹+aue_lseek ¿„hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýEÂJå ÒAš‡\­°-Vk<ˆú²œ gŸ­ÎF~é®Ò'üvºgŸ­ÎF~é®Ò'üvº¸Œ”Š£Ôñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÆ$À'ÑH€®í®Õ"Ú/ŒŠúb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯¸Œ”Š£Ôñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý&ß´¾@KE# ú²œ h;í¨F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â¸Œ”Š£Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execremove_file20ÜS7[AIF¬•pd± (ýQµç³žG³«j(äqè£ø¢ú<²œ h;í¨F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¸Œ”Š£Ôñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execremove_file20ÜS7[AIF¬•pd± (ý›6ØÒHõ¢zcèÌE˜¤ú2²œ h;í¨F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¸Œ”Š£Ôñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execremove_file20ÜS7[AIF¬•pd± (ýEHÏ•ßE“vÑÎ ²¦ú2²œ h;í¨F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¸Œ”Š£Ôñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execremove_file20ÜS7[AIF¬•pd± (ýõ‹2ˆÙFˆ›G’Ü]tÝѨú2²œ h;í¨F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¸Œ”Š£Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execremove_file20ÜS7[AIF¬•pd± (ýÐ$˜÷Më»O0¡èªú2²œ h;í¨F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¸Œ”Š£Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execremove_file20ÜS7[AIF¬•pd± (ý$6ÏëÕtN§—ò´~] H½¬ú2²œ h;í¨F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¸Œ”Š£Ôñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execremove_file20ÜS7[AIF¬•pd± (ý,ÙÕ3"˜F« G …ŠÍ´¢®ú2²œ h;í¨F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¸Œ”Š£Ôñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execremove_file20ÜS7[AIF¬•pd± (ýûpƸLÔŽ­÷\tš°ú2²œ h;í¨F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¸Œ”Š£Ôñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execremove_file20ÜS7[AIF¬•pd± (ýT‰YçMì·“èöTÛîµ²ú2²œ h;í¨F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¸Œ”Š£Ôñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execremove_file20ÜS7[AIF¬•pd± (ýñøÙÎæO¢ƒþÌu™Aƒô´ú²œ h;í¨F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¸Œ”Š£Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execremove_file20ÜS7[AIF¬•pd± (ý]Qå^XOÚªÅö«/žR:¶ú:²œ h;í¨F~é®Ò'üvº¸Œ”Š£Ôñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execremove_file20ÜS7[AIF¬•pd± (ý6 ƒ0M@8¹és²%YE.¸ú:²œ h;í¨F~é®Ò'üvº¸Œ”Š£Ôñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execremove_file20ÜS7[AIF¬•pd± (ýp¶jÙlG…¹aXôÏ1ºú\²œ h;í¨F~é®Ò'üvº üU×ím]­×T=MmñÓf/usr/home/user/ripe-prov-tests-master/Linux/out.tmp¸Œ”Š£Ôñ‹+aue_unlinkhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execremove_file20ÜS7[AIF¬•pd± (ýt‰$C¡ÈHL©¿!tˆCSµ¼ú²œ h;í¨F~é®Ò'üvºh;í¨F~é®Ò'üvº¸Œ”Š£Ôñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execremove_file20ÜS7[AIF¬•pd± (ýWR™¬%F˜˜ä]«ïa¾ú@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'¸Œ”Š£Ôñ‹+aue_readühostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýZºÍJ…G-ž*ÕZÝÕÜ›Àú0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ŽÙ–“£Ôñ‹+aue_lseekÐ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýh<®F~é®Ò'üvºŠ`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±ŽÙ–“£Ôñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý1Žº”ü•JÔ¢7ŒG„ý/Âú$°œ `J¾QF~é®Ò'üvºh<®F~é®Ò'üvºŽÙ–“£Ôñ‹+aue_fork +arg_pid1541hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1541ppid1282execbash20ÜS7[AIF¬•pd± (ýfßZŒÖvD„Œk˜·Ý6&Äú²œ h<®F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ŽÙ–“£Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýGŒà™šF¾©ÐçeÃ@"Æú²œ h<®F~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ŽÙ–“£Ôñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1513execbash20ÜS7[AIF¬•pd± (ý¢µ2.@(‹³ùß²©:^Èú<²œ h<®F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confŽÙ–“£Ôñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý ìì'ºÞL‡ŠÓbØT?Êú@²œ h<®F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ŽÙ–“£Ôñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýTüNÃJJ@Ž'o4í-é Ìú²œ h<®F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ŽÙ–“£Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý‡XÇš«Ol›b, +ò¸Îú<²œ h<®F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsŽÙ–“£Ôñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý Œ|:0ÐLd”Ň)kúÐú@²œ h<®F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âŽÙ–“£Ôñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý‹ S¾ïI”âyŸÁ¯uÒú@²œ h<®F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âŽÙ–“£Ôñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýàú Kh»$ƒ‚ðã;Ôú²œ h<®F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âŽÙ–“£Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýoÏÿ êþE‰ÛºKÅŸÕèÖú<²œ h<®F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ŽÙ–“£Ôñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý§Ñy€ÓMØ‚~¯áž¶qØú2²œ h<®F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŽÙ–“£Ôñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý„ˆøA¢¤Dሩ˜[;\Úú2²œ h<®F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŽÙ–“£Ôñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÙv[§>E2œ—ß{ã“X1Üú2²œ h<®F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŽÙ–“£Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý$=ø‘Š’G¶…D{éo^ÔŠÞú2²œ h<®F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŽÙ–“£Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÏ:i¢IÆ—€ñÙm]àú2²œ h<®F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŽÙ–“£Ôñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýQMV)C#¡(”¨ºî;âú0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº¯ØÖªÔñ‹+aue_lseekä…hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýbÒ§yÏâIÛ¹yг<âäú²œ h<®F~é®Ò'üvºh<®F~é®Ò'üvºº¯ØÖªÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý™FuÖXJ²¹Ëøqu'æúb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯º¯ØÖªÔñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý¿‹Ù~~QLÒ’ÄÍ´ðz&èúb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯º¯ØÖªÔñ‹+aue_write,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýhØ<ºF~é®Ò'üvºŒ`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±º¯ØÖªÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý÷ý†žMª£sÈJ`q¢«êú$°œ `J¾QF~é®Ò'üvºhØ<ºF~é®Ò'üvºº¯ØÖªÔñ‹+aue_fork +arg_pid1542hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1542ppid1282execbash20ÜS7[AIF¬•pd± (ý$~j!G€·Øò´Côû²œ itÆúF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ âÂÒ¬²Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýä'ÀiDþKÅŽi:/o5[Þöû<²œ itÆúF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsâÂÒ¬²Ôñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ýYÅÀÈJ(EقО!˜%ëÚøû@²œ itÆúF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼ââÂÒ¬²Ôñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý{Ô@D¶œ®¿’úû@²œ itÆúF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼ââÂÒ¬²Ôñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý*Ïì4ô-Lú¢Yü‘? üû²œ itÆúF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼ââÂÒ¬²Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýݧJMM®Š À„z:Qþû<²œ itÆúF~é®Ò'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8âÂÒ¬²Ôñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ýK³Û؈@K”o¬±MVÔ€ü2²œ itÆúF~é®Ò'üvºâpÑ +m.×W®mAs××¼›âÂÒ¬²Ôñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý_«ǦLÊh àëHÊò‚ü2²œ itÆúF~é®Ò'üvºâpÑ +m.×W®mAs××¼›âÂÒ¬²Ôñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýåNÇšüDk¦K.ÝêJ2‡„ü2²œ itÆúF~é®Ò'üvºâpÑ +m.×W®mAs××¼›Äœû¶²Ôñ‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý3« ÏýK‚®ø§w\õ‡†ü2²œ itÆúF~é®Ò'üvºâpÑ +m.×W®mAs××¼›Äœû¶²Ôñ‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýBfr¿‡5L.…ñÇóïÛ‘9ˆü2²œ itÆúF~é®Ò'üvºâpÑ +m.×W®mAs××¼›Äœû¶²Ôñ‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýÖdc]H¤¦ŽÌ»,dXŠü2²œ itÆúF~é®Ò'üvºâpÑ +m.×W®mAs××¼›Äœû¶²Ôñ‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýt¸ý‰{M(—ÏÈÏjõ¸Œü2²œ itÆúF~é®Ò'üvºâpÑ +m.×W®mAs××¼›Äœû¶²Ôñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý*UÊo@·‚ùõ)b¤ý Žü2²œ itÆúF~é®Ò'üvºâpÑ +m.×W®mAs××¼›Äœû¶²Ôñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý~±É/J2­ðLÖº83¼ü²œ itÆúF~é®Ò'üvºâpÑ +m.×W®mAs××¼›Äœû¶²Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýµ·„o¦K2‡úN ;‰P’ü<²œ itÆúF~é®Ò'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8Äœû¶²Ôñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ýæGžzŠtMY¡-ÒhÙwû”ü2²œ itÆúF~é®Ò'üvºm/"P;=\»P½¤¬=P_Äœû¶²Ôñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýf‹(Ý Bö™Baö•ùG–ü2²œ itÆúF~é®Ò'üvºm/"P;=\»P½¤¬=P_Äœû¶²Ôñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýƒ49ßNLÏ‘*Šü Ñä˜ü2²œ itÆúF~é®Ò'üvºm/"P;=\»P½¤¬=P_Äœû¶²Ôñ‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýhʸo‡N·œ$FÓW¬šü2²œ itÆúF~é®Ò'üvºm/"P;=\»P½¤¬=P_Äœû¶²Ôñ‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý%£]®j?L€€¬Óyº«^œü2²œ itÆúF~é®Ò'üvºm/"P;=\»P½¤¬=P_Äœû¶²Ôñ‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýÖZ¢*BôM„/ò´ú3“žü2²œ itÆúF~é®Ò'üvºm/"P;=\»P½¤¬=P_Äœû¶²Ôñ‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýý ‘¿C@‹lå2c”¦o ü2²œ itÆúF~é®Ò'üvºm/"P;=\»P½¤¬=P_Äœû¶²Ôñ‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýt¤!ŽßIˆ€Ø¦ßN*À¢ü2²œ itÆúF~é®Ò'üvºm/"P;=\»P½¤¬=P_Äœû¶²Ôñ‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýÛÆÊ'`Lf±ì¯;@Àäü²œ itÆúF~é®Ò'üvºm/"P;=\»P½¤¬=P_Äœû¶²Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýTrú!(ÅDi¡^Jýïn‘e¦ü<²œ itÆúF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1Äœû¶²Ôñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ýÝÔM?‡ CrT.ÎæAR¨ü2²œ itÆúF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÄœû¶²Ôñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý9š,³9]KŽ® Zyã{ܪü2²œ itÆúF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÄœû¶²Ôñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýKMw›ËOªáÄÎþÁ™¬ü2²œ itÆúF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÄœû¶²Ôñ‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý½žÁôÐïGؤ hD›ë‡®ü2²œ itÆúF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÄœû¶²Ôñ‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"Ž°ükïòt«Jø¡>eñ¹© +°ü2²œ itÆúF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÄœû¶²Ôñ‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýÌÓ§¯oJ4—eºa½²ü2²œ itÆúF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÄœû¶²Ôñ‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýÁ¹*M½HP’®Ji‹áw´ü2²œ itÆúF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÄœû¶²Ôñ‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý ‹¢qüGò—3yÞÌY]š¶ü2²œ itÆúF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÄœû¶²Ôñ‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý‡oeÕM»{ãóƒVøü²œ itÆúF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕÄœû¶²Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýÚ|Ù‘ößIr’Ž gPÕºü<²œ itÆúF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Äœû¶²Ôñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ýFKã5ÕJj’obR"«Ò¼ü2²œ itÆúF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÄœû¶²Ôñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý*iq§ÃòLõèà$Q(@¯¾ü2²œ itÆúF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÄœû¶²Ôñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý ³/34Oµ”]ˆ§þòíœÀü2²œ itÆúF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÄœû¶²Ôñ‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýXEÛ³5ÚCe¢.äúŠVÂü2²œ itÆúF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÄœû¶²Ôñ‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýÛ4öÝI•*Ñ$ ÑoÄü2²œ itÆúF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÄœû¶²Ôñ‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý1`ÝÔE—’_¡ÊUÜaÆü2²œ itÆúF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÄœû¶²Ôñ‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýþR,lkA³x»ÑhÈü2²œ itÆúF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÄœû¶²Ôñ‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýúýb+ÉCާ⛃líÐÊü2²œ itÆúF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÄœû¶²Ôñ‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýÉB'‚ÔDF¯¸œ þ¸I·Ìü²œ itÆúF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÄœû¶²Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýFaç(Þ@Þ£a3è2€i%Îü:²œ itÆúF~é®Ò'üvºÄœû¶²Ôñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýŠ+$rÃ¥Có¼+G¡nZªÐü:²œ itÆúF~é®Ò'üvºÄœû¶²Ôñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýÕ™æù=Fº¬cRY¡h1Òü:²œ itÆúF~é®Ò'üvºÄœû¶²Ôñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý˜t/øE>³3GÝp¢Ôü:²œ itÆúF~é®Ò'üvºÄœû¶²Ôñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýjŠ:&A ¯˜‚ +Û˜Öü:²œ itÆúF~é®Ò'üvºÄœû¶²Ôñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýaÝY¨FBOT–óœd“ú7Øü<²œ itÆúF~é®Ò'üvºí( ö~R¶ ~{‚~¯/dev/ttyÄœû¶²Ôñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ý%žðJ=kLj¸V‹®•2=—Úü²œ itÆúF~é®Ò'üvºí( ö~R¶ ~{‚~¯Äœû¶²Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý¸"Jè%E…AÉ7±²¡Üü<²œ itÆúF~é®Ò'üvº8: 3ëˆSŠöü$²œ itÆúF~é®Ò'üvºivúéF~é®Ò'üvºÄœû¶²Ôñ‹+aue_fork +arg_pid1547hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1547ppid1513execbash20ÜS7[AIF¬•pd± (ý†6D@La‚ĤdPq´øüÖœ ivÇËF~é®Ò'üvº8: I+ÀÐGái¶a&€R'úü<Öœ ivÇËF~é®Ò'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nullˆá¥À²Ôñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1545execbash20ÜS7[AIF¬•pd± (ýhÄ?Ÿ@ +¬œRÐ çI1üüÖœ ivÇËF~é®Ò'üvº3P ÓK€X‹Ó«·Ø€‘^ˆá¥À²Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1545execbash20ÜS7[AIF¬•pd± (ýÊ4ªZgþM“…Šf±B¡†*þüÖœ ivÇËF~é®Ò'üvº7;¨§ÔOZÔêOŠ¶z/usr/home/user/ripe-prov-tests-master/Linux/./datagram_server'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ˆá¥À²Ôñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"./datagram_serverppid1545execbash20ÜS7[AIF¬•pd± (ýÐóH³ÛB÷ºÇ’¹¶t[˜€ý<Öœ ivÇËF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confˆá¥À²Ôñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1545execdatagram_server20ÜS7[AIF¬•pd± (ýÀyúçO´«®"pï@"r‚ýìœ ivúéF~é®Ò'üvº8: Íä-Ȭý2ìœ ivúéF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œˆá¥À²Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1545exec +sleep20ÜS7[AIF¬•pd± (ýôi@Íú:K™±ÔϦ×^Y®ý2ìœ ivúéF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œˆá¥À²Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1545exec +sleep20ÜS7[AIF¬•pd± (ýL©fY®Ir¸A¼Œ\,Ö–°ý2ìœ ivúéF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œˆá¥À²Ôñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1545exec +sleep20ÜS7[AIF¬•pd± (ýÒwX’ ØDY¯àA”m°,²ý2ìœ ivúéF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œˆá¥À²Ôñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1545exec +sleep20ÜS7[AIF¬•pd± (ý+ÞÓ%Dƒ‰:pÒe¶â´ý2ìœ ivúéF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œˆá¥À²Ôñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1545exec +sleep20ÜS7[AIF¬•pd± (ýšï<×£0@觪x´¡I£O¶ý2ìœ ivúéF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œˆá¥À²Ôñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1545exec +sleep20ÜS7[AIF¬•pd± (ý©À8{æþN»¥«”g;äf ¸ýìœ ivúéF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œˆá¥À²Ôñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1545exec +sleep20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"˜øü¾€l^D*¿s%™Ûºý:ìœ ivúéF~é®Ò'üvºˆá¥À²Ôñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1545exec +sleep20ÜS7[AIF¬•pd± (ý󂨊U&I7¥Í34Ѽý:ìœ ivúéF~é®Ò'üvºˆá¥À²Ôñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1545exec +sleep20ÜS7[AIF¬•pd± (ýðû­‰xO ºõ¿_Í›ôg¾ý2Öœ ivÇËF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œˆá¥À²Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1545execdatagram_server20ÜS7[AIF¬•pd± (ýcó/­luH–¨½ÐžI ¢Àý2Öœ ivÇËF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œˆá¥À²Ôñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1545execdatagram_server20ÜS7[AIF¬•pd± (ý +¼§tlNÚëàþYä¶Âý2Öœ ivÇËF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œˆá¥À²Ôñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1545execdatagram_server20ÜS7[AIF¬•pd± (ýesJÔ ›Ið´q-ÎB4KÄý2Öœ ivÇËF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œˆá¥À²Ôñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1545execdatagram_server20ÜS7[AIF¬•pd± (ýô?®çºWE¯µÀœ3,ÃqÆý2Öœ ivÇËF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œˆá¥À²Ôñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1545execdatagram_server20ÜS7[AIF¬•pd± (ý]ÜŠ6B×E7¯é¥…#ÌmÆÈý2Öœ ivÇËF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œˆá¥À²Ôñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1545execdatagram_server20ÜS7[AIF¬•pd± (ý2• ³¡çEk“Dù›s×PÊý0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UƦ³ºÔñ‹+aue_lseek̹‡hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢DvÉ´ÄC™AÉSÿ*#iÌýìœ ivúéF~é®Ò'üvºivúéF~é®Ò'üvºÆ¦³ºÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1545exec +sleep20ÜS7[AIF¬•pd± (ý…ô@'ÖÒJ©‘ÁLN“©9§Îý<²œ itÆúF~é®Ò'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.dbƦ³ºÔñ‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1513execbash20ÜS7[AIF¬•pd± (ýмi¢3I©ë†ôÐçXÐý@²œ itÆúF~é®Ò'üvº–Ø%™wyïR¹wT’ï9Ʀ³ºÔñ‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý,êv*)K¸¡~.Ù;-o¯Òý@²œ itÆúF~é®Ò'üvº–Ø%™wyïR¹wT’ï9Ʀ³ºÔñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý €,wKG”æ6qŽ¸ªÔý@²œ itÆúF~é®Ò'üvº–Ø%™wyïR¹wT’ï9Ʀ³ºÔñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýV‰Ü@mG°œ[Mè «Öý²œ itÆúF~é®Ò'üvº–Ø%™wyïR¹wT’ï9Ʀ³ºÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýëGÖHFŒ³m¢—ŸØý@²œ itÆúF~é®Ò'üvº8: hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1execdatagram_server20ÜS7[AIF¬•pd± (ýåé†sûhF¥‚}•³mÒmžþbÖœ ivÇËF~é®Ò'üvºí( ö~R¶ ~{‚~¯è†›¼ºÔñ‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1execdatagram_server20ÜS7[AIF¬•pd± (ý^S3 LBYƒÐËñšåM þÖœ ivÇËF~é®Ò'üvºixÐáF~é®Ò'üvºè†›¼ºÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1execdatagram_server20ÜS7[AIF¬•pd± (ý¬OÛÀUÉI®±²K‡_Yþí¢þÖœ ivÇËF~é®Ò'üvºivÇËF~é®Ò'üvºè†›¼ºÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1execdatagram_server20ÜS7[AIF¬•pd± (ýÛµ’âiK5½õê2k÷Wh¤þ@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'膛¼ºÔñ‹+aue_read‚hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý  o5ß³O »J 1X>`¦þ0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'膛¼ºÔñ‹+aue_lseekœhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýjJF~é®Ò'üvºš`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±膛¼ºÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýD"Þ®yA(”¾Ê|êJ† ¨þ$°œ `J¾QF~é®Ò'üvºjJF~é®Ò'üvºè†›¼ºÔñ‹+aue_fork +arg_pid1549hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1549ppid1282execbash20ÜS7[AIF¬•pd± (ýƒJNWIÖ¾ˆmÁÛ¿ðªþÖœ jJF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'膛¼ºÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýóÐìæ@o»I&ŒÓŸ¬þÖœ jJF~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1膛¼ºÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1513execbash20ÜS7[AIF¬•pd± (ý4Ñ&ÈÎ D7¸+…5ö\퇮þ<Öœ jJF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf膛¼ºÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýwÓJë±AŽŸŠCýšÚ¯q°þ@Öœ jJF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ 膛¼ºÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý±|ÖPM6¾àY ‡Äûƒ²þÖœ jJF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ 膛¼ºÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý5¬ ¬›BŒ­ÊSoôuDz´þ<Öœ jJF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints膛¼ºÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý4û?¯nVKÒªçv úƒ{5¶þ@Öœ jJF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â膛¼ºÔñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý¤ðü)d.DP©2¥Â 5?Ò¸þ@Öœ jJF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â膛¼ºÔñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý¿^økW¢AÖ‹é¯T{ñ°ºþÖœ jJF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â膛¼ºÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý¹ZéÖƒGË—õÍnøòÊɼþ<Öœ jJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7膛¼ºÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý%O„{žOö½öMF4%ô¾þ2Öœ jJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œè†›¼ºÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýG;®÷F˜Du3t„Ÿ“RAÀþ2Öœ jJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œè†›¼ºÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý²µà˜nA³»Á…xú„ÕƒÂþ2Öœ jJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œè†›¼ºÔñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"žúûfqža|Oι^èëóÄþ2Öœ jJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œè†›¼ºÔñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÕ­ +„ÊKåŒÂµ`ø)mDÆþ2Öœ jJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œè†›¼ºÔñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý\Æõü((D£¤}>l ö`Èþ2Öœ jJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œè†›¼ºÔñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýW+ +|ÂhB)શ?2•Êþ2Öœ jJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œè†›¼ºÔñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÖ‘2toFÚŽ BhÃ0<Ìþ2Öœ jJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œè†›¼ºÔñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý ¸!±EI_œ¢¥«=²WÎþÖœ jJF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œè†›¼ºÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýˆ€ÄR3K”Œó]>ýÜÐþ:Öœ jJF~é®Ò'üvºè†›¼ºÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý.Í!£XéOv—KJûÔÒþ:Öœ jJF~é®Ò'üvºè†›¼ºÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÒRZèíKJŒ×ŠÜ›˜nÔþ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¸Ô¬Ã½Ôñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýþ:LÑìE`“²ÄÐh(ÏÖþJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¸Ô¬Ã½Ôñ‹+aue_sendtoÚ +ret_msgid +17350hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý­ñ:ÞC±y+·Ž3¦ØþJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¸Ô¬Ã½Ôñ‹+aue_sendto˜ +ret_msgid +17351hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÐë¾ÆJ ÌͺÚI€ŸÚþJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¸Ô¬Ã½Ôñ‹+aue_sendto¬ +ret_msgid +17352hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÉìèO$ÃF(º™l¨IôÜþJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¸Ô¬Ã½Ôñ‹+aue_sendto˜ +ret_msgid +17353hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýì:—Go¦U·œëÞþDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¸Ô¬Ã½Ôñ‹+aue_recvfromÚ ret_msgid +17350hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýRÝZâC¼’£ Ãq0 YàþDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¸Ô¬Ã½Ôñ‹+aue_recvfrom˜ ret_msgid +17351hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýBkïWÔùAª—}n„‰ñbâþDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¸Ô¬Ã½Ôñ‹+aue_recvfrom¬ ret_msgid +17352hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýF¡ª”t‡Go´NÇ®mìGäþDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¸Ô¬Ã½Ôñ‹+aue_recvfrom˜ ret_msgid +17353hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýãê’ã Iö»¨{öÈ­ýAæþ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒÄãÁÔñ‹+aue_lseek̹‡hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdFsw›JŸ‡~ó"†c±åêþ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒÄãÁÔñ‹+20ÜS7[AIF¬•pd± (ýQ5„ПÖL¬¯T*¸ Äàèþ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒÄãÁÔñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙ’ãßZ”D+¦c|LPþTîþ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒÄãÁÔñ‹+20ÜS7[AIF¬•pd± (ýÊŒA6@:M_˜Q¸L™Rètìþ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒÄãÁÔñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýéY#xþoCe¾Ú±N“l°còþ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒÄãÁÔñ‹+20ÜS7[AIF¬•pd± (ý;áb?W˜N@€@$Ža.rIðþ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒÄãÁÔñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´›Ã¡ÕN6³ÚO¸÷G_öþ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÒÄãÁÔñ‹+20ÜS7[AIF¬•pd± (ý<dH®‚GÖX¯i·áòôþ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒÄãÁÔñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕ…;wiÚF'·\|´üÿøþ:‚œ Ê +ÙKFzé®›'üvºÒÄãÁÔñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒš×õ]AO£ºP‰&ìäúúþ@ôž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÒÄãÁÔñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqe„n‘€L£¿GŒÖÏ1Ýüþ@ôž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒÄãÁÔñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„èRg+Cù¡»¨Ÿ<Òxxþþ@ôž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒÄãÁÔñ‹+aue_preadŒMhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂàWõ‰M­¶{c¬“:¼g€ÿ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uôâ’ÂÔñ‹+aue_lseek¨ÎˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýíöVb9L˜¼x”›C$îm‚ÿD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºôâ’ÂÔñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”IÁjbÁJÍ£ú 'ƒÏ6„ÿÖœ jJF~é®Ò'üvºjJF~é®Ò'üvºŠ´„œÂÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý¹ŽkÒtHÙœ¹:¹‰ò.†ÿb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯Š´„œÂÔñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýºº NÑ—Ð%«ä?Wˆÿb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯Š´„œÂÔñ‹+aue_write,hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýj¹F~é®Ò'üvºœ`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±Š´„œÂÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýkä¶X%™A« ÿ¨.W{Šÿ$°œ `J¾QF~é®Ò'üvºj¹F~é®Ò'üvºŠ´„œÂÔñ‹+aue_fork +arg_pid1550hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1550ppid1282execbash20ÜS7[AIF¬•pd± (ý±qh´&‚IúºiöXïÚŒÿÖœ j¹F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'Š´„œÂÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý}Pbb@¨¶¤äsíØÈŽÿÖœ j¹F~é®Ò'üvºõÌ¥HA˜Æ]˜A›Ë­Æ-Er/usr/home/user/ripe-prov-tests-master/Linux/./direct_pipe'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Š´„œÂÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./direct_pipe appid1513execbash20ÜS7[AIF¬•pd± (ýBÚyÚY@¸‚¼ðœ±¾®Dÿ<Öœ j¹F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confŠ´„œÂÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ý_eÚqîB?ßÕ}Å?’ÿ@Öœ j¹F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ Š´„œÂÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ýý÷®2ýF:Ÿ‡Eë9Ù‚.”ÿÖœ j¹F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ Š´„œÂÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ýšIþÃ5ˆDg¥yn¶”–ÿ<Öœ j¹F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsŠ´„œÂÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ý¨ëÃõ‹dNˆMv_!XK˜ÿ@Öœ j¹F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âŠ´„œÂÔñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ýlN˜\>˜M¡›è%\„­YÆšÿ@Öœ j¹F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âŠ´„œÂÔñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ý˜`1dÚÐMB¤Û×ß‹ãMœÿÖœ j¹F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âŠ´„œÂÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ýc³¿ÜïøDWžLö§Ȫ¤žÿ<Öœ j¹F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Š´„œÂÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ýÖ“ºmF_nø:mt» ÿ2Öœ j¹F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠ´„œÂÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ý™ê~ÊE@é¸çÓV,Þ¹¢ÿ2Öœ j¹F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠ´„œÂÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ýïÊ\¨ÓÌF.†+ÙÝö ¤ÿ2Öœ j¹F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠ´„œÂÔñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ý=n7‚Dö‰EÌ=‰(ù¦ÿ2Öœ j¹F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠ´„œÂÔñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ýøísÅo¨Iü´Ú'òõ +¨ÿ2Öœ j¹F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠ´„œÂÔñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ý‰ówŒ @Cé‹Ð]€màl·ªÿ2Öœ j¹F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠ´„œÂÔñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ý +òÑÂ'L„¯À0|Ьÿ2Öœ j¹F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠ´„œÂÔñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ý¸J L“Hü…òÕÖáû®ÿ2Öœ j¹F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠ´„œÂÔñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ý”RkÞ óLt‡a‚:°Ìãí°ÿÖœ j¹F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠ´„œÂÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ýpümh¢K@î–²b…8ô–k²ÿ:Öœ j¹F~é®Ò'üvºŠ´„œÂÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ýÁaNdG Mé„6»Ç +dH´ÿ:Öœ j¹F~é®Ò'üvºŠ´„œÂÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ýj¹ž|F~é®Ò'üvºô20ÜS7[AIF¬•pd± (ýj¹ž{F~é®Ò'üvºô20ÜS7[AIF¬•pd± (ý Ó£rhS‹÷cãçÌ…®j¹ž{F~é®Ò'üvºj¹ž|F~é®Ò'üvº20 ÜS7[AIF¬•pd± (ýã!Ð3èNØ€&¯ß§â¶ÿÖœ j¹F~é®Ò'üvºÓ£rhS‹÷cãçÌ…®Š´„œÂÔñ‹+aue_pipe ret_fd13ret_fd24hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ýj¹§§F~é®Ò'üvºžj¹F~é®Ò'üvº°äÿ§®]vRS<„äB±Š´„œÂÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýSK6Ê%H6•ÅÈdÑ䬸ÿ$Öœ j¹F~é®Ò'üvºj¹§§F~é®Ò'üvºŠ´„œÂÔñ‹+aue_fork +arg_pid1551hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1551ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ýÑ[㿇F•dÉU¸·ôºÿb²œ j¹§§F~é®Ò'üvºí( ö~R¶ ~{‚~¯Š´„œÂÔñ‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1550execdirect_pipe20ÜS7[AIF¬•pd± (ýV–!6FÛM#ŽÁ×á[M³=¼ÿb²œ j¹§§F~é®Ò'üvºj¹ž|F~é®Ò'üvºŠ´„œÂÔñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd4ppid1550execdirect_pipe20ÜS7[AIF¬•pd± (ýãoÚñKµšDÑgÛH¾ÿb²œ j¹§§F~é®Ò'üvºí( ö~R¶ ~{‚~¯Š´„œÂÔñ‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1550execdirect_pipe20ÜS7[AIF¬•pd± (ýÅBnh*¡J@›\aÍ3I•Àÿ²œ j¹§§F~é®Ò'üvºj¹§§F~é®Ò'üvºŠ´„œÂÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1550execdirect_pipe20ÜS7[AIF¬•pd± (ýwiB"ÐD¾’3áHÚNÂÿ@Öœ j¹F~é®Ò'üvºj¹ž{F~é®Ò'üvºŠ´„œÂÔñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ý5Pˆ¢cºJ=‹þÙ©zÉa½ÄÿbÖœ j¹F~é®Ò'üvºí( ö~R¶ ~{‚~¯Š´„œÂÔñ‹+aue_write"hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ý Ýä½G`¶åkQýŒ‡ÆÿbÖœ j¹F~é®Ò'üvºí( ö~R¶ ~{‚~¯Š´„œÂÔñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ý½?&p”ºB×›Iµ¤8+ÀýÈÿÖœ j¹F~é®Ò'üvºj¹F~é®Ò'üvºŠ´„œÂÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execdirect_pipe20ÜS7[AIF¬•pd± (ýó›±ìUŠN½xoÛÅý+Êÿ@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'Š´„œÂÔñ‹+aue_readœhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý3 A°QBlˆ¯@x.MERÌÿ0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'Š´„œÂÔñ‹+aue_lseek‚hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýjºJ¿F~é®Ò'üvº `J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±Š´„œÂÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÄ©pÈôCŠÆp£ #›sÎÿ$°œ `J¾QF~é®Ò'üvºjºJ¿F~é®Ò'üvºŠ´„œÂÔñ‹+aue_fork +arg_pid1552hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1552ppid1282execbash20ÜS7[AIF¬•pd± (ýîû:aD¶i“ãùô¿ÐÿÖœ jºJ¿F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'Š´„œÂÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýÀ‚Ó‹]ªEЧn ÒHÐ,(ÒÿÖœ jºJ¿F~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Š´„œÂÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1513execbash20ÜS7[AIF¬•pd± (ý=À æ8–I&¡ïÏ-V¾Ôÿ<Öœ jºJ¿F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confŠ´„œÂÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ˆ¦ú¬×3¡IÈOݸ¶˜#^ +ÅÖÿ@Öœ jºJ¿F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ò»½¥ÂÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýG⣱’ÃG]¢Þ*wy„ØØÿÖœ jºJ¿F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ò»½¥ÂÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýu%öyd„H·:ÒVÇX(Úÿ<Öœ jºJ¿F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsò»½¥ÂÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÐ.û‘™H\~tÿA^>RÜÿ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ›âèÉÔñ‹+aue_lseek¶ž‰hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ,š…‚~JŠ’*ŽØsx¦ÂÞÿÖœ jºJ¿F~é®Ò'üvºjºJ¿F~é®Ò'üvºÔ›âèÉÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý.¤ç²âLÓ¸¤=‚t³äâàÿb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯Ô›âèÉÔñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý’Q¨ +b¢%”Šœ€@Öœ kUXF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÔ›âèÉÔñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýØÄD†O%¥hG5½wž€Öœ kUXF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âôǨòÉÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýüÖ?<ŠE‡™!T•K  €<Öœ kUXF~é®Ò'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8ôǨòÉÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ý᪶o9 MsŽh,lˆba¢€2Öœ kUXF~é®Ò'üvºâpÑ +m.×W®mAs××¼›ôǨòÉÔñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý­lî?üFN¬~— N¤€2Öœ kUXF~é®Ò'üvºâpÑ +m.×W®mAs××¼›ôǨòÉÔñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý9Ý}{D6˜Y­,µc¦€2Öœ kUXF~é®Ò'üvºâpÑ +m.×W®mAs××¼›ôǨòÉÔñ‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý †G°ìÞDé¯&$Š)̽Y¨€2Öœ kUXF~é®Ò'üvºâpÑ +m.×W®mAs××¼›ôǨòÉÔñ‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýeålù0ËMUŠì'#ùª€2Öœ kUXF~é®Ò'üvºâpÑ +m.×W®mAs××¼›ôǨòÉÔñ‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý`‹àBSŠc[âríô¬€2Öœ kUXF~é®Ò'üvºâpÑ +m.×W®mAs××¼›ôǨòÉÔñ‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý2òiÛXñB¸¥ôÄÃåë¥|®€2Öœ kUXF~é®Ò'üvºâpÑ +m.×W®mAs××¼›ôǨòÉÔñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýÖ*ç¨'LZªÁ*ºií®°€2Öœ kUXF~é®Ò'üvºâpÑ +m.×W®mAs××¼›ôǨòÉÔñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý]œÚxöLzˆS”íÄ”{ò€Öœ kUXF~é®Ò'üvºâpÑ +m.×W®mAs××¼›ôǨòÉÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý«”ì†óGH¯'X …ø‚Ó´€<Öœ kUXF~é®Ò'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8ôǨòÉÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ý›ï®Ø)L5†„ä„3â)¶€2Öœ kUXF~é®Ò'üvºm/"P;=\»P½¤¬=P_ôǨòÉÔñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý÷#¶åÞ\Dõ ¿a1¯)F渀2Öœ kUXF~é®Ò'üvºm/"P;=\»P½¤¬=P_ôǨòÉÔñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýzçÿÏD-²ö‚Öœ l—~ÿF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÊˆÿÄÙÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execshm_exfil20ÜS7[AIF¬•pd± (ý&?墩HnŠ_\­ZàÖø‚:Öœ l—~ÿF~é®Ò'üvºÊˆÿÄÙÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execshm_exfil20ÜS7[AIF¬•pd± (ýôé?ŸãCJë—ñä|6XEú‚:Öœ l—~ÿF~é®Ò'üvºÊˆÿÄÙÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execshm_exfil20ÜS7[AIF¬•pd± (ýl˜ ÔF~é®Ò'üvº®l—~ÿF~é®Ò'üvº°äÿ§®]vRS<„äB±ʈÿÄÙÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýô)r wN׃Ðë–è·?ü‚$Öœ l—~ÿF~é®Ò'üvºl˜ ÔF~é®Ò'üvºÊˆÿÄÙÔñ‹+aue_fork +arg_pid1559hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1559ppid1513execshm_exfil20ÜS7[AIF¬•pd± (ý +çCÆßRt]’®tL20 +ÜS7[AIF¬•pd± (ý#j@ö×HDÿ«?fûÑ/þ‚<ìœ l˜ ÔF~é®Ò'üvºçCÆßRt]’®tLt/usr/home/user/ripe-prov-tests-master/Linux/SECRETFILE.tmp¶ðÖÎÙÔñ‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1558execshm_exfil20ÜS7[AIF¬•pd± (ýÑ{&LK£æÇÂn„»€ƒbìœ l˜ ÔF~é®Ò'üvºçCÆßRt]’®tL¶ðÖÎÙÔñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1558execshm_exfil20ÜS7[AIF¬•pd± (ýR¿cWiFv  㳃Í‚ƒìœ l˜ ÔF~é®Ò'üvºçCÆßRt]’®tL¶ðÖÎÙÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1558execshm_exfil20ÜS7[AIF¬•pd± (ý5Œà£˜²M¦½Ø»P‘è)„ƒìœ l˜ ÔF~é®Ò'üvºl˜ ÔF~é®Ò'üvº¶ðÖÎÙÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1558execshm_exfil20ÜS7[AIF¬•pd± (ýox²¤·Eá¤÷ë”YSv†ƒ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨èÒÉßÔñ‹+aue_lseekæÆ‹hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyÕCѶ\HȈ>[¢RÄ.Šƒ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¨èÒÉßÔñ‹+20ÜS7[AIF¬•pd± (ýïrùlžJ¦Œ?š˜hqˆƒ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨èÒÉßÔñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýãì‰èîhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’¨bØR¬G̪. ax®ƒ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°ä¢›áÔñ‹+aue_lseekêŒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'ŠjqH=­EsfÅô°ƒbÖœ l—~ÿF~é®Ò'üvºí( ö~R¶ ~{‚~¯°ä¢›áÔñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1513execshm_exfil20ÜS7[AIF¬•pd± (ýwpîŒóÈH¹›ö41ð÷²ƒÖœ l—~ÿF~é®Ò'üvºl—~ÿF~é®Ò'üvº°ä¢›áÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execshm_exfil20ÜS7[AIF¬•pd± (ýcò¥bÛìH8°ÏÄë‚ ½]´ƒ@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'°ä¢›áÔñ‹+aue_read– hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ý×ó›õÂ÷K:¥.Û’ž\\Ö¶ƒ0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'°ä¢›áÔñ‹+aue_lseekˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ým4„F~é®Ò'üvº°`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±°ä¢›áÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý¡`ð¿þ @†[NøZƸƒ$°œ `J¾QF~é®Ò'üvºm4„F~é®Ò'üvº°ä¢›áÔñ‹+aue_fork +arg_pid1560hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1560ppid1282execbash20ÜS7[AIF¬•pd± (ýUÜDQ&8D–~(^\—YºƒÖœ m4„F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'°ä¢›áÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýH…ùO`@/¼äl"–ú¼´¼ƒÖœ m4„F~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1°ä¢›áÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1513execbash20ÜS7[AIF¬•pd± (ýæ‰Í“¶ÁNô·+¡m)¾ƒ<Öœ m4„F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf°ä¢›áÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýC08²åÓJ²ƒÕ¯‰Lïp‹Àƒ@Öœ m4„F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ °ä¢›áÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýžÎ¸§)TB.°Ï_9`Yí·ƒÖœ m4„F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ °ä¢›áÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýrùæ%‘ÊB ‘»ŠS;ZÃ~ă<Öœ m4„F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints°ä¢›áÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý¬­*TÝHEYª*eEÝ15ƃ@Öœ m4„F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â°ä¢›áÔñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý>U‰ÞùDÝf!{jwbȃ@Öœ m4„F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â°ä¢›áÔñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýý„à|ïEŸ•H¾=öºʃÖœ m4„F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â°ä¢›áÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÛØÿiN!©_Q%­¥æü̃<Öœ m4„F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7°ä¢›áÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýóÁò„˜@"»ù=v„Fh΃2Öœ m4„F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ°ä¢›áÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý*ÊçmI´ˆM‡3mx;Ѓ2Öœ m4„F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ°ä¢›áÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÜŠò\½ÄGت÷Æ`EFxHÒƒ2Öœ m4„F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ°ä¢›áÔñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýT>ÞodN¬¤0ABMÿ~,Ôƒ2Öœ m4„F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ°ä¢›áÔñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýô¥E¡ÕcAz¼Æ[w “5SÖƒ2Öœ m4„F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ°ä¢›áÔñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÏfêùKµ‰J1w¿ä^؃2Öœ m4„F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ°ä¢›áÔñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýZ½+%!MÆ¥ö5½Á7šÚƒ2Öœ m4„F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ°ä¢›áÔñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÙo¿fEw”?Ù^ùn{܃2Öœ m4„F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ°ä¢›áÔñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýºkõÀöF>‡Žk>›mÏÞƒÖœ m4„F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ°ä¢›áÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý²´ØABÄL¨ËKl7"<2àƒ:Öœ m4„F~é®Ò'üvº°ä¢›áÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýuî£YbIm­œBv~X¾âƒ:Öœ m4„F~é®Ò'üvº°ä¢›áÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý‚û@ wC/ŒÛ†¹Ïqäƒ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UúîèèÔñ‹+aue_lseekྌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5lD€!&Jɶ¯ø¡æ€æƒÖœ m4„F~é®Ò'üvºm4„F~é®Ò'üvºúîèèÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýpБ€TDö´^èu{좱èƒb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯úîèèÔñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýtÄ~-–¾MU¼áÄõ·I³êƒb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯úîèèÔñ‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýmÐTF~é®Ò'üvº²`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±úîèèÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýT\B¤ÕiÌù’emìƒ$°œ `J¾QF~é®Ò'üvºmÐTF~é®Ò'üvºúîèèÔñ‹+aue_fork +arg_pid1561hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1561ppid1282execbash20ÜS7[AIF¬•pd± (ýÍÜÎíG²¡<÷0îbúîƒÖœ mÐTF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'úîèèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý¿jQ 'jN ˆÊf_`]ðƒÖœ mÐTF~é®Ò'üvºýêÝ•ÓV•KóÆÓqz/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1úîèèÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineJ/usr/bin/env bash ../Bash/signal.sh appid1513execbash20ÜS7[AIF¬•pd± (ýÐýèzçKܤNT½ 7òƒ<Öœ mÐTF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confúîèèÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execenv20ÜS7[AIF¬•pd± (ýþ£ gåF‰oèÆÊÃCôƒ@Öœ mÐTF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ úîèèÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ýç(È}²™Fé‚žáeo9 öƒÖœ mÐTF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ úîèèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execenv20ÜS7[AIF¬•pd± (ý‡ÎŽò܃N‚Ÿ«‹E÷òøƒ<Öœ mÐTF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsúîèèÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execenv20ÜS7[AIF¬•pd± (ýoÅ* ìhAŸ¥ÏÅAåÐœúƒ@Öœ mÐTF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âúîèèÔñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ýy˜3ÒDJn‚ÁÀ0þˆüƒ@Öœ mÐTF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âúîèèÔñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ý†.ÓøNM̦=Ä–löZqþƒÖœ mÐTF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âúîèèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execenv20ÜS7[AIF¬•pd± (ýGÚùÒÐBø‘:¿Z“©€„<Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7úîèèÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execenv20ÜS7[AIF¬•pd± (ýlö¢@¡ÜDïžNÚ·Ú%A‚„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œúîèèÔñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"„êúÖ~Äø0§M¦º͇ɔ.„„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œúîèèÔñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ý$&/V&i@9’çO8Ômpž†„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œúîèèÔñ‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ý <T>MŠø‹bØÀˆ„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œúîèèÔñ‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ýÌâ§EñD d|ÚdE~Š„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œúîèèÔñ‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ýEºþ¶ØÒMІ€˜-¶ÈÀÍŒ„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œúîèèÔñ‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ýšY ÏxýA‡‹#µ©N¨šlŽ„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œúîèèÔñ‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ýÆÖ¦DĹsf¥iÓ„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œúîèèÔñ‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ý WáâOÍŠMD¤të’„Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œúîèèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execenv20ÜS7[AIF¬•pd± (ý/&¶åïM鮿!át¾“y”„:Öœ mÐTF~é®Ò'üvºúîèèÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execenv20ÜS7[AIF¬•pd± (ýOûµª€@J‘³–?*ÿ_Ú–„:Öœ mÐTF~é®Ò'üvºúîèèÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execenv20ÜS7[AIF¬•pd± (ý±„1lôF¡yâ%¾9“¸˜„Öœ mÐTF~é®Ò'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1’æÇñèÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine0bash ../Bash/signal.sh appid1513execenv20ÜS7[AIF¬•pd± (ýû=fBÜLx›ƒŸs :š„<Öœ mÐTF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf’æÇñèÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ýi ‘­éwH²`$ý  üLœ„@Öœ mÐTF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ’æÇñèÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýD„d ôqMy¬€™Á>äž„Öœ mÐTF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ’æÇñèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýû¤ÓX¯êE —~5CNgH• „<Öœ mÐTF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints’æÇñèÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ý4Ÿ)ÊC I¸­·.¢×䤢„@Öœ mÐTF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â’æÇñèÔñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý0’¼ùKIêŽ@@ó°xm¤„@Öœ mÐTF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â’æÇñèÔñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýûÓÕ¢&%Dà±ÛÀ_ëÜΦ„Öœ mÐTF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â’æÇñèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýíµˆ/¿JØ‘Ý× #x|¢¨„<Öœ mÐTF~é®Ò'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8’æÇñèÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ý%YÆöó_KÂœ &vHvª„2Öœ mÐTF~é®Ò'üvºâpÑ +m.×W®mAs××¼›’æÇñèÔñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý%€+="CBƒ“¥´{~¸k¬„2Öœ mÐTF~é®Ò'üvºâpÑ +m.×W®mAs××¼›’æÇñèÔñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý¨˜F{‡ÁL‚ÝÄ,Ù’É®„2Öœ mÐTF~é®Ò'üvºâpÑ +m.×W®mAs××¼›’æÇñèÔñ‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýlƒ0µì@}¢Û›­¡›°„2Öœ mÐTF~é®Ò'üvºâpÑ +m.×W®mAs××¼›’æÇñèÔñ‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýÀ6z ‘ÊFù¡·å©ÆÒ²„2Öœ mÐTF~é®Ò'üvºâpÑ +m.×W®mAs××¼›’æÇñèÔñ‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý[Õé` XLà‘°4ôÂ}äÍ´„2Öœ mÐTF~é®Ò'üvºâpÑ +m.×W®mAs××¼›’æÇñèÔñ‹+aue_mmap€À¾ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýÚ±³WI­žXÌeá÷¶„2Öœ mÐTF~é®Ò'üvºâpÑ +m.×W®mAs××¼›’æÇñèÔñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý·‚UÖ,4HkÙöö…1׸„2Öœ mÐTF~é®Ò'üvºâpÑ +m.×W®mAs××¼›’æÇñèÔñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý|iëÐhI;–Çq¸¢Lvº„Öœ mÐTF~é®Ò'üvºâpÑ +m.×W®mAs××¼›’æÇñèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý Å H2 àrn +Ô­¼„<Öœ mÐTF~é®Ò'üvºm/"P;=\»P½¤¬=P_6/usr/local/lib/libintl.so.8’æÇñèÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ýAm¾~M›½¾­zA¾„2Öœ mÐTF~é®Ò'üvºm/"P;=\»P½¤¬=P_’æÇñèÔñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýø+Û{ H¸Ý׈£!öÀ„2Öœ mÐTF~é®Ò'üvºm/"P;=\»P½¤¬=P_’æÇñèÔñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý.#™¤3D’—ž; ×v”Ë„2Öœ mÐTF~é®Ò'üvºm/"P;=\»P½¤¬=P_’æÇñèÔñ‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýv?ýðyFi˜j‰º7•8ÖÄ„2Öœ mÐTF~é®Ò'üvºm/"P;=\»P½¤¬=P_’æÇñèÔñ‹+aue_mmap€À× arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýð8ot¢yM¯o•|,ãøÝÆ„2Öœ mÐTF~é®Ò'üvºm/"P;=\»P½¤¬=P_’æÇñèÔñ‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýF™es‡]L÷²±.%eÌÆÈ„2Öœ mÐTF~é®Ò'üvºm/"P;=\»P½¤¬=P_’æÇñèÔñ‹+aue_mmap€ÀÙ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý`MrÀÒüKŒïÉp¯1 ŽÊ„2Öœ mÐTF~é®Ò'üvºm/"P;=\»P½¤¬=P_’æÇñèÔñ‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýŸìò +Ùí@Ÿlzî;>ÍpÌ„2Öœ mÐTF~é®Ò'üvºm/"P;=\»P½¤¬=P_’æÇñèÔñ‹+aue_mmap€ÀÜ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýÀZ€¤êzLéŽ|{ÿ©Ö5΄Öœ mÐTF~é®Ò'üvºm/"P;=\»P½¤¬=P_’æÇñèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý‰m:.4*D Œ²ž’ñ[¤Є<Öœ mÐTF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕ&/usr/lib/libdl.so.1’æÇñèÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ýòR/Ø žC+†ÃP;4ç†ïÒ„2Öœ mÐTF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕ’æÇñèÔñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý:Zîv4MEQ€Þ _þ_ÝÄÔ„2Öœ mÐTF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕ’æÇñèÔñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýïé;$¸FZ‡O­—W§|[Ö„2Öœ mÐTF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕ’æÇñèÔñ‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýžB°ñ‰˜M}¬SïˆÊy£ˆØ„2Öœ mÐTF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕ’æÇñèÔñ‹+aue_mmap€€Þ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý²:€äH£FëžÏÍ.3ºAÚ„2Öœ mÐTF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕ’æÇñèÔñ‹+aue_mmap€ÀÞ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý¢Vì-6sà„2Öœ mÐTF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕ’æÇñèÔñ‹+aue_mmap€€ß arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý­–f;E»b ½ÄÙñ´â„Öœ mÐTF~é®Ò'üvº"‘ûŽdkÇ[«d.µ[ÇÕ’æÇñèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýKµé[ A®Ò”bË“†ä„<Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7’æÇñèÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ý´þHõ-ŸDN¥­ì'3˜¯æ„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ’æÇñèÔñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý¾ÙÊÀK‹K0†,£´þ^$8è„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ’æÇñèÔñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý³œNr8Fþžc,D\9¯×ê„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ’æÇñèÔñ‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýR+ÀmO^‡=ïýƒ˜²”ì„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ’æÇñèÔñ‹+aue_mmap€€à arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý*˜žCLCR ”<ÜœF }î„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ’æÇñèÔñ‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý¢˜LŸr¾E5€6PIeçð„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ’æÇñèÔñ‹+aue_mmap€€Ÿ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý¸0ºŽ»L*½Pí ó°*ò„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ’æÇñèÔñ‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý–®Z’2Hß–$¹µŸ5ô„2Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ’æÇñèÔñ‹+aue_mmap€ÀÁ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýDƲœj9Oœ˜‡Ÿþ(Èv™ö„Öœ mÐTF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ’æÇñèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý}î©:«@*{¾™óø„:Öœ mÐTF~é®Ò'üvº’æÇñèÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýèU'Ƹ½OS‡uçmäp’5ú„:Öœ mÐTF~é®Ò'üvº’æÇñèÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýOO[çC ›k*rþ ·æü„:Öœ mÐTF~é®Ò'üvº’æÇñèÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý¶ü™ÑOL/³>š`øaÔâþ„:Öœ mÐTF~é®Ò'üvº’æÇñèÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýB¬&N‡¼I.Yr‹eü€…:Öœ mÐTF~é®Ò'üvº’æÇñèÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýP®Ç‹ I0Œ×?€qç÷‚…<Öœ mÐTF~é®Ò'üvºí( ö~R¶ ~{‚~¯/dev/tty’æÇñèÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ý +Éf±I[Ú¹0s:Å6„…Öœ mÐTF~é®Ò'üvºí( ö~R¶ ~{‚~¯’æÇñèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýåŠæŸOÍOð…yPÍ@qƒ†…<Öœ mÐTF~é®Ò'üvºýêÝ•ÓV•KóÆÓqz/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh’æÇñèÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ˆêý¼*„þŒKõ€É¤ÁsZÑ㈅0Öœ mÐTF~é®Ò'üvºýêÝ•ÓV•KóÆÓq’æÇñèÔñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý–÷vÔÆ@‚oU=ÙŠŠ…@Öœ mÐTF~é®Ò'üvºýêÝ•ÓV•KóÆÓq’æÇñèÔñ‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý¿Eôç¤âB|‡‰bwèÖ쌅0Öœ mÐTF~é®Ò'üvºýêÝ•ÓV•KóÆÓq’æÇñèÔñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ývNÞ'¿MC¦ßJÇx<«Ž…Öœ mÐTF~é®Ò'üvºýêÝ•ÓV•KóÆÓq’æÇñèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý.0ŸŽ}K½˜aiæ8F…"Öœ mÐTF~é®Ò'üvº’æÇñèÔñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýsj—0$CJ½²`+Îuª’…"Öœ mÐTF~é®Ò'üvº’æÇñèÔñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý¥Õ½4ŸHƒ³Š :ÅV*;”…0Öœ mÐTF~é®Ò'üvºýêÝ•ÓV•KóÆÓq’æÇñèÔñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1513execbash20ÜS7[AIF¬•pd± (ý¶¤?Ee¡ùélp¶ïó–…@Öœ mÐTF~é®Ò'üvºýêÝ•ÓV•KóÆÓq’æÇñèÔñ‹+aue_readÂhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1513execbash20ÜS7[AIF¬•pd± (ý( óMGÛS6‹4UN/˜…0Öœ mÐTF~é®Ò'üvºýêÝ•ÓV•KóÆÓq’æÇñèÔñ‹+aue_lseekêhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1513execbash20ÜS7[AIF¬•pd± (ýmÒF3F~é®Ò'üvº´mÐTF~é®Ò'üvº°äÿ§®]vRS<„äB±’æÇñèÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý½Jso9J>˜ÔÕlÎe{þš…$Öœ mÐTF~é®Ò'üvºmÒF3F~é®Ò'üvº’æÇñèÔñ‹+aue_fork +arg_pid1562hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1562ppid1513execbash20ÜS7[AIF¬•pd± (ýˆÔ6õ×Nž¹{CÊ„œ…@Öœ mÐTF~é®Ò'üvºýêÝ•ÓV•KóÆÓq’æÇñèÔñ‹+aue_readXhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1513execbash20ÜS7[AIF¬•pd± (ýÿ¸ñYHN§Ø¥£Ämž…ìœ mÒF3F~é®Ò'üvºýêÝ•ÓV•KóÆÓqòþ‰ûèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1561execbash20ÜS7[AIF¬•pd± (ý_7â ŽöDå¿ì–#5Ƀ …<ìœ mÒF3F~é®Ò'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nullòþ‰ûèÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561execbash20ÜS7[AIF¬•pd± (ý×ÆO4JK“¸Ä2ŸÓÇ¢…ìœ mÒF3F~é®Ò'üvº3P ÓK€X‹Ó«·Ø€‘^òþ‰ûèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execbash20ÜS7[AIF¬•pd± (ý³L“âÔH|¢yM—ìÁ.u¤…ìœ mÒF3F~é®Ò'üvº÷ˆ•1•®q^®•Ä­®q‡v/usr/home/user/ripe-prov-tests-master/Linux/./signal_server'ìAzX™¦}˜¹(/libexec/ld-elf.so.1òþ‰ûèÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./signal_serverppid1561execbash20ÜS7[AIF¬•pd± (ýÔN¹üßþAþŠŸÜø2Ѧ…<ìœ mÒF3F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confòþ‰ûèÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýžcJZÚLy ¼ÛÃ}‡¨…@ìœ mÒF3F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ òþ‰ûèÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýÛÈ8 KÑ–¯—L<…gª…ìœ mÒF3F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ òþ‰ûèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýËôMøIDÖ›ð1ùøjÕ¬…0Öœ mÐTF~é®Ò'üvºýêÝ•ÓV•KóÆÓqòþ‰ûèÔñ‹+aue_lseekŽhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1513execbash20ÜS7[AIF¬•pd± (ýmÒ÷F~é®Ò'üvº¶mÐTF~é®Ò'üvº°äÿ§®]vRS<„äB±òþ‰ûèÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýº¡ÝãÈ{IÇ¯Ý ñ$ç9 ®…$Öœ mÐTF~é®Ò'üvºmÒ÷F~é®Ò'üvºòþ‰ûèÔñ‹+aue_fork +arg_pid1563hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1563ppid1513execbash20ÜS7[AIF¬•pd± (ý®¾9þŠ5Bºž·Acp²°…<ìœ mÒF3F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsòþ‰ûèÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýXU“Ø¿Né© +¼èO‘ ²…@ìœ mÒF3F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âòþ‰ûèÔñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýÜáw,Å +Aå”ëG•urŽC´…@ìœ mÒF3F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âòþ‰ûèÔñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý{íÇ5¸}El›?ïFf;H"¶…ìœ mÒF3F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âòþ‰ûèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýsÃRù KŒÒdU‡Sa¸…<ìœ mÒF3F~é®Ò'üvº†sya–„[–a½WÛ„jÙ(/usr/lib/libc++.so.1òþ‰ûèÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýÛ”ÅÁ¶HÓ¼ñí6Óþƒ º…2ìœ mÒF3F~é®Ò'üvº†sya–„[–a½WÛ„jÙòþ‰ûèÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý×êü½¶ÓD8¼—‰Fàðῼ…2ìœ mÒF3F~é®Ò'üvº†sya–„[–a½WÛ„jÙòþ‰ûèÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýÛWPqáJý«£þlt¾…2ìœ mÒF3F~é®Ò'üvº†sya–„[–a½WÛ„jÙòþ‰ûèÔñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý g@Ý2XNËõ”<ÿE›À…2ìœ mÒF3F~é®Ò'üvº†sya–„[–a½WÛ„jÙòþ‰ûèÔñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý +ø^…"¿DΉæz l:BÀÂ…2ìœ mÒF3F~é®Ò'üvº†sya–„[–a½WÛ„jÙòþ‰ûèÔñ‹+aue_mmap€€Õ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýJ9VpõJš½º:ª&a¸¾Ä…2ìœ mÒF3F~é®Ò'üvº†sya–„[–a½WÛ„jÙòþ‰ûèÔñ‹+aue_mmap€€Õ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý{g¸,±TIȾòO$F‡²Æ…2ìœ mÒF3F~é®Ò'üvº†sya–„[–a½WÛ„jÙòþ‰ûèÔñ‹+aue_mmap€Àˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýª@ç<ñÔDV¹Ér†Œi-È…2ìœ mÒF3F~é®Ò'üvº†sya–„[–a½WÛ„jÙòþ‰ûèÔñ‹+aue_mmap€Àˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýŠ=ŠÑsÊKÛ¶»Õcµ‰©ÏÊ…ìœ mÒF3F~é®Ò'üvº†sya–„[–a½WÛ„jÙòþ‰ûèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý÷¹ åƒNƒŠPãLcXÌ…<ìœ mÒF3F~é®Ò'üvº_Ì>m­R­>Á­ËP$/lib/libcxxrt.so.1òþ‰ûèÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýÑ>ÚJ¢cC%o4®Î…2ìœ mÒF3F~é®Ò'üvº_Ì>m­R­>Á­ËPòþ‰ûèÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýŸ)p¯H…­€2çû× Ð…2ìœ mÒF3F~é®Ò'üvº_Ì>m­R­>Á­ËPòþ‰ûèÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý5LaGB—-Í V]1Ò…2ìœ mÒF3F~é®Ò'üvº_Ì>m­R­>Á­ËPòþ‰ûèÔñ‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý«·ä½‚UBd·Í(Ø¡ºæÔ…2ìœ mÒF3F~é®Ò'üvº_Ì>m­R­>Á­ËPòþ‰ûèÔñ‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýœ 5¬@½‡ÿ½Ÿ¬ rDÖ…2ìœ mÒF3F~é®Ò'üvº_Ì>m­R­>Á­ËPòþ‰ûèÔñ‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýW 'œ@5­DCi FîØ…2ìœ mÒF3F~é®Ò'üvº_Ì>m­R­>Á­ËPòþ‰ûèÔñ‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý ïH‡XLoŽb4KüÚ…2ìœ mÒF3F~é®Ò'üvº_Ì>m­R­>Á­ËPòþ‰ûèÔñ‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý,à?ª»t@–UŒh?‰)Ü…2ìœ mÒF3F~é®Ò'üvº_Ì>m­R­>Á­ËPòþ‰ûèÔñ‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý¹Hˆ‚%aC ÊùˆÜà&Þ…ìœ mÒF3F~é®Ò'üvº_Ì>m­R­>Á­ËPòþ‰ûèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý”Aùæ¼O ” +®Ì}™ì¯à…<ìœ mÒF3F~é®Ò'üvºLÓÅ:îtX®:îXte˜/lib/libm.so.5òþ‰ûèÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý.M” SEn¹ë/IvB·Iâ…2ìœ mÒF3F~é®Ò'üvºLÓÅ:îtX®:îXte˜òþ‰ûèÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýëK{Û6NE§é¤—y#€—ä…2ìœ mÒF3F~é®Ò'üvºLÓÅ:îtX®:îXte˜òþ‰ûèÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýÆ( þGn¸ºÚçmÐÔÑæ…2ìœ mÒF3F~é®Ò'üvºLÓÅ:îtX®:îXte˜òþ‰ûèÔñ‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý"o]žuG+Ž-¤•æ6‰è…2ìœ mÒF3F~é®Ò'üvºLÓÅ:îtX®:îXte˜òþ‰ûèÔñ‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý>¢b¦f˜F°¬¹A‚0ê…2ìœ mÒF3F~é®Ò'üvºLÓÅ:îtX®:îXte˜òþ‰ûèÔñ‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý +;¨–EN˜‚—ya¡ü3ìì…2ìœ mÒF3F~é®Ò'üvºLÓÅ:îtX®:îXte˜òþ‰ûèÔñ‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý3ö¬À=éAŠºÈ 5ã¥ðî…2ìœ mÒF3F~é®Ò'üvºLÓÅ:îtX®:îXte˜òþ‰ûèÔñ‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýOP«ÏÄAk»|þºú°JPð…2ìœ mÒF3F~é®Ò'üvºLÓÅ:îtX®:îXte˜òþ‰ûèÔñ‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýr÷»tODK"§–V f`ò…ìœ mÒF3F~é®Ò'üvºLÓÅ:îtX®:îXte˜òþ‰ûèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýò&Qß^ûMÅšh8áÅ›˜ô…<ìœ mÒF3F~é®Ò'üvº§ÌÃq#DT£°5DmP$/lib/libgcc_s.so.1òþ‰ûèÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý™÷Áü¡ŠIý”ÒLx2q’ö…2ìœ mÒF3F~é®Ò'üvº§ÌÃq#DT£°5DmPòþ‰ûèÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý[,ðK×J$©”=$hÓø…2ìœ mÒF3F~é®Ò'üvº§ÌÃq#DT£°5DmPòþ‰ûèÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýÅ°L_ÿ—K¹“ñvÃ`:}ú…2ìœ mÒF3F~é®Ò'üvº§ÌÃq#DT£°5DmPòþ‰ûèÔñ‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýÅóH_H¾®3ÃÛ̃Ëü…2ìœ mÒF3F~é®Ò'üvº§ÌÃq#DT£°5DmPòþ‰ûèÔñ‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýl™õL4kC +±Áh*3zþ…2ìœ mÒF3F~é®Ò'üvº§ÌÃq#DT£°5DmPòþ‰ûèÔñ‹+aue_mmap€€¼ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý¦)§ªgèC ©>¼+¦4Ô€†2ìœ mÒF3F~é®Ò'üvº§ÌÃq#DT£°5DmPòþ‰ûèÔñ‹+aue_mmap€€¼ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýTR\¸/I˜™Å›·®…Ça‚†2ìœ mÒF3F~é®Ò'üvº§ÌÃq#DT£°5DmPòþ‰ûèÔñ‹+aue_mmap€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýßYž|Ì#Bd†rBQ¶N3Ø„†2ìœ mÒF3F~é®Ò'üvº§ÌÃq#DT£°5DmPòþ‰ûèÔñ‹+aue_mmap€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýí/³T”¶Lgƒ-ÀêCQ«††ìœ mÒF3F~é®Ò'üvº§ÌÃq#DT£°5DmPòþ‰ûèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýSõÑùfHÒ•föhS«ˆ†<ìœ mÒF3F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7òþ‰ûèÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý!z,‚zC功žügŠ†2ìœ mÒF3F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œòþ‰ûèÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ŠÜý_ÿ0c%J2‡!•Ó·Z†Œ†2ìœ mÒF3F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œòþ‰ûèÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýĹ€ï.GAƒ‡êþᎆ2ìœ mÒF3F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œòþ‰ûèÔñ‹+aue_mmap€€Ä arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý”ÊiJt—G8uê\³Ã†2ìœ mÒF3F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œòþ‰ûèÔñ‹+aue_mmap€€Ä arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýHoÖ¦yÆAŠS˜¸A2ru’†2ìœ mÒF3F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œòþ‰ûèÔñ‹+aue_mmap€€ƒ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý/㥊L¢“eª¤Xæì ”†2ìœ mÒF3F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œòþ‰ûèÔñ‹+aue_mmap€€ƒ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý狶KO¥gø¬WS®–†2ìœ mÒF3F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œòþ‰ûèÔñ‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý07ê‡ðH »>×þá(Û˜†2ìœ mÒF3F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œòþ‰ûèÔñ‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýXLŽº ÞE/»/ÔÓž;ôš†ìœ mÒF3F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œòþ‰ûèÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý™›'¿Þ€MªQ4¼á\µœ†:ìœ mÒF3F~é®Ò'üvº²Úú„éÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý<Å ¾ïÔJÌ·×±±Nž†:ìœ mÒF3F~é®Ò'üvº²Úú„éÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýÖ!šŠw5@—»Sã4˜"Çä †:ìœ mÒF3F~é®Ò'üvº²Úú„éÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý‰ÚU 8ÙCî§zÁwç“¢†:ìœ mÒF3F~é®Ò'üvº²Úú„éÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý=ßÎ:f‘M'šÿeJ⤆:ìœ mÒF3F~é®Ò'üvº²Úú„éÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýˆÓ6LH‰¨¾¡³â¦†:ìœ mÒF3F~é®Ò'üvº²Úú„éÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýaË­ cÇKà¯d Àhè)¨†²œ mÒ÷F~é®Ò'üvºýêÝ•ÓV•KóÆÓq²Úú„éÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1561execbash20ÜS7[AIF¬•pd± (ýqW£P‚HFAf‰êZѪ†²œ mÒ÷F~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1²Úú„éÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1561execbash20ÜS7[AIF¬•pd± (ý€ÊÃõZG-¼ÿUŒTGD«¬†<²œ mÒ÷F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.conf²Úú„éÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561exec +sleep20ÜS7[AIF¬•pd± (ýœ@â]WK ˆÓÍ]Úùe»®†@²œ mÒ÷F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ²Úú„éÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561exec +sleep20ÜS7[AIF¬•pd± (ýèßÖˆAI¡»­ìU.@°†²œ mÒ÷F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ²Úú„éÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561exec +sleep20ÜS7[AIF¬•pd± (ýþï‚¿rfBƒ¥{Áä°²†<²œ mÒ÷F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints²Úú„éÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561exec +sleep20ÜS7[AIF¬•pd± (ý˜æÊ'OaI ¼B£’ö}K¥´†@²œ mÒ÷F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â²Úú„éÔñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561exec +sleep20ÜS7[AIF¬•pd± (ýì1¼ˆCˆnløÅ7÷涆@²œ mÒ÷F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â²Úú„éÔñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561exec +sleep20ÜS7[AIF¬•pd± (ý¸jïx^GÅš+ãMý<]Œ¸†²œ mÒ÷F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â²Úú„éÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561exec +sleep20ÜS7[AIF¬•pd± (ýÆ\±'çÑDÕ¹~êß’2º†<²œ mÒ÷F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7²Úú„éÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561exec +sleep20ÜS7[AIF¬•pd± (ý¥,ß-*@w‡UT¶DB¼†2²œ mÒ÷F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ²Úú„éÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561exec +sleep20ÜS7[AIF¬•pd± (ýêÝT¿RöN²š3ïoÅZ¾†2²œ mÒ÷F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ²Úú„éÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561exec +sleep20ÜS7[AIF¬•pd± (ý!ÒÓ5ÁJž›Êù¤1©’À†2²œ mÒ÷F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ²Úú„éÔñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561exec +sleep20ÜS7[AIF¬•pd± (ýJ9Ö×IKžm>_pK,†2²œ mÒ÷F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ²Úú„éÔñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561exec +sleep20ÜS7[AIF¬•pd± (ýe E¬æF—c‚Ó°¥L"Ć2²œ mÒ÷F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ²Úú„éÔñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561exec +sleep20ÜS7[AIF¬•pd± (ýëÆ')dd@‡v7ÀuÛqƆ2²œ mÒ÷F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ²Úú„éÔñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561exec +sleep20ÜS7[AIF¬•pd± (ý;LJ¢½Ò‚Ëü.Ȇ2²œ mÒ÷F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ²Úú„éÔñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561exec +sleep20ÜS7[AIF¬•pd± (ýF´RQŒrOê´·¥˜lzæ¦ʆ2²œ mÒ÷F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ²Úú„éÔñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561exec +sleep20ÜS7[AIF¬•pd± (ýáÉX‹¹zHÕ û—A¾ ðŽ̆²œ mÒ÷F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ²Úú„éÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561exec +sleep20ÜS7[AIF¬•pd± (ýgFŽ¶aNKŒGØ™°ÀsΆ:²œ mÒ÷F~é®Ò'üvº²Úú„éÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561exec +sleep20ÜS7[AIF¬•pd± (ý‚ËvbcD‡&Mi¨‹÷'І0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸§³ñÔñ‹+aue_lseekˆÕŽhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýK…hb}(J~¤ׄq=²Ò†²œ mÒ÷F~é®Ò'üvºmÒ÷F~é®Ò'üvº¸§³ñÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561exec +sleep20ÜS7[AIF¬•pd± (ýJ£êt—G:š­šæÛ?‘Ô†<Öœ mÐTF~é®Ò'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.db¸§³ñÔñ‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1513execbash20ÜS7[AIF¬•pd± (ý±â+X\½Gh¡)¡ê1ÝÖ†@Öœ mÐTF~é®Ò'üvº–Ø%™wyïR¹wT’ï9¸§³ñÔñ‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý‰ADÞ•ëBt¦ z{.§Þÿ؆@Öœ mÐTF~é®Ò'üvº–Ø%™wyïR¹wT’ï9¸§³ñÔñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý`ƒ“/KI ¾x¹ŽÓɯÚ†@Öœ mÐTF~é®Ò'üvº–Ø%™wyïR¹wT’ï9ªÁØŠñÔñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý +Ûû,rIƒ£ ©ó:ÇÑ܆Öœ mÐTF~é®Ò'üvº–Ø%™wyïR¹wT’ï9ªÁØŠñÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý¼]#I°D°ŸÊÐë*©XÞ†@Öœ mÐTF~é®Ò'üvºýêÝ•ÓV•KóÆÓqªÁØŠñÔñ‹+aue_read4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1513execbash20ÜS7[AIF¬•pd± (ýnxû‡F~é®Ò'üvº¸mÐTF~é®Ò'üvº°äÿ§®]vRS<„äB±ªÁØŠñÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýˆ©V›iJ@‡Žéxñ’(÷Rà†$Öœ mÐTF~é®Ò'üvºnxû‡F~é®Ò'üvºªÁØŠñÔñ‹+aue_fork +arg_pid1564hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1564ppid1513execbash20ÜS7[AIF¬•pd± (ýŽºIxWFpˆú|¨5c»è↲œ nxû‡F~é®Ò'üvºýêÝ•ÓV•KóÆÓqªÁØŠñÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1561execbash20ÜS7[AIF¬•pd± (ý¼Du%ž@é´|rnͲ¬ä†²œ nxû‡F~é®Ò'üvºtd:Ñ7ø³V¸7Ç‹¶³EÒv/usr/home/user/ripe-prov-tests-master/Linux/./signal_client'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ªÁØŠñÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"./signal_client appid1561execbash20ÜS7[AIF¬•pd± (ý”p-`R Hˆ°õ¨ÎÞ&æ†<²œ nxû‡F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confªÁØŠñÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýÁ~YÎÉûLh›çÇ>M@8ÿè†@²œ nxû‡F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ªÁØŠñÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýMÍ`±Eñ¬LBU™eŒåꆲœ nxû‡F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ªÁØŠñÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý³%‰¨Y8L‰´*„·]š¸ùì†<²œ nxû‡F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsªÁØŠñÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýFxa¶­OEª³Îmc­ß`î†@²œ nxû‡F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âªÁØŠñÔñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýbáxOÌJêlo ô•{Ôð†@²œ nxû‡F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âªÁØŠñÔñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýð×U™°Nñ§\„›eò†²œ nxû‡F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âªÁØŠñÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýÿ—½š®J†ãGD¯38ô†<²œ nxû‡F~é®Ò'üvº†sya–„[–a½WÛ„jÙ(/usr/lib/libc++.so.1ªÁØŠñÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý&[›à*¿M´ˆùßF`”Gðö†2²œ nxû‡F~é®Ò'üvº†sya–„[–a½WÛ„jÙªÁØŠñÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý4WAPׂL‚‘ë"c:V[Üø†2²œ nxû‡F~é®Ò'üvº†sya–„[–a½WÛ„jÙªÁØŠñÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýýQùdH™r&ïÒ,ú†2²œ nxû‡F~é®Ò'üvº†sya–„[–a½WÛ„jÙªÁØŠñÔñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý‰Ç9Ðh”E͟ʳ“¶µqü†2²œ nxû‡F~é®Ò'üvº†sya–„[–a½WÛ„jÙªÁØŠñÔñ‹+aue_mmap€€§ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýxئWefCÇ”%óx›†;Øþ†2²œ nxû‡F~é®Ò'üvº†sya–„[–a½WÛ„jÙªÁØŠñÔñ‹+aue_mmap€€Õ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýö1¸+J÷@S+¨Û|€‡2²œ nxû‡F~é®Ò'üvº†sya–„[–a½WÛ„jÙªÁØŠñÔñ‹+aue_mmap€€Õ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýÒmòvK¼ (nùI‚‡2²œ nxû‡F~é®Ò'üvº†sya–„[–a½WÛ„jÙªÁØŠñÔñ‹+aue_mmap€Àˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýàuéAå‹¢Zƒ ßJ„‡2²œ nxû‡F~é®Ò'üvº†sya–„[–a½WÛ„jÙªÁØŠñÔñ‹+aue_mmap€Àˆ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýy„ƒfB…žt8«,èƇ²œ nxû‡F~é®Ò'üvº†sya–„[–a½WÛ„jÙªÁØŠñÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý¡vfŠEîœö(GÏBû³ˆ‡<²œ nxû‡F~é®Ò'üvº_Ì>m­R­>Á­ËP$/lib/libcxxrt.so.1ªÁØŠñÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýb¶~ÐGHøºí›P?±ªŠ‡2²œ nxû‡F~é®Ò'üvº_Ì>m­R­>Á­ËPªÁØŠñÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýúê 9XA*º0º áyw)Œ‡2²œ nxû‡F~é®Ò'üvº_Ì>m­R­>Á­ËPªÁØŠñÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý…çëNÆŸ¼I!*£ÛÈŽ‡2²œ nxû‡F~é®Ò'üvº_Ì>m­R­>Á­ËPªÁØŠñÔñ‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýÕØÇvàDŒ~zPìCñ*‡2²œ nxû‡F~é®Ò'üvº_Ì>m­R­>Á­ËPªÁØŠñÔñ‹+aue_mmap€€ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýý÷™=eA¯çQ¦g-$¬’‡2²œ nxû‡F~é®Ò'üvº_Ì>m­R­>Á­ËPªÁØŠñÔñ‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"ŒàúaVf¾Ç.I®ŸS(Ù3/Ùt”‡2²œ nxû‡F~é®Ò'üvº_Ì>m­R­>Á­ËPªÁØŠñÔñ‹+aue_mmap€À“ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýþHéÐHx¯–C5€”–‡2²œ nxû‡F~é®Ò'üvº_Ì>m­R­>Á­ËPªÁØŠñÔñ‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýZG¯”CL¼¿ZŠÂÂ@˜‡2²œ nxû‡F~é®Ò'üvº_Ì>m­R­>Á­ËPªÁØŠñÔñ‹+aue_mmap€Àš arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý© üK}%B +¨í9±=š‡²œ nxû‡F~é®Ò'üvº_Ì>m­R­>Á­ËPªÁØŠñÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý ~’Œ}O²ç!DøMìGœ‡<²œ nxû‡F~é®Ò'üvºLÓÅ:îtX®:îXte˜/lib/libm.so.5ªÁØŠñÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýÒIb$Ž†Hb†kXCîÕAÛž‡2²œ nxû‡F~é®Ò'üvºLÓÅ:îtX®:îXte˜ªÁØŠñÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý_·VíûGÓŽD)‚b0T ‡2²œ nxû‡F~é®Ò'üvºLÓÅ:îtX®:îXte˜ªÁØŠñÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýî©;ÂU5Fñ¤›4þÿ]„¢‡2²œ nxû‡F~é®Ò'üvºLÓÅ:îtX®:îXte˜ªÁØŠñÔñ‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýwÂê|¼DKºP a;b备2²œ nxû‡F~é®Ò'üvºLÓÅ:îtX®:îXte˜ªÁØŠñÔñ‹+aue_mmap€Àž arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýÚЖ-sIM“V,ˆÍcÆø¦‡2²œ nxû‡F~é®Ò'üvºLÓÅ:îtX®:îXte˜ªÁØŠñÔñ‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýCr *bÿFà—ÐÀ’F2¨‡2²œ nxû‡F~é®Ò'üvºLÓÅ:îtX®:îXte˜ªÁØŠñÔñ‹+aue_mmap€€§ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý ò+XBc§­…«aª‡2²œ nxû‡F~é®Ò'üvºLÓÅ:îtX®:îXte˜ªÁØŠñÔñ‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýXH/§õÙMe¤î‚ôw¬‡2²œ nxû‡F~é®Ò'üvºLÓÅ:îtX®:îXte˜ªÁØŠñÔñ‹+aue_mmap€€¶ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýͦEÐëK!—c?S£»Ý¿®‡²œ nxû‡F~é®Ò'üvºLÓÅ:îtX®:îXte˜ªÁØŠñÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý2Õ‚©?Iš‰”¦}¾bó¿°‡<²œ nxû‡F~é®Ò'üvº§ÌÃq#DT£°5DmP$/lib/libgcc_s.so.1ªÁØŠñÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýzŸt¨a¿D-‡"…¹·´û²‡2²œ nxû‡F~é®Ò'üvº§ÌÃq#DT£°5DmPªÁØŠñÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý”¹ÞÊJM˜ÕÚƼÈF´‡2²œ nxû‡F~é®Ò'üvº§ÌÃq#DT£°5DmPªÁØŠñÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý±¼x©øà@‚¤ðV¸$M¶‡2²œ nxû‡F~é®Ò'üvº§ÌÃq#DT£°5DmPªÁØŠñÔñ‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý¦Ÿ JuHUž‰<õíƒá§¸‡2²œ nxû‡F~é®Ò'üvº§ÌÃq#DT£°5DmPªÁØŠñÔñ‹+aue_mmap€À· arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýìÁÙ\¯A€Ë9'cº‡2²œ nxû‡F~é®Ò'üvº§ÌÃq#DT£°5DmPªÁØŠñÔñ‹+aue_mmap€€¼ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý#ËtuQ³MU‡¢ÈqRÂêô¼‡2²œ nxû‡F~é®Ò'üvº§ÌÃq#DT£°5DmPªÁØŠñÔñ‹+aue_mmap€€¼ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý¯Nø_ŸNÃœÚYQËÿ\¾‡2²œ nxû‡F~é®Ò'üvº§ÌÃq#DT£°5DmPªÁØŠñÔñ‹+aue_mmap€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýrÀx¯J\¥k¤ž cÀ‡2²œ nxû‡F~é®Ò'üvº§ÌÃq#DT£°5DmPªÁØŠñÔñ‹+aue_mmap€À arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý<ª™å%D …Ð~"„|s‡²œ nxû‡F~é®Ò'üvº§ÌÃq#DT£°5DmPªÁØŠñÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý—˜ëÝÈ.F:¹‡¸äí@ć<²œ nxû‡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ªÁØŠñÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýcˆ°¶N ¹5b“EV[ŠƇ2²œ nxû‡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œªÁØŠñÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý×xm™n\NÅ–]rÅF¡üȇ2²œ nxû‡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œªÁØŠñÔñ‹+aue_mmap€À¦ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýÊÎŽ·iJÝ ìF^Uʇ2²œ nxû‡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œªÁØŠñÔñ‹+aue_mmap€€Ä arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýX´‘sACâ¼Ò »Â&Æ̇2²œ nxû‡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œªÁØŠñÔñ‹+aue_mmap€€Ä arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýT— ÀN:œÁçœcá ·2²œ nxû‡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œªÁØŠñÔñ‹+aue_mmap€€ƒ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý‹ô*ÎnÔK”RçQD}t Ї2²œ nxû‡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œªÁØŠñÔñ‹+aue_mmap€€ƒ arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýíÎFg}@#’²ÀN qÒ‡2²œ nxû‡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œªÁØŠñÔñ‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýÄÝØN"¹a¼Ù•]ÒÔ‡2²œ nxû‡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œªÁØŠñÔñ‹+aue_mmap€À¥ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýQD‰Öó-@1”}ú Ð¥»ÜÖ‡²œ nxû‡F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œªÁØŠñÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý&“¤Mk I/†,õ«ƒ©؇:²œ nxû‡F~é®Ò'üvºªÁØŠñÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýFóá™Ù@>•XÆv7 ù‰Ú‡:²œ nxû‡F~é®Ò'üvºªÁØŠñÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýõ»&ÆÕ$FºZS8'Cˆ¾܇:²œ nxû‡F~é®Ò'üvºªÁØŠñÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýÒ›\þjGMºúõbøî±Þ‡:²œ nxû‡F~é®Ò'üvº¬‹¹”ñÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýkßTÎ’¶G­ž9 [™ÿà‡:²œ nxû‡F~é®Ò'üvº¬‹¹”ñÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý’ë³ÌEªØ¬ŸÄ…â‡:²œ nxû‡F~é®Ò'üvº¬‹¹”ñÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý +§K¸ŽêÛYŽê·ê‰ÛâË20 +ÜS7[AIF¬•pd± (ýVvÚ4EÛ³šè;€Y›»ä‡<²œ nxû‡F~é®Ò'üvº§K¸ŽêÛYŽê·ê‰ÛâËf/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp¬‹¹”ñÔñ‹+aue_open_rwtc +flagsmode¶ +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýˆ= èÜÒM&‚U_yhyæ‡@²œ nxû‡F~é®Ò'üvº§K¸ŽêÛYŽê·ê‰Ûâˬ‹¹”ñÔñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýÿŠ87ûAÝ¢£#½“)õÆè‡@²œ nxû‡F~é®Ò'üvº§K¸ŽêÛYŽê·ê‰Ûâˬ‹¹”ñÔñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý;¯­U ;O¿ŠËàªÝê‡0²œ nxû‡F~é®Ò'üvº§K¸ŽêÛYŽê·ê‰Ûâˬ‹¹”ñÔñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýûªe“²KIŽïѬr—Ûì‡0²œ nxû‡F~é®Ò'üvº§K¸ŽêÛYŽê·ê‰Ûâˬ‹¹”ñÔñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý²x~j?AQ€a»¢î‡0²œ nxû‡F~é®Ò'üvº§K¸ŽêÛYŽê·ê‰Ûâˬ‹¹”ñÔñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýM•ñmHQHmŒïÿ!ægôð‡²œ nxû‡F~é®Ò'üvº§K¸ŽêÛYŽê·ê‰Ûâˬ‹¹”ñÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý3i>ÄB¸´* —'Ѓúò‡b²œ nxû‡F~é®Ò'üvºí( ö~R¶ ~{‚~¯¬‹¹”ñÔñ‹+aue_write8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1561execsignal_client20ÜS7[AIF¬•pd± (ýéì('#F½¥¡hb¹&ñô‡²œ nxû‡F~é®Ò'üvºnxû‡F~é®Ò'üvº¬‹¹”ñÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561execsignal_client20ÜS7[AIF¬•pd± (ý·5öN1«ÚÌeÄ@gJö‡\ìœ mÒF3F~é®Ò'üvº§K¸ŽêÛYŽê·ê‰ÛâËf/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp¬‹¹”ñÔñ‹+aue_unlinkhostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýõ‘Ÿþª-A™‰ôôÎÝ /óø‡bìœ mÒF3F~é®Ò'üvºí( ö~R¶ ~{‚~¯¬‹¹”ñÔñ‹+aue_write hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1561execsignal_server20ÜS7[AIF¬•pd± (ý†.væb$KÀ¦œv5‚"`ú‡ìœ mÒF3F~é®Ò'üvºmÒF3F~é®Ò'üvº¬‹¹”ñÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1561execsignal_server20ÜS7[AIF¬•pd± (ýö‰ºž¸N0¤Ï~ðãäcü‡@Öœ mÐTF~é®Ò'üvºýêÝ•ÓV•KóÆÓq¬‹¹”ñÔñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1513execbash20ÜS7[AIF¬•pd± (ýDÞm/ÁHǹ´ÜêbÛL¸þ‡Öœ mÐTF~é®Ò'üvºmÐTF~é®Ò'üvº¬‹¹”ñÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýû°6 +% A†Ÿ&‰½$ù€ˆ@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'¬‹¹”ñÔñ‹+aue_read° hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýí¸-v+•E¿”ÝNö®Ò‚ˆ0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'¬‹¹”ñÔñ‹+aue_lseekîhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýn{(0F~é®Ò'üvºº`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±¬‹¹”ñÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýÕ‘5½ÌÚN×±xR5éÕׄˆ$°œ `J¾QF~é®Ò'üvºn{(0F~é®Ò'üvº¬‹¹”ñÔñ‹+aue_fork +arg_pid1565hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1565ppid1282execbash20ÜS7[AIF¬•pd± (ý§ê÷ÌuH{˜TŸl"9n†ˆÖœ n{(0F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'¬‹¹”ñÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýrn³!Å¥DN/GíOˆˆ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ£ÑêøÔñ‹+aue_lseekšßhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½…Ù©Í—@¯dGWÎ\†ŠˆÖœ n{(0F~é®Ò'üvºn{(0F~é®Ò'üvºŽ£ÑêøÔñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýyÌ"èÔKŒ?Èn.8.óŒˆb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯Ž£ÑêøÔñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ý'zŒa°L‡´Ø ¢¡§¥ÛŽˆb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯Ž£ÑêøÔñ‹+aue_write4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýo±óF~é®Ò'üvº¼`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±Ž£ÑêøÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý„%hÔKI”ç꼩Cåˆ$°œ `J¾QF~é®Ò'üvºo±óF~é®Ò'üvºŽ£ÑêøÔñ‹+aue_fork +arg_pid1566hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1566ppid1282execbash20ÜS7[AIF¬•pd± (ýª¹³ÝʇF9¨†»S¹@q¤’ˆÖœ o±óF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'Ž£ÑêøÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý¿èÍáðO6‡Åû–1öü”ˆÖœ o±óF~é®Ò'üvºd‘´Ú.#W®Ú›ÊÇ#”{z/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ž£ÑêøÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineJ/usr/bin/env bash ../Bash/stream.sh appid1513execbash20ÜS7[AIF¬•pd± (ýŒ.ƒÃþaHÛˆ­œyoç –ˆ<Öœ o±óF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confŽ£ÑêøÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execenv20ÜS7[AIF¬•pd± (ý‘‘¢¬aïEoŽàî l9˜ˆ@Öœ o±óF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ Ž£ÑêøÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"„ˆúµíö-yAúŸà9=Ö,˜šˆÖœ o±óF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ Ž£ÑêøÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execenv20ÜS7[AIF¬•pd± (ý*3@Œ´ ¿¡GAœˆ<Öœ o±óF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsŽ£ÑêøÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execenv20ÜS7[AIF¬•pd± (ýïÚ¬ y)KA¿^©UœB]½žˆ@Öœ o±óF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âŽ£ÑêøÔñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ýIÜ’ZükBè§ß8ìZ%  ˆ@Öœ o±óF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âŽ£ÑêøÔñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ý‰þùÊJÆž®gVCºh¢ˆÖœ o±óF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âŽ£ÑêøÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execenv20ÜS7[AIF¬•pd± (ýÊ ­…ö/GÙ†ï`b¸¤ˆ<Öœ o±óF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Ž£ÑêøÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execenv20ÜS7[AIF¬•pd± (ý)‚!ÂôaDY¹ìÅSü¦ˆ2Öœ o±óF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŽ£ÑêøÔñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ýÉ€¡\ +ùDx¡h)týÄȽ¨ˆ2Öœ o±óF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŽ£ÑêøÔñ‹+aue_mmap€À¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ý8ë0³ÀgGÒ›eÿѺiÒ`ªˆ2Öœ o±óF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŽã‚ôøÔñ‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ý‹0¬¨GNþš×ºæÖñ+¬ˆ2Öœ o±óF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŽã‚ôøÔñ‹+aue_mmap€€¥ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ýâ‘Ð;VErµ”Š®áJj7®ˆ2Öœ o±óF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŽã‚ôøÔñ‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ýÙr‡ÖáEe‡Q½GšN °ˆ2Öœ o±óF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŽã‚ôøÔñ‹+aue_mmap€€ä arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ýtøê.RñDZ¿«ðÒ'±²ˆ2Öœ o±óF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŽã‚ôøÔñ‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ýci2jݯ@ǘ?rž˜âO´ˆ2Öœ o±óF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŽã‚ôøÔñ‹+aue_mmap€À† arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execenv20ÜS7[AIF¬•pd± (ýÊu7$nÓI¥¸ïêß`H¶ˆÖœ o±óF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŽã‚ôøÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execenv20ÜS7[AIF¬•pd± (ýa×`JǬØ¿M‡û¸ˆ:Öœ o±óF~é®Ò'üvºŽã‚ôøÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execenv20ÜS7[AIF¬•pd± (ýš“üŽoF_½[’BUf]ºˆ:Öœ o±óF~é®Ò'üvºŽã‚ôøÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execenv20ÜS7[AIF¬•pd± (ýB~>÷?H±±q^q`›"¼ˆÖœ o±óF~é®Ò'üvºì€¡ùÊ_¹¡Zy?ʹ&/usr/local/bin/bash'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Žã‚ôøÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine0bash ../Bash/stream.sh appid1513execenv20ÜS7[AIF¬•pd± (ý^4Çæ¨4Kí§;|ëºöº¾ˆ<Öœ o±óF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confŽã‚ôøÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ýèÑër¹øH¤hZKÀs–ÏÀˆ@Öœ o±óF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ Žã‚ôøÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý"¬–ѵEv¹a­rPekˆÖœ o±óF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ Žã‚ôøÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýPP¤¥ŒG„¹ê°Ø]BñĈ<Öœ o±óF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsŽã‚ôøÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ýü… +$üCÒŠ`!Ò£‚øƈ@Öœ o±óF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âŽã‚ôøÔñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý|d½KæGH‚~d>LOȈ@Öœ o±óF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âŽã‚ôøÔñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý!™2ÀXéGæ• ‡«g ʈÖœ o±óF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âŽã‚ôøÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýx{ +‚ìC¢ªy#mï(êý̈<Öœ o±óF~é®Ò'üvºâpÑ +m.×W®mAs××¼›(/lib/libncurses.so.8Žã‚ôøÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execbash20ÜS7[AIF¬•pd± (ýý¿zREH˜º/ß~%uç\Έ2Öœ o±óF~é®Ò'üvºâpÑ +m.×W®mAs××¼›Žã‚ôøÔñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýþ<°» Jc¼@KoC•Ј2Öœ o±óF~é®Ò'üvºâpÑ +m.×W®mAs××¼›Žã‚ôøÔñ‹+aue_mmap€À« arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýsA%ì{I̤ÔwbŠ|¾“Òˆ2Öœ o±óF~é®Ò'üvºâpÑ +m.×W®mAs××¼›Žã‚ôøÔñ‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý45U\ÅMN¼»»à“ðu,úÔˆ2Öœ o±óF~é®Ò'üvºâpÑ +m.×W®mAs××¼›Žã‚ôøÔñ‹+aue_mmap€€¬ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýu@ÜD ž˜ª‚ F2·5Щ5$°ö®‰@Öœ o±óF~é®Ò'üvºd‘´Ú.#W®Ú›ÊÇ#”{Žã‚ôøÔñ‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýݨVá…At¨EÛº©ÂåÖ°‰0Öœ o±óF~é®Ò'üvºd‘´Ú.#W®Ú›ÊÇ#”{Žã‚ôøÔñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ý e5IyFF¶‰îÿÕ·Ï5²‰Öœ o±óF~é®Ò'üvºd‘´Ú.#W®Ú›ÊÇ#”{Žã‚ôøÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý¨œ"³Û™D´¡ý5֒ј´‰"Öœ o±óF~é®Ò'üvºŽã‚ôøÔñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý‚㿸‹O• +d2ê3§ +¶‰"Öœ o±óF~é®Ò'üvºŽã‚ôøÔñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýœ»Yj„«L2°Þß6ß6ñq¸‰0Öœ o±óF~é®Ò'üvºd‘´Ú.#W®Ú›ÊÇ#”{Žã‚ôøÔñ‹+aue_lseekhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1513execbash20ÜS7[AIF¬•pd± (ýîäøn¦EO@Šë5Z´ªº‰@Öœ o±óF~é®Ò'üvºd‘´Ú.#W®Ú›ÊÇ#”{Žã‚ôøÔñ‹+aue_readÄhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1513execbash20ÜS7[AIF¬•pd± (ýzEš‹D3­]Žøù:çk¼‰0Öœ o±óF~é®Ò'üvºd‘´Ú.#W®Ú›ÊÇ#”{Žã‚ôøÔñ‹+aue_lseek€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1513execbash20ÜS7[AIF¬•pd± (ýo„‰F~é®Ò'üvº¾o±óF~é®Ò'üvº°äÿ§®]vRS<„äB±Ê”öýøÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýhKÌÙ”ÕIŒÐH$Áa­¤¾‰$Öœ o±óF~é®Ò'üvºo„‰F~é®Ò'üvºÊ”öýøÔñ‹+aue_fork +arg_pid1567hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1567ppid1513execbash20ÜS7[AIF¬•pd± (ý’qѪHMš©_¨@þÙèãÀ‰@Öœ o±óF~é®Ò'üvºd‘´Ú.#W®Ú›ÊÇ#”{Ê”öýøÔñ‹+aue_readDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1513execbash20ÜS7[AIF¬•pd± (ý„!?šÂgC£Œ‚¡”õåá‰0Öœ o±óF~é®Ò'üvºd‘´Ú.#W®Ú›ÊÇ#”{Ê”öýøÔñ‹+aue_lseek¤hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1513execbash20ÜS7[AIF¬•pd± (ýo²F~é®Ò'üvºÀo±óF~é®Ò'üvº°äÿ§®]vRS<„äB±Ê”öýøÔñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýŽ´Â͉ØJ.¿QÀ›93æĉ$Öœ o±óF~é®Ò'üvºo²F~é®Ò'üvºÊ”öýøÔñ‹+aue_fork +arg_pid1568hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1568ppid1513execbash20ÜS7[AIF¬•pd± (ý›09G†Sû—Ðù4 +Ɖìœ o„‰F~é®Ò'üvºd‘´Ú.#W®Ú›ÊÇ#”{Ê”öýøÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1566execbash20ÜS7[AIF¬•pd± (ý뾸É|DKˆÓòPÆýȉ<ìœ o„‰F~é®Ò'üvº3P ÓK€X‹Ó«·Ø€‘^/dev/nullÊ”öýøÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1566execbash20ÜS7[AIF¬•pd± (ý›÷‘1†J5”=”ý»¬Ä3ʉìœ o„‰F~é®Ò'üvº3P ÓK€X‹Ó«·Ø€‘^Ê”öýøÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1566execbash20ÜS7[AIF¬•pd± (ý6ö1§ž!NìœCªuºBỶìœ o„‰F~é®Ò'üvº²w”\·²mÄŒ”E‰v/usr/home/user/ripe-prov-tests-master/Linux/./stream_server'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ê”öýøÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine"./stream_server appid1566execbash20ÜS7[AIF¬•pd± (ý:òð’tD`ªý”rÙïܘΉ<ìœ o„‰F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÊ”öýøÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1566execstream_server20ÜS7[AIF¬•pd± (ý¤çî1O†¼Bp À¼Љ²œ o²F~é®Ò'üvºd‘´Ú.#W®Ú›ÊÇ#”{Ê”öýøÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1566execbash20ÜS7[AIF¬•pd± (ýsSls30Jf®•…8Û‡ 3Ò‰²œ o²F~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1Ê”öýøÔñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1566execbash20ÜS7[AIF¬•pd± (ý*ú™N‹˜¾ßo¯–‘Ô‰<²œ o²F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confÊ”öýøÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1566exec +sleep20ÜS7[AIF¬•pd± (ý¨1¡xŸˆBn0~v %‹˜Ö‰@ìœ o„‰F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ Ê”öýøÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566execstream_server20ÜS7[AIF¬•pd± (ýÕÎ5¼þDËŸúv<‚ö3؉ìœ o„‰F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ Ê”öýøÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1566execstream_server20ÜS7[AIF¬•pd± (ý!‚«ôl€F¹ŽžÙGÌæÚ‰<ìœ o„‰F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsÊ”öýøÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1566execstream_server20ÜS7[AIF¬•pd± (ýŠu‚–H+—èÔt‘#@܉@ìœ o„‰F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÊ”öýøÔñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566execstream_server20ÜS7[AIF¬•pd± (ý% vÀÚJ2‚X0—ˆ¹KÞ‰@ìœ o„‰F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÊ”öýøÔñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566execstream_server20ÜS7[AIF¬•pd± (ýã¢&~¥I,¥msߪ§Fà‰ìœ o„‰F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âÊ”öýøÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1566execstream_server20ÜS7[AIF¬•pd± (ý‰|i4xÉC‘²àô¦¯Î%â‰<ìœ o„‰F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7Ê”öýøÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1566execstream_server20ÜS7[AIF¬•pd± (ýÑ k;ƒëL„«½ß¸Oÿ¡Bä‰2ìœ o„‰F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÊ”öýøÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566execstream_server20ÜS7[AIF¬•pd± (ýÚy²íƒHò–«þQNÃKæ‰2ìœ o„‰F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÊ”öýøÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566execstream_server20ÜS7[AIF¬•pd± (ýÑ"íòñ4C„ÕÏR²/è‰2ìœ o„‰F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÊ”öýøÔñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566execstream_server20ÜS7[AIF¬•pd± (ýéÄì®­X@"·>²‘ÚËz7ê‰2ìœ o„‰F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÊ”öýøÔñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566execstream_server20ÜS7[AIF¬•pd± (ý¸×쉱NÔŒl'áªDmì‰2ìœ o„‰F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÊ”öýøÔñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566execstream_server20ÜS7[AIF¬•pd± (ý&ÎÝzøæBªº´D÷…âB:î‰2ìœ o„‰F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÊ”öýøÔñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566execstream_server20ÜS7[AIF¬•pd± (ý'@4~îÍIªºÆ»v ¯Hð‰2ìœ o„‰F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÊ”öýøÔñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566execstream_server20ÜS7[AIF¬•pd± (ý×,ߦë-DŸ‚RÔ œ¡ò‰2ìœ o„‰F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÊ”öýøÔñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566execstream_server20ÜS7[AIF¬•pd± (ý‡Þm` JÀ£ÆûB8É÷Bô‰ìœ o„‰F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œÊ”öýøÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1566execstream_server20ÜS7[AIF¬•pd± (ýûø»ÝDJu(Ä:“…ö‰:ìœ o„‰F~é®Ò'üvºÊ”öýøÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1566execstream_server20ÜS7[AIF¬•pd± (ý‹Þ†Þ”÷Jj€4mŒ"otÆø‰:ìœ o„‰F~é®Ò'üvºÊ”öýøÔñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1566execstream_server20ÜS7[AIF¬•pd± (ý +oåF~é®Ò'üvº20 +ÜS7[AIF¬•pd± (ý?KtK2B?,‚ýú‰ìœ o„‰F~é®Ò'üvºoåF~é®Ò'üvºÊ”öýøÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1566execstream_server20ÜS7[AIF¬•pd± (ý +oíæF~é®Ò'üvº20 +ÜS7[AIF¬•pd± (ýætúH7»K²="Ä‘¡Øü‰ìœ o„‰F~é®Ò'üvºoíæF~é®Ò'üvºÊ”öýøÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1566execstream_server20ÜS7[AIF¬•pd± (ý +o÷ÎF~é®Ò'üvº 20 +ÜS7[AIF¬•pd± (ýôV„åô-H³¢Ç+F&ÞÝVþ‰ìœ o„‰F~é®Ò'üvºo÷ÎF~é®Ò'üvºÊ”öýøÔñ‹+aue_bindhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1566address::port3490execstream_server20ÜS7[AIF¬•pd± (ýó8Ĩ +^O?¬Ý}ç]f¶_€Š>ìœ o„‰F~é®Ò'üvºo÷ÎF~é®Ò'üvºÊ”öýøÔñ‹+aue_listen +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1566execstream_server20ÜS7[AIF¬•pd± (ýv"׉ržH¦ÀŽüs*üÒ‚Šbìœ o„‰F~é®Ò'üvºí( ö~R¶ ~{‚~¯Ê”öýøÔñ‹+aue_writeFhostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1566execstream_server20ÜS7[AIF¬•pd± (ýJ¶eVv¦AÚ²ð[;ñ„Š@²œ o²F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ¶š·‡ùÔñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566exec +sleep20ÜS7[AIF¬•pd± (ýÀÉÀ}C4Cä¾"ø‘.Üõ†Š²œ o²F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ¶š·‡ùÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1566exec +sleep20ÜS7[AIF¬•pd± (ý.ƒ‘•9E'…øübûÅyˆŠ<²œ o²F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hints¶š·‡ùÔñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1566exec +sleep20ÜS7[AIF¬•pd± (ý@ñ•AQˆI¾!y°tMŠŠ@²œ o²F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â¶š·‡ùÔñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566exec +sleep20ÜS7[AIF¬•pd± (ýWt{ Dy¦°· G_"ŒŠ@²œ o²F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â¶š·‡ùÔñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566exec +sleep20ÜS7[AIF¬•pd± (ý¯N×"Mδñü€€€.ŽŠ²œ o²F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â¶š·‡ùÔñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1566exec +sleep20ÜS7[AIF¬•pd± (ý¸%7…Ohš@:!>eŠ<²œ o²F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7¶š·‡ùÔñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1566exec +sleep20ÜS7[AIF¬•pd± (ýƒ‡¶ÇàG‡5ÿݺϒŠ2²œ o²F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¶š·‡ùÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566exec +sleep20ÜS7[AIF¬•pd± (ý±ŽµE˜L ®öø2T|¦-”Š2²œ o²F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¶š·‡ùÔñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566exec +sleep20ÜS7[AIF¬•pd± (ý +K³Næ¯D‘‚#kŒ÷ëÿ –Š2²œ o²F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ¶š·‡ùÔñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566exec +sleep20ÜS7[AIF¬•pd± (ýέX)°Š ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+20ÜS7[AIF¬•pd± (ý,y¾Æ¢Æ@e“‘‡ÁWxmM®Š@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1#Y¸• AC‡rÛ} rÌ´Š ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+20ÜS7[AIF¬•pd± (ýÍ»¥w#¨K§šhlõXˆo²Š@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýMß*oìSH@—ç@ý9G¸Š ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+20ÜS7[AIF¬•pd± (ý²WdÍç‘G¥¡B?Ø>%lG¶Š@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýù«&–q£F¡sr÷ëùbt¼Š ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+20ÜS7[AIF¬•pd± (ý˜‚‰ELA.§óË‘ñFºŠ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›ï¦(@§€m¬–,G€«ÀŠ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+20ÜS7[AIF¬•pd± (ý|Àº; ¬Lá¢_hG<Æ3¾Š@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯¿Y LC㜓mnO ˆVÄŠ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+20ÜS7[AIF¬•pd± (ý±{;=ILù´âqÏQ­?Š@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌÍ×›ˆ=A0¡bŽ ”ÆŠ:‚œ Ê +ÙKFzé®›'üvºšåÕ°ýÔñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýL>Ë2¶|O§’7,äG8uÈŠ@üž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V šåÕ°ýÔñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýo³rå1`Mz¸'Ó‰Z¸ÊÊŠ@üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýø¡FŽü‰Aµ”žÄ%½ŽìGÌŠ@üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+aue_preadöLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÌqŠ*’H­’:~;Æ¿“©Ίb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºšåÕ°ýÔñ‹+aue_writeàMhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýíÉÂÝAp¨VGjì¶NЊbüž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡ášåÕ°ýÔñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑ»Úäô4Lý¬ªŸÕ¦ÌÒŠ@üž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V šåÕ°ýÔñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*Øí÷ïKÁ‘µHꇅÎÔŠ@üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýá1ïëïOvžF°”O÷4ÖŠ@üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UšåÕ°ýÔñ‹+aue_preadâ>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿ø ,•B~“Ž^Ô–œ|ÓØŠb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºšåÕ°ýÔñ‹+aue_writeÌ?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýtŒéþÌ@ºÎñ¬jÚŠbüž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡ášåÕ°ýÔñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«ØïcwjN¤öZ"Ï¿æÜŠ@üž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢Ü¹ýÔñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.‚y¶•LCp—„{KÞŠ@üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢Ü¹ýÔñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýجGãY·K‘ˆœl9kàŠ@üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢Ü¹ýÔñ‹+aue_preadöHhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²¢¹ûL³¤½@»²,âŠb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢Ü¹ýÔñ‹+aue_writeàIhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÔ;¹‚õE·cö´CkWäŠbüž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¢Ü¹ýÔñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'WQw%yF£4Äû1‡WæŠ@üž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢Ü¹ýÔñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}!1¶Ý O’“…W{\×Ñ×èŠ@üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢Ü¹ýÔñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤á¡xI—¯Y¼.à§:êŠ@üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢Ü¹ýÔñ‹+aue_preadºAhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýeQW"NãA߼ƀ¨?ìŠbüž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¢Ü¹ýÔñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›•<„LÉ£]<à7÷WîŠ@üž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢Ü¹ýÔñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýò¤}ÈNwBÞ•’_xž1ù(ðŠ@üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢Ü¹ýÔñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýVjý]õ˜K¥‘.kG´ŽòŠ@üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢Ü¹ýÔñ‹+aue_preadÐGhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®Ä«/,ƒL¿…°Ç­¬”aôŠbüž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¢Ü¹ýÔñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±ÔxîOO“*Šnv«·”öŠ@üž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢Ü¹ýÔñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýöá)'7M:.ÊÔ[øŠ@üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢Ü¹ýÔñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý2Õš¿›Ij‰Î +ñôkdúŠ@üž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢Ü¹ýÔñ‹+aue_pread²BhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›KRNÈrK­¥‘jÛ…9üŠ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uˆ„ýŒÕñ‹+aue_lseekÜù‘hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûÄësO2HN˜Ð×ç[Í®ïþŠ@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eˆ„ýŒÕñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÅ}}º¥PC¤‹öxxº¾·€‹JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºˆ„ýŒÕñ‹+aue_sendtoÚ +ret_msgid +17367hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÛéÃÔOm• Ó>yÖ_Ù‚‹JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºˆ„ýŒÕñ‹+aue_sendto˜ +ret_msgid +17368hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÍoK»QH¼ÂÝnëá„‹JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºˆ„ýŒÕñ‹+aue_sendto¬ +ret_msgid +17369hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý;ÆŸšïL¨ÊØ€JMÎʆ‹JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºˆ„ýŒÕñ‹+aue_sendto˜ +ret_msgid +17370hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÕ'G%€óIIµékJḀˆ‹Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆ„ýŒÕñ‹+aue_recvfromÚ ret_msgid +17367hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý-=ô›É1Lg”_ò›áumŠ‹Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆ„ýŒÕñ‹+aue_recvfrom˜ ret_msgid +17368hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý©w—dÓD‰¨°ÑiŒ‹Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆ„ýŒÕñ‹+aue_recvfrom¬ ret_msgid +17369hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýjß;VªB6‰ù–ëÙÕ׎‹Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆ„ýŒÕñ‹+aue_recvfrom˜ ret_msgid +17370hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýøR¤ Ii„ºŠ 'ÃõØ‹²œ o²F~é®Ò'üvºo²F~é®Ò'üvºˆ„ýŒÕñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1566exec +sleep20ÜS7[AIF¬•pd± (ý“ÖJ€3@ +¼FsÒÒ7vø’‹<Öœ o±óF~é®Ò'üvº–Ø%™wyïR¹wT’ï94/usr/share/misc/termcap.dbˆ„ýŒÕñ‹+aue_open_rwtc +flagsmode +ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value3ppid1513execbash20ÜS7[AIF¬•pd± (ýè“<üÿÞDYDa¥Ñⶠ”‹@Öœ o±óF~é®Ò'üvº–Ø%™wyïR¹wT’ï9ˆ„ýŒÕñ‹+aue_readˆhostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýËz¥NŽiBÓš·ë}éšò+–‹@Öœ o±óF~é®Ò'üvº–Ø%™wyïR¹wT’ï9ˆ„ýŒÕñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýˆÕ«ÏÑÐD`Ÿ³¤4ƒ»5u˜‹@Öœ o±óF~é®Ò'üvº–Ø%™wyïR¹wT’ï9ˆ„ýŒÕñ‹+aue_pread€@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execbash20ÜS7[AIF¬•pd± (ýÎ¥È]»FÞªéLº²KÌš‹Öœ o±óF~é®Ò'üvº–Ø%™wyïR¹wT’ï9ˆ„ýŒÕñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýkÀ 8I—µ+ß–]¼çœ‹@Öœ o±óF~é®Ò'üvºd‘´Ú.#W®Ú›ÊÇ#”{ˆ„ýŒÕñ‹+aue_read hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1513execbash20ÜS7[AIF¬•pd± (ýoÁUF~é®Ò'üvºÂo±óF~é®Ò'üvº°äÿ§®]vRS<„äB±ˆ„ýŒÕñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýy„S•fEi–´"o’Éêž‹$Öœ o±óF~é®Ò'üvºoÁUF~é®Ò'üvºˆ„ýŒÕñ‹+aue_fork +arg_pid1569hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1569ppid1513execbash20ÜS7[AIF¬•pd± (ýBòƒmO„Žž°%l8 ‹²œ oÁUF~é®Ò'üvºd‘´Ú.#W®Ú›ÊÇ#”{ˆ„ýŒÕñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1566execbash20ÜS7[AIF¬•pd± (ýž-¤Ú÷I‹ŽRŽ@•\“ ¢‹²œ oÁUF~é®Ò'üvº¬ø„( žuUž Üo¥uv/usr/home/user/ripe-prov-tests-master/Linux/./stream_client'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ˆ„ýŒÕñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./stream_clientppid1566execbash20ÜS7[AIF¬•pd± (ý𩽣Hý§ÍØ)nï ¤‹<²œ oÁUF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confˆ„ýŒÕñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1566execstream_client20ÜS7[AIF¬•pd± (ýykfÑËB*Óä*§ñK¦‹@²œ oÁUF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ˆ„ýŒÕñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566execstream_client20ÜS7[AIF¬•pd± (ýÕå£A)Mˆ›ÆHåX´=¨‹²œ oÁUF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ˆ„ýŒÕñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1566execstream_client20ÜS7[AIF¬•pd± (ý=û2.v»E{›_å°ËLª‹<²œ oÁUF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsˆ„ýŒÕñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1566execstream_client20ÜS7[AIF¬•pd± (ýñµ›2ŽÒFS¶¡m… kä:¬‹@²œ oÁUF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âˆ„ýŒÕñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566execstream_client20ÜS7[AIF¬•pd± (ý@ Œó™BþŒ.~ù$S!®‹@²œ oÁUF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âˆ„ýŒÕñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1566execstream_client20ÜS7[AIF¬•pd± (ýÃì À”[C€šŸq}Ø8Á°‹²œ oÁUF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âˆ„ýŒÕñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1566execstream_client20ÜS7[AIF¬•pd± (ýÏ_ SKbD¯‰ +xnº¤uÔ‹Öœ oÂàëF~é®Ò'üvºoÂàëF~é®Ò'üvºäÍžãˆÕñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÀå’ÄÕZMΔ +@«BÂòÖ‹b°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯äÍžãˆÕñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýuqíå|Ko¬– ”ŠŽéØ‹b°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯äÍžãˆÕñ‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýp^Û*F~é®Ò'üvºÈ`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±äÍžãˆÕñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ý† +‰2¯–H¯…ã€üœÙ_ðÚ‹$°œ `J¾QF~é®Ò'üvºp^Û*F~é®Ò'üvºäÍžãˆÕñ‹+aue_fork +arg_pid1572hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1572ppid1282execbash20ÜS7[AIF¬•pd± (ýÿbÁdÏ Hc¯oÔZ3 `Ü‹Öœ p^Û*F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'äÍžãˆÕñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ý5áE]ƒy£Pœ¯úôÞ‹Öœ p^Û*F~é®Ò'üvºÉäAÀ|1V±|?š÷%n/usr/home/user/ripe-prov-tests-master/Linux/./with_wget'ìAzX™¦}˜¹(/libexec/ld-elf.so.1äÍžãˆÕñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine./with_wget ppid1513execbash20ÜS7[AIF¬•pd± (ýZÛû,ªD(†·'åà0à‹<Öœ p^Û*F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confäÍžãˆÕñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execwith_wget20ÜS7[AIF¬•pd± (ý矒Œ¯B¿ˆ_JÁ¢&â‹@Öœ p^Û*F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ äÍžãˆÕñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execwith_wget20ÜS7[AIF¬•pd± (ýÉBÊ¢ãO‚}j–Bjc ä‹Öœ p^Û*F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ äÍžãˆÕñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execwith_wget20ÜS7[AIF¬•pd± (ý‹â=wn÷Muš·ííçWêæ‹<Öœ p^Û*F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsäÍžãˆÕñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execwith_wget20ÜS7[AIF¬•pd± (ýÌžÐm9·J8ž'®kœb|è‹@Öœ p^Û*F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âäÍžãˆÕñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execwith_wget20ÜS7[AIF¬•pd± (ýVþr-M‡‹T?æÀƒž´ê‹@Öœ p^Û*F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âäÍžãˆÕñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execwith_wget20ÜS7[AIF¬•pd± (ýájЖÐ@ȶ§æ‰´¢+Õì‹Öœ p^Û*F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âäÍžãˆÕñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execwith_wget20ÜS7[AIF¬•pd± (ý7ì?‹}PO[¥Ò8‰²JÁî‹<Öœ p^Û*F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7äÍžãˆÕñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513execwith_wget20ÜS7[AIF¬•pd± (ýŦfÓÐLj£è% ëílEð‹2Öœ p^Û*F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œäÍžãˆÕñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execwith_wget20ÜS7[AIF¬•pd± (ýVT6ó8¹MJƒà5çrÿQò‹2Öœ p^Û*F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œäÍžãˆÕñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execwith_wget20ÜS7[AIF¬•pd± (ýÛˆ(‡¨D3‹ŠŽ›/DUèô‹2Öœ p^Û*F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œäÍžãˆÕñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execwith_wget20ÜS7[AIF¬•pd± (ý ÷;ç¸ÍE'Ÿo®F Ÿö‹2Öœ p^Û*F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œäÍžãˆÕñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execwith_wget20ÜS7[AIF¬•pd± (ýKKÀÈw£HGœI‹e$ø‹2Öœ p^Û*F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œäÍžãˆÕñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execwith_wget20ÜS7[AIF¬•pd± (ýൕAœ E“¡?[cðžÈú‹2Öœ p^Û*F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œäÍžãˆÕñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execwith_wget20ÜS7[AIF¬•pd± (ý3ïÊ;Nj€€ÞS¬û¤ü‹2Öœ p^Û*F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œäÍžãˆÕñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execwith_wget20ÜS7[AIF¬•pd± (ý±âw‘TK™‘wºŸmßæ“þ‹2Öœ p^Û*F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œäÍžãˆÕñ‹+aue_mmap€À… arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513execwith_wget20ÜS7[AIF¬•pd± (ýÞœŸÎsIGÖ„çì´­uB€ŒÖœ p^Û*F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œäÍžãˆÕñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513execwith_wget20ÜS7[AIF¬•pd± (ý >ø øµOГöe¡/b‚Œ:Öœ p^Û*F~é®Ò'üvºäÍžãˆÕñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execwith_wget20ÜS7[AIF¬•pd± (ý^³7¿OG©s¸Õpj„Œ:Öœ p^Û*F~é®Ò'üvºäÍžãˆÕñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execwith_wget20ÜS7[AIF¬•pd± (ýp_~PF~é®Ò'üvºÊp^Û*F~é®Ò'üvº°äÿ§®]vRS<„äB±ŠµúìˆÕñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýz¼é äóMö¨æ­&ƒ†Œ$Öœ p^Û*F~é®Ò'üvºp_~PF~é®Ò'üvºŠµúìˆÕñ‹+aue_vfork +arg_pid1573hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1573ppid1513execwith_wget20ÜS7[AIF¬•pd± (ýñrfÞÜHA/“>­â™1R¿ˆŒ²œ p_~PF~é®Ò'üvºó÷êßZyºU¹Zˆºä$/bin/sh'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ŠµúìˆÕñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLineVsh -c wget http://www.google.com/index.htmlppid1572execwith_wget20ÜS7[AIF¬•pd± (ýUÞ »#«I^PKåÍTØÿŠŒ<²œ p_~PF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confŠµúìˆÕñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1572execsh20ÜS7[AIF¬•pd± (ý5¼Žä–OG§ë«Ã½.gŒŒ@²œ p_~PF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ŠµúìˆÕñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýèŽ8= F‡³X`„­ŽŒ²œ p_~PF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ŠµúìˆÕñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1572execsh20ÜS7[AIF¬•pd± (ýÈ®÷Ĭ«4[ot±šŒ2²œ p_~PF~é®Ò'üvº*‡qo&\¯q׬&¬ŸŠµúìˆÕñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýå©™$CK•è׋'lñyœŒ2²œ p_~PF~é®Ò'üvº*‡qo&\¯q׬&¬ŸŠµúìˆÕñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ý(î:=¡ØA²ìa¡®$QžŒ2²œ p_~PF~é®Ò'üvº*‡qo&\¯q׬&¬ŸŠµúìˆÕñ‹+aue_mmap€À¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ý…’JbHI–â’»¬{C Œ2²œ p_~PF~é®Ò'üvº*‡qo&\¯q׬&¬ŸŠµúìˆÕñ‹+aue_mmap€À¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýþ\d1Á@¨‡OI¸ÚO¯€¢Œ2²œ p_~PF~é®Ò'üvº*‡qo&\¯q׬&¬ŸŠµúìˆÕñ‹+aue_mmap€Àà arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ý3LZ¹šTDK¿ ê3·ÞÛ¤Œ2²œ p_~PF~é®Ò'üvº*‡qo&\¯q׬&¬ŸŠµúìˆÕñ‹+aue_mmap€Àà arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ý„¸ˆG!OÒ¦ ¡JÍÑ»¦Œ2²œ p_~PF~é®Ò'üvº*‡qo&\¯q׬&¬ŸŠµúìˆÕñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ý&¬$¢ªNW§¼+*iÕ~¨Œ2²œ p_~PF~é®Ò'üvº*‡qo&\¯q׬&¬ŸŠµúìˆÕñ‹+aue_mmap€ÀÔ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýš¾MiúÛJ7‡P|Ï¥WªŒ²œ p_~PF~é®Ò'üvº*‡qo&\¯q׬&¬ŸŠµúìˆÕñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1572execsh20ÜS7[AIF¬•pd± (ýSh/ÒˆœL‹¥›1Z»\ü¬Œ<²œ p_~PF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ŠµúìˆÕñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1572execsh20ÜS7[AIF¬•pd± (ýÎÒx\BVDl˜oš1¦‡+®Œ2²œ p_~PF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠµúìˆÕñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ý*¨ËœÐJãžsâÿ³W °Œ2²œ p_~PF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠµúìˆÕñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýI1Š¼ÐA‘O«=¨LȲŒ2²œ p_~PF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠµúìˆÕñ‹+aue_mmap€€Ø arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ý³ûôõMB¦šŠÖ´ÝM²j´Œ2²œ p_~PF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠµúìˆÕñ‹+aue_mmap€€Ø arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýë@m›¯äLaœQºv_Qñ¶Œ2²œ p_~PF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠµúìˆÕñ‹+aue_mmap€€— arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýÄâòkØ»Kœ©°Þ&Š‰¸Œ2²œ p_~PF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠµúìˆÕñ‹+aue_mmap€€— arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýÓ{ ƧD`ªA¾¼ÞžHºŒ2²œ p_~PF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠµúìˆÕñ‹+aue_mmap€À¹ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýyãn—Eׂ%ÇÎV1x¼Œ2²œ p_~PF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠµúìˆÕñ‹+aue_mmap€À¹ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýÐ|°†c1E¾6SF¨Î¾Œ²œ p_~PF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠµúìˆÕñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1572execsh20ÜS7[AIF¬•pd± (ýJ’‡þH7¢Ï„éHÀŒ<²œ p_~PF~é®Ò'üvºÚ6n $.\¤ ¸­ü.+¦*/lib/libncursesw.so.8ŠµúìˆÕñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1572execsh20ÜS7[AIF¬•pd± (ý +ù€ƒ÷Me§|—QâÐ5ÂŒ2²œ p_~PF~é®Ò'üvºÚ6n $.\¤ ¸­ü.+¦ŠµúìˆÕñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýIGIçé·OD¥„"%&ÄŒ2²œ p_~PF~é®Ò'üvºÚ6n $.\¤ ¸­ü.+¦ŠµúìˆÕñ‹+aue_mmap€€¹ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýÉK1¥Gz²‹.å| ÆŒ2²œ p_~PF~é®Ò'üvºÚ6n $.\¤ ¸­ü.+¦ŠµúìˆÕñ‹+aue_mmap€ÀÔ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýîŠî¹þ‹AÖéÍ„®žÈŒ2²œ p_~PF~é®Ò'üvºÚ6n $.\¤ ¸­ü.+¦ŠµúìˆÕñ‹+aue_mmap€ÀÔ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýˆP§J²–JÆ©_v7!»+ÊŒ2²œ p_~PF~é®Ò'üvºÚ6n $.\¤ ¸­ü.+¦ŠµúìˆÕñ‹+aue_mmap€€é arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¢°üÌÆeaõÆDÝ­1>æ&µRÌŒ2²œ p_~PF~é®Ò'üvºÚ6n $.\¤ ¸­ü.+¦ŠµúìˆÕñ‹+aue_mmap€€é arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ý©âAh3YNÕ¦e©CÆlÎŒ2²œ p_~PF~é®Ò'üvºÚ6n $.\¤ ¸­ü.+¦ŠµúìˆÕñ‹+aue_mmap€€‚ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ý¦;Í]hNˆ³Ð³û;Ze¯ÐŒ2²œ p_~PF~é®Ò'üvºÚ6n $.\¤ ¸­ü.+¦ŠµúìˆÕñ‹+aue_mmap€€‚ arg_mem_flags6['PROT_READ', 'PROT_WRITE']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1572execsh20ÜS7[AIF¬•pd± (ýnx#*M!“ž±àtøÚ9ÒŒ²œ p_~PF~é®Ò'üvºÚ6n $.\¤ ¸­ü.+¦ŠµúìˆÕñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1572execsh20ÜS7[AIF¬•pd± (ýÚœóÞbK‹ 7­À.´øÔŒ:²œ p_~PF~é®Ò'üvºŠµúìˆÕñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1572execsh20ÜS7[AIF¬•pd± (ýMfš(CϾ™·žãe=ÖŒ:²œ p_~PF~é®Ò'üvºŠµúìˆÕñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1572execsh20ÜS7[AIF¬•pd± (ý.ºæ ‚H’“tèÅòÅ +½ØŒ:²œ p_~PF~é®Ò'üvºŠµúìˆÕñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1572execsh20ÜS7[AIF¬•pd± (ýùg˧ÃAFluÎh)ÎÚŒ:²œ p_~PF~é®Ò'üvºŠµúìˆÕñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1572execsh20ÜS7[AIF¬•pd± (ý¦>‰6jA ®Fvpùë¹ÀÜŒb²œ p_~PF~é®Ò'üvºí( ö~R¶ ~{‚~¯ŠµúìˆÕñ‹+aue_write(hostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1572execsh20ÜS7[AIF¬•pd± (ýxŽ§O»Iž± ¸ð³?ÞŒ²œ p_~PF~é®Ò'üvºp_~PF~é®Ò'üvºŠµúìˆÕñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1572execsh20ÜS7[AIF¬•pd± (ý7âWÇMf¨þ<éä¼ïàŒÖœ p^Û*F~é®Ò'üvºp^Û*F~é®Ò'üvºŠµúìˆÕñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513execwith_wget20ÜS7[AIF¬•pd± (ýàÍU]ôBc’º¢zóÊÂâŒ@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ŠµúìˆÕñ‹+aue_readª hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýÙW"´š@&™Û6^g¿\äŒ0°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ŠµúìˆÕñ‹+aue_lseek”hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýp`¨¶F~é®Ò'üvºÌ`J¾QF~é®Ò'üvº°äÿ§®]vRS<„äB±ŠµúìˆÕñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýF¬“YýëM®Žr‡Þ;—ôæŒ$°œ `J¾QF~é®Ò'üvºp`¨¶F~é®Ò'üvºŠµúìˆÕñ‹+aue_fork +arg_pid1574hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1574ppid1282execbash20ÜS7[AIF¬•pd± (ýÓùíYݲ@šŠÿUSÊ6&6èŒÖœ p`¨¶F~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ŠµúìˆÕñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255return_value0ppid1513execbash20ÜS7[AIF¬•pd± (ýz“I&šC0¡ömhnyêŒÖœ p`¨¶F~é®Ò'üvºläìâx×YQ—xÐ1YOÊ/bin/sleep'ìAzX™¦}˜¹(/libexec/ld-elf.so.1ŠµúìˆÕñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLinesleep 1ppid1513execbash20ÜS7[AIF¬•pd± (ým‘/“®OMO˜ÉŽJý0Ö?ìŒ<Öœ p`¨¶F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confŠµúìˆÕñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýî¿ê;æ;O>‰…G”ügWîŒ@Öœ p`¨¶F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ŠµúìˆÕñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÜ-Þ'tA†ø"¢‘'ðŒÖœ p`¨¶F~é®Ò'üvº‰oý©äÇU¤©A)Eǹ ŠµúìˆÕñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýp}ófÃìEì—_TJaßòŒ<Öœ p`¨¶F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsŠµúìˆÕñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýýãV°ÏF]€¯ÎBûÛ}ôŒ@Öœ p`¨¶F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âŠµúìˆÕñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýH=|“!“Fû©|pù Ê{öŒ@Öœ p`¨¶F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âŠµúìˆÕñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýÃåÇ„?D‹àStr-ñøŒÖœ p`¨¶F~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âŠµúìˆÕñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýš™µpvHⱕ ¼ØúŒ<Öœ p`¨¶F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7ŠµúìˆÕñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýLë?«E—¡¨€3ù¿ËüŒ2Öœ p`¨¶F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠµúìˆÕñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý©ÞæĹFÕõ–Rd¤RþŒ2Öœ p`¨¶F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠµúìˆÕñ‹+aue_mmap€À£ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý¿ê¼c9Fy‚¸_Šþ€2Öœ p`¨¶F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠµúìˆÕñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý‹ ÈJøHL܆Æf8Ò +‚2Öœ p`¨¶F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠµúìˆÕñ‹+aue_mmap€€¤ arg_mem_flags['PROT_READ']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýò#Æõ§ŸF‡¨*³:>¨„2Öœ p`¨¶F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠµúìˆÕñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý}ã>AÀnGD¨œð$è†2Öœ p`¨¶F~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œŠµúìˆÕñ‹+aue_mmap€€ã arg_mem_flags4['PROT_READ', 'PROT_EXEC']&arg_mem_other_flags['MAP_PRIVATE']hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý뽊ðî®ÿF¦åŒóŸ¦_:Öœ p`¨¶F~é®Ò'üvºŠµúìˆÕñ‹+aue_mprotect +arg_mem_flags['PROT_READ']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ýqÀ0#¡gH>Õ‹Ajá’0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+aue_lseekàÄ’hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ·ö€œBIŒd-xŽ +E– ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+20ÜS7[AIF¬•pd± (ýÑ$'AN™êhµ Ãp”@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýªNè·µPD𭤕c"½»š ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+20ÜS7[AIF¬•pd± (ýÝ'I)ĈBÊ¡ô²ËãT¼˜@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý• + É?M–¶>ØúHxKž ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+20ÜS7[AIF¬•pd± (ýɵPTFʨýÔ™h¤¾œ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹¹$ÛàÆCàŠÛˆ.99q¤¢ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+20ÜS7[AIF¬•pd± (ýÊB³þA^…C'H[6 @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýúÒ „ÓK˜‡päk‰j¥ï¦ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+20ÜS7[AIF¬•pd± (ýºUŸ%|EL²I×HŸÅyP¤@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#Šx̆Dʯ^Âw*„gª ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+20ÜS7[AIF¬•pd± (ýz¯öÅÿŸBd—u¤á+X¨@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýè*ÆòI¬?øq¶M¬:‚œ Ê +ÙKFzé®›'üvºà²ñ£ŒÕñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹¯ núžEЋHûp0%ü®@þž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V à²ñ£ŒÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçÂK´8.F߯køõ›[°@þž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<õÚÊNóXUè;èX²@þž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+aue_preadêLhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðçvŽM_­üá~ÏÊ‚b´b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºà²ñ£ŒÕñ‹+aue_writeÔMhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~~¬eÙF»à»¥êÿ Ÿ¶bþž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áà²ñ£ŒÕñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýïˆûŽ¯¡D§“8wj(R3¸@þž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V à²ñ£ŒÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(ðdÌ$D…¬ó>3|K¼º@þž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×bc:|OK—4»}’»º¼@þž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+aue_preadò>hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýµä/ó_Oâ’bqÿní-s¾b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºà²ñ£ŒÕñ‹+aue_writeÜ?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýË-Ùq‰ÑA1»CvØJqÀbþž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áà²ñ£ŒÕñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖGêk· M ˆŒ]4fÿÂ@þž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V à²ñ£ŒÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ôAº°[K̬ۉ “r1ŽÄ@þž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýX±«ÜûÉFå—X<<’À±#Æ@þž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uà²ñ£ŒÕñ‹+aue_preadšOhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýªÞ*‡B¤¬û‚Ô ®íáÈb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºà²ñ£ŒÕñ‹+aue_write„PhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?ÀâôFNóŸöºþh’~¾Êbþž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áà²ñ£ŒÕñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ¬—4-Fî­£ÍNŠ&ò=Ì@þž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V 챃­ŒÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýº MÕ½KGÁ“b£”ö—ÕÎ@þž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U챃­ŒÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ¦wVÝDS¨k3 \º.Ð@þž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U챃­ŒÕñ‹+aue_pread¬?hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_øj“5VH-‹þú í]íÒbþž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á챃­ŒÕñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!¿9¾¢³Ki&Íeë7pÌÔ@þž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V 챃­ŒÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%\žcOÆ“æP« +•wõÖ@þž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U챃­ŒÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥¬ô™øJB‹¬Ì Á ÒHØ@þž Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U챃­ŒÕñ‹+aue_preadüJhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}¤)kPL!–P$d.µWÚbþž Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á챃­ŒÕñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(aL]ÜF ŒÇÄýàuãÜ@þž Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V 챃­ŒÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\¸¼óúIÆ£¡à‡úK³·ÞJþž Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºì±ƒ­ŒÕñ‹+aue_sendtoà +ret_msgid +17371hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|æ {Ù¼M; ±ïLà àDê› µ dôFzé®{'üvºµ CjFzé®{'üvºì±ƒ­ŒÕñ‹+aue_recvfromà ret_msgid +17371hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¦ß¡´ ¼I`…²ê»Y8EOâbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK챃­ŒÕñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý‰[iÊÊII–N³H‹¾¦ùäD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºì±ƒ­ŒÕñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³Å¬c;Hˆ¾ýlû«æD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºì±ƒ­ŒÕñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcpŠâÎI¾·(­PBèb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºì±ƒ­ŒÕñ‹+aue_write–@hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:|0ÒÉdI‡¡x¬gÙ=ÀÈêD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºèç®ÓŒÕñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®ŒûŠšÇjêFþ¤r›ó!8™4ìD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºèç®ÓŒÕñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýã….YGI!å‡<± Ìîb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºèç®ÓŒÕñ‹+aue_writeæKhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™;ÓcBK5¼\•Á‘e›@ðD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºèç®ÓŒÕñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýu£>ÚJ@´±ùtºnº»ò0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈÄéÕñ‹+aue_lseekð™”hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý?‚Zô½Ar·!²h ›:úôÖœ p`¨¶F~é®Ò'üvºp`¨¶F~é®Ò'üvºÈÄéÕñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1513exec +sleep20ÜS7[AIF¬•pd± (ý˜€‹È¶àL7‰š#6Êê+ùö@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ÈÄéÕñ‹+aue_read$hostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýÏ +ÿKNáƒi0È*¾øb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯ÈÄéÕñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýü™=!àC6§ž(q Úúb°œ `J¾QF~é®Ò'üvºí( ö~R¶ ~{‚~¯ÈÄéÕñ‹+aue_write +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd1ppid1282execbash20ÜS7[AIF¬•pd± (ýrGnÆ–)F秥¦Ü¢@ü@°œ `J¾QF~é®Ò'üvº¥µîgµÑUµg¨eµÑc'ÈÄéÕñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd255ppid1282execbash20ÜS7[AIF¬•pd± (ýǼÄA–§¼·ÖÝþ°œ `J¾QF~é®Ò'üvº`J¾QF~é®Ò'üvºÈÄéÕñ‹+aue_exithostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1282execbash20ÜS7[AIF¬•pd± (ý«9Øj=MꌖÉÁ³€Ž"–œ ×µ¨Fz鮩'üvºÈÄéÕñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1281execbash20ÜS7[AIF¬•pd± (ý˜†‡«£J‚±–gˆx (‚Žb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ÈÄéÕñ‹+aue_writedhostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýÀ˜÷‹:XDî³E«ý5®ç„Ž@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eøÁ¢÷–Õñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý„²zöNšK‚»2‘¶÷lʆŽJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøÁ¢÷–Õñ‹+aue_sendtoÚ +ret_msgid +17372hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýo55É›ô@Œž7¿‘hˆŽJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøÁ¢÷–Õñ‹+aue_sendto˜ +ret_msgid +17373hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýV†‚÷ÃëAp‹¡ +‹9%ŠŽJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøÁ¢÷–Õñ‹+aue_sendto¬ +ret_msgid +17374hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÄÔè4óD£™¬+º®TŒŽJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøÁ¢÷–Õñ‹+aue_sendto˜ +ret_msgid +17375hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý4õÀ.}¯F’—¬®ÍÉE¹ÃŽŽDê› µ dôFzé®{'üvºµ CjFzé®{'üvºøÁ¢÷–Õñ‹+aue_recvfromÚ ret_msgid +17372hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýjžtE†K4ž ²ÌslmÍŽDê› µ dôFzé®{'üvºµ CjFzé®{'üvºøÁ¢÷–Õñ‹+aue_recvfrom˜ ret_msgid +17373hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý2®÷߶Mç«cÞEJÏ–’ŽDê› µ dôFzé®{'üvºµ CjFzé®{'üvºøÁ¢÷–Õñ‹+aue_recvfrom¬ ret_msgid +17374hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý›Òí*EG†WÍ[ÚA锎Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºøÁ¢÷–Õñ‹+aue_recvfrom˜ ret_msgid +17375hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý /ü4²pGÕ»_LCk÷4k–Ž0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸»¬˜Õñ‹+aue_lseekü¸”hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAÙŠwIM!…‡ C™–„˜Ž0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+aue_lseekü¸”hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢³ø±YŸJE¾X‰·UËßœŽ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+20ÜS7[AIF¬•pd± (ýýî LcA{­Ö°6úiߤšŽ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€Ëu +àßJÖŸÑm†îp Ž ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+20ÜS7[AIF¬•pd± (ýG×íÊbLã­ªG2yÏ…ÛžŽ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;/ÕÜýD@‚ƒTCË4¤Ž ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+20ÜS7[AIF¬•pd± (ý~‘Ò…M×—É×=•(jÈ¢Ž@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýaMC¯æãBÐWoýÐÃ𨎠‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+20ÜS7[AIF¬•pd± (ý,‘{Cä¡G ’ÛÛŸ‰½ 年@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýlÓ8ßB°Ç˜ÒÛ¬ÉÙ¬Ž ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+20ÜS7[AIF¬•pd± (ý°Xšü‚O£·Ñd¤6Œ?°ªŽ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·æ ìƒGʉãÌBcz®Ž:‚œ Ê +ÙKFzé®›'üvºÚÑ¥—›Õñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­Ç>FBž±šm^ÄŸê°Ž@€Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÚÑ¥—›Õñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýík¥0 OÔ¼0¿ `03²Ž@€Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛ¿ãpb%C19\ßÏÔš@´Ž@€Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+aue_pread¦MhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3à@³ÍDº'P:L0X¶Žb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚÑ¥—›Õñ‹+aue_writeNhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýnx• ;ÔM&¬…‡OjB¸Žb€Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÚÑ¥—›Õñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€Oµ›[gNŠ‰/„C§„ÕIºŽ@€Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÚÑ¥—›Õñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“•cüžF,»ñ¡ònÉƼŽ@€Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýš]¿q{_Hû¬Í1þÝ\©©¾Ž@€Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+aue_preadØChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀ†äXKц­… Æš…&ÀŽb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚÑ¥—›Õñ‹+aue_writeÂDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·#SAø—D>7ÞãÂŽb€Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÚÑ¥—›Õñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýy8• Fð·ŠÜJ©žøÄŽ@€Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÚÑ¥—›Õñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~WÈ5!»Ah‚{=t°QÖÆŽ@€Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýütˆé'Hœ´4B-0ålÈŽ@€Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+aue_preadúChostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZÀÈS¡ŠDÚ„ÓÇ+«Ù8´ÊŽb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚÑ¥—›Õñ‹+aue_writeäDhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU<Ä®½CÏŒ¹æ*är4ÁÌŽb€Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÚÑ¥—›Õñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆ –<-Aç¡£]é³&fdÎŽ@€Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÚÑ¥—›Õñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýN?ç›Lxžø\Ûp¢IRÐŽ@€Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøÑà/ºLF¸wˆø]·lÒŽ@€Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚÑ¥—›Õñ‹+aue_pread„hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýsG}×rBצØuWl)ÔŽb€Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÚÑ¥—›Õñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢ÚÅÉO[žhº]9ªúÖŽ@€Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÚÑ¥—›Õñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýz.·›ÄKøˆäøÖ7ØŽJ€Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÚÑ¥—›Õñ‹+aue_sendtoà +ret_msgid +17376hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýBW3RûºAò¹ +- dgÚŽDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÚÑ¥—›Õñ‹+aue_recvfromà ret_msgid +17376hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¹˜i3vgIv‘ó*¿˜È§,ÜŽbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK ö¯ ›Õñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýú3Ž3<ˆ@u§Ñ¶¢™ˆ®ÞŽD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº ö¯ ›Õñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`˜JëÈÖN¡¬ËK5K$ÜàŽD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº ö¯ ›Õñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,hË^Dß‹ØëyÓFäiâŽb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº ö¯ ›Õñ‹+aue_writeîhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“{´!t_H +ˆ“U/…?äŽD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÂÌâÆ›Õñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«sþ>¹K†„_Ô! `¿NæŽD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÂÌâÆ›Õñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿi)JðMª KêΈpÕèŽD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÂÌâÆ›Õñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«ñXXÔ A-¿R§r~*‡êŽD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÂÌâÆ›Õñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•UƒN×™J“1Ãï¬yìŽD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÂÌâÆ›Õñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYz«òaK“¤:òöÝC|ãîŽD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÂÌâÆ›Õñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆÝøtkL¥°÷>;É«¸“ðŽ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°Àå‚ Õñ‹+aue_lseekâñ”hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜úæ’.H «‚Ì~BãÐòŽ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UâõÖ¼§Õñ‹+aue_lseek¸÷”hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜÏ +½þ@ë½ðfˆü§ÖêôŽ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UΓ©ŠªÕñ‹+aue_lseek¸÷”hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýrÈY½Ç@3»êüÏøŽ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UΓ©ŠªÕñ‹+20ÜS7[AIF¬•pd± (ýÜdŽ?ZºEgðîJO»?öŽ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UΓ©ŠªÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýk¢08¦÷Mظ”5ׄêüŽ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UΓ©ŠªÕñ‹+20ÜS7[AIF¬•pd± (ý^8fCߣˆ³~úŽ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UΓ©ŠªÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\× ©%?Gò–Ô +Ã$“I€ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UΓ©ŠªÕñ‹+20ÜS7[AIF¬•pd± (ý‚«„ÐècBŸŒ%ì·iìEþŽ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UΓ©ŠªÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýE"eö‚Co½m^ôßA‚:‚œ Ê +ÙKFzé®›'üvºÎ“©ŠªÕñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€Ï¢ADüØ+†Iu}D„@‚Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Γ©ŠªÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤¢:Ef¹˜wÛmL†@‚Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UΓ©ŠªÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏ Pʾ³L(¤7x„À%œÉˆ@‚Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UΓ©ŠªÕñ‹+aue_preadÞ8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸0Z[I0­³œ•k‰RŠb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎ“©ŠªÕñ‹+aue_writeÈ9hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏž$ªÀˆLí¹¦«&( ˜°Œb‚Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áΓ©ŠªÕñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqÌ:4àMÀŠ%&ÄÒérŽ@‚Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Γ©ŠªÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑçaf>%Iq‰dB+œyF·°úÙøTd‘–b‚Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áΓ©ŠªÕñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýv‚ lN„|4ʸe˜@‚Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Γ©ŠªÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬¼ü5õnÅÈ‹Nd™™¯‘ÑÒšJ‚Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÎ“©ŠªÕñ‹+aue_sendtoà +ret_msgid +17377hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQ–¼=yFC5…ž©‘©½NœDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÎ“©ŠªÕñ‹+aue_recvfromà ret_msgid +17377hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýY¡¡4$üJŸ•s YÇðžbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKΓ©ŠªÕñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÍËœ´âM™ÿ¨[Õ;‘‘ D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº’ãø“ªÕñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýï´eŒãCA©ø´¤ê¬Ú¢D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº’ãø“ªÕñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýlìN›‹6@k¢nÎȤD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº’ãø“ªÕñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]¼]òÕIG¼•dY/ùik¦D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº’ãø“ªÕñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘vh†AˆŠ}IAbMŠ¨@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eà⥤­Õñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýËQ/»mN"˜×t‡:ªªJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºà⥤­Õñ‹+aue_sendtoÚ +ret_msgid +17378hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý‘Q»6•EηzUøÄí-z¬JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºà⥤­Õñ‹+aue_sendto˜ +ret_msgid +17379hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýFýü»tOº¯AFrRñŸ®JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºà⥤­Õñ‹+aue_sendto¬ +ret_msgid +17380hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÔ÷? ¢@B¯Œe.‡F,°JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºà⥤­Õñ‹+aue_sendto˜ +ret_msgid +17381hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¦¾:ƒJ¾‘{Pkâ²Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºà⥤­Õñ‹+aue_recvfromÚ ret_msgid +17378hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý™êܱOTˆ)€:cÈs´Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºà⥤­Õñ‹+aue_recvfrom˜ ret_msgid +17379hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýpJBÒç–D£´zØŸÅZø¥¶Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºà⥤­Õñ‹+aue_recvfrom¬ ret_msgid +17380hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýI„ùAËoN ­¦$ÿ±×M¸Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºà⥤­Õñ‹+aue_recvfrom˜ ret_msgid +17381hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý,°8‡¹I ‘8‡‡c¬*º0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U蕯‰¯Õñ‹+aue_lseekð©•hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýFM|ˆ/LO2¸Ôí}³Çuà¼0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uæ€Í¶Õñ‹+aue_lseek¯•hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYÍ–™˜Cû$B»@²ý;¾0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uò ôý¸Õñ‹+aue_lseek¯•hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûL™®ÙHGV…ò6zz…¶Â ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uò ôý¸Õñ‹+20ÜS7[AIF¬•pd± (ýª¨„ÅVûC»¶D~º’°©À@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uò ôý¸Õñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/øÊ¢7@›º+ ¯à9)Æ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uò ôý¸Õñ‹+20ÜS7[AIF¬•pd± (ýuƒÐÁ¹ÙFëº'a +¼åÉÄ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uò ôý¸Õñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎ,¸Â=Fs“ܦNÄÊ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uò ôý¸Õñ‹+20ÜS7[AIF¬•pd± (ýŒŠÿ K+½ +]WޕŬÈ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uò ôý¸Õñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýpè‡ÀDLη¨bO9 +hÌ:‚œ Ê +ÙKFzé®›'üvºò ôý¸Õñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýHÃÙ‡ÆL÷€Vß•tèÎ@„Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ò ôý¸Õñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[…çH{àHEQÞÆpÕ†»Ð@„Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uò ôý¸Õñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒ£4w}&Bl™z:©Q£ë£Ò@„Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uò ôý¸Õñ‹+aue_pread°2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®¿;v/Nǃd¾ïçØѳÔb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºò ôý¸Õñ‹+aue_writeš3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý™½€ û²CQ°>²Ï£Ï =Öb„Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áò ôý¸Õñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉÕ„™øK;ª¸êà×â2Ø@„Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ò ôý¸Õñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤Gäz@ð¨°ÝŸÖÎÐEÚ@„Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uò ôý¸Õñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#½l±®ÄE¶‘žƒñªÄ‡Ü@„Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uò ôý¸Õñ‹+aue_preadÊhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^‹/fcËJ‡³½IâÓNÞb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºò ôý¸Õñ‹+aue_write´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý °D„q¦B¨¨â¥‹¨ +¥Êàb„Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áò ôý¸Õñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýN\wu®°L2®A!É-Pmâ@„Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ò ôý¸Õñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²~äcOa‹èFƒ×ÝèäJ„Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºò ôý¸Õñ‹+aue_sendtoà +ret_msgid +17382hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎ?,zõ®DCŠX$Áûç8• ’†0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uüõ­ÜÅÕñ‹+aue_lseekôç•hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýû8ØhÚKɵ#<®Â㋈0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊæððÇÕñ‹+aue_lseekôç•hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3EE\Ö]HŸ³}îXØïÙ/Œ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÊæððÇÕñ‹+20ÜS7[AIF¬•pd± (ýû=xPú¤A[±öù¦ŽOµAŠ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊæððÇÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;ÌŠìÄJ’{WàNƒd  ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÊæððÇÕñ‹+20ÜS7[AIF¬•pd± (ý=‘!:'JM„)Å‹ÔlŽ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊæððÇÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/$hÊ¿`J#€jåÛ×Bu” ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÊæððÇÕñ‹+20ÜS7[AIF¬•pd± (ý "÷gB¶‚È{dŸ.È’@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊæððÇÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýmŽ +]k{Fº@E» –öX–:‚œ Ê +ÙKFzé®›'üvºÊæððÇÕñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxhÿ2>ŒOè°Ä}d¬NÞ˜@†Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÊæððÇÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}í›ßIÍCļ¶c›à…š@†Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊæððÇÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬ýµ°iK›ÖX²K$H`œ@†Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊæððÇÕñ‹+aue_preadÚ%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#rQ:-5A¥¦æjeÚCšžb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÊæððÇÕñ‹+aue_writeÄ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙ8OÌF—¿ä¦„ÿ]Πb†Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÊæððÇÕñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûšõ’ßDEˆœY°ò‡äú¢@†Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÊæððÇÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒß…O†›#K“¹¤@†Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊæððÇÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·Îærˆ@j·wñ럦?¦@†Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊæððÇÕñ‹+aue_preadÈhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýHµIÚI䃜‚ 1Ú¨b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÊæððÇÕñ‹+aue_write²hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcÂl§ErIؘ­Á¥29ªb†Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÊæððÇÕñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýfù©f)ËHtšÒÐhÌõ;¬@†Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÊæððÇÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI ™“OIÀ\Hã®J†Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÊæððÇÕñ‹+aue_sendtoà +ret_msgid +17387hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÔbë‘üH¦ÿ0Ç…¦Þ°Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÊæððÇÕñ‹+aue_recvfromà ret_msgid +17387hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý•ZŒý#(H›W™sçîIJbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÊæððÇÕñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÛ&4[óC ¡ˆNXbû|´D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºôêºúÇÕñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆÿKL½¨ÐÉ„gÒ¸¶D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºôêºúÇÕñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýl²¢¾1Jx·“• TÅ”¸D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºôêºúÇÕñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýý7­ïÛI¬ 9r´µÓºD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºôêºúÇÕñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁÅî +ØË@‡™È¯¬fV¼0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U榩ÍÕñ‹+aue_lseekæ–hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõ_­ LC­¦{\S“N‡L¾0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÊŒÍìÔÕñ‹+aue_lseek¼“–hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý KxJáC@z¿|¢Ànt}À0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†¢®äÖÕñ‹+aue_lseek¼“–hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýq¶ô"¤ßBDª(‚}©º˜Ä ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†¢®äÖÕñ‹+20ÜS7[AIF¬•pd± (ý_VÁ.âØC,†òýNÚ8ˆÂ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†¢®äÖÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬¼ûÔ%-ù—ÛK´¦°DºT—?È ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†¢®äÖÕñ‹+20ÜS7[AIF¬•pd± (ý?út÷G#D¸íáÑúí¾yÆ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†¢®äÖÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥'lù=I³±³K£²›4ˆÌ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†¢®äÖÕñ‹+20ÜS7[AIF¬•pd± (ý¥»Q©o”A{‘wª8¹C.Ú@ˆŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V †¢®äÖÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚXŽë5ZN%ŽVEÃεÏÜ@ˆŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†¢®äÖÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÿ‚…‡A¾IÂŒo 9ï\Þ@ˆŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†¢®äÖÕñ‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•Ù-VÙÌJ|ƒ°yò¶VÛWàb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº†¢®äÖÕñ‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝOFƒpLцk2Ï]yRèâbˆŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á†¢®äÖÕñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýùÀöz¶KFC±×ó>“´eä@ˆŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V †¢®äÖÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýô¦ÜúæÊDÛ¤æ˜FµÉÝæJˆŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº†¢®äÖÕñ‹+aue_sendtoà +ret_msgid +17388hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬ Æü­qG›‰–%èÓ5ÅüèDê› µ dôFzé®{'üvºµ CjFzé®{'üvº†¢®äÖÕñ‹+aue_recvfromà ret_msgid +17388hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÞÍÀ)%äIB›4)hr°Âêbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK†¢®äÖÕñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý8£!Ñ(éW$žáYI’‘ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¾†‹ØåÕñ‹+20ÜS7[AIF¬•pd± (ýÏrGê’Ì’H?(ä‘@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾†‹ØåÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý° æ°EqFh‡óÌ@JG–‘ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¾†‹ØåÕñ‹+20ÜS7[AIF¬•pd± (ý8œ(œŸ0M&‚¦æa= º‰”‘@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾†‹ØåÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<‰ecDa¿àiK‹y˜‘:‚œ Ê +ÙKFzé®›'üvº¾†‹ØåÕñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZµGGeN9¶ß:wÇ°”jš‘@ŠŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¾†‹ØåÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8á’yŽKåhÂcyxlpœ‘@ŠŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾†‹ØåÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€Áx«éNŸ©ëC÷eí@Xž‘@ŠŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾†‹ØåÕñ‹+aue_pread´2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*(>mKç¶Y«I1 ‘b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¾†‹ØåÕñ‹+aue_writež3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýX«l^eL@ˆíÞòv¡l¢‘bŠŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¾†‹ØåÕñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘¸ºÈÍzN±Þûh[‡¯º‘D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠš—áåÕñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅz|j,OÀÕéƒÍq¼‘D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠš—áåÕñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦ Ø‚ÈGõ¡ÛýÌ­°KH¾‘0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈõ¥ÉëÕñ‹+aue_lseekÎñ–hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖ`ºKw«UZgh×ôÀ‘@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¨Ì¬«ðÕñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýð«ýIcLaºÀó-›%%‘JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¨Ì¬«ðÕñ‹+aue_sendtoÚ +ret_msgid +17394hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýõȯ??Có­´ô +ò½‹Ä‘JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¨Ì¬«ðÕñ‹+aue_sendto˜ +ret_msgid +17395hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýg­ÏŒ×üO‡÷V„– !Æ‘JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¨Ì¬«ðÕñ‹+aue_sendto¬ +ret_msgid +17396hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý³!›j C.€ã~_Ø÷È‘JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¨Ì¬«ðÕñ‹+aue_sendto˜ +ret_msgid +17397hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý,ÀîuôGA<¯ø]LƸÊ‘Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¨Ì¬«ðÕñ‹+aue_recvfromÚ ret_msgid +17394hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¸~£5sF‚x™Ä,Ó1Ì‘Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¨Ì¬«ðÕñ‹+aue_recvfrom˜ ret_msgid +17395hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýñc{&îN“ƒž†F_‡~ΑDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¨Ì¬«ðÕñ‹+aue_recvfrom¬ ret_msgid +17396hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¼”­ãìIÝ–‡²?ŽïKFБDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¨Ì¬«ðÕñ‹+aue_recvfrom˜ ret_msgid +17397hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýéœ#[ªBº&½d”³çÒ‘0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖ« ŒóÕñ‹+aue_lseekŠ„—hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡ toÚ B3£=Fÿ%ÞæÔ‘0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ¿°ËôÕñ‹+aue_lseekŠ„—hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚeº×&L&˜bDiñMØ‘ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÔ¿°ËôÕñ‹+20ÜS7[AIF¬•pd± (ýºËJ¿æNQ¨\›ªœbÖ‘@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ¿°ËôÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹­7©í1I7´Õ±áVEÜ‘ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÔ¿°ËôÕñ‹+20ÜS7[AIF¬•pd± (ý<¼óŠM¸žu²ÝïxJÚ‘@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ¿°ËôÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@ï˺òI!ŽÙU”ß·¹à‘ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÔ¿°ËôÕñ‹+20ÜS7[AIF¬•pd± (ý I¼&ËYHïŽÍºäƨޑ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ¿°ËôÕñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘ûÑ%f«KÝ ítä¿Äâ‘:‚œ Ê +ÙKFzé®›'üvºÔ¿°ËôÕñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$¾µ¦?HN¿Uþ +œåñä‘@ŒŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ô¿°ËôÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýl(ü^k€Ho¯·\%f,Óæ‘@ŒŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ¿°ËôÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓªp´žHÛ¤[i-D`è‘@ŒŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ¿°ËôÕñ‹+aue_preadú%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËXœ‡K꡶rßnê‘b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÔ¿°ËôÕñ‹+aue_writeä&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿€•}mHdª´Ó¸rôO°ì‘bŒŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÔ¿°ËôÕñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýB/”Æ€¶KX‹b4P—ÂÝžî‘@ŒŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ô¿°ËôÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'Z†JíKŒDiy1€b—ð‘@ŒŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ¿°ËôÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬ÒüÉKAÞíEG‘Oã­DŸò‘@ŒŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÔ¿°ËôÕñ‹+aue_pread´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀÙ:%§G<¶œHo>i‡ô‘b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÔ¿°ËôÕñ‹+aue_writežhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýj))ݬJmƒLFgßå@¶ö‘bŒŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÔ¿°ËôÕñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†ç:vG¾•gB„ø‘@ŒŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ô¿°ËôÕñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤§`š6H뽤Ä”Ywãú‘JŒŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÔ¿°ËôÕñ‹+aue_sendtoà +ret_msgid +17398hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñÊËF¾A³ŽŠ1ôÖqCü‘Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÔ¿°ËôÕñ‹+aue_recvfromà ret_msgid +17398hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýƒ(&¦ÞDB¼ÐhÀÚDþ‘bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÔ¿°ËôÕñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýŠ¯=½ŸÚMîј˜XsP€’D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÔ¿°ËôÕñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ývøêâJóœZ5Û3üR‚’D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÔ¿°ËôÕñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓÞRä?HŽ¡CÈÁ 7Úa„’D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¾¥•ÕôÕñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýsÚäæ0ZB +¯^µ‹Òü«f†’D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¾¥•ÕôÕñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýp@„ËóSDܳˆ6>ðiÞ3ˆ’0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¬ßøØúÕñ‹+aue_lseek”ª—hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅ! +ÎáBòœ^'s8‹nŠ’0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶£¨œ‚Öñ‹+aue_lseek诗hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýoâ‘<E¼¾$5þ‚–Œ’0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²æ½¾ƒÖñ‹+aue_lseek诗hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýPvÞG\¯ÿ=z–d¿—’ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²æ½¾ƒÖñ‹+20ÜS7[AIF¬•pd± (ýÌRÉGHl‘¬Í-ï}MŽ’@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²æ½¾ƒÖñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýB-™ñ`¡IžÐ¼¡9wT”’ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²æ½¾ƒÖñ‹+20ÜS7[AIF¬•pd± (ýÄ c7O“šèãMËþ Z’’@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²æ½¾ƒÖñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶Ï& +ÜgI½¡†"µ=òi˜’ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U²æ½¾ƒÖñ‹+20ÜS7[AIF¬•pd± (ý[ÇŒaHá Ã$×î÷ùy–’@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²æ½¾ƒÖñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©Ù…BR-Eîš¼Jô&Bš’:‚œ Ê +ÙKFzé®›'üvº²æ½¾ƒÖñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­€L©D/ÀâÍyœ’@ŽŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ²æ½¾ƒÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýi£@+&·Gð¿(I§£˜Êž’@ŽŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²æ½¾ƒÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýØYÍ3gßBÕ j-Ÿ€ ’@ŽŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²æ½¾ƒÖñ‹+aue_pread‚&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýö®èÙ O;½¨³¼§’Ùu¢’b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº²æ½¾ƒÖñ‹+aue_writeì&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*h[&¬¯@f›ÿHIëe¤¤’bŽŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á²æ½¾ƒÖñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;t±TD_Š‰¨@š¼Q¦’@ŽŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ²æ½¾ƒÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýTâê& ^B ”CÊkµÊŽC¨’@ŽŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²æ½¾ƒÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU#ÉÅ4òO׶²&WSx‚ª’@ŽŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U²æ½¾ƒÖñ‹+aue_preadÌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢žzÞÓLÚ·Û@ 1w.¬’b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº²æ½¾ƒÖñ‹+aue_write¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•ÉœìBq [“`Ošt®’bŽŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á²æ½¾ƒÖñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýK‹uzzjL߈8Îlø ø°’@ŽŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ²æ½¾ƒÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$ÇTEFölVjÂ<=²’JŽŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº²æ½¾ƒÖñ‹+aue_sendtoà +ret_msgid +17399hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŒrךÿ„J%=–Ýi/Å›´’Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº²æ½¾ƒÖñ‹+aue_recvfromà ret_msgid +17399hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý³ÚQu Iñ‡@5糎¶’bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK²æ½¾ƒÖñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý‘Ó°FDç­(ÓIdµ×ô¸’D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦„ȃÖñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜…O1µC‹™"´`؉º’D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦„ȃÖñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³„%sÿÛC‚¡d‰l˼’D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦„ȃÖñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýùå×¥§L}Ž¤<# £¿¾’D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦„ȃÖñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ò‹V5VE›Gïö»ž|À’@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eøƒÀ؆Öñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýgëßzÏIÁŒ[;#tIÂÂ’JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøƒÀ؆Öñ‹+aue_sendtoÚ +ret_msgid +17400hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýmKõž_$D…[êÛ8_dDÄ’JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøƒÀ؆Öñ‹+aue_sendto˜ +ret_msgid +17401hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý´NëÍ>Fž™0ë,ö¿Æ’JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøƒÀ؆Öñ‹+aue_sendto¬ +ret_msgid +17402hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýØ4[ê[Osœ¿éšpÈ’JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºøƒÀ؆Öñ‹+aue_sendto˜ +ret_msgid +17403hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýP•ÉÎHºB•!˜–WŽ:Ê’Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºøƒÀ؆Öñ‹+aue_recvfromÚ ret_msgid +17400hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýwyÂÌÁgE,»Ã©t÷*Ì’Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºøƒÀ؆Öñ‹+aue_recvfrom˜ ret_msgid +17401hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý@0‘u×nA¶ølA ÖHxÎ’Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºøƒÀ؆Öñ‹+aue_recvfrom¬ ret_msgid +17402hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý™dŽJö×F—|¿u`Š¥Ð’Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºøƒÀ؆Öñ‹+aue_recvfrom˜ ret_msgid +17403hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýG\ˆÑZdJ÷¨x¾0ÁŒÞÒ’0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UìÍé‰Öñ‹+aue_lseek â—hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»ÄU%Ž@É€AÓ£Xæ½Ô’0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ô¼¬‘Öñ‹+aue_lseekøç—hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþ‚XßKHG ¡ '‹I: +Ö’0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UøÍé±’Öñ‹+aue_lseekøç—hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇ;\¡4òF““®M€òÕBÚ’ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UøÍé±’Öñ‹+20ÜS7[AIF¬•pd± (ýzàê¼v3G«¾nõå_ýAÅØ’@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UøÍé±’Öñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾á*$ejC_»7M=xpÞ’ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UøÍé±’Öñ‹+20ÜS7[AIF¬•pd± (ý;lÁ8;¬KƧÿˆíòu«Ü’@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UøÍé±’Öñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýgŲ;üN‡•2Z „à®Óâ’ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UøÍé±’Öñ‹+20ÜS7[AIF¬•pd± (ý÷ stAC}—<ùxeF)Gà’@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UøÍé±’Öñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•á>Á1A’ +¿è—P¤øä’:‚œ Ê +ÙKFzé®›'üvºøÍé±’Öñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýXžNTê=I +¯eÄ›U²ô¨æ’@Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V øÍé±’Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý —VOiKh‘ßC[µFTè’@Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UøÍé±’Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¹¬s8ˆIy–ýAD½‚áê’@Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UøÍé±’Öñ‹+aue_pread°2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýc·¾%@6§ÞØ<†Þì’b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºøÍé±’Öñ‹+aue_writeš3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈ؉À€Eò“>sÌ…¬+nî’bŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áøÍé±’Öñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£”^)*MÜ‹¾ïî=ub +ð’@Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V øÍé±’Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷¥‚5ç@ð¹¨Nª¨ó¨\ò’@Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UøÍé±’Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/ÿ®„øN b5··÷@–ô’@Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UøÍé±’Öñ‹+aue_preadÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýgsÜ ×\Dç’{r¿™—õö’b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºøÍé±’Öñ‹+aue_writeºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqÖ¥9„ÄMjv¨”ˆ“æø’bŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áøÍé±’Öñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^ô°2UkHñšÅb@O+!{ú’@Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V øÍé±’Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)•¢ðá@0·öÿ™K¼ü’JŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºøÍé±’Öñ‹+aue_sendtoà +ret_msgid +17404hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýA§T +þLª­5Ø…"æpûþ’Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºøÍé±’Öñ‹+aue_recvfromà ret_msgid +17404hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÁtånFH +¾,òÚa ဓbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKøÍé±’Öñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¡¿Ìu=[K?›ʶ\†42‚“D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ×½»’Öñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûm¾Ç\D¤¡*Zdbó-„“D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ×½»’Öñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(;µ^!C™€ïÄ ç I†“D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ×½»’Öñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*¡ôçÖíIs‘³zŒ÷ò=ƒˆ“D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ×½»’Öñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•ªŸZ¯>Ja¢H ÒF¢³Š“0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–üø˜Öñ‹+aue_lseek€Ž˜hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýË¢U¡2B¤r¨­ö®žFŒ“@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÂó¤†Öñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýßQµÕëòD‰ÒQ«¾·Ž“JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÂó¤†Öñ‹+aue_sendtoÚ +ret_msgid +17405hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÉb‚\¶L=­¨*”éÆë“JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÂó¤†Öñ‹+aue_sendto˜ +ret_msgid +17406hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýfåà ò#Nlj¤( +5ÿ]’“JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÂó¤†Öñ‹+aue_sendto¬ +ret_msgid +17407hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÿÂ(ÙOè=)7 Z”“JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÂó¤†Öñ‹+aue_sendto˜ +ret_msgid +17408hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýR¥v‹“CYŒª4†`’4¡–“Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÂó¤†Öñ‹+aue_recvfromÚ ret_msgid +17405hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýB$%5ÖÈIðŠo‡Ù[õȘ“Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÂó¤†Öñ‹+aue_recvfrom˜ ret_msgid +17406hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÉ|\oHGr•!ÉÙÒðòš“Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÂó¤†Öñ‹+aue_recvfrom¬ ret_msgid +17407hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýVx±Š!D¼¼ Q=@ÕÇÄœ“Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÂó¤†Öñ‹+aue_recvfrom˜ ret_msgid +17408hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®„üÂøQüìÎAS•ÿæˆ5•ž“0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤Í¨¼ Öñ‹+aue_lseekÀ ˜hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0LŽaNr¹Œéç›Û “0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–”¶¥¡Öñ‹+aue_lseekÀ ˜hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸÀûïb„O¾Ûg3𤓠‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U–”¶¥¡Öñ‹+20ÜS7[AIF¬•pd± (ý”¢šWŒEzŽôtPúŸV¢“@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–”¶¥¡Öñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[IߟRñA<¯aè,·¨“ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U–”¶¥¡Öñ‹+20ÜS7[AIF¬•pd± (ý_™ÆYpÉNxJ×6~^©³¦“@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–”¶¥¡Öñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆè@o±LZ°hÐ|¡Ó({¬“ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U–”¶¥¡Öñ‹+20ÜS7[AIF¬•pd± (ýš”®XywD÷±JxÆ{ª“@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–”¶¥¡Öñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒó þpOîºÕœ +“V7®“:‚œ Ê +ÙKFzé®›'üvº–”¶¥¡Öñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•ú,„®bK`“È%ÂD°“@’Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V –”¶¥¡Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýrÅÆ„ÐMP¯h8䃔ï—²“@’Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–”¶¥¡Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—¦aA™J¡ˆ rÖ¤ü{´“@’Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–”¶¥¡Öñ‹+aue_pread€&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýRNQÝ›Jw²{óq"Ý”¶“b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–”¶¥¡Öñ‹+aue_writeê&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqè}`qCˆ£äî,þÜܸ“b’Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á–”¶¥¡Öñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜E•Š¢N†ÞPKƒIº“@’Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V –”¶¥¡Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’>Uün™F‰®2RYï ¼“@’Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–”¶¥¡Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýkKö`µD’…íC Ø»€¾“@’Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U–”¶¥¡Öñ‹+aue_pread¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýåí»`œGœ¡qñíÁl.ÁÀ“b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–”¶¥¡Öñ‹+aue_write¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞmÑ¿J¿‹9Ã~ßö“b’Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á–”¶¥¡Öñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýB‘±Ø˜Mù¨wl ƒÚÄ“@’Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V –”¶¥¡Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;ï1G{‘²ËãjúþµÆ“J’Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº–”¶¥¡Öñ‹+aue_sendtoà +ret_msgid +17409hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýø^-;*zF쀃bP繋È“Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–”¶¥¡Öñ‹+aue_recvfromà ret_msgid +17409hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý'ÌþJCM0wŠÃo\=Ê“bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK–”¶¥¡Öñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýQïs\´C±…öïõþ€ÅÌ“D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–”¶¥¡Öñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZŸdM©‘Êr_>8NïΓD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº–”¶¥¡Öñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýgç†4 Aøª`dŒ~·`“ГD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÊ¶û®¡Öñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýd’tàlKEÖ¯í¡}ÎHKQÒ“D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÊ¶û®¡Öñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+=éòFϦƒóãâžGÔ“0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UôÞÑÿ§Öñ‹+aue_lseekÀƘhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(«Hü¤x÷€–¸«}Ö“0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UöªÒ¯Öñ‹+aue_lseekšÌ˜hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„õŸz¾ÄB1Ûëny~2Ø“0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚàǘ°Öñ‹+aue_lseekšÌ˜hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI;jÙí‚H°–#ãìKŒoæÜ“ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÚàǘ°Öñ‹+20ÜS7[AIF¬•pd± (ý +ˆEA­Gs‹“ˆ÷•YZÚ“@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚàǘ°Öñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆvºCO³@ýI8¢é”à“ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÚàǘ°Öñ‹+20ÜS7[AIF¬•pd± (ý±úíJœJÔ¦õkÿ1Þ“@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚàǘ°Öñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýç[ýMkµ;!ûóñ†ä“ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÚàǘ°Öñ‹+20ÜS7[AIF¬•pd± (ýª³¾W“¶Gâó1MH[§Üâ“@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚàǘ°Öñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•`y€ÎCn›]A׬¾¸ºæ“:‚œ Ê +ÙKFzé®›'üvºÚàǘ°Öñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýã¯vr"5AϽáÜåÒ²¡è“@”Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Úàǘ°Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚jÈÞ¢OÉ’·ÎFaK“ê“@”Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚàǘ°Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{0ûOô‡Jʬ ¦¹GQÑì“@”Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚàǘ°Öñ‹+aue_preadø%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýêm–ëZXJ$‰Æ£ßvxËžî“b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚàǘ°Öñ‹+aue_writeâ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«¾ )EIع©"q_›y¼ð“b”Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÚàǘ°Öñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖÖ¸¨|F#…7úF_u0ò“@”Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Úàǘ°Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡Îì$s¤MÚ®ŠˆÇA“µÛô“@”Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚàǘ°Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýô¯îE|‰Q½»&veö“@”Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚàǘ°Öñ‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤ÄÜ’ÛE]¿Ú¼Í¶†Kø“b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚàǘ°Öñ‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý«ÄÉ5½JB£,òZ–æ…ú“b”Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÚàǘ°Öñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(‚wÈHj–)„M‡´¬ü“@”Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Úàǘ°Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýá'ºN¶I‰Bæ7í[Mñþ“J”Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÚàǘ°Öñ‹+aue_sendtoà +ret_msgid +17410hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐw#dNA„j·Öô€”Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÚàǘ°Öñ‹+aue_recvfromà ret_msgid +17410hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý8…6ïAºB±µšNß}Œ>û‚”bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÚàǘ°Öñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýúS™Àï]Esc¨ëé „”D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚàǘ°Öñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶IRé7H¯EØv|\ᆔD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚàǘ°Öñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀ>¿c8TF…¢)ªcËŽIˆ”D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚàǘ°Öñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+Ú)†ˆD,¦·ZfŒ*x–Š”D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚàǘ°Öñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒh.0×B%§˜]ö@”팔@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eúë½²³Öñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý¾YE‘­Kž¦ ]½ŒŽ3Ž”JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºúë½²³Öñ‹+aue_sendtoÚ +ret_msgid +17411hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýˆF}ô +ºAiŒìëtm´”JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºúë½²³Öñ‹+aue_sendto˜ +ret_msgid +17412hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý£€b‹ëwJ»·Q'«4'ù’”JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºúë½²³Öñ‹+aue_sendto¬ +ret_msgid +17413hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÝ=úHwGh¸!ÚfA#Y””JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºúë½²³Öñ‹+aue_sendto˜ +ret_msgid +17414hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý$ èÄŸ«E@°ö¢` +(–”Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºúë½²³Öñ‹+aue_recvfromÚ ret_msgid +17411hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÙ+Âp´¤K†€[ü.ê¤iy˜”Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºúë½²³Öñ‹+aue_recvfrom˜ ret_msgid +17412hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý棧ËM •]QãçÌŠ{š”Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºúë½²³Öñ‹+aue_recvfrom¬ ret_msgid +17413hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýȳ8MšŠ‡ŠÒ¤ˆéœ”Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºúë½²³Öñ‹+aue_recvfrom˜ ret_msgid +17414hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý,±¿ÞdNN° ¾W~K¥ž”0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U€Ô¤·Öñ‹+aue_lseekÔþ˜hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜ’í´šK賯/ÅgZ ”0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uš£ÒÒ¾Öñ‹+aue_lseekª„™hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ¬„ ª‚N¢«1¥4ùÚ[¢”0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UœÈ¥Œ¿Öñ‹+aue_lseekª„™hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•–° BM¿4õú§@07¦” ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UœÈ¥Œ¿Öñ‹+20ÜS7[AIF¬•pd± (ýi3Î+–¼Mô²%—X¤2¤”@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UœÈ¥Œ¿Öñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5I>)ã@d¬4錦_ª” ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UœÈ¥Œ¿Öñ‹+20ÜS7[AIF¬•pd± (ýÆÕœÿ?C;…êI“‘ñÿw¨”@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UœÈ¥Œ¿Öñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓBpÒÚÙD¿•¹\¨,ÚwH®” ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UœÈ¥Œ¿Öñ‹+20ÜS7[AIF¬•pd± (ýp랸šB ”y"=X¬”@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UœÈ¥Œ¿Öñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýaw¦?Ï~@ߘ×6ÍüZnÀ°”:‚œ Ê +ÙKFzé®›'üvºœÈ¥Œ¿Öñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +'?EûfJc¨ï9[¯Ä`²”@–Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œÈ¥Œ¿Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(ŽÍ›©K¨ŒÄáW^ø¦´”@–Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UœÈ¥Œ¿Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×­B´ Fø¢jÐAƒÞz¶”@–Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UœÈ¥Œ¿Öñ‹+aue_pread²2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôTsGYJµ…¯V +?¼´Ü¸”b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºœÈ¥Œ¿Öñ‹+aue_writeœ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ~Bt×ËI)½B‹ßSÕº”b–Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áœÈ¥Œ¿Öñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)¡È0•ÉB‡¦> ºÌW¼”@–Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œÈ¥Œ¿Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¤z—•IàMƒ¾00zÀ˜]ö¾”@–Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UœÈ¥Œ¿Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýPµMÈ‘DÉwb’ö¹@À”@–Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UœÈ¥Œ¿Öñ‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýc°£A¼…ÚWÆñ ¤”b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºœÈ¥Œ¿Öñ‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{”“/ORI©¡ +[-ƒé•yÄ”b–Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áœÈ¥Œ¿Öñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”Çñg…F¬•¶`î©*Æ”@–Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œÈ¥Œ¿Öñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±[߉&Lª=bÆ¿°U>È”J–Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºœÈ¥Œ¿Öñ‹+aue_sendtoà +ret_msgid +17415hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\±S + ŒGö…FbÚz0qÊ”Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºœÈ¥Œ¿Öñ‹+aue_recvfromà ret_msgid +17415hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬êûú?ü?T¸LŠ¾ ¼Ûw(Ì”bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKœÈ¥Œ¿Öñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý–·6˜;ÈKù‡¯ŽÛš¤ΔD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºäÎÉ•¿Öñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍÏ¥STGW·y÷p_s–ËДD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºäÎÉ•¿Öñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZ¡œÂd¹F³ó˜ÒŽÿˆÒ”D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºäÎÉ•¿Öñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉŸ<Ý9Í@ +¾4”MÐAEÔ”D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºäÎÉ•¿Öñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨‹bËDHf‹ò@rç9Ö”0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄÔþŸÆÖñ‹+aue_lseek¶ª™hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýícóŽÇ?JUˆAhi³ÄAØ”@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¸Õ«àÉÖñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÇú$6¶C¦º»0­íqUõÚ”JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¸Õ«àÉÖñ‹+aue_sendtoÚ +ret_msgid +17416hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýo„t¡õnL•G/+!ÞñÜ”JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¸Õ«àÉÖñ‹+aue_sendto˜ +ret_msgid +17417hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýo“pc˜H\žbQÇ%±Þ”JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¸Õ«àÉÖñ‹+aue_sendto¬ +ret_msgid +17418hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýeä¯9·”N-­SŠ®|÷-—à”JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¸Õ«àÉÖñ‹+aue_sendto˜ +ret_msgid +17419hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýáT‰Ȳ@>—£Dùÿ´ â”Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¸Õ«àÉÖñ‹+aue_recvfromÚ ret_msgid +17416hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý-Œ¯ðÊIž{zŽ&ŠrÝä”Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¸Õ«àÉÖñ‹+aue_recvfrom˜ ret_msgid +17417hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý\ƒ—‡]Gw…7ê$ñŒ±ìæ”Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¸Õ«àÉÖñ‹+aue_recvfrom¬ ret_msgid +17418hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý§ùÖ°H÷MOˆ`•xƒÜ·è”Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¸Õ«àÉÖñ‹+aue_recvfrom˜ ret_msgid +17419hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý! »Â´FÚ•ö?Tr?™†ê”0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼ÎôâÍÖñ‹+aue_lseekæ¼™hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýöÚx‹™Du™w㪿€hì”0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº°«ÿÍÖñ‹+aue_lseekæ¼™hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýû6Ƥ{pBH§0™>8cBð” ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uº°«ÿÍÖñ‹+20ÜS7[AIF¬•pd± (ýU˜æ"dJtš×“y²>©î”@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº°«ÿÍÖñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýð:G_|Dâ•úÄã|üô” ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uº°«ÿÍÖñ‹+20ÜS7[AIF¬•pd± (ýÉ +}ÓG<–5ë\Ørò”@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº°«ÿÍÖñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'Ó0¾÷C¥²õº3†?ø” ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uº°«ÿÍÖñ‹+20ÜS7[AIF¬•pd± (ý8Éz];Aþº”ŸSZö”@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº°«ÿÍÖñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýï8‚-C3”έZµÒn‹ú”:‚œ Ê +ÙKFzé®›'üvºº°«ÿÍÖñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞZ¸H®*Kõ¢¬ò‰‘œSü”@˜Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V º°«ÿÍÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +RÍØ’A¬®2;ËxÖ;Àþ”@˜Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº°«ÿÍÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅ–ˆlâM¸d‘Ô1Š´ï€•@˜Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº°«ÿÍÖñ‹+aue_pread„&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚßÜæTµG¤‘‰ ”4ù‚•b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºº°«ÿÍÖñ‹+aue_writeî&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›0g—Û¥Aã°U¤3æʽY„•b˜Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áº°«ÿÍÖñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒ«,³óJ¸¿D3¼Cn÷d†•@˜Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V º°«ÿÍÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½ûÎBM‡JE°L´f˜›Uˆ•@˜Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº°«ÿÍÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñ=Eý)dIê˜!šætŸŠ•@˜Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uº°«ÿÍÖñ‹+aue_pread¨hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýt'Ú™âFGƸßû&zÄŒ•b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºº°«ÿÍÖñ‹+aue_write’hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=k5‘ tJ ´Kz°××v#Ž•b˜Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áº°«ÿÍÖñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’×&èÎL'¶?‚+IÎæ•@˜Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V º°«ÿÍÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘‘‹%’ H£ì)M¯OaË’•J˜Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºº°«ÿÍÖñ‹+aue_sendtoà +ret_msgid +17420hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†ŽCüµ¸Hü¥ÊØÅŸ)¢”•Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºº°«ÿÍÖñ‹+aue_recvfromà ret_msgid +17420hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýŸ€õܱéAžœ»&èÏÜó–•bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKº°«ÿÍÖñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýIçžÿYYKÍ“Á%aTÛÓ˜•D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºº°«ÿÍÖñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†b>gáHݯ€þ'JÚL9š•D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºº°«ÿÍÖñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|„'ä§QF ¿„Ü9lm"œ•D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÒ¡œ‰ÎÖñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýî#8‹4OÞ¨4²}<å·ž•D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÒ¡œ‰ÎÖñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·F£9+Kƒ£™å±=® •0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UЧ¯ÕÖñ‹+aue_lseekââ™hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-ÿûã@ž"ˆ`)(¢•0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÝ°òÜÖñ‹+aue_lseek¾è™hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQ.—npKß­Ó‘Ép&¤•0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÝ°òÜÖñ‹+aue_lseek¾è™hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]ÿc0ò5AD²æHÖ[.¢_¨• ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÎÝ°òÜÖñ‹+20ÜS7[AIF¬•pd± (ý}ŸlæLî¤Ý;ζÔ÷ ¦•@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÝ°òÜÖñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŸd²ŒÕ IöœyÒ T¨ßJ¬• ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÎÝ°òÜÖñ‹+20ÜS7[AIF¬•pd± (ýÎ×ö,÷D.»5„H@y̪•@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÝ°òÜÖñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýO Ù Y¤C%®ŸU¬€Ô<°• ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÎÝ°òÜÖñ‹+20ÜS7[AIF¬•pd± (ýô¹}âFA˜£ZNªÐus®•@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÝ°òÜÖñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾;ììø³E~‰B‚uߤল•:‚œ Ê +ÙKFzé®›'üvºÎÝ°òÜÖñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7cUÀAU„Æ–=8Ä—´•@šŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÎÝ°òÜÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²Ü¢LpGÚ©ýq^F“{£¶•@šŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÝ°òÜÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£ÇV¬ßcH}·P‹”ùÐy¸•@šŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÝ°òÜÖñ‹+aue_preadô%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ãH(ß~G/‡0»<l[º•b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎÝ°òÜÖñ‹+aue_writeÞ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyDƒÀ^bH$‘ŒØ·càY<¼•bšŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÎÝ°òÜÖñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@û$ +ÁM䛑%E¾•@šŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÎÝ°òÜÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]ûëóEzCX²\%+sJœÀ•@šŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÝ°òÜÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý|bÐÝEI)¾õ¢Àû¥0Ý•@šŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÎÝ°òÜÖñ‹+aue_preadÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýEà–ueO泩&»æoóÄ•b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÎÝ°òÜÖñ‹+aue_write¾hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒtÿnMÌ°XŒ©õֳƕbšŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÎÝ°òÜÖñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­—\@÷BW…„a?Ž‹ô"È•@šŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÎÝ°òÜÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°%”%kL°¶Ê¢ÿæƒû±Ê•JšŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÎÝ°òÜÖñ‹+aue_sendtoà +ret_msgid +17421hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýUçšiD N(¥£Á¶áÜ%Ì•Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÎÝ°òÜÖñ‹+aue_recvfromà ret_msgid +17421hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýNsQ'›KKí™ßY³wIåΕbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÎÝ°òÜÖñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¨Æx&@–ƒßOë|A†ЕD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦¹ùûÜÖñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­Äã(]gEš–¿ß±<:€œÒ•D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦¹ùûÜÖñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýD‚‘0XB]­Ì—·4ÓNŒÔ•D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦¹ùûÜÖñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýòø ®„D6‘(³sç‡ËÖ•D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦¹ùûÜÖñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +@ÙÇžF£¯!>z)ËØ•@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e°¸ÜŒàÖñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýVោ}MC#²>ò: ¨³CÚ•JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº°¸ÜŒàÖñ‹+aue_sendtoÚ +ret_msgid +17422hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýñ–Ôú>GˆøŽ6X8êÜ•JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº°¸ÜŒàÖñ‹+aue_sendto˜ +ret_msgid +17423hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý´?;Û»8F¹¿¡¼•Io»ÆÞ•JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº°¸ÜŒàÖñ‹+aue_sendto¬ +ret_msgid +17424hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý%£Ð‘bO‰ò`O‹Õûà•JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº°¸ÜŒàÖñ‹+aue_sendto˜ +ret_msgid +17425hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý™±QGç­œäD³&ªâ•Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº°¸ÜŒàÖñ‹+aue_recvfromÚ ret_msgid +17422hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý'óµÆ3K¡¸Ÿk\O™lüä•Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº°¸ÜŒàÖñ‹+aue_recvfrom˜ ret_msgid +17423hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý´°ù£sEJ‚ž†@Ó}„mæ•Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº°¸ÜŒàÖñ‹+aue_recvfrom¬ ret_msgid +17424hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýB€+­0ƒKÑ’œ)ªˆ 6Eè•Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº°¸ÜŒàÖñ‹+aue_recvfrom˜ ret_msgid +17425hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýfRG´MD¢¬’ö[ØMê•0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uàâ—¿äÖñ‹+aue_lseekøššhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.›ºäÅÆAßµ}ór#q@ì•0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚ¸ÚæëÖñ‹+aue_lseekøššhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõ.í~NƒBÊ‹Í® Çð• ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÚ¸ÚæëÖñ‹+20ÜS7[AIF¬•pd± (ýº…±zJb‚Wòªx?ʵî•@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚ¸ÚæëÖñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýd©@6úAý& Èôã©Iô• ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÚ¸ÚæëÖñ‹+20ÜS7[AIF¬•pd± (ý³|éY":OH€ù[v_¶uåò•@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚ¸ÚæëÖñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAì—%¤vA%”ô)€€Úõ^ö•:‚œ Ê +ÙKFzé®›'üvºÚ¸ÚæëÖñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬´û'éME7Œs?R¾tžø•@œŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ú¸ÚæëÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý`Ž&zìýGœ±ï×^fCú•@œŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚ¸ÚæëÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@} +YŬMg¡$ß-öCˆü•@œŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÚ¸ÚæëÖñ‹+aue_pread²2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷kåë’Nð›O*‹<ɾþ•b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÚ¸ÚæëÖñ‹+aue_writeœ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQûÁyÊIO + äLœßÖ€–bœŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÚ¸ÚæëÖñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒy¶ª³Bp‚ÌŸÙšx‚–@œŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ú¸ÚæëÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¥Saƒ'zEZ˜¤Éhš*$æ„–JœŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÚ¸ÚæëÖñ‹+aue_sendtoà +ret_msgid +17426hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËöɪÚFŸžŽ½+3t܆–Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÚ¸ÚæëÖñ‹+aue_recvfromà ret_msgid +17426hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý9}î®–.D­„ +鲇ň–bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÚ¸ÚæëÖñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý`¢°¢kþK™µN¿GióuŠ–D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶±¢ïëÖñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýD’Ã;N££ŽSÞ»€JŒ–D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶±¢ïëÖñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôüm€#>KΆx®i4ký1Ž–0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”®Ò‚ìÖñ‹+aue_lseekØ·šhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáú7£3LI ¸hzÿ-ÃTñ–0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ±ÈÅóÖñ‹+aue_lseek°½šhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒ¶^£C*?º”âeó’–@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÒ©Û¹öÖñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýM×;ù£M©˜F=Qó‘Í×”–JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÒ©Û¹öÖñ‹+aue_sendtoÚ +ret_msgid +17427hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý+MhÇ&åI†áS7ÍîÛp––JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÒ©Û¹öÖñ‹+aue_sendto˜ +ret_msgid +17428hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÐ×;éJ ˜œJ)Ꙝ혖JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÒ©Û¹öÖñ‹+aue_sendto¬ +ret_msgid +17429hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýïÁ²„ F˜¢îžLš–JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÒ©Û¹öÖñ‹+aue_sendto˜ +ret_msgid +17430hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýO­„aæÎM¶=rÄ•†n«œ–Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÒ©Û¹öÖñ‹+aue_recvfromÚ ret_msgid +17427hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý²P¢”>Añ§ðAŠyÖž–Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÒ©Û¹öÖñ‹+aue_recvfrom˜ ret_msgid +17428hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýO!6*,F‡$@UG¬ –Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÒ©Û¹öÖñ‹+aue_recvfrom¬ ret_msgid +17429hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýì‹ÊCsŽE ƒÈ˜øB*¢–Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÒ©Û¹öÖñ‹+aue_recvfrom˜ ret_msgid +17430hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýç]©ÕyVD†¨ú`xÝˤ–<Þ› µxÏFzé®’'üvº €ja·*XYª·CÿùX?Ü/etc/cron.dü‡›ðùÖñ‹+aue_open_rwtc +flagsmodeè +ret_fd15hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value5ppid1execcron20ÜS7[AIF¬•pd± (ýÄÇxôQÖJ‚£Ëv‹ƒWꦖޛ µxÏFzé®’'üvº €ja·*XYª·CÿùX?Üü‡›ðùÖñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd5return_value0ppid1execcron20ÜS7[AIF¬•pd± (ý2PþèsDC3¯f¾0ÌÖ¨–0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢æžÙúÖñ‹+aue_lseek°½šhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*> Ÿs^K¨·ÊI»%Û¬– ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¢æžÙúÖñ‹+20ÜS7[AIF¬•pd± (ýj<ëZ‘þG؇Jžý Y¼ª–@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢æžÙúÖñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0UØ€D +²-]ÌÖ‹‰°– ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¢æžÙúÖñ‹+20ÜS7[AIF¬•pd± (ý±íĆ_jJ·ƒ¹Èj¿²a +®–@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢æžÙúÖñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­„þ´ÂtEŪ™¯mëý·´– ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¢æžÙúÖñ‹+20ÜS7[AIF¬•pd± (ý–j\¢óF󣞬ÄàœÄ²–@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢æžÙúÖñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹ß•'VïHº‡h4Ö)J¶–:‚œ Ê +ÙKFzé®›'üvº¢æžÙúÖñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñíðD¢¡¨#¯ 縖@žŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢æžÙúÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)_U¦G™¶ó­KŽBº–@žŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢æžÙúÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€õ#ÓC£‡ðTÁ‹©¼–@žŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢æžÙúÖñ‹+aue_preadØhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖîÆaG=Lh`o—Šå_¾–b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢æžÙúÖñ‹+aue_writeÂhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚ'»g6UHΆ«YqÁŒá€À–bžŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¢æžÙúÖñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]î¾Ù)ÙJˆ¦›ôÛwe–@žŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢æžÙúÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}Ú£T:E!Ÿ£µ˜¨ gÄ–@žŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢æžÙúÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýüŒ‡zŸBîŒ÷³Úê ñ +Æ–@žŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢æžÙúÖñ‹+aue_preadÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3XÈ…ŠçL–¼ø[2ýNÈ–b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢æžÙúÖñ‹+aue_writeºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0˜É;¬²Jw´ò[UµUÊ–bžŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¢æžÙúÖñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýò«_Ý¥Na‚‹e”iyÌ–@žŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢æžÙúÖñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%ÄÐuD“´…QÀ¯üΖJžŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¢æžÙúÖñ‹+aue_sendtoà +ret_msgid +17431hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞ—|ö²ZH˜¼îA¶)ЖDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¢æžÙúÖñ‹+aue_recvfromà ret_msgid +17431hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý·»‹ZELAÅ»ƒ¼,a£:Ò–bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¢æžÙúÖñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý'¸Á«3ŸH3˜¡×9@hÁÔ–D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢æžÙúÖñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_šµ­¦+Aó¬~J 2àÖ–D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢æžÙúÖñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQyKÒÚMÙ<`Ã*E‘:Ø–D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢æžÙúÖñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýíT0ÚIð¡f'«¾Z;pÚ–D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¢æžÙúÖñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼\Y*”Db-¯ùU’–fÜ–0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UžÞ«’ûÖñ‹+aue_lseek²õšhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’× hì +M”±@ûBT¯µÞ–0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UøÐÖ‚×ñ‹+aue_lseekŒûšhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„dòóF~é®Ò'üvº74.6.168.73ö20ÜS7[AIF¬•pd± (ýC„;üÞFNŠº§Qw-†à–ø› µ5Ž«Fz鮉'üvº„dòóF~é®Ò'üvºÌ™ƒ×ñ‹+aue_connecthostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1address74.6.168.73port123execntpd20ÜS7[AIF¬•pd± (ýÅá—žJé rLJýâ–ø› µ5Ž«Fz鮉'üvº„dòóF~é®Ò'üvºÌ™ƒ×ñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd4return_value0ppid1execntpd20ÜS7[AIF¬•pd± (ýïÚGÚžAè„mhþv,Àä–Jø› µ5Ž«Fz鮉'üvºµCJœFz鮉'üvºÌ™ƒ×ñ‹+aue_sendto`ret_msgid +17432hostHdc53375b-4149-46ac-9570-64b1090f28fdfd22ppid1address74.6.168.73port123execntpd20ÜS7[AIF¬•pd± (ý®iϧ‹òG X.éF—æ–Jø› µ5Ž«Fz鮉'üvºµA¬ÐFz鮉'üvºÌ™ƒ×ñ‹+aue_sendtoÆ +ret_msgid +17433hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execntpd20ÜS7[AIF¬•pd± (ýo«Ÿ8.9Ae´/é Ÿèî»è–Dê› µ dôFzé®{'üvºµ !Fzé®{'üvºÌ™ƒ×ñ‹+aue_recvfromÆ ret_msgid +17433hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý]V3ÇWNý¨<f–òÔÉê–0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ýÚ̉×ñ‹+aue_lseekŒûšhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýH" «¹ìL¾ÿÐ]Ó&åî– ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†ýÚ̉×ñ‹+20ÜS7[AIF¬•pd± (ýÄ9‹°Ó +I‡±µœ[²*öì–@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ýÚ̉×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.¤äv¬ôGÕŠSz›n÷lò– ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†ýÚ̉×ñ‹+20ÜS7[AIF¬•pd± (ýkèªTD7™B9݃¥ð–@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ýÚ̉×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¾P„Æ©þB•¹Ôkˆfö– ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U†ýÚ̉×ñ‹+20ÜS7[AIF¬•pd± (ýÛÝEòÙ£F¬Jz[;Bô–@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ýÚ̉×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýã+AãHIJ‘§;îœdÉÆÔø–:‚œ Ê +ÙKFzé®›'üvº†ýÚ̉×ñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýØc.½·¦A¼¬%™Ù$ŸÈú–@ Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V †ýÚ̉×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýyt*ú]ñF€ öEzJüPü–@ Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ýÚ̉×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜¶•ÜEzB켯 +"l3­þ–@ Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ýÚ̉×ñ‹+aue_preadú7hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£t/PvG‚†ÏÀè.¢>z€—b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº†ýÚ̉×ñ‹+aue_writeä8hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°+ʾB1ªèÑz‡Bˆ'‚—b Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á†ýÚ̉×ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^ÁÜ)ìA’ŒšzEŠ£”„—@ Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V †ýÚ̉×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©ta~ÜãO5šwJ·b6O›†—@ Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ýÚ̉×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏ"Kå9æA®2O:}ˆ—@ Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†ýÚ̉×ñ‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèñnB"GüƒM9—å\­Š—b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº†ýÚ̉×ñ‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý® qÒÃfB?²Šì^ɳ€tŒ—b Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á†ýÚ̉×ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†¤ ,¹IE–1\ê¿{‡ÉŽ—@ Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V †ýÚ̉×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýOBH€&DcŒÔ_ßfY—J Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº†ýÚ̉×ñ‹+aue_sendtoà +ret_msgid +17434hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæKµCË´ÿU/¯ö® ’—Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº†ýÚ̉×ñ‹+aue_recvfromà ret_msgid +17434hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÈÌJ¼Ó2MÔ  +ngígÆ”—bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK†ýÚ̉×ñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý_ÐL“D”—çÂh‘7SM–—D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºä×÷Õ‰×ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœF“²‡NýƒÂ¥” ‰Û7˜—D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºä×÷Õ‰×ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~~|\ÐHS©òÙûƒCŒ6š—D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºä×÷Õ‰×ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆ_‘1¿G'»ô`³OAœ—D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºä×÷Õ‰×ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—a·ŒvíJ,º‘dç(œnÿž—0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¾ìØ¢Š×ñ‹+aue_lseekö®›hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡jÑÕTˆ@ý™*{â©à$ —@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¼—áæŒ×ñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬®ûéÝ£5¶C]§fïDl³[¢—JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¼—áæŒ×ñ‹+aue_sendtoÚ +ret_msgid +17435hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýú¾Š2A\¦ªIzü1¤—JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¼—áæŒ×ñ‹+aue_sendto˜ +ret_msgid +17436hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýìrL.ï~M'£P¥:X +¦—JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¼—áæŒ×ñ‹+aue_sendto¬ +ret_msgid +17437hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÄX Rn)Hj«¥H’t +3¨—JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¼—áæŒ×ñ‹+aue_sendto˜ +ret_msgid +17438hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÌÑ,ÖfTB¨‹'¡bX9’Úª—Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¼—áæŒ×ñ‹+aue_recvfromÚ ret_msgid +17435hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÊÑhm3½DО‡Æu¥Üœÿ¬—Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¼—áæŒ×ñ‹+aue_recvfrom˜ ret_msgid +17436hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý銛 ALl” +שÛèG­®—Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¼—áæŒ×ñ‹+aue_recvfrom¬ ret_msgid +17437hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýsÊäðEJ×™¢‚Èr~ZW°—Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¼—áæŒ×ñ‹+aue_recvfrom˜ ret_msgid +17438hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¿peSµK\®×7C-€¥·Üý{…s—:‚œ Ê +ÙKFzé®›'üvº¼‹·À˜×ñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýðÔw sKf­$Ip¼„áÄ—@¢Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¼‹·À˜×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+ll±?©L¨‚bžÈ¹ßeÆ—@¢Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼‹·À˜×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýù+Á²uhO0‡¿2yÇ•7È—@¢Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼‹·À˜×ñ‹+aue_preadâ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý궮½`DV¸i‡:XjÊ—b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¼‹·À˜×ñ‹+aue_writeÌ4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýàÏ¡öGÿ¼4mAÞ¬âÌ—b¢Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¼‹·À˜×ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýáwš±!IGœ¡Ó"ªG!Η@¢Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¼‹·À˜×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýï,¡–±ãL“6ÔòbÓéKЗ@¢Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼‹·À˜×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýû×WÍúE ®ïÖ%¸3`EÒ—@¢Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼‹·À˜×ñ‹+aue_pread¾hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬_•óßbMÓ„€öfËW‡Ô—b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¼‹·À˜×ñ‹+aue_write¨hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§',÷)O¦ªiôY¾3U$Ö—b¢Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¼‹·À˜×ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×;˜YL»ôƒÁû×ùñØ—@¢Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¼‹·À˜×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½pHcE6f± ¶¥Ú—J¢Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¼‹·À˜×ñ‹+aue_sendtoà +ret_msgid +17439hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýD¡³rhI$ OèçÜ—Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¼‹·À˜×ñ‹+aue_recvfromà ret_msgid +17439hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¢½ßB*ÿCÒ»W8Ϭ|7Þ—bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¼‹·À˜×ñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý‘Òà’CÅûlÈdc}à—D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºø’§É˜×ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖS,°‘G/­­ŸúðÕÙîâ—D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºø’§É˜×ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘]îéªJN¢~…Ú´w.ä—D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºø’§É˜×ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýP «}]–Od«¥5ÆXqíæ—D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºø’§É˜×ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏóÃ"·Då¡ÓQÈ\è—0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞ³Ò²™×ñ‹+aue_lseekÐç›hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4³ÄJt¤DOŸ7†P5ê—0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uúó‘ö ×ñ‹+aue_lseekªí›hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýë«4ò3®B Œ(ÓÞf ‘àì—@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÒ¤Û“£×ñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý÷ ¾ØH¦Nší–¸ gx˜ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¢ìñ¦¶×ñ‹+20ÜS7[AIF¬•pd± (ý(­já3Eø®€haðUâ´À˜@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ìñ¦¶×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýæ5gLšB?¸—"¾‚ýoĘ:‚œ Ê +ÙKFzé®›'üvº¢ìñ¦¶×ñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¼q’—ŠH=«Ä„bÛ÷Ƙ@¦Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¢ìñ¦¶×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýE}UÎB…¹ñx·óÓÈ Ș@¦Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢ìñ¦¶×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚ'õÁGtœˆc|K•‹”$¦Þ B6è˜D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºú˜…°¶×ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*í‰ÿŽÈB¸«tìám¥»dê˜0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U†²ÖÒ·×ñ‹+aue_lseekàÌœhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxÝÕ(»Fî’.¢:ð_³Jì˜@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eöºÛÀ¹×ñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý† åñy^Mɯ(&½êh6î˜JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºöºÛÀ¹×ñ‹+aue_sendtoÚ +ret_msgid +17446hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýUÑÚÕD刞@è.ð˜JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºöºÛÀ¹×ñ‹+aue_sendto˜ +ret_msgid +17447hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý° '“ÂGÓª=HîâÖ:ò˜JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºöºÛÀ¹×ñ‹+aue_sendto¬ +ret_msgid +17448hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý XF-SC ¶^«öoNRô˜JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºöºÛÀ¹×ñ‹+aue_sendto˜ +ret_msgid +17449hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýH’´=_@>†CQLJ á”ö˜Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºöºÛÀ¹×ñ‹+aue_recvfromÚ ret_msgid +17446hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ým›Œ_­VA* .PÊIø˜Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºöºÛÀ¹×ñ‹+aue_recvfrom˜ ret_msgid +17447hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýF\où¥ÆKŠM¥ŸÃCÏ’ú˜Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºöºÛÀ¹×ñ‹+aue_recvfrom¬ ret_msgid +17448hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý£Ïï2ÕŽN#¡I¹Úná›ü˜Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºöºÛÀ¹×ñ‹+aue_recvfrom˜ ret_msgid +17449hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýBÌSoý·HI€}Óa%pÀÊþ˜0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦°Ê•¿×ñ‹+aue_lseekœßœhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_-£BåBS¤MÜüˆŸÿ€™0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÖæ™Å×ñ‹+aue_lseekœßœhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýö;åÏuÚ@Ë¢\èfgÁõp„™ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UêÖæ™Å×ñ‹+20ÜS7[AIF¬•pd± (ýwë= áC﬿Ö;%OÛ³‚™@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÖæ™Å×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©½Òi®C„²Ð,ýFøψ™ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UêÖæ™Å×ñ‹+20ÜS7[AIF¬•pd± (ýŽ‚a-YK ³=Øí~ÄÓ†™@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÖæ™Å×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdr‰GèÂEœ±Ïa…Œ™ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UêÖæ™Å×ñ‹+20ÜS7[AIF¬•pd± (ý6>Ð@ÒœA=²Ê(%V¼Š™@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÖæ™Å×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýª…ß³ÏE*º8zͺ+|1Ž™:‚œ Ê +ÙKFzé®›'üvºêÖæ™Å×ñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄ¡Àå´ÃA™²cC /Ì™@¨Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V êÖæ™Å×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#©wµPOu„óß\‰jD’™@¨Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÖæ™Å×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄÉ岂AŸ«qEÀSUÌ”™@¨Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÖæ™Å×ñ‹+aue_preadü%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍ" ‘¶M¢Ý.’©"–™b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºêÖæ™Å×ñ‹+aue_writeæ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßwÔ«MÀ¡Ï£êº«×˜™b¨Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áêÖæ™Å×ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4Ø‚HÕJÂ’ýP¡›¶—š™@¨Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V êÖæ™Å×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…š1Sû£F@°­÷Šg…œ™@¨Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÖæ™Å×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…÷ϳŒ*MA¬Á7¤lh㺞™@¨Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UêÖæ™Å×ñ‹+aue_pread´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý GéŸÐNˆºŠöfÄè|W ™b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºêÖæ™Å×ñ‹+aue_writežhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýù÷|?Ý#BÖ¤ªÄS°C®¢™b¨Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áêÖæ™Å×ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7ÏScÝ`@ò¬€,ž— ù¤™@¨Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V êÖæ™Å×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×®¼JÔ¢NH'µà禙J¨Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºêÖæ™Å×ñ‹+aue_sendtoà +ret_msgid +17450hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýCk÷y©A·ª8cÑ|Š—¨™Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºêÖæ™Å×ñ‹+aue_recvfromà ret_msgid +17450hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýù^NðreGÆŸ¬Ÿìê/ß‹ª™bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKêÖæ™Å×ñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÏA=‡övI½¿RôZöçAj¬™D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºêÖæ™Å×ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýg‹¨d IÇl“*úyX®™D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºêÖæ™Å×ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»ìž’ÈšFúÊ*üüÁì°™D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºøͬ£Å×ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛÔ­{~RHU¿RhÈ°VDz™D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºøͬ£Å×ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýe–ìËLE¹V:h{RyS´™0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÞ…ˆâÆ×ñ‹+aue_lseek°…hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóÞz°'IÝ®\êr;[$¶™0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°äû¥Î×ñ‹+aue_lseek‚‹hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠ;„O#’àT”ó8ŸA¸™@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eœÏËíÏ×ñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý>"hç,N•$'(͹ùĺ™JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœÏËíÏ×ñ‹+aue_sendtoÚ +ret_msgid +17451hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý/¶XŸN 3ÂcZqú¼™JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœÏËíÏ×ñ‹+aue_sendto˜ +ret_msgid +17452hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýYõ-ÛäA»å„EáWó±¾™JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœÏËíÏ×ñ‹+aue_sendto¬ +ret_msgid +17453hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý½í'ßwD‰ßwÓ´CÀ™JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºœÏËíÏ×ñ‹+aue_sendto˜ +ret_msgid +17454hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýN†?hÆEƒ—ÙÄY¸4°™Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºœÏËíÏ×ñ‹+aue_recvfromÚ ret_msgid +17451hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýä RðØE¯´Ÿv®$¤dÄ™Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºœÏËíÏ×ñ‹+aue_recvfrom˜ ret_msgid +17452hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý²ò‘æ uD~·#ÇØÑóÆ™Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºœÏËíÏ×ñ‹+aue_recvfrom¬ ret_msgid +17453hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¨Ý-^4M™®æV^â•œ È™Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºœÏËíÏ×ñ‹+aue_recvfrom˜ ret_msgid +17454hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýš¾F}2ÎF0œ 4ŒßÉÊ™0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ã¬Ô×ñ‹+aue_lseek‚‹hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóŠ›ånƒKR»v.Në Ι ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤ã¬Ô×ñ‹+20ÜS7[AIF¬•pd± (ý}xœšòrLÍ…MögkƒoÌ™@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ã¬Ô×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý2˜ ããÃO„…£¿°n°°Ò™ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤ã¬Ô×ñ‹+20ÜS7[AIF¬•pd± (ý·7òŒ ´@¯•ü¬Eþ‡Й@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ã¬Ô×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýóU¿ÊäE£¶º™=:"éÖ™ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¤ã¬Ô×ñ‹+20ÜS7[AIF¬•pd± (ý-·eŠ!ÂL)©«¨îsØÔ™@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ã¬Ô×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýv©nêáJ䈛ùõó1Ø™:‚œ Ê +ÙKFzé®›'üvº¤ã¬Ô×ñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÞ—¹ßúM;Žþ¼qD·ÓÚ™@ªŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤ã¬Ô×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·Ì‘ÌÙ:N£ Ý)ÚÐ{ôÜ™@ªŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ã¬Ô×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýrTëRˆN1­-!ª§¦A*Þ™@ªŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ã¬Ô×ñ‹+aue_preadŒ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±\ř̦F`œè¥¬+ &cà™b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤ã¬Ô×ñ‹+aue_writeö&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý€²%ðËQEÀ¬v°VاU â™bªŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤ã¬Ô×ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý –>i®¿N8»ÊiM?Îõä™@ªŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤ã¬Ô×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý(ìc\iKœšäßþæ™@ªŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ã¬Ô×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÝ%‰Z)Hk’„‚§©"Šè™@ªŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ã¬Ô×ñ‹+aue_preadÊhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[áž+s¿Jª’:…¢B™ÿ”ê™b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤ã¬Ô×ñ‹+aue_write´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]€|Ñ;¼DuŒL²ÎÞ@ÓRì™bªŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¤ã¬Ô×ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýcˆ­eE2ˆŸAYÃà%î™@ªŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¤ã¬Ô×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýª²·©aòKƦ·ND<3<ð™JªŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¤ã¬Ô×ñ‹+aue_sendtoà +ret_msgid +17455hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9ùWT®@)©öZˆ¯wÈò™Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¤ã¬Ô×ñ‹+aue_recvfromà ret_msgid +17455hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýµöäÙF]—J˼τ˜wô™bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¤ã¬Ô×ñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý +ÊXù@:E÷‘pß$Ybt‘ö™D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤ã¬Ô×ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}9ØÓ0;AÒ½,Õ™'Žø™D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¤ã¬Ô×ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬¼û©rPÆØMÈ€™U†éÒ‡ú™D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºžîê–Ô×ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßœED•Nêº*r“`·jùü™D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºžîê–Ô×ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%?‡CÂJz£ˆÏy{™\þ™0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”Ÿ¼òÕ×ñ‹+aue_lseekì¾hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘ ß8õ@ˆµ0ú¯Ç €š0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UþªËµÝ×ñ‹+aue_lseekÆÄhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3MopMÓ²Û#ÒZ»y¿‚š0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°à¿€ã×ñ‹+aue_lseekÆÄhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖQ†£½â@RŸ“¿2KC/k†š ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U°à¿€ã×ñ‹+20ÜS7[AIF¬•pd± (ý[}s_úGw¬¡Aæ Šæ…„š@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°à¿€ã×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂCÜ+v¶H]¿/HÇ?0[Šš ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U°à¿€ã×ñ‹+20ÜS7[AIF¬•pd± (ý¨ùÁSòÂBº›(B3“¨ˆš@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°à¿€ã×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=*I/ªqâ´ãÕ@Žš ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U°à¿€ã×ñ‹+20ÜS7[AIF¬•pd± (ý_¡Œ%i"M¿EÒð·b7Œš@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°à¿€ã×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý\B!Ò”ºC?¥Aƒ=—è2š:‚œ Ê +ÙKFzé®›'üvº°à¿€ã×ñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâ°ú)WdBQ€’°5o«ò3’š@¬Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V °à¿€ã×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýF—@‡0ÌH¨ïþQ…”š@¬Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°à¿€ã×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ?fþTBÜ…±4×£–š@¬Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°à¿€ã×ñ‹+aue_preadâ3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±Ú‡¡BVŽöwè‚¥“Θšb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº°à¿€ã×ñ‹+aue_writeÌ4hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦›±ãëM¸‘»b"¡¶õ¢ššb¬Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á°à¿€ã×ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@uÌvôÎB!¸X"Ki§>œš@¬Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V °à¿€ã×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßçö®¾}J­éæ{¨üžš@¬Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°à¿€ã×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýüŽOÐ'B\¸8s–î¡ š@¬Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°à¿€ã×ñ‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý•»|1QšC*—y~dyŽÞ¢šb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº°à¿€ã×ñ‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·³†$F½OÀˆ³Ÿÿ-S¸¤šb¬Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á°à¿€ã×ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜øBKÃKq»õâ™fÉ릚@¬Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V °à¿€ã×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýE׫WHÀšÉu­/ò¨šJ¬Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº°à¿€ã×ñ‹+aue_sendtoà +ret_msgid +17456hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšfL<îLz·ùåt¦:#ªšDê› µ dôFzé®{'üvºµ CjFzé®{'üvº°à¿€ã×ñ‹+aue_recvfromà ret_msgid +17456hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¡ ¶šõ¶D‘¾n¢lPᆬšbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK°à¿€ã×ñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýMÓƒ¡CËÇX±o¨o’®šD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ¢†Šã×ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý··$—b@¾‰,#vaþ’V°šD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ¢†Šã×ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôè\<âÒI3®³ãç5¤1²šD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ¢†Šã×ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýdãFmwK”«æ)ѹœ6´šD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ¢†Šã×ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýIRÎX‡KEV†g²³…©@c¶š0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°ÛÝ‚å×ñ‹+aue_lseekÖêhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý7½’¹ó¦G%¼miÚ€…_¶¸š@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eˆ²¼›æ×ñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýA•þ`MNA¡»ÕÇ@ÃRÁºšJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºˆ²¼›æ×ñ‹+aue_sendtoÚ +ret_msgid +17457hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý‚kâ%•IOe€`°±œûk¼šJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºˆ²¼›æ×ñ‹+aue_sendto˜ +ret_msgid +17458hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýIçM®4ËE¢Âpc…W~)¾šJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºˆ²¼›æ×ñ‹+aue_sendto¬ +ret_msgid +17459hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýfŒu¦JmAU·sdf¡¹RÀšJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºˆ²¼›æ×ñ‹+aue_sendto˜ +ret_msgid +17460hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýŠ£|½£êMëÐZýG„šDê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆ²¼›æ×ñ‹+aue_recvfromÚ ret_msgid +17457hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý8ÚדµA8À4z0¤ìÄšDê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆ²¼›æ×ñ‹+aue_recvfrom˜ ret_msgid +17458hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýߪI>ôK@ˆ¼™ÚŽð B:ÆšDê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆ²¼›æ×ñ‹+aue_recvfrom¬ ret_msgid +17459hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÊßå°fEMr­“-®ÈšDê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆ²¼›æ×ñ‹+aue_recvfrom˜ ret_msgid +17460hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý±ƒÙ¥GA^°.MÄ kÊš0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UøôÎÅì×ñ‹+aue_lseek˜ýhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýó)•…’Dš›GBÌ1Ìš0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÆðóñ×ñ‹+aue_lseek˜ýhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýšT3éVyLj‹7£÷›ø`ŒК ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UˆÆðóñ×ñ‹+20ÜS7[AIF¬•pd± (ýc›´a™XF­§ÓjGR–å]Κ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÆðóñ×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqãG5ƒNt¸aýÁ³ÐñÔš ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UˆÆðóñ×ñ‹+20ÜS7[AIF¬•pd± (ýAÎU:þB¥¬Ç/ë¼už}Òš@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÆðóñ×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý”'ðJ•àOª—¢û#Ã8º”Øš ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UˆÆðóñ×ñ‹+20ÜS7[AIF¬•pd± (ý¦5s;ìG…œª¼º~÷Öš@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÆðóñ×ñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$ßõ†TXH’ŽÞ9‹™jfÚš:‚œ Ê +ÙKFzé®›'üvºˆÆðóñ×ñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡Qq;¼@µ¾pºözˆ¸Üš@®Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆÆðóñ×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýâ#S‚úÊA|7Ü" v¶Þš@®Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÆðóñ×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýg™2Î?+HK¨±hÁ¯ó àš@®Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÆðóñ×ñ‹+aue_preadˆ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýL¦Ð¡>jDöƒVß”ƒ-°âšb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºˆÆðóñ×ñ‹+aue_writeò&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýKº$¢PIô«ò¶ü·+—Òäšb®Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áˆÆðóñ×ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýpôC„6Ö€Ù>AÇæš@®Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆÆðóñ×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠ¯×pšL,°åªCQ« èš@®Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÆðóñ×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊþð¶QCä˜ÅI=Üg êš@®Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UˆÆðóñ×ñ‹+aue_preadºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýMì7ZߪM¢‡ÎÒXßÎìšb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºˆÆðóñ×ñ‹+aue_write¤hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýˆ¬– @-¬9r¤—Íîšb®Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áˆÆðóñ×ñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý)õxÌÁIǧ;2Lö+Aöðš@®Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ˆÆðóñ×ñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýV,¶8Ý@B°Ô“gÂòšJ®Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºˆÆðóñ×ñ‹+aue_sendtoà +ret_msgid +17461hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸Z.sCL£Mg¢šôšDê› µ dôFzé®{'üvºµ CjFzé®{'üvºˆÆðóñ×ñ‹+aue_recvfromà ret_msgid +17461hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý•h‚ú¹Nw«a/ú°oÝöšbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKˆÆðóñ×ñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý®ÍzF lD¼måV$“g6øšD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºˆÆðóñ×ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¸Ìf‹cG’Ú1¡ÃN°ÈúšD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºˆÆðóñ×ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý²/l_KQŠD4ch ŠÖüšD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÊɯþñ×ñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýG€z EMO„S K‡DÝ|þšD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÊɯþñ×ñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚e£Ó†Fˆ˜ÒàR­ª½€›0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¤ó’ô×ñ‹+aue_lseek–£žhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¨Õ;JóMãªë? Ò‚›0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uøš“Õû×ñ‹+aue_lseekò¨žhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+ìä-ö×A¹«®ÿÏÿtA„›@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e¼«¶Èü×ñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý$×+ +ò;B ’ nêÑ1«†›JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¼«¶Èü×ñ‹+aue_sendtoÚ +ret_msgid +17462hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý\š·W3Is°á?=bÃAˆ›JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¼«¶Èü×ñ‹+aue_sendto˜ +ret_msgid +17463hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýuû¬dÆLJ€?½ hûäÌŠ›JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¼«¶Èü×ñ‹+aue_sendto¬ +ret_msgid +17464hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýRÇÉ£ŸåCu¨’>\«e¬³Œ›JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¼«¶Èü×ñ‹+aue_sendto˜ +ret_msgid +17465hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý^â |O(–·òûçã,Ž›Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¼«¶Èü×ñ‹+aue_recvfromÚ ret_msgid +17462hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýã†T^¸D%¤â=ÃïÌB¯›Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¼«¶Èü×ñ‹+aue_recvfrom˜ ret_msgid +17463hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý=I¯Ê&DÙ’+–bΣ½.’›Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¼«¶Èü×ñ‹+aue_recvfrom¬ ret_msgid +17464hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýFyjB)ÄH¢¬õLÕàê2”›Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¼«¶Èü×ñ‹+aue_recvfrom˜ ret_msgid +17465hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýíݵG]á@÷ž §ÿ=¯û–›0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ×¼ç€Øñ‹+aue_lseekò¨žhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜Ý6ÉqI.‰²@ÚRUIôš› ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uþ×¼ç€Øñ‹+20ÜS7[AIF¬•pd± (ýèÄ>ÎQÐJ·³Vž’;˜›@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ×¼ç€Øñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5XÎM1DD§®õLìž› ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uþ×¼ç€Øñ‹+20ÜS7[AIF¬•pd± (ýø°¯¦ºO΄*”°$“Ñœ›@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ×¼ç€Øñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{žÿ +ÐF²:¢ö€j𢛠‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uþ×¼ç€Øñ‹+20ÜS7[AIF¬•pd± (ý©åˆÄlI•†Ù\ºI¼NÒ ›@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ×¼ç€Øñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§ãmXAαá8áiø£×¤›:‚œ Ê +ÙKFzé®›'üvºþ×¼ç€Øñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"®ìü/0¥Å©´O®…ƒ7ˆï¤¿¦›@°Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V þ×¼ç€Øñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍŒ[ÖaN&›„õqâ-¨›@°Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ×¼ç€Øñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±‘Ñ­N¿ƒÙi5>qª›@°Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ×¼ç€Øñ‹+aue_preadö%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý8`‰B¸ÕI>‰ãÿ—â·5¬›b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºþ×¼ç€Øñ‹+aue_writeà&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“¬ Ëù7Gí¸6 ·vwO[®›b°Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áþ×¼ç€Øñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýGüò UÍKŶ”s6`¸bá°›@°Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V þ×¼ç€Øñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýsSÂÝÈLP‡Ý¸†‚ø²›@°Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ×¼ç€Øñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýg„R’¶—F–p+u‚´›@°Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uþ×¼ç€Øñ‹+aue_preadÔhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýI>-QNw Ù­ÑM)¶›b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºþ×¼ç€Øñ‹+aue_write¾hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#‰rçž8A)‚: ï¯uÜk¸›b°Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áþ×¼ç€Øñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôØñ*û˜N½‹™vSM ¸Ñº›@°Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V þ×¼ç€Øñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý»ó$`zœ@‚Ž1WÝÚF›J°Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºþ×¼ç€Øñ‹+aue_sendtoà +ret_msgid +17466hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý| +cÎÅ]Oæ™w•kÜ]x¾›Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºþ×¼ç€Øñ‹+aue_recvfromà ret_msgid +17466hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý_%jåSFiž›_ajD*À›bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKþ×¼ç€Øñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýàÞ ÉIQ³ƒ2\Êw0›D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºþ×¼ç€Øñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÔP(OzbN£¢i{À‘DÄ›D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºþ×¼ç€Øñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý.Ò©q%ÖJ½ÒLµDî“Æ›D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºþ×¼ç€Øñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýl^7°aÁEI‘"ÆlRó¡È›D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºþ×¼ç€Øñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýT2Ö·L󗀋Ϟ¤oÊ›0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UØ›¡¢ƒØñ‹+aue_lseekàÜžhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýð«…bHʪx¦™“ÿžÌ›0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U ¼ËåŠØñ‹+aue_lseekºâžhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’-¾ëG¢½êº{|uÉ‘Λ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶¬ÌÚØñ‹+aue_lseekºâžhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜Í‘DR­2ñiv#"Ò› ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¶¬ÌÚØñ‹+20ÜS7[AIF¬•pd± (ý"žÔÅ +D¤Œ•(èЛ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶¬ÌÚØñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýB@-ÿ¶BÄž÷ü0<#,ªœ@´Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UèµõÍžØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýsõzÑAË€Á}L—5¬œ@´Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UèµõÍžØñ‹+aue_pread†&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýui ÜJôŸÍÓἴᮜb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºèµõÍžØñ‹+aue_writeð&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'õš½Eø¬æÑ8¶Õ°œb´Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áèµõÍžØñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„³WO`›·ãs̈O$²œ@´Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V èµõÍžØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý†E~+ßøA§¡/Ç·ö"Ì´œ@´Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UèµõÍžØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'-¡j@v¸ !kû,Q¶œ@´Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UèµõÍžØñ‹+aue_preadÂhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõ„ÛX‚ÖºHKƒj=TH^pÒÔœJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¾®ë¡©Øñ‹+aue_sendto˜ +ret_msgid +17474hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýè™eD|°€?®{æ‘ÖœJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¾®ë¡©Øñ‹+aue_sendto¬ +ret_msgid +17475hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýyëŸwlŠJ¡aðTIõ•ØœJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¾®ë¡©Øñ‹+aue_sendto˜ +ret_msgid +17476hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý+ß _)Am§ZÅ£žðîÚœDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¾®ë¡©Øñ‹+aue_recvfromÚ ret_msgid +17473hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý"Bç½s¨IX  + (°ôÜœDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¾®ë¡©Øñ‹+aue_recvfrom˜ ret_msgid +17474hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‰@Ö¥A£³N¤™1Á¦yÞœDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¾®ë¡©Øñ‹+aue_recvfrom¬ ret_msgid +17475hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÓß’‡ßçGV˜‰ ^ÃýAàœDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¾®ë¡©Øñ‹+aue_recvfrom˜ ret_msgid +17476hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý±md‰òµBé‘‚k˾ÿfâœ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U°‡ÔÁ­Øñ‹+aue_lseekîÆŸhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ývÌ-ˆ'dÀJ¸Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¤Õ±µ¼Øñ‹+aue_sendtoà +ret_msgid +17478hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýT›±N7jMM…é9lÖÍ$ÃÂDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¤Õ±µ¼Øñ‹+aue_recvfromà ret_msgid +17478hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýs”>þ@¹ .h òDÄbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¤Õ±µ¼Øñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÄ{‘P›@v©…ttê§ ÆD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¬‡®¾¼Øñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#ëÿ&Aö¦CÚã؃kúÈD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¬‡®¾¼Øñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýQ·»º@d³•f=Y,ÔÊD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¬‡®¾¼Øñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýU­²T_ÁM«Íõ'ôaÜ(ÌD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¬‡®¾¼Øñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýPʾç4¢K3…ú1†˜Dƒ/Î@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÀÞοØñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýzkøêd +D’ŽeÑ|W&ÐJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀÞοØñ‹+aue_sendtoÚ +ret_msgid +17479hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý·á†¤]Dà¥ðàª]Gb7ÒJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀÞοØñ‹+aue_sendto˜ +ret_msgid +17480hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýkE³Är]JL›q£Ž5¶vÔJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀÞοØñ‹+aue_sendto¬ +ret_msgid +17481hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý­/ôWZSM³º®9ŠA' ÖJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÀÞοØñ‹+aue_sendto˜ +ret_msgid +17482hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýâÔ—?ÀHůP-â›ØDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀÞοØñ‹+aue_recvfromÚ ret_msgid +17479hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýé¡ÚÛL¬†n ßYjêÚDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀÞοØñ‹+aue_recvfrom˜ ret_msgid +17480hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý6ÙXV)LŠÇëÜŠÜDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀÞοØñ‹+aue_recvfrom¬ ret_msgid +17481hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¾üñV´÷H+ŽÓaRCÞDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÀÞοØñ‹+aue_recvfrom˜ ret_msgid +17482hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý è^/™GG¯WȈ]Бà0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UΞ¹â¿Øñ‹+aue_lseekò² hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±•C”nH߬‡_±1æ‚'â0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦½ž¥ÇØñ‹+aue_lseekʸ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@;[¸ÒF+‘ß»ôa¯¢ä0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ€¨ËØñ‹+aue_lseekʸ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý:“;wHzév_[™è ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŽ€¨ËØñ‹+20ÜS7[AIF¬•pd± (ýôÜ^å fI‰­¥¥ö—ƒ­Òæ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ€¨ËØñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽIPæ9Aþ®ÏJÁôì ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŽ€¨ËØñ‹+20ÜS7[AIF¬•pd± (ý'uEý9ëGqŒf>µç|Iê@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ€¨ËØñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýä8ÜÀÝuM¼âìIÓLŸð ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŽ€¨ËØñ‹+20ÜS7[AIF¬•pd± (ýìû%¨8wB5–, ”56Öî@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ€¨ËØñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýür~FàA‡‚ßâá¢ò:‚œ Ê +ÙKFzé®›'üvºŽ€¨ËØñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŒ“Ì\ïJºÈ¹_øoèô@ºŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ž€¨ËØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýïbÄiÿHM‚U¢¼$kl3ö@ºŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ€¨ËØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýççJFL@e® M¶ÁÞËø@ºŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ€¨ËØñ‹+aue_pread¾2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¶Pá¡B4J«¢ì5p+úb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ€¨ËØñ‹+aue_write¨3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÎÔù](BI:œL6Ù—ò—übºŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŽ€¨ËØñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ïSB…‘žwÙÿ9¢žJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº¬€·üÕØñ‹+aue_sendto˜ +ret_msgid +17487hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÉëo¡`M—mb•ç#ɤžDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¬€·üÕØñ‹+aue_recvfromÚ ret_msgid +17484hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýa]óé´Mü˜¬õÎ6_¦žDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¬€·üÕØñ‹+aue_recvfrom˜ ret_msgid +17485hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýð¨=ȆK`·, +e¸ÁÕ¨žDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¬€·üÕØñ‹+aue_recvfrom¬ ret_msgid +17486hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý~IjúgKJ:§TîÒÿ%ªžDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¬€·üÕØñ‹+aue_recvfrom˜ ret_msgid +17487hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‹Dü%eM<ˆŠªÏÆ2w¬ž0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®Ðù´ÖØñ‹+aue_lseek–ñ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýàX§± O@“«¼?Óè±7®ž0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈâÔ›ÚØñ‹+aue_lseek–ñ hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýî<¼ ¤ýK+°^úξJñ²ž ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÈâÔ›ÚØñ‹+20ÜS7[AIF¬•pd± (ý£È~¾L˃ŒÏµ$‡*°ž@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈâÔ›ÚØñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý„ÃyëøzE»šHëß=³óc¶ž ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÈâÔ›ÚØñ‹+20ÜS7[AIF¬•pd± (ý]¨gŽa‡Dy°é‹uÞ´ž@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈâÔ›ÚØñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÚÐØz"Km€¢ñó¹hþ¡ºž ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UÈâÔ›ÚØñ‹+20ÜS7[AIF¬•pd± (ýå±lŽDk›dàd¸ž@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈâÔ›ÚØñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉ ÊÛî6J¾¢^w•e¶·¼ž:‚œ Ê +ÙKFzé®›'üvºÈâÔ›ÚØñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÄCàe;¨F»¼ÎJ.ŒŒûw¾ž@¼Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÈâÔ›ÚØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŠ+n¹FaL¥†"ðT(ÄÀž@¼Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈâÔ›ÚØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýË é€üNžo¦‘ZO¨ž@¼Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈâÔ›ÚØñ‹+aue_pread‚&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙqç:$G˜“£ÿø¨ ¿†Äžb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÈâÔ›ÚØñ‹+aue_writeì&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÙA·öcJB— tGïºÁõÆžb¼Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÈâÔ›ÚØñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýò·óóÛB„¹bŽëË#´Èž@¼Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÈâÔ›ÚØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÔ„$ÖDHDœ€¶@ºö¤Êž@¼Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈâÔ›ÚØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’w¨!@J¢‘D¬|ÆÌž@¼Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÈâÔ›ÚØñ‹+aue_preadºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‹É™:¶JÍ­ ÌÕpoæüΞb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÈâÔ›ÚØñ‹+aue_write¤hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŒJ¹ …HM´›“(p„; Оb¼Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÈâÔ›ÚØñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýJÅÊzI¯ŒR9õ$Òž@¼Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÈâÔ›ÚØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³.Ý!ˆðHp›ïä;íñÉÔžJ¼Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÈâÔ›ÚØñ‹+aue_sendtoà +ret_msgid +17488hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‚’Ãvc!C™»ñ0¡_CØÖžDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÈâÔ›ÚØñ‹+aue_recvfromà ret_msgid +17488hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý>ï¯ÉN ¯¨32u,ÍØžbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÈâÔ›ÚØñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýöÒÞE ¡Àrü-IÚžD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÈâÔ›ÚØñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÜyÿ½ù‰G7­º-€ÒÅ©èÜžD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÈâÔ›ÚØñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%W åNè­5]0/ßÞžD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºê©ò¤ÚØñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,…Ü ÛiC!—Ù »X +$éàžD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºê©ò¤ÚØñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýªºíšü‰E¾7È×OP#âž0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨ä“‚ÞØñ‹+aue_lseekš—¡hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËT€ŒŒJ)½œ¿2A©Éäž0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¨ºËÅåØñ‹+aue_lseekòœ¡hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒdYBÿ¾X¯½¸ZPûæž0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦çÔéØñ‹+aue_lseekòœ¡hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý*‘žéJªÁÆ/2€/êž ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦çÔéØñ‹+20ÜS7[AIF¬•pd± (ýêRU¹(îO?¯¿Clèž@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦çÔéØñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýnf³Q}O-»VˆÖnÓ×îž ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦çÔéØñ‹+20ÜS7[AIF¬•pd± (ýñQÍðŒ®B—#Q2|F ìž@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦çÔéØñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõ#aÝ/Mlœ@ƒçïòž ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¦çÔéØñ‹+20ÜS7[AIF¬•pd± (ýµ4zþD€¿+¤I 3ú¼ðž@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦çÔéØñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°S0yXÛM © ÕöXÌôž:‚œ Ê +ÙKFzé®›'üvº¦çÔéØñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýgÙßîÑ&Fç·!y­“¬'oöž@¾Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦çÔéØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýG|3¡ÆIö›¨N +fó„Ÿøž@¾Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦çÔéØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐÐjFO”Ž_&Ï—[úž@¾Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦çÔéØñ‹+aue_preadü%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜‚²Þ“lF䟪%Yt_ßÊüžb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦çÔéØñ‹+aue_writeæ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý šÌ©GKV‚ìè”Â¥úßþžb¾Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦çÔéØñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½3ú½1GJ·›š¥Â଀Ÿ@¾Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦çÔéØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýxVæÔ¶Gm·õ*ü ê>‚Ÿ@¾Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦çÔéØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§êpb»Nl¤íc,Ô4Ó„Ÿ@¾Ÿ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¦çÔéØñ‹+aue_preadÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^©ÕöHLRŠ²èI¦ É;†Ÿb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¦çÔéØñ‹+aue_writeºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýB§žoà O+©#x%¸‚ÒTˆŸb¾Ÿ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¦çÔéØñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýF”-sOFxš-žyï`ŠŸ@¾Ÿ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¦çÔéØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏ´æFÇE£Ÿ”xihÁ›ŒŸJ¾Ÿ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¦çÔéØñ‹+aue_sendtoà +ret_msgid +17489hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý]är'P¿M[Ò«.ꛎŸDê› µ dôFzé®{'üvºµ CjFzé®{'üvº¦çÔéØñ‹+aue_recvfromà ret_msgid +17489hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý•f9K>šjɽ+È Ÿbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¦çÔéØñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýVC§sxíD“ŸÔ–fÉÏ’ŸD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºè‹ ˜éØñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýòŸ‰ºŸ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜÛ£‚øØñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡ ‡ƒÎ#L|£blž¯Fx¾Ÿ:‚œ Ê +ÙKFzé®›'üvºÜÛ£‚øØñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ým‚Æ(¹æIˆ†»üÂV+eÀŸ@ÀŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÜÛ£‚øØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý·èe:×dL§¨(Z1u~™Ÿ@ÀŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜÛ£‚øØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýAø¯C÷ÁH‹¥Ò¨,5hŸÄŸ@ÀŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜÛ£‚øØñ‹+aue_pread´2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +°3t@²’ÚØtSŽl*ÆŸb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÜÛ£‚øØñ‹+aue_writež3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèNZƒd"Cc¾¢ïø÷7óùÈŸbÀŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÜÛ£‚øØñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡¬ÝLÔ£‚ðñS-.5ÊŸ@ÀŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÜÛ£‚øØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¬$Ø“BëHÙ¦¬n9CÿÌŸ@ÀŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜÛ£‚øØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏÕKSƒB-ˆÀÃøôpçšΟ@ÀŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÜÛ£‚øØñ‹+aue_preadÊhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©Û¬ªE½G†…Ÿ‹ÄFà¦Пb Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÜÛ£‚øØñ‹+aue_write´hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËø$¾y@¡SþÂA¤è¼ÒŸbÀŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áÜÛ£‚øØñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŽÿÿ8ávL­Ÿâ/™]„jÔŸ@ÀŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ÜÛ£‚øØñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýo¥újtD–)W~+Ê@ÖŸJÀŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÜÛ£‚øØñ‹+aue_sendtoà +ret_msgid +17494hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýü¥€]^¤L€‹ÚUºsØŸDê› µ dôFzé®{'üvºµ CjFzé®{'üvºÜÛ£‚øØñ‹+aue_recvfromà ret_msgid +17494hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý1½@ºrbE dô…0¥ÚŸbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÜÛ£‚øØñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý]´‰*õC²\ñãÓ&4ÜŸD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÈýÆ‹øØñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÁ ±y´IOR›2!½š-¨iÞŸD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÈýÆ‹øØñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý&mÒEZ–,N±—’“  JŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºÞüéõ†Ùñ‹+aue_sendtoà +ret_msgid +17499hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýN#LçB÷ORšG§šÇÊE¢ Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÞüéõ†Ùñ‹+aue_recvfromà ret_msgid +17499hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý[,eìÊHìªZ™›¤ bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKÞüéõ†Ùñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÞ® +íÜKš´ÆQ”_²¦ D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÞüéõ†Ùñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷M#'@:Œɧ¸ÀȨ¨ D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÞüéõ†Ùñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖJõCèM@¡ßm©=Îõ|ª D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ‹£ÿ†Ùñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýùhþÈÎ@\¡îc½ÒD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŠ‹£ÿ†Ùñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýgE¡Gf¨Í,™õ’:® 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U챨‹Ùñ‹+aue_lseekij¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÍ­VäæG<³Á˜Ä[Gw° 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜Ñì’Ùñ‹+aue_lseekž¹¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_Ù¯•w$OP—³€`˜úH² 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ‘Œé•Ùñ‹+aue_lseekž¹¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý/OÀ žCO_¾VW!Ö¶  ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŽ‘Œé•Ùñ‹+20ÜS7[AIF¬•pd± (ý6£wý‡ëK6£&O:Ö5´ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ‘Œé•Ùñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆê(âŸJ$GHó+7º  ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŽ‘Œé•Ùñ‹+20ÜS7[AIF¬•pd± (ýS¾²ï6VF…£~¸-C8k¸ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ‘Œé•Ùñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‘Ĥ¶ÉF"šXu^[=¾  ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŽ‘Œé•Ùñ‹+20ÜS7[AIF¬•pd± (ýòÑP=JA—’5+3ͼ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ‘Œé•Ùñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýF—#óÌCÀè”›@UÀ :‚œ Ê +ÙKFzé®›'üvºŽ‘Œé•Ùñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôEŒœ¬¶OB™È–”b-×ì @ÄŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ž‘Œé•Ùñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý!ëÇ?L0—H<#Œ[dÄ @ÄŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ‘Œé•Ùñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýL³ô ;‡CcÚ¨M¾˜£êÆ @ÄŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ‘Œé•Ùñ‹+aue_preadô%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉ_ߦ®mM{Ÿ4ý)•¦È b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ‘Œé•Ùñ‹+aue_writeÞ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýº~ÐÉ‚@ôŽ.¤&Ñ­KÊ bÄŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŽ‘Œé•Ùñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý#ûll_öC˜­æ)ZÎÌ @ÄŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ž‘Œé•Ùñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_A®A¬:I¥‹í)øCÖΠ@ÄŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ‘Œé•Ùñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœüËkOìN«–FÆ ýР@ÄŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽ‘Œé•Ùñ‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊýÁ1L.“«"±Ð-Ò b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ‘Œé•Ùñ‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®|I Ò—Ny•38å.thÔ bÄŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŽ‘Œé•Ùñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý÷Šä€ GN^–]íuªûñ•Ö @ÄŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V Ž‘Œé•Ùñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý©ˆTB5«´,uò†ÀuØ JÄŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºŽ‘Œé•Ùñ‹+aue_sendtoà +ret_msgid +17500hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬šûL¦-ÅØtCõ©‘¶gÚ Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŽ‘Œé•Ùñ‹+aue_recvfromà ret_msgid +17500hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýI¥àU“ HD¯ißÉ„¬ÙqÜ bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKŽ‘Œé•Ùñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýÂXOò„EB—ªV À*ûÞ D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ‘Œé•Ùñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡ëpÍ…FaÿÙZrÄÁÝà D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ‘Œé•Ùñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýa¯Œ$WA €p$Q£ÍCâ D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ‹£ò•Ùñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßüéÛ\N£‘æ„[/–Éä D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽ‹£ò•Ùñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀ§œ©K¨»4L4|r“æ @Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e‚ñæ‚™Ùñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý²svÓL„“=l&½¸±è JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº‚ñæ‚™Ùñ‹+aue_sendtoÚ +ret_msgid +17501hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý„õŒGœ’C÷º"”u³Qðê JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº‚ñæ‚™Ùñ‹+aue_sendto˜ +ret_msgid +17502hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý>¥¾ø-PN¢‰‘“d¨w­ì JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº‚ñæ‚™Ùñ‹+aue_sendto¬ +ret_msgid +17503hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýô-{Ùúþ@›À“w*–!ôî JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº‚ñæ‚™Ùñ‹+aue_sendto˜ +ret_msgid +17504hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýïfÇa§ZAT‚`?]´‰ð Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº‚ñæ‚™Ùñ‹+aue_recvfromÚ ret_msgid +17501hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý„¸mEèšÝç(ëõºìò Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº‚ñæ‚™Ùñ‹+aue_recvfrom˜ ret_msgid +17502hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýšŸIñœÈ*´Ž–#ô Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº‚ñæ‚™Ùñ‹+aue_recvfrom¬ ret_msgid +17503hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýRzSb¯/H]E7 Y*ö Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº‚ñæ‚™Ùñ‹+aue_recvfrom˜ ret_msgid +17504hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýu‹iuF@JWus×ÊJø 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uî¹³¸šÙñ‹+aue_lseekÞë¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÊèK*M¾$®J¼F0Wú 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÒ¿Äû¡Ùñ‹+aue_lseek´ñ¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýr5!F<êNLƒ:\u¥«[ü 0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶œ…ܤÙñ‹+aue_lseek´ñ¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýi¶D*MC«iûº‘Y€¡ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¶œ…ܤÙñ‹+20ÜS7[AIF¬•pd± (ýT^#JF§•Æô+{-tþ @‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶œ…ܤÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>Gd¼üPNdeÒ\µä„¡ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¶œ…ܤÙñ‹+20ÜS7[AIF¬•pd± (ý¬XÔÄþB‰ a+õ^‚¡@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶œ…ܤÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýø2jTYK¼8Ò#©Ž2ñˆ¡ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¶œ…ܤÙñ‹+20ÜS7[AIF¬•pd± (ý2Ò Í½Mó†¤Ë‹†¡@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶œ…ܤÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý4Ò<ÆYI ¾w&¹øMBŠ¡:‚œ Ê +ÙKFzé®›'üvº¶œ…ܤÙñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¿»ç»Y‹N=š*lü[þ\°Œ¡@ÆŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¶œ…ܤÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÖé_m?L]¾ÍC˜ ¾±Ž¡@ÆŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶œ…ܤÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýznèÁýOB¬}ú´$~á@ÆŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶œ…ܤÙñ‹+aue_pread¸2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý­Yä¬sO‡7ÃÔ Ñ^’¡b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶œ…ܤÙñ‹+aue_write¢3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýsw~%PI¤¬à.Vk픡bÆŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¶œ…ܤÙñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýaÍÛX]4KÒãKw™ÌW–¡@ÆŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¶œ…ܤÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý±æÂS~F†Ðo`Â#T˜¡@ÆŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶œ…ܤÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÆÿÝËFK©.!o>ŒNš¡@ÆŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¶œ…ܤÙñ‹+aue_preadÎhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýd§áfÙIשf‚2© 62œ¡b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¶œ…ܤÙñ‹+aue_write¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +ŸABGÿ½âpʢ힡bÆŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¶œ…ܤÙñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý<†0 Ÿ`AæŠYÚòª;7 ¡@ÆŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¶œ…ܤÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý$7×uMLr‚äç¶ »¢¡JÆŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¶œ…ܤÙñ‹+aue_sendtoà +ret_msgid +17505hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—ìõZ¯UD†Óœmâôü¤¡Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¶œ…ܤÙñ‹+aue_recvfromà ret_msgid +17505hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýœ „^¦´I@ Mª)¾<ͦ¡bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¶œ…ܤÙñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýRpÙTGlž´P“†™¨¡D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®¦Ëå¤Ùñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°ßƒè ¿A7¨]£9[Ñ*eª¡D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®¦Ëå¤Ùñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕH®T?HÝŒAzô4¢¬¡D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®¦Ëå¤Ùñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýèó,ïºO»¿qäfÊ°Ï®¡D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº®¦Ëå¤Ùñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý{mhÓDtHb½À9”iUöð¡0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÀŒ È©Ùñ‹+aue_lseek¾—£hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’Ñm-\»B7º‡ï…f³Ñ!²¡@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e–Ž’°¯Ùñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýBÉFßaéAg­},¹˜_º´¡JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–Ž’°¯Ùñ‹+aue_sendtoÚ +ret_msgid +17506hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¡ÇLés£Hs­GÓ9Åü»G¶¡JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–Ž’°¯Ùñ‹+aue_sendto˜ +ret_msgid +17507hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýwEÿxêPDRµ|_ sÐz¸¡JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–Ž’°¯Ùñ‹+aue_sendto¬ +ret_msgid +17508hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýdÁ,ú9M+¶»fŽV캡JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–Ž’°¯Ùñ‹+aue_sendto˜ +ret_msgid +17509hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýY~!EsI“–;ø©c¤d¼¡Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–Ž’°¯Ùñ‹+aue_recvfromÚ ret_msgid +17506hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý€ýõ]´¨Gø²äåfý­¾¡Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–Ž’°¯Ùñ‹+aue_recvfrom˜ ret_msgid +17507hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý2e¶cDÀ×hˆ+™“À¡Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–Ž’°¯Ùñ‹+aue_recvfrom¬ ret_msgid +17508hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýbFX±‰NJ½fïUµ},¡Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–Ž’°¯Ùñ‹+aue_recvfrom˜ ret_msgid +17509hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¸DKM·»@O´ŒÈ$9HÆÄ¡0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uôâ‘‹±Ùñ‹+aue_lseekð©£hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'Û¾Y®M‰Ñþ$]W[uÆ¡0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uòç½Ï³Ùñ‹+aue_lseekð©£hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýßÈì»{Gò¡tO‚ÿà’Ê¡ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uòç½Ï³Ùñ‹+20ÜS7[AIF¬•pd± (ýSÇâ3L»²”/§aµ´™È¡@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uòç½Ï³Ùñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœAëÑGz‡ >ST‰UΡ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uòç½Ï³Ùñ‹+20ÜS7[AIF¬•pd± (ý-lLÃ1WD¸ Œð:Ա̡@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uòç½Ï³Ùñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý’H…Dd?Cí‡ò÷hÆo³Ò¡ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[Uòç½Ï³Ùñ‹+20ÜS7[AIF¬•pd± (ý±Ÿ@àûBúX¤êÓОС@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uòç½Ï³Ùñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ým]Xï•*G]Š"`cêÄóÅÔ¡:‚œ Ê +ÙKFzé®›'üvºòç½Ï³Ùñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý° ‡×²£Nn‘ã!àîQÿÖ¡@ÈŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V òç½Ï³Ùñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý2GŽzJM˜–Áà6œ%tØ¡@ÈŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uòç½Ï³Ùñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÑ£*ѺB ˆ£‚IJüÚ¡@ÈŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uòç½Ï³Ùñ‹+aue_pread‚&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýj~}ꙫL8ª’üHÐJUÜ¡b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºòç½Ï³Ùñ‹+aue_writeì&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý1‘}uÎGCª\ +"ú{ªÞ¡bÈŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áòç½Ï³Ùñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñ‡Ðñ¶´B>¥ëËKn®‹à¡@ÈŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V òç½Ï³Ùñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýzÖ§¦Ã-MF ›z×F<,â¡@ÈŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uòç½Ï³Ùñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,ÙA¨ùóAs†hµÛä¡@ÈŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uòç½Ï³Ùñ‹+aue_preadªhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýK##F±´¾ôÆ[´Ìæ¡b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºòç½Ï³Ùñ‹+aue_write”hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡ZÄþN'žµe]ôœJè¡bÈŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áòç½Ï³Ùñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý+o‚ÁmJ÷‚¡Z@š…d.ê¡@ÈŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V òç½Ï³Ùñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý-6¢^„G”²v'›Xt-óì¡JÈŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºòç½Ï³Ùñ‹+aue_sendtoà +ret_msgid +17510hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇÚIaáL·—ô•[â‚ÀOî¡Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºòç½Ï³Ùñ‹+aue_recvfromà ret_msgid +17510hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý¶Ò³êOGŒŠs ²ñ]ð¡bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKòç½Ï³Ùñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýRÖq wO,£A?13Dò¡D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºòç½Ï³Ùñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÕ“šn-úC»Æw+8zLô¡D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºòç½Ï³Ùñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñg‡ ZJ×¼UIvÌ”¤_ö¡D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºò®Ù³Ùñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒ Pί`H~¹šLkßÎcø¡D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºò®Ù³Ùñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡×•‰„=EͲ›3 “¸¯ú¡0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®ØظÙñ‹+aue_lseekðÏ£hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýE“àÇ +KB|£#·'OÇŽuü¡0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uö¯Ì›ÀÙñ‹+aue_lseekÄÕ£hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}²[ÈcêK’Ž¸¨$Cu-þ¡0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ÓÃÂÙñ‹+aue_lseekÄÕ£hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®=@x9éAë°ÒŒçš±[‚¢ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U„ÓÃÂÙñ‹+20ÜS7[AIF¬•pd± (ýíI‰ñ»D÷¦púþy¬M¨€¢@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ÓÃÂÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[ï ”@‹tæ)ì(†¢ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U„ÓÃÂÙñ‹+20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¬¼üÌyuM†Od£þ|À½ŒB„¢@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ÓÃÂÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýEWlSGS†ëªP~°ÚŠ¢ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U„ÓÃÂÙñ‹+20ÜS7[AIF¬•pd± (ýXEºu_GÖ›4œ™s]Lj¢@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ÓÃÂÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÛˆg¡8-Jˆœ½ë•ÀÀ½ Œ¢:‚œ Ê +ÙKFzé®›'üvº„ÓÃÂÙñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþAOýÈDÁ¬ ©;;6ñ’Ž¢@ÊŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V „ÓÃÂÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýº2>QšÔJ&„PƒtIÚ\¦¢@ÊŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ÓÃÂÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÏÒÛýÔArãrð’¢@ÊŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ÓÃÂÙñ‹+aue_preadø%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¢uUÛˬM§¶RïÍ[iÒJ”¢b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº„ÓÃÂÙñ‹+aue_writeâ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý=S +òžJcŒV}O¨•Ì–¢bÊŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á„ÓÃÂÙñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýþèè'A<˜l™è‹ÿ—±˜¢@ÊŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V „ÓÃÂÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý3™XM;ÎM¢‡Ÿ‹RÜ&¤š¢@ÊŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ÓÃÂÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý µuÁO¹tU83Âòñœ¢@ÊŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U„ÓÃÂÙñ‹+aue_preadÌhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜Óú;8EDT¢Ç0´<—Àuž¢b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº„ÓÃÂÙñ‹+aue_write¶hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‰ó^̽ëOဢ‡‹½“¼ ¢bÊŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á„ÓÃÂÙñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýºšô‰Ëõ@W›6ì”A´‰¢¢@ÊŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V „ÓÃÂÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý›­H@ ›”ëšÍ=ëM¤¢JÊŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº„ÓÃÂÙñ‹+aue_sendtoà +ret_msgid +17511hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýîùœéÕF\„0ùtä鉦¢Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº„ÓÃÂÙñ‹+aue_recvfromà ret_msgid +17511hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý³.FŒ×dK—¤ +Fý +–%¨¢bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK„ÓÃÂÙñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýèÑ¡kBOE¼(çD _¢ª¢D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº„ÓÃÂÙñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýõªÁõN)€$Fð±Ô¬¢D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº„ÓÃÂÙñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýH¢¾˜âQEïˆ>6*oëÊ®¢D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº„ÓÃÂÙñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý%™Ô‹efLÀ¤Ôc#ŠˆqE°¢D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº„ÓÃÂÙñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý´ÊŠ«í*J6€¦Âžñ …ܲ¢@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eÞýåÜÅÙñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýã¿¿¾¼I!¶‰•Ïý¬_´¢JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÞýåÜÅÙñ‹+aue_sendtoÚ +ret_msgid +17512hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¶*þàwBs² !ß0q̶¢JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÞýåÜÅÙñ‹+aue_sendto˜ +ret_msgid +17513hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý´™˜žÂJõ­kFeð4u¸¸¢JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÞýåÜÅÙñ‹+aue_sendto¬ +ret_msgid +17514hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÞÌÏ÷NHi€Š[Ï`3¿º¢JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºÞýåÜÅÙñ‹+aue_sendto˜ +ret_msgid +17515hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý +ïcËiHƒóü3Äë¼¢Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÞýåÜÅÙñ‹+aue_recvfromÚ ret_msgid +17512hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýªlkÜÃöB>—¨„/«k¾¢Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÞýåÜÅÙñ‹+aue_recvfrom˜ ret_msgid +17513hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýâ{sî<L'ƒþÚa$`´·À¢Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÞýåÜÅÙñ‹+aue_recvfrom¬ ret_msgid +17514hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýR UXòJ›¹å–-~úM ¢Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºÞýåÜÅÙñ‹+aue_recvfrom˜ ret_msgid +17515hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý)ÙÑG•ôA±ˆ-¦D§™Ä¢0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UºŠðçÇÙñ‹+aue_lseekü‡¤hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý'ÜNP Kƒ¼ôX/Æ¢0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U®·«ÏÙñ‹+aue_lseekÖ¤hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýd/É÷«M|¿¶/¤¥öç‘È¢0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼Ÿ‹¶ÑÙñ‹+aue_lseekÖ¤hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÈyе´eC_±}Z}Ì@ñ×Ì¢ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¼Ÿ‹¶ÑÙñ‹+20ÜS7[AIF¬•pd± (ýv…üH@I‰¢=)Šc×çÊ¢@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼Ÿ‹¶ÑÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýËÖñK¯_¤yÙ'#Т ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¼Ÿ‹¶ÑÙñ‹+20ÜS7[AIF¬•pd± (ý¼Wå¬Ne¤â×Ö3w¤±΢@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼Ÿ‹¶ÑÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9½ŒWß@†µÙ"¦v–6ôÔ¢ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U¼Ÿ‹¶ÑÙñ‹+20ÜS7[AIF¬•pd± (ý (Õ¸MH±µ2-a‡M\`Ò¢@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼Ÿ‹¶ÑÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýŒâéi½âE¾…Ü‘ô:åOÖ¢:‚œ Ê +ÙKFzé®›'üvº¼Ÿ‹¶ÑÙñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^êQc§Ä@ÿ•Ãs^ùõ²Ø¢@ÌŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¼Ÿ‹¶ÑÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°ŽÖ]ksJé™Æ¬"%êÚ¢@ÌŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼Ÿ‹¶ÑÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûÙû=MHÝš¸šŠfû/Ü¢@ÌŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼Ÿ‹¶ÑÙñ‹+aue_pread°2hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýzyþJLήH,Žý>m*Þ¢b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¼Ÿ‹¶ÑÙñ‹+aue_writeš3hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý“·yØD>ˆºphèu5à¢bÌŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¼Ÿ‹¶ÑÙñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýã{ÚŒ{F"”Ö&*±¿ÿâ¢@ÌŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¼Ÿ‹¶ÑÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýûŒ”î¡B”ÇGÙg¾Ç–ä¢@ÌŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼Ÿ‹¶ÑÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°ÔŸ!ïpB‹ôázÜæ¢@ÌŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¼Ÿ‹¶ÑÙñ‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýºý+ÃvDى쳣w–ç^è¢b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¼Ÿ‹¶ÑÙñ‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý ‘ ¾[+O|•5ÖLÙ©¨Ëê¢bÌŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á¼Ÿ‹¶ÑÙñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÇŸ>ÄÏHEªô’r*Üì¢@ÌŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ¼Ÿ‹¶ÑÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý˜«²1¹ÊAÅ¥‚îÞ6÷›î¢JÌŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº¼Ÿ‹¶ÑÙñ‹+aue_sendtoà +ret_msgid +17516hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýê{¬WÎ,K½²ïu7hŠwð¢Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº¼Ÿ‹¶ÑÙñ‹+aue_recvfromà ret_msgid +17516hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýŒ÷$§× M½Òˆ$QÈùò¢bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK¼Ÿ‹¶ÑÙñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýiÎUZÈNB„Và_ÅÍ`Vô¢D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºú•×¿ÑÙñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÂiK&ï§B<¿Uÿ!pÛZAö¢D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºú•×¿ÑÙñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýWŽ:„FŠ‰ÐäÒ—wGø¢D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºú•×¿ÑÙñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý^–U>Kð¿¨}_o6ú¢D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºú•×¿ÑÙñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý®ï` „6HÏl‘Jiü¢0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÐŒ­øÖÙñ‹+aue_lseek泤hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý9Ž´zDM ,r‡%I|ãþ¢@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eºÇ“ŠÜÙñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý!RƒðùNÆ®r*_¼TÅW€£JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvººÇ“ŠÜÙñ‹+aue_sendtoÚ +ret_msgid +17517hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý¼Tû ßÄA°£NGûøâè‚£JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvººÇ“ŠÜÙñ‹+aue_sendto˜ +ret_msgid +17518hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý›߉'L-…çÏSAH„£JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvººÇ“ŠÜÙñ‹+aue_sendto¬ +ret_msgid +17519hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý|ŠRæhIj­9BKºTE†£JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvººÇ“ŠÜÙñ‹+aue_sendto˜ +ret_msgid +17520hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýÈ6>ßfCó®4êÂA7Õ>ˆ£Dê› µ dôFzé®{'üvºµ CjFzé®{'üvººÇ“ŠÜÙñ‹+aue_recvfromÚ ret_msgid +17517hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýü)­ÚkÆGe´•Pg-#BŠ£Dê› µ dôFzé®{'üvºµ CjFzé®{'üvººÇ“ŠÜÙñ‹+aue_recvfrom˜ ret_msgid +17518hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý‘ïõ2ËÖA‚:À‡@‡6Œ£Dê› µ dôFzé®{'üvºµ CjFzé®{'üvººÇ“ŠÜÙñ‹+aue_recvfrom¬ ret_msgid +17519hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý)ý B1ŽL3QÄGl´Ž£Dê› µ dôFzé®{'üvºµ CjFzé®{'üvººÇ“ŠÜÙñ‹+aue_recvfrom˜ ret_msgid +17520hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÌikHÚ”DÇb™o£0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uü…„»ÞÙñ‹+aue_lseek¦Æ¤hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý×N‰N(=E…´²*ÂZÀ’£0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UØÈë©àÙñ‹+aue_lseek¦Æ¤hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýퟙœ2D\‚z²÷m–ä–£ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UØÈë©àÙñ‹+20ÜS7[AIF¬•pd± (ýü ~ƒxŽI³‚©iu‘~$”£@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UØÈë©àÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¯©I9ÈAo¨ÁYÞn÷i¸£JΟ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºØÈë©àÙñ‹+aue_sendtoà +ret_msgid +17521hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýƒÝÊ+ƒ«C*°ëï'à°1º£Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºØÈë©àÙñ‹+aue_recvfromà ret_msgid +17521hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý“½W–ÜÂE+‡{³í˜l–‡¼£bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKØÈë©àÙñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý+~Œ£C1™¡³›6á¾£D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºØÈë©àÙñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý}êNA‚,ÍÎmŒÀ£D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºØÈë©àÙñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý‡ñøF&¹@Hkâ?î £D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÐú»³àÙñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÓ°•¶9MK—¥+x´š£Ä£D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºÐú»³àÙñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýTäæä÷ÙIO¨š”vŒs›CÆ£0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¢èè‡æÙñ‹+aue_lseek®ì¤hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýf· -csEÕÁ“:aûŽ†È£0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U¸¡ÒËíÙñ‹+aue_lseekˆò¤hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡Éé•J¼´ ˜8²eÚÊ£@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ìä±½îÙñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýÈÇ«ˆ8Dv‚ȵ¡–’ü"Ì£b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ìä±½îÙñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý¬ÙBaÞÌNo³¥è¹ìN`Σ"–œ ×µ¨Fz鮩'üvºÌä±½îÙñ‹+aue_fcntlcmd +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value2ppid1281execbash20ÜS7[AIF¬•pd± (ýD{š)gtHæqË%…G¡Уb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯Ìä±½îÙñ‹+aue_writedhostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýz_KøÓLVÜüy…Õ!Ò£0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UœöåœïÙñ‹+aue_lseekˆò¤hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý½ñöêRF‰€‘J­ŠHÖ£ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UœöåœïÙñ‹+20ÜS7[AIF¬•pd± (ýŽ}蛀E2’5•h9ÓvÔ£@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UœöåœïÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,VÓª²Kà¥öÓŸ÷§Ú£ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UœöåœïÙñ‹+20ÜS7[AIF¬•pd± (ýÞŸ•µÃE׎|t\÷ViØ£@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UœöåœïÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÒÓ GN €«Söv9ÚiÞ£ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UœöåœïÙñ‹+20ÜS7[AIF¬•pd± (ý1+À¯ +¥Jt‹‰.²tBÜ£@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UœöåœïÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøxø‰}¤K¦R˜öRš=à£:‚œ Ê +ÙKFzé®›'üvºœöåœïÙñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý_ÈM²´n‰ïvCâ£@П Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V œöåœïÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý[o!´No€h¿žÐû»€¤D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºœöåœïÙñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYˆ?|û4FØŒ·…ä˜!©‚¤D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºœöåœïÙñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý…k² íkGϱ,’ÁçkÄ„¤D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºœöåœïÙñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§û5kÁÉF)‘×ÑÕí»a†¤@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{eØÉô¶òÙñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýÒäÁÑ¥‘J­LM»‹wˆ¤JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØÉô¶òÙñ‹+aue_sendtoÚ +ret_msgid +17523hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýd®ˆ¡B¶že¡±s.Š¤JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØÉô¶òÙñ‹+aue_sendto˜ +ret_msgid +17524hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýàu¿BãCü¡h« å<Œ¤JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØÉô¶òÙñ‹+aue_sendto¬ +ret_msgid +17525hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýWß·¶¼EJ†CPþ¥OlŽ¤JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvºØÉô¶òÙñ‹+aue_sendto˜ +ret_msgid +17526hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýø~™vNþ~&½ßÚ„¤Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºØÉô¶òÙñ‹+aue_recvfromÚ ret_msgid +17523hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýáßßUÀhC‡iÔë«© ’¤Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºØÉô¶òÙñ‹+aue_recvfrom˜ ret_msgid +17524hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýÑ—VÝRNDGºÁéÒXæ{Ä”¤Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºØÉô¶òÙñ‹+aue_recvfrom¬ ret_msgid +17525hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýù6›?P¼L­»”»jÑø\––¤Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºØÉô¶òÙñ‹+aue_recvfrom˜ ret_msgid +17526hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýòQˆ¥EP¯[Õ!>d3’˜¤0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÖïËŽõÙñ‹+aue_lseek ¬¥hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýò84w'C²²ˆo£Ÿ±Uš¤0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uü‘ŸÒüÙñ‹+aue_lseekú±¥hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýX¿ +X´ÚB?¤5SXüÍœ¤0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”ŒÎþÙñ‹+aue_lseekú±¥hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÐŒ«}ÊÖGôp3[ ¤ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”ŒÎþÙñ‹+20ÜS7[AIF¬•pd± (ý@”+ ¥LˆŽ{‘ð2UꞤ@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”ŒÎþÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý³Ú ¥¶[Fc#øWµXœ¤¤ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”ŒÎþÙñ‹+20ÜS7[AIF¬•pd± (ýßaQ Œ'H©¤ÿ@ýJT¾Í¢¤@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”ŒÎþÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý@Ö_Mš§ì7¶kÉ?³¨¤ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[U”ŒÎþÙñ‹+20ÜS7[AIF¬•pd± (ýz^ˆ(¨ +G–‹z+I/O,¦¤@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”ŒÎþÙñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýp”è%DÖF$œHqZB*jª¤:‚œ Ê +ÙKFzé®›'üvº”ŒÎþÙñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýî)…µézL’²YMù§Ý.¬¤@ÒŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”ŒÎþÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°5bR¦?C¨‚ãRàÜá~®¤@ÒŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”ŒÎþÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýZ{ A5F§~ÚxqJ’°¤@ÒŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”ŒÎþÙñ‹+aue_pread:hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý iŠHü¸V8ç1ž²¤b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº”ŒÎþÙñ‹+aue_writeú:hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý;>ˤ¶J +`½† _#´¤bÒŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”ŒÎþÙñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýôü*Hy°CÚšf°›$¶¤@ÒŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”ŒÎþÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý5Qtù&Bz‘“ê Ô¸¤@ÒŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”ŒÎþÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýý9ÓŒèOܸ¾'·ª”ôº¤@ÒŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U”ŒÎþÙñ‹+aue_preadÒhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýø¾­xL½r<ôK᤼¤b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº”ŒÎþÙñ‹+aue_write¼hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÉJ€3­D‹~ãÚ° çñ¾¤bÒŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡á”ŒÎþÙñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýx\×dDÓD £¹€OžÀ¤@ÒŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ”ŒÎþÙñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡Ö£nÄnBݛ߼¡~2;¤JÒŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvº”ŒÎþÙñ‹+aue_sendtoà +ret_msgid +17527hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýjÚY¾Î4DùtóBÓŽ.uĤDê› µ dôFzé®{'üvºµ CjFzé®{'üvº”ŒÎþÙñ‹+aue_recvfromà ret_msgid +17527hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýþJzPPŠD– »r[qƤbê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAK”ŒÎþÙñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý¢ÙZIØ*@&ä‚@:ŠóȤD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº†ß„šþÙñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýNSSp…òB©6x½–fKʤD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº†ß„šþÙñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýhÞEI£ñûÎ.ö›̤D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº†ß„šþÙñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqŤãîÝG*¢ÜPòÿÏÃΤD‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº†ß„šþÙñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýçQŒæÅCCa­ÅqYK ™dФ0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÌ©Àž„Úñ‹+aue_lseekþ×¥hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýTÝv°òd@‰«75[ EÀ0Ò¤@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¸¹Ê„ˆÚñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýõ;òML/†qñ"Œz^Ô¤b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¸¹Ê„ˆÚñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýê‚çßK@ŽW6Ìp£…PÖ¤@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯èÈÜLjÚñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý÷»(¯GóŽAD‡ìüؤb–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯èÈÜLjÚñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýPtP¯’Bœ¹’õ—™žÕÚ¤@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e–Ÿ€äˆÚñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ýËWd>¼˜JɇLΠyÔ€ܤJÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–Ÿ€äˆÚñ‹+aue_sendtoÚ +ret_msgid +17528hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V"¦œü»T'y—®EÇ¢Âh£7©Þ¤JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–Ÿ€äˆÚñ‹+aue_sendto˜ +ret_msgid +17529hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý4ÁãzBH1ù'+†³à¤JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–Ÿ€äˆÚñ‹+aue_sendto¬ +ret_msgid +17530hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýupË÷ÏKh“©ñ°-0íöâ¤JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº–Ÿ€äˆÚñ‹+aue_sendto˜ +ret_msgid +17531hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý‹RÚóI@Ç S¼ûŒEÁ©ä¤Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–Ÿ€äˆÚñ‹+aue_recvfromÚ ret_msgid +17528hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý³šÛIMm¼X›è)®æ¤Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–Ÿ€äˆÚñ‹+aue_recvfrom˜ ret_msgid +17529hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý ÕÌU DH®¸=È]ô̺è¤Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–Ÿ€äˆÚñ‹+aue_recvfrom¬ ret_msgid +17530hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýVj¯sMU‘·Z#’œ Óê¤Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº–Ÿ€äˆÚñ‹+aue_recvfrom˜ ret_msgid +17531hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýâN¯ÈJž Ox?|(ìcì¤@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ ß¦Í‰Úñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý"ßz| fF¢ÚBè‡È‹•î¤b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯ ß¦Í‰Úñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýIÕºÑìAÄ‚Xã*Qݧð¤@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯†¹íÈŠÚñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýt2ƪÿ@µ€Ûþ&² ò¤b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯†¹íÈŠÚñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý{”!A³K0„‡b.Ðô¤0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[U˜¶°á‹Úñ‹+aue_lseekþô¥hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýù€Ã× M4©m«müÂZ +ö¤@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¤¿ƒë‹Úñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ýc†N§Eÿ€©Ùº¿0¿{ø¤b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯¤¿ƒë‹Úñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý-·7öÞ"D¾ƒ ÝuÝú¤@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯–ÿÕ­ŒÚñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý¸i‘é¬ +JÄ‹ÃÙà=kCü¤b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯–ÿÕ­ŒÚñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ýù`‚Ø&8M+§÷ˆÓ¤ˆvþ¤0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽËÁƒÚñ‹+aue_lseekþô¥hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýó IÁ­œKL¶öl§þ5‚¥ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŽËÁƒÚñ‹+20ÜS7[AIF¬•pd± (ýÜ™@y@ªA“—ž‹‰¶~8À¥@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽËÁƒÚñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0mÙ¡q¦FŸ·Lu¬ûÂW¤†¥ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŽËÁƒÚñ‹+20ÜS7[AIF¬•pd± (ý•ëL~tDEc–œP¨Ó„¥@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽËÁƒÚñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýW`Ù£BMC¸ÌD‹Ú%Š¥ ‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UÄg9IÊÔÆS”ÊìRCÆ[UŽËÁƒÚñ‹+20ÜS7[AIF¬•pd± (ý¦¯›Âëã@j·Aû¼äµÔ—ˆ¥@‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽËÁƒÚñ‹+aue_preadv +ret_miouuidHc4673949-cad4-c653-94ca-ec5243c65b55hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýtªï'ßGg°ùœŠí†Œ¥:‚œ Ê +ÙKFzé®›'üvºŽËÁƒÚñ‹+aue_mprotect +arg_mem_flags['PROT_NONE']hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value0ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý>ÎûóN–—] DÇÂÙ¢Ž¥@ÔŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŽËÁƒÚñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýä°º‡BÙLÇ ˆ1$®IÐ¥@ÔŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽËÁƒÚñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýï˜,àî4Hh¾a„u•ô’¥@ÔŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽËÁƒÚñ‹+aue_preadü%hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¡:Dc,Kû¬¿ƒûRš´”¥b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽËÁƒÚñ‹+aue_writeæ&hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý,­+Ù`@É™sÜ?Ðtó–¥bÔŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŽËÁƒÚñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÅrz>‰A + @y øŠë˜¥@ÔŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŽËÁƒÚñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý°íá½uC §Û3^Zdš¥@ÔŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽËÁƒÚñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýqªË­ƒIÚ¹§IFí´œ¥@ÔŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŽËÁƒÚñ‹+aue_preadøhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýí4ÈŽ_A[‹­ðlEÿž¥b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽËÁƒÚñ‹+aue_writeâhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýv 7¤æC]™´|;U'{% ¥bÔŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áŽËÁƒÚñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýq²N¹kQG0§Ášž°TÑ¢¥@ÔŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V ŽËÁƒÚñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý—›hO±ùKF¸ÜD¢ÿa¤¥JÔŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºŽËÁƒÚñ‹+aue_sendtoà +ret_msgid +17532hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý./LJ@Š± 0¿kôe¦¥Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºŽËÁƒÚñ‹+aue_recvfromà ret_msgid +17532hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýcöûGˆA +Š¾s•Êòܨ¥bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKŽËÁƒÚñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ýBZÓ¦ë»N¬ø±}Ӝ۪¥D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽËÁƒÚñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý–R:mÔkOµEEyùS’L¬¥D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºŽËÁƒÚñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýøæîJ9@°¤¿òÒXÚh®¥D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºžÄ„Úñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý£ìÚºkx@ŒñHÆ_Rº6°¥D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºžÄ„Úñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýêI^hMD´‹¹j¥0#¾²¥@–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯œ‘¿¯ŽÚñ‹+aue_readhostHdc53375b-4149-46ac-9570-64b1090f28fdfd0ppid1281execbash20ÜS7[AIF¬•pd± (ý®æ¡2U*J0·á'ã!º´¥b–œ ×µ¨Fz鮩'üvºí( ö~R¶ ~{‚~¯œ‘¿¯ŽÚñ‹+aue_writehostHdc53375b-4149-46ac-9570-64b1090f28fdfd2ppid1281execbash20ÜS7[AIF¬•pd± (ý¤qF~é®Ò'üvºÎ×µ¨Fz鮩'üvº°äÿ§®]vRS<„äB±œ‘¿¯ŽÚñ‹+hostHdc53375b-4149-46ac-9570-64b1090f28fd20ÜS7[AIF¬•pd± (ýR8M&\¬Eÿ³Qç~ú€¶¥$–œ ×µ¨Fz鮩'üvº¤qF~é®Ò'üvºœ‘¿¯ŽÚñ‹+aue_fork +arg_pid1575hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value1575ppid1281execbash20ÜS7[AIF¬•pd± (ýB"‡·!ÈL¯²EüC /¸¥°œ ¤qF~é®Ò'üvºÑROÄ:^…[ž:]!+…í/usr/bin/whoami'ìAzX™¦}˜¹(/libexec/ld-elf.so.1œ‘¿¯ŽÚñ‹+aue_execve +hostHdc53375b-4149-46ac-9570-64b1090f28fdreturn_value-1cmdLine whoamippid1282execbash20ÜS7[AIF¬•pd± (ýL‚ÇÂiNºI1Ï“ÑTkº¥<°œ ¤qF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ  /etc/libmap.confœ‘¿¯ŽÚñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282exec whoami20ÜS7[AIF¬•pd± (ý¿dæȽ-L^¾Š) “ØÚC¼¥@°œ ¤qF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ œ‘¿¯ŽÚñ‹+aue_read^hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýÛÅÿ»¬M»ÊL0Å +눾¥°œ ¤qF~é®Ò'üvº‰oý©äÇU¤©A)Eǹ œ‘¿¯ŽÚñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282exec whoami20ÜS7[AIF¬•pd± (ý<ÆùGu!Nݶæ^‹ÕJµÀ¥<°œ ¤qF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼â0/var/run/ld-elf.so.hintsœ‘¿¯ŽÚñ‹+aue_openat_rwtc +flagsmode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282exec whoami20ÜS7[AIF¬•pd± (ý®6£ÔêùKD£ÆñÊĈ$Â¥@°œ ¤qF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âœ‘¿¯ŽÚñ‹+aue_read€hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýÆ7–rJEƒnÀiÄ¥@°œ ¤qF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âœ‘¿¯ŽÚñ‹+aue_pread¢hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1282exec whoami20ÜS7[AIF¬•pd± (ýôϵ¸WD’Š1i¼Zýô‰Æ¥°œ ¤qF~é®Ò'üvºXꎩð®…\®ð@JÌ…¼âœ‘¿¯ŽÚñ‹+aue_close +hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3return_value0ppid1282exec whoami20ÜS7[AIF¬•pd± (ýa|ü4Á1I•÷,%¤iu¸È¥<°œ ¤qF~é®Ò'üvºÞA`ì•øËQ¸•bxñË"œ/lib/libc.so.7œ‘¿¯ŽÚñ‹+aue_openat_rwtc +flags0mode ret_fd13hostHdc53375b-4149-46ac-9570-64b1090f28fdfd-100return_value3ppid1282exec whoami20ÜS7[AIF¬•pd± (ý©1W¨ÿHA˜‹ô¥@ÖŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V îëíö›Úñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý +µyÅ>I¢Ï,L£K2ö¥@ÖŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uîëíö›Úñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýœ_àæ”Nr­âh³°€“ø¥@ÖŸ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[Uîëíö›Úñ‹+aue_preadÐhostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý¦Qý©WMâ›Þ©„Ý÷ú¥b Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvºîëíö›Úñ‹+aue_writeºhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýÀYîMÎJè’=p¯hzh[ü¥bÖŸ Ê +ÙKFzé®›'üvºÀ‹õ)ä±ëQ±äîoë‡áîëíö›Úñ‹+aue_pwritehostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýYSÍäÚòDú”‡” S)AÅþ¥@ÖŸ Ê +ÙKFzé®›'üvº‚^xü¢W¼Ðk×¢V îëíö›Úñ‹+aue_preadhostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýü¹a‘è—Iœ¹›Yë@€¦JÖŸ Ê +ÙKFzé®›'üvºÊ +oËFzé®›'üvºîëíö›Úñ‹+aue_sendtoà +ret_msgid +17533hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V" Œ1~R[Õ½Gâ§s¸Î5-¡‚¦Dê› µ dôFzé®{'üvºµ CjFzé®{'üvºîëíö›Úñ‹+aue_recvfromà ret_msgid +17533hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý_úcu¬7NÛ¥ø\!ý‡_L„¦bê› µ dôFzé®{'üvº†ƒmìíuURµíÂ^UAKîëíö›Úñ‹+aue_writev°hostHdc53375b-4149-46ac-9570-64b1090f28fdfd19ppid1execsyslogd20ÜS7[AIF¬•pd± (ý/Æ¿Ç'NBšžhôz ‰Ëj†¦D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¸˜¶€œÚñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý~œŸÔØI?žŠžæEúˆ¦D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¸˜¶€œÚñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý§Â褧9Mì¸?ºÚGIŠ¦D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¸˜¶€œÚñ‹+aue_recvfromhostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ý0ò8COC¤Ì=…Ëÿ”mŒ¦D‚œ Ê +ÙKFzé®›'üvºÙy5.F}é®Ã'üvº¸˜¶€œÚñ‹+aue_recvfrom\hostHdc53375b-4149-46ac-9570-64b1090f28fdfd14ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýñò2Ø<ãG9…óļ+o¹Ž¦@Ö› ´ýèFzé®g'üvºã“0;r„WŸr-¤w„{e®·ÿŸÚñ‹+aue_read¸hostHdc53375b-4149-46ac-9570-64b1090f28fdfd3ppid1execdevd20ÜS7[AIF¬•pd± (ý¿ÍòHÜLÚ’ðõíJ¾a¦JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®·ÿŸÚñ‹+aue_sendtoÚ +ret_msgid +17534hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý….8ÃAÇ¢8jRø¿à’¦JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®·ÿŸÚñ‹+aue_sendto˜ +ret_msgid +17535hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýe ¸[MijX¼‰ˆ"¯”¦JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®·ÿŸÚñ‹+aue_sendto¬ +ret_msgid +17536hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ý«5â”}Eܲ‚òŸj«=ƒ–¦JÖ› ´ýèFzé®g'üvº¶“àüFzé®›'üvº®·ÿŸÚñ‹+aue_sendto˜ +ret_msgid +17537hostHdc53375b-4149-46ac-9570-64b1090f28fdfd8ppid1execdevd20ÜS7[AIF¬•pd± (ýCv–ëÄžHŸ +ÔÐ^/˜¦Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº®·ÿŸÚñ‹+aue_recvfromÚ ret_msgid +17534hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýçï.LÛ¦«S”üóßnš¦Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº®·ÿŸÚñ‹+aue_recvfrom˜ ret_msgid +17535hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý&e¶Í¾E¡©Àœßl&¼žœ¦Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº®·ÿŸÚñ‹+aue_recvfrom¬ ret_msgid +17536hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ý…’lIí™ofÌÓk”ž¦Dê› µ dôFzé®{'üvºµ CjFzé®{'üvº®·ÿŸÚñ‹+aue_recvfrom˜ ret_msgid +17537hostHdc53375b-4149-46ac-9570-64b1090f28fdfd9ppid1addressexecsyslogd20ÜS7[AIF¬•pd± (ýþ“U@¡ÍA¬€†ÇD´7:º ¦0‚œ Ê +ÙKFzé®›'üvºÄg9IÊÔÆS”ÊìRCÆ[UŠÎö´¢Úñ‹+aue_lseekÈ÷¦hostHdc53375b-4149-46ac-9570-64b1090f28fdfd7ppid1exec +dlogd20ÜS7[AIF¬•pd± (ýìÂ\\{ü©Ý/ 6V" \ No newline at end of file diff --git a/with_dlogd/cdm/sample2.cdm.json b/with_dlogd/cdm/sample2.cdm.json new file mode 100644 index 0000000..8250b92 --- /dev/null +++ b/with_dlogd/cdm/sample2.cdm.json @@ -0,0 +1,19378 @@ +{"datum":{"Host":{"uuid":"dc53375b-4149-46ac-9570-64b1090f28fd","hostName":"cadets-bbn","ta1Version":"versionn_innfo:translator, 2019 Mar 4 15:33:16, 1833e058956186fe832c4cc2b027c65667a09bcd; ","hostIdentifiers":{"array":[]},"osDetails":{"string":"FreeBSD 13.0-CURRENT FreeBSD 13.0-CURRENT 5da4c1df8d5(HEAD) CADETS amd64"},"hostType":"HOST_DESKTOP","interfaces":{"array":[{"name":"em0","macAddress":"08:00:27:fc:76:ba","ipAddresses":{"array":["10.0.2.15"]}},{"name":"em1","macAddress":"08:00:27:f9:7a:ba","ipAddresses":{"array":["192.168.56.101"]}}]}}},"CDMVersion":"20","type":"RECORD_HOST","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Principal":{"uuid":"992c0c42-aaa2-5424-b584-06e4fd60da90","type":"PRINCIPAL_LOCAL","userId":"0","username":{"string":"root"},"groupIds":{"array":[]},"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_PRINCIPAL","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b50b64f4-467a-11e9-ae7b-080027fc76ba","type":"SUBJECT_PROCESS","cid":725,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b66ba246-c950-40bc-8af0-a4135e22f881","sequence":{"long":0},"type":"EVENT_READ","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895034370801,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c1555c7c-d38e-9a58-8ed3-e319889a0469","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74bf8c27-a121-4b8f-a2c5-7865c596348a","sequence":{"long":1},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"c1555c7c-d38e-9a58-8ed3-e319889a0469"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895034370801,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"86836dec-ed75-5552-b5ed-c25e1255414b","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1196bc9-49e9-48a1-b5a5-ae6bda276654","sequence":{"long":2},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895034370801,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"e393303b-721f-8457-9f72-2da477847b65","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b4fde811-467a-11e9-ae67-080027fc76ba","type":"SUBJECT_PROCESS","cid":605,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4d4cf74-bcaf-4254-99ea-d0abc7124c6e","sequence":{"long":3},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"b693e0fc-467a-11e9-ae9b-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77375598-7742-49ab-aa1e-c6f2388bfcd0","sequence":{"long":4},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"351","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16ce8748-5501-4324-a3bd-f52a312e93d1","sequence":{"long":5},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"352","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e75b8f93-7611-4f11-b9c2-4404673c9c8e","sequence":{"long":6},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"353","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7cb3fdb-9cf9-4c36-93db-648b8b67279c","sequence":{"long":7},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"354","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"b50b436a-467a-11e9-ae7b-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c91b1d81-6406-4602-a45e-bfafa2517108","sequence":{"long":8},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"351","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afb3be58-a7b6-4cfd-952d-e2d41674ab7d","sequence":{"long":9},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"352","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06e18172-2d8c-4c53-815f-50ce3925bfe1","sequence":{"long":10},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"353","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9084264b-cdc3-4a31-a872-02edf422ac0e","sequence":{"long":11},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"354","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c4673949-cad4-c653-94ca-ec5243c65b55","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ca0ad94b-467a-11e9-ae9b-080027fc76ba","type":"SUBJECT_PROCESS","cid":1242,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"853a4b7f-33c7-45bd-a8be-d41c3a7faab4","sequence":{"long":12},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895933902951,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1578},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e54a3328-0cc6-4fd7-a905-a1c45451f512","sequence":{"long":13},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1578},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79e5ba93-fc19-42b3-863f-90586a418c5d","sequence":{"long":15},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0d95504-7956-4f5d-9aba-d065ddf3a904","sequence":{"long":14},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e36ca9a-8066-4391-b68e-8865b5001986","sequence":{"long":17},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98a56e32-766b-494a-9943-eb860d7088a8","sequence":{"long":16},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3d86882-08bf-43b6-a827-ee32393a9b49","sequence":{"long":18},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"825e9d78-8dfc-a257-bc8d-d06bd7a25609","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f39203f0-7ab2-414b-a4ce-3a940f68c2d4","sequence":{"long":19},"type":"EVENT_READ","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a88f8cd8-31d8-4f7e-ad30-fec26fd16956","sequence":{"long":20},"type":"EVENT_READ","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a5e1df8-5cc1-4e5d-843a-053d567c3493","sequence":{"long":21},"type":"EVENT_READ","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1574},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7933234-812b-456b-ab9c-7007ed1a3948","sequence":{"long":22},"type":"EVENT_WRITE","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ca0be36d-467a-11e9-ae9b-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7fed6d8-2ffc-4fc1-b527-bdf62a36e0dd","sequence":{"long":23},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1627},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4b84932-6d1c-4be2-9d21-a0f056e59b09","sequence":{"long":24},"type":"EVENT_READ","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4b16275-c4ec-44d7-a898-7863a610b1e5","sequence":{"long":25},"type":"EVENT_SENDTO","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"355","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aae38a15-2a64-45a9-8795-19f583cd0ed0","sequence":{"long":26},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"355","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69db8252-a642-4e13-a1db-bc8e5820d277","sequence":{"long":27},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b6dc696-f5db-4d3f-acc7-1a2222f907b0","sequence":{"long":28},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896134203227,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1971204-b474-4cf5-b9a6-48b756b560ce","sequence":{"long":29},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896134203227,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44b0ecc8-8ff7-47f7-ac80-caa593746c2b","sequence":{"long":30},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896944139252,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":3413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecb95b69-5e25-49c1-9726-bb036f9cc308","sequence":{"long":31},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582897954065555,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":3775},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ced7f31-4f78-4a2a-b35b-94cab07c8a19","sequence":{"long":32},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":3775},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"535f343d-b7b0-4351-9251-615a34edfff4","sequence":{"long":34},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c2b1600-6ea4-48b8-9b9b-f58d53505a9b","sequence":{"long":33},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"841a45f4-eeb1-48a4-8e40-094f70b4b6b2","sequence":{"long":36},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b6f1044-523a-4219-a541-94da406ba05a","sequence":{"long":35},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58486891-48cb-472b-b036-74cdc2c5b51b","sequence":{"long":38},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34edcdcb-8a30-40cb-92cd-fa49da3b2008","sequence":{"long":37},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53cf5d2f-8e6c-4ef2-b983-8352cdca0657","sequence":{"long":39},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2067b391-3d15-4bbe-8656-b58d2f60bcfa","sequence":{"long":40},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"210580c4-a46d-454f-9a0d-e8d8219a75c2","sequence":{"long":41},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d4a6a11-bf36-423b-b8bb-29ebd1adc0e6","sequence":{"long":42},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1831},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8c4d148-44cb-4688-ae5b-5c1766cd7789","sequence":{"long":43},"type":"EVENT_WRITE","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b78fd1e-7875-4118-8de8-7dab18e03eac","sequence":{"long":44},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1884},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bff95f49-0cac-42e8-b988-8299cf953594","sequence":{"long":45},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6ac5c07-3984-4038-93fe-5eb2f66a8012","sequence":{"long":46},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1fcc185-b567-41cd-9fc2-1c496c2f78fc","sequence":{"long":47},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5724e373-fdaf-4c44-8e81-28e2a5f10cf7","sequence":{"long":48},"type":"EVENT_WRITE","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cb22210-23ab-45f9-aed4-4308c9390961","sequence":{"long":49},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fb37069-ea23-43b1-9ea9-9b01b19edb9d","sequence":{"long":50},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b5c1885-1525-46a8-89cb-1aeb54c34d13","sequence":{"long":51},"type":"EVENT_SENDTO","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"356","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"715e60ce-fff7-4c4b-bf9e-86d29465dd1f","sequence":{"long":52},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"356","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed3a49e0-a5d6-4b06-a53f-55e07b58e5a8","sequence":{"long":53},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"066624f6-1f1e-48d6-8733-5fd20ccba3cf","sequence":{"long":54},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cefc7b08-1dbf-4521-910b-ae89dfedc26f","sequence":{"long":55},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91ce3e6f-2fa2-40c1-a842-f7a980ac518d","sequence":{"long":56},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed169e1e-c2a7-4ac1-99ba-04152e5f51f9","sequence":{"long":57},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35fc5fcc-760f-4fcd-8740-3af7246df7e0","sequence":{"long":58},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92de85e1-12d4-4e11-b083-ccaa00a4cbff","sequence":{"long":59},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"357","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f51fd605-6711-47b3-89cb-1fe9867d3da7","sequence":{"long":60},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"358","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d8f3d2f-4d5b-4de4-98f6-31e5b675e028","sequence":{"long":61},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"359","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec7d0681-cf0d-4e89-96ad-939216bf6e57","sequence":{"long":62},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"360","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2a49388-db64-4318-8fe2-7577bed4e274","sequence":{"long":63},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"357","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"037f3964-5085-41ac-9985-773956fd2804","sequence":{"long":64},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"358","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"731b7c07-53f2-42cb-8b53-08a78d9e8586","sequence":{"long":65},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"359","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdfe43f6-4507-42c6-be5f-556d5874e7de","sequence":{"long":66},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"360","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c466150-960a-4872-bb3c-d40da3c43c50","sequence":{"long":67},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898964841090,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":6972},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e35926c6-365b-4884-a686-4df18e49aa59","sequence":{"long":68},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582899973949516,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":7337},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1b3501b-6718-456a-8f39-a91099db6cc4","sequence":{"long":69},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":7337},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9772f152-815a-40ad-9a8e-2a55d48fd6c8","sequence":{"long":71},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f6ee99d-f73f-4a41-93a5-7751b7a8dac4","sequence":{"long":70},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"215d8c73-fb3a-46f8-b0a2-7d9d73bbf508","sequence":{"long":73},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4e6fa7f-38b2-4c45-bdb7-d41aece33914","sequence":{"long":72},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"275fca7e-2fce-4594-9872-650128cf6326","sequence":{"long":75},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9f296a1-881e-4701-898a-59f79d3764ff","sequence":{"long":74},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5367fe46-ee78-412b-ae10-44d8f15f951f","sequence":{"long":76},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6f0d58b-c04e-446c-90c4-05be335a2ec2","sequence":{"long":77},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9260d44-2a63-480a-9ad0-3de7d5449ec6","sequence":{"long":78},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7cf124b-4d0a-4967-a2ff-ed749aad561f","sequence":{"long":79},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3193},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0760116e-8fa7-412b-98c5-5d1779348374","sequence":{"long":80},"type":"EVENT_WRITE","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8aeb698a-0981-480e-8e82-00610b5229e3","sequence":{"long":81},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3246},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fce63c99-73e0-4ca8-9450-aedcc5d6f900","sequence":{"long":82},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aee5b600-8099-4558-b62b-0cc780e9754f","sequence":{"long":83},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f11d3ac-0040-4592-81b2-6b68c4d6cd87","sequence":{"long":84},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a840d7b-2727-400d-9623-300f3e097ebf","sequence":{"long":85},"type":"EVENT_WRITE","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1c7398b-16ba-4ec2-833a-597f7eba9872","sequence":{"long":86},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe45bb37-ed17-4b16-a1a2-b11520126fcb","sequence":{"long":87},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d995885-30f1-4ca8-bad5-d41c39e14bc4","sequence":{"long":88},"type":"EVENT_SENDTO","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"361","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6c57824-417e-49be-9add-84b811d1f4ae","sequence":{"long":89},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"361","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"066d8365-11b4-4a52-8849-84df5d97c49b","sequence":{"long":90},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ea15e69-bec5-4e1f-b8c5-ce9303d4fa3f","sequence":{"long":91},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900134758205,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a234bf46-9c3b-4fc9-afe9-f5d99bb6dfe7","sequence":{"long":92},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900134758205,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4589d0df-9ebb-472d-8f48-1af3e9df51b9","sequence":{"long":93},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900134758205,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e64fcd96-6b56-4ad1-9038-75cc7d415d40","sequence":{"long":94},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900134758205,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"b54fd750-467a-11e9-ae92-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"192.168.56.101"},"localPort":{"int":22},"remoteAddress":{"string":"192.168.56.1"},"remotePort":{"int":61633},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"d66412b7-467a-11e9-aea7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"192.168.56.101"},"localPort":{"int":22},"remoteAddress":{"string":"192.168.56.1"},"remotePort":{"int":61633},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b54fadf6-467a-11e9-ae92-080027fc76ba","type":"SUBJECT_PROCESS","cid":1108,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3c489f5-e876-4c45-8ec6-05a4b866bdc5","sequence":{"long":95},"type":"EVENT_ACCEPT","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"b54fd750-467a-11e9-ae92-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"d66412b7-467a-11e9-aea7-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_accept"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"5","ppid":"1","address":"192.168.56.1","port":"61633","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8058cda-9cdb-40a2-9652-cbb2577beed7","sequence":{"long":96},"type":"EVENT_FCNTL","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"6","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf40cdbb-8eb1-4d54-924e-9ae877e94756","sequence":{"long":97},"type":"EVENT_FCNTL","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d6641bd1-467a-11e9-aea8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d6641bd1-467a-11e9-aea7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"772a44fb-7156-5e27-b653-732212cd589d","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"d6641bd1-467a-11e9-aea7-080027fc76ba"},"uuid2":{"UUID":"d6641bd1-467a-11e9-aea8-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55fb2a07-b714-4a6e-9a82-9bef24669adc","sequence":{"long":98},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"772a44fb-7156-5e27-b653-732212cd589d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","ret_fd2":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d6641df6-467a-11e9-aea8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d6641de9-467a-11e9-aea8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"2d87dac1-5f0f-5cfb-8d06-3554db4401a5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"d6641de9-467a-11e9-aea8-080027fc76ba"},"uuid2":{"UUID":"d6641df6-467a-11e9-aea8-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb52a631-1bf8-4cf0-b837-a55d9803c6bf","sequence":{"long":99},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"2d87dac1-5f0f-5cfb-8d06-3554db4401a5"},"predicateObjectPath":null,"predicateObject2":{"UUID":"d6641df6-467a-11e9-aea8-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_socketpair"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","ret_fd2":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d6642793-467a-11e9-aea8-080027fc76ba","type":"SUBJECT_PROCESS","cid":1278,"parentSubject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":1552582900834145195},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ddb96ac-5528-4487-805c-3683f832f7b6","sequence":{"long":100},"type":"EVENT_FORK","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1278","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1278","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"27ec417a-1419-0858-9914-a67d9808b904","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"8bdbf70c-2584-fe5b-8425-ffe24bfe3202","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd154102-8a1b-4e1f-88d8-a7e6a155053a","sequence":{"long":101},"type":"EVENT_EXECUTE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"8bdbf70c-2584-fe5b-8425-ffe24bfe3202"},"predicateObjectPath":{"string":"/usr/sbin/sshd"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582900834145195,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/sbin/sshd -R","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"17896ffd-a9e4-c755-a4a9-412945c7b90c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2903bc17-61f6-48a4-b84a-c7354a1ceef5","sequence":{"long":102},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50683713-6b99-449e-8e81-26e906ffec36","sequence":{"long":103},"type":"EVENT_CLOSE","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"d6641de9-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e014fb8c-06e2-4ab1-ad86-859ff8e02076","sequence":{"long":104},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"58ea8ea9-f0ae-855c-aef0-404acc85bce2","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29673fb4-e1c3-4891-86c1-e6f240b4ed79","sequence":{"long":105},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bf29d6b-a0f4-4ba1-9ed8-9142ed5e151b","sequence":{"long":106},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"995322e3-5e01-44e8-a30e-f9b1e271a6d1","sequence":{"long":107},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"20aa562e-78b1-685e-b178-e5904e689ef5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a888e2d3-663f-43cf-a13c-a3427b035563","sequence":{"long":108},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":{"string":"/usr/lib/libpam.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0264bd58-351b-47b3-9d1a-b711f8110de9","sequence":{"long":109},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4cdcd114-c4ad-0851-adc4-bacbc10874a4","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdddeacc-6b88-4290-a793-48582251fdca","sequence":{"long":110},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4cdcd114-c4ad-0851-adc4-bacbc10874a4"},"predicateObjectPath":{"string":"/usr/lib/libprivatessh.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c81531a-021c-426b-aa75-219a37a8a957","sequence":{"long":111},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4cdcd114-c4ad-0851-adc4-bacbc10874a4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a1bce36-e1b6-4a55-be5c-63a4a3082fc8","sequence":{"long":112},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44a025fc-787e-49d3-8b45-2f701102b0a6","sequence":{"long":113},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"baebe83f-13ee-49c2-98f6-cb9ccdd0f3fd","sequence":{"long":114},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":{"string":"/usr/lib/libbsm.so.3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddccb7f8-7c62-41cb-930b-f3225ce7e70d","sequence":{"long":115},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"a1687d5a-9a65-045e-a59a-97b4fe04b3bf","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86b7b7d7-7aa0-44b3-9cca-51252bc547bc","sequence":{"long":116},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a1687d5a-9a65-045e-a59a-97b4fe04b3bf"},"predicateObjectPath":{"string":"/usr/lib/libblacklist.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"861c34cf-a6c1-4ff4-a840-e33f1a300c53","sequence":{"long":117},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a1687d5a-9a65-045e-a59a-97b4fe04b3bf"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"842f7c15-d3f8-6754-b8d3-e6077467aec3","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6d9b14f-dc2e-42f3-b4e0-a59b2af9e18d","sequence":{"long":118},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"842f7c15-d3f8-6754-b8d3-e6077467aec3"},"predicateObjectPath":{"string":"/usr/lib/libgssapi_krb5.so.10"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddb0ee79-6d22-4070-99d7-63ebd54b881d","sequence":{"long":119},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"842f7c15-d3f8-6754-b8d3-e6077467aec3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6f98459d-6d2f-ff5f-af6d-07280fffd3cb","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c588162d-542f-4be8-b347-0224aacf86a9","sequence":{"long":120},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6f98459d-6d2f-ff5f-af6d-07280fffd3cb"},"predicateObjectPath":{"string":"/usr/lib/libgssapi.so.10"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af66911f-1551-4e45-b2ba-46eaae4d20c5","sequence":{"long":121},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6f98459d-6d2f-ff5f-af6d-07280fffd3cb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"3a5de0c0-3468-0e56-a834-3339660e07e7","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d73f405-e648-4124-9038-c56eca5328c6","sequence":{"long":122},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3a5de0c0-3468-0e56-a834-3339660e07e7"},"predicateObjectPath":{"string":"/usr/lib/libkrb5.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36c9f3c5-6662-4a98-b458-1d38b737de65","sequence":{"long":123},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3a5de0c0-3468-0e56-a834-3339660e07e7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"002f9f80-1361-7654-a113-52b9a4768b0c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05913817-19c0-4e7f-91c5-7e3f633b4714","sequence":{"long":124},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"002f9f80-1361-7654-a113-52b9a4768b0c"},"predicateObjectPath":{"string":"/usr/lib/libwrap.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7be3ba3-ce61-4521-89c8-052b9e73970a","sequence":{"long":125},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"002f9f80-1361-7654-a113-52b9a4768b0c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"65a0c3e1-4df2-5355-b24d-52809553d9e2","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b71b5c5d-41fe-466c-8bd0-d20f6e07d394","sequence":{"long":126},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"65a0c3e1-4df2-5355-b24d-52809553d9e2"},"predicateObjectPath":{"string":"/lib/libcrypto.so.111"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be8136d1-65ec-4b86-918e-355108f0c716","sequence":{"long":127},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"65a0c3e1-4df2-5355-b24d-52809553d9e2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"de4160ec-95f8-cb51-b895-6278f1cb229c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"355eb6f6-e9e9-44cb-8992-5cf27ddb4a60","sequence":{"long":128},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cefcecb8-03c8-4858-9063-b021a9d1aa0d","sequence":{"long":129},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"e6f4c6b4-7c40-ef56-807c-7da296efff27","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8910acc8-9a1c-4843-9b1c-39104751b7a1","sequence":{"long":130},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"e6f4c6b4-7c40-ef56-807c-7da296efff27"},"predicateObjectPath":{"string":"/usr/lib/libprivateldns.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a22a6fad-472c-43ef-b3ea-d854c6d71220","sequence":{"long":131},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"e6f4c6b4-7c40-ef56-807c-7da296efff27"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"361927fc-6969-1555-a969-68fff515170e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f8e9957-61b4-4e18-b05c-584e3155d448","sequence":{"long":132},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":{"string":"/lib/libcrypt.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23d2f551-c1f9-4cda-8be9-fad087128f38","sequence":{"long":133},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"a55fa421-3072-7451-b230-2012f174bff1","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77df2dae-cfa9-4d3b-bfe2-bc6594846651","sequence":{"long":134},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":{"string":"/lib/libz.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95e594c6-fd00-4464-8004-e4a0a880513d","sequence":{"long":135},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c7381901-4ea2-b956-a24e-59a436b93c00","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6c61b37-30fd-46ca-9883-5f5903e63cd6","sequence":{"long":136},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":{"string":"/lib/libthr.so.3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"699a40c9-1a3f-44d1-9282-f0ba48360e98","sequence":{"long":137},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d1c77a04-4c52-7253-924c-62b47372e504","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29f5fec3-49a9-4888-8450-d583e82e38d2","sequence":{"long":138},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d1c77a04-4c52-7253-924c-62b47372e504"},"predicateObjectPath":{"string":"/usr/lib/libroken.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bda5a88-3d59-4408-99b8-2142d038f349","sequence":{"long":139},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d1c77a04-4c52-7253-924c-62b47372e504"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70ee13e1-426e-48ae-a99f-70b19fcb012f","sequence":{"long":140},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d"},"predicateObjectPath":{"string":"/usr/lib/libasn1.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0eae6ee3-1aa4-4f5e-a44a-50c256bedd5c","sequence":{"long":141},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f3b68756-6263-9455-a362-0034d594ada7","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"387bc3df-08da-49c6-9a09-b13957b2c542","sequence":{"long":142},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f3b68756-6263-9455-a362-0034d594ada7"},"predicateObjectPath":{"string":"/usr/lib/libcom_err.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"748683f1-2105-42c3-b709-693e0a9d29a8","sequence":{"long":143},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f3b68756-6263-9455-a362-0034d594ada7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4a8576d1-4c86-4855-864c-eea21548af1c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0e8122c-6217-456b-9b61-2d49d1f006ac","sequence":{"long":144},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4a8576d1-4c86-4855-864c-eea21548af1c"},"predicateObjectPath":{"string":"/usr/lib/libhx509.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01adda38-a493-4ee2-8253-31213749db9e","sequence":{"long":145},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4a8576d1-4c86-4855-864c-eea21548af1c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"190f8274-d045-4319-be19-6dedcfa4e202","sequence":{"long":146},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5"},"predicateObjectPath":{"string":"/usr/lib/libwind.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"835fbfdc-9fd0-4299-8875-cf52b5ef2ab3","sequence":{"long":147},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"99fc3185-2025-565b-a520-dc0cab56462c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2c86087-5723-4870-9997-a2336f5e608a","sequence":{"long":148},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"99fc3185-2025-565b-a520-dc0cab56462c"},"predicateObjectPath":{"string":"/usr/lib/libheimbase.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e65e84af-5102-42e3-9a16-9ba0ac5579a7","sequence":{"long":149},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"99fc3185-2025-565b-a520-dc0cab56462c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"02a6c778-5410-d854-9054-fc1f24d8e4bd","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6384332-ebe9-4dc0-9936-7a2fecb96e6f","sequence":{"long":150},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"02a6c778-5410-d854-9054-fc1f24d8e4bd"},"predicateObjectPath":{"string":"/usr/lib/libprivateheimipcc.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd4c425e-fd31-4c19-98c7-ca0ec783c32a","sequence":{"long":151},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"02a6c778-5410-d854-9054-fc1f24d8e4bd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c0a44a27-28a6-d358-a628-06b288d3fd01","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2606077-bfd7-4e64-8e23-004d464f3ad3","sequence":{"long":152},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"c0a44a27-28a6-d358-a628-06b288d3fd01"},"predicateObjectPath":{"string":"/usr/lib/libssl.so.111"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62aebabc-a5cb-4398-b0b2-bda95cf91e59","sequence":{"long":153},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"c0a44a27-28a6-d358-a628-06b288d3fd01"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1761ffbc-17c3-458c-800d-e037bbd10a0d","sequence":{"long":154},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f225bad5-8f9a-4831-8860-3ada8ceacbb1","sequence":{"long":155},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4002b90-cf37-4812-9f76-a4b87f975a79","sequence":{"long":156},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aaaa4662-d811-4bc1-b464-c9044074c070","sequence":{"long":157},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e886ec4a-1a4b-4740-a373-bdb4825a3ade","sequence":{"long":158},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47013d0d-5f2f-4c8b-a0c8-174ffa9d5d01","sequence":{"long":159},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94312226-c28a-4fb5-9d4c-2418e0158fd5","sequence":{"long":160},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ff5d6cd-32c2-46ba-9a0f-517b9aac03c8","sequence":{"long":161},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6504c37f-9df7-4feb-a29d-f3a2db4ed6ec","sequence":{"long":162},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"053786c2-7bd7-40f5-91bf-848ac5f10362","sequence":{"long":163},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed27a559-9303-45e5-9ffc-a904d311309a","sequence":{"long":164},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06281a9f-ca88-405e-a443-68b77828a51f","sequence":{"long":165},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b139a1c0-5594-4b7b-a3df-275c2dfc633c","sequence":{"long":166},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"157c7c57-e930-4525-a7c1-e516fbfce2b5","sequence":{"long":167},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c6f5ea8-f556-4a7a-b255-425bf1ac6809","sequence":{"long":168},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e997d42a-548b-4465-986d-c35b16165f59","sequence":{"long":169},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b2ba6e9-0ffc-4dca-9862-3413db63aea7","sequence":{"long":170},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ff3facd-36c7-493f-8497-cfa470cda44a","sequence":{"long":171},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fca7f6f-3c9e-42f0-bff4-2a15dfdb2587","sequence":{"long":172},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0e623ee-8fdf-4de2-96fd-b9a115ff9881","sequence":{"long":173},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17ccc062-3a61-4e7b-9442-1cc688783eff","sequence":{"long":174},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4de9587a-4340-42b4-b1d1-b9db6c25159c","sequence":{"long":175},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7ab4cd3-ece8-4468-a655-28a6fd1b97ac","sequence":{"long":176},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8d0cdb5-874c-4095-8ea4-f299027b06eb","sequence":{"long":177},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84e50037-59a7-4bf6-90a5-619eb1ec7c8d","sequence":{"long":178},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"1633500b-d34b-8058-8bd3-abb7d880915e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fb918f3-d720-4ae1-ad40-13e6097ec7d2","sequence":{"long":179},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cdd6f13-8b75-49ce-a622-f8b99c785353","sequence":{"long":180},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e76ab21-5437-4490-a303-fa69fdf08f04","sequence":{"long":181},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"65a0c3e1-4df2-5355-b24d-52809553d9e2"},"predicateObjectPath":{"string":"/lib/libcrypto.so.111"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0632ee97-d80a-4309-884b-eb27ca5ec1bc","sequence":{"long":182},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"65a0c3e1-4df2-5355-b24d-52809553d9e2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"8a2ac349-5bae-1a5c-ae5b-70678c1aee0c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1ae2110-cbb3-4d0e-adb5-33fdd237d633","sequence":{"long":183},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"8a2ac349-5bae-1a5c-ae5b-70678c1aee0c"},"predicateObjectPath":{"string":"/etc/ssl/openssl.cnf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c90d5ee-9c9d-4445-9d68-9acefc5b628c","sequence":{"long":184},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"8a2ac349-5bae-1a5c-ae5b-70678c1aee0c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d665e1f3-467a-11e9-aea8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b250c0a-ee23-4d0c-a8a2-db33b6818826","sequence":{"long":185},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d665e1f3-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d665e5a7-467a-11e9-aea8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba3f1b7c-6007-42c0-8909-d6d9518b149c","sequence":{"long":186},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d665e5a7-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60902ad3-2364-4c6a-b8f7-d676baca5541","sequence":{"long":187},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46d4b952-cf2e-45e6-aa6b-6e2463c0952a","sequence":{"long":188},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a3a7b73-702b-45f7-b055-dcddfa3068e9","sequence":{"long":189},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e0840f2-53f0-4875-a214-6787c591f97c","sequence":{"long":190},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a38dc5b3-1da6-4673-8ca3-7a69ecb1801f","sequence":{"long":191},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b123e626-d627-4df4-ac2e-7abb640e2f09","sequence":{"long":192},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b213aa0-4a50-4722-8adc-a122e4973ef2","sequence":{"long":193},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf138165-bb83-4915-80c6-2becb6072275","sequence":{"long":194},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86270bed-72b2-4657-b5d6-485fa428a06c","sequence":{"long":195},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e7a45bf-9d66-4179-a6d9-a1d5ee9ff690","sequence":{"long":196},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0803bf6-934b-4706-a643-4bca049d970c","sequence":{"long":197},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bea1ab3f-b4fd-4799-b953-2b8e517bdea8","sequence":{"long":198},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6c8822f7-64d2-8f57-9264-2ff0a78fab74","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac3b9aae-8a43-49c9-a3d4-01ee9b67fda4","sequence":{"long":199},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c8822f7-64d2-8f57-9264-2ff0a78fab74"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_rsa_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9574f8d-6afd-4f3c-a34b-ed98d587620e","sequence":{"long":200},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c8822f7-64d2-8f57-9264-2ff0a78fab74"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a82fcc00-2077-45ac-a008-964710122f1f","sequence":{"long":201},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c8822f7-64d2-8f57-9264-2ff0a78fab74"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_rsa_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9c47913-bf54-4a84-b0c9-e901a90dc76d","sequence":{"long":202},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c8822f7-64d2-8f57-9264-2ff0a78fab74"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d85dbf3f-8873-2550-b388-fc6420252c7c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d011fd5c-fd0b-4bf4-afca-f186beaa503b","sequence":{"long":203},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d85dbf3f-8873-2550-b388-fc6420252c7c"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_rsa_key.pub"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44ea5206-c7d4-469f-ac14-84b42eaf328c","sequence":{"long":204},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d85dbf3f-8873-2550-b388-fc6420252c7c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"2e02cb3d-0826-5359-a608-18eeb9531fcb","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe803f76-8fa1-4ff5-924b-1b4c8805a29b","sequence":{"long":205},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2e02cb3d-0826-5359-a608-18eeb9531fcb"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ecdsa_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea8bb60b-c879-4b18-ab3c-c2f33b873153","sequence":{"long":206},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2e02cb3d-0826-5359-a608-18eeb9531fcb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3bf46e8-7511-475f-961a-765e85238ab8","sequence":{"long":207},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2e02cb3d-0826-5359-a608-18eeb9531fcb"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ecdsa_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"836caa8c-db1f-4cdc-a0a0-7a9be57464e9","sequence":{"long":208},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2e02cb3d-0826-5359-a608-18eeb9531fcb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"3efd70ec-8129-a85e-a981-1a934ea8ee3c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d0c177c-946f-4acd-b9cb-174cba542a15","sequence":{"long":209},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3efd70ec-8129-a85e-a981-1a934ea8ee3c"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ecdsa_key.pub"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"585c59d9-c204-4eab-9c8d-dc767ad87c0a","sequence":{"long":210},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3efd70ec-8129-a85e-a981-1a934ea8ee3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"9a762a17-c5f5-3250-b5c5-e86a20328528","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b11729cd-5d40-4c07-b415-61e5c3f199ea","sequence":{"long":211},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"9a762a17-c5f5-3250-b5c5-e86a20328528"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ed25519_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25144017-2446-41a1-ad48-bcd0be664869","sequence":{"long":212},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"9a762a17-c5f5-3250-b5c5-e86a20328528"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc33e36b-55c9-4fea-8456-c33c43be20c6","sequence":{"long":213},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"9a762a17-c5f5-3250-b5c5-e86a20328528"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ed25519_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26da0043-7e75-432e-ae2d-df4167991043","sequence":{"long":214},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"9a762a17-c5f5-3250-b5c5-e86a20328528"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6eb7ebeb-1f96-1e57-961f-e755571e202c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0720919d-4e90-4c60-b758-1a81a591b1fc","sequence":{"long":215},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6eb7ebeb-1f96-1e57-961f-e755571e202c"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ed25519_key.pub"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"520663d8-d9ae-495b-8cb3-a845e9b0161b","sequence":{"long":216},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6eb7ebeb-1f96-1e57-961f-e755571e202c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a31e48c-7c51-40c9-847a-87bdbc5e9f24","sequence":{"long":217},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19ca247d-86e9-43e0-bac2-10df0d207657","sequence":{"long":218},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"63","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"79047e1d-240e-be52-8e24-bdde62be883d","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_DIR","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04454862-5381-4a70-9ef7-f165b899aa18","sequence":{"long":219},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"79047e1d-240e-be52-8e24-bdde62be883d"},"predicateObject2Path":{"string":"/"},"timestampNanos":1552582900843933382,"names":{"array":["aue_chdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cfde657-aad0-483d-be6a-dbe62693b7e4","sequence":{"long":220},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6641df6-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aefcc3ef-7e01-4286-ac96-2570339933cb","sequence":{"long":221},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ad70639-5928-4798-84d0-4df7936313e6","sequence":{"long":222},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8b73d31-5222-4050-b877-65cbfd7d6ef3","sequence":{"long":223},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"325e4dd4-a79a-4818-bd26-936722a1f292","sequence":{"long":224},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"03614f72-3bf3-3753-b33b-4946a3373b97","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d456b06f-73d5-41ed-945a-cf43c5096e8e","sequence":{"long":225},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"03614f72-3bf3-3753-b33b-4946a3373b97"},"predicateObjectPath":{"string":"/etc/resolv.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2449e9e2-bd76-48ac-9da1-26faab3623ad","sequence":{"long":226},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"03614f72-3bf3-3753-b33b-4946a3373b97"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"35657c19-0d44-6554-840d-56131465bb07","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b30ec478-a5f9-4d3e-a9f3-f2822dcad9d9","sequence":{"long":227},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"35657c19-0d44-6554-840d-56131465bb07"},"predicateObjectPath":{"string":"/etc/gss/mech"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a482664-e9b9-49df-a4ef-dbac848778ad","sequence":{"long":228},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"842f7c15-d3f8-6754-b8d3-e6077467aec3"},"predicateObjectPath":{"string":"/usr/lib/libgssapi_krb5.so.10"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"6","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"628e9d28-9ef6-4420-80ba-3ad3687f524a","sequence":{"long":229},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"842f7c15-d3f8-6754-b8d3-e6077467aec3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"16c3ea07-48df-ba58-9f48-087fd8bab643","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52c86c29-266a-4f8f-93fd-bf02c75a01ed","sequence":{"long":230},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"16c3ea07-48df-ba58-9f48-087fd8bab643"},"predicateObjectPath":{"string":"/usr/lib/libgssapi_spnego.so.10"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"6","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7e27516-7453-4d44-a496-245d2cc2ec87","sequence":{"long":231},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"16c3ea07-48df-ba58-9f48-087fd8bab643"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cc38fbc-ff10-406d-91e5-d1933ef4c86d","sequence":{"long":232},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc7b1612-034d-4c8b-bf77-9ee00769c154","sequence":{"long":233},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"35657c19-0d44-6554-840d-56131465bb07"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b8e17ca-8565-410b-831e-cec86f2e71c6","sequence":{"long":234},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901014716984,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":26345},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3afeaf39-4d65-4578-b2fc-4ad1ba77c1d3","sequence":{"long":235},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7280f808-c99d-46ef-b308-2cc5f6ac5806","sequence":{"long":236},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c81f325-325e-469b-8f02-c06e29dea856","sequence":{"long":237},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b9a8edd-c450-4e73-935d-4b43fa86c819","sequence":{"long":238},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1fed7c2-252d-477a-84a9-809be8cb59a5","sequence":{"long":239},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2bd8900-0022-4198-87c6-b8743ff82384","sequence":{"long":240},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ede20ab4-0bd5-4014-bbb5-ba9500600b08","sequence":{"long":241},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac6a476c-413e-45a7-b338-76b1cd2a10fa","sequence":{"long":242},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae4e3bbb-2d48-4d04-a877-7e391d83c06f","sequence":{"long":243},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7166dfbc-3036-422b-8b55-2d1a9be3c44d","sequence":{"long":244},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4d541c5a-9f32-1253-b29f-e21bd3128288","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24df9364-b17b-46d8-9083-67904cb71a82","sequence":{"long":245},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0915f27c-0602-40eb-88a3-7fa6e7c8c801","sequence":{"long":246},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"e1d2cd21-6a99-d55c-996a-4ae8bcd556d9","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"026360a7-4eab-4015-ad88-9074792195d9","sequence":{"long":247},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"e1d2cd21-6a99-d55c-996a-4ae8bcd556d9"},"predicateObjectPath":{"string":"/etc/pam.d/sshd"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"7acb8e1a-7795-cf54-9577-7bb374cf7993","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a332dbd-0242-452e-a76c-0e3ea996f35c","sequence":{"long":248},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":{"string":"/usr/lib/pam_opie.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f40c0057-2f0b-4cd6-b299-a401509d6801","sequence":{"long":249},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eaaf0b29-8e07-4ee7-97ef-fd822832ac8c","sequence":{"long":250},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"731abae6-8f31-c05a-b18f-0bfe5ac06da8","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"482ff3f4-f991-425d-b16c-c628beb0cc41","sequence":{"long":251},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":{"string":"/usr/lib/libopie.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ce2aea9-a62d-4918-b70a-57dc9cea6e55","sequence":{"long":252},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ea652e9-62e2-4110-bde3-eb31257305bb","sequence":{"long":253},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":{"string":"/lib/libmd.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bb863b8-c2a8-4546-9d7d-d7da46796a6b","sequence":{"long":254},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc6ce3c4-1ca7-46f0-8b1c-c8f08ecea9e4","sequence":{"long":255},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"948f410f-76ae-45e5-a520-ed6ecf3aab73","sequence":{"long":256},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51beac03-b611-45b1-ad1b-65b438ba08ae","sequence":{"long":257},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0916b450-04fe-4096-b991-8b4438b0416c","sequence":{"long":258},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4c76078b-0d74-bd50-b40d-548bf0bdcf31","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6222866-30d6-4725-bdc7-e44131b88bd8","sequence":{"long":259},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":{"string":"/usr/lib/pam_opieaccess.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34fb2908-06f0-418f-8d03-efd92be69498","sequence":{"long":260},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb40b37a-1bbe-4f95-8638-fb8684ac256f","sequence":{"long":261},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f0f2747-7862-4a32-be79-2146a884fa1d","sequence":{"long":262},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc50a377-07bb-402a-92ba-c1d464d1ff48","sequence":{"long":263},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"bd4f3750-1951-5c56-9119-d1a4d65c8c52","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"428e1c3b-a3b9-4c12-859e-64e22d013ba2","sequence":{"long":264},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85b6d99c-946f-4610-a366-a7aaca36d6a6","sequence":{"long":265},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efa09268-4b18-4cd0-b82b-c1dddfb649b8","sequence":{"long":266},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"18eb50ef-3995-7f5e-9539-43795e7f5284","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"568716af-a081-49e3-9fe7-3421c844709c","sequence":{"long":267},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":{"string":"/usr/lib/libypclnt.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dafaae26-b9b8-42ea-a764-341441e0aac8","sequence":{"long":268},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59087a2a-9ace-4c37-947b-411a89d0cdd9","sequence":{"long":269},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73df00e3-dce8-4cf1-afea-84390b628139","sequence":{"long":270},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8828580-dfbf-4dbf-97ee-a3f8043217ef","sequence":{"long":271},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"abf6fcaf-21ca-5a51-8a21-2a1e615a33b7","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01ef7ea3-5a63-42d5-98cb-9ef65347aa54","sequence":{"long":272},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"abf6fcaf-21ca-5a51-8a21-2a1e615a33b7"},"predicateObjectPath":{"string":"/usr/lib/pam_nologin.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8276b56e-1a8d-4f18-98d9-7372810e77c6","sequence":{"long":273},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea0c9293-6ac3-4b83-be1f-8fa290f2135a","sequence":{"long":274},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"abf6fcaf-21ca-5a51-8a21-2a1e615a33b7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87177268-948c-4796-a2f0-435bd8faef73","sequence":{"long":275},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3394068d-68aa-438d-9026-caebece420fb","sequence":{"long":276},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"abf6fcaf-21ca-5a51-8a21-2a1e615a33b7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"3c3bd098-e401-ae51-81e4-136b51aedffb","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8842a9d-e207-4b55-affb-98d169e75ea3","sequence":{"long":277},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":{"string":"/usr/lib/pam_login_access.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20dcb5bb-47fb-42e0-b18e-0b0dd08703ee","sequence":{"long":278},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"953d7de3-2ad1-48ce-852a-aa87ff3e2eaf","sequence":{"long":279},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c81ce7c2-7ba7-481e-a17c-77df0359c7dd","sequence":{"long":280},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"618abe0f-47c2-49c0-b3a3-e69fad9d1766","sequence":{"long":281},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c3224ed-6867-4785-83cb-d71896d5d8ef","sequence":{"long":282},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c4e312d-bfc0-4641-994f-2348c6aec115","sequence":{"long":283},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"868dee9a-1b71-472f-9f86-e24f902a5233","sequence":{"long":284},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d68470b-244a-4dc1-86e0-b9f233fdd7e8","sequence":{"long":285},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22785318-e02d-429e-8338-5eeade7f7022","sequence":{"long":286},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"b1857442-6384-095d-8463-a0938d09e3b4","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19fe91fa-0938-4065-b053-0dada000b51c","sequence":{"long":287},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":{"string":"/usr/lib/pam_permit.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79526cd2-0582-4240-af64-472fd8b69249","sequence":{"long":288},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4dfb28d-bf49-42c9-a146-8b0cd928f6f8","sequence":{"long":289},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ca7ef9a-b299-41c2-b6a6-a77883c5dae7","sequence":{"long":290},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4c871df-18af-468c-bac4-cc28734160db","sequence":{"long":291},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bee914b-8fdc-4456-a222-d7d118344022","sequence":{"long":292},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9b32cbd-ccb0-4f2d-ae0d-c6495af7f54c","sequence":{"long":293},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5b9e2e6-aa1e-4b8e-b24a-451c68c40a55","sequence":{"long":294},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56f9618c-6d19-4eff-b367-8eda5722d186","sequence":{"long":295},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dbce653-196e-4096-ad58-e4841ec60227","sequence":{"long":296},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eae7a29c-1544-4d64-abef-c8e53527851b","sequence":{"long":297},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"e1d2cd21-6a99-d55c-996a-4ae8bcd556d9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"447edcc7-0d6c-4d73-be06-87b0de1a50ec","sequence":{"long":298},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7c47527-f8f6-4c9c-bd02-664543e8b04a","sequence":{"long":299},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d68855be-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1c1edea-adf0-4bb7-94c3-a051beb84992","sequence":{"long":300},"type":"EVENT_CONNECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68855be-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","address":"/var/run/logpriv","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a07a59c8-405c-453c-bac5-fcd3a68b961f","sequence":{"long":301},"type":"EVENT_SENDTO","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68855be-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"365","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"105046fc-54c9-4fa6-ae91-c7ca9084becf","sequence":{"long":302},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"365","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"aafb7a4a-d952-865d-92d9-3ff2ed86d364","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"547554f9-c47f-49bd-9153-9acb86752857","sequence":{"long":303},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aafb7a4a-d952-865d-92d9-3ff2ed86d364"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":72},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"16","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a063fc51-472c-4e33-97d6-71d837eac191","sequence":{"long":304},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68855be-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"512a8b3a-5535-4f5a-84f7-a50a5dfca271","sequence":{"long":305},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca8a2cc3-a547-44d5-9373-e58125ef93c8","sequence":{"long":306},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d689a296-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed73e053-3c93-4dfc-84ff-c38a9a16483f","sequence":{"long":307},"type":"EVENT_CONNECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d689a296-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","address":"/var/run/logpriv","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3567fe51-a848-40e7-aece-010197cc85cb","sequence":{"long":308},"type":"EVENT_SENDTO","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d689a296-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"366","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d34e8e7-09d1-4ae6-8477-32c5ed05c966","sequence":{"long":309},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"366","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2eff8148-b0f0-4444-85ae-9563fc7984af","sequence":{"long":310},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d689a296-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"5a32b0cb-0331-045d-b103-151f6d0491a8","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5429249-1231-435c-b4ac-72b5879c7266","sequence":{"long":311},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64ba8bc2-31e0-432c-9af1-b339faea4a2e","sequence":{"long":312},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b0dff2a-fa5d-462f-a183-8e6f6cf3e9c1","sequence":{"long":313},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6590229e-3a64-4fd1-b4df-d2c66ef6ff16","sequence":{"long":314},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae53213f-f3dd-4cba-becb-e95799f4ac59","sequence":{"long":315},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_setgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_gid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c837ac4-3da5-4581-89fc-79dd3626e6e2","sequence":{"long":316},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_setuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47cc3265-04ab-40c3-bfca-6d5ea31c4fc2","sequence":{"long":317},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0314ef2-04b5-488f-a88a-907dc2247bbe","sequence":{"long":318},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Principal":{"uuid":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1","type":"PRINCIPAL_LOCAL","userId":"1003","username":null,"groupIds":{"array":[]},"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_PRINCIPAL","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89e69e15-21a4-4926-9d9a-6b6dc8145275","sequence":{"long":319},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_setuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96939982-9a76-40b2-a412-13ae3ae28e96","sequence":{"long":320},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_setgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_gid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61ce232b-f2f9-47ae-8b59-6e02d0a8672a","sequence":{"long":321},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18c14f34-3430-4466-b57d-ffae66917c47","sequence":{"long":322},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d68b229c-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"160b39e3-789c-4dda-8975-161f6d1e82f1","sequence":{"long":323},"type":"EVENT_CONNECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68b229c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","address":"/var/run/logpriv","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e59ee7b-2055-4bf9-9d95-d7014ed4d320","sequence":{"long":324},"type":"EVENT_SENDTO","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68b229c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"367","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe1b8001-0c8c-4abf-b9a9-950605567eff","sequence":{"long":325},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"367","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f521d2a9-3b8a-413a-98d9-1c317970c505","sequence":{"long":326},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68b229c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d68b2f86-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d68b2f7e-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"451d2f4d-85e5-5e41-8e4d-3f4658210a34","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"d68b2f7e-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"d68b2f86-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e41e8179-a7cc-4df5-b128-935d97a4fc70","sequence":{"long":327},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"451d2f4d-85e5-5e41-8e4d-3f4658210a34"},"predicateObjectPath":null,"predicateObject2":{"UUID":"d68b2f86-467a-11e9-aea9-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_socketpair"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","ret_fd2":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d68b38c5-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1280,"parentSubject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":1552582901083905501},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d187b7e1-cfe8-4172-96b6-7ddade4c4056","sequence":{"long":328},"type":"EVENT_FORK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1280","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1280","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdafc4d6-8b9b-4c40-b7e1-dd6735204d58","sequence":{"long":329},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":{"string":"/etc/opiekeys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a88c55a-8740-4155-881e-719bedd6cf2c","sequence":{"long":330},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":{"string":"/etc/opiekeys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"9","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49ad38b8-a638-4826-bc7e-f625f1d2aa4e","sequence":{"long":331},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebfde1ba-6d75-428c-95f4-f14f17272905","sequence":{"long":332},"type":"EVENT_LSEEK","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00c85658-a3dd-494c-aa78-dc3500f9afe8","sequence":{"long":333},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddc23f71-959e-4a80-b4ba-97b60fb812dd","sequence":{"long":334},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82fab563-fe9e-4b08-a3a6-4a8408674c42","sequence":{"long":335},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cfb5c18-6619-4c61-8d76-56ebd9bcf50b","sequence":{"long":336},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0cc5b34-0ec8-4f9f-b708-39a8ae2733b0","sequence":{"long":337},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43f5236b-6465-4b4f-9665-9da501a3e34e","sequence":{"long":338},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"478badd3-4c54-4516-8b37-c2653ae32166","sequence":{"long":339},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a90225a-aa55-45f3-9bc8-a483a5c5c359","sequence":{"long":340},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64b53cdb-a485-41c5-b3cc-ea3e56f61bb7","sequence":{"long":341},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af933ed6-bc14-4b44-bdde-d700c9effadd","sequence":{"long":342},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d194fcf4-2e0f-40f4-af92-c4aee6839d18","sequence":{"long":343},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76e9de98-555d-4678-a84e-fef2091f88fe","sequence":{"long":344},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":{"string":"/etc/opiekeys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5948bc7e-3e78-46f0-a072-a2b29102a8ed","sequence":{"long":345},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":{"string":"/etc/opiekeys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"9","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45e5676d-b416-4a72-8d6f-7b22ffec1cde","sequence":{"long":346},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e482b972-ee6c-4ac4-9bd9-3981d5ef2e50","sequence":{"long":347},"type":"EVENT_LSEEK","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cf2b9ba-c3d8-441e-97d2-6781f3400051","sequence":{"long":348},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d377d592-c35f-4c55-a1ce-dcc09d601fb7","sequence":{"long":349},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0efed6ad-bc46-45a0-a6ee-d1d3204ad233","sequence":{"long":350},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb313e3e-b47c-4b03-9854-c2f67b799e12","sequence":{"long":351},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72473514-3f1e-487b-8afe-2dde47dc9c0d","sequence":{"long":352},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1da4ae11-552d-4cc1-ab93-aaa9c4b8168f","sequence":{"long":353},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04960113-1182-4d72-ba4a-1fc54141d0e6","sequence":{"long":354},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d46d1d4b-d417-4379-a256-bd9b8493fbf5","sequence":{"long":355},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be223562-d21f-428d-84f2-63c0f1bd6c70","sequence":{"long":356},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e286935-b880-481d-8a10-24d3a5c48c88","sequence":{"long":357},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2383d832-bf8f-490b-ad0e-e4b7863e2175","sequence":{"long":358},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"113bc864-6533-498d-bf51-59a0b0ef329c","sequence":{"long":359},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14864fca-452f-4155-81a8-c8cf54fb4bcd","sequence":{"long":360},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0e3468f-0fd2-409a-bac2-3066c6cb7de1","sequence":{"long":361},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"443c5036-2a97-4f64-aab4-95e93187bcff","sequence":{"long":362},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"368","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce7d1dd7-e608-4796-a744-d285cf160439","sequence":{"long":363},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"369","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9090dae5-95ee-4125-9574-10edc5fcc626","sequence":{"long":364},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"370","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23ee022a-48c4-493c-bd21-339c8b8f2055","sequence":{"long":365},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"371","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95179f2b-ac3c-4fea-8061-0f26d14463ff","sequence":{"long":366},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"368","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d4424b8-a827-48cd-bbd1-42bdb27a9cab","sequence":{"long":367},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902044028797,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":40841},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74388723-763b-436e-a8a7-e1a2bb1d3f33","sequence":{"long":368},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":40841},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"daf112bc-7cb2-4c24-bedc-9fde3c904328","sequence":{"long":370},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80d81999-04ac-4392-9109-5bc1bb92a8af","sequence":{"long":369},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa6f1248-adc8-4c94-ac9e-22888b0d0e93","sequence":{"long":372},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19eca826-7da3-4365-be30-15be86cc14c0","sequence":{"long":371},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83d3fb1f-4d16-4975-b319-c512521aeb50","sequence":{"long":374},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36012bf5-3a38-4882-8af0-b18289d4bfcb","sequence":{"long":373},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6dcd660a-ff59-4647-b4b9-4ec160a244d7","sequence":{"long":376},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7624d123-d319-4321-87c2-57b8d1b1dea1","sequence":{"long":375},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a27fda2b-7f6c-42f7-a838-e6b5f43a48e0","sequence":{"long":378},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d54032bf-cb74-4359-a62a-b25363f63e42","sequence":{"long":377},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbe61783-808a-4740-a070-b24f7aecd6b0","sequence":{"long":380},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23185568-fa59-4806-be4e-f0f3167f24c6","sequence":{"long":379},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ab922b8-3219-4810-b2e3-e2a4b15373d9","sequence":{"long":382},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aaf67da6-8a6a-4029-85d4-7d661520f135","sequence":{"long":381},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a820058-0ec6-4b75-b717-bb751274774a","sequence":{"long":384},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d51264b6-ac83-4f42-bf8d-68cfe385338c","sequence":{"long":383},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fd90a59-354d-41e2-9582-81e1bc52a609","sequence":{"long":385},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c7aedf1-4fa3-48b9-ac42-2c73925f2e7e","sequence":{"long":386},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"197ec384-a476-4e65-af7e-1d007052ce11","sequence":{"long":387},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d829554a-dde5-47f9-bdfe-5655052fa00e","sequence":{"long":388},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4579},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"087842aa-18f1-487e-8a02-da15128303ec","sequence":{"long":389},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb33a07b-52cb-4758-84a0-800afc186d4b","sequence":{"long":390},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4632},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f565dc65-ce5f-4295-ba06-2d0a440fd866","sequence":{"long":391},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aaaea2bb-bf81-4ba0-9dcd-86df64c6ed6b","sequence":{"long":392},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a181dd87-e6c8-4dc0-9708-22ba8e80e2c2","sequence":{"long":393},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5740},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"807e475d-5c70-420d-a156-7b8092d9acea","sequence":{"long":394},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df9eaa57-fce5-4a37-9216-d8ce2a37b36c","sequence":{"long":395},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5793},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00f19eb4-337c-4256-9d51-30e86da16ce1","sequence":{"long":396},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"685d1dfc-9dde-414c-8f34-23f510fad98c","sequence":{"long":397},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31040e1b-b27f-4fe4-8d7f-37dc09b0ef8c","sequence":{"long":398},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3817},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a323d65-7da4-4e9c-a0cc-b913b163f7b6","sequence":{"long":399},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81fb1a9a-47c6-4b9d-b57a-85f0c9530f34","sequence":{"long":400},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3870},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e87e7705-08dc-4d02-ba56-11b38a3fe5cb","sequence":{"long":401},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca174882-9b5b-428e-be4c-9b233f6d7f77","sequence":{"long":402},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a084bc9-db25-435c-b3dc-207b053955fd","sequence":{"long":403},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4856},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14fca0a4-5455-4e70-9050-6dcc6d87b133","sequence":{"long":404},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1948ba77-10c8-49c8-abda-f0c1310c7488","sequence":{"long":405},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a14dd35-ee1c-4d42-aa5e-4a90f5c64834","sequence":{"long":406},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10269e96-30a2-40a8-905e-ea95aa7a09c0","sequence":{"long":407},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5130},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1014c282-a7f8-4e45-8534-1b2160c384ec","sequence":{"long":408},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4154670-5873-4512-a057-f3ae8b2929fd","sequence":{"long":409},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ff861fd-ef5d-44d3-8f26-a8388c0d0af0","sequence":{"long":410},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40a00bf8-4fe2-4797-b8b5-40f873d24c87","sequence":{"long":411},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5263},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de5ef01d-b6dd-41b2-a84f-ca5b97e28e08","sequence":{"long":412},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"675ef817-7972-4e86-beab-4e15d6d268a3","sequence":{"long":413},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94cc843a-532f-4515-a14e-8d20b2d250f3","sequence":{"long":414},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"907bc3ee-d027-4d4c-a81b-7f1a7035f22b","sequence":{"long":415},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4091},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40ead4ac-1ee8-4add-b040-df2dcaa9d920","sequence":{"long":416},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07a78720-0430-41a6-b5e4-5de3bb1b46d8","sequence":{"long":417},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f82010c-01fa-4434-bacb-0b22fab96914","sequence":{"long":418},"type":"EVENT_SENDTO","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"372","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a962bdae-bfea-4458-bdd6-d5bf0e86ab9d","sequence":{"long":419},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"372","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cae3f5e6-2916-48d4-a462-f54c6fa32dc0","sequence":{"long":420},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa606d5b-54f1-4cf7-a718-ea2f9ef0ddd0","sequence":{"long":421},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902134213067,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e614d988-a0fa-4c4f-a01e-060cc78f266c","sequence":{"long":422},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902134213067,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8b40fa0-e30d-4ca1-b243-f4f208d364f1","sequence":{"long":423},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902134213067,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4909},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c77eed64-d08c-4c23-a02b-aeea4bf2c617","sequence":{"long":424},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902134213067,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc6b62fc-5dcd-4563-95e7-132f69d6a0c3","sequence":{"long":425},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902134213067,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30b7b180-a0a5-407e-9fec-a72d6f1f072d","sequence":{"long":426},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902143910395,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5183},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5408251-9bd7-4dfe-90b5-d01940e1f101","sequence":{"long":427},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902143910395,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c72a3dc-e80b-4a39-a145-23c69d66f25b","sequence":{"long":428},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902143910395,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f4dd3cf-8d95-4203-a670-061424b6a7be","sequence":{"long":429},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902143910395,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5316},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1aaccf8-9fda-4a3c-b325-9e150f24ea6e","sequence":{"long":430},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902153929763,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f1e00da-6b77-441c-81cf-c116c278a2b3","sequence":{"long":431},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902153929763,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74c2e203-3695-4acf-b858-69a6c54edc1c","sequence":{"long":432},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902153929763,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4144},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fc07fa9-0dd0-468a-aa79-6ba9932e050c","sequence":{"long":433},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902164461959,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"099d2714-f6a9-4500-ba9b-148ff6c97e90","sequence":{"long":434},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902164461959,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69e74415-7de1-43d2-ba7a-250d845eb994","sequence":{"long":435},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902164461959,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e5c5a6d-a714-4cc2-81ba-b2f2aed5417e","sequence":{"long":436},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902164461959,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70df505c-d280-4e91-9229-438ee07f45d1","sequence":{"long":437},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902173894545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f8681ee-280f-4899-9fa0-3027204af851","sequence":{"long":438},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902173894545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71107a59-9ceb-4323-ba7c-46401665fa3c","sequence":{"long":439},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bb2667f-17ed-41a5-8048-02140a2f8413","sequence":{"long":440},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0bf45c4-d650-4cb7-ba65-961f9f636ac2","sequence":{"long":441},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4717617-dc80-46c4-9470-9428a06df001","sequence":{"long":442},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f6a51db-d4db-4b75-b705-61d961485879","sequence":{"long":443},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b2d0276-debd-402c-8761-9a767dff567f","sequence":{"long":444},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f27f0cb4-8a8f-4599-b4ac-0ac166e93edb","sequence":{"long":445},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32c7c9a4-6593-45d0-a306-e96d3f0d3512","sequence":{"long":446},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2b2baca-c42b-4d18-8923-51bee80ad0cf","sequence":{"long":447},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40049e47-aaf4-4fe3-b786-ba86a2765742","sequence":{"long":448},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be41a90e-d9b6-4d97-91c2-e57d0dd4aef6","sequence":{"long":449},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66b9660a-8ca3-48e2-a76c-7195d9f63291","sequence":{"long":450},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d38a73f1-9f17-6458-979f-93bf586467d6","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f09d9176-9613-40d2-9ffd-45304095a876","sequence":{"long":451},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":{"string":"/etc/login.access"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cba789de-1394-4fe4-8107-e723b864c7e5","sequence":{"long":452},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"714117a1-807b-4954-885f-8575100239ff","sequence":{"long":453},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7030ffe2-80ff-4314-9f1f-c94ce04efa2a","sequence":{"long":454},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8612fb51-ffef-41a6-9f43-16369c577b58","sequence":{"long":455},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6c11ca4-dad9-4f7f-9451-4dec7287a61c","sequence":{"long":456},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5ef89f3-fd94-4f35-9dd1-5e6b5a73dfa2","sequence":{"long":457},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9933a91a-428d-45e1-ab0c-38f383da0b3e","sequence":{"long":458},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9413d6bf-bc64-4cc2-a54f-8bb4b17c0732","sequence":{"long":459},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"652bb700-eefa-4f99-bf06-5ce304cc34dc","sequence":{"long":460},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed71675a-7cd8-4a5f-bcd2-dd4d878c9f15","sequence":{"long":461},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1f8e0cd-e518-413f-ba6e-adef9d2fbaf7","sequence":{"long":462},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91a18d50-c8ee-4373-96f3-3e4c898dcb85","sequence":{"long":463},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85057fb4-2a0e-41b6-969d-d961b2c292e7","sequence":{"long":464},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55f98061-dd33-4964-927f-b1ecd8cee7e6","sequence":{"long":465},"type":"EVENT_EXIT","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61f85608-5275-4bb1-9ff0-41e6d4b9b48a","sequence":{"long":466},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68b2f7e-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Principal":{"uuid":"b6bafff7-aaf5-5f92-a862-aaf0a7ce63cc","type":"PRINCIPAL_LOCAL","userId":"22","username":null,"groupIds":{"array":[]},"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_PRINCIPAL","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d6767a33-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1279,"parentSubject":null,"localPrincipal":{"UUID":"b6bafff7-aaf5-5f92-a862-aaf0a7ce63cc"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b30c0b08-0e20-441e-9c6c-e5d1a1aa0a13","sequence":{"long":467},"type":"EVENT_EXIT","threadId":{"int":100102},"subject":{"UUID":"d6767a33-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d6767a33-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d7b3f08d-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3482c080-1db3-4f57-9235-f88cc955dcd7","sequence":{"long":468},"type":"EVENT_CONNECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b3f08d-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","address":"/var/run/logpriv","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbf4f75e-09f2-4456-bebc-fe662ac72611","sequence":{"long":469},"type":"EVENT_SENDTO","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b3f08d-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":140},"programPoint":null,"properties":{"map":{"ret_msgid":"373","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd1b8e25-f5a6-4358-b665-82c46aa557da","sequence":{"long":470},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b3f08d-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d6766e84-467a-11e9-aea8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5881493-9a32-4f42-9049-9f5607686bc3","sequence":{"long":471},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6766e84-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e8f7e7c-f12e-49a2-8065-e44cda850df9","sequence":{"long":472},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6641bd1-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"861b858b-bff9-4d29-89ca-e9a2f06e5bc4","sequence":{"long":473},"type":"EVENT_CLOSE","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"d6641bd1-467a-11e9-aea7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb526b56-8127-4e6a-9c0d-7208111b01b2","sequence":{"long":474},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":140},"programPoint":null,"properties":{"map":{"ret_msgid":"373","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99a71fbd-66d6-4804-8cc9-10fce094a1e6","sequence":{"long":475},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aafb7a4a-d952-865d-92d9-3ff2ed86d364"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":66},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"16","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddd6ed60-a3a0-4f6a-860d-ff8c9bdeeb99","sequence":{"long":476},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aafb7a4a-d952-865d-92d9-3ff2ed86d364"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":116},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"16","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"2d2507ac-3e04-4a51-843e-b086314a525f","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"979f29a3-f22c-44ef-92c2-bdb9186a4056","sequence":{"long":477},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2d2507ac-3e04-4a51-843e-b086314a525f"},"predicateObjectPath":{"string":"/etc/security/audit_user"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"de49b29f-2171-c15f-b121-40390fc15206","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8693b671-73f4-4c90-a32b-d16fff53a663","sequence":{"long":478},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":{"string":"/etc/security/audit_class"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18e016c2-69a7-4764-a8e5-541d9cf186cb","sequence":{"long":479},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"dc2bb48d-13bc-c451-bc13-145141c492f2","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83a749ee-7f63-4335-99c2-c0f34ebee2f3","sequence":{"long":480},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"dc2bb48d-13bc-c451-bc13-145141c492f2"},"predicateObjectPath":{"string":"/etc/security/audit_control"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"7","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e258072f-8a24-4abd-8f99-59d96b9f5104","sequence":{"long":481},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2d2507ac-3e04-4a51-843e-b086314a525f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":27},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0edccd4b-25bf-4d85-8692-90cb190db9ef","sequence":{"long":482},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2d2507ac-3e04-4a51-843e-b086314a525f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d7a0b8a-d1ea-47b6-9851-1cae4df0c5d3","sequence":{"long":483},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"dc2bb48d-13bc-c451-bc13-145141c492f2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff41488a-c3c6-47cc-af76-bab5f4fea8c8","sequence":{"long":484},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"dc2bb48d-13bc-c451-bc13-145141c492f2"},"predicateObjectPath":{"string":"/etc/security/audit_control"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"7","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"262eaf4d-e517-401d-9dbf-50a33b1c4699","sequence":{"long":485},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":{"string":"/etc/security/audit_event"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc60e324-cb14-4dad-968d-d3bf0f9364c1","sequence":{"long":486},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f79ead12-6e82-4c26-b7f9-984044b55c0f","sequence":{"long":487},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a3b4ea6-ef63-4b41-af51-8a3149e0c299","sequence":{"long":488},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":27878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29d14a2b-13d5-4955-b430-cf8737809984","sequence":{"long":489},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"608087cf-b989-41d7-880f-802304211928","sequence":{"long":490},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0add9ed-37f2-42a6-8feb-687430313b11","sequence":{"long":491},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d7b494bb-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d7b494b0-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"a70156ef-4174-5e87-b9cc-89c6de9cf2c0","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"d7b494b0-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"d7b494bb-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d2037d4-9d91-4078-bcd0-65cc5e0c62f5","sequence":{"long":492},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a70156ef-4174-5e87-b9cc-89c6de9cf2c0"},"predicateObjectPath":null,"predicateObject2":{"UUID":"d7b494bb-467a-11e9-aea9-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_socketpair"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","ret_fd2":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"894932cc-cf71-41b2-811e-7d1aa1e78a0e","sequence":{"long":493},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7331b1d-eded-4d52-86ce-6bcf566405cb","sequence":{"long":494},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d7b4a9b3-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1281,"parentSubject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":1552582903033904685},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96f8904e-6a4b-4d49-a2d6-812c77b2f8bb","sequence":{"long":495},"type":"EVENT_FORK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1281","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1281","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6918ab1-fcc7-461d-afae-6eea563ac642","sequence":{"long":496},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_gid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"691f5078-1df9-4970-82aa-529291d61f10","sequence":{"long":497},"type":"EVENT_OPEN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1aa9c09f-7b23-4674-aeed-b8686375426c","sequence":{"long":498},"type":"EVENT_LSEEK","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4155ff8b-260c-494f-881c-92999447fcf1","sequence":{"long":499},"type":"EVENT_LSEEK","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c4ee380-ace6-4ab9-9ebf-04ab4518a87b","sequence":{"long":500},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26c338bd-2cdb-47af-a287-de5d3c1a3b37","sequence":{"long":501},"type":"EVENT_LOGIN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setlogin"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","login":"user","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05f83ccc-5ddd-4fde-8179-c490f532fbe7","sequence":{"long":502},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8f5159d-48b3-456d-a483-2c9021e24d04","sequence":{"long":503},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1a94f01-ba37-435b-a3ab-f3f3994fb2ed","sequence":{"long":504},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bc7fa5d-a958-4263-8874-1cf7044d636a","sequence":{"long":505},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17c0f657-401a-41b5-a1e9-0d85d748c2a3","sequence":{"long":506},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4ed02403-1761-215b-a117-fabcfb21c32e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8056d00c-9d83-4efa-99e0-a47dd327815a","sequence":{"long":507},"type":"EVENT_OPEN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":{"string":"/home/user/.login_conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"264909f0-3e97-4f80-9b28-1644b08b6827","sequence":{"long":508},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cafdb9b-e2b0-492b-b711-e212660f8160","sequence":{"long":509},"type":"EVENT_OPEN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb805937-2ede-4c81-96fc-032202137873","sequence":{"long":510},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3cba311-3900-4dd3-9a3b-fa7e0a153016","sequence":{"long":511},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"019a214d-17bf-4f09-b95f-86663a6aa861","sequence":{"long":512},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d481aa8-de2f-4270-911d-0fbb5729f9e3","sequence":{"long":513},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d813071-e20e-4fdf-9ab4-5db4fe8eba9e","sequence":{"long":514},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d9da2d1-4540-488d-be23-4299af793e46","sequence":{"long":515},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a9f1bdc-081e-4f95-a4dc-87f60aab6b6b","sequence":{"long":516},"type":"EVENT_OPEN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":{"string":"/home/user/.login_conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2d1d6e9-c2c2-46dc-bea4-e39024f207ca","sequence":{"long":517},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77d185eb-a2c7-4e92-9592-0219f3506d87","sequence":{"long":518},"type":"EVENT_OPEN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70376a68-4af1-4ef9-8ea5-cb2b88b7dee3","sequence":{"long":519},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a40d02b-2af5-4849-b5af-9e3dd0f77f8f","sequence":{"long":520},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a94ff629-5aa6-449d-ae96-26bec6a1a585","sequence":{"long":521},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"850d6d5b-0def-432b-bfc2-74eeca27f31d","sequence":{"long":522},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d7b500ce-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"d7b500cd-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"0f5606d4-74b0-5fe5-932d-ba013f81588c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"d7b500cd-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"d7b500ce-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"213e192d-2853-49da-879b-3de5ce8d3f9e","sequence":{"long":523},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"0f5606d4-74b0-5fe5-932d-ba013f81588c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","ret_fd2":"11","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b216ae4-891b-4f2c-b44b-dc54af424dac","sequence":{"long":524},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c59be603-267f-4805-a18c-c0fda11b5045","sequence":{"long":525},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1b834bc-5ddb-45ea-8bbc-7ae17c0d39d1","sequence":{"long":526},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a688f975-eeb6-488e-aa61-5f1e565070ca","sequence":{"long":527},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b500cd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"625d8d56-3965-415a-a556-e781611c44cd","sequence":{"long":528},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0517f91d-388e-4cf8-a651-3fcb3393c169","sequence":{"long":529},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b500ce-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef15a5b2-09dc-459a-bbd1-7082be2cc311","sequence":{"long":530},"type":"EVENT_OTHER","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_posix_openpt"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ed281817-20f6-7e52-b620-7e7b827e05af","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a8c387d-e51b-4d79-aede-96b5607faf98","sequence":{"long":531},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/pts/0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"11","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"11","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47cdad3a-3dd2-4ae3-9835-9ec08c205b03","sequence":{"long":532},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"caae4e72-83fc-4bcb-80eb-e95ae0d2f5c5","sequence":{"long":533},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3635eb1-40e9-4e17-a7ca-c70e4475276c","sequence":{"long":534},"type":"EVENT_MODIFY_FILE_ATTRIBUTES","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/pts/0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_chown"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"1003","arg_gid":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8c6e818-6c96-44e3-ac34-ead2dd7da91b","sequence":{"long":535},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee46d3c2-123c-4a4d-948e-f4bc6602015f","sequence":{"long":536},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e66da19-2a78-4b83-b6f5-3c975e073f34","sequence":{"long":537},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d90cf91-81d4-488c-b800-ff4c516a6352","sequence":{"long":538},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a0115d0-f7ed-40f4-af28-74b439f21bfa","sequence":{"long":539},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0292eb96-4a73-47d3-82ac-120c526f4bc8","sequence":{"long":540},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdb66c4e-6d41-452c-9d0b-de6ee9a7e266","sequence":{"long":541},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d031691-c294-421e-9cfb-c74e58b3ea4b","sequence":{"long":542},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94bec3a1-8a87-4359-aa8f-ea539d6d0bca","sequence":{"long":543},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"235ec571-9bc7-4508-9804-44316f144ad9","sequence":{"long":544},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07531293-3536-4925-999c-bc02eb41447c","sequence":{"long":545},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":{"string":"/var/log/utx.lastlogin"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3885b733-a127-4415-9737-51c6667e9620","sequence":{"long":546},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b5b3fde-de11-4272-92f3-289079a6a4d1","sequence":{"long":547},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25249031-8afd-4337-b2cc-34e86c09557b","sequence":{"long":548},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87e16d76-1103-4159-8675-a7b49969d1c1","sequence":{"long":549},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c03b339-0bd8-4158-8224-2984496eab36","sequence":{"long":550},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81205ac8-be08-47c9-b71e-1bc256e298de","sequence":{"long":551},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45861cfc-5e1f-475f-8c6e-c82b0f0320ff","sequence":{"long":552},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b24f305e-b00f-4693-a143-b336c4115c59","sequence":{"long":553},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d036ef9e-8aa8-4927-a791-daad7b1aa0fd","sequence":{"long":554},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87c9a008-37e2-44d8-b4c2-8f464b0ee521","sequence":{"long":555},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95f313ce-2771-4880-8509-2678a198cb8b","sequence":{"long":556},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"97a20679-3a19-5355-993a-5a7f9553d88e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b00f05a-4585-4330-9f13-d190f4aaf22a","sequence":{"long":557},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"97a20679-3a19-5355-993a-5a7f9553d88e"},"predicateObjectPath":{"string":"/var/run/utx.active"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6552f09d-3223-453c-a0c9-7bb9cb68fd38","sequence":{"long":558},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"97a20679-3a19-5355-993a-5a7f9553d88e"},"predicateObjectPath":{"string":"/var/run/utx.active"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100222"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01a4"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"13","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe126b98-672c-471e-8df2-3221104acce9","sequence":{"long":559},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"16386","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0acb9503-5c1f-4e39-bbe7-815a9e60b90a","sequence":{"long":560},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"97a20679-3a19-5355-993a-5a7f9553d88e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81c730f4-169d-4f49-b633-7f778cdd96ea","sequence":{"long":561},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":{"string":"/var/log/utx.lastlogin"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100222"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01a4"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"13","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3ebe41c-015e-4e79-a56d-d67827b9187f","sequence":{"long":562},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"16386","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"117a812a-f334-42d0-a9cf-44ab1560cc3c","sequence":{"long":563},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":394},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95341c4f-195a-4173-b8cd-206554211b28","sequence":{"long":564},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":197},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f024ec2a-fa47-43e1-a49e-43dceddd2863","sequence":{"long":565},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4516a868-a70c-915d-8ca7-5c9c1d91bbf9","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8628378b-b2ee-4775-95e8-710f2247e9c0","sequence":{"long":566},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4516a868-a70c-915d-8ca7-5c9c1d91bbf9"},"predicateObjectPath":{"string":"/var/log/utx.log"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01a4"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"13","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"757857a1-d45f-4c22-a2a0-b120367a041e","sequence":{"long":567},"type":"EVENT_WRITE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4516a868-a70c-915d-8ca7-5c9c1d91bbf9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":83},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7917ee3b-90c7-42da-bef5-ca1cb567001b","sequence":{"long":568},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4516a868-a70c-915d-8ca7-5c9c1d91bbf9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e92b97a-3a85-4b45-910b-283249a4ae90","sequence":{"long":569},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"97a20679-3a19-5355-993a-5a7f9553d88e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3d0b801-7c0e-463b-a24c-e0ee68af8ba5","sequence":{"long":570},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd22dae6-832f-42c7-9fe2-66ef8b24ca4d","sequence":{"long":571},"type":"EVENT_SENDMSG","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b494bb-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_sendmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa52457d-9254-4359-9512-9c7feb8b7211","sequence":{"long":572},"type":"EVENT_SENDMSG","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b494bb-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_sendmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79cd2a9b-a6d0-4f31-a2f8-f7b375d238fd","sequence":{"long":573},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85fa4b1e-6e48-4448-9b50-c91a5810c3f6","sequence":{"long":574},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"11","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c81870d5-9fe8-49cd-bfc6-5b8a91303fe6","sequence":{"long":575},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":52},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81026734-b5ca-4a1e-840a-b9ed9a89c108","sequence":{"long":576},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":133},"programPoint":null,"properties":{"map":{"ret_msgid":"374","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a95dcd73-2727-4305-90fd-e98762fa40df","sequence":{"long":577},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":133},"programPoint":null,"properties":{"map":{"ret_msgid":"374","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d24cdc0c-2971-4d46-86d0-95316b4612c2","sequence":{"long":578},"type":"EVENT_RECVMSG","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b494b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a61ae61-92e3-4b9d-ae43-cb6d6339c6db","sequence":{"long":579},"type":"EVENT_RECVMSG","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b494b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d7b5a811-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1282,"parentSubject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582903044120595},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"650752b5-6b38-40f5-b815-0b78ad025163","sequence":{"long":580},"type":"EVENT_FORK","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1282","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1282","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f6a45db-784e-4616-9633-060fdd1f8d3f","sequence":{"long":581},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83771e55-61ae-46fe-82bb-40d7549822a0","sequence":{"long":582},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6666ed19-d2f9-4349-9621-5a07103dfe44","sequence":{"long":583},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"878d2c0d-15e0-48e2-8b44-8c1e22043e17","sequence":{"long":584},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1e4b33e-84ff-4543-891d-145b25d0868c","sequence":{"long":585},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02d24827-4391-4a74-84c8-376274ea664f","sequence":{"long":586},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"6","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9da0abbb-850f-4bfd-abbc-e202ddeac333","sequence":{"long":587},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"375","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d18300d5-b690-4e8a-8936-a8abaec0b3ae","sequence":{"long":588},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"375","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"797d1af9-e30b-433a-8f6d-83ca91c70411","sequence":{"long":589},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/pts/0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"12","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6bca94b-00c9-4254-9dd6-5a97c2379e54","sequence":{"long":590},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"077f06c8-5238-4ab5-8b6d-8a155b7f4516","sequence":{"long":591},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"12","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"947195b6-1bb7-4d19-87c0-996b80001af2","sequence":{"long":592},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52441989-5163-48ad-8ab4-8f30c5c93e98","sequence":{"long":593},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e959044-15af-4641-b888-4ec7ce3f6e2b","sequence":{"long":594},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"376","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02de0c17-3270-4506-8dba-96c1f0fafc7b","sequence":{"long":595},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"376","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"fcf113a7-aa96-585f-96aa-757b7f5884e7","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0ca4fe5-86bf-4844-8701-cda44780d2ef","sequence":{"long":596},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fcf113a7-aa96-585f-96aa-757b7f5884e7"},"predicateObjectPath":{"string":"/etc/motd"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd35dc2a-2d98-4c09-92e6-1f2ed3f8f6b3","sequence":{"long":597},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fcf113a7-aa96-585f-96aa-757b7f5884e7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58896022-a19f-41df-be46-50a8e1436335","sequence":{"long":598},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ae3d4d8-4f39-4d53-a371-f9c2e8f7f426","sequence":{"long":599},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"067327d4-28f9-4de3-bad3-15c1d527edc0","sequence":{"long":600},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":{"string":"/home/user/.login_conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d824d1aa-ed3e-4db0-bdf1-8a5a7181c5f1","sequence":{"long":601},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06e3065a-9930-481b-bc01-4350af552982","sequence":{"long":602},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"681592a2-749f-455f-aa7a-44ffd32ff5b1","sequence":{"long":603},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc7e7963-e714-43cb-8b60-e3b9bc664c13","sequence":{"long":604},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b849683-8f9d-4aa7-8928-21df9c1982dd","sequence":{"long":605},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4bde415-bbad-4ff9-8fa3-e88dc2ccbba5","sequence":{"long":606},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_closefrom"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"11","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"802da701-0471-305d-b104-2b472d304411","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_DIR","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2fc15aa-80dc-472e-9bda-8f5408ea4152","sequence":{"long":607},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"802da701-0471-305d-b104-2b472d304411"},"predicateObject2Path":{"string":"/home/user"},"timestampNanos":1552582903044120595,"names":{"array":["aue_chdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50f58c27-1c5f-463a-8c0b-0d56a6a13292","sequence":{"long":608},"type":"EVENT_EXECUTE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582903044120595,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"-bash","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbfe550f-ebfe-4718-a4a3-8f25c475977e","sequence":{"long":609},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8fe59be-ed5b-417a-b7dd-80083922fcbb","sequence":{"long":610},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc0a2e63-f165-4d2e-8493-2a9335aa6886","sequence":{"long":611},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d6bc854-69bf-4424-b0a3-36843f819dd1","sequence":{"long":612},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"084be118-9727-4c68-a239-5137eae00beb","sequence":{"long":613},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9feb9395-d181-42fb-8000-23579ca17cb2","sequence":{"long":614},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f98da2d-d37e-48ac-8603-a47ed063211a","sequence":{"long":615},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fce76b7-2669-4c8a-9d29-f4b70ec3f598","sequence":{"long":616},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1b31268-a112-4757-9423-95f7e43205ea","sequence":{"long":617},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20487268-0ff2-4b02-8551-ae1b6b6e7ba4","sequence":{"long":618},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9ab66f3-b470-4cc5-83aa-d6b57db3134c","sequence":{"long":619},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c8f98a3-a6c0-4046-839d-cc335c9333c0","sequence":{"long":620},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"029ab6d2-db49-4762-8d87-fa5fcde81694","sequence":{"long":621},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"877b3fdc-31e1-4514-a9ab-4ad74da80913","sequence":{"long":622},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e643dceb-8126-4f38-93ed-3a647836ac82","sequence":{"long":623},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2c89c28-4f83-4c29-8170-f4de8313ab35","sequence":{"long":624},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"068b7265-b11a-4a8c-9fd5-4a74c3c3340b","sequence":{"long":625},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"066d2f22-503b-3d5c-bb50-bda4ac3d505f","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2653db17-649e-4b6b-a2b4-08611264273b","sequence":{"long":626},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38ae9e62-4936-4499-a083-401df1b1d1c3","sequence":{"long":627},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97599828-7fcc-4989-80aa-1639ff4a2176","sequence":{"long":628},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"788de388-ef1b-4236-bffe-0aa3cbf70e44","sequence":{"long":629},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"637c43ef-0824-4e5b-8f47-9763864d19bb","sequence":{"long":630},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd98518e-2bba-47d8-8bf0-c3f4946fd8b0","sequence":{"long":631},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfac5a2e-81aa-48a4-8bf8-e8a0e0f0641c","sequence":{"long":632},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1110e88a-b1db-4e9b-8112-43539d58238f","sequence":{"long":633},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e2a8d08-4310-4164-97cc-22513214aecf","sequence":{"long":634},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"906b18f4-ced8-4f92-ba40-759df342433b","sequence":{"long":635},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fbebd90-54a8-43f6-98e5-a65b72f27f7c","sequence":{"long":636},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a076cdf-676c-4d02-a5fc-53bec652cbe6","sequence":{"long":637},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":66881},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2b3057f-8636-494b-b797-51f8e0cc38fc","sequence":{"long":638},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bca5d96a-83eb-4146-8b51-45bb804acd60","sequence":{"long":639},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44e5f86f-fbab-4a03-b0b1-a106a7f46acc","sequence":{"long":640},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eed66a4b-4a29-462e-8286-9b999a8a7a56","sequence":{"long":641},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d1508ab-fd40-46ad-8aad-2d01a1bbf541","sequence":{"long":642},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b38f864-6ba2-4128-a117-66ed3edc56b9","sequence":{"long":643},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"daab031b-a646-4a67-a679-b48ad3c23ce9","sequence":{"long":644},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ada4f1f-a959-4413-b606-b71033030d93","sequence":{"long":645},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73461b87-48cd-4c7f-9751-cfb83999d04f","sequence":{"long":646},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e6d58f0-1d87-43e7-9323-d233ebcbab2e","sequence":{"long":647},"type":"EVENT_MPROTECT","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b2c1343-404e-4769-877c-dba9f4b8ae98","sequence":{"long":648},"type":"EVENT_MPROTECT","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfd591b9-f9f2-49d0-b50a-3c1024639379","sequence":{"long":649},"type":"EVENT_MPROTECT","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7e44182-35b4-473f-b8b0-daf76c7014d8","sequence":{"long":650},"type":"EVENT_MPROTECT","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06c8f5bc-6d9d-4a19-b86f-6209adb30e81","sequence":{"long":651},"type":"EVENT_MPROTECT","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb0c45c9-50f4-44ce-aff1-47217b39baa2","sequence":{"long":652},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"392c2b4a-d74f-44d3-8308-39ecfad74c6a","sequence":{"long":653},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"313a436d-de2b-4d80-aa73-be80cd2ae98d","sequence":{"long":654},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02aa7ae5-182b-4809-bb17-f495bd1896d0","sequence":{"long":655},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c731636-eaf6-42bc-9488-d80d41401f1f","sequence":{"long":656},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7147cb2-3e5c-4e72-8c63-7011e6a5d25b","sequence":{"long":657},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9aa38e0-02c5-47ea-83f9-3554343f3aaf","sequence":{"long":658},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":{"string":"/etc/pwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"485550ed-8043-4e06-945a-dfe40826f7e7","sequence":{"long":659},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c63d2d97-cb62-4c70-80c6-6b91e7dca46a","sequence":{"long":660},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df7269d1-e824-4df0-98e7-c05d58cac534","sequence":{"long":661},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e66e1e0b-7996-424a-98d2-3f18e256d739","sequence":{"long":662},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9b1ef19-6f7f-43c4-a5fb-92deefabd275","sequence":{"long":663},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eeb560db-e01a-481a-a128-6d93dc217c09","sequence":{"long":664},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbd5d784-716d-45a0-bccf-e04182ddeb46","sequence":{"long":665},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c14a528-ccea-46c0-9126-b0f4667bbfed","sequence":{"long":666},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"672ad4c5-9c35-4bdc-b11b-89789fb5e5e7","sequence":{"long":667},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"555588ab-dee1-42e4-960f-d39d1e573130","sequence":{"long":668},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e943c221-6e25-4615-8373-5dcf3e23f6d8","sequence":{"long":669},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"377","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ff2ffce-93a0-46bd-80bc-3664f872dbdf","sequence":{"long":670},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"377","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88c166fa-0afb-4b3c-b338-017808c0aa5f","sequence":{"long":671},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"906080aa-67f2-42c9-aacd-684e5e2405e7","sequence":{"long":672},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"96d82599-7779-ef52-b977-075492ef8d39","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32a1c95d-356a-4791-90e1-d6a1efb7b129","sequence":{"long":673},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c1fb98b-1be0-4638-973e-016cd99b29db","sequence":{"long":674},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6aa53fe5-548c-4c47-8c54-040ba2ae9797","sequence":{"long":675},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22af9060-d3b9-44d7-8349-98e7ff54b925","sequence":{"long":676},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7da16cf-3afe-4fb9-ad69-d8d20c34fc34","sequence":{"long":677},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"cdc8911c-7575-ae53-b575-90e5c3ae1b34","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61222d6c-813b-40f0-a322-891eef877351","sequence":{"long":678},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cdc8911c-7575-ae53-b575-90e5c3ae1b34"},"predicateObjectPath":{"string":"/etc/profile"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03a78584-0559-402e-be71-d08722278c35","sequence":{"long":679},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cdc8911c-7575-ae53-b575-90e5c3ae1b34"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":562},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b33068df-abb8-425c-b1e5-eb1fc0256b5e","sequence":{"long":680},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cdc8911c-7575-ae53-b575-90e5c3ae1b34"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd7c5fea-a8f4-4778-b583-20ff9ab3a7f5","sequence":{"long":681},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3"},"predicateObjectPath":{"string":"/home/user/.profile"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ea006c2-c414-40d8-8101-21a53c002a38","sequence":{"long":682},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":881},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"857b8dad-0177-4872-b47d-526b0645ba7d","sequence":{"long":683},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d7c185e7-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1283,"parentSubject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582903124345395},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"206cddc6-71a4-4bf9-9c5f-c3b39716cde6","sequence":{"long":684},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1283","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1283","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"b003464c-20bc-2258-bc20-35a2f822aca3","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27008162-2888-4f15-adee-3a74a1639d7b","sequence":{"long":685},"type":"EVENT_EXECUTE","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b003464c-20bc-2258-bc20-35a2f822aca3"},"predicateObjectPath":{"string":"/usr/bin/resizewin"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582903124345395,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/resizewin -z","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23caed73-ed41-4da8-a745-aedc4a5ddac2","sequence":{"long":686},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2701fe31-7834-4b19-aa87-ad282ec1dc3b","sequence":{"long":687},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6091a68-026a-4de1-ba29-98fe0b352d6c","sequence":{"long":688},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e15ffb1-6108-4bcb-a9de-b574da8f703f","sequence":{"long":689},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a149644e-d2a5-4e4f-b4db-bae7ee92f7da","sequence":{"long":690},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc285520-ab6d-4b9c-b2c8-8fd0e9a74e66","sequence":{"long":691},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e711917e-3d23-4093-86a5-3ce167a61ca7","sequence":{"long":692},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca88c7ec-d71d-4310-960f-5adda594475e","sequence":{"long":693},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"807ff63b-2dbd-4dbe-85a0-0f2fb5944ca8","sequence":{"long":694},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f655a09c-210d-4495-b904-55cd4ad2c7b0","sequence":{"long":695},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19e32075-52ed-4055-9db5-e897d6695712","sequence":{"long":696},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62ee4baa-180d-4a4b-a2e2-cad6c06fcb0e","sequence":{"long":697},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d846d6ec-c257-4a2c-a21d-269cf051ba51","sequence":{"long":698},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d077a1b0-2676-4c05-87ba-e4181ce24938","sequence":{"long":699},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05971532-e1a5-4cc1-9c3a-e7773bbb2861","sequence":{"long":700},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d8c83e5-132f-4ad9-873c-a15e01137d7b","sequence":{"long":701},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dada958c-0a83-4c5a-8990-3d57e5f5f5bd","sequence":{"long":702},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee806e33-7947-4270-aa94-885ba58ff5c5","sequence":{"long":703},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aca28625-0b15-407c-9568-e033a9c88b4e","sequence":{"long":704},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9044d62a-3ceb-4c9a-93d4-b47ce45d8e1a","sequence":{"long":705},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c8d7700-3e9b-4204-89f1-8d73dd814894","sequence":{"long":706},"type":"EVENT_EXIT","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d7c2196c-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1284,"parentSubject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582903124345395},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54d2d1f2-9d2e-414c-b9d6-d825ea6d4c9d","sequence":{"long":707},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1284","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1284","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"973ecfbf-e437-0451-b7e4-41ba11046147","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e6fcd5b-9d6b-4e1d-9526-d08d215426c6","sequence":{"long":708},"type":"EVENT_EXECUTE","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"973ecfbf-e437-0451-b7e4-41ba11046147"},"predicateObjectPath":{"string":"/usr/bin/fortune"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582903124345395,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/fortune freebsd-tips","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ce141f6-bc73-4da2-b455-b067bcf8d5fa","sequence":{"long":709},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"064d02f2-ac5f-4048-8b72-cb6b130e2774","sequence":{"long":710},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9cd1ca3-a4f2-4c1f-b4d5-758132bb7350","sequence":{"long":711},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd9b06fe-69bd-4698-8f32-68e238a38e46","sequence":{"long":712},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95fbdd28-6370-4bad-a91c-d2c2c423018c","sequence":{"long":713},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc6d1a55-68cb-4fba-ac5e-7b026d2f57da","sequence":{"long":714},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d359809-2886-4730-a3a4-7d6cf385e6b8","sequence":{"long":715},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a50aa21-59c2-49a9-b12f-69821a0afb5e","sequence":{"long":716},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63101464-cc76-4916-9a53-704d0571f5d4","sequence":{"long":717},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2408448},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e34896f-df49-426e-a268-64803224e7a8","sequence":{"long":718},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2408448},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3f7a1cc-ca50-482e-8db3-67b4879145a9","sequence":{"long":719},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de85f32e-6977-476b-8110-02bde4fdf9fa","sequence":{"long":720},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f83e7b7-0fe4-4337-8114-19d9df24cf2a","sequence":{"long":721},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2928640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"424737be-593b-4666-bf7a-9307d5433f69","sequence":{"long":722},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2928640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b27bf48-688f-4350-a887-74578063a441","sequence":{"long":723},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4259840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"334fd496-5f8a-44c1-8d04-a87fafb5f1d2","sequence":{"long":724},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4259840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be608abe-8e18-4ee3-8524-5ffa620f2950","sequence":{"long":725},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b479c32b-7d4b-4b28-a2cd-5e7dcc502054","sequence":{"long":726},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3e46ef4-1ee4-46ea-996e-ee7dab305970","sequence":{"long":727},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92cfdaca-853d-4223-a1d6-77353edae8bf","sequence":{"long":728},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":75810},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bed3be11-89a6-4f3b-8514-10c06d392dba","sequence":{"long":729},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":75810},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2469c2f9-ce3c-43ea-9f6d-c0acdde20623","sequence":{"long":731},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"874712d0-9528-487d-a89f-943e98b562e1","sequence":{"long":730},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"444bd3a9-4c7e-4051-87bb-94d2644c60f6","sequence":{"long":733},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67fae8c3-c826-44ac-b9e0-9799bf06f46a","sequence":{"long":732},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f034044e-cc69-40f5-9509-0e705ed1806e","sequence":{"long":735},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1c9cb08-87ba-46aa-9435-86bd678cb540","sequence":{"long":734},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d30edda-c316-4d80-92c2-b57f41fc8b9e","sequence":{"long":737},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5885d6ef-bf02-496c-9ea8-4ca7bb324ce0","sequence":{"long":736},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6a858d5-eae1-48ed-8730-bedafa9ccff1","sequence":{"long":739},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"beb53ac1-0e83-4ad6-8ae4-009f03e03a29","sequence":{"long":738},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2d48e6e-915d-43a7-8d98-808a8bed50db","sequence":{"long":741},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ab5ae5d-8aae-4980-9569-613fc7f1cad8","sequence":{"long":740},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cef0bcf0-56b0-4290-b554-3fb24909c6e9","sequence":{"long":743},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a37de97-0497-489a-908f-9d6807ceff7c","sequence":{"long":742},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"801e10ad-5679-495b-97e0-3847218c0e3a","sequence":{"long":745},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97b2e6ac-c66b-4665-bae4-74419ded6b6e","sequence":{"long":744},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5b47166-b1e6-4918-8201-2034d83d78b4","sequence":{"long":747},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d6f34d7-eeed-4584-878a-fbc5f6955bda","sequence":{"long":746},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fca4daf-716f-41b8-9d34-9ab72b1a9cb9","sequence":{"long":748},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"990e8a9a-1816-4a9c-8208-9ea7f53cb26e","sequence":{"long":749},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8cac64f-7398-4685-b48d-5c127e9bb268","sequence":{"long":750},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ea4d5c9-de59-4163-b0d5-cdf4981f2efe","sequence":{"long":751},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4102},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f78c32cc-d556-4ce0-bcf9-104e19babb7f","sequence":{"long":752},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16412393-706d-4e3a-94a6-04b0d49be6ec","sequence":{"long":753},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4155},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97bb2e61-c5c7-4cce-9ee5-90ac05106fad","sequence":{"long":754},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c540acc-7fdc-4d33-a611-0c1c4656997c","sequence":{"long":755},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bba82a13-1094-4579-b527-fe6a947cc9d2","sequence":{"long":756},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3634},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7437170-799a-4605-860e-d0dafec59f6f","sequence":{"long":757},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34b57861-b385-4ee5-a248-129e6ae4e4e5","sequence":{"long":758},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3687},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f94c3a5-f866-44f5-a8c8-6e9f0c4b8850","sequence":{"long":759},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba2e0a15-f930-4173-a0e4-7166a25da872","sequence":{"long":760},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dd2066f-4d45-4b22-95b0-72e76552529d","sequence":{"long":761},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4553},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10d834d9-dd4f-4e8d-8fb3-461bfb47e91f","sequence":{"long":762},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ace80e5f-6e5d-4816-a6d1-35d6438d5142","sequence":{"long":763},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4606},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77494b28-c382-4cf5-91df-4f6139bb265b","sequence":{"long":764},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c05922f0-a15c-4f25-ae80-10bf0e8366de","sequence":{"long":765},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e1dee74-ea0d-400b-b9d1-baa48f7f0719","sequence":{"long":766},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4190},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cb655ab-0662-41c9-9ba7-a800c8262ae8","sequence":{"long":767},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10dee950-4d53-4db1-adca-632dfe26b6e9","sequence":{"long":768},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c12c19b-dc99-48d8-964e-5d149bf340b3","sequence":{"long":769},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f50b65db-b0e4-4f4b-8695-edb8a4b1b3da","sequence":{"long":770},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4727},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b71272e0-1fa3-41e5-aeee-e60ec9ad7f80","sequence":{"long":771},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64d575a5-0a54-4bde-9d38-27f40b902c3d","sequence":{"long":772},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"947d8168-93cf-4ad6-9e5e-a18fbb68d42e","sequence":{"long":773},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"685b8ed4-45bf-4aac-aa9f-fbf7c8e86547","sequence":{"long":774},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4810},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c5b0c75-02c5-479c-91b8-a8c25cf8804a","sequence":{"long":775},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46e5bf9f-7366-4eb1-b702-c18e756fb500","sequence":{"long":776},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54d6b369-d433-48d4-9334-a9d57f7307b1","sequence":{"long":777},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30b2a08c-730e-4b6c-9d0f-62dd3a2d1822","sequence":{"long":778},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4200},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0b35309-f92b-4e64-9100-6fa6bb3df21e","sequence":{"long":779},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a55aa25c-49d0-47d7-ab77-845997f433f6","sequence":{"long":780},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c0eee83-d006-4fc4-8e12-271d1fa9ca75","sequence":{"long":781},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2eb7da83-0ed4-43f2-a82c-5594c01c9ce3","sequence":{"long":782},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4721},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f37b3a4d-bd4c-49b4-82fe-5cf87341cb54","sequence":{"long":783},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905153966888,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":79717},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26cc9fe9-bbd7-4adc-9a27-1e0483d48590","sequence":{"long":784},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905304236022,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99fb1e38-a168-4f56-9973-7b81b104bb1b","sequence":{"long":785},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905304236022,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d95c832-2d92-4599-a1a1-061106a3322e","sequence":{"long":786},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905304236022,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a432511-5070-4b69-9f0e-a284983a4d87","sequence":{"long":787},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905304236022,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b583ceaf-467a-11e9-ae9b-080027fc76ba","type":"SUBJECT_PROCESS","cid":1229,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64588c01-bafc-4738-aaaf-becb8e08e9f1","sequence":{"long":788},"type":"EVENT_EXIT","threadId":{"int":100074},"subject":{"UUID":"b583ceaf-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"b583ceaf-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1226","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b583c213-467a-11e9-ae9b-080027fc76ba","type":"SUBJECT_PROCESS","cid":1226,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"dfc2891a-d014-6a5f-94d0-76881f6a1fb0","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35a3d7be-e50f-42c0-a169-4ea4c33a9fe9","sequence":{"long":789},"type":"EVENT_EXECUTE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"dfc2891a-d014-6a5f-94d0-76881f6a1fb0"},"predicateObjectPath":{"string":"/usr/bin/nice"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582905743923559,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"nice -4 fsck -B -p","ppid":"1","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f364e68-bf2c-4895-bf27-402b44eb2f25","sequence":{"long":790},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db0f9ac1-ccef-4fb2-b936-54885d6ade64","sequence":{"long":791},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89aaaa12-e3f3-4591-a435-3a3680f57547","sequence":{"long":792},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a33b6bcf-47bb-47ec-8f49-73380931372f","sequence":{"long":793},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"469ecc94-4331-4c51-a0cb-2b570ee8111a","sequence":{"long":794},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01c13beb-61eb-40f2-956e-3072ff883b25","sequence":{"long":795},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2e57fd8-5bea-4c2c-bd2d-246c133f11e4","sequence":{"long":796},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fa2c683-f47e-48d1-ada2-8da1b2a1daa2","sequence":{"long":797},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c66bf12c-3bf8-445e-8eb1-94272989daa0","sequence":{"long":798},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1f13ea1-1fe6-4a68-8fdd-c35dfbb1b72b","sequence":{"long":799},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62d44c2d-c44e-410a-9294-723fc848c52f","sequence":{"long":800},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9104d3ea-6943-4158-b8bc-122f7b40f4cb","sequence":{"long":801},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9da0edc4-2020-49a0-96c6-8de8499d7674","sequence":{"long":802},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4329a277-9f59-46cf-9a02-19ace0c1037c","sequence":{"long":803},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d09334c7-570e-4ba6-8922-6c0829379dba","sequence":{"long":804},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7661bfc-41ad-4f8e-b26b-25254afa8490","sequence":{"long":805},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d472d3aa-a42d-431d-bd42-0b06b679222c","sequence":{"long":806},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ce4577e-63a6-4221-9158-84e1ceeea98f","sequence":{"long":807},"type":"EVENT_MPROTECT","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf3ad12b-8461-4db8-9684-d9da5007b60a","sequence":{"long":808},"type":"EVENT_MPROTECT","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"19a7640a-bde5-2058-a5bd-6734c820ce3a","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6f02a16-4d8f-408f-98e6-1fe6f449d416","sequence":{"long":809},"type":"EVENT_EXECUTE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"19a7640a-bde5-2058-a5bd-6734c820ce3a"},"predicateObjectPath":{"string":"/sbin/fsck"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582905743923559,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"fsck -B -p","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e9248df-c89e-4199-9355-6d57f3d666b0","sequence":{"long":810},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f835ce59-908d-4c1a-ad92-f4f45bcdd8b1","sequence":{"long":811},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ab606a4-b783-44c2-966d-0ef892396f98","sequence":{"long":812},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"222f2eeb-5156-4cc8-8e19-b6c158b1a30c","sequence":{"long":813},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2835378-a462-4094-a6fc-b7343b28ab54","sequence":{"long":814},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95bd76d9-ccd6-4923-81b3-226cad9a015e","sequence":{"long":815},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b004ee0-c54e-4430-ac0c-6b5e6162e360","sequence":{"long":816},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9872cac0-7d78-4ed7-8125-22da043fc208","sequence":{"long":817},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c52cb62e-e296-4f72-9c0c-78ee4d34e6af","sequence":{"long":818},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8315577c-f618-45e6-9324-8a5f04d66f43","sequence":{"long":819},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"701ae7ff-da4d-4705-b183-4a49acb66e53","sequence":{"long":820},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2404352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff2d19a2-e901-48f9-bb35-ba265a554a05","sequence":{"long":821},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2404352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f1f26fd-55fe-45eb-a8d8-63473d9fa672","sequence":{"long":822},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2920448},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33f13732-ba92-48a6-941a-cdb90ea030f3","sequence":{"long":823},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2920448},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a2b458c-369c-4b47-a1a6-19e667ab9c88","sequence":{"long":824},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4251648},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"089fa402-e2fe-46ef-aa05-afec132c28ee","sequence":{"long":825},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4251648},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"deab16ea-d685-4560-8fb1-2e4de3b531d0","sequence":{"long":826},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c597cd9d-2af0-4b51-8ae6-d9289be5f443","sequence":{"long":827},"type":"EVENT_MPROTECT","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fef55058-c359-4cc3-a680-6b47b2a49f83","sequence":{"long":828},"type":"EVENT_MPROTECT","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"7ff6a25d-5b88-aa5f-885b-b000bfaae0f4","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b84b719-1bbe-428c-82de-cf439a8637e3","sequence":{"long":829},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"7ff6a25d-5b88-aa5f-885b-b000bfaae0f4"},"predicateObjectPath":{"string":"/etc/fstab"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15fb3a8d-3c1b-4be7-8f67-d52252535844","sequence":{"long":830},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"7ff6a25d-5b88-aa5f-885b-b000bfaae0f4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":200},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"d952a902-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1285,"parentSubject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":1552582905743923559},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbc1b716-1f14-44e2-8fad-17612dbbf3a9","sequence":{"long":831},"type":"EVENT_FORK","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_vfork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1285","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1285","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"434858bb-406e-6156-ae40-962bc661e15f","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8de8dd7f-87be-43d7-b9de-eddab3807158","sequence":{"long":832},"type":"EVENT_EXECUTE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"434858bb-406e-6156-ae40-962bc661e15f"},"predicateObjectPath":{"string":"/sbin/fsck_ufs"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582905743923559,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"fsck_ufs -p -F /dev/ada0p3","ppid":"1226","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cc1e033-b19f-456c-b560-be58cf686684","sequence":{"long":833},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93a879b1-03a5-47e1-84e0-6d68c4c00e55","sequence":{"long":834},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"860bb2e9-5cec-4c2b-bffc-351bf89d5683","sequence":{"long":835},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca4a0cfd-106a-4911-a3b7-4f096595dacb","sequence":{"long":836},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6093d3a1-b302-4b64-9fc3-8cdbd0fb0aeb","sequence":{"long":837},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df90bf7a-8cee-4b4c-a416-02d8c1996523","sequence":{"long":838},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2edd8992-3205-4d1b-9aec-fbdc17bebdee","sequence":{"long":839},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"705f2f64-9841-0e51-8198-9150c10e05a0","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8f25658-5e9c-415d-9a8d-ef325f0c148c","sequence":{"long":840},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":{"string":"/lib/libufs.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e96441f0-3b1a-4265-b24e-973ef0e15c86","sequence":{"long":841},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2531328},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b218b484-211b-426b-a5f9-014cdec0a2f1","sequence":{"long":842},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2531328},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"081d9938-019b-4d6e-8e37-ee25faea51e8","sequence":{"long":843},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2535424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e49a0f00-6400-452e-b5d3-bd04dec877a8","sequence":{"long":844},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2535424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2edab054-59d0-4d30-b3c3-0ae0d9144f6c","sequence":{"long":845},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2555904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a47f22a8-1c9f-4905-89f2-4faa96e4973d","sequence":{"long":846},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2555904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b41de9c-1725-4036-9fbf-30bf61199f96","sequence":{"long":847},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"518fee61-408f-49c0-bc13-ad2bc91cb8fd","sequence":{"long":848},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"148dd034-9727-4bb8-8a3d-b19e0d2a8c6f","sequence":{"long":849},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27c283b9-f1e6-4557-b94c-c4c87bb75c86","sequence":{"long":850},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"585190ff-9376-41db-996a-18e3aca40a02","sequence":{"long":851},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2531328},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"689cb828-0cfb-425e-8ccb-a1d223f3f2a6","sequence":{"long":852},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2531328},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b06b3ea-de8d-4e81-8c23-183cdc837d75","sequence":{"long":853},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2580480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16bb3610-96da-46aa-90f1-3967e2681792","sequence":{"long":854},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2580480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08c74c63-5f5c-4c11-adee-67ee72ac385d","sequence":{"long":855},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3096576},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aca772b3-d4f4-49b0-9094-b22388c44368","sequence":{"long":856},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3096576},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9bca1c0-0b76-418b-baf8-0eb731fe817e","sequence":{"long":857},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4427776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64a16124-7ec2-447a-b883-470f0cf0bdcf","sequence":{"long":858},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4427776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecb350aa-d589-446d-992d-a824c354458e","sequence":{"long":859},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dd6e167-132d-4c57-b292-21aabc565d6c","sequence":{"long":860},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d18e0b6c-8c28-4932-aa48-f908bea88c59","sequence":{"long":861},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c5fc491-e7b4-4de3-986a-f8143ea93c86","sequence":{"long":862},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"50dc865a-db47-1c50-87db-7aecd01c5655","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e3dbe0a-0696-4357-b8f0-c6d780435fe9","sequence":{"long":863},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"50dc865a-db47-1c50-87db-7aecd01c5655"},"predicateObjectPath":{"string":"/dev/ada0p3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffa97faa-09aa-4ac7-a4e7-2d0109fd47a2","sequence":{"long":864},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"50dc865a-db47-1c50-87db-7aecd01c5655"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8192},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6318ea76-dbe4-47f6-b875-9d2705001c05","sequence":{"long":865},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"50dc865a-db47-1c50-87db-7aecd01c5655"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"335aca25-c52a-4601-ad18-feba46a865d4","sequence":{"long":866},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"50dc865a-db47-1c50-87db-7aecd01c5655"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2501312f-8f71-434d-a587-02eaef585789","sequence":{"long":867},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"50dc865a-db47-1c50-87db-7aecd01c5655"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1947e86-f8a9-416c-8c2c-ca5a42a60c82","sequence":{"long":868},"type":"EVENT_EXIT","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84ea6d82-6506-4d5a-a4d5-f576a9421449","sequence":{"long":869},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"7ff6a25d-5b88-aa5f-885b-b000bfaae0f4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c52e1c7-41bc-4803-aeaf-7849dbf085c4","sequence":{"long":870},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"7ff6a25d-5b88-aa5f-885b-b000bfaae0f4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c32faca6-d343-4911-8a45-e3dfab0f209e","sequence":{"long":871},"type":"EVENT_EXIT","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b583c3cf-467a-11e9-ae9b-080027fc76ba","type":"SUBJECT_PROCESS","cid":1227,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92719f2a-34cb-4be9-9bdc-9d068119d8f7","sequence":{"long":872},"type":"EVENT_EXIT","threadId":{"int":100084},"subject":{"UUID":"b583c3cf-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"b583c3cf-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905794548453,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"logger"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a6b8eb6-1fce-4c77-b778-400f7ee4abca","sequence":{"long":873},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906124611700,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":79717},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6089242-6f8c-4307-80ab-e8f4678a9c5e","sequence":{"long":875},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582906124611700,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd44f70e-969f-466f-bf71-ad2b7dea11bf","sequence":{"long":874},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906124611700,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cac6dce3-9c2a-4b18-a9c9-9338df2e42e3","sequence":{"long":876},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906178054811,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":88685},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9865bd9-0bb9-45cd-90ef-8dbe51e3bde9","sequence":{"long":877},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906283883081,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9666be1c-38d1-4e60-9b68-1e9a84592fb1","sequence":{"long":878},"type":"EVENT_SIGNAL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906293906646,"names":{"array":["aue_kill"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"pid"},"runtimeDataType":null,"valueBytes":{"bytes":"0502"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"signum"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1282","arg_euid":"1003","arg_ruid":"1003","arg_egid":"1003","arg_rgid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78a82e13-1fa9-4685-b0b4-25ea0f019a76","sequence":{"long":879},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906293906646,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"477202a3-58fc-4b26-b10e-eba9aae3eee2","sequence":{"long":880},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906293906646,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fff4ab7-df78-44d1-99a6-ef9448d5cab2","sequence":{"long":881},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906293906646,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":21},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4832d243-5e7d-40a3-afba-59f790481a01","sequence":{"long":882},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906623959179,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02fd7ce2-ec99-4a1f-a5b1-c23636b38941","sequence":{"long":883},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906623959179,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"377bc4cf-1da8-4327-bff1-be3bc05ebc1b","sequence":{"long":884},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906714285543,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69ae81c3-e840-484a-99b4-17f1289076a3","sequence":{"long":885},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906714285543,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8220e81-a246-410b-91a5-77ef634b5eda","sequence":{"long":886},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906843870856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3887f6c0-b6c5-4ccd-a683-0f47ae438c2b","sequence":{"long":887},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906843870856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34450c91-36ba-4746-b59c-c503ed2f42ef","sequence":{"long":888},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906994149349,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65744cba-0f05-46c2-8672-a4ba16ca5e78","sequence":{"long":889},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906994149349,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0a34bae-96b1-4cb5-9aa2-a3bb60a8c6c0","sequence":{"long":890},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907074986277,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"456b0d58-289c-4dbf-86a2-f698267db4cd","sequence":{"long":891},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907074986277,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c158b0fc-8c4f-4ce9-a31f-9d8197cc9279","sequence":{"long":892},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907183946428,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":90319},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90a4a88e-f81c-4478-b7df-930177613fd8","sequence":{"long":893},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907226215093,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37ca16ad-bf29-40db-86d5-9f87f9461015","sequence":{"long":894},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"802da701-0471-305d-b104-2b472d304411"},"predicateObjectPath":{"string":"/usr/home/user/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907226215093,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"74a0"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6956d605-0767-4493-b169-51b5278693b2","sequence":{"long":895},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"802da701-0471-305d-b104-2b472d304411"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907226215093,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"690cb168-b051-4839-adec-f61834840121","sequence":{"long":896},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907226215093,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":21},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96b00e05-8475-4404-899d-9689bfdd0483","sequence":{"long":897},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0762f0df-afea-4c43-ae9f-d2c8226a8127","sequence":{"long":898},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"384","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b01beb02-c0fa-4d16-ba21-e3ab98218603","sequence":{"long":899},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"385","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b16f3b2-60e5-4d81-b870-d0569bb6f84e","sequence":{"long":900},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"386","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdb5399a-1119-4b7a-bc4a-2619a4b8284b","sequence":{"long":901},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"387","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e47e2d0-0764-43bf-91f2-1e883be7588e","sequence":{"long":902},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"384","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32ce4d3a-4d8e-432c-8493-99e117b62688","sequence":{"long":903},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"385","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d873c057-aa05-4ffb-8925-d4ffc2c919b8","sequence":{"long":904},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"386","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f43b16c-338d-45bf-b09f-b74a8789089b","sequence":{"long":905},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"387","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dfd2cd1-8a60-4ccf-afa1-1820dcfd59cf","sequence":{"long":906},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":90319},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0efb7554-c046-4a94-8837-756899f0589b","sequence":{"long":908},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f1fa1b9-a773-41a3-8d5f-3aa4b4473e3c","sequence":{"long":907},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3de5820-fcdf-4236-aab1-074ea08c0f3a","sequence":{"long":910},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8de2d72-5193-48ac-a2e2-5d27a8ab54aa","sequence":{"long":909},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"462d568a-991f-48f3-a28a-5def485254de","sequence":{"long":912},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0b1109f-1899-4fcf-a0cd-2a2cf4f570a5","sequence":{"long":911},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"478335e9-aa97-4dfe-a6ef-1a36d5314e9b","sequence":{"long":914},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e6f919c-9ef4-4d3e-b788-04bd37ac4396","sequence":{"long":913},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6103edb-009a-49b0-9301-e4ba7d91b936","sequence":{"long":915},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae334af2-58a2-4faa-ad31-4f1983de9627","sequence":{"long":916},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd81e975-d8e4-4614-848b-2a95e4a49e2b","sequence":{"long":917},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de8ff05f-8da3-4bec-baa1-a89c236143e6","sequence":{"long":918},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4520},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faa8d85b-423a-4989-8834-0c232c4c43e4","sequence":{"long":919},"type":"EVENT_WRITE","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26a01380-d1de-467d-a593-9abaacaaeebc","sequence":{"long":920},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4573},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27ec337c-c217-42f5-b542-0a6dc5bd46e6","sequence":{"long":921},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d99d38a4-1578-44af-aff6-ac96fac7e452","sequence":{"long":922},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"359bdb09-3c28-4338-836a-2eb4741ac846","sequence":{"long":923},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4440},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3c12772-932a-4c6c-b375-32d5a10530e8","sequence":{"long":924},"type":"EVENT_WRITE","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64d85338-b778-4d0a-a455-337f3ddb0209","sequence":{"long":925},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4493},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa6439e5-2117-4793-afd9-b98010a7745b","sequence":{"long":926},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dff35b26-60f1-40a2-b47a-d6e253758121","sequence":{"long":927},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a64acc9-4c69-4347-8c18-7a2b50c058fd","sequence":{"long":928},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1630},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b38d6a5-03d8-49ee-b102-3a873c4a47a5","sequence":{"long":929},"type":"EVENT_WRITE","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93bf646a-c9c2-40c5-b116-6e90b6d923b2","sequence":{"long":930},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1683},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bf48faa-d3e7-48e7-b566-31690bc84ac9","sequence":{"long":931},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bfbe69b-4504-46c9-99d8-b910be7177ba","sequence":{"long":932},"type":"EVENT_SENDTO","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"388","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ad67305-8a03-41ea-bfd9-8fad122dbe18","sequence":{"long":933},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"388","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b88d8b6-9f50-4f7f-b64e-7e40301f6b48","sequence":{"long":934},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfc7be06-86dd-408a-9ce9-c62a20b44a5b","sequence":{"long":935},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba805fae-62bd-42fb-a6af-3cbcf04fe2d9","sequence":{"long":936},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95e988ed-9f7f-4836-a6c6-37a68be38c9e","sequence":{"long":937},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a3ed664-e079-4936-96ad-0d589ce24121","sequence":{"long":938},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff48530d-2a62-433a-a60b-672285404b95","sequence":{"long":939},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"418c022d-df42-4a87-ad0a-2c242cd841d0","sequence":{"long":940},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ea9d5d8-6eff-4292-9f5e-fc2a0c8a5c8c","sequence":{"long":941},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908194056284,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":94688},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a054bbf-fb79-419c-9b6b-3293d81df704","sequence":{"long":942},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908713861358,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"011190c1-e55b-498a-a6d8-d05ef7f474d6","sequence":{"long":943},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908713861358,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99d9a9dc-8fd8-4f02-a740-b3526eb42977","sequence":{"long":944},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908904072636,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58742b56-c4d7-49cc-a2f3-15bf4266d936","sequence":{"long":945},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908904072636,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d2dad7e-aa63-47f9-b1e0-5096c07051e5","sequence":{"long":946},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909013925442,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"5b518504-be76-5653-b6be-34ff435661ed","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99e6032d-1c77-4265-bcf7-a4669dbcbd6b","sequence":{"long":947},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5b518504-be76-5653-b6be-34ff435661ed"},"predicateObjectPath":{"string":"/home/user/ripe-prov-tests-master/"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909013925442,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00bed0"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe9b8cb7-017d-4e93-a052-300edf4be206","sequence":{"long":948},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5b518504-be76-5653-b6be-34ff435661ed"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909013925442,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"157f048f-375d-4cf3-85da-63cd333f3c6e","sequence":{"long":949},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909013925442,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b099b52b-e082-4cba-bdd9-044673b2930b","sequence":{"long":950},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909204168075,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":95840},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"655748a9-7265-4406-8445-f6f15ff5120c","sequence":{"long":951},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909294044101,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c38ab97-4dc8-41b1-9349-15abaec95f4c","sequence":{"long":952},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909294044101,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"1edee73d-9a38-a754-b89a-6d3944a71c62","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_DIR","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a736de4-c466-48d9-82cb-6218ec1169d4","sequence":{"long":953},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObject2Path":{"string":"/home/user/ripe-prov-tests-master/Linux"},"timestampNanos":1552582909294044101,"names":{"array":["aue_chdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d89e058-ac5a-4b84-8b2b-861bcb9a1cd9","sequence":{"long":954},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909294044101,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6d17e83-03fa-4541-bbfe-07a48ba5f9b2","sequence":{"long":955},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909294044101,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":50},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f74d804f-b21f-4fa4-91cb-cc4d6aac7676","sequence":{"long":956},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":95840},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c8a2544-c6c0-42cf-b947-832bd2296908","sequence":{"long":958},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40115a70-1bfb-491b-a1db-c4241356a175","sequence":{"long":957},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b3623a1-cf2f-4fdd-aaac-d4bdc7445a50","sequence":{"long":960},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38d0bed8-26b3-42e1-8fa6-e843707dc3ef","sequence":{"long":959},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d4c25f6-df49-489e-9550-4676d5c773ca","sequence":{"long":962},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7bb197c-d8c1-45e5-a991-5727748e692e","sequence":{"long":961},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d3f6588-507e-4887-9b30-faf803ef84fb","sequence":{"long":963},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98346b8f-2acd-471a-8642-dcce8d0ed7b6","sequence":{"long":964},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4236804e-d9c0-49d5-8216-2cd20b4c07da","sequence":{"long":965},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4050d22-048e-4806-ba2d-b30a87e768f6","sequence":{"long":966},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4365},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfd8ac4f-a765-4215-aad8-b40eb433c1e8","sequence":{"long":967},"type":"EVENT_WRITE","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bac4fe91-9c87-4e86-bcfd-490edbc21e85","sequence":{"long":968},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4418},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccc1454a-ee76-486a-8860-6a0a69813863","sequence":{"long":969},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9ed0612-34d6-4aa1-b3ea-29507bf1be88","sequence":{"long":970},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15e8c61f-78d5-4b38-bbcf-e63b4456d31e","sequence":{"long":971},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1148},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ef62933-5606-4a8a-890d-5472e8dce481","sequence":{"long":972},"type":"EVENT_WRITE","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a4b2c31-cbbe-4f3b-b93d-525537868cc9","sequence":{"long":973},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1201},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"507176c0-2a9f-499a-99c8-693bc8f5ae90","sequence":{"long":974},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba4da845-7a86-443b-84e7-3e81a0b318c0","sequence":{"long":975},"type":"EVENT_SENDTO","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"389","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed01c9cc-bfb6-493f-8a9e-0f431eae5ccf","sequence":{"long":976},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"389","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b04d391-4581-4375-9ada-1258bec292c4","sequence":{"long":977},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65776fb6-900a-4334-b852-6c65b34458c5","sequence":{"long":978},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1db624eb-9df3-4106-9874-155becb2bf12","sequence":{"long":979},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e541f65a-0806-436d-85ab-3004171ed791","sequence":{"long":980},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910133863566,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e83ecbd1-3167-4b64-8c32-38454c5df4fc","sequence":{"long":981},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910133863566,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cef01f6-43a6-41bc-b10d-8870e6232954","sequence":{"long":982},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910223880459,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":98904},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3135db8d-3cb2-452f-b873-52c59e2647a3","sequence":{"long":983},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910364402487,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eff4ba05-8939-4fba-be0a-aa96c98aafb2","sequence":{"long":984},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910364402487,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"285ae46d-e5cd-4acf-a37b-6143a760d85a","sequence":{"long":985},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910364402487,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3514799a-6e57-4e85-8708-632a5c510d3e","sequence":{"long":986},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910364402487,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":32},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4206b765-f88e-4913-9249-3e48608f9fb4","sequence":{"long":987},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cae60af7-3b3d-4056-8a4e-78d11a3b123f","sequence":{"long":988},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"390","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ea6909d-dc84-4cf9-803e-4833f6326c8d","sequence":{"long":989},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"391","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd0e6088-31d2-4887-9d68-5ba88ada89b2","sequence":{"long":990},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"392","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14031d83-cd7d-4200-924a-a925bfe45e73","sequence":{"long":991},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"393","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6039734e-0248-40d1-a2ba-254f23134056","sequence":{"long":992},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"390","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07d20a5a-05a5-45d7-9809-4943d5dfafc2","sequence":{"long":993},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"391","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8776ab81-a73c-4b5f-9c72-7fb6892e8f3e","sequence":{"long":994},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"392","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29208045-d6f5-48c6-8550-b522d483232e","sequence":{"long":995},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"393","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93ae9ca5-0a8d-4030-b7d9-0e27a40796db","sequence":{"long":996},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911233887268,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":100381},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Principal":{"uuid":"8b7f9bee-dd02-5c87-9e7d-06cbbf6379ea","type":"PRINCIPAL_LOCAL","userId":"123","username":null,"groupIds":{"array":[]},"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_PRINCIPAL","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b5358eab-467a-11e9-ae89-080027fc76ba","type":"SUBJECT_PROCESS","cid":1028,"parentSubject":null,"localPrincipal":{"UUID":"8b7f9bee-dd02-5c87-9e7d-06cbbf6379ea"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"dc9aef12-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":null,"localPort":null,"remoteAddress":{"string":"107.155.79.108"},"remotePort":{"int":123},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"298acc16-dbf5-4ef1-aadd-eef1146c2b5e","sequence":{"long":997},"type":"EVENT_CONNECT","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"dc9aef12-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","address":"107.155.79.108","port":"123","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fa5e7c3-22d9-4926-9ee4-3f2defbef4f2","sequence":{"long":998},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"dc9aef12-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"b5434a9c-467a-11e9-ae89-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"10.0.2.15"},"localPort":{"int":123},"remoteAddress":{"string":"107.155.79.108"},"remotePort":{"int":123},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d499f80-7bf3-4ca6-b643-c1cb6a565682","sequence":{"long":999},"type":"EVENT_SENDTO","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"b5434a9c-467a-11e9-ae89-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"ret_msgid":"394","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"22","ppid":"1","address":"107.155.79.108","port":"123","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"b541acd0-467a-11e9-ae89-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"271f4ba8-272a-430a-abef-d2a85be54e42","sequence":{"long":1000},"type":"EVENT_SENDTO","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"b541acd0-467a-11e9-ae89-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":102},"programPoint":null,"properties":{"map":{"ret_msgid":"395","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"b50b2110-467a-11e9-ae7b-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c627f978-0f04-4372-9c4a-1259291dc68e","sequence":{"long":1001},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b2110-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":102},"programPoint":null,"properties":{"map":{"ret_msgid":"395","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"994954a6-9720-4b68-8a20-cd7859dfbd26","sequence":{"long":1002},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":100381},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f05252a-c638-4c12-a457-e1fa2fade323","sequence":{"long":1004},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"025c4fa9-0045-459e-a43b-097d643ea21e","sequence":{"long":1003},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff3d391e-8899-465e-815d-901ff997f258","sequence":{"long":1006},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcc83d93-5e55-4344-9581-3c384de9bf03","sequence":{"long":1005},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4402f7de-7e34-45e8-a624-89c1909881da","sequence":{"long":1008},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"071eaadb-a816-4a03-99cd-08b72555aa6b","sequence":{"long":1007},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e88e877f-59cb-4dc8-94a6-d186d8abcc5e","sequence":{"long":1009},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7516ec1-f247-4ebe-a968-4374d92fb423","sequence":{"long":1010},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e865975d-a577-4fbe-a219-e7d9e9116eb1","sequence":{"long":1011},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50d24179-6567-461d-b502-ab48512f1e60","sequence":{"long":1012},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3060},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"053bd939-b514-4ecc-a8c5-41c859c7aac6","sequence":{"long":1013},"type":"EVENT_WRITE","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ac5f8d7-9ec0-4447-8fd7-3771e105eaeb","sequence":{"long":1014},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3113},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbc8f6c0-87fa-406b-b9d5-11d5b50bfd5f","sequence":{"long":1015},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50773809-27f8-4c8f-8a53-664771cc1cfb","sequence":{"long":1016},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca557a63-223c-4a95-8876-72a1ffaeb2d8","sequence":{"long":1017},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1473},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc74392b-642b-4b93-91dc-1b9b12c120b9","sequence":{"long":1018},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1526},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbbf6273-8383-4b50-9263-6f6d897c58a4","sequence":{"long":1019},"type":"EVENT_WRITE","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0f57cf8-cf27-460b-b786-43572ec62c06","sequence":{"long":1020},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f28dc261-5397-48b9-937a-6726a8c08a2b","sequence":{"long":1021},"type":"EVENT_SENDTO","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"396","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5519291a-093e-4c1d-8455-ad02432954a4","sequence":{"long":1022},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"396","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50350786-5cb0-4395-84d2-af6758e70ea3","sequence":{"long":1023},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c2f5710-e55e-4af4-8a1d-9c630ead8fd5","sequence":{"long":1024},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3cc223a-fbdf-4c16-9613-825858ce1656","sequence":{"long":1025},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f7a5edf-c79b-43f4-b5e7-15dad88057be","sequence":{"long":1026},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e04a46b3-6680-42ee-8c0d-ed6bb04ed006","sequence":{"long":1027},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"599d19d0-3e45-4576-9539-7a7a15838ce5","sequence":{"long":1028},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912204256412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1810bf82-f452-4da1-8e93-1f4ca05e052a","sequence":{"long":1029},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912204256412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f80ae273-ec8e-48e3-ac47-bb08da9005da","sequence":{"long":1030},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912204256412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a2328d1-0e44-4055-923e-cc326863edb7","sequence":{"long":1031},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912204256412,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":37},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20c6387a-81dd-4501-a035-c5f29bcb527e","sequence":{"long":1032},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912243951039,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":103965},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"385bba57-847e-4b12-be69-6eb7e58879d7","sequence":{"long":1033},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e90c802-2546-445a-b3fd-767a8098f3b0","sequence":{"long":1034},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"155bd79c-f37e-4662-9707-c1732f9f357e","sequence":{"long":1035},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"609ccdb2-6cfd-482f-8f7a-7eba8d9e00b9","sequence":{"long":1036},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37d443bd-2c3d-4fe7-a251-9b0c1a7fdc04","sequence":{"long":1037},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b68c5173-4b23-4520-a529-6979b598578b","sequence":{"long":1038},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1a84c31-005c-4bd4-9ed6-50d5eecb81bb","sequence":{"long":1039},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9fa33aa-1b00-4296-b74b-65cc5061ee58","sequence":{"long":1040},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913254283039,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":104813},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09ac6c2c-3895-4598-b8a7-61796ebf0d71","sequence":{"long":1041},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"330341fd-e6a9-4fdd-a6ad-1efb0ef8b324","sequence":{"long":1042},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"397","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ce032bb-1c9c-4882-bba4-f76ec9e29fcb","sequence":{"long":1043},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"398","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e9311bb-fe67-42db-a04f-b2cd97d8f0b6","sequence":{"long":1044},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"399","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d6ed435-25a9-4e95-8df9-4247a7197ce5","sequence":{"long":1045},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"400","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"409b7d18-d7b6-4613-b7c5-951921fd40f8","sequence":{"long":1046},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"397","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c9de1b2-2d3c-455d-8ed7-61d3a6f319fb","sequence":{"long":1047},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"398","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfbed1c0-94ee-44bf-913e-b0b00515f4d8","sequence":{"long":1048},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"399","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a29e9a7-9037-40f6-94e1-78419408325e","sequence":{"long":1049},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"400","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fac8939c-e41d-45f0-a069-1e50249c4253","sequence":{"long":1050},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":104813},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e249f0e4-01a0-43d3-91d2-77df01c32c21","sequence":{"long":1052},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bb870f1-c6ec-4bb3-b259-d88c0fe33164","sequence":{"long":1051},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9c6705f-035b-4c74-983d-0b58c9cd3fc8","sequence":{"long":1054},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa672497-2cf1-4bae-96a9-b9266dafb949","sequence":{"long":1053},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1204c987-776b-4304-ad10-9fdf38adf0f8","sequence":{"long":1056},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a50c321-220a-4f6f-a24f-2654611eaccf","sequence":{"long":1055},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4575f87-e76a-41a7-879b-a4cba9b25d26","sequence":{"long":1057},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f569bec-9cf2-4b2d-8c11-d12b18e02db9","sequence":{"long":1058},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4008bb63-523b-430f-83ee-e53dafcdee7b","sequence":{"long":1059},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"272eaead-b249-4704-b72b-d1f9910c5730","sequence":{"long":1060},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3580},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"407ade26-08c1-438b-827d-8faa56cb156d","sequence":{"long":1061},"type":"EVENT_WRITE","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff4fcc6b-bf67-4e30-9812-136c0390e96b","sequence":{"long":1062},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3633},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b0f8e54-ff46-456b-87ac-3a0c05389a81","sequence":{"long":1063},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e49b7ef9-1c5d-4416-8a93-08aa278f298e","sequence":{"long":1064},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3da15c08-5935-49be-813f-2566365f5657","sequence":{"long":1065},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":844},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"739c400b-b935-400f-812b-ef537e251c70","sequence":{"long":1066},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":897},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d56f344c-e554-4547-b50d-300a5d9f091c","sequence":{"long":1067},"type":"EVENT_WRITE","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e17ce4cc-dde2-464f-93b7-d2753c2bad06","sequence":{"long":1068},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9b11496-adc6-4d1a-832b-5c6b308b177a","sequence":{"long":1069},"type":"EVENT_SENDTO","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"401","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6508f3b0-3956-4327-b849-5b31b6adacab","sequence":{"long":1070},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"401","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa862558-e714-4708-b6c4-bd1cd4f744e0","sequence":{"long":1071},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"966a131a-be41-49db-84ee-bfa431ea41d3","sequence":{"long":1072},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae3c3002-13a1-4544-bcba-ba0a33a144c1","sequence":{"long":1073},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9aad01d-ca3e-4101-9fb5-3ea8fc45a94f","sequence":{"long":1074},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4f6d225-21b9-4954-bfd0-178d4a67b217","sequence":{"long":1075},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ce4b56c-3efa-4d32-8eec-763f8112691e","sequence":{"long":1076},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914153936323,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5e635b2-72c4-420a-8910-2c80d7cdf51e","sequence":{"long":1077},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914153936323,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32d30593-f762-4c75-b8a7-0295b86ba882","sequence":{"long":1078},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914153936323,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5adc64a-ea53-4287-a16d-3a2da602417e","sequence":{"long":1079},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914153936323,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ef30bee-f966-42c8-ad76-b46d8e77a06c","sequence":{"long":1080},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914264068977,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":108412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24930e61-925e-4386-9951-85a1f8114642","sequence":{"long":1081},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582915273963131,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":108777},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e2bae88-c217-4259-b0ed-95a8fee25450","sequence":{"long":1082},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":108777},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2e069a8-6c2b-414b-aae7-8742ccc13fa4","sequence":{"long":1084},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0b0b167-2309-441e-8684-1ca6c4e4490d","sequence":{"long":1083},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"411d4284-fa4b-495a-a4f4-32e0e957eed4","sequence":{"long":1086},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e719951f-8c81-46e0-bfa1-63d3e0f40222","sequence":{"long":1085},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45a51e2d-f34d-4c7c-9b32-2c77d3905850","sequence":{"long":1088},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8769be1e-41c2-4ab5-8016-6d305452c364","sequence":{"long":1087},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f149ee27-dfaf-46fb-ba4b-72987196c89c","sequence":{"long":1089},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88ea7c8d-1273-48b3-a01b-01267916cc4c","sequence":{"long":1090},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"124474f9-f3cb-4b45-ba0b-9f19b74d643a","sequence":{"long":1091},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94e2ec9c-196a-42df-8245-6aa6a092a558","sequence":{"long":1092},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3595},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa38f95e-7d2e-4bf1-9829-2c5337b4bdba","sequence":{"long":1093},"type":"EVENT_WRITE","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d71159c8-83f0-4d97-9aa2-4b50f27f82af","sequence":{"long":1094},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3648},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"933e019b-de42-4b06-8696-639fed5ea209","sequence":{"long":1095},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"691ddde7-9588-489b-92be-aa2d315dd929","sequence":{"long":1096},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0519fa4c-0740-4d2e-a649-1d9f2dc216af","sequence":{"long":1097},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a81e0a36-a59e-4359-8866-b12c30c408c5","sequence":{"long":1098},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c7be1d4-60d0-47c4-b1f5-60d0a3ee1fea","sequence":{"long":1099},"type":"EVENT_WRITE","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65b90efd-7110-49f1-94f5-682171633cc7","sequence":{"long":1100},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"194e9628-d578-4f44-b31f-a90c2fd3e3eb","sequence":{"long":1101},"type":"EVENT_SENDTO","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"402","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77c4956d-a0e1-43bd-83b8-9b38515ebb5f","sequence":{"long":1102},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"402","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37414f33-b0c1-455c-92b5-a85477483a59","sequence":{"long":1103},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c9f62cf-b23d-4e56-af42-9e2774dd9b06","sequence":{"long":1104},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b499ac5d-c930-4ccb-a7a8-a182fa0dbaa6","sequence":{"long":1105},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f9723ab-531a-4672-854e-e7efc357d9f9","sequence":{"long":1106},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb2c53b8-f6d5-415f-9131-0084cc74123b","sequence":{"long":1107},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ba00c54-de56-467b-8627-d7fb23c33e61","sequence":{"long":1108},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da391369-2467-4d8f-8e06-72d30072f55c","sequence":{"long":1109},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"df8637e6-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1286,"parentSubject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582916153873169},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5dfd8d4-ae5b-461f-8ad7-53df7293ef23","sequence":{"long":1110},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1286","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1286","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfacd3a5-a4d3-424e-8eea-ffedd75f3d34","sequence":{"long":1111},"type":"EVENT_EXECUTE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./bash_commands.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582916153873169,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ./bash_commands.sh","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f242ce1-089e-4483-b1a7-5f0e1e1d3305","sequence":{"long":1112},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8a0f7c9-7a15-4580-bf84-bbba85a43129","sequence":{"long":1113},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4acb37b4-6b1e-46c3-8a60-7e68d3bb1146","sequence":{"long":1114},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a4a515b-4ff6-47e0-ac51-20922af3f11a","sequence":{"long":1115},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d1f3ce0-6404-4c8f-bbd8-dba6ea262ea8","sequence":{"long":1116},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68206bc7-818d-4023-8157-ded9ff0c7a33","sequence":{"long":1117},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a08139b0-711e-4935-8e6a-f15921a6fe18","sequence":{"long":1118},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e2ef520-843e-4b1e-b989-3ff79cc25c38","sequence":{"long":1119},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bde8c1be-1ba9-4d8d-8a0f-45682b32b3f2","sequence":{"long":1120},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a18599cc-47cb-44c8-a962-ca5a5f77cbc4","sequence":{"long":1121},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf2bb2cb-2822-46d8-a40c-2558c1f528a4","sequence":{"long":1122},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d565cd30-d99b-44f5-bca3-7d662012d59b","sequence":{"long":1123},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7af398b1-eec9-49aa-9d13-3225111db4fc","sequence":{"long":1124},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dda1a17-a2ff-4f76-a5fd-3b09348f2531","sequence":{"long":1125},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d92e5dc-46f4-403b-bd8d-c62159ce0eeb","sequence":{"long":1126},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37105a1f-7aa0-4215-be33-33289595ffa8","sequence":{"long":1127},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3727ec3a-ca71-4c9e-b7f2-c37ead52d854","sequence":{"long":1128},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1fe7d4c-88bc-4d8f-95af-ae02fdff29e9","sequence":{"long":1129},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"830e1c4f-d7e6-4b0f-a43c-14633a076b75","sequence":{"long":1130},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6191ef99-5e0b-4ba4-8695-6e80f3684805","sequence":{"long":1131},"type":"EVENT_EXECUTE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582916153873169,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ./bash_commands.sh","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b62b4bf-d911-41ed-9288-38e4143d5fc9","sequence":{"long":1132},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb51b4b1-fdf9-47b9-a26f-14e4f4ced8a3","sequence":{"long":1133},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a4dbf79-be46-4814-b8e0-ac64717c9f50","sequence":{"long":1134},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fef37c6f-dd21-4886-b369-a7907b752921","sequence":{"long":1135},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"171feed5-34b5-43e9-ad79-d1f5b1d18050","sequence":{"long":1136},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef4e0cba-a2a9-4fe1-b892-d0c13e8fba2f","sequence":{"long":1137},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2db1d538-1703-416d-9fc6-34350d961b08","sequence":{"long":1138},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1b38a87-3b19-4776-a838-59d24f047d1b","sequence":{"long":1139},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc7377ab-51b1-496b-9574-4e1969c2981f","sequence":{"long":1140},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bdfd282-81d7-4322-8498-4cbf1dcf78a7","sequence":{"long":1141},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61a9b49d-bb14-4d21-830b-52b6e2d55c7a","sequence":{"long":1142},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"309b9a69-7619-4fef-aa6b-24823c23cad8","sequence":{"long":1143},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"682e0811-1458-47d1-900d-d60b6ab8ae8e","sequence":{"long":1144},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62254b4b-6065-4680-a1ad-eceb9d99585d","sequence":{"long":1145},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d5659ac-907b-4e9a-b7a6-830cbb17f9d4","sequence":{"long":1146},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd46713b-1840-41f0-9c0d-26632676b6a9","sequence":{"long":1147},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33aece53-1599-4125-a991-b934ebb61efe","sequence":{"long":1148},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e2d5947-b95b-4468-8485-705f88a32f9e","sequence":{"long":1149},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88f3bdfe-76b7-4c6d-820a-7ea70e3d6ca2","sequence":{"long":1150},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"923dc4ac-ccc3-460d-813d-2fd9b41dbafc","sequence":{"long":1151},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"394c7721-49ce-4d0f-80bf-6deaa55a1f3a","sequence":{"long":1152},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cb215ca-bcbf-4884-9aa2-10a4eb9f75d5","sequence":{"long":1153},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e603f786-7a85-4714-bd13-54bf8887f4b1","sequence":{"long":1154},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c44d638f-16f1-4fce-850b-915aaba7b734","sequence":{"long":1155},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59cd4afb-c72f-4f04-bd1f-8c10f02e43eb","sequence":{"long":1156},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92c33b9c-32fb-4aef-a025-0942e6dac1b4","sequence":{"long":1157},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37effb9e-5dfd-477d-93ac-d341fa82e623","sequence":{"long":1158},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d49c325-bddb-41d9-b661-b3e93eed7c5a","sequence":{"long":1159},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"587c76b9-cd67-49d3-8533-54de6d22a37d","sequence":{"long":1160},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"161a869c-6cc0-4678-87bb-9c9eccceed44","sequence":{"long":1161},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6b5b391-cec3-4217-a55b-fa480a63b187","sequence":{"long":1162},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28faf24f-85a9-45ce-a640-e2df6622a61e","sequence":{"long":1163},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a570d9cb-a11d-42c6-9f5d-0e366587fa0d","sequence":{"long":1164},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ec9ecf5-611b-4ecf-8ce5-448a490cea4d","sequence":{"long":1165},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"beea09de-315a-48c2-98ed-84e003512153","sequence":{"long":1166},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ee7286c-c852-4cf8-8c45-276a84b1e86a","sequence":{"long":1167},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25be8d76-792d-418c-817b-1ce0f9157b66","sequence":{"long":1168},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e13f66bf-f34c-4446-95be-839e291da612","sequence":{"long":1169},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a25f9394-1527-4f7b-a4c6-7eaad657aeb0","sequence":{"long":1170},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57c2b8ec-aeb6-4e0d-93ff-b589aab578f9","sequence":{"long":1171},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d60b44c-3eb1-4b90-87c9-58f3c35d2e4f","sequence":{"long":1172},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"576115c1-aa70-4e2a-9ae9-2bb93db78691","sequence":{"long":1173},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83d3ebfc-bdab-4df1-8ada-ef873ce98c28","sequence":{"long":1174},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6f30734-7abf-431e-b18f-37db20b7eaa3","sequence":{"long":1175},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c8499fd-09f2-40e0-be8f-9e8d4f488ac8","sequence":{"long":1176},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916294130790,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":117711},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b77d4c00-d064-471a-aa91-bad38235c8b3","sequence":{"long":1177},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a35b064-b09a-462f-89e7-9c027a1466a4","sequence":{"long":1178},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"403","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a3c74f7-4f0e-4676-9abc-08059e728136","sequence":{"long":1179},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"404","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbce949b-b4ef-4633-b71a-1f74572f8faa","sequence":{"long":1180},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"405","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2db39816-65c4-4f26-a869-3760f578cc84","sequence":{"long":1181},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"406","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42931abd-05cc-40fb-b593-101fb23f0738","sequence":{"long":1182},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"403","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb5038cd-c1a3-470f-b92c-cd2898f95e50","sequence":{"long":1183},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"404","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a23aeba-73af-4e6b-b2e5-165c525d8472","sequence":{"long":1184},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"405","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e57eedee-13d3-4e7f-a5f6-aa8e89461250","sequence":{"long":1185},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"406","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"df874ee9-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1287,"parentSubject":null,"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1e0ceb9-8a45-4ed9-b51b-b07ad0acd5de","sequence":{"long":1186},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"df874ee9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"df874ee9-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9965dc37-0c06-45ba-b3ef-4e20512e3666","sequence":{"long":1187},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e750a28-8ccf-4775-b9b5-cbab435a99f8","sequence":{"long":1188},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48122572-3a6d-4382-bfb8-82a47612c0bf","sequence":{"long":1189},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e8c8858-f960-48b4-96d0-ad1c8b0c8fc4","sequence":{"long":1190},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43ab1b1c-cdc9-4f5f-a658-376a4c4ea5a2","sequence":{"long":1191},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0c3863c-0e4a-4696-9dad-60173a8e55f4","sequence":{"long":1192},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":445},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e01cde9c-4e2d-4b50-8d35-eb940280ed62","sequence":{"long":1193},"type":"EVENT_WRITE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":11},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34097191-a1ec-4010-9ce7-1891d6983246","sequence":{"long":1194},"type":"EVENT_WRITE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":11},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2000306-9fc6-4635-86dd-b12a01b236a1","sequence":{"long":1195},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":241},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e022ec76-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1288,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917183902486},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ab81b5c-4f2f-4b84-bdf9-b8c37e22c623","sequence":{"long":1196},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1288","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1288","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d47cb72a-9134-4dd9-b026-9338954ebed0","sequence":{"long":1197},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"cf557f18-9d85-b95e-859d-95f6feb980dc","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65415a21-fc7c-49d6-8890-767b1401acbc","sequence":{"long":1198},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1810ec7f-e75f-401b-9c3d-9dc83bd5195f","sequence":{"long":1199},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d1524fc4-3a5e-855b-9e3a-5d212b8581ed","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c5c10aa-6ba1-4442-9a42-66998a7283f0","sequence":{"long":1200},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d1524fc4-3a5e-855b-9e3a-5d212b8581ed"},"predicateObjectPath":{"string":"/usr/bin/whoami"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917183902486,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"whoami","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cc45f0c-d074-4b47-b353-4f76319a421c","sequence":{"long":1201},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d8c3ccb-4822-47f6-8913-a801269f1944","sequence":{"long":1202},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00fbc58f-2056-497b-9ee7-12aebcfec357","sequence":{"long":1203},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a5c2688-a9ad-4637-bca3-0fc2b2cfa6dd","sequence":{"long":1204},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97715225-091b-4dcd-be88-0d2564131c64","sequence":{"long":1205},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61606839-4048-480e-9f6e-66934be5e4c9","sequence":{"long":1206},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7f6b584-203d-41b1-bbb6-797aa950aab2","sequence":{"long":1207},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf8f1b9f-8944-4edc-b3dd-e338218aca52","sequence":{"long":1208},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f1e0621-6db9-4bd0-81d9-8647a03a258f","sequence":{"long":1209},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"570e7e13-5f17-4a8f-8551-bc93e1504d20","sequence":{"long":1210},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6a3a5cb-3028-4207-ad0c-51d7ff11467e","sequence":{"long":1211},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b4cd231-665f-483a-b668-37252adad277","sequence":{"long":1212},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e3af3e1-3a5c-4f44-9716-ec7d749f3b82","sequence":{"long":1213},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f2db175-7a8c-4dfc-8d5d-79505af4810d","sequence":{"long":1214},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a1c0085-71ff-472a-8b38-c044220ed951","sequence":{"long":1215},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9f4a217-cce5-4806-b5c0-cea199d2ef67","sequence":{"long":1216},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4259159e-c4c6-42c9-bf59-c2990cb474a0","sequence":{"long":1217},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fae6062-63a8-4689-a34c-c119aa68bf79","sequence":{"long":1218},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8410171c-9252-4ed4-b8ed-ce35a6c29506","sequence":{"long":1219},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdb5435c-c586-4728-b387-dc7e8d8113db","sequence":{"long":1220},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42dcfdb4-b162-4f9c-9a09-0f4980610fd1","sequence":{"long":1221},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0577dff-0726-4d85-8b24-e461ab6899d6","sequence":{"long":1222},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"750cb929-9812-4b20-9aa1-db7254fca04f","sequence":{"long":1223},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f85860f8-01b5-45e7-bc4d-abdc9065bc19","sequence":{"long":1224},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":{"string":"/etc/pwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b4ab3f7-c1a3-4721-aba2-74bab4a9d3ad","sequence":{"long":1225},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1cbbb03-2871-420b-936c-4f8567b35453","sequence":{"long":1226},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0c98dc1-5236-4078-8168-f362a59e72e4","sequence":{"long":1227},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17a0d393-d957-48ae-9ae0-8556e665639c","sequence":{"long":1228},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a4b68d4-a9ca-4a15-a3af-38c6dff6a9d2","sequence":{"long":1229},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85524025-879a-4963-95a5-507bd53be4f8","sequence":{"long":1230},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"292a2e11-30d7-4d56-b951-1679939b5ac5","sequence":{"long":1231},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6aa58adc-589f-4efe-9fe3-aa56b2c91f74","sequence":{"long":1232},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1963f1e-22b9-41bd-adf6-6cc8e4fc4160","sequence":{"long":1233},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffaa7e58-ed2d-42da-94bd-2c8ae07ac577","sequence":{"long":1234},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b12aa7ac-08df-404a-a400-d0d94993977c","sequence":{"long":1235},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d532866a-1f5f-423d-95f3-74167ed9796a","sequence":{"long":1236},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd70e462-eb9e-4730-ab78-27c019c8d50d","sequence":{"long":1237},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":351},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4223ab3e-b8cb-4283-91e0-a1b46f5697e1","sequence":{"long":1238},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":270},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e023b7af-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1289,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917183902486},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dc7b63f-ee2e-4f1e-8c32-08042d9a28d1","sequence":{"long":1239},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1289","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1289","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f94d0239-a783-4963-a1c8-e2b4f2ffd67f","sequence":{"long":1240},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ead5c335-578c-4f98-ad44-8c370a589343","sequence":{"long":1241},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97461a34-b661-4ce5-aa6d-33f0bda5d9e9","sequence":{"long":1242},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ab57cf3a-f09d-cd5e-9df0-38f66ecdfb24","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e991eb3-b3b0-4c53-aab7-997c50b2f539","sequence":{"long":1243},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ab57cf3a-f09d-cd5e-9df0-38f66ecdfb24"},"predicateObjectPath":{"string":"/usr/bin/netstat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917183902486,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"netstat -n -l","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e8c3c0a-c164-41da-98d2-b0c5727b7cc4","sequence":{"long":1244},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0443aeea-7d4d-482b-b0c0-145692cee722","sequence":{"long":1245},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f52abf7c-7654-43ce-bdbf-e578bc2f0a56","sequence":{"long":1246},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37eee69c-0876-48d0-8135-b06596182920","sequence":{"long":1247},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53c772d1-0c45-4a3d-98fe-1a8301a276e1","sequence":{"long":1248},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc25923e-272b-4ec3-b8d7-b7561f4679fe","sequence":{"long":1249},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c47fa9f0-7c53-4133-8964-11416319fefa","sequence":{"long":1250},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"fee1ef9b-e913-9457-93e9-db4a97946773","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9f10564-a80b-43ab-bb80-cada4d6d01bf","sequence":{"long":1251},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":{"string":"/lib/libkvm.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11ffbd0c-fff9-46cd-bca8-b72268aad63e","sequence":{"long":1252},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e940d2b4-3a9c-4aa9-a2db-6d2e3152df75","sequence":{"long":1253},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ef12980-1ef4-4cda-a3ab-fd5592feba7e","sequence":{"long":1254},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2555904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44ed3d88-9b81-4513-abd4-80db5003c361","sequence":{"long":1255},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2555904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7308a8e-7c52-44ab-b39e-80ddd3d615b2","sequence":{"long":1256},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2580480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ca46447-6063-4316-960e-7431af6cb960","sequence":{"long":1257},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2580480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2b5b8e6-70ab-40ac-a9a7-8475e31bdb24","sequence":{"long":1258},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8eefc44-9ed5-4fa4-8caf-e265e1ffc272","sequence":{"long":1259},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d985b0a-e2e6-4cf8-b7c5-08dd14ada536","sequence":{"long":1260},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"413839d8-0eae-4157-8aa3-6deb6d2c6f93","sequence":{"long":1261},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":{"string":"/usr/lib/libmemstat.so.3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb38317d-5b14-4e45-bccb-7dd085a1195f","sequence":{"long":1262},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06a82cca-1ffa-4a7c-b0bb-07be23280ee4","sequence":{"long":1263},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97c2d4c1-1b15-4cde-aa67-a69035cfc20e","sequence":{"long":1264},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90fc3d34-aa89-4cd7-b835-fe32eb47a175","sequence":{"long":1265},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"415a7174-5597-4af3-a2d5-ef88dc3c978e","sequence":{"long":1266},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2641920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04a2290b-df35-4793-88fb-698de3abdf00","sequence":{"long":1267},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2641920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd7b3411-3a5f-4b30-8ad1-009d03f3ca38","sequence":{"long":1268},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65a1b2a1-a9fc-4383-87b8-192f99249a6b","sequence":{"long":1269},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba824dab-4bd8-4e8e-b306-9696f76ff06f","sequence":{"long":1270},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91d1ba4d-0500-42c6-96b8-57259358e670","sequence":{"long":1271},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":{"string":"/lib/libxo.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b57cef41-2f3c-4dea-8491-81ce172be1c4","sequence":{"long":1272},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f91ec40e-242c-46d8-9dd3-d85e22ba2f2e","sequence":{"long":1273},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e735e9f-2aa3-44b1-9445-ee3030ec2591","sequence":{"long":1274},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"003f7c77-fd07-451a-ab30-7501f5a4cf8e","sequence":{"long":1275},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51eb2309-4ddf-4a7f-8fee-4623d86b0b54","sequence":{"long":1276},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0d4aabe-a753-4860-9ecc-0ac8ec25eaad","sequence":{"long":1277},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2849883-02b8-4afe-b2aa-518b908d7bdc","sequence":{"long":1278},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2777088},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31d10117-6f73-4bee-a925-d044a5d12bc4","sequence":{"long":1279},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2777088},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a49681f4-a76f-41aa-8acc-3d3ecb7eafdb","sequence":{"long":1280},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e1868d9-8852-45c2-860d-7b80893c778c","sequence":{"long":1281},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecac8a8f-f97e-4549-8414-46884b939f4f","sequence":{"long":1282},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfa9ba42-ae76-4d09-a442-5e83cd83086d","sequence":{"long":1283},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1f407a1-d6b4-4586-8114-47be1ec85162","sequence":{"long":1284},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fc592b3-a6b3-4344-9c39-32acfba9f0aa","sequence":{"long":1285},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4b00115-f922-4f34-ad92-5c45987720d9","sequence":{"long":1286},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2822144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc2bfacd-4c8f-4760-93b4-9bee64cc75c0","sequence":{"long":1287},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2822144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39de667e-d4d8-461f-a148-668892f9e8ff","sequence":{"long":1288},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aaf7905a-aed4-40b3-a1f3-07bacc5b66f5","sequence":{"long":1289},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7623b44c-4552-4e17-ae09-4e16f7ca84ba","sequence":{"long":1290},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"603b87e0-3252-8c5e-9232-acf89e8c9393","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8456085f-0590-419a-9330-4abec23e7128","sequence":{"long":1291},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":{"string":"/usr/lib/libnetgraph.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c26437c-2a11-48f8-aa99-50849abdb4b5","sequence":{"long":1292},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b190b0ed-5102-483e-9b0f-cde020c87a46","sequence":{"long":1293},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26049cf7-ab7d-4a37-8b4e-f840f22fbd16","sequence":{"long":1294},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2883584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fca4ea1-d4d1-498d-bcf3-7ba2622b150a","sequence":{"long":1295},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2883584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef7ff4ad-7fb3-4cfe-828c-690354d6d6b0","sequence":{"long":1296},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2891776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cca509e-ad95-4cb1-ae67-7ddeb7a1ae72","sequence":{"long":1297},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2891776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c97c2886-dfec-42b0-b44a-c057798f3e3d","sequence":{"long":1298},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2899968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"720e06bb-25db-4471-9525-4bdc154875dc","sequence":{"long":1299},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2899968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03bf9252-530b-4cc8-a4be-ea51148e7d40","sequence":{"long":1300},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6af46a55-5461-4ad4-b863-5b7ac4f0d729","sequence":{"long":1301},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b1dbcae-a8c8-49e1-9c97-b1493f8d3ad8","sequence":{"long":1302},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b3aaa59-07c0-433f-9527-5a4fbd69526a","sequence":{"long":1303},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56eb8a26-1336-4f23-93e9-eab40da32f42","sequence":{"long":1304},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c03f9c6-12e6-4c33-88fb-91135ff70f54","sequence":{"long":1305},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47d33118-9df3-4a68-a2b8-571f0c134093","sequence":{"long":1306},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed27c3bf-96e9-4297-9173-c7a731646473","sequence":{"long":1307},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d1fe638-6f5e-4ea0-ba09-d547f830834b","sequence":{"long":1308},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a931b58b-6950-42bf-9a73-32c92a43bf1f","sequence":{"long":1309},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f161714-819e-4967-94cb-dfc3f392ad51","sequence":{"long":1310},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"7f31dff6-afc8-9257-88af-4252e792cde7","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42dac152-c569-4c01-b8d5-41fa6d9bef0f","sequence":{"long":1311},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":{"string":"/lib/libelf.so.2"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"233edf6a-239b-45f0-ac98-9b5148225de0","sequence":{"long":1312},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc1a62f9-0e11-4790-98cb-041320c3fe9d","sequence":{"long":1313},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fd974b3-1759-4635-97f9-7dae78bab01b","sequence":{"long":1314},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7077888},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46dd74e4-dce4-499d-bf1b-9d77ebff5903","sequence":{"long":1315},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7077888},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bbb505b-2343-4e4a-b030-5799b581a91c","sequence":{"long":1316},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7106560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c978922a-b68c-4fdb-a147-63f25abca01f","sequence":{"long":1317},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7106560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b35b450-275a-4eac-8ec1-37df72cedc61","sequence":{"long":1318},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7176192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14dc2232-fa66-4c8a-95fd-60103f8b2211","sequence":{"long":1319},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7176192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dcbab17-160f-4663-bc2f-0c9f5a459377","sequence":{"long":1320},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ab89bd9-80cd-45f5-9195-c90403478fc4","sequence":{"long":1321},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44d12830-9897-4204-aaf5-6369f4314794","sequence":{"long":1322},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61447261-40b2-4c5b-a008-1783bbe82d87","sequence":{"long":1323},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76b911f2-f62f-4083-9287-1f6213128057","sequence":{"long":1324},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"559db4f6-f286-4bde-9cde-5e743b7d7d1d","sequence":{"long":1325},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6b33f38-28a2-439d-a793-a21993d2c554","sequence":{"long":1326},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"681b99f0-42b1-497a-b08c-557af27bb283","sequence":{"long":1327},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a83b2a71-13d8-45b5-b139-dfb5894c4802","sequence":{"long":1328},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b955f046-41aa-4d05-ba03-ea6236196b24","sequence":{"long":1329},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3089},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa6ba645-c746-4084-9faa-b1535459775c","sequence":{"long":1330},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c709f821-0d63-4d4a-a0ae-dc9e1733b383","sequence":{"long":1331},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":322},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07604870-c47d-495d-8fa3-3ace4051b275","sequence":{"long":1332},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":303},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e024fd03-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1290,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917194287948},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"533bb205-6534-476b-bb3e-e9af98d2e582","sequence":{"long":1333},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1290","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1290","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"777a3975-7b26-4f5d-bff0-f76ce5bfdd34","sequence":{"long":1334},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d86ac71c-d1c7-453d-904f-48d8d1d0efdf","sequence":{"long":1335},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0d87a8b-c379-42c7-925b-f36d2424ae76","sequence":{"long":1336},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"de3a34c1-0b17-8152-970b-4c2cb281885f","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce45e069-4d70-4797-916d-dc5670c616b4","sequence":{"long":1337},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de3a34c1-0b17-8152-970b-4c2cb281885f"},"predicateObjectPath":{"string":"/bin/cat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917194287948,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"cat /proc/cpuinfo","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e6bf288-b4d6-4c13-a596-28c8c1557f36","sequence":{"long":1338},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"440375a7-2710-464e-8246-00ed11d37c49","sequence":{"long":1339},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e89f9fe-220b-42d2-a809-b0dea13bb6a9","sequence":{"long":1340},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13ee82d8-0ecc-4ea5-b9e9-e308aa8c3895","sequence":{"long":1341},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11170ad3-6f1c-41b6-9a59-a4eef4f4f659","sequence":{"long":1342},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07be6229-2401-4298-83a6-764672373568","sequence":{"long":1343},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f9b361e-2eff-4f3b-b7e8-2a611df95a36","sequence":{"long":1344},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7dd2529-7433-4712-95cc-e75875b97353","sequence":{"long":1345},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4609be0e-cf46-479a-86d0-2826706b6e8c","sequence":{"long":1346},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c1d0065-e7c4-4229-a952-d7b5dc94cf54","sequence":{"long":1347},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fadc0b8-261d-42ae-9f4f-853ece5f5960","sequence":{"long":1348},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dff12043-8caf-4717-8263-99e9e865fc0c","sequence":{"long":1349},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfc2d923-6ca1-4a64-b065-f2f7a0daa86b","sequence":{"long":1350},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f902a20-f054-4b08-93d9-541be7ade985","sequence":{"long":1351},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ba650d2-07d4-44d7-a272-542b093857ea","sequence":{"long":1352},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c620e01-b4f3-440a-b027-b57dd0d9184a","sequence":{"long":1353},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ae14b7f-25cf-4b77-939d-fe0d774b2b20","sequence":{"long":1354},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8926fc8-ce5f-46fe-a4e7-f650fad3c304","sequence":{"long":1355},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f85065c8-38bd-4446-99f1-f05be343e720","sequence":{"long":1356},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5f46cd2-81e2-4a22-afbd-e5186cde3148","sequence":{"long":1357},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"127b91c0-6b7d-406d-b521-72c859d8bae1","sequence":{"long":1358},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a385b75-8672-4bb8-891b-b3d9807f456f","sequence":{"long":1359},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d42f0622-54bc-4483-9a63-6b0ad7c71a4d","sequence":{"long":1360},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64c4280a-8041-4a7b-9179-0952e65ccf61","sequence":{"long":1361},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1ee317e-5808-4bf7-b2dd-9e6f88a09443","sequence":{"long":1362},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0bee515-d279-480b-900c-e01fc682a72a","sequence":{"long":1363},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":289},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8bf7ce3-d81f-4fe3-b41a-28152bbfc2ac","sequence":{"long":1364},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":336},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e02564b5-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1291,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917194287948},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7aad526-6f92-4e21-9baf-9b58947bff44","sequence":{"long":1365},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1291","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1291","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d170f4e-45b3-4058-86bf-bad4757af9bb","sequence":{"long":1366},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7ebb6b3-1681-4bda-a082-62f92668a30a","sequence":{"long":1367},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa30d0b0-ae06-439c-8985-419190f9bc69","sequence":{"long":1368},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a54334d-974b-425b-a89d-4da176ea9887","sequence":{"long":1369},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de3a34c1-0b17-8152-970b-4c2cb281885f"},"predicateObjectPath":{"string":"/bin/cat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917194287948,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"cat /etc/networks","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43f007e1-3bde-49d4-8840-02bd37d11d05","sequence":{"long":1370},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb789840-6869-4e07-8bd4-96f1c925bada","sequence":{"long":1371},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a39991ca-fff5-415b-990a-18ad14791e5a","sequence":{"long":1372},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cffc280c-0686-46a2-b574-c5d43a2e9bd1","sequence":{"long":1373},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10c46887-0d65-45f4-801b-b30ed4447d58","sequence":{"long":1374},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17630090-0741-46a7-9edb-49ae8a23d5b5","sequence":{"long":1375},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d7fb134-92dc-4208-a2bc-e72da33773ab","sequence":{"long":1376},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"866ec379-f3e4-4549-84c8-30f588d8fd44","sequence":{"long":1377},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0cd821b-dbd8-42e4-9073-df4438893a3b","sequence":{"long":1378},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae0c08b8-87db-4582-b1b9-7e91651025b2","sequence":{"long":1379},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14cc623b-08bb-4b0b-a0f0-476aabac6487","sequence":{"long":1380},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99c744a9-ceba-4003-929a-1eab57e74d63","sequence":{"long":1381},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ee9c0d0-7ec1-4c42-8e11-02203f87f7f2","sequence":{"long":1382},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f04f1371-49a8-4bf7-afea-8e9fe3ac608c","sequence":{"long":1383},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f509cf91-5cc8-4c1b-9ffa-120e0e1320cf","sequence":{"long":1384},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83729b2c-bd86-43ac-a0f6-ae49bb6ff099","sequence":{"long":1385},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2042e375-5727-4282-b6f1-f7b524ac2f27","sequence":{"long":1386},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3583a7d-9252-45b2-85e9-34916009576e","sequence":{"long":1387},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8172c01-c39d-4e26-a786-d433a6e2cb7b","sequence":{"long":1388},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c21b29ec-2630-1554-b026-2ba75415bafa","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dc22dc2-c716-4ca1-9d32-b63c3ee80178","sequence":{"long":1389},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":{"string":"/etc/networks"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab1b82af-e527-489f-b16b-541b34cd7c39","sequence":{"long":1390},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":310},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65a5c157-590d-4b8d-96ae-a11fc0e34055","sequence":{"long":1391},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":310},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8af2eac9-c260-4923-a8c3-4e37457a3fd1","sequence":{"long":1392},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bc2968f-22e4-4e17-878e-557cb321782a","sequence":{"long":1393},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bef8ea9d-cc68-43d9-8af3-7fcd87517e2f","sequence":{"long":1394},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35580c97-1112-4ad8-b596-61220072f33a","sequence":{"long":1395},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90b254dd-82e5-4713-9916-bf4d260688a6","sequence":{"long":1396},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":256},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"015a07d2-9b1a-4297-a16d-d0db5a8dc4b5","sequence":{"long":1397},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e025c619-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1292,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917194287948},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a23e8202-0049-4ab9-99a3-0f228e124db4","sequence":{"long":1398},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1292","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1292","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77c7cf99-ac81-4fbc-808c-6238130f6675","sequence":{"long":1399},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04801cd2-3549-4515-b03a-12a961ec6f25","sequence":{"long":1400},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36c135c9-d978-44e0-b4bb-3bd53e9e46b8","sequence":{"long":1401},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"542d495d-cfb1-a954-b1cf-f79fd4a9303e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16a897ae-77ab-4b3a-846e-71e0a458af8c","sequence":{"long":1402},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"542d495d-cfb1-a954-b1cf-f79fd4a9303e"},"predicateObjectPath":{"string":"/bin/ps"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917203895228,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"ps auxx","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8d89186-92a8-4e11-9416-a06186f70b4c","sequence":{"long":1403},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a841683c-d358-437e-8a34-ea5b97cc51f5","sequence":{"long":1404},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55dd0930-58a5-4533-9f4a-2f1e88dc5449","sequence":{"long":1405},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c42c173-b024-491d-ac3f-d5d3ee47c022","sequence":{"long":1406},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75f44657-5ad2-4222-aabd-502eccc03fa7","sequence":{"long":1407},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5b22fb6-a60e-4fdd-9c60-f13969dcc5fd","sequence":{"long":1408},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f20bbfc-1f67-4ebd-b97b-6be39b1a3303","sequence":{"long":1409},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4c04d3c5-3aee-7458-ae3a-ee0258746598","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99a22834-2647-41f4-872a-fab410e3f7f8","sequence":{"long":1410},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":{"string":"/lib/libm.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e6954c6-cb8f-4134-b010-532d74fc113b","sequence":{"long":1411},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02ef6a11-961d-44b1-84bc-4fa32804ac62","sequence":{"long":1412},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f015149-7b29-4881-8c33-5a0df544f099","sequence":{"long":1413},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd217f89-3b1d-409a-8b6f-bf26d7575f59","sequence":{"long":1414},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a46c4f1-cbf2-4c5f-b5b2-8aa1d40e6585","sequence":{"long":1415},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14e533ea-a66e-4b9f-890a-985c91b67895","sequence":{"long":1416},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"750b2e2d-5ca4-42ba-afb0-fda092615cc3","sequence":{"long":1417},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a43a8482-f4b1-4f4c-aa2b-cd584a79ae60","sequence":{"long":1418},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8567d5ab-a3e8-4fc5-961f-1ba91a77cb54","sequence":{"long":1419},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5b8738d-547c-4739-9d56-42a820defcfe","sequence":{"long":1420},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":{"string":"/lib/libkvm.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3ac75ca-e880-4f69-8bb9-7ba42d6cdea2","sequence":{"long":1421},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50b1246f-09e8-4bf9-ad2e-aa589fb7518e","sequence":{"long":1422},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"896e6c71-678f-4a68-80ba-fc54c2bdc7cb","sequence":{"long":1423},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11fd5d4d-d257-402c-954c-cd50f9251262","sequence":{"long":1424},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dee5a974-3bbf-4bf4-8d6d-ff841576998e","sequence":{"long":1425},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bfc17ec-012f-4a35-a02e-55f8af25b851","sequence":{"long":1426},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ab26af6-3614-4f8d-b257-89933aa27471","sequence":{"long":1427},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2699264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1110dcda-37e8-452f-a04e-72e65778091e","sequence":{"long":1428},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2699264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"354adbd6-1c40-4f2c-9f38-5b898ef8303a","sequence":{"long":1429},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a70d236-ecb7-46a4-b8c5-7759f766506d","sequence":{"long":1430},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":{"string":"/lib/libjail.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8c7bdd9-47c5-4303-a79d-1800173a90af","sequence":{"long":1431},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f93ec82-8c95-43ad-8257-d0ed6df5a43d","sequence":{"long":1432},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ae8858a-aedb-4714-a93c-f445bce2ef6a","sequence":{"long":1433},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e8326fb-2062-4807-8d99-822e5e2fa64b","sequence":{"long":1434},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1d91704-8781-4d5b-b232-e7cc7b5a9ebd","sequence":{"long":1435},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4abe6025-e8eb-4e90-a30c-076bfb0c2a66","sequence":{"long":1436},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1eb07fd-e176-42e2-9461-b81ad09b3843","sequence":{"long":1437},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2736128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d31d603c-df17-46a8-930e-a5aee1e10483","sequence":{"long":1438},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2736128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"779f28f5-12d2-42db-97a7-1a34bb5ae649","sequence":{"long":1439},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d290278d-f946-4942-a89b-5708e024c28b","sequence":{"long":1440},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":{"string":"/lib/libxo.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27e36a26-1f62-4df5-aa0b-42906a17a2eb","sequence":{"long":1441},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d893fd2-37f5-4b8a-a5a3-1d5917e0ef3b","sequence":{"long":1442},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dfd6d67-ce3b-45e5-8e90-45bd481c79e1","sequence":{"long":1443},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2748416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acb4be3d-325b-4867-a173-a2d6cbadc497","sequence":{"long":1444},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2748416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e770e3f-a686-4fbc-a4d7-6cb889e4f651","sequence":{"long":1445},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2781184},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0148fdcd-e13a-408d-9be4-05d905b777b7","sequence":{"long":1446},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2781184},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e74d7f61-5dd0-4485-acfc-30f44614c384","sequence":{"long":1447},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e80b483f-8c31-4670-8d07-0d4d93385bd5","sequence":{"long":1448},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"977e52ea-3201-4420-ae92-1f33ae0f7382","sequence":{"long":1449},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c78c719-4022-45c2-8908-8ff9c6008027","sequence":{"long":1450},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ab38f5d-b856-4634-8e56-813d510e7cb7","sequence":{"long":1451},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d01ebb7-6d83-4a3b-935d-47154b3859ea","sequence":{"long":1452},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"081472e0-9fa2-4c9d-85bc-d1c79c9445a0","sequence":{"long":1453},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2879488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5715f77-9232-45ee-8b49-75305002ff63","sequence":{"long":1454},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2879488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8cb9e04-52f4-4905-b340-06ae201c3b71","sequence":{"long":1455},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46271cbc-63e5-4b30-a7a0-41ca42252bf5","sequence":{"long":1456},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfbb09dc-64d9-4201-b037-59a4d107f733","sequence":{"long":1457},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4726784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edd2fdb5-d900-4101-b26e-ea10705e05e3","sequence":{"long":1458},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4726784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8d5781a-b8e6-430e-be71-7c061333dcd5","sequence":{"long":1459},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97be7d26-4378-448d-9c47-1451dd90441f","sequence":{"long":1460},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":{"string":"/lib/libelf.so.2"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cbc7634-d300-442d-987a-9236b3bd4c6d","sequence":{"long":1461},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35baa6a9-0121-47e4-8029-19e081be3550","sequence":{"long":1462},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a98b5bf5-aada-42ff-846e-09d0cb24db2b","sequence":{"long":1463},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7045120},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5701d2a-b733-41e3-b1d1-cd88d6bb8561","sequence":{"long":1464},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7045120},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fa9c4c3-524c-4069-aea0-678c3581cec8","sequence":{"long":1465},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7073792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa7bb963-1e17-45b8-9e66-73277b427fb4","sequence":{"long":1466},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7073792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a3c5d12-c569-434d-81bc-84eadf8bba7a","sequence":{"long":1467},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7143424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e2fe6ff-ec6d-4cfb-95af-7aaca1dcc32a","sequence":{"long":1468},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7143424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d05c58d1-13e4-4c54-86a4-81d04549adb1","sequence":{"long":1469},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"035bf4e6-23fc-41ea-b518-f94f4833615f","sequence":{"long":1470},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"512e9f35-0e3e-4a01-bb68-c36b1362fa19","sequence":{"long":1471},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"495a9f4d-42d3-4997-a7d4-8801222d8703","sequence":{"long":1472},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6d92c84-4164-4996-95ff-a026531187b9","sequence":{"long":1473},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51894994-395b-426e-81af-3813d0b93481","sequence":{"long":1474},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19ffa3b0-23da-4255-9117-e19040405559","sequence":{"long":1475},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7184384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ece3513-de6b-4ffc-8bc6-23bf6ea3e94e","sequence":{"long":1476},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7184384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb5e9a07-3d2f-4e88-b924-1f6d549d15eb","sequence":{"long":1477},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7229440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"738e6c0f-9127-4de4-95ec-5ab7156366a3","sequence":{"long":1478},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7229440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9f70880-c19a-4533-a18e-25b5855653f6","sequence":{"long":1479},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f3fe260-db50-469f-a08f-4994fd9e2ec0","sequence":{"long":1480},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe06ffee-a591-43e9-a502-3a99c2d5d5fa","sequence":{"long":1481},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5102f315-e446-49a8-8abe-318c376b8682","sequence":{"long":1482},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15b76964-b412-48d2-81a4-ef1987adc0d0","sequence":{"long":1483},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7b36395-633a-4038-938e-b7abe693b815","sequence":{"long":1484},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3b7fcdc-6613-4a39-9b61-26ab0db687c8","sequence":{"long":1485},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dec88eb-4f41-4e4e-b858-3dff5961525e","sequence":{"long":1486},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0e9fbab-ad45-44b8-88af-30839b1460f5","sequence":{"long":1487},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e92b2a82-d05a-4b1c-82fe-ec8553ea7721","sequence":{"long":1488},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7a4c5d7-0c2a-4f35-b3e8-a46320bd056f","sequence":{"long":1489},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"4","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75ce0409-e202-4cf7-9c48-375ebce7a66a","sequence":{"long":1490},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7468677-afc0-453e-a4d4-f06cb73d82b9","sequence":{"long":1491},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25057ac0-56a3-4dda-ad19-30d7201695d9","sequence":{"long":1492},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf6d565b-8f81-4042-83e8-e53a3282fade","sequence":{"long":1493},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6794bdd5-2396-408a-a101-b7cec41f4776","sequence":{"long":1494},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":{"string":"/etc/pwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e7f209e-a71c-4405-b548-b6e684df2e28","sequence":{"long":1495},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8a8ecd4-78c5-4902-91d9-7dcbc5715367","sequence":{"long":1496},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33aa96ca-8a09-4578-a28a-0546d5f38388","sequence":{"long":1497},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"01aaae62-8a03-3b5f-838a-d6569f3b2a48","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff73c4d0-f82a-4910-a166-f909f1bda9d5","sequence":{"long":1498},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/UTC"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9b9183b-299c-47e3-a407-5eabb6ae67b3","sequence":{"long":1499},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":118},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78498a79-2939-4a25-85ac-4f0dd9c8826c","sequence":{"long":1500},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"52914756-cb96-445b-96cb-2e502b44f61b","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"463b0411-b07d-460b-9cc7-a4685ed23118","sequence":{"long":1501},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/posixrules"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"6100"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66d0359b-d31f-4f82-9908-a9bc27a6e29f","sequence":{"long":1502},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":3519},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5705c64-0a04-40b1-8577-d5749e69353d","sequence":{"long":1503},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac263954-de4a-409d-8b23-49d027f11509","sequence":{"long":1504},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b5c16cf-1ffe-441d-b83f-bc9c2c13b508","sequence":{"long":1505},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fb69e4a-7a12-4fdd-8325-08f761e07c9d","sequence":{"long":1506},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d47bb91-afab-43e1-ac8f-36a918823d22","sequence":{"long":1507},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c8f0822-7c28-4111-bccf-be5cf9a09ea6","sequence":{"long":1508},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20d54bdd-8aa5-4788-9249-e67f5067e8b0","sequence":{"long":1509},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d296e7c-d0d2-4f44-94b8-8a17fa215730","sequence":{"long":1510},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4380},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52355fef-cfcc-4a66-b340-22275c3259c0","sequence":{"long":1511},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d72ff836-a6d0-4af5-9bbc-aee4c1193fd6","sequence":{"long":1512},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":233},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e026d50e-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e026d50d-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"1974e148-493a-5dde-b1ff-0c3352cfe2f9","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"e026d50d-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"e026d50e-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6982d992-b1e4-4059-a19a-e6e3e2b464a6","sequence":{"long":1513},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1974e148-493a-5dde-b1ff-0c3352cfe2f9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"156adc30-44fc-4cb0-995f-d92e7ff0578b","sequence":{"long":1514},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":423},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e026da24-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1293,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917203895228},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcf4248a-ce71-4e49-a4a2-40a69e6876c3","sequence":{"long":1515},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026da24-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1293","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1293","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e026e0b0-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1294,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917203895228},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cf1049b-3fab-4d25-b2ca-e07285dfaaea","sequence":{"long":1516},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1294","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1294","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81170d9f-b5d0-4077-8fd7-b0479904e8bd","sequence":{"long":1517},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e026da24-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb916ea8-fab2-44a4-a7ee-5b82005d5c4b","sequence":{"long":1518},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78350e26-9425-4179-aee4-906e11110cab","sequence":{"long":1519},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e026da24-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026d50e-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae86a2c9-4e3c-4b5b-a7e6-2019ada65985","sequence":{"long":1520},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e026da24-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026da24-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"3f4e2dec-9008-5a56-8890-4814765aa0ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ef9b988-aa7c-4506-84ff-57cc1a7205ec","sequence":{"long":1521},"type":"EVENT_EXECUTE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3f4e2dec-9008-5a56-8890-4814765aa0ba"},"predicateObjectPath":{"string":"/usr/local/bin/sudo"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917203895228,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sudo -S ls","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e2d4eca-a9a3-4a5a-bb16-2ba3037f0d8b","sequence":{"long":1522},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7360fbc0-49de-4f85-9bbb-724a71cd680c","sequence":{"long":1523},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d36847d3-b062-4da8-b756-bd1fe1806329","sequence":{"long":1524},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e21616bc-46f2-45de-9df1-28742e7231cf","sequence":{"long":1525},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10c529be-cb85-4b35-bde8-3ac6c2edd088","sequence":{"long":1526},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da2a5f1e-7f25-40aa-87dc-1d33438920e3","sequence":{"long":1527},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a77a4d57-cf80-4bc0-a56f-7dd1682b0a56","sequence":{"long":1528},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cbda11d-1e2e-464e-adb6-4f7c6e236bf5","sequence":{"long":1529},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9588820-5ecd-4f91-a943-4a09eb5969fc","sequence":{"long":1530},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9b602d4-0286-4257-b7a9-641d7307fb48","sequence":{"long":1531},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"317dd009-7952-4c58-9f27-4fe98373c6f0","sequence":{"long":1532},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2510848},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4cb5e75-b904-4ce8-8e8f-992bdcdd2095","sequence":{"long":1533},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2510848},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14ff4aa3-f299-4578-b274-35f6de5b7c04","sequence":{"long":1534},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15945886-eedd-4295-8e9c-bca4a3ccfe39","sequence":{"long":1535},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6f88908-7e67-4752-b03d-75e5c9a310d7","sequence":{"long":1536},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2588672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4e1bf8f-68e8-4515-acad-e9a662524c39","sequence":{"long":1537},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2588672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be9eb8ff-f19b-4c93-a8bd-e5dd8647c801","sequence":{"long":1538},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6318c23c-4c7f-9552-bf4c-2f482295e518","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"292cea4d-4d57-420b-870a-c62f875f71e4","sequence":{"long":1539},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":{"string":"/usr/local/libexec/sudo/libsudo_util.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a15b2c62-44a2-44e7-8c80-0988f42fd0d9","sequence":{"long":1540},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8eca93c3-ca1c-4d4f-a332-4b7eb4253b43","sequence":{"long":1541},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0173a52-5a3b-4b02-bda6-26ad9ad029f0","sequence":{"long":1542},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eaf0d60d-6451-4137-804c-b0b5fb9265a5","sequence":{"long":1543},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d7134ac-ea98-4639-87dc-a9fd5b64c881","sequence":{"long":1544},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2637824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72006739-96c5-41bb-8970-4954c4b32fd0","sequence":{"long":1545},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2637824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c96312fd-8332-434a-ab6f-89ce8086783f","sequence":{"long":1546},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"209b6bf2-8ba1-4a25-b0f2-e098a2d7accd","sequence":{"long":1547},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d45803b5-0c14-4b5e-bb32-144c6670bcdd","sequence":{"long":1548},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58d90c8b-4d7f-402b-a990-8bfbd0eda310","sequence":{"long":1549},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"744a4b5f-3b05-4da9-a74b-dba5bb9f05db","sequence":{"long":1550},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"389c2270-cf8b-494e-8156-e14ba43ee9c9","sequence":{"long":1551},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec44b09d-6abc-4b42-91a4-cc83e20c29d7","sequence":{"long":1552},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2703360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56678b20-15d5-44a5-b89e-b4d94013bbf6","sequence":{"long":1553},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2703360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fe14118-1a5a-4e2a-91ba-84fb05c9be18","sequence":{"long":1554},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0d40bfd-8741-4682-859d-7d4c6219fa9e","sequence":{"long":1555},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97443cad-82f0-4ace-b860-0b014f36412d","sequence":{"long":1556},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2744320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75f17954-3c14-48ac-9504-0ab10630758f","sequence":{"long":1557},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2744320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f09d72d9-5b0b-4625-bfc7-ce8b7130b347","sequence":{"long":1558},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5601e79-1b02-4f35-a267-d798cd785313","sequence":{"long":1559},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21789c8a-eb00-412f-a3ac-618f88f06aa2","sequence":{"long":1560},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f797435b-0ac1-4213-b5af-6402ed00c28d","sequence":{"long":1561},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"733e2893-81e8-467e-95d5-e370155479c8","sequence":{"long":1562},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2756608},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a398bc00-4005-44a4-bc2e-cfb634e0927c","sequence":{"long":1563},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2756608},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c9848b5-4293-4e15-926c-0859858400f5","sequence":{"long":1564},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3272704},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a74e3a48-e4bc-491e-a3b7-b180de62e760","sequence":{"long":1565},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3272704},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb2b2b69-f7bc-48c3-bd24-8284a22dc6ab","sequence":{"long":1566},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4603904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc93b5cc-96e7-44be-999b-4e2f1e03cea0","sequence":{"long":1567},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4603904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7eba405-34f5-487a-8929-6b38b3547f41","sequence":{"long":1568},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60afe2b8-669c-4a25-b813-1822c423db9c","sequence":{"long":1569},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"560d59d6-8cea-41c0-823b-e124d3ebed29","sequence":{"long":1570},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c63131d-d832-4a6a-9964-032a0b301385","sequence":{"long":1571},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"681bd87b-6dba-45b6-9612-81079db8f5cd","sequence":{"long":1572},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a511500a-657d-4ff3-a3fe-0d859a172e77","sequence":{"long":1573},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f52411c-07db-41ab-aa68-49026312deb0","sequence":{"long":1574},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0884e9c9-77cd-444e-bf50-753acdff512a","sequence":{"long":1575},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cb19c09-bad8-4656-88e6-4c4c95e2ef63","sequence":{"long":1576},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a5d71fa-ffd4-4a7d-8e66-9a1711671484","sequence":{"long":1577},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/UTC"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e00c7ad3-02e8-475c-b8bb-491b5c5e1f49","sequence":{"long":1578},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":118},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c05d0d5-0b36-4fe6-b13e-bb34858dddf3","sequence":{"long":1579},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c69de48-53cf-4c41-8e70-7837038d9227","sequence":{"long":1580},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/posixrules"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"6100"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cda52679-c00c-422e-a9c5-cf6ad7c54f1e","sequence":{"long":1581},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":3519},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5c57709-61dd-40a2-ab5a-d37dc96dbff0","sequence":{"long":1582},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"846a9fc7-40fe-4f43-8a05-63e4b57b707a","sequence":{"long":1583},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1cfd42e-5596-4eb6-b905-e135abe7639f","sequence":{"long":1584},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1ac2bac-f37f-4e6e-844c-e8422d0d71ef","sequence":{"long":1585},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43c853dc-5fec-4797-96eb-e8147f152163","sequence":{"long":1586},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d064584-23ab-4550-bb37-228737b5d3b5","sequence":{"long":1587},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"563e65a8-b91e-453e-b8a3-a0bb4add4d76","sequence":{"long":1588},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e54f6b44-1793-4cbb-bbf3-58373f4f8e00","sequence":{"long":1589},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc98443d-de43-4e02-989f-1bbaf32f516b","sequence":{"long":1590},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2dfdda5-5c92-418f-b9cf-d6f84a3c6dd0","sequence":{"long":1591},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"caf2c93e-97f9-4275-b0d7-c9b748c72007","sequence":{"long":1592},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b96fc050-1c34-4ab6-b454-bcb370629d4f","sequence":{"long":1593},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcd6d807-1f17-47b6-a6eb-c85b17ad8733","sequence":{"long":1594},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20761721-b64e-4d10-bc90-8da9a5b17297","sequence":{"long":1595},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b9bf8cc-67ac-4294-a32a-d7a0aedb77ec","sequence":{"long":1596},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc112ba1-5305-4f42-a5d8-8ada3ff6c126","sequence":{"long":1597},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"456b5e18-5be1-44b4-82b2-06da4b0a4a75","sequence":{"long":1598},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c9c084a-e08f-4132-809d-dd9d321f64ed","sequence":{"long":1599},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"434ec1be-5a2e-403b-abdf-2cbb5f14c7dd","sequence":{"long":1600},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4b6211b-7f02-48cc-85f3-1a021c101513","sequence":{"long":1601},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"2239233b-9622-735e-a296-89384e73935d","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd6b69fe-d7e6-4805-b667-4f8e525438ea","sequence":{"long":1602},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":{"string":"/usr/local/libexec/sudo/sudoers.so"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de114801-0a8e-4ca6-94e0-e23445b376f7","sequence":{"long":1603},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da1598de-f6c3-4cc2-8318-2d25ca45e538","sequence":{"long":1604},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca36a220-1ea5-4b86-8ea5-41dbdc12940d","sequence":{"long":1605},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7319552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39ac4776-168e-41c5-85d5-3a00f9310b65","sequence":{"long":1606},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7319552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e88c0b2-8087-435e-82b2-5f9b1b97fae5","sequence":{"long":1607},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7434240},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"564472fc-d233-40b4-b277-5cb4bfa14280","sequence":{"long":1608},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7434240},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84e719ee-5b83-46cd-bb38-e9524ad848fd","sequence":{"long":1609},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7647232},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51e5f7dd-b322-4527-88ae-7ef3b5ad8849","sequence":{"long":1610},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7647232},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68aa3cf9-b760-4592-8d82-f1da07bc9bab","sequence":{"long":1611},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffd3da4e-5ebd-447e-878a-9aebb14df6cd","sequence":{"long":1612},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":{"string":"/usr/lib/libbsm.so.3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef87e48b-aff0-4d00-8aea-ab2327438c96","sequence":{"long":1613},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17bec2cd-91de-42c0-b67e-f3bb39c64dd1","sequence":{"long":1614},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5462850e-395c-45b7-bcf1-38a9b860a33f","sequence":{"long":1615},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7667712},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a5a5302-bd14-4afb-a25d-703a880d28aa","sequence":{"long":1616},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7667712},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"404cef52-0d14-4693-9d41-5ffdf5c6bcab","sequence":{"long":1617},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7708672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25533c3e-0041-40f5-9bbc-880314d19a6c","sequence":{"long":1618},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7708672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f01c0e6f-628c-4404-8f91-b67fcdac1d51","sequence":{"long":1619},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7778304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b84c83fd-94f6-41fc-a714-1b80a8e20a80","sequence":{"long":1620},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7778304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f2706cc-9221-447a-ba92-6ab75e3e7c21","sequence":{"long":1621},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b45db9b8-138d-41fd-87ac-815d66f691df","sequence":{"long":1622},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":{"string":"/usr/lib/libpam.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17cf78a7-56cf-436f-bdb7-2b7a73790e4a","sequence":{"long":1623},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8881e3a-350b-4d67-9fb0-4d89727015d6","sequence":{"long":1624},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"deaa4d6a-24d7-4e8a-abc1-9425278d3dda","sequence":{"long":1625},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7790592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"678d730d-7b1e-4768-adfa-ac95d3590a9f","sequence":{"long":1626},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7790592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f5af875-8274-4cdd-82af-a4f1c585d357","sequence":{"long":1627},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7815168},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e848223-2026-4ee6-a26b-2c1c97047091","sequence":{"long":1628},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7815168},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11405cbf-a496-4350-b971-fa4329f270cc","sequence":{"long":1629},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7843840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80518a8b-6a99-4ca2-919b-724926c3565e","sequence":{"long":1630},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7843840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f8e8982-1b3a-4e00-ba93-2629ea77afa5","sequence":{"long":1631},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fbd2849-c922-4eff-a1f4-53ddeca9bbbd","sequence":{"long":1632},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":{"string":"/lib/libz.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a60a4fd-e2d0-4262-8afb-25f205443b38","sequence":{"long":1633},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c72311e6-c0c5-4c58-a805-609b47d1ad60","sequence":{"long":1634},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83e93ff3-6407-495d-a4d1-fa1ba88805b2","sequence":{"long":1635},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7856128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc9a3331-8ac4-4230-a67c-3b4534d02a28","sequence":{"long":1636},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7856128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfa20953-fe04-4bea-960c-ef21960fb3e7","sequence":{"long":1637},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7888896},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21acf44c-b558-4573-b842-e6c19bada8a0","sequence":{"long":1638},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7888896},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbee7ceb-ffd8-45a6-9186-52c4413059f4","sequence":{"long":1639},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7958528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9741ab04-351c-40b5-b639-427ed3246905","sequence":{"long":1640},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7958528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0d5cc17-e9b0-471f-9701-5399c802cac5","sequence":{"long":1641},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce582469-6fd1-44ee-a0f7-b59e10329a03","sequence":{"long":1642},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ace7ae87-73a3-40af-b853-78eb3dd77759","sequence":{"long":1643},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61ace243-5907-4974-baf9-80bdb601a1e1","sequence":{"long":1644},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af0eacb0-037d-4fe4-8ede-3c12e42ccfe4","sequence":{"long":1645},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26693109-0f4c-4629-94e8-fb7e4043dc3a","sequence":{"long":1646},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"0","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d07c962-cc6c-402e-9323-489c702fbf3b","sequence":{"long":1647},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bad0e5dd-b8bf-445f-b476-f407f268a0e8","sequence":{"long":1648},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"06078de3-2eda-d757-9a2e-abc657d728cd","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Principal":{"uuid":"8e122852-4e16-51ca-879a-eb4a80f67520","type":"PRINCIPAL_LOCAL","userId":"1","username":null,"groupIds":{"array":[]},"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_PRINCIPAL","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10e8f637-a20c-44ce-9968-90d2fc3529a6","sequence":{"long":1649},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":{"string":"/usr/local/etc/sudoers"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b984fb74-3a46-4db3-b0f0-225a03020b9d","sequence":{"long":1650},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":3678},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6eebfe2d-2be6-4d9e-92f2-3fea38413600","sequence":{"long":1651},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":3678},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93cc0ab2-cbb6-4346-abe5-34d5d61e6298","sequence":{"long":1652},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37de6c96-5514-4d07-b9ad-d8b0733e68ac","sequence":{"long":1653},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"0","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c92e7b0-1bf6-402d-b782-0774a2c8abec","sequence":{"long":1654},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"-1","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7baa5cef-b55a-451f-8be4-66497ce017a8","sequence":{"long":1655},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"0","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0909878-4f3d-43b9-85cb-f7ea18de7326","sequence":{"long":1656},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"382d9507-c88d-7556-8dc8-bb47e67533c4","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed319414-f92a-4e39-8e37-627ab531ff08","sequence":{"long":1657},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"382d9507-c88d-7556-8dc8-bb47e67533c4"},"predicateObjectPath":{"string":"/usr/local/etc/sudoers.d"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00ffff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d061ec42-f192-4007-82be-cc6072029fd2","sequence":{"long":1658},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"382d9507-c88d-7556-8dc8-bb47e67533c4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c40f3a65-fb06-4550-8b8f-15e14ad8e15c","sequence":{"long":1659},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a7d09fb-ae8d-4696-b90b-23c7a288d65e","sequence":{"long":1660},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"1003","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be5ba86a-0b62-43b2-a919-91439e0aea30","sequence":{"long":1661},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e927f1b-b056-465f-a5e8-a3065073f7ce","sequence":{"long":1662},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f393de00-081c-4497-a77a-a489b5a89883","sequence":{"long":1663},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06c64be7-e7f2-43b0-be69-2b25413fa709","sequence":{"long":1664},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"915c8469-bb30-465b-ac12-df8d697745c8","sequence":{"long":1665},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46a26feb-b58e-446d-82e7-5e8428f9015d","sequence":{"long":1666},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3cedcc5-2d16-4e13-b264-ee3a4539e0f6","sequence":{"long":1667},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"921085a8-1288-4739-9619-0d793583056d","sequence":{"long":1668},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"408831db-830b-4191-98b8-21415e7617a3","sequence":{"long":1669},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4d3e3b1-64b2-4969-8c0d-a25a3ab58d30","sequence":{"long":1670},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34050604-1581-4b27-95fe-61ae3384d6b3","sequence":{"long":1671},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b123edbb-6065-47af-a32b-9b1ffd3a3fff","sequence":{"long":1672},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76327521-b2f2-48cd-804e-27f297f190b9","sequence":{"long":1673},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f277a6f3-7252-414c-922c-d14e4cb81b96","sequence":{"long":1674},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91977cba-a557-4a47-8077-4a4e2712de79","sequence":{"long":1675},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54eb54e6-7ff4-4173-9f1c-2ba69b8c4728","sequence":{"long":1676},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4607253d-9c33-4021-a95e-a052fb5a5cfd","sequence":{"long":1677},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"48de70ac-ab23-ae52-a3ab-f629e2ae3418","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1607bdb1-3d05-489c-a6a6-d83e0de1598c","sequence":{"long":1678},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":{"string":"/usr/local/etc/pam.d/sudo"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e221ee0-4a05-41d3-a4a2-795417b01757","sequence":{"long":1679},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":323},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0be7eb94-a87d-4fbe-93cf-9cfe9e56a8be","sequence":{"long":1680},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":{"string":"/etc/pam.d/system"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec5ac0ac-26fa-4089-8b83-5faea4ee1bfa","sequence":{"long":1681},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":648},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea96ace8-a738-4874-8fed-379dc6d5b492","sequence":{"long":1682},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":{"string":"/usr/lib/pam_opie.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5aa048f9-3c8a-4c44-9bf9-af0b3d732a5f","sequence":{"long":1683},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77efef55-3cfe-47a6-8a2c-83c996131eaa","sequence":{"long":1684},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4828bc89-d1ce-48f2-b2cb-3d791f24e3e0","sequence":{"long":1685},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1441035-b619-4c36-bb54-5e8d90da66ae","sequence":{"long":1686},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8204288},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"503c188b-e127-4f80-ade0-7e775b4a62cb","sequence":{"long":1687},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8204288},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15355d95-7461-4fc2-84e3-a5cfbac7150d","sequence":{"long":1688},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8208384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5146f3cf-3d00-49a5-9c90-42d757746f1c","sequence":{"long":1689},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8208384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99297aaa-6309-4dbe-8f86-524b3c768a3b","sequence":{"long":1690},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8212480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f8f9d2c-65f5-427c-a6cb-93530d64b69f","sequence":{"long":1691},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8212480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67738ff2-f558-4717-981f-35d3a09ac6e5","sequence":{"long":1692},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cb5adad-4bd0-4b86-8542-e822d23095a3","sequence":{"long":1693},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":{"string":"/usr/lib/libopie.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0372468-bb9b-40fe-a5e2-1c4f953fa11c","sequence":{"long":1694},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb283562-3a0c-4a5f-bc6f-ca1646a50cf7","sequence":{"long":1695},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0af44c1-746b-42db-ab49-eff5a27a089f","sequence":{"long":1696},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8220672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b24e58c-462b-4086-8c71-3f89d8b68129","sequence":{"long":1697},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8220672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"028cd0fc-8fc9-4cee-9f60-9324f04599fb","sequence":{"long":1698},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8232960},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7158f9f1-955c-4370-a95d-97ebb4a98a30","sequence":{"long":1699},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8232960},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"168a9415-70cd-4dc6-8ed1-25153126cd41","sequence":{"long":1700},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8249344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a10974a0-054e-4607-9d12-cdc262f6475f","sequence":{"long":1701},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8249344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8880acf-0dfc-4d75-9933-6dd2ffdc18bb","sequence":{"long":1702},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43c79a97-8931-4cf5-a125-531ae0b73695","sequence":{"long":1703},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":{"string":"/lib/libmd.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"099d760b-788c-4cf3-833a-a9889a3ff186","sequence":{"long":1704},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e124bb03-02ae-4720-ba0a-c528dd62da22","sequence":{"long":1705},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a712366-aa9f-40b0-a870-c5f286c2dafb","sequence":{"long":1706},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14680064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60214c1a-61e5-4dd7-8939-76f9f1dbd0ad","sequence":{"long":1707},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14680064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26d1b1f3-f815-4841-a0f4-31420c482b9f","sequence":{"long":1708},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14712832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae5560ed-1db0-43a1-8495-4d790912bc0c","sequence":{"long":1709},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14712832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ac949cb-3855-4331-bf91-cd0dcb668d74","sequence":{"long":1710},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14794752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab560051-303b-4f22-af54-8f5e693f9001","sequence":{"long":1711},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14794752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36115d43-5ac8-4507-84f0-58a13da9f5d1","sequence":{"long":1712},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"968749f0-8628-482b-a0ae-d8cc0f3ed3de","sequence":{"long":1713},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5154b09-c725-4869-ba6b-f0fc57d24e9a","sequence":{"long":1714},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3523b73f-8241-450e-8639-c5aa32c8871f","sequence":{"long":1715},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80bbf6b5-7dc3-4c4a-beba-9e871c11f11f","sequence":{"long":1716},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ba0202a-7ca3-488a-80e5-4569b9ab6da6","sequence":{"long":1717},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":{"string":"/usr/lib/pam_opieaccess.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d17024ce-9e40-462b-8641-eda813117328","sequence":{"long":1718},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27bf8eac-a9f6-4d62-bc52-748292421457","sequence":{"long":1719},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ff604c8-3d75-41c4-8719-417f76d419ec","sequence":{"long":1720},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1c6cb80-8dad-42fa-b48b-850ce68ca8c5","sequence":{"long":1721},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8269824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f5159cd-8ff1-4966-b150-437505ed0b75","sequence":{"long":1722},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8269824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec780e96-dd50-4f96-bc3c-8cc14836387d","sequence":{"long":1723},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8273920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94934eb7-1e9c-4fa0-9139-4c17b4c6e512","sequence":{"long":1724},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8273920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"935d208a-6abc-4805-b99b-f9bf50d88f82","sequence":{"long":1725},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8278016},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95807456-d80c-4f7d-9821-6dec273d0060","sequence":{"long":1726},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8278016},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5984facf-b07c-4272-b46d-5bcffeb2cc70","sequence":{"long":1727},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64088289-1e2b-4365-9176-99039cf64094","sequence":{"long":1728},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2d78b0f-4cf3-4a4e-a9d4-a2e0987328c9","sequence":{"long":1729},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86098c59-9238-4e3d-ac14-9a07ffb3319b","sequence":{"long":1730},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fabb7a20-7c2b-4606-b064-08c45176f963","sequence":{"long":1731},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bc0166a-cd04-44b8-87bd-36548be84e30","sequence":{"long":1732},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d2d5b5f-82f5-4423-a19a-da6c9b630a02","sequence":{"long":1733},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bc69c38-92a8-40b5-aab9-697fa034212c","sequence":{"long":1734},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8286208},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f282c24d-5c82-457a-9767-59b05587a462","sequence":{"long":1735},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8286208},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e96653f-819f-4d0c-ad69-05a587e096e7","sequence":{"long":1736},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8294400},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83642d30-f466-4d12-bc3e-ebd4c19b29f1","sequence":{"long":1737},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8294400},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f3c3d08-9e1a-4117-a71e-aabfae219b99","sequence":{"long":1738},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8302592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9199775c-7193-4910-b7cc-3835d6cca379","sequence":{"long":1739},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8302592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d650550-5062-4319-b86e-6e8c7af00049","sequence":{"long":1740},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"092388df-bddd-43a4-a007-241b69409f7b","sequence":{"long":1741},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":{"string":"/lib/libcrypt.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1090dc95-9a12-4cbf-8dd6-f4da962ebf24","sequence":{"long":1742},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"413bd43a-233c-4773-adb7-a4fb9c3e5cdf","sequence":{"long":1743},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a304eda4-48cb-4328-b691-842a78dedd11","sequence":{"long":1744},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14938112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c2154bc-dbe7-4519-b037-48eca8cb4b0e","sequence":{"long":1745},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14938112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b060051-4340-4869-8e32-41867fa1f652","sequence":{"long":1746},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14954496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d0a34d8-981b-430f-bdda-50a54df7aa22","sequence":{"long":1747},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14954496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75a096d7-6d26-4e04-b574-23c8196088de","sequence":{"long":1748},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14995456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1968b0e2-76f6-455b-9db9-9e0fa620d6ac","sequence":{"long":1749},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14995456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e1d9d84-822d-4960-8335-26a9e16c6c71","sequence":{"long":1750},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7b92081-fa73-4e2a-a43a-e3af57b42f0f","sequence":{"long":1751},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":{"string":"/usr/lib/libypclnt.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40c65a4c-e0c0-46c7-9f99-21917fa29140","sequence":{"long":1752},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69e929b0-86a9-4f93-85f1-1971318e5a98","sequence":{"long":1753},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32b6a821-8103-47bf-ad05-01f55a50c699","sequence":{"long":1754},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8310784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08451659-67b9-466c-bea8-711cb0bc9dd6","sequence":{"long":1755},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8310784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10d1f4d0-2b60-4ee2-b192-bf7ce9af50f0","sequence":{"long":1756},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8323072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ed4f15b-1f90-484c-bcb7-939268704be1","sequence":{"long":1757},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8323072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59748872-1885-470c-9f47-e27ec89528da","sequence":{"long":1758},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8331264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19fb0615-8168-4077-b5cf-b1394a141011","sequence":{"long":1759},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8331264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67604b08-272d-4128-90b1-9978d75703ab","sequence":{"long":1760},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a902296-4fd3-45ea-a6f9-ff5d19800640","sequence":{"long":1761},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8518be62-b21a-4704-8898-accc17906783","sequence":{"long":1762},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b4a014b-b576-4125-bc59-ca581fe2b001","sequence":{"long":1763},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"791a0fb7-a93f-4194-a2ca-9a1970d1e6f9","sequence":{"long":1764},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e947b495-a5b9-46a0-b3f4-aa7538fe2e88","sequence":{"long":1765},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"667fec5a-dfa4-4cb1-8a14-95b66101254e","sequence":{"long":1766},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b42a0433-5455-4776-a0ef-d6f85b85f594","sequence":{"long":1767},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":{"string":"/etc/pam.d/system"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e60507c-f088-4b03-8c6a-8890c215e4a3","sequence":{"long":1768},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":648},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47307ae7-feea-49aa-9744-a874104569cd","sequence":{"long":1769},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":{"string":"/usr/lib/pam_login_access.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8480886c-3d93-40e1-a6ac-446bdfc23cb0","sequence":{"long":1770},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f335e80-8f8e-4a56-b3e1-db982fb8833d","sequence":{"long":1771},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37024a96-7bec-4008-99d5-fb2e9b246983","sequence":{"long":1772},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2310a2b-41e0-4896-87c3-50f64b0ea218","sequence":{"long":1773},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8343552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87ba5e29-0f9c-4c31-a773-93ba0cbb1734","sequence":{"long":1774},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8343552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3aebaf2-370d-4bc7-b648-0bc6b710d66f","sequence":{"long":1775},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8347648},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3af43c5-51b1-4cdf-a60a-e3d6c01ef9fa","sequence":{"long":1776},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8347648},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7caeb0e7-f571-43e9-b9d7-9ef84126801c","sequence":{"long":1777},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8351744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f77b244-2f7e-4b2f-af8d-b7f0510b962a","sequence":{"long":1778},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8351744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d620a530-4399-4163-91bb-50689eda2f1b","sequence":{"long":1779},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"884574c4-9b92-408c-8d2f-cc56e4807a82","sequence":{"long":1780},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c3aa4bd-2eda-40a6-a821-0ef009e3c28e","sequence":{"long":1781},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5635fe98-1f8b-4d10-a4d4-96601cfbed28","sequence":{"long":1782},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85ebb74a-0510-4a40-8327-7e11b351a29b","sequence":{"long":1783},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"718f6fbf-271f-4b04-8dab-998e3705002e","sequence":{"long":1784},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5d4a645-e528-49dc-a622-a8b003649448","sequence":{"long":1785},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a75b84a-a12c-4593-9f22-7a007689a50a","sequence":{"long":1786},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8359936},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e98af7b-0c78-4c4e-b3ff-fa9da1c60c4e","sequence":{"long":1787},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8359936},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28bcf8f3-38df-4bac-b44a-47b2058c18f0","sequence":{"long":1788},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8368128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a01e8860-ebae-4874-8c90-5c67b25f48b4","sequence":{"long":1789},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8368128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b38b852-1edb-4057-9fe3-018d375b6555","sequence":{"long":1790},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8376320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b391cc91-c98f-4f00-938d-fb1c15b242ac","sequence":{"long":1791},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8376320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc2f7e1f-a7f0-46ec-bfd8-e7efa34775c7","sequence":{"long":1792},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7614da55-6637-400c-b21a-f2bfb4c38a07","sequence":{"long":1793},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a0f5ffc-4a5d-4e31-b2b0-ef9a8738eed1","sequence":{"long":1794},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35ef8046-d9d8-4e75-a439-f87c51b1074d","sequence":{"long":1795},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccf3df1b-2667-4a65-b180-78e9c6ac05a6","sequence":{"long":1796},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7d4fd96-78a1-43a6-873c-c14ee7f08138","sequence":{"long":1797},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":{"string":"/usr/lib/pam_permit.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b96632a6-ae36-495e-a6b3-986fc6b6c98e","sequence":{"long":1798},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9c6bc9a-60d0-4401-a287-e094f4bea220","sequence":{"long":1799},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98411f64-3e0b-4dac-86b2-413a17421fe9","sequence":{"long":1800},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"508799bd-e080-47be-9d2d-87354b358ba6","sequence":{"long":1801},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15077376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7de5100e-cdc7-4b13-a990-84af50ee0a0b","sequence":{"long":1802},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15077376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bd0ebfc-c78f-4ab2-b17a-04bc6e72a395","sequence":{"long":1803},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15081472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7f2fcf8-d36a-4156-8766-7fbba685aba8","sequence":{"long":1804},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15081472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69cdb8b0-ed05-41da-8646-0a8fddf3d2f6","sequence":{"long":1805},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15085568},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cb77f77-e409-4b90-bbc9-9b79fa55ce47","sequence":{"long":1806},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15085568},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45b01703-3e53-47f9-9af2-f51c2bdf0765","sequence":{"long":1807},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71713ed6-b294-4fd4-a8a8-77483280a32a","sequence":{"long":1808},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4c52a3d-049e-4838-af02-690af5b71282","sequence":{"long":1809},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a31afd89-f9a9-4f77-b5fa-373c57209ae5","sequence":{"long":1810},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":{"string":"/etc/pam.d/system"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5b56784-add7-4414-9c0d-c6b654765e05","sequence":{"long":1811},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":648},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"026612c2-1647-4df7-81ec-3125ff634963","sequence":{"long":1812},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"427f6a3d-3c32-4b53-b533-f27604bc44c0","sequence":{"long":1813},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66450af2-1e53-431c-9f67-1d2ce30e481f","sequence":{"long":1814},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ba9c90f-9afa-4245-b1b7-2bfc99379409","sequence":{"long":1815},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd07a855-df48-421c-9cb1-aa79cc789471","sequence":{"long":1816},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15093760},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3862a8b-1185-41cb-9b23-86af617534f8","sequence":{"long":1817},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15093760},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7514a0cd-4b21-4f97-97fd-4b4d65f1c9e5","sequence":{"long":1818},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15101952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6be1f68f-383b-4697-b9d3-866045e896d3","sequence":{"long":1819},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15101952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd136e29-d51f-4ff3-9ff0-27e3a32c28cf","sequence":{"long":1820},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15110144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad6a4a22-b308-41f7-9e18-d3604299ee17","sequence":{"long":1821},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15110144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91b573c2-7646-459f-ae67-c051ccad3f47","sequence":{"long":1822},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7382a4fb-39d4-40fd-907c-045f27bbf89f","sequence":{"long":1823},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a271c7d5-4ef7-47a1-98dc-45bb75d2c7bf","sequence":{"long":1824},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a89c15e0-04a7-467c-a9e7-9766e979cbc8","sequence":{"long":1825},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9064b57-d9c9-4238-b290-8e704391e44c","sequence":{"long":1826},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d42d9889-1443-4a43-a97f-0c2828883e17","sequence":{"long":1827},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6a7bd17-926a-40d0-9180-24d389fb3296","sequence":{"long":1828},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1afc482c-10bc-4653-8707-d6ddf6ec69ab","sequence":{"long":1829},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":{"string":"/etc/login.access"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ac1cf6c-6158-4b5a-92a4-1f317bec436a","sequence":{"long":1830},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1785},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7abf6203-1186-4ee2-900c-02f3565722ed","sequence":{"long":1831},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ceee496-104b-490d-8649-e0d134910ba9","sequence":{"long":1832},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6c74a35-c394-4a57-8b3e-6ffcde2e3cd0","sequence":{"long":1833},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"521e2cb3-7736-43c3-bc80-900d07ff18ea","sequence":{"long":1834},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"529cd176-98c1-49ab-9cc0-d7e5929f8785","sequence":{"long":1835},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2399aefd-0dbf-4bc6-a1cf-2aa90f90ff9e","sequence":{"long":1836},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f92e526d-6218-7d5b-9862-69e68b7d7dcf","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b99670ac-1c0d-418c-a092-1bc1a74d3f85","sequence":{"long":1837},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":{"string":"/etc/ttys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07fe2532-518a-47d1-8818-302cbd2028a5","sequence":{"long":1838},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2086},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b3b7e6c-aa0a-4164-b19f-c2114273c29b","sequence":{"long":1839},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe834913-516c-449d-b1f8-03096ea57cb1","sequence":{"long":1840},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef144717-24d7-4f19-9d46-772575c14230","sequence":{"long":1841},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"0","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66b0aff9-c2b3-452c-bb67-ecea46aa5ff0","sequence":{"long":1842},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"e02b4d2c-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d76b469-bfe7-4657-808e-7fd4eb576975","sequence":{"long":1843},"type":"EVENT_CONNECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02b4d2c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","address":"/var/run/logpriv","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3aea2e5-f4eb-434a-98a0-16397f3da4b0","sequence":{"long":1844},"type":"EVENT_SENDTO","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02b4d2c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":164},"programPoint":null,"properties":{"map":{"ret_msgid":"407","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07621674-cc0f-4915-9845-d1476003b107","sequence":{"long":1845},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":164},"programPoint":null,"properties":{"map":{"ret_msgid":"407","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79200136-c577-43a2-8090-85b6985e73c8","sequence":{"long":1846},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aafb7a4a-d952-865d-92d9-3ff2ed86d364"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":140},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"16","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9eb0cad-990e-4d40-b2f3-3d1b34c0c5bf","sequence":{"long":1847},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02b4d2c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd0f504f-28d2-4df9-9acd-c44e1f4e8f01","sequence":{"long":1848},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bb800ac-514a-47a7-bf0f-1fcf7f525f07","sequence":{"long":1849},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"1003","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"818dac15-e9a9-41e4-a610-d5e6c1a9adda","sequence":{"long":1850},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21f63ec2-ed2d-48d9-ad64-23eaa9026906","sequence":{"long":1851},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":{"string":"/etc/security/audit_event"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"179316e3-0038-4945-8d1b-a973d9796370","sequence":{"long":1852},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":27878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93b2aa97-a7ec-4426-a931-9c5ac4d3aad4","sequence":{"long":1853},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":{"string":"/etc/security/audit_class"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ffc08fd-01c0-435b-9a9d-f58ad7819bc8","sequence":{"long":1854},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54f0d41b-bf9c-42db-8cdc-afa5df377bcf","sequence":{"long":1855},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b3be789-5c0b-4562-9c3e-0c264eaff60b","sequence":{"long":1856},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5385b470-196f-4ed2-8876-4a4689c43bb0","sequence":{"long":1857},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c12e0e8-bd0c-42d7-95b0-e9e4b0889adc","sequence":{"long":1858},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7b26008-9776-4a32-be44-9a58b07c8b1d","sequence":{"long":1859},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f8c52a6-fe4b-4267-9b55-99bc8263a601","sequence":{"long":1860},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12354785-7db0-4ee6-bac3-d2f80349ffa9","sequence":{"long":1861},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02ca7a8d-5754-4c8b-88ae-5e29c9b24984","sequence":{"long":1862},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88babafd-5ad1-4f3f-9acf-ba2f638b3512","sequence":{"long":1863},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":27878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95881a51-0148-4d4d-aa7b-54ff101da7ed","sequence":{"long":1864},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16dcda2d-43a7-4329-adb0-6afa402e9444","sequence":{"long":1865},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":27878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49112305-931b-4500-af74-077406ab8328","sequence":{"long":1866},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44ee925a-d02e-4cae-95c8-c5f53a24c09f","sequence":{"long":1867},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c227e300-1b56-4329-9e71-120ceac583f3","sequence":{"long":1868},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4d2efc3-d8c7-4105-bb9b-bfd11ed1275d","sequence":{"long":1869},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36e293cc-8c35-4552-b402-f7fdf9fb13b8","sequence":{"long":1870},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffe74e98-58de-4dbe-badb-d347e90f46f0","sequence":{"long":1871},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a1bdb79-5ab1-4569-a2cf-dc04188f2d85","sequence":{"long":1872},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de81785f-1c1b-41bd-a6e5-8e9d34ab6fac","sequence":{"long":1873},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"-1","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d86f602-0a98-495a-b47b-754a35017cac","sequence":{"long":1874},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f8f512a-6a8e-442a-8f5d-3b2d0637b381","sequence":{"long":1875},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f49d1d1-3b12-432d-ab06-81865b7cae02","sequence":{"long":1876},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"63","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"008ae14a-aa4e-4014-acd3-8f8200ea105e","sequence":{"long":1877},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1baaa58b-d11a-4da9-87f9-bd047f095fb5","sequence":{"long":1878},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_gid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e02bec49-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e02bec48-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"b7ffa591-1b21-5b6c-ae6d-3b862ea46217","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"e02bec48-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"e02bec49-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad7cba7b-91f6-4a0f-85a1-89327f37f00b","sequence":{"long":1879},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b7ffa591-1b21-5b6c-ae6d-3b862ea46217"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","ret_fd2":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e02bf2bd-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1295,"parentSubject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":1552582917233945148},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c58c3371-f175-4dea-a976-b8ef70b77622","sequence":{"long":1880},"type":"EVENT_FORK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1295","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1295","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e02bf8c7-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e02bf8c6-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"2d3c57a7-95ff-5f9f-b4b3-18d5eebe8057","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"e02bf8c6-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"e02bf8c7-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d52c83d5-7eca-4280-920c-211ae153a0e9","sequence":{"long":1881},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2d3c57a7-95ff-5f9f-b4b3-18d5eebe8057"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","ret_fd2":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42635c1d-a31b-4d5d-a52d-a3cfd28a133a","sequence":{"long":1882},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d52d8a9a-e03e-4971-a660-1ce214fbb352","sequence":{"long":1883},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"0","arg_ruid":"0","arg_suid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2bc1055-4dc1-4400-be8d-c49369668b60","sequence":{"long":1884},"type":"EVENT_FCNTL","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"1","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33da0ffb-a57a-4ca4-b544-fcc4ded8fcd9","sequence":{"long":1885},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42a60575-e428-4079-a3f3-6764bad88ce2","sequence":{"long":1886},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4ff0b85-fde7-41a7-b00d-b7f7269a4776","sequence":{"long":1887},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37b7ad29-d93f-44e8-af8c-dde201936fc2","sequence":{"long":1888},"type":"EVENT_FCNTL","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c0bf78f-7f8b-415b-b943-a26520dabb2e","sequence":{"long":1889},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bec49-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":{"string":"/bin/ls"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917245561708,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"ls","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11298f7b-07a3-4401-98e2-b9afff7d008d","sequence":{"long":1890},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bec48-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9440fadf-438e-4a78-b88c-806335584513","sequence":{"long":1891},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bec48-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc70aaba-b2fe-42cc-ac83-fccf7ee28b00","sequence":{"long":1892},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd1971f1-e7ca-49a8-8da9-44adffbd1656","sequence":{"long":1893},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"826ad685-c7b0-4280-87a3-d5865b338dfe","sequence":{"long":1894},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6eb4c7b5-851a-481a-8605-7ef889c8b081","sequence":{"long":1895},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d26236bb-219e-4f45-a3b9-b1f9045cd345","sequence":{"long":1896},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a20a952a-050b-418d-a6f8-6e1173854be5","sequence":{"long":1897},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b21a374a-37ed-416f-97ad-066a4576cd57","sequence":{"long":1898},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ea634fe-8ade-44e3-84f0-5c7fb9493e3e","sequence":{"long":1899},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"925d5f0f-2889-44e0-967a-6334ff90e295","sequence":{"long":1900},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6316854-eadf-4ea0-8f93-4c5d7d5c6363","sequence":{"long":1901},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bee0845-afc0-41b1-a8df-b17441639aea","sequence":{"long":1902},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2420736},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f77ca1b3-b2a6-4813-8c36-015e5087ddaf","sequence":{"long":1903},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2420736},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44a0316f-0e9a-4dc6-8153-dd02585c7b11","sequence":{"long":1904},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2453504},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bea4b388-aab0-4663-8521-d8f670546e01","sequence":{"long":1905},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2453504},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac39e968-403b-4f5b-8bd7-71b02ea91caf","sequence":{"long":1906},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c03993eb-eb93-4b2c-8d13-d2581e2fdb73","sequence":{"long":1907},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b75197de-8c20-4a69-acd7-4b98e97d7bfc","sequence":{"long":1908},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d243ac9f-a595-4781-a14c-433c760532cf","sequence":{"long":1909},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":{"string":"/lib/libncursesw.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"503e5ec9-8c8c-4dc7-8120-e7a50ed896b7","sequence":{"long":1910},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b55b5fcf-1de5-4862-8a7e-5cd2028059fc","sequence":{"long":1911},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4caec398-5362-4a78-851b-bd5afaf4acfd","sequence":{"long":1912},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2514944},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45b09606-149a-498d-9832-b6a36494e92e","sequence":{"long":1913},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2514944},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d4029ff-a5de-476c-b01d-6dfbb76f474f","sequence":{"long":1914},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2682880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e145d3f8-e369-41fa-9dbd-40a34cc1cc50","sequence":{"long":1915},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2682880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36f143c4-efc2-498d-893c-8e80d9ef330e","sequence":{"long":1916},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2887680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d6267a0-8945-4cb2-a860-6a02f694a6b9","sequence":{"long":1917},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2887680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77a41c9e-ceb7-4e83-a821-a3662db08fc7","sequence":{"long":1918},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7094adbe-aeb5-43d0-95e1-04a0cdb8ca7a","sequence":{"long":1919},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcd394d9-3388-4ccf-aa7e-eee27e843865","sequence":{"long":1920},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a09b786-b44b-421c-aa06-0d9cfeb30878","sequence":{"long":1921},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02979a56-3791-4ede-8e6c-81a81638ddf5","sequence":{"long":1922},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f4a5eba-2eb0-47f3-9ec8-d270a874f9a1","sequence":{"long":1923},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89440d43-bde5-418d-845a-3cc5109c8e77","sequence":{"long":1924},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8ebfcca-2cb8-4c43-9f07-84cfd885e7b4","sequence":{"long":1925},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd1e2b87-c44e-4e4b-a38c-7598ea0903a7","sequence":{"long":1926},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f545af8b-8339-4e4e-bfe3-d221b64ba196","sequence":{"long":1927},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffa9f170-fdef-4767-a764-13f823ed5401","sequence":{"long":1928},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f013bacd-3377-4cca-ba76-6801fd95fbc3","sequence":{"long":1929},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a52e48d-64c7-48f1-8de7-77a2a0fad176","sequence":{"long":1930},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6723390e-56ef-46d1-8baf-eac30eb4b9cc","sequence":{"long":1931},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23be7bf1-e90b-41f9-9458-330c8f4b83d1","sequence":{"long":1932},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7ca1231-a3c8-4f2f-ac1d-4da8c6e39794","sequence":{"long":1933},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66d857d7-7521-465b-9ca6-185f5fe52fd5","sequence":{"long":1934},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_fchdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fcc6f28-3c9f-46c9-86f3-28c6668d6eb8","sequence":{"long":1935},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b543b5da-1ed8-45cc-a62d-4e4fc0040c5d","sequence":{"long":1936},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2666be2-002f-49bb-a79d-d6edac7aa99f","sequence":{"long":1937},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adb70d9f-22e1-4ced-b73c-a44f229fcddd","sequence":{"long":1938},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_fchdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a80243d2-8fb7-4d11-808f-f5ebd10297eb","sequence":{"long":1939},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"779975be-320f-4619-864e-90d7d30fcdb8","sequence":{"long":1940},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":119},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da72f270-84f9-41a0-85ea-505417f3b34d","sequence":{"long":1941},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":107},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f1144fe-3abc-49b5-ba9d-34c8743fc048","sequence":{"long":1942},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":103},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d87a99c2-c7f3-430e-9686-eb325e640b2d","sequence":{"long":1943},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b60a5f5f-5296-42aa-ac45-955472b28fc2","sequence":{"long":1944},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":104},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2a4aecd-6c34-443d-8978-1b55f3014a3e","sequence":{"long":1945},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":94},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4fcfc2c-b6f0-45dc-aabc-ad04787481e7","sequence":{"long":1946},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22238154-c7c2-4b39-aede-42c475de8974","sequence":{"long":1947},"type":"EVENT_WRITE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf8c7-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95e9218f-b4da-4582-92f6-c6a6a7794376","sequence":{"long":1948},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf8c6-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f36632e-7229-4b43-a87c-ac5e40b58708","sequence":{"long":1949},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf8c6-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"994c8ee8-645e-4eb8-a7b2-33fb0cd67045","sequence":{"long":1950},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf8c7-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b396b970-d439-4335-bb3c-e82be5f5739b","sequence":{"long":1951},"type":"EVENT_EXIT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22673e29-1c94-4019-9789-398c5e002156","sequence":{"long":1952},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":169},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"464027f5-52f2-4535-9ad0-99721c63b951","sequence":{"long":1953},"type":"EVENT_WRITE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6366c66a-1f06-4672-a85a-4d244a72ea04","sequence":{"long":1954},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":489},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e02d16f1-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1296,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917245561708},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71dcb79b-f22a-4193-bccc-5af1aa2f02b8","sequence":{"long":1955},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1296","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1296","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25d1f2a4-c6f6-4179-86ce-1bac133e8eb5","sequence":{"long":1956},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":103},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fb1ad4c-1107-47c4-9c7c-d82c49f0f045","sequence":{"long":1957},"type":"EVENT_WRITE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4669e4e6-d8e4-4a83-97c4-7ad8a61d847e","sequence":{"long":1958},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcb58340-d34d-449b-b55e-84507abdd9c4","sequence":{"long":1959},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62f78737-fbf6-441a-b8e6-8b73d7110ca5","sequence":{"long":1960},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee946ae9-803f-4a10-a624-d48247843fc4","sequence":{"long":1961},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":508},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e02d3b31-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1297,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582917245561708},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47defba6-f09e-45fe-8971-11f148389b74","sequence":{"long":1962},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1297","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1297","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd94f628-0f5e-4417-814c-3b8147957810","sequence":{"long":1963},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6ce4ece2-78d7-5951-9778-d00331594fca","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad586da4-3171-48fe-951f-81e6acaddfc5","sequence":{"long":1964},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917245561708,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9561beab-ba59-48b1-95de-f88efa3c0510","sequence":{"long":1965},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"409acb63-218c-4632-b75b-5681facb2968","sequence":{"long":1966},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70a997b2-ae74-4a3b-a1c2-4bac6f45dd7c","sequence":{"long":1967},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05a11ae8-1d0e-45f9-a4a3-9532062404f1","sequence":{"long":1968},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd1cac2f-ec2b-48f4-ac32-1fef6aed6d4e","sequence":{"long":1969},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bdff6a2-7a08-4fac-a50d-0493b5bd56e9","sequence":{"long":1970},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf4fa855-bbad-4c6a-b72e-d1eba36e41cc","sequence":{"long":1971},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41f1bfeb-5c66-47bd-aeb2-148b56c03e81","sequence":{"long":1972},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"e7451145-d4d2-9753-92d4-25f153976db4","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80a28b23-7371-4a76-9f97-2253178dba16","sequence":{"long":1973},"type":"EVENT_EXECUTE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e7451145-d4d2-9753-92d4-25f153976db4"},"predicateObjectPath":{"string":"/usr/bin/nc"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917245561708,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"nc -l 54321","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcc46418-bdfb-4efd-9494-8fd02d562cf4","sequence":{"long":1974},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ce433c0-132b-4f51-9dcd-d2f3a540a430","sequence":{"long":1975},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68ba1a4f-b789-4930-ac71-993e57222ed7","sequence":{"long":1976},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"721453f0-95b2-4c46-935d-5267b8b53c26","sequence":{"long":1977},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dead9df-0751-40f3-b58f-abadfee58073","sequence":{"long":1978},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"378a638c-7864-4bec-862e-1176de3ed2e1","sequence":{"long":1979},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7f80fe9-8d8a-4c8b-aa70-f83558d3000c","sequence":{"long":1980},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"917b9041-b494-4915-8e8f-ef91ccac1f45","sequence":{"long":1981},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":{"string":"/lib/libipsec.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75f4f68d-5ad5-4cfc-8db8-b8f1be1c9f9b","sequence":{"long":1982},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"608b64b8-864c-4168-81a0-cf8d7d15fc96","sequence":{"long":1983},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"862c8a6f-2f75-4e66-8dfa-543fac190ff0","sequence":{"long":1984},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917485712666,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":195593},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64d56123-75e5-4b1b-bfb7-ee72fe2cd90b","sequence":{"long":1985},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":195593},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5c250e8-aff6-48ab-965d-bd795ba103ea","sequence":{"long":1987},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"572b0d22-4c49-477a-b342-b2221ceb8c50","sequence":{"long":1986},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6dd936e-1297-41ac-b046-e6cdaa3728d5","sequence":{"long":1989},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8ab03b3-ebc9-47b6-a013-c7f4508fb3e6","sequence":{"long":1988},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26219485-8958-4d56-a150-a0c4449fbd02","sequence":{"long":1991},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e054335-5a03-4056-888f-9a4c87c2068f","sequence":{"long":1990},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"409700d9-0ab2-493a-9dd2-8ca332699b2c","sequence":{"long":1993},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36a49f8a-fb98-4982-8241-fe5b7363efe5","sequence":{"long":1992},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"990d2700-9e09-4562-80a7-59237eb518d7","sequence":{"long":1995},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"141f1c27-c578-43da-a3e4-717836864904","sequence":{"long":1994},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d350e515-324d-4660-ba1f-0963f7e5515d","sequence":{"long":1997},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8debe0d5-9553-4158-ad58-55f2b1453e73","sequence":{"long":1996},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e932bee-a92f-4f90-86a3-6b21388df30e","sequence":{"long":1999},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d197f02-d45f-47e4-a397-5e624dc8f818","sequence":{"long":1998},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e373cbb-4f06-408b-b3ab-e58e41a637b9","sequence":{"long":2001},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb4054ca-85b8-4df2-bc35-0f197330e608","sequence":{"long":2000},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ef6c362-bd9b-4763-bf05-a9b6bca7b51a","sequence":{"long":2003},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d92fbe3-4ff4-4a3b-8614-ef14c0d57f82","sequence":{"long":2002},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9166abd2-890c-41ea-920d-1dbd72c706b5","sequence":{"long":2005},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60f8fee7-b670-47c7-8e89-b8f3259093d1","sequence":{"long":2004},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f92081cd-2dc7-4578-bb7d-6ed5b54d8ed2","sequence":{"long":2007},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ea0854f-210f-42ec-ab73-c6d3275ca51b","sequence":{"long":2006},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16912be2-558d-4519-95ce-7ce4c5f3b75f","sequence":{"long":2009},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f067a839-1132-4b6e-bb29-6703ec4bc066","sequence":{"long":2008},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c027c1e-10d9-43f7-87bd-49734a9b0c55","sequence":{"long":2011},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd6a5534-f932-426f-8d6c-a505c09df252","sequence":{"long":2010},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f08c808d-f670-4dad-8753-088feecea36f","sequence":{"long":2013},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c4624a7-69ab-466e-8945-870c9ce0eee1","sequence":{"long":2012},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d305a2a6-6e56-4217-8e62-d5c58b1040ac","sequence":{"long":2015},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba14d409-17bb-4eaf-895d-4fd1c1c9ba99","sequence":{"long":2014},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01568927-35d6-4797-8c94-3455ff01964e","sequence":{"long":2017},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"213d16d4-8bce-4ac4-9a8f-74f9e1ba7c3b","sequence":{"long":2016},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79ce225b-1423-4c6c-9408-596834b71368","sequence":{"long":2019},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d399d3cb-56b5-41ec-91d4-ed84cff56dd1","sequence":{"long":2018},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42177ffb-b003-424a-b86c-2974a82b1cf4","sequence":{"long":2021},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8745ea2-a35b-44c4-999b-af4beb5d36c4","sequence":{"long":2020},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16c7c637-33af-48ee-b2e4-7107b2e19242","sequence":{"long":2023},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31e535c1-e145-4095-a444-cda833e4091e","sequence":{"long":2022},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c21a9b06-d30f-4a9e-a5e7-855f9a1d2fba","sequence":{"long":2025},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70fb0bfe-8612-4651-a7fd-1b85bd660a92","sequence":{"long":2024},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8dcce5b-c8be-42a4-87bc-3a55df881aea","sequence":{"long":2027},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e78eeb00-cfa4-44a3-9a31-5a12b5333542","sequence":{"long":2026},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39e99494-6c62-4247-8299-ac43b3f0dcc4","sequence":{"long":2028},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afe7196f-c08f-4442-860c-e1e388ab8596","sequence":{"long":2029},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63b6d664-31eb-445b-90b6-57616d3dde5d","sequence":{"long":2030},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7ea93e2-293f-4177-a7e6-6a2dae7a76b1","sequence":{"long":2031},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4628},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0f54678-4dcd-433f-9ccb-30d2a57a2680","sequence":{"long":2032},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70f2103b-7fef-4740-8882-0fa15df42b44","sequence":{"long":2033},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4681},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ecf4492-6b49-4740-8965-503860378abc","sequence":{"long":2034},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81e4864d-42f4-40ae-8369-9d9e80ce5acb","sequence":{"long":2035},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f62db302-1a22-4053-9f56-db61dd6c4692","sequence":{"long":2036},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4298},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bc996fc-04d2-4985-b64c-c068ac9122c5","sequence":{"long":2037},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4351},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb8a0d3c-f6dc-4da2-8b26-59ef3ffe6b78","sequence":{"long":2038},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ee89b62-9a78-4f32-8717-3b90d6f72739","sequence":{"long":2039},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5375c885-24ac-43d2-b615-dff8da532d53","sequence":{"long":2040},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3467458-9772-43b6-b1ef-12e9550bc7ac","sequence":{"long":2041},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4787},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a20eba3-6623-41f1-a340-f159e8e79b73","sequence":{"long":2042},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4840},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0de62943-ecad-4fe7-b278-4c1fbf0591cf","sequence":{"long":2043},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b852e97-db13-4358-8344-846d4b61a2ee","sequence":{"long":2044},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f94b79f7-3475-4571-98f1-60e55b0d870a","sequence":{"long":2045},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d739dc7-3af4-499d-b4c4-b7f1d9f97f3b","sequence":{"long":2046},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4396},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3198d8ae-48a5-4c64-88ac-8c128ef8493e","sequence":{"long":2047},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a9085ff-4ab1-4e2e-a956-e17741ff6e5c","sequence":{"long":2048},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ef53407-0693-46b8-a869-ca42f5ac8438","sequence":{"long":2049},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f1bfe9b-bfb7-4a7b-9df3-76dd00aa2a60","sequence":{"long":2050},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4087},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c00f1a2-755b-4bb4-b39d-e6d69e2362a1","sequence":{"long":2051},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f06fcba-9d15-4aea-b23f-3ac97e388157","sequence":{"long":2052},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59d2f6af-1789-47dc-ae7a-8477218ffe58","sequence":{"long":2053},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f95f80c5-d018-4240-99f4-15c46516e1af","sequence":{"long":2054},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4338},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"411996ad-6341-4473-8d43-591c5fd9da87","sequence":{"long":2055},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cedd90e9-159b-456c-8814-a8bd107f47a0","sequence":{"long":2056},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2aad57d1-ff8d-4741-8e60-853ba075cc69","sequence":{"long":2057},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb0678fe-a8c3-4e73-a401-94d0683e40f7","sequence":{"long":2058},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4824},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f28e0186-2469-49e7-aded-ad883601af6a","sequence":{"long":2059},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6218e02e-74ad-4cfc-adff-365504cee79f","sequence":{"long":2060},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"333c63c2-1fde-4a0e-8279-e6a2ca012033","sequence":{"long":2061},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8f644e5-f15e-4f56-b506-fa91ebb1a7fc","sequence":{"long":2062},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4264},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a58fb7f-40bb-4c9b-8640-4c28baa4efd6","sequence":{"long":2063},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"019b10b5-2575-4e55-8f1f-bf63a12c3507","sequence":{"long":2064},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fae26f48-a706-44b6-a8be-0902cbba052b","sequence":{"long":2065},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b90c9fc9-73d8-45b2-9923-8c8afab7e560","sequence":{"long":2066},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3913},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a379932-eb11-4465-a1f3-0d04739d7aba","sequence":{"long":2067},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8554a7ef-b295-479f-a027-d9ceb7253ea2","sequence":{"long":2068},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ec30807-28e2-4b09-aa3c-59ad638e0662","sequence":{"long":2069},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebacb107-d261-41fe-87f5-65233e7492a0","sequence":{"long":2070},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4723},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60d2b183-44b5-4160-99f8-f80bde3e9895","sequence":{"long":2071},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02e61314-b3e1-493f-8b76-af6cf3cf09dd","sequence":{"long":2072},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9ba395f-b3b3-4f84-ab3b-27c379d77dd4","sequence":{"long":2073},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bec6ed6-5e82-482a-98f0-8796c813ed69","sequence":{"long":2074},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3899},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ebdfd8f-1552-4be1-981c-43209bc51395","sequence":{"long":2075},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b448183c-ff0a-4ec3-add6-27788faffaaa","sequence":{"long":2076},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0eee5ccd-3d48-4680-86a6-26d3430d1593","sequence":{"long":2077},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5ea239e-2ea0-44bf-b1d3-e04b838e2154","sequence":{"long":2078},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4199},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e437f334-7da8-4cf6-9755-6561f11a763a","sequence":{"long":2079},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08feb335-c36f-4488-85b2-161a47de82a2","sequence":{"long":2080},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7a77c39-dcc4-47e8-8522-1b3621b2b01a","sequence":{"long":2081},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34d2f7a0-9666-434f-961e-cb58dccbb913","sequence":{"long":2082},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3977},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59ff6b12-786e-49c6-b891-15a2e83d894d","sequence":{"long":2083},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"697748cf-a139-482e-91db-9cbde7e5c866","sequence":{"long":2084},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a454df5c-2d5a-49b3-812e-49d5fd340f97","sequence":{"long":2085},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75d283c9-12ae-4e00-b8ea-099f0b4ea7ac","sequence":{"long":2086},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4245},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7004dde-6e46-47bd-aca3-98043506f1dd","sequence":{"long":2087},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dcb3c01-012f-48fa-9f50-b2afbbdef7f6","sequence":{"long":2088},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bddb00ed-58ff-4082-b504-3238bea43096","sequence":{"long":2089},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faf89c66-15c1-45d2-995f-11aa43e021e2","sequence":{"long":2090},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4214},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffc6dec7-4798-4412-8275-8a20136f920b","sequence":{"long":2091},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8526b2ec-5694-4b64-b9a0-696ae36e68c1","sequence":{"long":2092},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc53c1d1-4a8c-4de2-be8d-ad34709b737f","sequence":{"long":2093},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5913b26f-ff58-4e79-bd0b-434f776a56b1","sequence":{"long":2094},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4299},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ad0e837-013a-4a2c-bd79-d48cb0e390af","sequence":{"long":2095},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a325187e-3b5f-4bba-bc73-985894264029","sequence":{"long":2096},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ca8e5d9-46c0-4940-8c49-af415d570a9e","sequence":{"long":2097},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24a050eb-b998-43b6-a7e2-21fbc3a3937c","sequence":{"long":2098},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4570},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0321153a-5109-475d-85d7-8e12b021ef80","sequence":{"long":2099},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41467635-c034-4f1f-9765-b526d31fd03d","sequence":{"long":2100},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f6b0858-a564-45ed-af1a-28d6a219c1a5","sequence":{"long":2101},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a018ee4b-c0ca-45fc-b504-b4c465aba224","sequence":{"long":2102},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4449},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"611442fd-5705-4f18-ad56-905c91ac151e","sequence":{"long":2103},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43f84775-8249-4b46-9474-713b9541c37d","sequence":{"long":2104},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"026fbc9f-1209-44d7-ba90-c60f548a9e8c","sequence":{"long":2105},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3945},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f3807a6-e08b-4a6c-aab5-32f60d9363f9","sequence":{"long":2106},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b39f9092-7284-4b26-a439-0632c15ea82a","sequence":{"long":2107},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6065a5aa-7907-42b9-a02e-170583248a39","sequence":{"long":2108},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b49bfc29-2814-49ce-abd4-d0d14916719c","sequence":{"long":2109},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4109},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"533b148f-73ed-4006-a255-0cb9a45fd73e","sequence":{"long":2110},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"976122e9-a503-40ec-9c4f-c4a660702106","sequence":{"long":2111},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcea2f08-49c6-4e21-bd37-4d9f5525b257","sequence":{"long":2112},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03af6f6c-a1ce-47df-b5a3-01bfc4ae0502","sequence":{"long":2113},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5021},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db1f486d-3661-4d1a-9880-1415c23a9379","sequence":{"long":2114},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4855fe0-e431-499e-9ef8-736c6273999f","sequence":{"long":2115},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"252fe26e-7bbc-420e-8614-4812aad02153","sequence":{"long":2116},"type":"EVENT_SENDTO","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"408","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"250e8ae9-e430-4c0a-b463-36c42dd7e834","sequence":{"long":2117},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"408","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3c2ca9e-f63d-4cd8-b220-6ed86d231256","sequence":{"long":2118},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff71563a-a3d8-4a63-8e79-d9299ae6d88e","sequence":{"long":2119},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918144488663,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bac16bc-f5f0-45f1-9500-330959269742","sequence":{"long":2120},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918144488663,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66bf5830-5e9d-43c5-b62a-cf23364527cd","sequence":{"long":2121},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918144488663,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4140},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18d62695-8bec-4c86-b552-c02e1f67b87a","sequence":{"long":2122},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf730d04-6aed-4e45-99c9-5ddc6233320f","sequence":{"long":2123},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c48b4733-cb8a-4f19-9ff8-ea3fa4acd41c","sequence":{"long":2124},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4391},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05a48135-372d-441a-a464-81b4e94cfd9c","sequence":{"long":2125},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b611d9cf-b366-4d33-bc3e-b38a33073be6","sequence":{"long":2126},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cbf7d19-ccd4-4ce1-9946-cc8d341f97bf","sequence":{"long":2127},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4877},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"492bce53-b278-4149-b6b3-c5eee171540a","sequence":{"long":2128},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918167986826,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fcbad8e-e363-44ec-b1e3-c6f03d4d225d","sequence":{"long":2129},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918167986826,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf94f0c9-4fe2-4960-8185-94b1d1287d98","sequence":{"long":2130},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918167986826,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4317},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66e084e9-cccc-4594-88b2-64a61a7f20fb","sequence":{"long":2131},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f64e252-223f-4582-b5f8-9a504f226c17","sequence":{"long":2132},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8148c95e-a843-4024-bde2-139943aecde2","sequence":{"long":2133},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3966},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d0c695c-65c4-4865-863f-5d796ab5170b","sequence":{"long":2134},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cdedcd3-7ecc-4af4-b855-f2ad7e006316","sequence":{"long":2135},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b8ae925-bb12-4644-9c61-5542c9c2dd36","sequence":{"long":2136},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4776},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c465c11d-7dab-4222-85e7-5eed42bbc2ae","sequence":{"long":2137},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918188618677,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efc5853a-ec63-4323-bcc5-a3871f608d2e","sequence":{"long":2138},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918188618677,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01227fc1-be29-428d-912b-fc617aab79e8","sequence":{"long":2139},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918188618677,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3952},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9de4204e-7dca-43a2-9eb2-4a46fe3b1cce","sequence":{"long":2140},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"431c8cef-b82c-4375-92cf-02666b178174","sequence":{"long":2141},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5a77c3d-761f-4d10-895f-cdfd7ced1331","sequence":{"long":2142},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4252},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8a095d2-e2d9-4015-a517-472cbb90f1cd","sequence":{"long":2143},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcfa3041-db9b-49d0-b6c4-41f9807f2107","sequence":{"long":2144},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9446eb58-6f63-44e5-a18c-0c76f18a6b60","sequence":{"long":2145},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4030},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b6524ad-b63d-475a-83d2-5c9494500e36","sequence":{"long":2146},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918204342280,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41b2ab2f-7786-4242-97c9-5b82f76688af","sequence":{"long":2147},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918204342280,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b474d8c1-1439-4c85-a3f8-df6b5afde6aa","sequence":{"long":2148},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918204342280,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4298},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3aff13cc-efab-4867-a2e6-9ac3e7a7a72d","sequence":{"long":2149},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918216018019,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fa62105-fb44-4769-be30-89bfc4b83a26","sequence":{"long":2150},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918216018019,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a261b67-7bf4-4223-b871-bb8954a61b2f","sequence":{"long":2151},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918216018019,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4267},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bbcc527-e40f-46f8-82a8-d2549b0346aa","sequence":{"long":2152},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f79bcdf3-6f49-48ce-b3da-9d8c353914fa","sequence":{"long":2153},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5fd6ba2-ac71-4fcf-887a-9b4062351d20","sequence":{"long":2154},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4352},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bafee2c4-fff9-479a-a0ec-9dffc914d3dd","sequence":{"long":2155},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7f87a6b-f322-43f1-833c-3ab29a23c885","sequence":{"long":2156},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e63ffd39-056a-4817-b2ac-7580c25e5830","sequence":{"long":2157},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4623},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bc5874b-b85d-4676-bbaa-880a7d9519b5","sequence":{"long":2158},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918234217398,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d6dedb8-0a48-449b-ab70-b3e06c79ce40","sequence":{"long":2159},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918234217398,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a821e6f1-3887-4e71-875f-c064253a751c","sequence":{"long":2160},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918234217398,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3998},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ea72f1e-4382-469b-8bd0-c08381b89948","sequence":{"long":2161},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0553c8e-67b1-438b-b30d-b437d0a56492","sequence":{"long":2162},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ccba2a0-103d-4541-8b29-90977431448f","sequence":{"long":2163},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4162},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0093115f-47c2-48b8-a329-edfc5c748ecd","sequence":{"long":2164},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b82566d8-58d3-4b11-99bb-9023c2c29291","sequence":{"long":2165},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"483dac4e-2722-4945-8732-5ae651416aa5","sequence":{"long":2166},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5074},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d03b695-f0d1-4dc1-9829-4dc57fd91db6","sequence":{"long":2167},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918253911946,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b0ff71f-1f13-4a10-abc0-a4b7daf6e201","sequence":{"long":2168},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918253911946,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9274cfe-6a73-41f9-8132-f78f6602ae1e","sequence":{"long":2169},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d604de19-aa70-4aa3-bcc3-8ae70ac3141f","sequence":{"long":2170},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d63d150a-1633-4fa4-a640-9bc3bbf1a6d9","sequence":{"long":2171},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"247ce681-cf18-45d9-8d44-fd17bec11f23","sequence":{"long":2172},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e0c81a42-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e0c81a41-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"d3a4ecf8-7a30-56cf-8498-3c77cacf4b5a","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"e0c81a41-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"505df22e-e2f7-4bcf-8c0c-ca4ca2d5c836","sequence":{"long":2173},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d3a4ecf8-7a30-56cf-8498-3c77cacf4b5a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fa0a77a-b078-4065-befc-e737f62896c6","sequence":{"long":2174},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":551},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e0c820b9-467a-11e9-aea9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1298,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582918266852861},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53b29648-5103-4016-9901-14e4b683ad45","sequence":{"long":2175},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1298","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1298","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e0c83648-467a-11e9-aeaa-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"e0c83648-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"004d3ae2-cffc-5c32-a25f-5454b8736020","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"e0c83648-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"e0c83648-467a-11e9-aeaa-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca4ed50d-afd8-405a-b98a-ed6a5075e231","sequence":{"long":2176},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"004d3ae2-cffc-5c32-a25f-5454b8736020"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","ret_fd2":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e0c83aad-467a-11e9-aeaa-080027fc76ba","type":"SUBJECT_PROCESS","cid":1299,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582918266852861},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e63d778-1875-41d8-90ef-da9c2e79bea7","sequence":{"long":2177},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1299","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1299","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"e0c8424d-467a-11e9-aeaa-080027fc76ba","type":"SUBJECT_PROCESS","cid":1300,"parentSubject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582918266852861},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d1d1078-9417-4bd3-a8db-0108b246e8bc","sequence":{"long":2178},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1300","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1300","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"281dc5c3-4ae2-4055-b30f-cb0c90c0bbd9","sequence":{"long":2179},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"149cef45-953c-49bf-93a9-1adf89cd263b","sequence":{"long":2180},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de3a34c1-0b17-8152-970b-4c2cb281885f"},"predicateObjectPath":{"string":"/bin/cat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582918266852861,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"cat EXFILTRATION_FILE.dat","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53423dfe-0d42-42de-a09b-be843bb34834","sequence":{"long":2181},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec177688-61cd-4839-8684-db8166db762f","sequence":{"long":2182},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4d8c6be-7ac8-42f6-9ad1-31d4871af187","sequence":{"long":2183},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05c82436-bb83-4bc4-aab0-f546131314b4","sequence":{"long":2184},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e7451145-d4d2-9753-92d4-25f153976db4"},"predicateObjectPath":{"string":"/usr/bin/nc"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582918266852861,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"nc localhost 54321","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26677ecf-5249-4b23-a702-5f5a11ef6885","sequence":{"long":2185},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00437253-6af2-4172-9979-83935f949092","sequence":{"long":2186},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e22e8c53-f3c0-4e40-9f57-ee347a75ae7f","sequence":{"long":2187},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6dda077-fbc4-49cd-a321-c204e2a197d6","sequence":{"long":2188},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6288856-84d4-4792-a6e2-2d9334c24d79","sequence":{"long":2189},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33d25b77-fb42-489b-92f9-3340f4ef10de","sequence":{"long":2190},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a00f2982-7782-4800-9f05-47f3a1a7c67d","sequence":{"long":2191},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"932f2395-4d01-4aff-8053-2a47303883be","sequence":{"long":2192},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c98a60e7-3aef-4fbd-aafa-0c153dd31121","sequence":{"long":2193},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41b23079-f0ab-4114-8653-f322f26d8304","sequence":{"long":2194},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eee99120-bec7-47f4-9e2d-48b55386015b","sequence":{"long":2195},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de2e369f-345a-406a-8f00-a65318a5a64b","sequence":{"long":2196},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c11c9084-015e-41a5-84e9-f296f3e53aa7","sequence":{"long":2197},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"233a71d1-286f-4adc-bbae-b390efc36d95","sequence":{"long":2198},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f45c54d-23dc-4247-ab41-3e5ca0d76d73","sequence":{"long":2199},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a3fd0a0-68a8-48c0-bd02-f3eed15c8f23","sequence":{"long":2200},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e133371-d712-4e89-b4f4-4eb550853544","sequence":{"long":2201},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1fe07b2-a119-4c19-8a5c-d4b88d7aaf00","sequence":{"long":2202},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9549f5a1-8058-40e5-ac5b-ef0a0f464d53","sequence":{"long":2203},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71dd1b99-767d-48ac-a362-a57f30a451fe","sequence":{"long":2204},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a49436b-ac19-474b-b67a-420b6d5490d5","sequence":{"long":2205},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f45761e-748d-4585-9c8d-4b6b11a22962","sequence":{"long":2206},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64029c67-3e2e-4db2-839b-8807dbf0c503","sequence":{"long":2207},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"630cdde0-4bf4-444b-8bbf-9ff6077e37cd","sequence":{"long":2208},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"233136db-67a4-4d03-af7e-f72dbac5f325","sequence":{"long":2209},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"166fe6ed-f5a1-4390-bff5-ae0de4159f60","sequence":{"long":2210},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35a6870c-79d8-4997-87f7-cd682879da5b","sequence":{"long":2211},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06b52c0d-d5e9-42ac-8d8b-9afa01d96afc","sequence":{"long":2212},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50631dd8-a8c3-46cb-b6d5-49ef4b7be321","sequence":{"long":2213},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c03deafb-ad5b-4fb9-822f-cf9dc77db447","sequence":{"long":2214},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"347b2fa8-3575-440d-888b-2de2daddc37a","sequence":{"long":2215},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"decc8695-68b0-4e1a-a1b3-f33c99ab09c6","sequence":{"long":2216},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"664ed826-52b1-4553-b560-14342b91e876","sequence":{"long":2217},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26c5ccf7-6fd3-4b74-bf25-50fdcdd07565","sequence":{"long":2218},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a47d7a09-0c40-4c32-8615-2b9eb8130cde","sequence":{"long":2219},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e207b5a9-e0ef-4c85-be74-fda3465c7840","sequence":{"long":2220},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4e6144a-e3dc-4bce-8d17-f1059cd4b206","sequence":{"long":2221},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e6d1c5f-7f33-44e7-9976-d6d81b883afb","sequence":{"long":2222},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf439a49-5efb-4cea-a660-81bf56d9d3ae","sequence":{"long":2223},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2416},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89cbf000-b42b-4e2c-9fda-5f780da3dd05","sequence":{"long":2224},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2416},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f93f276-88d7-4895-ba5b-79661ec0ba6f","sequence":{"long":2225},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"919a3dcb-dfa5-4e09-97b6-37ce4f4453fa","sequence":{"long":2226},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe3a517c-48fe-4807-a4ec-b479beaa72c1","sequence":{"long":2227},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f79bcdd-f994-4d30-a7d3-09e042c15870","sequence":{"long":2228},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be374402-925e-451b-9189-9aaa801ca6eb","sequence":{"long":2229},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69593055-7ce2-47aa-b748-de4b85e8037c","sequence":{"long":2230},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7415c8f2-8962-444f-9976-a1ef8645c207","sequence":{"long":2231},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0837c861-451c-4408-916e-faf882158350","sequence":{"long":2232},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d92bdb2-0b8d-4bc8-ae74-15f465cd95d1","sequence":{"long":2233},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"735da16f-e0b6-45c4-98aa-e756c50324a3","sequence":{"long":2234},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1281f5eb-1bd7-4947-96d4-1da925170018","sequence":{"long":2235},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":{"string":"/lib/libipsec.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a115b4d3-a750-4b36-8319-527c4ff6661e","sequence":{"long":2236},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"421d1195-62c1-4d13-932a-539cc82b8719","sequence":{"long":2237},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb8eedbd-20e0-467c-a3d9-648cb91973f2","sequence":{"long":2238},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afa0c24b-433a-4827-8edc-59a6406f26d0","sequence":{"long":2239},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0918373-a174-4662-a468-2c261a9192ec","sequence":{"long":2240},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"387c2f2b-0382-487c-943c-c82b69f82847","sequence":{"long":2241},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"880f0407-6c39-49db-aef6-f2c03f7b382b","sequence":{"long":2242},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4db9cc6c-9a20-4893-a891-f6ff7ab063df","sequence":{"long":2243},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e460ef7e-0b38-4347-a23b-5dd0dec5af94","sequence":{"long":2244},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2449408},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68b7a635-4f4e-4b13-b7b2-c07b9d1acc7f","sequence":{"long":2245},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2449408},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0257f4e7-7216-43de-ae5d-95a296a99bbc","sequence":{"long":2246},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38915c1e-1380-4770-afe6-179fb13eba05","sequence":{"long":2247},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee1b9a2a-68ca-4771-8237-41c63e71e3e0","sequence":{"long":2248},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1b899f2-94f3-48f0-ba1b-ee6d54ac5713","sequence":{"long":2249},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b32ebde-4ba6-485f-9acb-249dc6a74065","sequence":{"long":2250},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2461696},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c862e6fa-21e6-4df6-a1c7-03178d560a6d","sequence":{"long":2251},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2461696},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"445fa377-d1c0-4aeb-9b5b-3263d56bee25","sequence":{"long":2252},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2977792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b698f39a-7ffe-400c-9dde-ef0accb6e180","sequence":{"long":2253},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2977792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e338596-5b4d-4277-95d9-7df7141b889a","sequence":{"long":2254},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4308992},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f2f40f1-a35e-442d-83e4-dc74cebe7c3a","sequence":{"long":2255},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4308992},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ecbc54c-177d-4833-8e8a-546298b4076b","sequence":{"long":2256},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fca3fbc-0a33-4635-835b-a314ecc55e82","sequence":{"long":2257},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93e7f45d-48df-47f3-88e9-ca9376044a0d","sequence":{"long":2258},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e06281a4-f58c-4fa3-97cd-97b73b5f6607","sequence":{"long":2259},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b21662e-1f24-484e-a50b-4a79376977be","sequence":{"long":2260},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67f64a3a-3439-41a8-b18f-9a2db2045949","sequence":{"long":2261},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de0013b4-1f14-4e19-b34c-cd85f1e9569d","sequence":{"long":2262},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ad91675-ee0c-4de5-9b19-e05a6cde9710","sequence":{"long":2263},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68c81015-7a99-43a4-b9c1-d2e2f5a6c786","sequence":{"long":2264},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":{"string":"/etc/hosts"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"652d4c1e-fb18-49a5-bec6-37515cec41db","sequence":{"long":2265},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1031},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e648aac8-c187-4075-a92e-7d9f7967d353","sequence":{"long":2266},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c35ac37-df20-4506-857b-e49fce714f3f","sequence":{"long":2267},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"e0c954e1-467a-11e9-aeaa-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":null,"localPort":null,"remoteAddress":{"string":"::1"},"remotePort":{"int":1},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e14a3d4-a1e9-49d3-bb47-0a51160bb4c4","sequence":{"long":2268},"type":"EVENT_CONNECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e0c954e1-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","address":"::1","port":"1","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94bac8a7-b32f-492a-85b2-0e69a0a2f16e","sequence":{"long":2269},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e0c954e1-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"e0c95ac3-467a-11e9-aeaa-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":null,"localPort":null,"remoteAddress":{"string":"127.0.0.1"},"remotePort":{"int":1},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"964c00f8-febe-4b2f-9534-209887dba57c","sequence":{"long":2270},"type":"EVENT_CONNECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e0c95ac3-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","address":"127.0.0.1","port":"1","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e2c00d7-ae3c-45d7-b734-cab6d6d2b1fd","sequence":{"long":2271},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e0c95ac3-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"e0c95f94-467a-11e9-aeaa-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"127.0.0.1"},"localPort":{"int":58335},"remoteAddress":{"string":"127.0.0.1"},"remotePort":{"int":54321},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"e02dc1a3-467a-11e9-aea9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"127.0.0.1"},"localPort":{"int":54321},"remoteAddress":{"string":"127.0.0.1"},"remotePort":{"int":58335},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"e0c96387-467a-11e9-aeaa-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"127.0.0.1"},"localPort":{"int":54321},"remoteAddress":{"string":"127.0.0.1"},"remotePort":{"int":58335},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d630f0c1-a843-47e0-bbc2-685b7f69c9f5","sequence":{"long":2272},"type":"EVENT_CONNECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e0c95f94-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","address":"127.0.0.1","port":"54321","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfec0cb1-022a-4085-b554-8e0a39c27b96","sequence":{"long":2273},"type":"EVENT_ACCEPT","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02dc1a3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"e0c96387-467a-11e9-aeaa-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_accept"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"4","ppid":"1286","address":"127.0.0.1","port":"58335","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dedcc390-41d0-4031-87c8-4de7ac1beeed","sequence":{"long":2274},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4a7e215d-fecb-7d56-8bfe-3c48a67db43b","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79ee6af3-c356-4f54-8795-28894d4d62e8","sequence":{"long":2275},"type":"EVENT_EXECUTE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"4a7e215d-fecb-7d56-8bfe-3c48a67db43b"},"predicateObjectPath":{"string":"/usr/bin/gzip"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582918273899564,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"gzip","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43581207-aaf1-4a57-b977-42db034a608a","sequence":{"long":2276},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96c4e841-45d7-42b4-9ef3-289184977cca","sequence":{"long":2277},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6d1cda1-e2d0-4980-98ce-056593ffebd8","sequence":{"long":2278},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd7c89f1-dfc5-4dfe-ad28-68c0840a4f2d","sequence":{"long":2279},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42848b72-7a0f-4a69-8de2-3086af98e842","sequence":{"long":2280},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"496a2761-b4e8-4c8c-936a-a9cd623e272b","sequence":{"long":2281},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d58b256f-96ac-433b-b8c8-7fccf58eb7e8","sequence":{"long":2282},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc1ccabd-3721-4d34-aa5b-5d8955582492","sequence":{"long":2283},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":{"string":"/lib/libz.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7943e1e-cf93-4c55-a766-c47ff70b5f8d","sequence":{"long":2284},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"768ed833-ba0a-4516-9610-167373d63a3e","sequence":{"long":2285},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e212d9c-ac82-4cff-9ea4-93aa46670c75","sequence":{"long":2286},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30949606-f326-462f-9400-a1294d66708f","sequence":{"long":2287},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46dfd1b7-a454-4af3-b668-e680bcc760a4","sequence":{"long":2288},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2465792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec7c6546-0733-446c-baa8-cc36dedffb29","sequence":{"long":2289},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2465792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"206b7ae9-6768-4b8c-b9c6-2621eb98b78b","sequence":{"long":2290},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2535424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d768c10e-f693-4e85-b188-f32b19102695","sequence":{"long":2291},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2535424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91177b3f-0959-46d5-b739-3c09184ee50f","sequence":{"long":2292},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ae7093f3-2081-df5b-8120-61c30bdf0c57","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99284945-2451-49ae-b48a-406f3e7b883e","sequence":{"long":2293},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":{"string":"/usr/lib/liblzma.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17826ad3-8b60-423a-94d8-e2e5e0d6768e","sequence":{"long":2294},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9cd7316-c284-41c7-9b6c-37ebdd6c10c7","sequence":{"long":2295},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3c1b28e-de91-44ec-81a7-f1847257ff6f","sequence":{"long":2296},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50489e37-9266-4cf1-aca4-b38d24deeb03","sequence":{"long":2297},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24aaaece-ccbf-4f4a-b137-2c9e641e5f47","sequence":{"long":2298},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e10191dc-37b4-40ba-a0a7-e6c5e50b69c4","sequence":{"long":2299},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97b37d30-46f3-4d9e-a24c-bd9a4f3b61aa","sequence":{"long":2300},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c46e962e-1941-4a38-83cc-d91ba703ea05","sequence":{"long":2301},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4d1c156-6658-4c73-a938-d4338d6d6856","sequence":{"long":2302},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f18526b4-6913-ba55-9369-356b45ba4751","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05f031a5-bdf5-4381-92d9-b149e80799f2","sequence":{"long":2303},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":{"string":"/usr/lib/libbz2.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95ab9657-5657-4476-8333-baa9fc425bca","sequence":{"long":2304},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c5c626f-0343-432a-beca-00d74771be9e","sequence":{"long":2305},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06730870-cfe8-4d7b-a37f-4715a762626a","sequence":{"long":2306},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec95bf1f-87c9-401e-ba28-5dde4e66e409","sequence":{"long":2307},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52299402-0eea-46af-a24f-62586b530a36","sequence":{"long":2308},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2732032},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ab5ca3d-87ba-4d4f-90c4-f0912615a52c","sequence":{"long":2309},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918573865723,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":224757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b75bf5ab-fb49-4268-a129-5ef711d5d739","sequence":{"long":2310},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa417ab3-663a-4990-9a3c-1db9abc0c29d","sequence":{"long":2311},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"409","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6055965e-5522-4982-830e-0c4f0e8ec9f3","sequence":{"long":2312},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"410","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a9f6a21-f5a7-44e9-afb6-60811f4a9dbc","sequence":{"long":2313},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"411","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0083ee1c-f3c2-4ecf-95ab-f937b3d9c99e","sequence":{"long":2314},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"412","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3f2f107-0d52-44e5-8053-862ef0304977","sequence":{"long":2315},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"409","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5a07849-301b-4f3c-a41f-5833134b997c","sequence":{"long":2316},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"410","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"290ff225-b564-4e01-ad9b-8542b161a7df","sequence":{"long":2317},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"411","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b4af486-49fa-416a-937c-4949728dce40","sequence":{"long":2318},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"412","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bac15ec3-847a-41f5-887c-7a095cc48691","sequence":{"long":2319},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919584302803,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":225933},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"09806a61-b72a-5859-aab7-43fff9583fdc","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"b57805cf-467a-11e9-ae92-080027fc76ba","type":"SUBJECT_PROCESS","cid":1141,"parentSubject":null,"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65e9e688-aa69-45d0-bcc5-76356e53924a","sequence":{"long":2320},"type":"EVENT_OPEN","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":{"string":"/etc/cron.d"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920014838623,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00e808"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07b1afa4-d95f-4dfd-bd27-e61c090b1d01","sequence":{"long":2321},"type":"EVENT_CLOSE","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920014838623,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c3bf4c3-5be4-451a-a0b2-81b703c73215","sequence":{"long":2322},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":225933},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f6e9d3d-45cb-44d8-8d3a-db972d148b17","sequence":{"long":2324},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ec37d5c-54f4-47fa-9b5e-06c0fdfa0b0f","sequence":{"long":2323},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b18d96fe-6368-451c-ac16-e37332039ec8","sequence":{"long":2326},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95b22489-52d3-4c67-b389-eecadb8ad15d","sequence":{"long":2325},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bad4bc0-c7cb-410b-abcc-5ab8cfe9f59e","sequence":{"long":2328},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e21ac7e6-506b-45b7-a372-d083ce524aef","sequence":{"long":2327},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88020731-1c43-4c08-9abb-e7d16e5be099","sequence":{"long":2330},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"230d4e1b-694c-4d71-8cd0-5ed05b620729","sequence":{"long":2329},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22c5eca4-a6ac-4811-a8ee-9ba460aa08bf","sequence":{"long":2332},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98e34c49-d9ee-4f5c-a6de-e96b1334d4bf","sequence":{"long":2331},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"928e797d-d6c3-4ceb-b5e4-fe2d10d5d91f","sequence":{"long":2334},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cd0c205-8cac-4688-bd2f-b67f89f8263f","sequence":{"long":2333},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c18e39c-241d-4194-9759-937de530e54c","sequence":{"long":2336},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2913d075-7e3d-4ac1-99f7-617bbbb9da6c","sequence":{"long":2335},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a62d9330-ad71-4ba3-97aa-39e75b758ca7","sequence":{"long":2338},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5677c3f-60dc-43b6-b58a-9ec151513e0b","sequence":{"long":2337},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c1d2c19-df17-405a-a1a1-a724a54e3079","sequence":{"long":2340},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1930e8f-df68-489e-bb35-abd325c0fe98","sequence":{"long":2339},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f169fe8a-dc7b-4f56-95ec-07df0e462242","sequence":{"long":2341},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca1ff134-1b15-4f03-9b1f-1e3b79e4d61d","sequence":{"long":2342},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f34d06df-c59d-4d49-a959-56b3f31d3a97","sequence":{"long":2343},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"477071b9-2bb4-4778-91cc-8a6c198398cd","sequence":{"long":2344},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3589},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d715a11e-659c-40e3-b5ae-152bc08843cb","sequence":{"long":2345},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f5d7256-7a4f-4b87-9a12-12bf35eae590","sequence":{"long":2346},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3642},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87b258e9-50a8-4b0b-ba6c-2b99d4656322","sequence":{"long":2347},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3d204ef-325b-49b5-93ec-42b895db32ea","sequence":{"long":2348},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3fcc2f2-3021-4578-93eb-ee9762b4cc1c","sequence":{"long":2349},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3961},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03fe2e8c-0f3e-40ee-b960-1130765628ef","sequence":{"long":2350},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4014},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38b293a8-7ed2-415d-877f-d34db5ace6da","sequence":{"long":2351},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1d57cdc-6528-4462-89e0-2517601ab6be","sequence":{"long":2352},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee5ccd79-3c75-4300-a7b9-adbd6f711560","sequence":{"long":2353},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c3d90b4-921c-4bd8-bd9b-8b38159d0d79","sequence":{"long":2354},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3861},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95558181-f775-4b71-bc90-cc8c23ca7940","sequence":{"long":2355},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3914},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"128a556f-8303-4f9c-bb56-267ae5654d61","sequence":{"long":2356},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e99b9a38-5015-48d9-8bbb-c5ea84333ba5","sequence":{"long":2357},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6500a46-ea71-4d50-92df-7a84d16cce65","sequence":{"long":2358},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afd98226-b1f2-4155-9286-b1933420f019","sequence":{"long":2359},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4183},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72efcefd-6078-41aa-9692-da35ad3c08dc","sequence":{"long":2360},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e5ddacb-c96f-4c2c-b680-b71cc7ab5f8b","sequence":{"long":2361},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8a014f0-d059-4595-ba6d-3a5490f23170","sequence":{"long":2362},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec34cefb-da69-4608-92d8-a9ed828a20c9","sequence":{"long":2363},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4589},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"143c1991-721f-4e18-83fa-959e9a56c0eb","sequence":{"long":2364},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"178a6363-9283-4e32-83e0-04ce81a1fb14","sequence":{"long":2365},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74a853d9-6c9e-4215-a753-2898aa97efe0","sequence":{"long":2366},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"710cb195-5318-4e57-8795-47db071c23b7","sequence":{"long":2367},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4294},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84f74ccb-e34e-4a1b-8f04-a9c15dbbf6ca","sequence":{"long":2368},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22dee195-1b90-43de-a227-4aa1ac01090b","sequence":{"long":2369},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfd8500c-99d6-40eb-8e05-c6fb0c99f19e","sequence":{"long":2370},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52d9467b-787c-4aea-b16e-438312ba0395","sequence":{"long":2371},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4659},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e1b6377-9832-47fd-9bdc-4201128f9363","sequence":{"long":2372},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"793ed198-2265-4678-b3a2-b74d13e00a1c","sequence":{"long":2373},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53056a40-33f2-4fd3-94af-c727696cee34","sequence":{"long":2374},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920594048818,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":230095},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7753d49c-0540-4fd7-a65c-ce4a0861e863","sequence":{"long":2375},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582921604408901,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":230461},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e219999e-0eb1-437c-8127-dac595596177","sequence":{"long":2376},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":230461},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb10c701-a209-4c39-bf3d-40ff114939ac","sequence":{"long":2378},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3938efa-7094-4f9c-8d29-099d6b435486","sequence":{"long":2377},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13434814-39a9-4433-b0d2-d551c3fda6ea","sequence":{"long":2380},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42e9fcec-e8b2-430d-8e41-cebbaf101720","sequence":{"long":2379},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91e557d9-4fd0-49fa-89e8-40f1c5c03471","sequence":{"long":2382},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc649557-4785-460f-b018-b871c7505632","sequence":{"long":2381},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d43d3adc-0636-4fc3-8d48-374adc9c9119","sequence":{"long":2383},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"392f1bc9-57d8-4886-a640-74c94ac1eaee","sequence":{"long":2384},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a301890-89b8-4622-8995-9fc5533a0f11","sequence":{"long":2385},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b872dc80-213a-40d7-bd6a-4f4b7c83dcc9","sequence":{"long":2386},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4158},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e48d8b50-03f9-43d9-ad21-dcd0c7bec612","sequence":{"long":2387},"type":"EVENT_WRITE","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"245e1cd5-4472-49e8-8d26-1274f1d09881","sequence":{"long":2388},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4211},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3609d234-3894-4df4-a13c-3d9763a728bb","sequence":{"long":2389},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47941585-51a5-4f2a-a8c9-28356b2178fb","sequence":{"long":2390},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af0da086-1dcd-4de5-ae19-130dd55eaf6a","sequence":{"long":2391},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":362},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80cc075f-689f-44c9-a4f8-0c02767497a6","sequence":{"long":2392},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":415},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3716b3f7-7b63-45b4-969d-e9db1f668281","sequence":{"long":2393},"type":"EVENT_WRITE","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64055126-91be-47bc-9dc3-2eb993d6b1d2","sequence":{"long":2394},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2d51484-2aa9-425b-bb32-f8776847de55","sequence":{"long":2395},"type":"EVENT_SENDTO","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"414","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c2c9a2f-132f-401a-84fb-d86ae2e5ebca","sequence":{"long":2396},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"414","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eda5bcbe-dad3-4c61-acd0-7312508d7b80","sequence":{"long":2397},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca574d8e-808f-4a6c-89f2-ab73a29f6ec1","sequence":{"long":2398},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922134392999,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79558ea0-ae63-4b0e-83da-1bdaa54a59b2","sequence":{"long":2399},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922134392999,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"852a3fc5-da4e-444c-88ab-715331833e38","sequence":{"long":2400},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922134392999,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d15d3fb1-9b1a-4fe7-87a3-dbf8e1275d8e","sequence":{"long":2401},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922134392999,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44d996a9-a4c0-4061-b23b-e6829e777173","sequence":{"long":2402},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52524f17-ca3d-464b-8593-03a5e3801883","sequence":{"long":2403},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"415","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83c53f23-1210-4a58-a2b3-535a70aded26","sequence":{"long":2404},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"416","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23f05333-4667-447e-8403-23f372515f90","sequence":{"long":2405},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"417","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4aa61744-dd17-4473-9b70-6cb20126ba57","sequence":{"long":2406},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"418","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19ac1547-f233-4874-aff2-98aff9c846c6","sequence":{"long":2407},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"415","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9736fbb5-717a-4a8f-8bb6-c044700d4815","sequence":{"long":2408},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"416","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31191828-c5d4-40cb-be47-de55417e646b","sequence":{"long":2409},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"417","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"010866f0-fcb3-4802-aa4f-0b99e3562af4","sequence":{"long":2410},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"418","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4057ad4-7f75-4c16-899e-93a04a9f961a","sequence":{"long":2411},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922614154307,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":233683},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"293c89ff-577d-4596-97f4-3f675a25166d","sequence":{"long":2412},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582923626871472,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":234048},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea22b20e-bf7a-47c9-b418-1ac4d6c86644","sequence":{"long":2413},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":234048},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44ebafa0-a3df-49ee-bee3-9d06440bcd6d","sequence":{"long":2415},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d628d54b-1654-4ebf-bf5e-7df9a865f1b4","sequence":{"long":2414},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d683e4d-3f8c-448d-8401-7e7ec4556649","sequence":{"long":2417},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"815a16b5-d081-415c-91ed-2cd2a38f8a7d","sequence":{"long":2416},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a2a8f12-a798-478d-904b-da3c0966af7d","sequence":{"long":2419},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"864b8f28-51b8-47a6-b123-5ce1f5b6b40f","sequence":{"long":2418},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afbfc27e-dea8-4a4d-bdcb-7345b4b9f57b","sequence":{"long":2420},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb6152ad-900a-49d3-94e7-f5153cf8eb99","sequence":{"long":2421},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fc09e97-99f6-416d-ae13-e068d6d52429","sequence":{"long":2422},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcf61385-49b4-4a14-b6d4-bddac9c2f275","sequence":{"long":2423},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3218},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15ce22bd-c691-4eff-bf5d-9ad6793d2328","sequence":{"long":2424},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3271},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fa1429c-3dd9-49b9-bd2b-70e0e9ee2d80","sequence":{"long":2425},"type":"EVENT_WRITE","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"177d4d60-64be-4750-90a5-b05ebe3538ea","sequence":{"long":2426},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5975cf1e-6ab9-4672-931e-c5c60b2480c3","sequence":{"long":2427},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bcba8c4-f255-4c5e-a551-6e03e6ca02a9","sequence":{"long":2428},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"979d9288-2bca-43bb-8b7b-d0a8caf8f34a","sequence":{"long":2429},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cba38984-286a-44e3-b3bd-ccb53aa5d691","sequence":{"long":2430},"type":"EVENT_WRITE","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"415a7f3b-b4ef-4fb3-9e5e-20aabe65e3ec","sequence":{"long":2431},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d112389-4c49-4f41-89a5-1f1551698f83","sequence":{"long":2432},"type":"EVENT_SENDTO","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"419","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08e42537-5959-4cb1-a711-9f4e53426a5d","sequence":{"long":2433},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"419","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51a0295d-7abb-4e49-8f33-4b8e06edae89","sequence":{"long":2434},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a13c61f2-600b-495a-bc33-534539c40c8d","sequence":{"long":2435},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14c891bf-79e3-4226-bb2d-ce7bcbaeade4","sequence":{"long":2436},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"916640b0-78d4-45cf-af7f-54f6d98018bf","sequence":{"long":2437},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b493b55-113a-413d-ac5f-a698c75b2918","sequence":{"long":2438},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af70b25a-02f0-4918-8b6e-c0c7366708df","sequence":{"long":2439},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924634267384,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":236454},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"654bbe8f-f191-41f2-bbd4-ad16e02f1d84","sequence":{"long":2440},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6b2c26a-bc72-4cac-9fa4-b080c8b2badf","sequence":{"long":2441},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"420","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a9310bf-624f-4f3e-9474-12111c5c4ebc","sequence":{"long":2442},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"421","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afa80429-088d-410a-8a1d-b19e5ba3aaaf","sequence":{"long":2443},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"422","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52e3854e-313e-475e-a0b0-e1de33b8e3ba","sequence":{"long":2444},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"423","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdbe934c-7d49-4c1a-a64c-c2e9702ea52a","sequence":{"long":2445},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"420","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d2f23bd-8424-406e-8cad-4fd1409b02e6","sequence":{"long":2446},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"421","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77bcd174-6186-406c-a752-1a78c4be4a68","sequence":{"long":2447},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"422","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42a41dd4-b175-4d48-9ef7-ecae8185bcfd","sequence":{"long":2448},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"423","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d86d112d-36a6-4216-848a-b1dc22cd744b","sequence":{"long":2449},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925644157193,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":237625},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32b3024c-349b-4232-b450-0a8e6ddb5a49","sequence":{"long":2450},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":237625},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bad6f872-f60e-4dea-b70e-578293b136af","sequence":{"long":2452},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"734c8c0c-2def-4560-b67d-7cf0ab9729c2","sequence":{"long":2451},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d66a9450-9c80-4478-b40a-13442d5700b8","sequence":{"long":2454},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69d8b9c2-eb55-429c-8158-de9df7ddaeb7","sequence":{"long":2453},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05cbc6e4-7b1c-41cd-9a4b-3b6c1adbff78","sequence":{"long":2456},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55bb208d-9aab-42a3-a1e8-c4549875e183","sequence":{"long":2455},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bd0ff59-2733-45ca-a1c6-93aa1e9ce928","sequence":{"long":2457},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d132586d-f9f7-4f94-b171-ff25b4266ee6","sequence":{"long":2458},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"159c6809-12c8-43cd-a79a-85271f7c2728","sequence":{"long":2459},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dac75621-a28c-4df6-9e18-1e5e272a755e","sequence":{"long":2460},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2402},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"822a2ad4-10cc-43cd-b7d9-56c301d1e25a","sequence":{"long":2461},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2455},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"700dc965-2675-4bf4-9006-1978aecb3e14","sequence":{"long":2462},"type":"EVENT_WRITE","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9abac39c-f8f9-45ab-acb7-8e6c465523db","sequence":{"long":2463},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccfd8dba-7505-4bdc-b187-df3f8ea03f14","sequence":{"long":2464},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a36bc5eb-b993-4c12-8c16-a1860c38d553","sequence":{"long":2465},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1167},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"823c91b3-3541-45bc-b76d-78699fd0ae27","sequence":{"long":2466},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1220},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88dbdf83-23fd-482b-8048-e059b7aacea4","sequence":{"long":2467},"type":"EVENT_WRITE","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc46ca3c-de4b-4003-a586-b8c23a5a3ee2","sequence":{"long":2468},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0a10346-a7d0-463c-bdda-1b11a56f3e64","sequence":{"long":2469},"type":"EVENT_SENDTO","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"424","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e0275a1-24cf-443b-9bd8-ef14b41c94d1","sequence":{"long":2470},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"424","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8820603-6007-47b3-9411-331f8a12f81e","sequence":{"long":2471},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"353df9ef-0e20-4097-8487-2f1a64d24f23","sequence":{"long":2472},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74ffe5bb-b833-4ace-913e-e40b6438b28d","sequence":{"long":2473},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f7710b6-1d3b-4be5-806b-21dcd5fcf66c","sequence":{"long":2474},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc325c65-4675-480c-abac-9b3d80d45b8e","sequence":{"long":2475},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2f9df5e-62ea-423f-b2a2-dc1f7770a1b1","sequence":{"long":2476},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926684053300,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":240035},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7fc2d4b-a6eb-46da-bd2e-54b409a4269f","sequence":{"long":2477},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582927713020504,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":240399},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71ba7b66-c0dc-4c3b-8ba7-7847ab8d9132","sequence":{"long":2478},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":240399},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"113f5d3a-e38c-48a1-991e-9fa3bdc5bfb8","sequence":{"long":2480},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23e44cd7-7fb7-44b3-8b91-294a319ae02d","sequence":{"long":2479},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"969555b1-4ddf-401d-9b47-41beef9f1525","sequence":{"long":2482},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4df772a2-75fc-4439-a77d-6bd463bd6675","sequence":{"long":2481},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec192f3c-8a5a-4f83-9144-cc5192ab2f29","sequence":{"long":2484},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e35bafcf-2192-4e33-b44f-3c9796abee22","sequence":{"long":2483},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43f1e4e9-0e03-4cad-b853-6fdf0e1fcfeb","sequence":{"long":2485},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"235f8fc4-0507-4ab8-9495-7c79d63d9c84","sequence":{"long":2486},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a06e7614-8daa-490f-86c3-3b3b5a34b35e","sequence":{"long":2487},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51507cfb-8d93-4f4e-b59a-3abd60f96fe8","sequence":{"long":2488},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2406},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa018699-c65b-4ab1-9eb7-a75fb0d161df","sequence":{"long":2489},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2459},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74aec958-755a-4d04-ad18-287adf4fa07f","sequence":{"long":2490},"type":"EVENT_WRITE","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25005aae-ed31-4218-9012-d64e0edda89f","sequence":{"long":2491},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba88a19c-4657-4d8b-921e-4969b235eca3","sequence":{"long":2492},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9ba7132-8476-4625-ac47-29a10fd2a7b4","sequence":{"long":2493},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81dbba8f-0257-4fb9-aa9f-c1494934c9cf","sequence":{"long":2494},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae4148ff-d7fe-48a5-abc6-735b0530f7d8","sequence":{"long":2495},"type":"EVENT_WRITE","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35f8b34b-c30c-4ed5-984a-b9924aa96fd8","sequence":{"long":2496},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00a1a63c-333a-4dd3-b9e5-5afd3d5c4533","sequence":{"long":2497},"type":"EVENT_SENDTO","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"425","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77314a3d-2883-4ab4-8fb4-448a25b51898","sequence":{"long":2498},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"425","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4daf08a4-1934-400f-8184-f0cc145659de","sequence":{"long":2499},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26f23227-8254-4e76-9d1a-b1b31d9aaef9","sequence":{"long":2500},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928134166897,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18f38e80-a176-415b-b124-453d9dfb5250","sequence":{"long":2501},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928134166897,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50c2c789-da8a-49ac-8522-2cf8fac408b1","sequence":{"long":2502},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928134166897,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b193414-ed62-493b-b3db-a5913debda1e","sequence":{"long":2503},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928134166897,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f7cf2e9-e774-47f5-91dd-e61a43c70e25","sequence":{"long":2504},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a812c9dd-ad39-4ff5-b64a-14d68e5246c4","sequence":{"long":2505},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"426","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21dd24f8-f1f0-4081-88a3-481de72890f0","sequence":{"long":2506},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"427","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b18662ee-827a-447d-a973-98f86ed4dd90","sequence":{"long":2507},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"428","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"148592b1-23aa-4574-8f12-a2bfc1adf190","sequence":{"long":2508},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"429","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77f02b49-bbfd-4c2c-ad6a-43da8bd19297","sequence":{"long":2509},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"426","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78cc4cd5-00bd-45b5-b3dc-5c23be6239d9","sequence":{"long":2510},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"427","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bfdefa5-35a8-4468-9a25-b963535a3a5e","sequence":{"long":2511},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"428","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4bf9657-a708-4ec7-aa89-b4279fffbb0e","sequence":{"long":2512},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"429","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0728c485-0526-47e8-a431-82e0600e0b4f","sequence":{"long":2513},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928774225532,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":243606},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3ce3659-ac7a-4c35-92ce-55acf80e20a1","sequence":{"long":2514},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582929784157083,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":243971},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7be27a30-70e9-434a-a0c9-f32284b86550","sequence":{"long":2515},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":243971},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ef93c08-12f0-4e3a-9686-90753494b5b2","sequence":{"long":2517},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5655b690-4bc7-4a05-8b95-a7eba2ea98bf","sequence":{"long":2516},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55ad6f39-8428-47a1-a74d-3c1451f0517a","sequence":{"long":2519},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2717fe6-2f94-41e1-a158-2e5c4b295055","sequence":{"long":2518},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d6ad3c4-be2f-4a58-abe8-6aed5e72b699","sequence":{"long":2521},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc7d10ae-6bce-402c-b81c-be14c766d0c1","sequence":{"long":2520},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"198faaf6-a435-46e6-97f6-eeed13d6b289","sequence":{"long":2522},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a57e1af-a2e9-4d89-85fc-7a547b1ae7da","sequence":{"long":2523},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a675e68c-da8c-400c-8353-629212b61797","sequence":{"long":2524},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bb84053-e6ea-40ac-8251-3f4cd67db79d","sequence":{"long":2525},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3203},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"677db521-38f7-4391-93ca-69e000ed109b","sequence":{"long":2526},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3256},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed9644b9-ff5d-4ddd-b6ad-487af5dee700","sequence":{"long":2527},"type":"EVENT_WRITE","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b1741ec-48b0-439b-a0a5-0d30a4eb8d5d","sequence":{"long":2528},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7803c526-4166-49e9-9dc5-5eded1b977fa","sequence":{"long":2529},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45c0ea0c-713c-471d-afde-3639a4209125","sequence":{"long":2530},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e547693-8c33-49e3-89e7-fe0db44b8f95","sequence":{"long":2531},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70d3e131-85b8-44a4-a98e-8b0ca50e7be0","sequence":{"long":2532},"type":"EVENT_WRITE","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a104430c-9d23-4947-a873-8fa14e99ad14","sequence":{"long":2533},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca39f9dd-aa6b-49fd-a160-cc4c4b1503e8","sequence":{"long":2534},"type":"EVENT_SENDTO","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"430","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ed0db3b-64b4-4520-a75d-cd8a12a823e6","sequence":{"long":2535},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"430","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"466139ba-7c00-45f8-9569-6189c518ae24","sequence":{"long":2536},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69c3040a-7bc8-4563-a593-60b5348a76cf","sequence":{"long":2537},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930164402700,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23806372-8866-4528-b7ae-dd009a10e29f","sequence":{"long":2538},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930164402700,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d53dad8a-aae7-435f-8e56-5d4ff3187ff8","sequence":{"long":2539},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930164402700,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0473caef-f3cd-4a58-ab22-82eed1cca350","sequence":{"long":2540},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930164402700,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bbf0d1a-d154-4892-a313-c37305908481","sequence":{"long":2541},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930834131946,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":246392},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1536f4c-1c2d-4ff7-9d1c-78e22a00c917","sequence":{"long":2542},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fad250c-20e6-454b-8ef9-20be76ae995f","sequence":{"long":2543},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"431","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b82103ec-f8c8-4a72-aeb9-91d22420054a","sequence":{"long":2544},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"432","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3af203cb-37f6-4bef-8e32-0c29804e71e7","sequence":{"long":2545},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"433","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecae3920-6b84-4766-b250-120f97acf6d0","sequence":{"long":2546},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"434","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eaebf2b0-8799-459f-a179-4ceddea2c1b0","sequence":{"long":2547},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"431","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32c44d06-c0fb-436d-a7d2-1db5eb4f038a","sequence":{"long":2548},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"432","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49c86d56-32ca-4919-a082-73cf1d32f937","sequence":{"long":2549},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"433","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e792809-f595-4631-ac56-ac74d75c8264","sequence":{"long":2550},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"434","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84a91dc0-292c-4a20-979a-8fc53c8eb628","sequence":{"long":2551},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931874490959,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":247570},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2ed2af0-b7ca-4ba9-bc35-dd43ba1728b6","sequence":{"long":2552},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":247570},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce7e4878-16b3-49b7-88c2-03862e8b7630","sequence":{"long":2554},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29d247fe-b004-4e31-a131-8100062a1fcc","sequence":{"long":2553},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd0a19e9-4140-4e7f-b4e7-fed42cfede68","sequence":{"long":2556},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5697cb7e-b4d1-497e-b639-78cc3e141068","sequence":{"long":2555},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e5f42a1-f60f-4def-b8a9-eab658908524","sequence":{"long":2558},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec3e1a36-6441-4401-90c7-27a53284e9ce","sequence":{"long":2557},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc6cf361-4613-42bf-a90e-c68794f5be52","sequence":{"long":2559},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7863cd07-7693-425c-816b-029bf5a64231","sequence":{"long":2560},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af164de3-013d-4015-95ee-170c7cec05fd","sequence":{"long":2561},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d353e1a-ba76-40b3-b6e1-5aba3e7a4f17","sequence":{"long":2562},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2417},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cfd02b6-bca8-49ce-a087-75fc11a9e153","sequence":{"long":2563},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2470},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c30c5e3-95e0-431d-89e0-43b7f230f76d","sequence":{"long":2564},"type":"EVENT_WRITE","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"394321c0-e0b6-481f-b2f2-972b4f7932dd","sequence":{"long":2565},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a27ea681-a5fb-4ebf-a7cd-c7d6b74ceb4e","sequence":{"long":2566},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e639cde-8c2c-4143-8b9d-61c71413b466","sequence":{"long":2567},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1174},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b01781f-b226-4d56-bf34-4837d3be8e60","sequence":{"long":2568},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1227},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46373f50-87d4-4f2f-b8b3-e2f5cf1db090","sequence":{"long":2569},"type":"EVENT_WRITE","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47c3d9c7-bbed-4f5d-a3e4-2f34599a1b90","sequence":{"long":2570},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1d0ef8a-79f0-41a7-a75e-eb2d65a75d49","sequence":{"long":2571},"type":"EVENT_SENDTO","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"435","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca220370-a054-4f4a-9ed8-54814f986b14","sequence":{"long":2572},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"435","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2c0e31f-99ec-45f2-9db2-a56a756555f2","sequence":{"long":2573},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1a40d61-0415-4388-bd2a-f29b4f60bc3a","sequence":{"long":2574},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932134613200,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ad5c161-6971-44ed-8224-95d6321daeea","sequence":{"long":2575},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932134613200,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cf399ca-8a6e-4ead-bf16-dd39b6380d2f","sequence":{"long":2576},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932170453790,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d48c8364-d22e-41b1-8b7e-449ea121cb55","sequence":{"long":2577},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932170453790,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ee3b04e-b055-49eb-b9e9-c897eac27a48","sequence":{"long":2578},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c96387-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b61c777-4c3a-4832-90ac-3b6d4f4656ae","sequence":{"long":2579},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c96387-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca9d25a5-0e17-4413-a315-3f65034decb7","sequence":{"long":2580},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02dc1a3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73e818e5-1c81-4d84-a3a6-fa4c87498325","sequence":{"long":2581},"type":"EVENT_EXIT","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e4a0093-3dab-402a-b882-d02535fb96a8","sequence":{"long":2582},"type":"EVENT_SIGNAL","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_kill"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"pid"},"runtimeDataType":null,"valueBytes":{"bytes":"0506"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"signum"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1286","arg_euid":"1003","arg_ruid":"1003","arg_egid":"1003","arg_rgid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee35c164-ff45-451a-8504-98300fde784c","sequence":{"long":2583},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d37d0809-af78-44eb-a046-dfaa05a33734","sequence":{"long":2584},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7000b002-34cd-4e1b-b40c-8e86074c8b40","sequence":{"long":2585},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":50},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd27ef15-71b1-40ca-bd8d-d945422ca6d9","sequence":{"long":2586},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932967496110,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":250819},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9383eb15-afa6-4a15-a3a0-437867e00b97","sequence":{"long":2587},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582933969545910,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":251183},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cef73371-3ce5-4d93-b6f8-894cce4b2ba2","sequence":{"long":2588},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":251183},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a307a447-a926-49f0-8d0d-d819fc466e61","sequence":{"long":2590},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2126d5c1-7ea1-4baa-8f23-0ef7d109a2ea","sequence":{"long":2589},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7112ad0d-49b1-4922-8848-3f2c57fe60dd","sequence":{"long":2592},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09827f2d-0a31-4482-ba93-acff318f4fa8","sequence":{"long":2591},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c115e1a-99ef-4e89-a18d-b51c0393c7a6","sequence":{"long":2594},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a011cfaf-fa66-4f9e-a98d-aa231e9c8e97","sequence":{"long":2593},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccada235-6728-4aa9-8096-9b1c42fc9f20","sequence":{"long":2595},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49a1a158-c98b-42ca-8b83-cabdd5eef582","sequence":{"long":2596},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1edec7e5-e663-4237-b98a-fc35b9946637","sequence":{"long":2597},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9688d1d5-628e-4251-a532-5e4327c47d3e","sequence":{"long":2598},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3245},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc08d941-7db6-443c-a24d-25cf4b8653b6","sequence":{"long":2599},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3298},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a07ef94b-5649-4a62-bc9e-03d793d0b449","sequence":{"long":2600},"type":"EVENT_WRITE","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcfb88a1-ce3f-4dbb-99c9-e38398cfe75b","sequence":{"long":2601},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f79f2a4-f041-4e3a-b768-049adce8e1f9","sequence":{"long":2602},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d9f7a6a-7e45-4899-bebe-09a41a37e6c8","sequence":{"long":2603},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47d01e8e-4817-49e2-a2e2-77f8f189bd93","sequence":{"long":2604},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18db472b-82dd-4e32-adc0-729fa60a1eda","sequence":{"long":2605},"type":"EVENT_WRITE","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75c1cb66-a3d1-4472-b034-e8fc56e75414","sequence":{"long":2606},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cbcf1f0-d3a4-4418-bbc5-224d32a8aa0e","sequence":{"long":2607},"type":"EVENT_SENDTO","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"436","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64e8443a-f5c7-4786-95b7-12c05e0a7a91","sequence":{"long":2608},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"436","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75a334f3-50ac-4588-83ae-4ff9d03a22f6","sequence":{"long":2609},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bcf03d4-d5cf-4a42-abb6-3eb499459160","sequence":{"long":2610},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934133927192,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef051d70-8345-49fb-b5ff-d2d5e7b4701d","sequence":{"long":2611},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934133927192,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c28a1b4c-9d31-4928-964e-d010dc99576d","sequence":{"long":2612},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934133927192,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b62c8bea-aa6f-4c2b-a6ea-c429f6614334","sequence":{"long":2613},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934133927192,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5e13363-5ac4-4962-b093-7609450d4941","sequence":{"long":2614},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"080ae8d0-8201-4b67-bcb4-93b20e78f7ca","sequence":{"long":2615},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"437","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"793598cc-a34f-4ec3-bc07-ed23b84fb169","sequence":{"long":2616},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"438","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"880d4333-f804-4ac1-8bf7-a7ec34253e50","sequence":{"long":2617},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"439","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc5dba3f-51d8-4b76-a50e-b468327c06c0","sequence":{"long":2618},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"440","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4aafea77-1936-4f2c-9f3d-934893920207","sequence":{"long":2619},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"437","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8eee8f34-ccb9-453e-b276-084ae025a56a","sequence":{"long":2620},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"438","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"556f240a-cb09-49ad-862e-3eeeff89b3d9","sequence":{"long":2621},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"439","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a9b617c-2f7b-4137-9c33-8c0761c1bed0","sequence":{"long":2622},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"440","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad7d9384-bda6-435a-b9ed-0da18781eb20","sequence":{"long":2623},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582935025523231,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":254399},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"490e124a-bd91-453a-8b6c-1e315882aef9","sequence":{"long":2624},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936033905299,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":254762},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83e32af9-852b-448a-8978-b1edba02d63a","sequence":{"long":2625},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":254762},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b6f2c10-8197-4e40-8a57-e6201bf675a1","sequence":{"long":2627},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd4fb299-da06-441e-b79a-c5cf386bb442","sequence":{"long":2626},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"678cacf9-f97d-4780-a810-23da12c79c56","sequence":{"long":2629},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d961cbfe-072c-4b2c-bbc6-671da7981531","sequence":{"long":2628},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e9abf6a-0131-40b3-94df-ef4834b9a692","sequence":{"long":2631},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da44e202-5d4d-47f4-9256-01eb6a11805f","sequence":{"long":2630},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dc3b558-8a0e-42c3-805f-4699b32efaee","sequence":{"long":2632},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e10a5e5-ce36-44e1-8e5a-2e8bda3846d5","sequence":{"long":2633},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0eb8a587-0dfe-4c86-9c26-ee4e7f84ea6f","sequence":{"long":2634},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5443de1d-86e7-425a-bd3e-3f8f1e20b2a0","sequence":{"long":2635},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3212},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a04b1591-fc6e-4a99-9a6d-ff0c22092f39","sequence":{"long":2636},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3265},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"370a3ffd-e899-415d-9c4a-ae9ad3189347","sequence":{"long":2637},"type":"EVENT_WRITE","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e37cf293-84a8-45de-bb96-31a59081449d","sequence":{"long":2638},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ee4b3ad-b268-45a2-ac65-2c8bfd839e69","sequence":{"long":2639},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b86faa97-6f69-4364-b06a-54fb9839e019","sequence":{"long":2640},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5e06a04-0993-4be0-b7d8-8b57bb1584cc","sequence":{"long":2641},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a3f5363-ced7-4179-8a9c-ad764a02989b","sequence":{"long":2642},"type":"EVENT_WRITE","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"101fd1be-c64f-4dc6-a6b3-3fcdd0c7058f","sequence":{"long":2643},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1aa6cdf0-7769-43f7-8a4c-39536595c2ea","sequence":{"long":2644},"type":"EVENT_SENDTO","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"441","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ce4f68d-827c-4340-b3e0-86575a0482aa","sequence":{"long":2645},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"441","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27e2f6e3-d132-4156-83ce-00068b47db9c","sequence":{"long":2646},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f6b93ce-ea69-44cb-9ed8-9923c4087d24","sequence":{"long":2647},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08551008-6cc3-4b26-90f5-f592ce76be35","sequence":{"long":2648},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9d794f0-00c6-4556-9dcf-71975bd38bdd","sequence":{"long":2649},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936133880472,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe215460-c312-4872-b1fb-0516fadaffd2","sequence":{"long":2650},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936133880472,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b19c2b0a-3d19-4952-b112-3073f25efb12","sequence":{"long":2651},"type":"EVENT_READ","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582951268242273,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a829bc0-b7d0-4050-baa6-1365c032979a","sequence":{"long":2652},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"c1555c7c-d38e-9a58-8ed3-e319889a0469"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582951268242273,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b01a0d2-cfa9-47ca-b22f-650f57c84e97","sequence":{"long":2653},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582951268242273,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4694d599-66c9-416b-92e9-7779159f3fda","sequence":{"long":2654},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952124549143,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":257176},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ced5ba40-1638-44f1-be0d-569ed94c530b","sequence":{"long":2656},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582952124549143,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67c91984-2171-4adf-ae25-c63f3fe13119","sequence":{"long":2655},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952124549143,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79cd9201-9db5-4752-87bd-2f16597e5d97","sequence":{"long":2657},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952194028767,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":258177},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b034588-5b2f-4187-8229-f38c11ecec7d","sequence":{"long":2658},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fa966a6-a358-438d-87a5-6a3db40b9774","sequence":{"long":2659},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"463","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fa39f46-aa5c-471a-899e-fe437756ce23","sequence":{"long":2660},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"464","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d4e5ce3-d4a5-494a-9104-677ceeeb4784","sequence":{"long":2661},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"465","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a880d85-0471-44d1-88df-090a04649d2e","sequence":{"long":2662},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"466","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5479dcc-2b1a-44ca-8487-54e2a42e3d1e","sequence":{"long":2663},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"463","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e1e565e-0dbd-43f3-abc1-0557717ba636","sequence":{"long":2664},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"464","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8294d34e-0f1f-4f0c-be74-8a757ba5f283","sequence":{"long":2665},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"465","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70503231-738e-4490-ae4e-443507b8bded","sequence":{"long":2666},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"466","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"005491cf-4f4b-495a-93dd-5d25aedd0bf9","sequence":{"long":2667},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952664295450,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37c5d1f3-2714-4679-a8f5-257aeab53b13","sequence":{"long":2668},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952664295450,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5a7fe93-3991-4792-b8b9-bef3dabc1aa8","sequence":{"long":2669},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952664295450,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8972a7bf-04a1-4440-a467-92e592acd8df","sequence":{"long":2670},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952664295450,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2bf2568-4207-4521-9ebb-458c6dc6350c","sequence":{"long":2671},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582953204141200,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":259659},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da5664a1-af82-4483-85a1-8225c68e7792","sequence":{"long":2672},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582953588138412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aaf62418-06fe-4807-a439-a655725c5b4a","sequence":{"long":2673},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582953588138412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e0b49c3-16bb-4a8e-9d14-4514dcb0dd93","sequence":{"long":2674},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582953588138412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a68f035c-17b8-47c2-bbe2-5f7adbec3cae","sequence":{"long":2675},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582953588138412,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":21},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f26b00aa-def9-4d68-a89b-53a3ae23ab20","sequence":{"long":2676},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":259659},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27a7b303-5ac3-4923-8070-36c0e49d9823","sequence":{"long":2678},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46f11587-eb13-4b0f-bca4-f06094b12d1e","sequence":{"long":2677},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dcb4769-95e3-4dc8-95e5-565781031dcc","sequence":{"long":2680},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95893790-906d-4a6f-abdb-cd4b49f59b08","sequence":{"long":2679},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dee9c02a-9609-47f0-9d05-a4958cb631af","sequence":{"long":2682},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f1b46a2-338c-4778-a45f-dc2ecb1b887f","sequence":{"long":2681},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5560d4f9-548f-4976-8372-bbd4336a2a1e","sequence":{"long":2683},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10d27e8d-f0db-4e0b-a324-08c3b43f5d79","sequence":{"long":2684},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84d33c86-5ef2-44da-845c-a21e573508ec","sequence":{"long":2685},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f16f5081-1df2-40f6-801b-5e6fbbf61174","sequence":{"long":2686},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":997},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10263d86-afef-46e3-b01f-f367665c7ebe","sequence":{"long":2687},"type":"EVENT_WRITE","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b53dd48-5672-4182-bc55-0d9eb614f8b5","sequence":{"long":2688},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1050},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"180b364f-3c55-4f73-af8f-804f42accff1","sequence":{"long":2689},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"644bd906-0c42-4d58-9323-2fa201352194","sequence":{"long":2690},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5b7b09b-2bef-45bf-8f29-5b5c5f5767d2","sequence":{"long":2691},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1478},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e85f6099-f264-4f70-b066-b2274d25f374","sequence":{"long":2692},"type":"EVENT_WRITE","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f66a465-d4f3-4409-8f90-cce007f4e890","sequence":{"long":2693},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1531},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bf413f2-e27b-4a83-b39f-d5d1b496aa27","sequence":{"long":2694},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca037194-49af-4aa2-a224-5249b672dde9","sequence":{"long":2695},"type":"EVENT_SENDTO","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"467","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54af71b2-0b5e-44a7-8a7a-e8ff4d7be6ca","sequence":{"long":2696},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"467","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39d43192-dcc9-47df-b03c-1a859c6efce8","sequence":{"long":2697},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fc25f87-93b7-4d93-9342-eeec6f58c3be","sequence":{"long":2698},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9af39ec7-60b6-40cf-8d93-547714d496f0","sequence":{"long":2699},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04239a0d-457b-46cf-984b-00e43c626608","sequence":{"long":2700},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954133942560,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f421db77-cbb4-4be9-b612-2560eb52cd1c","sequence":{"long":2701},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954133942560,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"543c2be3-df98-4b1e-9976-7e07046d5fa1","sequence":{"long":2702},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954219192362,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":262471},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec6fd1ea-e923-4420-a0f4-ace4bfa3a00f","sequence":{"long":2703},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954506555215,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"daab39ea-031b-4500-ab97-a41492bb005a","sequence":{"long":2704},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954506555215,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc9de61f-17f6-423d-8f8f-4783bccf2dd9","sequence":{"long":2705},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954506555215,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2e1e3f5-7f6e-4bb3-88d2-e4d5be52a318","sequence":{"long":2706},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954506555215,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":51},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"610f9400-41b0-42fa-b347-9fc8eb00cd84","sequence":{"long":2707},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955224328560,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":263158},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8fb35fa-8848-4eef-9b19-a64fa21fd014","sequence":{"long":2708},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955413909882,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"376db8d0-d75e-4855-b323-87b45c7c7330","sequence":{"long":2709},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955413909882,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67a27687-a72b-47ef-b5a4-11851408f417","sequence":{"long":2710},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955413909882,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9db03d82-918c-4ab8-8bbf-1c83833a898e","sequence":{"long":2711},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955413909882,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":37},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55b48226-f05c-4e7a-82fc-40ee447c60e9","sequence":{"long":2712},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"175a5fc9-2ce9-4374-a9ab-eada60080974","sequence":{"long":2713},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"468","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f014ea4d-7350-4e19-a25e-27316b616466","sequence":{"long":2714},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"469","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df374af9-801d-40bb-8df1-1f161ff7dfc5","sequence":{"long":2715},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"470","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf052e1c-3da2-4773-bb83-ca3ce0baf5b4","sequence":{"long":2716},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"471","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80dbdda5-44d9-496b-abf6-9afd721344c3","sequence":{"long":2717},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"468","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf09a60d-b9ad-4391-9d8c-e86f98d62d8a","sequence":{"long":2718},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"469","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e10fdad-5a26-4c2f-852b-276331cb811f","sequence":{"long":2719},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"470","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f21ac85-d065-467f-9df2-315a6e40a42e","sequence":{"long":2720},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"471","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cab6339f-da28-438c-ae15-1681cc8c5378","sequence":{"long":2721},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":263158},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51236d6f-df41-44de-9cb5-9d653b098020","sequence":{"long":2723},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"400c7190-2a8c-4641-b43c-3b803da5058d","sequence":{"long":2722},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94a7b1d4-b732-47cb-96f7-f0c619e5ebb4","sequence":{"long":2725},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31d42bd4-aab9-4341-940b-6ea8c475796f","sequence":{"long":2724},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"751d85d5-65bb-436d-b734-b0fa4086c486","sequence":{"long":2727},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1327fad3-ebd3-4da5-8ed4-5c8367f9ea53","sequence":{"long":2726},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0887fbb0-72e9-4178-a583-9f705cc43629","sequence":{"long":2728},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f667b077-d8c4-4b84-9b0d-f80fd55deff2","sequence":{"long":2729},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12d7f6eb-8a9e-47fe-ab30-9845dba13cb5","sequence":{"long":2730},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7954f6db-b063-4b94-9535-222da2a40d49","sequence":{"long":2731},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2808},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dfb2ac0-4ec8-406e-96d0-9d2b9fdab4c9","sequence":{"long":2732},"type":"EVENT_WRITE","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e18ade78-b2e3-433e-9e12-e4bd62153a30","sequence":{"long":2733},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2861},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbcf7d82-56c4-468a-89d3-788d7994fd98","sequence":{"long":2734},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1261dede-8b08-4413-988b-b5091a551dcd","sequence":{"long":2735},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d182baf6-d843-4877-98aa-b44f1b411a9f","sequence":{"long":2736},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":683},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e6996c2-9ffe-40a4-945c-cc0d4c225394","sequence":{"long":2737},"type":"EVENT_WRITE","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d57ccb4-0607-4f54-9143-c8c9a6222964","sequence":{"long":2738},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":736},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a601f51-330b-4134-b3c4-38e4b10a56d9","sequence":{"long":2739},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e99b7ef5-63da-43e2-8286-5e1b107b606c","sequence":{"long":2740},"type":"EVENT_SENDTO","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"472","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"270ca663-abd0-464c-b3db-1dc7a85701b1","sequence":{"long":2741},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"472","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c714d92-0971-48d8-aa0b-b4f5f0e88109","sequence":{"long":2742},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2327bd96-94eb-4581-8802-bb2f5f2be167","sequence":{"long":2743},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4ee2ab2-aca3-4292-be2e-1e4b24187759","sequence":{"long":2744},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c0ce06d-259e-4b2c-af03-9084b423a688","sequence":{"long":2745},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b5d62b6-94bc-4f4d-aca8-5a119d6a6b4c","sequence":{"long":2746},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9eb3e759-f1e5-459a-9639-05044f70db4f","sequence":{"long":2747},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956233997606,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":266753},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92ac16a0-8a05-4873-92f4-f3f4a4734862","sequence":{"long":2748},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956334770993,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5605f7a7-35d8-4c48-89bf-0c2e1ceb7440","sequence":{"long":2749},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956334770993,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3710ca8f-2572-4da3-b8dd-f99783d15afe","sequence":{"long":2750},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956334770993,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6602cca-5c98-45c9-919b-6ef73ab25323","sequence":{"long":2751},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956334770993,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6602cc3c-17c5-4314-be22-3b271857c21a","sequence":{"long":2752},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582957249417963,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":267436},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf57e66e-876d-45a8-a4ab-a79569f5bb78","sequence":{"long":2753},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":267436},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"688a94de-965f-42c4-9ded-0aabe32da391","sequence":{"long":2755},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db89bf50-e265-4d6a-89f5-4efc93896066","sequence":{"long":2754},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"583ad68f-7e1f-41bf-ac6c-7ce44d9d3eba","sequence":{"long":2757},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68c8572b-bb41-4d46-8593-b836bc7a4745","sequence":{"long":2756},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4a42170-30f3-4f82-a8ba-3a88e79dbefa","sequence":{"long":2759},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18d36da0-679f-4cb4-978a-6f85965b5141","sequence":{"long":2758},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a3c29c0-2e19-44db-9e2e-556b74453aeb","sequence":{"long":2760},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9220e984-7bb0-4ff3-9956-877908836edf","sequence":{"long":2761},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b897b6b2-cc85-441d-a26d-59bda935eed9","sequence":{"long":2762},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6a4ae21-a2bc-4abc-9a74-4299de19f2d6","sequence":{"long":2763},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3591},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d09cb7b6-08a2-4303-93c3-c3e0b4cf0068","sequence":{"long":2764},"type":"EVENT_WRITE","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59cac351-d943-4fe1-ab67-302f712027c7","sequence":{"long":2765},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3644},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0680c30-8e2d-4802-8f84-7ecb75c95b82","sequence":{"long":2766},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc61ad21-60b5-4069-9476-7da2b3716338","sequence":{"long":2767},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9657ced-c150-4f12-a6df-7916b3c0e656","sequence":{"long":2768},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":679},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"972e352d-fd2c-49e1-83b1-4905257a4f1a","sequence":{"long":2769},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":732},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a760a69-3da1-4955-b27c-018e4ce226bd","sequence":{"long":2770},"type":"EVENT_WRITE","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81e4648b-fd82-409e-b151-116e2ee3f2fb","sequence":{"long":2771},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b6d069b-acfa-47d5-8dbf-2c461a01543f","sequence":{"long":2772},"type":"EVENT_SENDTO","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"473","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"762d6736-1d20-4cbc-8002-901e886d79bd","sequence":{"long":2773},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"473","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec09a5f3-2812-435b-b722-ddfdb67593a9","sequence":{"long":2774},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59d1b4e0-b6fa-487b-a561-efb334932ed5","sequence":{"long":2775},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90997cc2-938b-4de5-91aa-bfd7a71f45c7","sequence":{"long":2776},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a48f849-457b-4eb0-9806-8a59ecf3fbcc","sequence":{"long":2777},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f47556d2-343e-4ca9-b944-1a9bf16d6070","sequence":{"long":2778},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8403eff-cf62-4747-9876-3335992e202e","sequence":{"long":2779},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958254271204,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":269844},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4b21d51-f159-4812-a32e-56fe68c02d38","sequence":{"long":2780},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d87f85fd-0bbc-41d9-84d1-ff14cd7cfacf","sequence":{"long":2781},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"474","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1086661-7c49-4548-91ee-1b3032946ee3","sequence":{"long":2782},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"475","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de2a9c2f-25aa-4d97-95da-fd959111b47b","sequence":{"long":2783},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"476","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54f25478-f327-4b91-8038-c6aea6ec4488","sequence":{"long":2784},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"477","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c74b6302-b821-40e0-a442-f7a70f6964f8","sequence":{"long":2785},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"474","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d60c9d0-f8dc-482d-8aa5-26ba46d5cb78","sequence":{"long":2786},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"475","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48eeb626-a081-4132-92a1-faf8065f9809","sequence":{"long":2787},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"476","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e574a03a-ef66-479b-95de-6e056982ec7a","sequence":{"long":2788},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"477","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcbc769f-83fc-4ddb-a5cb-148eae1183b3","sequence":{"long":2789},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959264447168,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":271023},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9308b18-0a79-4a4f-9b2b-d4617d5bb062","sequence":{"long":2790},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6b60cd0-5e7f-4ec8-9be6-2c4a2cbafa21","sequence":{"long":2791},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"f98bb0e2-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1337,"parentSubject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582959814384316},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e145f82c-50f3-40b8-936b-6ed7e12f4747","sequence":{"long":2792},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1337","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1337","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"a518b5ee-67b5-d155-b567-a865b5d16327","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07ebe5b3-1563-4b58-8c55-0b9a674d1808","sequence":{"long":2793},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582959814384316,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/all.sh","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54388300-fe5c-4559-b343-57eb4299f778","sequence":{"long":2794},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83b4f8e5-247f-49c2-8c10-3f6376810667","sequence":{"long":2795},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"825627cd-2e0d-46da-a931-4d9f887b232e","sequence":{"long":2796},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0a77bcd-8f5c-4df3-b59e-f17d9b3cd9b5","sequence":{"long":2797},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e28ea2f-ddc6-4c7c-aed1-e0e04ca31872","sequence":{"long":2798},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95017f04-d5ef-4480-81a2-54c8d8332f44","sequence":{"long":2799},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bad2452d-b712-44c6-bd36-a64125658ee6","sequence":{"long":2800},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d04c97c7-aa92-445b-8ef1-3d2a5a130a12","sequence":{"long":2801},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d7d51d7-72a0-45b1-84e5-4e0f23458e07","sequence":{"long":2802},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60ff670c-f163-4733-ba40-e8af57b21120","sequence":{"long":2803},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94d79ff9-d379-4200-b7f6-823520883982","sequence":{"long":2804},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d2d7c25-afdc-491e-a07f-c1e7115fddd3","sequence":{"long":2805},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17152cee-ebe8-4cb1-b950-930a80377517","sequence":{"long":2806},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22571a84-f74b-44cb-b961-d1d4172863af","sequence":{"long":2807},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7e38726-a85f-4f9a-b069-81f8aae7c81b","sequence":{"long":2808},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5e9aee9-0d7c-4f08-b5e3-7f1c19eeaeef","sequence":{"long":2809},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b34de5a7-4b5a-4956-adb0-57e92cca710d","sequence":{"long":2810},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0da2a94-c844-442f-835a-27dfd79c5cfc","sequence":{"long":2811},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fcb5fac-d56c-4ecf-a8f9-39874a34c4dc","sequence":{"long":2812},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"478ba9fd-4585-45ab-98b4-9fdb223d4fab","sequence":{"long":2813},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582959814384316,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/all.sh","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"447ec5c8-63d4-430c-961a-b62516786fdf","sequence":{"long":2814},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53151932-0adb-4494-a9fe-30dd20f8a581","sequence":{"long":2815},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8960c690-a29b-450f-81af-555eaad2f891","sequence":{"long":2816},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10b4ea25-179d-4f25-a463-0dfdf167995b","sequence":{"long":2817},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c689893f-6698-4997-b955-12f71956e317","sequence":{"long":2818},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78001f22-187b-45fa-8286-c9ccbfe982ac","sequence":{"long":2819},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02d7e7de-8c1f-4a3f-b3de-22bfe67b8a42","sequence":{"long":2820},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76526058-dfe6-4366-96e9-43acd6a3a833","sequence":{"long":2821},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"733df242-9c95-4061-ae66-35fd96b28d2b","sequence":{"long":2822},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9d743fd-32ef-490e-a6b8-0070adc63b35","sequence":{"long":2823},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d7afe2a-c513-4d14-b03c-a41751904d32","sequence":{"long":2824},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b0f8489-c656-4c0c-a663-983682c68089","sequence":{"long":2825},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e52618a5-a959-4ab4-bbdd-e5647174c621","sequence":{"long":2826},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34b88f02-ede5-428e-93a4-0f970ab00eb9","sequence":{"long":2827},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8a604fc-b571-490e-affc-4a5322b99354","sequence":{"long":2828},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"902508f2-cebe-4244-a2f9-f399ad595bb9","sequence":{"long":2829},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11e4d7e2-2127-4489-b5ee-184d252b2036","sequence":{"long":2830},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77265775-f2e8-49e0-8079-fdd7378ad8bd","sequence":{"long":2831},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"172ca8cb-7c6b-49dc-9adb-ed09b41ca198","sequence":{"long":2832},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf3541af-996a-4a85-9238-ac99dd34303b","sequence":{"long":2833},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44326ab6-dc60-40c2-9a52-eb7938b848e9","sequence":{"long":2834},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d488003-d8b8-4339-8a5d-7478b04958a4","sequence":{"long":2835},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f93b6e4a-ad0d-4730-9381-5b9b08c2d549","sequence":{"long":2836},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b62c687e-02bd-4b5b-8e96-2ef6c08c72b9","sequence":{"long":2837},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66f8b90f-c8b2-4f73-81c3-0c7bbb9e5afe","sequence":{"long":2838},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e03b2b8-0c80-4032-804f-b087c9f6d561","sequence":{"long":2839},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e073a78f-11f4-4895-b9c3-9329958f20fb","sequence":{"long":2840},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98369b22-cfd1-48b7-8b5a-cb6ff3153841","sequence":{"long":2841},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0182d6ea-f5a1-4c2d-9f11-ec24a78b9218","sequence":{"long":2842},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93c9428c-ceb2-4dc7-a1d2-e339c29469ce","sequence":{"long":2843},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79ad7cc6-c108-4e7a-8057-411319324b46","sequence":{"long":2844},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a93647c-35eb-47b9-9840-f0a1bcf2f487","sequence":{"long":2845},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c06a1057-820d-4412-9708-20c55394d297","sequence":{"long":2846},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eebc85ec-d1e4-4328-ae2c-18018cd39538","sequence":{"long":2847},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27f092ef-a30d-4697-b8a6-4be17f860079","sequence":{"long":2848},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93e0d978-cfa0-46ad-8c63-e08752169fb2","sequence":{"long":2849},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3445721-513f-491d-bc8c-a2859a92c2d8","sequence":{"long":2850},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb1770e5-dd28-48b0-a139-e346ad2fa36f","sequence":{"long":2851},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89019d3c-154f-4935-bb96-9270f7d2c5aa","sequence":{"long":2852},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c930c06-c69f-42c4-9e8a-d41545ae2fe1","sequence":{"long":2853},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1319d4be-ce9f-4a18-a798-fbfeeef64d04","sequence":{"long":2854},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c25677a3-615a-49b8-9156-800445a879b6","sequence":{"long":2855},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e60e7f52-94ca-428e-a914-a60e0b9bd2a8","sequence":{"long":2856},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"765c2684-338b-4e27-b60f-223758239ae4","sequence":{"long":2857},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f73cbf9-49d7-4b4b-a844-343c7535d5cc","sequence":{"long":2858},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"974b9d9f-f6a2-4cd8-9908-a83ebfd5149a","sequence":{"long":2859},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a60cfca-3f10-4796-bcf7-9dcc580afe52","sequence":{"long":2860},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fb08b35-7a5d-47e3-917e-d3dbe4e4cf0e","sequence":{"long":2861},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"755b4edd-1109-4385-8a0b-20df8e2ff9b1","sequence":{"long":2862},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"238eb9e8-c005-4549-8ba9-5ec420f8ece2","sequence":{"long":2863},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c165ab2d-a3e1-4427-b77c-929a1b20f3f9","sequence":{"long":2864},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"625efe77-96a5-4fb6-88be-86c04d22d979","sequence":{"long":2865},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b437c7bb-bdc2-49dc-996f-a9780b76bbe9","sequence":{"long":2866},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5794e36-bbad-4131-874e-b9c0c087c6e5","sequence":{"long":2867},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98e37e1c-7819-41da-a7f6-d4a0bd4280a1","sequence":{"long":2868},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4df1916b-c34b-4f45-a8d2-0291d2161fce","sequence":{"long":2869},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76c8e92e-c002-494d-9148-bb5e048d3440","sequence":{"long":2870},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59bbabf4-a684-4f3d-b4f8-382c498e2d16","sequence":{"long":2871},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee76f7f1-fd9c-4ffe-9b6a-fd08b7cea32e","sequence":{"long":2872},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ada3fbd-4b7c-4f4e-83d0-6fd463ecd549","sequence":{"long":2873},"type":"EVENT_FCNTL","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b58dbfa2-6520-4d54-a778-59fe9e305a7c","sequence":{"long":2874},"type":"EVENT_FCNTL","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d03fbb8-40df-48dc-9a7d-2e513f1af1b9","sequence":{"long":2875},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd6c76e8-7f63-4a01-a70a-46dc36a1cef0","sequence":{"long":2876},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1884},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f64f17e-3466-4030-9ee8-809e5abfc112","sequence":{"long":2877},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":516},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"f98d2634-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1338,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582959814384316},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a667ccd2-9fc9-478f-85c1-b3942d2e0603","sequence":{"long":2878},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"f98d2634-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1338","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1338","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdb2c310-aded-4715-b63c-6ad4dc1e5f1e","sequence":{"long":2879},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"f98d2634-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959824307368,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c97c1e4f-2f50-43df-8f29-301d52260a79","sequence":{"long":2880},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960284294164,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":279988},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a5d4b03-8425-4d40-a613-b74f8c9b21f7","sequence":{"long":2881},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"f98d2634-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"f98d2634-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f733c9a8-7d4d-4b1b-8b74-0f614983092a","sequence":{"long":2882},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11233585-6e33-478f-a5ee-169ee3919652","sequence":{"long":2883},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a32c9b2-6da7-4566-a224-976b96f927eb","sequence":{"long":2884},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"786c7c3e-10c5-4abe-bcdc-99b71d5bb1f5","sequence":{"long":2885},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e7eae09-b412-45bc-abb2-54c389c1ba63","sequence":{"long":2886},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c24846c-b1df-4c23-9ef4-13ec605a51c5","sequence":{"long":2887},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b06817f1-34ce-442f-a2d5-556042743c41","sequence":{"long":2888},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":34},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fa277e30-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1339,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582960834837726},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"599b228c-1103-4273-9530-7085b8061f3e","sequence":{"long":2889},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1339","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1339","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cc52363-42f0-4171-81e8-a706cdfc2212","sequence":{"long":2890},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"56ecc1ae-1878-7b59-b818-6135097b8030","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2e99422-8129-43d4-8021-57dbe207862e","sequence":{"long":2891},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"56ecc1ae-1878-7b59-b818-6135097b8030"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./change_file_permissions"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582960834837726,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./change_file_permissions ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a88b141-761f-4148-ae9e-dab077c34b56","sequence":{"long":2892},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca659478-3f38-4474-80e0-50618bd9723c","sequence":{"long":2893},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2335d15-2711-4d50-a0c2-ab5acbc5080e","sequence":{"long":2894},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"815d2b08-82ff-4f19-bdbe-4c7caf1eb147","sequence":{"long":2895},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed7ba8b9-5f7c-4500-ad30-0470db49bb15","sequence":{"long":2896},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"966560ba-2f17-475d-93a5-2dcb1803e798","sequence":{"long":2897},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7c1f4df-9f71-41a9-806a-b0a93a0f7c27","sequence":{"long":2898},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93c1c0ba-b1ba-40ad-9014-f36a70ff5fc1","sequence":{"long":2899},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"605e6cfe-74d8-4f0a-9052-58f1a1958a39","sequence":{"long":2900},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35b317af-ea54-48a0-84a8-0041ba6726da","sequence":{"long":2901},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"978211af-33ed-436a-8a20-8911435ce2ea","sequence":{"long":2902},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d27a070-22d3-47e4-91be-aa6c12945cf9","sequence":{"long":2903},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19268ba2-fc8d-4c4f-b20a-afa9ac6c26ab","sequence":{"long":2904},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ba2721b-1b2f-44d1-90e9-4271154ac792","sequence":{"long":2905},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fa0dc64-b34b-4f8a-8f78-57d6a69f22d7","sequence":{"long":2906},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de02e1f9-29b4-4aff-a5d1-fe4b708a767b","sequence":{"long":2907},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2baae21a-0580-46b8-b890-30c14211b0e7","sequence":{"long":2908},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c4eba88-6aa2-4053-9527-e7c2798d17a9","sequence":{"long":2909},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32f04d54-f4ec-4758-b7de-f42aa630aa26","sequence":{"long":2910},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d693a2b-b593-4eeb-b683-638f91e267a0","sequence":{"long":2911},"type":"EVENT_MODIFY_FILE_ATTRIBUTES","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/README.md"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_chmod"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20c60583-845a-4157-9dd9-c3f24f7aec2e","sequence":{"long":2912},"type":"EVENT_MODIFY_FILE_ATTRIBUTES","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/README.md"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_chmod"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b7"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c5479bd-d69a-4726-b58c-ff8163e14390","sequence":{"long":2913},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cf0921a-3172-4568-a129-889178a3886e","sequence":{"long":2914},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1368},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cf058d0-893c-4d73-a2c1-260bea926c12","sequence":{"long":2915},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":532},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fa27d8bf-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1340,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582960834837726},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12193776-5969-45ad-aac7-b702f2757322","sequence":{"long":2916},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1340","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1340","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"798ebe64-8316-4d62-9334-34dc51c21913","sequence":{"long":2917},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06e88661-c6e7-44fd-86c3-25920248cbbf","sequence":{"long":2918},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582960834837726,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"994f6e8e-f85c-4dfa-81cf-da4e811db61b","sequence":{"long":2919},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dac53421-0168-4307-8234-e18d58ecb3a5","sequence":{"long":2920},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0ede446-914b-43cd-9437-ecfe7dfe3909","sequence":{"long":2921},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d72375cc-8aeb-4c22-9193-700b96d7cf3b","sequence":{"long":2922},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3d4af84-e201-42e3-9d9c-17dabaeb6a93","sequence":{"long":2923},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"162d42f5-edc5-45ee-9898-1f1aebe33cd3","sequence":{"long":2924},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a008a19c-b30b-4c9e-a1b4-55c75875b4b5","sequence":{"long":2925},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3790146-5da7-43db-a0ca-6648c8c93405","sequence":{"long":2926},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961304776512,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":284908},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d1bd44c-b680-4bf1-8bff-e0798acbfcde","sequence":{"long":2927},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58d5ff1e-b675-4895-9dff-8accb9aef99f","sequence":{"long":2928},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"479","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f09351e2-de12-4867-983d-71d03636b8a8","sequence":{"long":2929},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"480","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"308c6ead-d6ef-468c-9c0d-77b7aa9f6b58","sequence":{"long":2930},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"481","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a347e9d-2ee0-4035-84e0-f28d61115a3f","sequence":{"long":2931},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"482","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5eacc2b7-6a3b-49d3-bd7b-fbc295823b35","sequence":{"long":2932},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"479","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"979283a8-e7b6-4bf9-84dd-b8a298400c0c","sequence":{"long":2933},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"480","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8599cd2c-960c-4b57-91f0-b1c40e8d0b65","sequence":{"long":2934},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"481","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d1bf902-c374-4431-a21a-320eaf5ac3b9","sequence":{"long":2935},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"482","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be5d2810-9357-4029-b9f6-8ebad6592de2","sequence":{"long":2936},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ace3bc5-9ef5-4b0a-b28b-c4c88b58973a","sequence":{"long":2937},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1ac5061-ac0c-4bce-b1b3-7c8040283700","sequence":{"long":2938},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fac2e97d-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1341,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582961854200266},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7885391-f0ae-4c5c-a218-48c290414532","sequence":{"long":2939},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1341","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1341","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4be9f00-db3d-4208-b890-4ecd46689118","sequence":{"long":2940},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"0609dc59-7cb8-de5b-b87c-35aeebded4bf","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48a997cd-4db3-439b-93ed-01252efce958","sequence":{"long":2941},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0609dc59-7cb8-de5b-b87c-35aeebded4bf"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_file"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582961854200266,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_file ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41e40c0d-2fb5-40fd-ac51-b7227f076210","sequence":{"long":2942},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3f6035f-6af6-4e10-88ea-4064ad8badcf","sequence":{"long":2943},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c830f4d-ccd0-4e68-8349-f1083f7eaced","sequence":{"long":2944},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"898c6ab8-230c-4649-9ff8-3a9db0fda529","sequence":{"long":2945},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"568fcac6-c4e2-4622-8673-dfb8e4101537","sequence":{"long":2946},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"779a6218-fdf0-47d6-a071-3c6aa0cb0dd9","sequence":{"long":2947},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5434c965-e008-4662-a91e-b503e96822c4","sequence":{"long":2948},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"623d6048-a882-4b35-b699-8a78d7491103","sequence":{"long":2949},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00bc4098-9e8c-4058-b32c-b9abab8b1adc","sequence":{"long":2950},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24fa5446-8ddf-4ffa-9490-d6d133bd76b1","sequence":{"long":2951},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d7aceaf-21ae-4280-8ab7-85acef8a8129","sequence":{"long":2952},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1039ca0-55df-4a92-a325-830b6114ab30","sequence":{"long":2953},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a75fa05-84fd-4e5d-810b-99392d46854f","sequence":{"long":2954},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff06dda1-1f39-46ab-8a0c-438e3e093b8b","sequence":{"long":2955},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d19069b-1910-421e-89b6-55beebab2a2f","sequence":{"long":2956},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2112c79a-7d74-47ed-a406-473254d137f2","sequence":{"long":2957},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5262691-0c7c-4fb2-aeca-090c84a00df9","sequence":{"long":2958},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af395485-10ec-4171-a961-8ca116d4e784","sequence":{"long":2959},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9836c6f2-f8be-4c50-b83a-e1181ec4d7bf","sequence":{"long":2960},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9dfec83-68be-4246-85f6-17f998770768","sequence":{"long":2961},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/README.md"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"745458ec-83ee-b052-ae83-2efb22b0cb41","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c49a10de-65db-412b-86e2-bbfa454eb681","sequence":{"long":2962},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"745458ec-83ee-b052-ae83-2efb22b0cb41"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/out.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09396afa-8182-43c2-9564-cfe649f3fb8d","sequence":{"long":2963},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2498},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f33f714-e2eb-4da4-9868-d026f558712f","sequence":{"long":2964},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a08aeff-fa68-40ea-896e-ecbe38dbf143","sequence":{"long":2965},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0ab8491-12e2-4962-8410-940064560678","sequence":{"long":2966},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"175035ab-8d93-4f4f-85cf-f0117921dc7d","sequence":{"long":2967},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e165c8ab-b426-4488-a5b1-405ee908ed36","sequence":{"long":2968},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bed53ebd-4b14-449e-abdb-48de29b828b4","sequence":{"long":2969},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"745458ec-83ee-b052-ae83-2efb22b0cb41"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2498},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8d75a51-de17-45d9-af92-b80b04c7ffc1","sequence":{"long":2970},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"745458ec-83ee-b052-ae83-2efb22b0cb41"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77eb5632-07a4-4942-9994-c40d789252d8","sequence":{"long":2971},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fd97727-7774-4637-a47f-4da04da5c330","sequence":{"long":2972},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1352},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e85f88c-b648-40ce-8153-4030b66624ef","sequence":{"long":2973},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":554},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fac368df-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1342,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582961854200266},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e8beb78-661f-40fb-a2bf-e34eacf449ab","sequence":{"long":2974},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1342","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1342","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"572153cd-c742-4b94-9b7d-e309fa7b6469","sequence":{"long":2975},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a25295c-7d94-402d-9489-da1bd6aae0c0","sequence":{"long":2976},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582961854200266,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1107020b-e6e0-4ea6-8836-56c1d2e703c9","sequence":{"long":2977},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6096c3b3-3509-4e74-9b5f-1c0cb5d5f8f6","sequence":{"long":2978},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33cb85dc-ab52-4bf7-9886-c9e80306572e","sequence":{"long":2979},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8b8d2c1-59e2-4753-90bf-93f1e2ad6a99","sequence":{"long":2980},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cbf7a1e-a18c-4cfc-822d-702bcf2d6603","sequence":{"long":2981},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ac55d45-1a5f-49f0-b2db-e955a5892154","sequence":{"long":2982},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e8fe1d6-33ca-4281-9b2d-feadd1fcca08","sequence":{"long":2983},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a58b359-8150-44b6-86f5-a23fb11c7c3a","sequence":{"long":2984},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de48a7a5-6c84-41f1-a5aa-730591ce73b1","sequence":{"long":2985},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"568a49c3-b9f4-42fc-beef-9b08a198cea4","sequence":{"long":2986},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c227575-7711-441d-a859-8ebcabb5e2ff","sequence":{"long":2987},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d7d8f3b-0130-4cdd-8ffe-32fc331891ba","sequence":{"long":2988},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c67ed1e-7e45-4064-963f-cd111160da48","sequence":{"long":2989},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a9f1a3f-ffad-4c33-b226-12f1b622a198","sequence":{"long":2990},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a44e203-d4f2-4c49-aedd-0f5576b49308","sequence":{"long":2991},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9579e38-05d1-4ff1-a240-7d7e7891474d","sequence":{"long":2992},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a103ccc8-41b0-4e53-8bda-21421d6a88f7","sequence":{"long":2993},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8db08239-b305-421d-b8fc-50707407c6a7","sequence":{"long":2994},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f50a97fe-cb97-4cf7-aabb-6eba9792f967","sequence":{"long":2995},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a0e97ab-2637-4e72-99bb-237ae8653f74","sequence":{"long":2996},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":284908},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8edd900b-5a46-4a3c-bb6c-3b365c75c368","sequence":{"long":2998},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f09cba3-12bc-4732-91fd-f81350e7c38e","sequence":{"long":2997},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3256a35a-fbec-444e-8b8c-e7847bb9aa05","sequence":{"long":3000},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fd0a2f1-0fc9-42dc-8ebb-e544b7ac71fb","sequence":{"long":2999},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43dac641-e53e-407f-83c2-e8a23d8448d2","sequence":{"long":3002},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b150c3b5-137e-4a7f-a815-7e8801030957","sequence":{"long":3001},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ae5ff54-80f6-402e-80b2-f6511363c92a","sequence":{"long":3004},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5da9e2ae-ebbb-4220-a036-f31bcafcbe44","sequence":{"long":3003},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c778c08-4623-42ba-a268-9f07c60d6531","sequence":{"long":3005},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f357c13-d743-4439-ba38-68cccda7dd0b","sequence":{"long":3006},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd820df1-f100-48d5-b04e-40cee239bce4","sequence":{"long":3007},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4c66031-7873-4437-8392-85d4c0fee12a","sequence":{"long":3008},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4799},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb34c917-d59b-44e2-acf0-988d775bba74","sequence":{"long":3009},"type":"EVENT_WRITE","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52a91e6d-e9fa-425b-8c64-bdb36719a3de","sequence":{"long":3010},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4852},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7b0bdf7-73cc-48c0-9041-2cec74327067","sequence":{"long":3011},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"124a928a-8ea6-4184-804b-50ab78382333","sequence":{"long":3012},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d87e2c32-88f6-4bfd-a334-950c071a0733","sequence":{"long":3013},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4158},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8643848-f79b-4ba0-b0cd-7bbceb296b03","sequence":{"long":3014},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4211},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93a860d3-75a1-4adc-b392-e8a34bb638b1","sequence":{"long":3015},"type":"EVENT_WRITE","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27d52103-3b81-45c1-b105-c3075d20579b","sequence":{"long":3016},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6075bf71-cb9e-4c7a-ad03-d904dd14fe45","sequence":{"long":3017},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a186bd7-d9e5-4dbb-8bb8-02a56ecc5174","sequence":{"long":3018},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4916},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00f7339e-72e1-45e0-b987-fd647d0096d1","sequence":{"long":3019},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4969},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0ef9155-cde5-41ac-983d-e032b2cfd54a","sequence":{"long":3020},"type":"EVENT_WRITE","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3033f997-ff1d-42ee-b11a-c3be5d5d02df","sequence":{"long":3021},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ee5ea03-3886-4683-ac1a-6d17d5fb043c","sequence":{"long":3022},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962316591861,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":294069},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e524946-f7c3-41c0-b451-36ac3a704749","sequence":{"long":3023},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"689856c0-64d6-48e1-9c8d-00393aebb55c","sequence":{"long":3024},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90723120-c8f2-4c31-b5dd-54d311376091","sequence":{"long":3025},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fb5d222d-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1343,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582962864346154},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e145969-04a9-476a-bbec-0ce6b203a61f","sequence":{"long":3026},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1343","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1343","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8b237bf-d3ce-48bc-8626-47e350296476","sequence":{"long":3027},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"0f7e034a-4539-ea5b-b945-2560fbea7185","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"462748b9-60fc-44d6-ae1e-f8cf67fa0189","sequence":{"long":3028},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0f7e034a-4539-ea5b-b945-2560fbea7185"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582962864346154,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_buf ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a715f9d9-cde5-47dc-9c89-4d595a17620e","sequence":{"long":3029},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c69ae2a6-22f8-45f8-91f8-7b3c2ab921be","sequence":{"long":3030},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9861210a-966b-4f1b-beb6-7b2c21ce7978","sequence":{"long":3031},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5003929-b282-4098-8126-b815489a7fa3","sequence":{"long":3032},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cba80fba-eac2-4fe6-9c20-f61f7b25c0bb","sequence":{"long":3033},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05e14dc3-b1d1-4e00-ab66-ef45fab98ad6","sequence":{"long":3034},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eda73306-62bc-4e51-be79-5b512b651428","sequence":{"long":3035},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77e50a89-cb57-4e6c-ae4d-224dcfd24b17","sequence":{"long":3036},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34cd3a8d-a52a-432c-a0e4-1a4f1bea27ff","sequence":{"long":3037},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a9d096a-245f-42d1-9960-3890e657faa7","sequence":{"long":3038},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c4833f9-14f6-4a5f-b8df-74a7e24cf74d","sequence":{"long":3039},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0aad4f60-4168-48c1-9d1f-a04d09c834de","sequence":{"long":3040},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0ed3e0b-b550-4d5a-98c4-c93a1e26b260","sequence":{"long":3041},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f4b6b7e-56ee-4bb3-83b5-5b1a362b4520","sequence":{"long":3042},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36ea0c20-6998-43b0-9977-aa4b2de2b63c","sequence":{"long":3043},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"412da36d-0124-4162-b1b5-707667e364bd","sequence":{"long":3044},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e77b1f5b-f13c-4ac5-9ed4-bf215d5775ce","sequence":{"long":3045},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16b19c70-2d27-4f1e-b88c-6cc9159ea548","sequence":{"long":3046},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab132957-1842-43d3-b826-b5cb89bbe5c2","sequence":{"long":3047},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac682aac-fd1d-4891-8dc4-65f39afc83f7","sequence":{"long":3048},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09b34f67-b49c-47a3-a82b-95b9cdbb41f0","sequence":{"long":3049},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1330},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38d2a7e8-9783-4d50-b038-f3742d6de1ef","sequence":{"long":3050},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":588},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fb5d782c-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1344,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582962864346154},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"404d0db9-2247-4598-a3c8-e4dba9724059","sequence":{"long":3051},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1344","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1344","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34303b46-650d-4fd8-b26b-feb03ac4f816","sequence":{"long":3052},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"793daf52-5baa-443c-9f4a-986d7be3b399","sequence":{"long":3053},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582962864346154,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be79e4d2-62aa-4795-89ea-0c6ada84d301","sequence":{"long":3054},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c211ff8-4750-479c-8ec7-1be955c4883a","sequence":{"long":3055},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ada5aa53-1272-4379-8ec4-b80edf3f7816","sequence":{"long":3056},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"929e9336-1f85-450e-8829-8e8252283f29","sequence":{"long":3057},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"103b0651-98b8-4234-87ce-45b9dcad961f","sequence":{"long":3058},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54edd275-a2e6-45d1-bf08-69fee1bbd3dc","sequence":{"long":3059},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e9051f5-0e0f-48e2-b8e8-6437a19bd0f6","sequence":{"long":3060},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93b3899e-e658-4c9f-aa8d-706226e2feac","sequence":{"long":3061},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7371459e-8b7f-4886-a715-74bc781689d2","sequence":{"long":3062},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"164049c2-802c-487f-b473-f951d0f0eca2","sequence":{"long":3063},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eea55325-240f-47a4-ac45-723c1b3eb23a","sequence":{"long":3064},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aede5048-2c89-44fc-8fc7-1986e0b7a660","sequence":{"long":3065},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23ea944f-28fa-4957-85f5-fe53a458e907","sequence":{"long":3066},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccaa1a9e-c173-4ff8-8e19-f02a32285df6","sequence":{"long":3067},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ff82c74-3e21-43e4-8ea4-15d1ea85c767","sequence":{"long":3068},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963333887767,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":298938},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"329540b6-13b8-440f-885a-1cec5e98e2e7","sequence":{"long":3069},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0a0e4e8-831e-46c6-b690-ff56f28a0504","sequence":{"long":3070},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef17eb76-ecea-43c1-87e7-59a300a1b191","sequence":{"long":3071},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":38},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fbf7369e-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1345,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582963874413329},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d96563a-1139-4080-93cb-c94966e8276b","sequence":{"long":3072},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1345","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1345","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7002ce00-f052-4e06-b31f-7473dfdb29a7","sequence":{"long":3073},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"8d001f29-417a-805e-ba41-cecf5e804caf","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"947da791-d894-45d3-8726-2dde0afadab2","sequence":{"long":3074},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"8d001f29-417a-805e-ba41-cecf5e804caf"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_stack_frame"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582963874413329,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_buf_stack_frame ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b42a17ba-70c4-461f-b418-539c0c58941b","sequence":{"long":3075},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30cd58d7-b627-45b2-b7b9-006813e37d66","sequence":{"long":3076},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89e34f22-1e9e-4a70-9bab-907659949876","sequence":{"long":3077},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13043873-7bdc-4668-8cff-9af4702661c6","sequence":{"long":3078},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"295d6ce5-fc9f-48b6-bdaa-bcb080151a38","sequence":{"long":3079},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79dd458a-0e6a-4183-8509-77d7537608fa","sequence":{"long":3080},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62e25a4e-60c7-4e39-8d03-b07fbea01467","sequence":{"long":3081},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17188ba3-8a9d-4dfa-ae56-46c36c03ea4f","sequence":{"long":3082},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9fdbefc-a558-4086-8322-171ad7572bee","sequence":{"long":3083},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b28ae05-b651-4381-bdf8-bf9666b5ce3e","sequence":{"long":3084},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b1641ba-f945-4871-8aa6-75b4c8aa6460","sequence":{"long":3085},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6e0a11e-1b73-490d-ace8-61275c449c63","sequence":{"long":3086},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"747d94bd-e5fd-4529-b279-466091f4caa5","sequence":{"long":3087},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e11b10c-cb8d-486d-bc35-e98b05934ac3","sequence":{"long":3088},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac7b23e2-9eb5-42ab-be0f-ea5c9c8380b9","sequence":{"long":3089},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e486440-3421-4b3f-854b-708ad8732319","sequence":{"long":3090},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4280af14-83a5-4be3-9b7a-434f1578c7c5","sequence":{"long":3091},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf62fc60-0c8f-40e2-aeb3-26f8e6d94da7","sequence":{"long":3092},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b802f16a-d092-4f81-86f6-e332a1f4acf6","sequence":{"long":3093},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41246ce4-8a88-47c1-9701-7b65dddcf6e2","sequence":{"long":3094},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63357eec-6901-4042-b28c-bfbdb379c684","sequence":{"long":3095},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1296},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63773db4-4115-4a18-89a1-bd51d7fedf42","sequence":{"long":3096},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":617},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fbf7b574-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1346,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582963874413329},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f895231a-136e-4d48-a018-07c18cb24526","sequence":{"long":3097},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1346","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1346","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"555d0867-72a8-437d-80bc-8437527d3112","sequence":{"long":3098},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c6a2db1-632d-4d29-9251-e05e9724abc3","sequence":{"long":3099},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582963874413329,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"149831c7-c995-46bc-85b8-939e4868fc4e","sequence":{"long":3100},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a7679c0-ec34-4805-8281-46dbf16cac73","sequence":{"long":3101},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"418aea7d-30b1-466f-bdc9-55d4417997a2","sequence":{"long":3102},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f85141d-da9f-46ce-b4e7-d5076b9fdf96","sequence":{"long":3103},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"039e1fef-9ef6-403d-8f5c-e42aea6b0923","sequence":{"long":3104},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f7091b8-499d-45c9-b51d-8ddc7dda354b","sequence":{"long":3105},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa4b5e21-f3f5-45aa-ba91-f514f65fcd2c","sequence":{"long":3106},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35a82d29-94be-4718-a5df-d29917512577","sequence":{"long":3107},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"727e8e54-b73d-45f1-9103-7034f6a41e96","sequence":{"long":3108},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cc35a41-467b-4c4a-ba11-29b01bd9b951","sequence":{"long":3109},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c1f2f63-9628-4258-981c-b4187b7b73ae","sequence":{"long":3110},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f27dc7d-181c-4ccb-883a-5d7559ce367c","sequence":{"long":3111},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04df5feb-d36c-474d-a7d4-c0f787d32249","sequence":{"long":3112},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0aa54103-c45f-459b-8c21-060c29a16dd5","sequence":{"long":3113},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c9acf90-5cdf-46ef-8f16-ef9139282f35","sequence":{"long":3114},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964344364848,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":303803},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c40671ff-b4af-483f-b707-c73282ea0e48","sequence":{"long":3115},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f1756d6-6182-46ea-b604-665769323d5f","sequence":{"long":3116},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"485","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b00f08c-74ae-47c5-8986-6d6867127ac1","sequence":{"long":3117},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"486","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4e1adbb-dd0f-4c47-b296-589174f99ff3","sequence":{"long":3118},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"487","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9505b65-c6b2-4fa4-bd0f-94edc173753b","sequence":{"long":3119},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"488","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd8a99e5-12dc-4118-ba32-4dd424ec1e04","sequence":{"long":3120},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"485","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79d19319-2eb8-4076-a928-6f34be3b7761","sequence":{"long":3121},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"486","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2640b2cc-8229-4a24-aadf-b0a0a9ce8097","sequence":{"long":3122},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"487","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"347e0344-d591-427c-9230-479e61a266c8","sequence":{"long":3123},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"488","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fab3da6f-f57b-40c6-9e8f-37657e3e7f95","sequence":{"long":3124},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"856c22a4-6052-4faf-91cf-0d2b7dce46f6","sequence":{"long":3125},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0896340d-c5b7-4a68-99ae-e5e6f2737da7","sequence":{"long":3126},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fc92c880-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1347,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582964894021958},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bdf6469-54bc-4c41-bcef-14313e9f9495","sequence":{"long":3127},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1347","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1347","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3379a639-6ed0-489f-8488-870c97e2bd66","sequence":{"long":3128},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"656c7084-7a51-2d53-917a-60f4832de58f","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92f87208-d301-4d14-961f-74a7c7bfecd2","sequence":{"long":3129},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"656c7084-7a51-2d53-917a-60f4832de58f"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_string"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582964894021958,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_buf_string ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90ab838a-9066-4b70-b156-cfd98b42d053","sequence":{"long":3130},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"925053b8-8ed7-4a5b-9ad0-43c7635d2268","sequence":{"long":3131},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9855696d-6f85-4710-940e-4288883d337b","sequence":{"long":3132},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc620e0d-ddf9-4b12-a0c7-bad54d9acc6f","sequence":{"long":3133},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fc53ec2-66f0-4ede-ab47-2bfc194ddc79","sequence":{"long":3134},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce7b822c-8ea0-439e-bcb7-228534426f13","sequence":{"long":3135},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afbf7225-8d53-4bd4-8707-d0dc0dd47890","sequence":{"long":3136},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b46ea696-9648-4072-a6cb-5ea9fb2bf155","sequence":{"long":3137},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53da8db4-6749-4145-b0ad-54328f1d9a67","sequence":{"long":3138},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd5c5aa7-654f-4af3-9527-33cf2fa25b4a","sequence":{"long":3139},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52645633-05c8-4700-b846-9602af49f747","sequence":{"long":3140},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c7dc619-79fe-4ae8-914a-d8d6c1176371","sequence":{"long":3141},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18b869ec-d647-4414-aabe-caf7ada49d8b","sequence":{"long":3142},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b38ee29c-b547-4b1c-8618-5744d6d4e6cb","sequence":{"long":3143},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1a8d969-f439-42fe-a268-54322ecbe2f9","sequence":{"long":3144},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8111875b-43e9-429e-a970-4395d1317bfc","sequence":{"long":3145},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab453409-d4b9-48ae-9f9a-1e91f8def5d8","sequence":{"long":3146},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8aa9f9ad-c332-47f9-bf1d-45baba4d00cc","sequence":{"long":3147},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"274ac2b9-211a-4603-925f-aeeb6cd51436","sequence":{"long":3148},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aff819df-a68c-49f0-abff-c84c93dc924f","sequence":{"long":3149},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"230a3cda-28d7-4335-b11b-d748f2e8cc03","sequence":{"long":3150},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bf7f639-8519-4146-9e06-0158dd0af889","sequence":{"long":3151},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1267},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67993b52-eed9-465d-aba5-6ea30850569a","sequence":{"long":3152},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":644},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fc932cb1-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1348,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582964894021958},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"994e05ad-679f-402a-8ca0-fff537023d00","sequence":{"long":3153},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1348","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1348","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcce0abb-3c99-4955-b527-c152bd3f9617","sequence":{"long":3154},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8983c611-7b58-4931-be57-561f1e739bc5","sequence":{"long":3155},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582964894021958,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67e2a9a9-8262-42c3-8588-ce961e77d3ba","sequence":{"long":3156},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8810ebbc-4a9c-46f1-b897-5817a4beb0cb","sequence":{"long":3157},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0585c35-d237-4e8f-a4c7-81b381718612","sequence":{"long":3158},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"731273de-6790-4bc6-a1a9-ae157387a72e","sequence":{"long":3159},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"937a02de-5e22-4af0-b2e5-cb16c8b9457f","sequence":{"long":3160},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965354116724,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":308830},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2f59836-3495-4226-a63a-7c339558fe4d","sequence":{"long":3161},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b0a3938-37f5-48c4-b5d0-c166d3a7484f","sequence":{"long":3162},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90887fd4-5195-4e1a-b6d1-be5e8f44b1b1","sequence":{"long":3163},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":31},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1349,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582965904301107},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2aa6d3ed-c9bd-4830-8b11-09c92a3fa432","sequence":{"long":3164},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1349","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1349","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b104c75-a43b-43e0-9d96-42f9acd6edef","sequence":{"long":3165},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"a40cfc78-90a1-075c-a190-f4d7ac07bd69","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c28a0e2-1519-4571-9d08-a75fd0b34542","sequence":{"long":3166},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a40cfc78-90a1-075c-a190-f4d7ac07bd69"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_heap_buf"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582965904301107,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_heap_buf ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28428689-7aa8-4825-8324-686494fe8622","sequence":{"long":3167},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac7d8d1a-ca6b-415d-8676-ccd403f32099","sequence":{"long":3168},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbc9ef6c-cc94-460e-8354-96f046228601","sequence":{"long":3169},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6589acb-52f5-4c07-8fb5-cd5ec0f76425","sequence":{"long":3170},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85f26905-cb33-47f4-a39e-3753966b8132","sequence":{"long":3171},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f90bd1ed-e0c8-492d-a2b3-f5689e4e14ba","sequence":{"long":3172},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"830a3c4f-304f-48ca-be0a-6b9d7d6a6af2","sequence":{"long":3173},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d503dd86-f6a2-40b6-a720-3b5bbb5164b3","sequence":{"long":3174},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d323105b-6167-4ab9-8507-ffdde5114f1c","sequence":{"long":3175},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bff7f2d-4b18-4d6f-b223-6ce01e83644b","sequence":{"long":3176},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"267b7d1f-7847-4209-8f84-37e70b85888a","sequence":{"long":3177},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fe17bb4-2857-4f08-91c1-08c472448488","sequence":{"long":3178},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"920f6245-1413-4486-8bdd-eabd478ebe23","sequence":{"long":3179},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db2f206e-85f1-4b67-83b0-5f60ae8a8601","sequence":{"long":3180},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20cf7529-2e1c-4683-a343-2cb33d4e9bbf","sequence":{"long":3181},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"963ecc82-13ef-4969-b07e-35880650e6cc","sequence":{"long":3182},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ad5f900-958f-4112-b77f-cb60c4685404","sequence":{"long":3183},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7933e318-ac21-4712-9ac6-f7518ea87255","sequence":{"long":3184},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ead150a6-abca-464f-b23e-6d9a602e3fee","sequence":{"long":3185},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2315d9ee-3908-4892-ab7d-0272131fabdb","sequence":{"long":3186},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b237cdc-35b2-4915-822f-9402dca0ecd8","sequence":{"long":3187},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1240},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f601c3c2-a87d-48ce-9d34-b0abb2290b47","sequence":{"long":3188},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":663},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1350,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582965904301107},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c802eda-ea04-4965-bbd8-c32aec40d134","sequence":{"long":3189},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1350","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1350","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e073df96-5d3f-4968-b4a0-6158fc7dab49","sequence":{"long":3190},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecaadf54-6a0f-4646-b17e-e6591a50afdf","sequence":{"long":3191},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582965904301107,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da6fc368-d57c-40f3-85b3-627600bbf00d","sequence":{"long":3192},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c1de7e0-3eab-41ce-8ddb-6bb1b151d912","sequence":{"long":3193},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9cf04cb-85b1-4b16-940f-efbbaf56d49f","sequence":{"long":3194},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf5d1ae5-db34-430b-aca4-6a0cbef3a3da","sequence":{"long":3195},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6415b11d-8720-44bb-beb8-622ebe1231fd","sequence":{"long":3196},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64e85e79-ca26-4e93-9972-a4428d263a17","sequence":{"long":3197},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d18a081-58af-4702-9fad-ac6be5016219","sequence":{"long":3198},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6a87306-cbaf-4274-b5fb-78b3187c5d82","sequence":{"long":3199},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12657d20-99ae-40dc-8fce-3fd382980637","sequence":{"long":3200},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"758ba30b-2be0-4b12-9eb3-2e4d2f2c6a7d","sequence":{"long":3201},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"996de880-8a5b-4831-a425-6369ae2299f7","sequence":{"long":3202},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ef85dce-b87e-42b8-a0da-d9489ee3daa6","sequence":{"long":3203},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c81fe1f-ccf0-4e8e-ac71-ea958252808d","sequence":{"long":3204},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4266baea-40fa-48ab-aa8f-14ddd66c072d","sequence":{"long":3205},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0909377a-e659-4f86-a4d9-7ab9b84b6e3c","sequence":{"long":3206},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966373962760,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":313695},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9d73f2a-75c9-4d60-9fe8-535a755e3007","sequence":{"long":3207},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c01c184a-84eb-4388-b5b6-ef716b941334","sequence":{"long":3208},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcc71fb4-2b03-4e3a-b2a2-ea4ada0cd274","sequence":{"long":3209},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":23},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fdc88672-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1351,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582966924213856},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc993bab-73fe-48b5-9b8b-09d02f94a700","sequence":{"long":3210},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1351","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1351","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51823ccd-edd8-496e-b3d9-13ca78d9d768","sequence":{"long":3211},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"1bca75f7-71d4-1553-9471-f02cd31597be","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db2fec96-f812-4f0f-bfae-143e0515ff46","sequence":{"long":3212},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"1bca75f7-71d4-1553-9471-f02cd31597be"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./fork_process"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582966924213856,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./fork_process ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4b31dd6-117b-45ca-a17c-8f804af9cf02","sequence":{"long":3213},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38cb4155-f8d8-4d77-8c56-1775daf93f96","sequence":{"long":3214},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88af0a22-6b7a-489c-872d-bc271f50e84f","sequence":{"long":3215},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fe2337b-1eb5-4558-aca8-b423be4f4881","sequence":{"long":3216},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f27b2e4c-28a2-4673-8e77-bbb8434405fe","sequence":{"long":3217},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74a20d28-4bc9-4a12-aea0-bfd3b992691d","sequence":{"long":3218},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a54b3908-a14a-43c0-be48-2e9404c5e398","sequence":{"long":3219},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f78f41cd-1ecf-471c-8979-3edca6c52a9d","sequence":{"long":3220},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d5ad755-177d-4c2f-a55a-86fcd2d1e510","sequence":{"long":3221},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1adc2e68-2031-4797-845b-049049fdca7e","sequence":{"long":3222},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"549ceaa0-50ff-4ab8-b25c-3eb87f9e7829","sequence":{"long":3223},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"882ae143-9f3d-411a-bda7-dc9d7a5885a8","sequence":{"long":3224},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c52eed8e-05dc-4ffb-8c99-e211579fdef8","sequence":{"long":3225},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da9006d9-9e0d-4430-aab7-a316e140cf21","sequence":{"long":3226},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0588bd6f-4c50-4923-8c1d-9892f2101303","sequence":{"long":3227},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"648e0e64-5461-4148-a979-8cc75b1c2ee4","sequence":{"long":3228},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3509e3c-ef55-42fa-9b0c-151d29a576a2","sequence":{"long":3229},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b62004a9-b09f-47ba-8e81-5fcc6881fe42","sequence":{"long":3230},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cdd0d4d-6612-48be-a38a-a4d0c2c99507","sequence":{"long":3231},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fdc8d004-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1352,"parentSubject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582966924213856},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c07dbd6e-bdc0-4864-b715-db8c7d34ffb6","sequence":{"long":3232},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc8d004-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1352","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1352","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69d6fe4d-d081-4a27-b386-442f0f7cf8b8","sequence":{"long":3233},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b507898-6d10-4749-ae4e-b5de42ef5243","sequence":{"long":3234},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"215a4ad9-f710-466d-a4ef-a892ca5ff04e","sequence":{"long":3235},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"fdc8d004-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bddf30b0-9fdb-4f9b-83be-3383c37c2330","sequence":{"long":3236},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1221},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01db975e-2d7d-4aa6-86cb-f82a1e32a9c1","sequence":{"long":3237},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":677},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fdc941e4-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1353,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582966924213856},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a4729fb-5647-49dd-849c-7db114602089","sequence":{"long":3238},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1353","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1353","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85d6636b-7593-4216-a3ea-952977d3406b","sequence":{"long":3239},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"fdc8d004-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc8d004-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8523181b-bf3e-47cc-9a00-3fb1ebef1d01","sequence":{"long":3240},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50e48ac4-7b7e-48f4-b11c-89b3336cd994","sequence":{"long":3241},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582966924213856,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8f795ec-ac65-43ba-82c6-5039dc84414f","sequence":{"long":3242},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed01c2d1-4d31-4e26-b9fb-1207fe2d186a","sequence":{"long":3243},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"078ad7fc-c94f-46f8-9948-ed6f5db400fe","sequence":{"long":3244},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"455c3ee1-88aa-4db9-a6f9-e31dd1b0a93a","sequence":{"long":3245},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93d8968e-d28f-4ea9-93de-ae898b3fd1c0","sequence":{"long":3246},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ca8602f-7bde-417d-a075-0747fb279faa","sequence":{"long":3247},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5375df74-53e9-491a-9569-de228d227a8d","sequence":{"long":3248},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b073bca-293e-4a6b-a0c9-d292fbb6e12b","sequence":{"long":3249},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f6c36ca-e3dc-4f2d-b4a3-22d359915b35","sequence":{"long":3250},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"748992ed-5256-47c5-9f6c-dc1846d9cf3c","sequence":{"long":3251},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8c62e95-f72d-4a93-8840-32b1600d6d40","sequence":{"long":3252},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967394080897,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":318788},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6e66f97-aac7-442b-9bff-8336c7048d04","sequence":{"long":3253},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d341fe0-fb7a-4735-9a76-f131c3461d7e","sequence":{"long":3254},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"490","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88711c84-2678-46ff-85b1-f57ad075071f","sequence":{"long":3255},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"491","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ba12e63-c1d0-4a2b-85fb-6cae43c35bb0","sequence":{"long":3256},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"492","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2e978a8-37c7-40f8-a597-a5bf03a94434","sequence":{"long":3257},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"493","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c0325f2-af48-425b-95f0-2d98875ba550","sequence":{"long":3258},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"490","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"283ac989-cd08-4cec-b5b1-42d1de69c85d","sequence":{"long":3259},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"491","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c32fc41-f0e7-4ddb-a4d4-b30e7b20f7e9","sequence":{"long":3260},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"492","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"871d204e-6f1f-4dd2-ab21-e13720fc8662","sequence":{"long":3261},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"493","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae047576-e1dd-465d-afad-ae8a8c9138f5","sequence":{"long":3262},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e42eb68-3f41-4be5-944b-611ae8f341cd","sequence":{"long":3263},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"347d131c-b01d-4471-a250-5a443de143f1","sequence":{"long":3264},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":18},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fe646b69-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1354,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582967944522023},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01cd4759-8095-418d-8395-9ec93d2867c6","sequence":{"long":3265},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1354","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1354","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e18f7e07-c958-4989-9e46-22463919b54f","sequence":{"long":3266},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"2e1f69d8-d3e4-2950-a4d3-829bb0298789","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faf1619f-d6ec-4d2d-b933-aa74191e534a","sequence":{"long":3267},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2e1f69d8-d3e4-2950-a4d3-829bb0298789"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./listdir"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582967944522023,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./listdir ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2adfbb28-9f38-45f3-b8cc-26539de63feb","sequence":{"long":3268},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bae8a668-1af8-4d87-9cea-bffe89da226c","sequence":{"long":3269},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70b8904e-f6ec-439c-88af-d09b5a7216da","sequence":{"long":3270},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ade30e24-19f1-4bcb-8945-866112c833a3","sequence":{"long":3271},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92c5cdf7-f108-4e2a-a53c-9a2faaca891d","sequence":{"long":3272},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e90a5e5-e916-4086-a658-227fe81706b6","sequence":{"long":3273},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01b6dfe5-e8ca-4423-a99c-363505093924","sequence":{"long":3274},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e282524-4f6c-438f-8f76-f1530377b78b","sequence":{"long":3275},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8db6343-52a7-4108-9d55-4c610a5439a4","sequence":{"long":3276},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f243b7e9-2fa0-452d-bfc2-51921cb3b0d0","sequence":{"long":3277},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d564f59-8930-4cff-9328-60bd5f03f247","sequence":{"long":3278},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c661884b-fb03-48d3-9b0b-2ee85ba811d9","sequence":{"long":3279},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c349f035-ee17-447e-9bc2-ba163ca9cb17","sequence":{"long":3280},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"656cb9dc-d9de-4b0a-84d2-e5c46d84deb1","sequence":{"long":3281},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e827ca2-15ae-4101-b79b-5f8ead6170c6","sequence":{"long":3282},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bbdbbb3-d105-44f2-846b-833c704abbbd","sequence":{"long":3283},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5be92469-a2a3-4089-935f-fe5d160f5bc6","sequence":{"long":3284},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfe2a24e-81f2-462e-9a1e-f008ba85e8b0","sequence":{"long":3285},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38045483-2eb2-4a93-9605-c028851e149f","sequence":{"long":3286},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fc3c79c-5be5-4510-b666-cae9a0c2d4cd","sequence":{"long":3287},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00eb50"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f0290f5-28ab-42c4-9762-19d716db724e","sequence":{"long":3288},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"915f4780-01de-4df7-9c7b-a895cbe87c9d","sequence":{"long":3289},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8117b0d3-f3c0-479f-a72b-b9e74c7ee6ce","sequence":{"long":3290},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3dc78c5-3281-4541-b055-e3b21f7cd260","sequence":{"long":3291},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56729e13-1dc5-434d-9b3d-84cf132b0730","sequence":{"long":3292},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":9},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b76bcec-9ac6-456d-a3cd-8fbdfc5a4723","sequence":{"long":3293},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba510f8a-b4e8-440a-9c26-cf511498e804","sequence":{"long":3294},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f0d2e1d-7d30-4aab-b434-056b7f73f54a","sequence":{"long":3295},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f85fab52-98f2-47b9-83cc-c6bbb271c706","sequence":{"long":3296},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a87fe45-55d4-43d2-ba1f-2aa1688af7cf","sequence":{"long":3297},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a2918b5-8b89-4801-876b-79e0642ab256","sequence":{"long":3298},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d99d721-e966-4020-88ba-4615db55d3f6","sequence":{"long":3299},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":24},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9430e706-dfcf-4ad2-a621-71aca2180983","sequence":{"long":3300},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"607e651b-67bb-46ad-9bf2-caf294ee7b9b","sequence":{"long":3301},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab54a75d-60f3-4010-a4c2-176d0d71f4a1","sequence":{"long":3302},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42c0ca3e-8813-4e5b-8f6d-b4b63e58c5f1","sequence":{"long":3303},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9595cfac-2f5c-4107-9b05-471d6b57affd","sequence":{"long":3304},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":23},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30109f77-d272-4eee-b9db-bb077401eb07","sequence":{"long":3305},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":21},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07d90310-4252-4f0f-857d-a502a3c61c79","sequence":{"long":3306},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a4c64bd-a648-4986-81c4-fa2dc1582454","sequence":{"long":3307},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac437946-29c9-452d-9aaa-4d9d5a3c2a0c","sequence":{"long":3308},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":23},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5676884b-66be-46c9-9830-24cc41de6096","sequence":{"long":3309},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":24},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4704225-ea49-4e33-a1af-991616976961","sequence":{"long":3310},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"621316fc-b90e-497e-9b18-a3f0095dc2af","sequence":{"long":3311},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba003fd1-ec59-4d04-9216-8b1cda1f7efc","sequence":{"long":3312},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69954f33-8ede-4715-9c7e-7d1a7541d6c0","sequence":{"long":3313},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8636e5b-5d69-4ccb-9e7b-49a2ee4eba8d","sequence":{"long":3314},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e19deb6b-2132-4cb0-a766-cf8bd5846e9d","sequence":{"long":3315},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf9e0116-ccf2-4426-b523-4aca042f8335","sequence":{"long":3316},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d6dd879-5fc2-4499-9c5e-ccf9c31d7cb3","sequence":{"long":3317},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"834cbb62-9e05-4dee-8ac1-73dde657e71e","sequence":{"long":3318},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"827bd597-6efe-4c1b-9c14-f844fcc7a7c2","sequence":{"long":3319},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53a6507a-bd01-42c0-bdd0-3d205c7912ee","sequence":{"long":3320},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2941a840-b6f2-404b-b412-dd3000881188","sequence":{"long":3321},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e43289b9-3519-414e-a98b-893e6fe721df","sequence":{"long":3322},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31f13c0c-a1e6-44a0-a5b3-5718b16907b2","sequence":{"long":3323},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a7720ae-4fae-4502-983a-8c4eb8d946fe","sequence":{"long":3324},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":9},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce5c422c-abee-4bd2-ab39-56edec36ace9","sequence":{"long":3325},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04b33c8a-9185-4f50-9fff-4e4b670fbc15","sequence":{"long":3326},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aba83bbb-0481-4901-a2fd-68eb188186ed","sequence":{"long":3327},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cedc2fe-521f-415a-a69e-32830aa09b37","sequence":{"long":3328},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad179161-9213-4fd0-b0e5-b3eedc1bbe41","sequence":{"long":3329},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45fc41eb-0391-4b0d-a0ec-9023ee98c89f","sequence":{"long":3330},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b59d741c-822a-4b07-aae6-e87a6caf2bbf","sequence":{"long":3331},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f204005a-ce52-4fa3-95bd-227e23a91672","sequence":{"long":3332},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1207},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20fa602b-8cf7-4044-9f43-220e725e64eb","sequence":{"long":3333},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":698},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"fe654cca-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1355,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582967944522023},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42a3b1e3-e0cf-4570-9db8-60d71f0bf0c9","sequence":{"long":3334},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1355","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1355","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b77e7fb8-f85d-48a0-9adb-158c117221a3","sequence":{"long":3335},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc9b38a8-546b-407c-b040-768e7efce1be","sequence":{"long":3336},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582967944522023,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8c51ed8-1f86-4940-8b70-c305ab6b039e","sequence":{"long":3337},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8b27323-3016-4bc3-9e82-a11bcfc32fd9","sequence":{"long":3338},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81f86bf4-a21e-4d5d-8a11-428d5e85b754","sequence":{"long":3339},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adcc063d-f15b-475a-8d99-46b89d077880","sequence":{"long":3340},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad4c81c0-a3da-4ed9-8930-738c4666e52d","sequence":{"long":3341},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c446442-ec69-46bf-a219-d821a4d5eb52","sequence":{"long":3342},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c49f0c8b-11c9-4080-959b-4fde8c7981ad","sequence":{"long":3343},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb7e1e32-d40c-4204-8883-4b0f5c6a6162","sequence":{"long":3344},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968418492202,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":326677},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3817342f-f573-445c-92d3-0821929b399b","sequence":{"long":3345},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d40f7e2-df96-4deb-93a0-fa65f9ee97d3","sequence":{"long":3346},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"890bf8f9-b918-4789-8b1c-87d450a5dc16","sequence":{"long":3347},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":25},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"feff028b-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1356,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582968958047837},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a633fb42-36ae-43ee-8267-b6e96e296770","sequence":{"long":3348},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1356","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1356","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbd54bae-7b4f-4eed-8d27-6e80f91df3d6","sequence":{"long":3349},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"cbeb200e-1746-3e58-8617-b743583e4f59","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97f1bcee-cd2a-4418-8d21-c1ed980a47be","sequence":{"long":3350},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"cbeb200e-1746-3e58-8617-b743583e4f59"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./make_directory"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582968958047837,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./make_directory ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bee7390e-5884-40af-a632-cb159e1d4acf","sequence":{"long":3351},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56285927-36a1-4097-941b-ec095ecb2ced","sequence":{"long":3352},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7921ec1-2dae-4ffc-bc66-be6d233ac1de","sequence":{"long":3353},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d6472bf-da0f-4cde-903a-449e39d93725","sequence":{"long":3354},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f55dfb7a-3f7c-49f5-8119-28cc15b8dd3c","sequence":{"long":3355},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7b7a703-beb9-48f6-ab9f-e43597a7d856","sequence":{"long":3356},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1bfe78b-2bc1-49e0-a781-fdf5a06b40cf","sequence":{"long":3357},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be34de7a-53b0-4ddc-af37-14c147b77912","sequence":{"long":3358},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"483db2b4-694e-4155-a61f-d55d98e9a009","sequence":{"long":3359},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c848c025-6c54-4bfe-a915-732ce1701499","sequence":{"long":3360},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"205b265e-0f5a-4943-b4f2-04ad45d39891","sequence":{"long":3361},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f24c10ac-b96f-46c5-b8c4-dcd529268bac","sequence":{"long":3362},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac0710a1-5624-4a88-a21f-058674161c8b","sequence":{"long":3363},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eda39aba-285d-480c-ba27-065a19cddad4","sequence":{"long":3364},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"207cf077-690d-4449-94c8-76c034656ea5","sequence":{"long":3365},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d60612c-58cf-4d9a-974f-e81b739fa6cd","sequence":{"long":3366},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8466eb4-a829-47ca-a7f1-03bb153a46e8","sequence":{"long":3367},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bce2153-b4f4-4b8f-8e1a-c58bd74241af","sequence":{"long":3368},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47a35ce1-1a81-4beb-a6c2-b26cdda325a0","sequence":{"long":3369},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ef2077a9-1b4f-685b-8f1b-6859ab685e9f","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_DIR","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f9bf873-52f2-4c66-b1f5-7d7c9198ca2d","sequence":{"long":3370},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ef2077a9-1b4f-685b-8f1b-6859ab685e9f"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/temporary"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mkdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3510833e-2429-4417-a4e6-bcc11773fa7b","sequence":{"long":3371},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b7512d5-251e-443d-8f16-affd245e72e0","sequence":{"long":3372},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1186},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f899bb02-29c6-40b4-8b5d-46eca8f2bfde","sequence":{"long":3373},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":727},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"feff8c39-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1357,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582968958047837},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f98cd4c7-8a3a-4e7e-8887-eed001142d3e","sequence":{"long":3374},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1357","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1357","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdebcf84-82ca-4fc8-8f9e-6f3f67ca3807","sequence":{"long":3375},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aaced697-bb96-4377-9cd5-7d692c1f8328","sequence":{"long":3376},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582968958047837,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74cdeb0d-0b43-49b3-9269-88ce8873eb07","sequence":{"long":3377},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0243bfe-619e-4da1-b4ae-07cb24cdad25","sequence":{"long":3378},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36a52470-4d5d-4e41-bbc1-4a085281ee3a","sequence":{"long":3379},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f61bae5-4dbd-4e56-a9b0-6b789bf9a026","sequence":{"long":3380},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e4da2b5-5e85-4f5a-9470-6df8bc529643","sequence":{"long":3381},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b174d75f-d69e-451a-8003-de8ea52e55b2","sequence":{"long":3382},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d95944a3-13b6-4021-b33b-1b853c310dea","sequence":{"long":3383},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18fc62ec-aa45-455d-901f-b617ab9f0dc7","sequence":{"long":3384},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"421fcf00-e882-40a0-85a7-a7f4bcf835ea","sequence":{"long":3385},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0864352f-758e-4252-b57a-ec519dab2795","sequence":{"long":3386},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f94f240-89a8-477a-9190-f0eaba7a0bbf","sequence":{"long":3387},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6db6966-c8aa-4abc-b738-0b3851f49112","sequence":{"long":3388},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bac7615d-7ae5-4277-b289-e444026f7d43","sequence":{"long":3389},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b789e07-ddcb-4694-bbf2-5d868df74f9b","sequence":{"long":3390},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969434831514,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":331677},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5527229c-f8a6-47d5-9d00-4536a27f94b4","sequence":{"long":3391},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aef21d44-f50e-4bc2-8f05-ad1f462c4e56","sequence":{"long":3392},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63942358-7aae-40f8-a0b7-88c1e0831c1a","sequence":{"long":3393},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ff99fb10-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1358,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582969974290865},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2af5d4e6-49e3-4fe6-8cfe-11888548477f","sequence":{"long":3394},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1358","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1358","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7495181-c02e-43b5-871f-760f8e4b70e0","sequence":{"long":3395},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6741c59f-8ce3-8e50-a38c-f0d1808ea1c5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2355d67-6658-4bab-852a-ded51ab37d4c","sequence":{"long":3396},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6741c59f-8ce3-8e50-a38c-f0d1808ea1c5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_multi_write"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582969974290865,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./multi_read_multi_write ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c0097b4-014d-40ad-9300-3f7e7a3473b8","sequence":{"long":3397},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b291c142-b231-4c15-a670-9934dacba993","sequence":{"long":3398},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ed944da-9fa9-4adb-ab8a-00116419c011","sequence":{"long":3399},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f65ebb92-8d29-4614-8672-4b0c089e2bf8","sequence":{"long":3400},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e120ff5e-7dd8-4faa-9fc4-3cd7dad24beb","sequence":{"long":3401},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea6177ea-55a0-4533-8aa2-cc2ae13dc6f1","sequence":{"long":3402},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b459bbf-2bb9-44e0-8193-3108ee74e2ee","sequence":{"long":3403},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a4d3f80-a7d1-4acb-aa30-d07b859fd2e3","sequence":{"long":3404},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d172eb9-2556-4eba-8870-8ff640c5d6b5","sequence":{"long":3405},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5cffec1-d4a6-4812-8fad-30eb8e0f0aa8","sequence":{"long":3406},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b19d5d0-9ca8-465b-b555-b47df5e01afd","sequence":{"long":3407},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c63abb42-7ba2-45d5-b45f-e333aebff2b5","sequence":{"long":3408},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6e28a56-5291-4c8a-9265-d855b494f22e","sequence":{"long":3409},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8aec1a79-fddf-48ff-aa42-3360731b27da","sequence":{"long":3410},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26744230-aa61-415a-b16c-f8bcbdebc795","sequence":{"long":3411},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a8b45d6-d09a-430a-8c44-6bcec3fb0150","sequence":{"long":3412},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52b8d031-e844-4181-a019-a73c250f89aa","sequence":{"long":3413},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"527d847b-be6c-4e22-bbc6-0b9254573dd2","sequence":{"long":3414},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47393975-7774-4ef6-9626-50c24796f3bf","sequence":{"long":3415},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"66902a05-711e-db5e-9e71-61fe3edb93c1","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d9757bc-be64-4c69-b43b-374cfb10c95a","sequence":{"long":3416},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30fe0a7c-8a73-4756-a1a6-597cc6ffa09b","sequence":{"long":3417},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"9679d39e-c74a-3855-8ac7-3e3be538a626","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfada025-a098-43c2-8545-5efcaa185776","sequence":{"long":3418},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"9679d39e-c74a-3855-8ac7-3e3be538a626"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/output_file1.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"95dea952-8b38-a659-b88b-355249a60651","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"213fa72e-7e91-47ac-9cbd-a819c49f2eb9","sequence":{"long":3419},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"95dea952-8b38-a659-b88b-355249a60651"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/output_file2.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"119c6886-63e6-4803-b7c4-9035033d1814","sequence":{"long":3420},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":209},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"977ef3c8-d918-41db-866c-4197ef6c2083","sequence":{"long":3421},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":382},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ecc8a0d-2725-4cc5-8118-2b831534eefb","sequence":{"long":3422},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf505120-bbdd-42a0-8dcc-da3245768326","sequence":{"long":3423},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cebecb35-ebf1-4af8-b6c8-2a0a35da6513","sequence":{"long":3424},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"9679d39e-c74a-3855-8ac7-3e3be538a626"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":191},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee8a0a1f-76f7-40bc-b4f5-550269477955","sequence":{"long":3425},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"9679d39e-c74a-3855-8ac7-3e3be538a626"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"157a2088-abed-4a28-ac24-f588cc6c774c","sequence":{"long":3426},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"95dea952-8b38-a659-b88b-355249a60651"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":187},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4e352c7-e77b-451d-b38e-94f34c879580","sequence":{"long":3427},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"95dea952-8b38-a659-b88b-355249a60651"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0639de2-fa06-4fa5-96ac-3a88e3ea1b06","sequence":{"long":3428},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a39ba4d0-2b7b-4576-aecb-5734ae381d74","sequence":{"long":3429},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1157},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c3c22eb-234a-4968-a821-12a4fc1e69ec","sequence":{"long":3430},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ff9aa18e-467a-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1359,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582969974290865},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfa9d3ad-9afd-4758-a6be-22e3c794ee30","sequence":{"long":3431},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1359","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1359","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e88a2cc-d97d-43f3-832f-d405c5f901b9","sequence":{"long":3432},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd65c528-f291-43db-878e-b0286e93dc51","sequence":{"long":3433},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582969974290865,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d71068c-53aa-465e-8f1b-7f263dc92df2","sequence":{"long":3434},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a2b5095-ec47-468a-87b1-95ebd89b0f24","sequence":{"long":3435},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bf103cd-3bf0-46fc-b680-01d8e741159d","sequence":{"long":3436},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b15fbdb-5195-4d59-8284-f3c72ebac8e3","sequence":{"long":3437},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94f28289-0e05-4784-ba03-3ffc792d4df6","sequence":{"long":3438},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98679789-b258-4784-a4d2-64e239df2d70","sequence":{"long":3439},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"836e835e-6b45-4c22-a42b-4ea3737bb096","sequence":{"long":3440},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3648f0a1-673d-42db-9867-a179c96c09e8","sequence":{"long":3441},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"544bdf28-5cef-4d10-ab86-7506226462d6","sequence":{"long":3442},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b640692-4426-45ae-b9cc-749195758e7d","sequence":{"long":3443},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc5cd35c-a855-407f-a92a-d681b632e3cc","sequence":{"long":3444},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1ef1321-abd8-4a50-9267-8ea377d93c35","sequence":{"long":3445},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"326c580b-2e4d-499d-bd92-8c6628435cb4","sequence":{"long":3446},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8b17ae9-b1ff-424f-b8cb-b2c8a8ca0513","sequence":{"long":3447},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb218fff-9c00-43c9-bacb-260d0d4405a2","sequence":{"long":3448},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2a9e3cf-027d-487f-9cee-55c2f51c2ae0","sequence":{"long":3449},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0c47d15-19e4-4f3c-9c52-0d4eff757f26","sequence":{"long":3450},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dc6b83c-9b76-4508-aff2-9a0385670a33","sequence":{"long":3451},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55d2cf3d-2853-4360-88bb-3cd845b8cd41","sequence":{"long":3452},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbcb85d7-c789-4d56-b559-a60a1d4f8779","sequence":{"long":3453},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":331677},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5ae6371-901b-48cb-972e-9dacc4f9765b","sequence":{"long":3455},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9e3c6e9-ab02-470c-8c8d-d3c3c8b96ec1","sequence":{"long":3454},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"068bc795-c6e2-4f58-9f19-83ba342c207e","sequence":{"long":3457},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af8f4f48-a88c-4766-9a51-0a2bfd97b860","sequence":{"long":3456},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61b1a684-0240-4cbd-932d-eb2d3b8327cd","sequence":{"long":3459},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c0cb061-e30d-4a34-895d-e33c82c99cda","sequence":{"long":3458},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f54771e-53a2-4471-9c4c-0ae980354ca5","sequence":{"long":3461},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8991b6bd-0c3e-4c20-bd94-551b7531c91a","sequence":{"long":3460},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"653d9c44-818c-445a-876f-6eca18f68f1c","sequence":{"long":3462},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7d86a61-c29b-46f8-8d2c-37504049b1ff","sequence":{"long":3463},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15fedbef-d006-4750-adb9-4a3cbfb15c89","sequence":{"long":3464},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dc1f094-ec6c-4f79-bfcf-82d20fb2a282","sequence":{"long":3465},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4432},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9683c78-dd84-41cf-bca4-81c08c71adae","sequence":{"long":3466},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4485},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3a391b4-1002-4f6f-a722-45bde91769c0","sequence":{"long":3467},"type":"EVENT_WRITE","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"805ddf9b-9500-48bf-b3af-20d54b42cec4","sequence":{"long":3468},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"789c4010-536a-4342-85b2-56400340133f","sequence":{"long":3469},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c371f6dd-2792-4103-af7e-204d07f4b5d9","sequence":{"long":3470},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3449},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce241338-7cf2-4c13-93c3-330aa7227917","sequence":{"long":3471},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3502},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1061c579-7ff9-4342-ab54-d948e69c95d8","sequence":{"long":3472},"type":"EVENT_WRITE","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b90018e0-5fb2-4bce-87d1-f5758981444c","sequence":{"long":3473},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e715d952-3ecc-4017-b7fe-5d80377dbe13","sequence":{"long":3474},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80200a08-17a8-4ea4-9246-89192d8b0d40","sequence":{"long":3475},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4996},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08e2cdb3-0538-4314-905c-0bf630b3376b","sequence":{"long":3476},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5049},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00b0f539-f8c0-45b9-bd5f-b9c596ad973a","sequence":{"long":3477},"type":"EVENT_WRITE","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a51191d-cce2-49c9-8f90-85c6b95ef8af","sequence":{"long":3478},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b7c7daf-6a4e-4705-b55b-d6b278fed88b","sequence":{"long":3479},"type":"EVENT_SENDTO","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"495","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e35659dd-59ae-48e7-b8e9-e0cfac743331","sequence":{"long":3480},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"495","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f61d52c3-2753-43cc-bcb2-a4d1607360cb","sequence":{"long":3481},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4050bd55-df31-47a7-98f0-48095ddf92cc","sequence":{"long":3482},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970133899473,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"237f672c-5646-44e3-8e77-633835ed9cb1","sequence":{"long":3483},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970133899473,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47508d03-2f6c-4ef7-a4e0-d3cdbe62ffbe","sequence":{"long":3484},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970133899473,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"572be190-b71b-4464-8672-7daeab1dc6c3","sequence":{"long":3485},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970133899473,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca26179f-6fff-4151-b90a-38c7a2d49abd","sequence":{"long":3486},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970464025726,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":341125},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62398451-e28a-4610-8c98-7435760b3941","sequence":{"long":3487},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbc304bf-691d-4c94-8cec-69281453f241","sequence":{"long":3488},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"496","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e95b2ec5-86f0-40a3-9aed-ea28bf6d17db","sequence":{"long":3489},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"497","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cc55d10-f05e-4dab-bca5-46dbf9a50162","sequence":{"long":3490},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"498","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"284197cb-4401-4738-a552-38d06b10937f","sequence":{"long":3491},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"499","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89a1450a-60a9-46a8-bcb4-9c060fb7d36a","sequence":{"long":3492},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"496","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"019ba8af-b43b-45cc-bc27-7ab959c7ff18","sequence":{"long":3493},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"497","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b033baf-318b-4406-823d-910cfb461da0","sequence":{"long":3494},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"498","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9a35e66-aa5e-4c00-a1d7-7fe09bd2ce84","sequence":{"long":3495},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"499","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"006bb063-83cf-4d5b-aa4f-e8d9b590597b","sequence":{"long":3496},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45e9f89a-2e25-42a5-9ef2-5b67aaddc9ac","sequence":{"long":3497},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0ab8bec-5695-4556-b27f-a53728a98644","sequence":{"long":3498},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":34},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"00359f92-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1360,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582970993939804},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c14b122b-582e-4089-8d86-f8ec566000e0","sequence":{"long":3499},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1360","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1360","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"280f3386-6115-48b8-98b6-d4c2c8e1bff3","sequence":{"long":3500},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d8b8f561-1e30-f858-b01e-d3c3b8f82fe5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aad0cacf-8019-4a77-8ef5-e7a0776fa036","sequence":{"long":3501},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"d8b8f561-1e30-f858-b01e-d3c3b8f82fe5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_single_write"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582970993939804,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./multi_read_single_write ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ff27f0f-ad49-40d7-a68b-8c86c66adcef","sequence":{"long":3502},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d735c92-c7de-4538-9fb5-9fbbc55a1dfd","sequence":{"long":3503},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e3774df-137b-4368-84f9-4f355e92636c","sequence":{"long":3504},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ce2b036-6593-4c7e-9c11-e05905dc369d","sequence":{"long":3505},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ce9dbc9-5aab-4a0c-880e-192535920862","sequence":{"long":3506},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dad85eb1-596f-4391-9893-88f80099173f","sequence":{"long":3507},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f9f8d6d-8272-416f-a618-39e7bbfca82a","sequence":{"long":3508},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0caf36f-f33c-46f6-a761-f4333e2047b8","sequence":{"long":3509},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3454b806-c302-4679-b7c3-e798723913cb","sequence":{"long":3510},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fef82875-41ce-4704-a79e-36533771ca6e","sequence":{"long":3511},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46e89b6e-7694-465c-a061-42d833e71095","sequence":{"long":3512},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ab657d6-78ff-49cb-94e7-a22d8a272047","sequence":{"long":3513},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59cc5efd-2316-43f1-ab24-cb7e831734dd","sequence":{"long":3514},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"949ffe72-1db2-47d1-968d-cbcf7a192d07","sequence":{"long":3515},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aaceb8dc-d74f-4b82-bd48-93ac868798ae","sequence":{"long":3516},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24a500d8-e991-454f-a09b-28dc2bff3dde","sequence":{"long":3517},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28109b36-ebbc-4000-933e-6d5da6f1048e","sequence":{"long":3518},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea9bbca5-5a19-4f81-ad3a-09c20bf46d2f","sequence":{"long":3519},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66e24032-1a6a-4475-a3cd-e6a0f2e7f514","sequence":{"long":3520},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"325b604e-1e99-4998-ac66-4ee74764949b","sequence":{"long":3521},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"258c0919-82a2-4a34-9b99-110d5ce48d4b","sequence":{"long":3522},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"93a7558e-de2a-0550-aade-8f47a0052450","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d739f82e-8b16-4591-b434-973f69da0d5a","sequence":{"long":3523},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"93a7558e-de2a-0550-aade-8f47a0052450"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/merged_file.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"322a21d7-1eef-4bfc-affe-4ddf85539d18","sequence":{"long":3524},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":209},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2216a5d3-4f65-485a-abfb-8cc974e49a27","sequence":{"long":3525},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":382},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bd2161e-5534-4b6f-ba94-998e115072ed","sequence":{"long":3526},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"894ab086-0058-4797-a6ac-bc96f6ddbcf0","sequence":{"long":3527},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07cb815c-4ee6-4cee-87ab-bae03e7c0c4a","sequence":{"long":3528},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"93a7558e-de2a-0550-aade-8f47a0052450"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":378},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df2129e8-f5d4-4f51-9b14-be5c9bc696e7","sequence":{"long":3529},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"93a7558e-de2a-0550-aade-8f47a0052450"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93b83331-642f-4c63-a2d9-f3fdf740cdb0","sequence":{"long":3530},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a02ad860-4c0b-4073-866b-3eca5ef53dec","sequence":{"long":3531},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1127},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23d71668-fc24-48e4-a0f6-f2e17f776c1e","sequence":{"long":3532},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582971483913741,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":345981},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"00360eca-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1361,"parentSubject":null,"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ce94737-259b-471f-b0b2-3b6c734c9040","sequence":{"long":3533},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"00360eca-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00360eca-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35198e6f-dbc7-49a4-a8f6-de71a3884479","sequence":{"long":3534},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12d49d7c-c4bd-4f9d-8ec9-3df41905014a","sequence":{"long":3535},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":27},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"00d0b0a5-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1362,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582972009613134},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e59ddafd-2bba-4773-962b-03574b2fea26","sequence":{"long":3536},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1362","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1362","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"639d0ab9-9e64-4fe8-8d64-8d23763a2369","sequence":{"long":3537},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6afebb5e-412d-d25c-ad41-600cfcd2423e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0705368b-3d65-43b5-a747-6a8b8bb477f5","sequence":{"long":3538},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6afebb5e-412d-d25c-ad41-600cfcd2423e"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./remove_directory"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582972009613134,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./remove_directory ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35477c26-3c58-4d2c-b799-a31d101e7e3b","sequence":{"long":3539},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06725f46-6221-4412-a6e3-bfd46c1eea99","sequence":{"long":3540},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e6530da-7afa-46d0-ad5f-6c7b86521134","sequence":{"long":3541},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbaa42db-df60-47f9-be32-b7c16fdbe737","sequence":{"long":3542},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c03650ff-6ba2-4a6f-bbc1-00d73fdcac59","sequence":{"long":3543},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"812cea0e-cd83-4cc1-98fc-2d29340bec9d","sequence":{"long":3544},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4ac0803-029f-41ed-ac4f-a5430131d033","sequence":{"long":3545},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbfb6804-00ca-4080-a79b-20d221ae1e2e","sequence":{"long":3546},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93ff3602-03cf-4f0a-8b0f-dd80ea28db89","sequence":{"long":3547},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a91c467-619a-4038-921e-6a95b28d5cb2","sequence":{"long":3548},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb89c810-74e4-4e18-ae12-3cc9b51e165c","sequence":{"long":3549},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38307a73-8c53-46f0-ba1a-775e13b3048f","sequence":{"long":3550},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27b0dcbf-dd54-49c8-914b-66380f460845","sequence":{"long":3551},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea59986d-6f57-41fb-8bb4-2aa936a77fd3","sequence":{"long":3552},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"311c8799-970f-46d5-bf30-dcaa9cf81e1a","sequence":{"long":3553},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c85a8f17-81ee-4147-8188-c89098bed564","sequence":{"long":3554},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6fe13ff-df1c-4812-baba-1289a7cdb80b","sequence":{"long":3555},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64da3aa0-4bd8-411a-b8cc-c5697e74dd89","sequence":{"long":3556},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fabf481d-cbbd-441b-ab13-2f6fe640bf94","sequence":{"long":3557},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82c3f620-f9ae-4819-89e3-33e472cd1810","sequence":{"long":3558},"type":"EVENT_UNLINK","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ef2077a9-1b4f-685b-8f1b-6859ab685e9f"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/temporary"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_rmdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2ed8a4a-2f3a-440c-8936-fcaee7960e73","sequence":{"long":3559},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"285289cc-af43-4e09-a0cd-447812e03546","sequence":{"long":3560},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1104},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2116c699-50d4-466a-97db-04e34f7de90d","sequence":{"long":3561},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":798},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"00d10d10-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1363,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582972009613134},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ed48673-54fe-4f88-84cf-6f5991e99ca8","sequence":{"long":3562},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1363","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1363","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fecaafa-3637-4875-9c30-42e46453556f","sequence":{"long":3563},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8d23ca5-3647-42f4-a374-d40a6412055a","sequence":{"long":3564},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582972009613134,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac6c6ed4-5b68-47a7-9137-2c80851c6b3d","sequence":{"long":3565},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2558eb2-a044-4f3f-9512-480cf4c8467e","sequence":{"long":3566},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adde6dec-5a2f-42d9-a472-2fb44752f09c","sequence":{"long":3567},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa294f29-f09a-49ef-9e05-39b7da33ce10","sequence":{"long":3568},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abf9020a-f93c-44db-9975-c1950adc6d66","sequence":{"long":3569},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69af6d19-43d6-44e9-a638-f55080c2e2bb","sequence":{"long":3570},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40d1e9ac-ea87-488d-8897-54e70e5cc50e","sequence":{"long":3571},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a955c716-6e16-46a4-9eaa-b1c0af107dbe","sequence":{"long":3572},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5e8aa9e-b9d9-4792-a0b7-2202aa25ef2b","sequence":{"long":3573},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf324e2a-be38-4384-baa7-914989c1ef54","sequence":{"long":3574},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"130b695c-89dd-455c-b82f-28c92c45727e","sequence":{"long":3575},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef8b57b8-fd61-4be9-881e-2749fc09dc3f","sequence":{"long":3576},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5ee5b2d-64bd-48a7-a614-b24556d49b6e","sequence":{"long":3577},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c707f0d2-6e15-4cd9-8204-458f8d1364b8","sequence":{"long":3578},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972504128832,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":350970},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a859cc3-2a13-4450-a2c0-4be7cf27e9ea","sequence":{"long":3579},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87898f3c-3528-4b3d-8f0f-ef3f8970ae9c","sequence":{"long":3580},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3964c5b4-7f4f-40c6-95ab-a783260d3805","sequence":{"long":3581},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"016b62c2-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1364,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582973023921563},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1af32542-1e99-4173-aecf-025c483e92fe","sequence":{"long":3582},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1364","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1364","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"649414a1-5f44-4797-a02b-f57aacf543fa","sequence":{"long":3583},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcd9efad-5e76-4f94-a260-0b58f8f628c9","sequence":{"long":3584},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"5b518504-be76-5653-b6be-34ff435661ed"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./remove_file"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582973023921563,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./remove_file ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0a44807-1c6b-4e9d-b75c-9f0f6ac44732","sequence":{"long":3585},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ada5602b-53fb-4d96-87b7-8947a7ab66e2","sequence":{"long":3586},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0469153d-bf69-4b23-bc1a-f54fd1244d55","sequence":{"long":3587},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e234511-b331-45b8-afd2-b6dc559a78b6","sequence":{"long":3588},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd180d37-d850-4dbb-96f1-13c393573f08","sequence":{"long":3589},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce3c34cb-260d-4f4d-ae69-e2c6ea8a6b16","sequence":{"long":3590},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32c40c56-2c9f-4b24-98f6-6f6d7458d445","sequence":{"long":3591},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0eb79069-dcd1-49be-826d-4497a993e7eb","sequence":{"long":3592},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca335f81-e4ea-4957-ab4c-d462df411bc4","sequence":{"long":3593},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5b34f58-1160-4804-b523-c139cac52636","sequence":{"long":3594},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27e43ff3-8e0e-4b06-8e57-533fb96e2a01","sequence":{"long":3595},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4fd81e7-9631-402f-934f-5db3169fc3d8","sequence":{"long":3596},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a21dedf-3ab5-4a33-80e7-9d28c2f137ae","sequence":{"long":3597},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec58fc6c-f46e-4319-af90-3fc96f20569d","sequence":{"long":3598},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9566a87-2143-4cd5-91e4-a1796f0c517b","sequence":{"long":3599},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d606c59-b9c2-4e58-8cd1-f8171545fc07","sequence":{"long":3600},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79d32b46-e7a4-4d54-8ce9-e763ace973ac","sequence":{"long":3601},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbcc1438-10bf-4459-8d08-dfabe41fa4ae","sequence":{"long":3602},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a4f76a0-e585-421a-bd0d-b034c0c840bf","sequence":{"long":3603},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"041a4b3a-ad12-4683-ba1f-a045e1b67186","sequence":{"long":3604},"type":"EVENT_UNLINK","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"745458ec-83ee-b052-ae83-2efb22b0cb41"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/out.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_unlink"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43316cb9-c62a-4e09-a0ef-cde739bef75e","sequence":{"long":3605},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91e71368-2456-4168-a632-1ee1871d6d6e","sequence":{"long":3606},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1086},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"360079d3-4f7f-4253-8f63-2c4d6f2f60e3","sequence":{"long":3607},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":872},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"016bc3ec-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1365,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582973023921563},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"914b4ae5-efc4-4ad2-b34d-ab65a54955bc","sequence":{"long":3608},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1365","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1365","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e8e5a31-622c-40d7-87b0-ff5d40c8b56d","sequence":{"long":3609},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17810f01-0d4f-4bbf-9e6c-131765f658b9","sequence":{"long":3610},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582973023921563,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffcb3834-aaa1-45fd-8773-6d6efafec082","sequence":{"long":3611},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ea3e429-5262-4077-a361-4f1f667fe8a8","sequence":{"long":3612},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6662ae2f-02a0-4824-9af8-165dbea33219","sequence":{"long":3613},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47d4a4be-52c7-460c-a2b5-058364b2b022","sequence":{"long":3614},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12745d78-d0d8-4e81-8105-c2df54b1d775","sequence":{"long":3615},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42774304-fd2c-467d-8aa9-72cccbe75520","sequence":{"long":3616},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afac5303-9720-41d0-88fd-f9d3ecb5b0b3","sequence":{"long":3617},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ff653fb-eab1-41d7-8cc7-2c08c4a05154","sequence":{"long":3618},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b56ccc2c-b24c-4260-9480-64ae34f0e42c","sequence":{"long":3619},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d33a621-5f3a-40d6-a67c-1ed83b82e427","sequence":{"long":3620},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60791a71-10f6-4947-96e1-4ab0550413e2","sequence":{"long":3621},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e07fb7d1-4cc0-4eac-ba8e-7458575270a6","sequence":{"long":3622},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfc736c8-4b0c-4281-9e1a-52695a706766","sequence":{"long":3623},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03b4814f-9517-4674-8783-fa33151d4315","sequence":{"long":3624},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":356013},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b6823b4-3fc3-44b9-911a-510ee1b26d3f","sequence":{"long":3625},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80bb657d-bc39-4a16-bd21-e8a995cee9e3","sequence":{"long":3626},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"501","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"183bf629-3182-4fb7-a90a-03924c6ae7e4","sequence":{"long":3627},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"502","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a0ef8fd-9ba6-4102-9b34-028bdc5bd899","sequence":{"long":3628},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"503","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0eeaf14a-d3ea-4b88-9b63-9e4cac816a80","sequence":{"long":3629},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"504","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e527684-4d52-4efb-884f-6ddbbded15c4","sequence":{"long":3630},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"501","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65dbd530-5bb3-43e9-9c88-8c8001d02471","sequence":{"long":3631},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"502","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56182d40-fa95-4c41-a7c5-0b73adfe862b","sequence":{"long":3632},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"503","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2d7d5de-ef3a-48c3-bfb3-c20b5cd030c4","sequence":{"long":3633},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"504","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8187e3cc-276a-4243-897d-c830a5e33716","sequence":{"long":3634},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13ce847d-f638-46e3-ac27-f449c0b0b336","sequence":{"long":3635},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32bc7931-5cc5-4632-a351-5ffe6774024f","sequence":{"long":3636},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"0205a2c5-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1366,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582974034219849},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31e755e1-d857-4eac-86ca-4be78336938d","sequence":{"long":3637},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1366","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1366","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0e8dc69-dc98-480a-871d-15621cd194f3","sequence":{"long":3638},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f12d0d3a-0f07-42d1-b04a-0f86e29e5935","sequence":{"long":3639},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"5b518504-be76-5653-b6be-34ff435661ed"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copied_pipe"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582974034219849,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copied_pipe a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91402af0-7657-4079-8b04-e1ade1dd1112","sequence":{"long":3640},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"289061b1-9d1e-4364-a837-bb27c8ee2db2","sequence":{"long":3641},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32e7e771-6c01-4066-b0e9-33363297d5be","sequence":{"long":3642},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3896b84d-6312-4d38-bae5-865c4b7eaf53","sequence":{"long":3643},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26618e04-e777-4580-be85-e41a7e0c1501","sequence":{"long":3644},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f6382ce-393e-43b1-ae09-924d1f79f698","sequence":{"long":3645},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc0d4879-2507-416e-b72e-a8a59ede2881","sequence":{"long":3646},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14d858df-44db-47c8-b9c2-c95dc22091af","sequence":{"long":3647},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa616850-6455-4904-90c0-b1a8ed873959","sequence":{"long":3648},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faf1b237-91d7-4858-9f68-6f4559b30297","sequence":{"long":3649},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f3e8048-83d3-46ac-80f1-767e8ba6f443","sequence":{"long":3650},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff6ab124-da4a-4b06-b7f0-ea78ca55cc2c","sequence":{"long":3651},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e19c67d4-922e-4f7a-9ce8-a4f98ff8efdc","sequence":{"long":3652},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ef06b0a-5342-4e53-857f-a62526ba20fb","sequence":{"long":3653},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae896aee-a39a-4a26-8027-0d73dec99078","sequence":{"long":3654},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"449d7621-bd8a-4139-bf5a-d66be710ff8c","sequence":{"long":3655},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3416658-ef54-47d5-84d3-a39074f77532","sequence":{"long":3656},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"933b500f-d4a3-4d19-aeb9-da75f1588475","sequence":{"long":3657},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e95c807e-8f56-48d6-afd7-abd2ceef2e9f","sequence":{"long":3658},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"0205e82f-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"0205e82e-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"7846f689-00d6-5d8d-9ded-f91f3e48e00e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"0205e82e-467b-11e9-aeb7-080027fc76ba"},"uuid2":{"UUID":"0205e82f-467b-11e9-aeb7-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f37d792b-5301-4ded-8e89-13957791d2cb","sequence":{"long":3659},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"7846f689-00d6-5d8d-9ded-f91f3e48e00e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"0205eb21-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1367,"parentSubject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582974034219849},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfb59c06-5143-4e9c-aee9-405683ec0c5b","sequence":{"long":3660},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205eb21-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1367","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1367","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95d8b4dc-9040-4377-b754-7a149e91a3ff","sequence":{"long":3661},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"0205eb21-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1366","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48f7dbc8-090a-4c72-b009-89f32582255e","sequence":{"long":3662},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"0205eb21-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205e82f-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1366","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01acc412-fdd8-4463-b419-3e7e5b9b62ec","sequence":{"long":3663},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"0205eb21-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205eb21-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1366","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a62a568-7f81-45c9-9c02-4477f3df7a8f","sequence":{"long":3664},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205e82e-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b55f3e16-2e78-4bcc-ace0-79ad6bb20d95","sequence":{"long":3665},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a76739a-4c90-4cc5-8b80-636b5285d284","sequence":{"long":3666},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bf1f02e-01f6-4c70-86e6-f0bf4272da79","sequence":{"long":3667},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1012},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc00c1c7-de7d-47da-8529-36737388c38f","sequence":{"long":3668},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974534337270,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":360849},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"0206281d-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1368,"parentSubject":null,"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a54514d0-35f5-4559-a62f-c46596bcbce9","sequence":{"long":3669},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"0206281d-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0206281d-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41cc8e99-e45a-41f1-bad0-22de8ad027a7","sequence":{"long":3670},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41cf5d70-b6bc-47b6-b134-1b042cb02780","sequence":{"long":3671},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"029fc20e-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1369,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582975044355157},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa61f5d1-db0f-4cf5-a085-5903efb987a2","sequence":{"long":3672},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1369","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1369","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f11a6ab-5611-4d67-ad72-688262426a36","sequence":{"long":3673},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"38903a1a-040d-3c53-8d04-93e6a33cb671","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a8ef827-ce2f-4087-9c30-7ebd037220a4","sequence":{"long":3674},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582975044355157,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/datagram.sh a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ba1b462-0ea8-43e5-837e-7abc6e1a58d9","sequence":{"long":3675},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"046db06d-cc2b-4be7-8af4-c7397e99d1ab","sequence":{"long":3676},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07e65704-4308-4999-a238-b617d1450fb9","sequence":{"long":3677},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91d20c6b-2378-4a6b-99d9-e07e6ba09e09","sequence":{"long":3678},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a16e023-4967-4f2e-a9d7-68acf5d48495","sequence":{"long":3679},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd3ea6ef-9061-46d6-ada1-b5fb43d00c70","sequence":{"long":3680},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3759da49-042b-46c0-84e8-b7d9510f0a1a","sequence":{"long":3681},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"821990c1-02df-4d1e-936d-4d0153e11041","sequence":{"long":3682},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b7e5be6-3276-4fe7-8e60-f1b29ea2ed87","sequence":{"long":3683},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f284299a-6922-45b1-a921-0cfd166cabd0","sequence":{"long":3684},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37c7229e-3a44-418f-a568-7a79fca6c1c2","sequence":{"long":3685},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da735473-a0bb-4488-a4bb-f2a3c62f0e70","sequence":{"long":3686},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9f0a2a5-1fc6-4fa7-bf72-7104f51749d3","sequence":{"long":3687},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"383a8503-d056-43d1-bc3d-9b416823f97f","sequence":{"long":3688},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a458a34b-1fdd-47ed-8762-87e7258a6b33","sequence":{"long":3689},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e5b25ca-49e6-43f1-9e21-8deba37e578e","sequence":{"long":3690},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c3dcbb3-4c4d-4c40-982b-c01572093ba9","sequence":{"long":3691},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19b4159e-f6f1-4b23-be56-bb210abc2aed","sequence":{"long":3692},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bab8652-a714-4f23-9070-8f03a3b35d36","sequence":{"long":3693},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d777cb50-8224-4e52-9fac-50f0ca801d01","sequence":{"long":3694},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582975044355157,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/datagram.sh a","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12b628fa-9d15-4d79-b7e7-64b12ba1cc9d","sequence":{"long":3695},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55f3cee2-a555-44b0-9dd2-d119e2a7ed72","sequence":{"long":3696},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffa11cda-5f3f-402e-ad19-0353de27bf6d","sequence":{"long":3697},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3b586f0-0dd5-4805-ae49-9a62f17ad74b","sequence":{"long":3698},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef3f27a7-4340-4050-80b1-f28e5d5ae1c2","sequence":{"long":3699},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d48e688-4625-4c97-81e7-96642350c375","sequence":{"long":3700},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5256bb3e-be20-4f39-bcaf-2fbc0fd1ad66","sequence":{"long":3701},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3aa1cc83-7d6b-4835-8db1-8e052d5d5019","sequence":{"long":3702},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"befa4d6c-51a3-4356-b5bb-c1f2abf813d9","sequence":{"long":3703},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc3ead0a-2b1f-4256-8fd3-f58d297e7484","sequence":{"long":3704},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5303b481-795f-4c80-b93d-32de5f6b7ac0","sequence":{"long":3705},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6da29e9a-5972-4f22-8c1b-aaa061d2a92f","sequence":{"long":3706},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ef969c1-73e7-4223-9e66-6aaabe244d8a","sequence":{"long":3707},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bec546a-fc93-4e64-869c-6046247878cd","sequence":{"long":3708},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eaf95bb9-43fa-4c05-9990-3f2e1d3c83e3","sequence":{"long":3709},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d40ad93-fb01-495c-894a-7cc5d9bc341a","sequence":{"long":3710},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67b91634-e8c1-44a2-86ac-0e5da0365411","sequence":{"long":3711},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e06ad3b-06e7-4103-a1d4-556e8343ff4c","sequence":{"long":3712},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6b78920-3e13-4376-9668-609bf0cfbad3","sequence":{"long":3713},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d1871d5-c408-4a3b-807d-84cdff0b238f","sequence":{"long":3714},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"493a6dfe-7335-43ad-927e-8374badf64f2","sequence":{"long":3715},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd7dbe02-2c20-45ed-8ef9-57dc5ffd48ac","sequence":{"long":3716},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db5966e6-c780-4856-b719-1bd51c03e2e0","sequence":{"long":3717},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dcb2241-eb5a-404f-b131-38549ddd2b2f","sequence":{"long":3718},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"119ab9dd-ff2c-46c1-b60c-de363473e9bd","sequence":{"long":3719},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f47d8a7a-fe3a-4cf7-b4db-6900af3bd7c0","sequence":{"long":3720},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0029089-a08b-4b4c-b07d-4916744b97ee","sequence":{"long":3721},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdb07e47-d9a6-4297-8893-f18601e090bd","sequence":{"long":3722},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5a09ebe-6761-45c5-9641-91e570345e37","sequence":{"long":3723},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5fd3e83-771a-4b5f-bc6a-c5af1857b37b","sequence":{"long":3724},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66b6aff5-8780-446b-8352-f2a5f1a4d020","sequence":{"long":3725},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"104add8d-4c7c-40a1-ab8c-c5a9eb279e83","sequence":{"long":3726},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df98150f-5bff-46d5-9bfb-59f01a2897e4","sequence":{"long":3727},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9f62552-3d92-415b-93f4-1ec4d70e8cc3","sequence":{"long":3728},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f7aa5ee-dd0c-41e9-9682-196057cccf9d","sequence":{"long":3729},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"370a088f-4340-4b35-aaef-b98ada9572e8","sequence":{"long":3730},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e1d4122-c455-45bd-a8d4-d3d06999692f","sequence":{"long":3731},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b44bcb66-108b-4127-94d7-e6233ecf3597","sequence":{"long":3732},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b9e727e-5943-44cf-a402-f041a10b3ddb","sequence":{"long":3733},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bba29897-4912-4137-925e-b5a39a211c34","sequence":{"long":3734},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5cc06ca-9410-4944-8d46-dba73ef3f4e2","sequence":{"long":3735},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1155d16f-22c2-4a7a-b044-e295fe27ec39","sequence":{"long":3736},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be25b20f-f763-44b2-8955-5fea8918788b","sequence":{"long":3737},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2783db5f-681e-4be4-b689-c8b5351f461c","sequence":{"long":3738},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0d73880-f83a-4a4b-90aa-b5f1f10d0592","sequence":{"long":3739},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5e85a7a-6e57-49b2-953e-7abc05a1c4fc","sequence":{"long":3740},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2febfd43-167b-483b-a169-b090a9aecd15","sequence":{"long":3741},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bea8c718-8cc1-4c87-8cb9-b6d1c616d560","sequence":{"long":3742},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a42e5683-5b20-47cc-be92-691210c42e02","sequence":{"long":3743},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40cf2789-97b6-4a4b-bee5-babaf7575912","sequence":{"long":3744},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f82051e0-58f6-4154-bfb1-087e2b082b88","sequence":{"long":3745},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ef8dfcf-f9ce-4401-aabf-6292fa233583","sequence":{"long":3746},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b7047b0-c084-4614-b167-01ab279e8302","sequence":{"long":3747},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46d0b875-717b-4269-880f-5d9ce312755e","sequence":{"long":3748},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa8c46e7-c345-4382-ba6a-4d63b3d158dd","sequence":{"long":3749},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e2fe698-7bbf-4752-bebc-71cb83d414d6","sequence":{"long":3750},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a329f820-a55b-482e-8aaf-b09607a86c9e","sequence":{"long":3751},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d87c76b4-4f32-43b9-8cb4-0ee1ea5f0052","sequence":{"long":3752},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d0ad216-1166-494f-96be-cbfaf95b1aab","sequence":{"long":3753},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7808b59-8768-40dd-8b68-d96c176ff05a","sequence":{"long":3754},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ade39d5a-a17d-447c-ba09-e403fa0851fd","sequence":{"long":3755},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c594c892-aaaf-4aaa-b9f2-77c2492aad1c","sequence":{"long":3756},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57df03f6-2b10-4a98-b7c9-126ef17de62f","sequence":{"long":3757},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":296},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f5befe5-c4b0-485b-9e35-72ce02672060","sequence":{"long":3758},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":250},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"02a0949b-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1370,"parentSubject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582975044355157},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c9131bf-c8db-486c-9b4d-2d63aa380568","sequence":{"long":3759},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1370","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1370","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d8760fe-0871-4276-a7ba-9908bae58626","sequence":{"long":3760},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b936db5b-b0e7-45a2-abae-28a9b82a81e9","sequence":{"long":3761},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":268},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"02a09f07-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1371,"parentSubject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582975044355157},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97fba2d3-1d13-403b-b052-8b4bb8882097","sequence":{"long":3762},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1371","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1371","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f093a64-d445-4fe9-982d-e7c27d467934","sequence":{"long":3763},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"460934f3-f283-41de-be3b-aaf9ef3cb132","sequence":{"long":3764},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68717f5b-d569-49ff-aeea-33be9df97f56","sequence":{"long":3765},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f55b0603-dcb5-467e-af10-1ec3740758ff","sequence":{"long":3766},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a4b4bc6-850a-4954-8219-91d867a54f5e","sequence":{"long":3767},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582975044355157,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3643a90a-525a-4e66-96ae-58f3127f2d20","sequence":{"long":3768},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"373ba8a7-d481-4f5a-81d4-177fea4f8ab6","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5db233b4-67ea-4582-a0c5-7246c7f998e9","sequence":{"long":3769},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"373ba8a7-d481-4f5a-81d4-177fea4f8ab6"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./datagram_server"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582975044355157,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./datagram_server","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e4ae429-b324-4d06-b911-3b1546c1ef47","sequence":{"long":3770},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b71be8c7-ae33-43ea-b481-b3fa4cded26b","sequence":{"long":3771},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb8394c6-3ae1-4bf0-9684-dd9f999455a0","sequence":{"long":3772},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ac9f4f4-2bd8-45a9-9729-caaeca007e2f","sequence":{"long":3773},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc91dbfd-eb03-4f7a-95de-2a647c2a6c17","sequence":{"long":3774},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9271ff57-8cda-4d7e-814e-dab5abb6b8f5","sequence":{"long":3775},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95d61d33-b44e-462b-8d8b-205a34a0e583","sequence":{"long":3776},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4300bec-84cb-4788-90eb-ead2e8a5b405","sequence":{"long":3777},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27c8f1db-68b7-496f-8015-289242d5082b","sequence":{"long":3778},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c574b27-459a-4982-94c0-caf948bc569c","sequence":{"long":3779},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2684f95f-54d7-48d0-8c3e-4d8206f50101","sequence":{"long":3780},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f674a2f-565b-4a66-adac-97cbf09949cd","sequence":{"long":3781},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a95616e6-6fff-454f-83f4-40aef352910c","sequence":{"long":3782},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb4c0d56-af12-4e6f-aa5c-3d6734b24a03","sequence":{"long":3783},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d3da873-6c21-48c5-9473-18ac948cc4d0","sequence":{"long":3784},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ce98a17-29b2-49c0-87ca-ae4eed374c71","sequence":{"long":3785},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23e49ef1-6eed-4622-a6b3-ff5f6590bc9c","sequence":{"long":3786},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"295f888a-bfe1-4d45-95f4-af068dee81d3","sequence":{"long":3787},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61ceb4fa-4f9d-404a-9adf-6b015b2d49c3","sequence":{"long":3788},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fd96c61-0fd5-4d4a-8c05-7210dc53fd0f","sequence":{"long":3789},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e71c1b6-0842-4107-a9db-7bd44d8ffbfa","sequence":{"long":3790},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0d02ee4-bece-4245-89bd-681fe62d9996","sequence":{"long":3791},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50d7a7c3-b811-4542-9851-bc84cc3dd476","sequence":{"long":3792},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fe157d6-8435-4fa9-8804-c0634921df6b","sequence":{"long":3793},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5af6d388-bfba-4ea4-84c8-e7acde7bd7ad","sequence":{"long":3794},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2363cdc8-f7f3-4700-904f-888260ead8ea","sequence":{"long":3795},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52abf274-06fa-4612-84c1-42d1e147603e","sequence":{"long":3796},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3714aa4-14df-42b0-b905-ded99d47f65f","sequence":{"long":3797},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"937fd640-d476-4e7f-84fb-02d63fc85b1d","sequence":{"long":3798},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ce59fa6-38e7-4629-a991-239e1341e146","sequence":{"long":3799},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b04b80e-2254-4cce-8feb-79c991251e07","sequence":{"long":3800},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9005fa89-8542-4eb6-876e-23d362b7dd1d","sequence":{"long":3801},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c9fc59e-8119-482d-ab11-6e2cae546c6c","sequence":{"long":3802},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c363d2b4-4cb3-4383-9340-1696583e7d92","sequence":{"long":3803},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b02cb68-b5c5-4e8e-a15c-6070008f7226","sequence":{"long":3804},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975573954964,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":374757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48ab2964-aaaa-49e8-8e81-1348394f8dff","sequence":{"long":3805},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdfdfca7-b71c-439b-83a8-98b524b5812b","sequence":{"long":3806},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"387fbc15-68c2-4970-a3cf-71edf8e5fa42","sequence":{"long":3807},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0108fe08-02d7-4b7f-b0e0-7dbdb778cd2b","sequence":{"long":3808},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c633e72e-3e10-498c-9d97-21d83996f060","sequence":{"long":3809},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dd70e06-c764-42c2-9e07-f68c21b8db16","sequence":{"long":3810},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25d0596e-4265-4e80-9909-c1972ad391e2","sequence":{"long":3811},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"033a9f30-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1372,"parentSubject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582976058898304},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8ba0f59-6c9b-49df-b883-eba36dbd98fe","sequence":{"long":3812},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1372","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1372","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d55d2b97-10a8-496d-8124-8513ac258631","sequence":{"long":3813},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ffa1f988-cf0d-7f5b-8dcf-910bcb7fb68e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2134ef7a-39a2-47d0-b2cf-80f6698781f0","sequence":{"long":3814},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ffa1f988-cf0d-7f5b-8dcf-910bcb7fb68e"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./datagram_client"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582976058898304,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./datagram_client a","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed00a3eb-1885-491c-968d-7785e208eaab","sequence":{"long":3815},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a36ad498-a187-4f5c-96be-7249fd4bf491","sequence":{"long":3816},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f73bb38e-767f-416e-a942-c3c2b1ca411b","sequence":{"long":3817},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1b30291-5c2f-4340-a0ef-f7da2fdf09d1","sequence":{"long":3818},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a371e4b3-b661-42c1-81fb-53fd7110d368","sequence":{"long":3819},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1da8ff2-f58d-4ba8-9175-4d80eb0fe889","sequence":{"long":3820},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfd0e633-4d79-4b71-815e-8c0475ad0042","sequence":{"long":3821},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"425debcb-c499-4d18-bff5-bc163a9ab632","sequence":{"long":3822},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8e7989e-0dcc-4456-8f01-5d8ab833a288","sequence":{"long":3823},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26a20349-22c3-499f-b51c-5aae36a87106","sequence":{"long":3824},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb82d404-9b82-4427-92ed-f1cdc13ed6a7","sequence":{"long":3825},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11cae7b0-db90-4914-a16a-55aeb91f66df","sequence":{"long":3826},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ef1d1f5-9c27-473b-9225-9b4f228b570c","sequence":{"long":3827},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6d55cbd-8d43-4b6d-8107-21e8a58a9210","sequence":{"long":3828},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"443f4eac-d03c-47f0-9936-d00339c6517f","sequence":{"long":3829},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24a749e1-2993-446b-a83c-c2ae76af5a02","sequence":{"long":3830},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a8c2db3-19dd-4928-aa19-13a588209b6f","sequence":{"long":3831},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"358bcdf8-dd9a-4df5-8392-f68d0be74d72","sequence":{"long":3832},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3b865c0-6894-4d41-b95e-28ce7e27f559","sequence":{"long":3833},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"033af1f1-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6efa3a74-d684-44cd-95f7-21cb473870bf","sequence":{"long":3834},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033af1f1-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"033af5b2-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3aedca2d-a754-4282-b8f9-f7a15896c4e7","sequence":{"long":3835},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033af5b2-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be759818-340d-42e2-ae45-bfebfdbc569a","sequence":{"long":3836},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"033b00cc-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"::1"},"localPort":{"int":61810},"remoteAddress":{"string":"::1"},"remotePort":{"int":4950},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"02a14724-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"::1"},"localPort":{"int":4950},"remoteAddress":{"string":"::1"},"remotePort":{"int":61810},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ebe2735-e148-4506-94a4-11dbb3b72fb9","sequence":{"long":3837},"type":"EVENT_SENDTO","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b00cc-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"ret_msgid":"506","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","address":"::1","port":"4950","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1db2bff-4c6e-49f1-95c7-cc06d8709e99","sequence":{"long":3838},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b00cc-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"033b06bf-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"127.0.0.1"},"localPort":{"int":29583},"remoteAddress":{"string":"127.0.0.1"},"remotePort":{"int":4950},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f91968d-3fb0-44dc-a7ee-f3e9d67adaf9","sequence":{"long":3839},"type":"EVENT_SENDTO","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b06bf-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"ret_msgid":"507","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","address":"127.0.0.1","port":"4950","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"751cca2f-0596-4a99-b5f2-00c568cf6bf8","sequence":{"long":3840},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b06bf-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd018af3-a778-49be-9f29-084c7b2a734f","sequence":{"long":3841},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32507391-f7ae-43b5-90a2-1c0b43775533","sequence":{"long":3842},"type":"EVENT_RECVFROM","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a14724-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"ret_msgid":"506","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","address":"::1","port":"61810","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66cc53bb-d4e2-44bb-a139-9762f90fae73","sequence":{"long":3843},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":31},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"addf2ab4-4432-4441-a75c-41d76324c1a0","sequence":{"long":3844},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8599b7f9-c343-4bfe-a56e-180504042ab2","sequence":{"long":3845},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a14724-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9373caf-b490-4533-8e03-30a6f6393c76","sequence":{"long":3846},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"753db9ae-6a13-464e-9184-895e31b16b08","sequence":{"long":3847},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4932cb16-0825-4e9f-8a24-33b2d87f61bc","sequence":{"long":3848},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02cd6cd1-c28c-4958-9139-32fefb2a022f","sequence":{"long":3849},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":961},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7aae0daf-0346-4daa-98b3-856a3c088f2e","sequence":{"long":3850},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":974},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"033b3c9f-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1373,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582976063965319},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3aa4f35-353a-4c69-bf2f-502ea81a2381","sequence":{"long":3851},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1373","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1373","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd72bf59-0c33-4087-9d1b-d0accb7c32d1","sequence":{"long":3852},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8c10f3a-b150-44f7-b8bd-f4b913225efe","sequence":{"long":3853},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582976063965319,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"804cf060-b980-40a0-87c9-0173f3be30d3","sequence":{"long":3854},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0081fd13-33fe-467d-8128-687a863fb865","sequence":{"long":3855},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2375a07f-e2f0-4d29-b94d-13da096b5ed8","sequence":{"long":3856},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f993fd9-a99d-4e69-a41d-daf654b5b087","sequence":{"long":3857},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27125f3e-7327-4ea9-bc74-9c5a409abeff","sequence":{"long":3858},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2ddac16-4306-4673-a646-9b499c6f2c5c","sequence":{"long":3859},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f79ccb36-5625-4caf-aed9-88f4633df760","sequence":{"long":3860},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b13f781b-9bde-4be6-81a1-5a36b29346e0","sequence":{"long":3861},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5dcafe2-d52e-42d5-bb9e-45156c4db8cc","sequence":{"long":3862},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e12676f-35fd-4320-98d1-bac9cf986b4e","sequence":{"long":3863},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d93c086d-85cc-4598-aeb0-b7e4e8f2103a","sequence":{"long":3864},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a099f7ba-1f17-4c43-ad5d-67e7838989d4","sequence":{"long":3865},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f22dcf6b-c52e-495e-a407-f4e6135d093c","sequence":{"long":3866},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d9301ac-7a6b-4fb9-82fb-f20d8cf41b66","sequence":{"long":3867},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2135eb86-c892-4d52-94a6-90c690bec61d","sequence":{"long":3868},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8006876-f401-499c-9141-3d5dab71ebb6","sequence":{"long":3869},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bf2c18d-dca1-4438-9b09-28a74653fbc2","sequence":{"long":3870},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c235db9a-85cd-40c1-ac4b-b11c96119c27","sequence":{"long":3871},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"097557e5-681b-47e6-acaa-8e875e2d59e1","sequence":{"long":3872},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"502d6630-9ea2-4d38-9c56-4a6f0b0b3bee","sequence":{"long":3873},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":374757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd642c0f-e59b-473a-96e0-ac357cd6e102","sequence":{"long":3875},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b000bc0a-8fa6-4506-8397-6be7a2a42ace","sequence":{"long":3874},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98db87bc-6e36-4008-8be5-0bea095de3a4","sequence":{"long":3877},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ff88236-b3ef-4c90-a6c9-f9146afe406d","sequence":{"long":3876},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76239dc3-c818-42df-9d6e-b1753982ec4d","sequence":{"long":3879},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d424f472-4d33-487b-8932-2b17413de0bb","sequence":{"long":3878},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b277e141-a5db-4146-a0cf-abcb94ddae3d","sequence":{"long":3881},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"849feefe-40aa-437a-9339-1984a9f7be3c","sequence":{"long":3880},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29bbfc0f-ae3b-4df4-b385-2bfc263fec4f","sequence":{"long":3883},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b70f1f1b-71c2-417d-aca2-c13fc6aeeb21","sequence":{"long":3882},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05734d13-56cf-481c-8d55-feafdaa6eb16","sequence":{"long":3884},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dfbfc2a-3f7d-40d0-a4dd-fca93c1a358f","sequence":{"long":3885},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a047a8fe-60d7-420f-bf09-6fd200aae9d3","sequence":{"long":3886},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdfbc676-9314-4055-8189-14d017d96f00","sequence":{"long":3887},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4832},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f84fb9ad-49db-4f0c-97e2-e1a6a64ef5e4","sequence":{"long":3888},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4885},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53029425-aaf9-423e-89c5-a9771d94a63a","sequence":{"long":3889},"type":"EVENT_WRITE","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"406c6a1d-e2d7-4983-ae67-b7459b1931f7","sequence":{"long":3890},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31f374b5-d64f-4ebe-ad1b-8463a279e0f4","sequence":{"long":3891},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95af6e01-cbdf-42ea-90ea-db0f0adbc5e8","sequence":{"long":3892},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4939},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57755948-3c1a-4cae-a2b8-61f0b6a3c94a","sequence":{"long":3893},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4992},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edefad9b-b1ab-4116-91c0-84e1ce181d04","sequence":{"long":3894},"type":"EVENT_WRITE","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"467d634a-d4b7-471c-af04-80bb09578dd7","sequence":{"long":3895},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce460451-4f78-45ca-98d3-9c6ff95bfc34","sequence":{"long":3896},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976605249234,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":384214},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c6d0676-cdec-40ea-81b1-8ec80cdce3d5","sequence":{"long":3897},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53fc813b-1e26-49d5-99df-08a69ee88097","sequence":{"long":3898},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bef5c3b-3efa-470d-ba34-87649d05c1f8","sequence":{"long":3899},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"03d617c8-467b-11e9-aeb7-080027fc76ba","type":"SUBJECT_PROCESS","cid":1374,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582977078937143},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24168e82-b639-4680-b38c-11147f1bda20","sequence":{"long":3900},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1374","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1374","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99928695-650b-483b-8683-b90d36a5dbc2","sequence":{"long":3901},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f5cca548-4198-c65d-9841-9bcbadc62d45","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"198f3c98-8b64-4fc1-b358-d2301e1f96f3","sequence":{"long":3902},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"f5cca548-4198-c65d-9841-9bcbadc62d45"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./direct_pipe"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582977078937143,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./direct_pipe a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44b870f6-a66f-433c-baa0-2f81a106f871","sequence":{"long":3903},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1e17a49-b27d-4cb7-a2ed-b85e883b6de8","sequence":{"long":3904},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88530b08-b95a-4770-9573-6dd0cf3c8693","sequence":{"long":3905},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71b606ce-ddd7-49d4-855e-6865e9d32728","sequence":{"long":3906},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c060c0e-ac5d-4c1d-a3cb-f9bdb8ce86f0","sequence":{"long":3907},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d22d71b-e55e-4fb2-896d-c6aa11669ee0","sequence":{"long":3908},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1c3697c-fd41-4275-9474-2ef9387562c1","sequence":{"long":3909},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b35f722-5167-4c88-b923-af195c361bb0","sequence":{"long":3910},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cc21b34-5872-4441-be27-6cc921fc6cf4","sequence":{"long":3911},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c58d60b-f044-4ea7-97e1-fca6fdb6105c","sequence":{"long":3912},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d6c7a73-8c0b-4b30-91eb-b9bd5828b685","sequence":{"long":3913},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ade4f88c-c434-4d83-ae25-26b2c4c38f3c","sequence":{"long":3914},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7634c8e-e6e7-43e3-b492-c321d1f37ac7","sequence":{"long":3915},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6d6df16-e199-4f1b-bd3d-ba7c3bb11ae0","sequence":{"long":3916},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcaa3caf-4fa2-46a3-aeb9-3644d4ffcf04","sequence":{"long":3917},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9cfe770-a1ea-4b0a-bf5d-b65483612ffc","sequence":{"long":3918},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e70250f-5e6a-4b57-96f0-ee4ad430a3cf","sequence":{"long":3919},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab90fd35-078b-4844-a58a-7e0d4528714e","sequence":{"long":3920},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef6225e0-f8d7-4c2c-8651-300edc8bb3bb","sequence":{"long":3921},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"03d65a83-467b-11e9-aeb8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"03d65a83-467b-11e9-aeb7-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"2271a522-92b8-5944-8a03-11aa3f1291c1","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"03d65a83-467b-11e9-aeb7-080027fc76ba"},"uuid2":{"UUID":"03d65a83-467b-11e9-aeb8-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62367a5d-d522-47b0-b51c-01a18b569717","sequence":{"long":3922},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2271a522-92b8-5944-8a03-11aa3f1291c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"03d65d8b-467b-11e9-aeb8-080027fc76ba","type":"SUBJECT_PROCESS","cid":1375,"parentSubject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582977078937143},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"958fc577-0552-4009-aa92-f8ac2e9d9468","sequence":{"long":3923},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1375","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1375","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6780e65f-86f4-49f5-bc17-46e9397c36df","sequence":{"long":3924},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1374","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3b77185-46d3-4d51-bd44-4b1cd675a6f4","sequence":{"long":3925},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"03d65a83-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1374","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83ee2a17-d712-463f-bba7-2f220114b2ae","sequence":{"long":3926},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1374","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0272ae5f-59d3-4c37-bc2c-a904301ba268","sequence":{"long":3927},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1374","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9604739-bfae-4a6e-a0f1-b1d0f570abbf","sequence":{"long":3928},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"03d65a83-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4aca94d-7611-45d3-8f21-31377ecd491e","sequence":{"long":3929},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52834c5d-4a33-4698-8329-900d3a310e09","sequence":{"long":3930},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31f1ce21-f690-43c6-95b7-638bfd0dd403","sequence":{"long":3931},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9f916e9-d382-4eda-b391-2212d37817c9","sequence":{"long":3932},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":910},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eafca253-2026-4a13-b421-b3492fcdb0e0","sequence":{"long":3933},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1025},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"03d69d45-467b-11e9-aeb8-080027fc76ba","type":"SUBJECT_PROCESS","cid":1376,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582977078937143},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7373cd0-21ba-41ac-b1ed-d65a563260bb","sequence":{"long":3934},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1376","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1376","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1046f86b-c834-4777-bb9d-3a2a62489efb","sequence":{"long":3935},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6c2c7f0-823e-4294-8ac6-dbfed2d49c51","sequence":{"long":3936},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582977078937143,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb927fde-df25-4a11-aae1-3cd4b1d95507","sequence":{"long":3937},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83b00b03-6f86-4b9a-8831-55b82e6c5df5","sequence":{"long":3938},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6dd631f-9875-44eb-ac47-2f68fdd43a95","sequence":{"long":3939},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"370d700e-18bd-43a4-b99f-fad2cb038712","sequence":{"long":3940},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be16170f-bdcc-43f8-8ef6-4e1bc72df76e","sequence":{"long":3941},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c95fa6c5-8e72-4c77-a542-e7a56f5a1bb1","sequence":{"long":3942},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977614240236,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":389294},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28887794-141e-45fc-bde2-37053416448c","sequence":{"long":3943},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c020ce71-b9f8-4d8c-b635-992be3c0787e","sequence":{"long":3944},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c31d429-d505-45a0-8276-55184b79c0e1","sequence":{"long":3945},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":25},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"047114a8-467b-11e9-aeb8-080027fc76ba","type":"SUBJECT_PROCESS","cid":1377,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582978093935240},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25ae32ab-e9d3-4beb-a644-7c2b705241ae","sequence":{"long":3946},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1377","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1377","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f7784cf-cb17-467d-8d90-2d70f268af03","sequence":{"long":3947},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"38944848-7de6-8d54-a67d-1217648d35c0","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"183069ae-56cc-449f-ae54-f5d5e543f462","sequence":{"long":3948},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582978093935240,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/named.sh a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d61eab43-9c84-4514-a9e4-44f8f6a050f0","sequence":{"long":3949},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ccaf8cc-885f-4b1c-9379-bf135ff6ce1e","sequence":{"long":3950},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20b54646-4115-4f51-b92b-cc5c6123595f","sequence":{"long":3951},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ba908b2-fb4c-4298-aabf-95c4c36071cf","sequence":{"long":3952},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b47e0f6-733d-4573-b251-7c70ab3aba87","sequence":{"long":3953},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f150687-6e0b-4bbf-ae57-c489cb439c6b","sequence":{"long":3954},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cbce795-1389-4f98-9189-375d0a12e6b2","sequence":{"long":3955},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0614b56-2ce0-47c2-808a-473859b5bfb9","sequence":{"long":3956},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d832f54c-4570-4179-8793-6ce9d8935708","sequence":{"long":3957},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a548944f-fcbb-4a39-a485-188bdc666898","sequence":{"long":3958},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a155e14-be6f-4bd9-b92e-ada0122f8e1d","sequence":{"long":3959},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65111fb8-df38-4202-837f-81b997477825","sequence":{"long":3960},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"481a27b7-6c48-41b5-bf97-3ab261223925","sequence":{"long":3961},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80cf3823-1f41-4ddd-8e89-c600b35c432f","sequence":{"long":3962},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"502f3872-1ca0-4df0-8c4b-4fcb1f98389c","sequence":{"long":3963},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"857494b4-8d68-4be2-9df5-93cc378ecc8c","sequence":{"long":3964},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7fee79e-78a8-492d-8100-a73e3726969d","sequence":{"long":3965},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea85a03e-3d71-4ce0-bc66-ef89193468f6","sequence":{"long":3966},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"520aee0f-aefa-4b87-966e-dd0a65189c0c","sequence":{"long":3967},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5013da4c-9011-4d42-aca1-b531037d9eac","sequence":{"long":3968},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582978093935240,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/named.sh a","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d10c05c-68c4-48b2-80c0-765a1bfde334","sequence":{"long":3969},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c539b02-3736-4d5a-acad-fd2a01c8fced","sequence":{"long":3970},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"becec6bf-afc2-41ff-ae01-e375bfb61f8f","sequence":{"long":3971},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4af77ec-a1db-46a2-ade6-dece9bc71f9f","sequence":{"long":3972},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f70daf3-d101-4b15-a321-273befa91bd4","sequence":{"long":3973},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca15c1fd-7ad8-4770-8b96-1ca2f314326c","sequence":{"long":3974},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aee5ef23-827e-4020-b1d6-ca09f70a25e5","sequence":{"long":3975},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f981f6e-cc62-423b-b6cb-d8d3cccf229c","sequence":{"long":3976},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f4bd6d4-c634-44d7-9cae-01e721432ba3","sequence":{"long":3977},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab4fcdd7-267c-41a1-a98d-ae42f70311e4","sequence":{"long":3978},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10dfd419-cb5e-4f5e-8454-6dc88178bcf9","sequence":{"long":3979},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6492ac08-f7b9-427c-b334-78f59e1a9255","sequence":{"long":3980},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2679e5c8-7181-4432-96cc-c00f31d22ee0","sequence":{"long":3981},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d31b2c9-e7cd-4a55-b751-8e64e4538a51","sequence":{"long":3982},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d89c7f7-1d6a-4e18-9abc-230db9adfccd","sequence":{"long":3983},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a54acdf5-e8ca-44b1-bfbd-48aa962c213f","sequence":{"long":3984},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d183ecf-2df6-47e1-a0cf-52fe76d5f7c5","sequence":{"long":3985},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cd3d857-ed53-4e81-bcd5-ce5eaa623512","sequence":{"long":3986},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbac5bdc-4495-4168-9216-7665321c96fe","sequence":{"long":3987},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09885aca-3933-4600-80e2-5f21c4193ebe","sequence":{"long":3988},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0762136c-5574-477c-b8a2-6356481f6662","sequence":{"long":3989},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c1971a7-816c-4713-b6a8-99e77de4e438","sequence":{"long":3990},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d522fde-dabc-4104-b70a-7fae037f3162","sequence":{"long":3991},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c66a409-2c96-42be-922a-5d39be058b5a","sequence":{"long":3992},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1357173a-256c-4b16-9540-bf994a1b9fb2","sequence":{"long":3993},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51c6da88-656f-4054-87bb-ec0b3fe7217a","sequence":{"long":3994},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d38bed4-825c-4885-9b69-8a7a7c351560","sequence":{"long":3995},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89be9878-d664-4ae4-8398-79c2ed1bb184","sequence":{"long":3996},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e06a5d5-e7a9-4f8d-8530-e6d419d4295e","sequence":{"long":3997},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e70d8d2-48f1-47fc-bd86-1d9746ba82cb","sequence":{"long":3998},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e01f98c1-8bb1-4387-8443-dd669a8c32b1","sequence":{"long":3999},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4f8fd2b-ab44-48e6-9cee-a2f77451a4d9","sequence":{"long":4000},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fedd0969-1fad-4c10-a553-d0081e32efaa","sequence":{"long":4001},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f6449f5-94e3-4610-abb4-cd10d00b4321","sequence":{"long":4002},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96183b27-2935-4075-be01-db5d9c13b9b7","sequence":{"long":4003},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85775f34-11bc-4b82-bc70-378e51d6930d","sequence":{"long":4004},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2cf5771-3bc8-4904-abe1-19a01bb54baa","sequence":{"long":4005},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49ceeb16-fe36-4760-874c-7b2ba4d5f59b","sequence":{"long":4006},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c38b84b-bb66-4efe-b2d2-ffa0aaccc3d5","sequence":{"long":4007},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f05e07ab-cf17-4f4a-936c-430629a019c9","sequence":{"long":4008},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"398b1c9d-9629-44a3-8ef3-d2f7f311445a","sequence":{"long":4009},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"154d7ace-e21b-4e64-8284-3b572af93716","sequence":{"long":4010},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"608ddd42-7a41-4489-8bea-ee931c021b2d","sequence":{"long":4011},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97db0d53-e251-421e-bf03-235838433d01","sequence":{"long":4012},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48a55849-8115-40bc-b2b2-44985925982a","sequence":{"long":4013},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08f9b95f-9ee5-449d-9221-9d20fdbffa1c","sequence":{"long":4014},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bee81638-50dd-4b47-9595-214788c46238","sequence":{"long":4015},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"270bf8c9-15c8-4f71-8e5a-354c6220b488","sequence":{"long":4016},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b25ab9e-b6dd-4b25-a2b0-fa55eef2da5b","sequence":{"long":4017},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8709f5a7-9abe-4361-85a0-7dde0fd7763b","sequence":{"long":4018},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7ce7b0c-f331-489e-8ea9-eeda48d64f64","sequence":{"long":4019},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb37d4d8-7410-4f86-9b91-b920a5d0648e","sequence":{"long":4020},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03e7bf23-f7a1-45b5-a431-cadee47e78fc","sequence":{"long":4021},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"971a7fd7-3101-4d5c-b1d4-38d867d9c2ff","sequence":{"long":4022},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f763c706-1f4f-4cc4-a5fc-d2faaf493eb9","sequence":{"long":4023},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9496ac24-afc5-425b-bf4c-059269773f10","sequence":{"long":4024},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57c2e2c1-fe74-4f97-a78b-4af802d547dd","sequence":{"long":4025},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b42c61f-105e-4384-af33-b06e4c84b20b","sequence":{"long":4026},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8863c01-7206-4a14-8f0f-fe510ed36ddd","sequence":{"long":4027},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5dd9410-293d-498c-849e-c1f8697e50b9","sequence":{"long":4028},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03b82540-d7db-4e01-af11-dd9897df8822","sequence":{"long":4029},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f3b4064-ea69-4e71-a671-b8daf5a42533","sequence":{"long":4030},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de674f32-e1ec-4ac1-8571-fc5f20740147","sequence":{"long":4031},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":286},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e79fbc62-b841-4d1f-bcf7-572e85f1121e","sequence":{"long":4032},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":253},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"04724181-467b-11e9-aeb8-080027fc76ba","type":"SUBJECT_PROCESS","cid":1378,"parentSubject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582978093935240},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bdf86d7-b279-493e-8c88-d60dcee0d409","sequence":{"long":4033},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1378","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1378","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cbf0756-a92f-4ed6-85ee-17de71054ecf","sequence":{"long":4034},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5fb19c5-4d4b-4df7-bd22-c14d70f7fc7e","sequence":{"long":4035},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":271},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"04724c46-467b-11e9-aeb8-080027fc76ba","type":"SUBJECT_PROCESS","cid":1379,"parentSubject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582978093935240},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc9179ac-389e-444b-825b-9c6602dceded","sequence":{"long":4036},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1379","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1379","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad795662-cb73-4c5f-b8ce-c2f153a0367b","sequence":{"long":4037},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdfbd88e-d741-4f7b-8f8f-562142d40e0e","sequence":{"long":4038},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b7038ed-288d-4324-bcfc-c83f8ded8703","sequence":{"long":4039},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"887b87f0-15e4-498d-a3a1-3f95b8b326cb","sequence":{"long":4040},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59e7776e-a147-4440-a841-55fdc75da691","sequence":{"long":4041},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582978104376001,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d5798f9-2592-44a6-8822-f2ddeadc6e8d","sequence":{"long":4042},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"b0bc4f68-c591-a656-91c5-dcf6b6a6dfa5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d07641a-b2cb-4ffe-b8aa-27fd28d084dc","sequence":{"long":4043},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"b0bc4f68-c591-a656-91c5-dcf6b6a6dfa5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./named_writer"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582978104376001,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./named_writer a","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3507557-297a-40bc-8daa-c7c284858d64","sequence":{"long":4044},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36f1f065-92c5-4074-aef3-36d37a016bd4","sequence":{"long":4045},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d062abf-9b57-4b2d-8069-2e3e75bf64d0","sequence":{"long":4046},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd1fd86a-91db-4eb4-9ee1-93a7c82016fb","sequence":{"long":4047},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2f1b5a6-a309-42f4-b637-ff0bb30a64f9","sequence":{"long":4048},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a78917d7-c798-48f3-87a0-8f2b73e68c5c","sequence":{"long":4049},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ab2b88e-1b57-4d6b-89fd-e21133ecf6e1","sequence":{"long":4050},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bfe941f-ea9e-4d67-9f1e-f91d33ab969d","sequence":{"long":4051},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2439e579-d427-40ab-b809-fee1f350d0e9","sequence":{"long":4052},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52e9ef7c-2f64-4da8-9bac-03676b008bef","sequence":{"long":4053},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b2d0582-9291-4e35-a32d-7c01648e795c","sequence":{"long":4054},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c00d10ad-65ca-4faa-870f-d4bc5687586e","sequence":{"long":4055},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55fde85d-79ab-43c0-8969-0684053dcd38","sequence":{"long":4056},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e1301bb-3aaa-4560-b91b-256356aa9a5c","sequence":{"long":4057},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14e3441a-a02d-43a5-a7b5-2e267dc33cd1","sequence":{"long":4058},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f314412e-ed01-45ed-aac2-79bc0b1687e5","sequence":{"long":4059},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01e2ad77-f586-43fa-97a4-d6182d3e30a1","sequence":{"long":4060},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ef13e6b-e088-494a-a8ac-9f7a3286d0b7","sequence":{"long":4061},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1bde4e5-6c5a-49ad-b07f-c058259957e5","sequence":{"long":4062},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa7295f2-4e6c-4632-8a22-c5c23628b776","sequence":{"long":4063},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5afab252-d530-456c-85a9-657891c64909","sequence":{"long":4064},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":27},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b22b190-9517-4819-a53b-9cab0314b0e1","sequence":{"long":4065},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e5ee811-2964-4967-95e8-acbeaf18e3fb","sequence":{"long":4066},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebee48df-972e-40a0-90c8-483e5a856d3b","sequence":{"long":4067},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54cad903-baa1-4204-aeea-6a92eff85885","sequence":{"long":4068},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bd48e3e-b756-4ee8-9768-d3f6db691226","sequence":{"long":4069},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4d4d270-6744-41e5-b516-f75a0ead56f6","sequence":{"long":4070},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06c8aa28-213c-4641-937d-ab235a223794","sequence":{"long":4071},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2a02991-f770-4078-ad15-2312234a254e","sequence":{"long":4072},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fe4e9c5-9dab-4502-b084-cdb465faf7c0","sequence":{"long":4073},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c887307-1903-4163-9c90-e93eb3391ec0","sequence":{"long":4074},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d7b1f69-0be5-45d9-961b-0df004a77bbc","sequence":{"long":4075},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71a27527-7630-491f-898c-3c1b9444fbba","sequence":{"long":4076},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfba12e4-e323-4a9a-9e15-9c13fdb648bc","sequence":{"long":4077},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abda4aac-464e-4c76-b92a-8df63f4f28ba","sequence":{"long":4078},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978653885691,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":403239},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e28b84f-dfcd-423c-9ee0-3a702ab83ad8","sequence":{"long":4079},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a4cf730-cbec-43b3-98f1-29aca0c6d490","sequence":{"long":4080},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c2fafe7-c630-462e-a27f-3939e041a4ab","sequence":{"long":4081},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"767b98ae-a766-416e-8afc-18cccef1474a","sequence":{"long":4082},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5d1f56c-71f6-4a20-80e0-bec3609de941","sequence":{"long":4083},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d970191-6003-4ed0-bf3b-e1a6c7779994","sequence":{"long":4084},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"284dbe85-c502-40ed-9900-c2aa1bf92d12","sequence":{"long":4085},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"050e3275-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1380,"parentSubject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582979123878126},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"399950ca-13b1-4717-9123-06bb2592cc9d","sequence":{"long":4086},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1380","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1380","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0e4bec5-0758-4fc8-b9dc-40a543b45f3f","sequence":{"long":4087},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d13b936e-e1a2-e756-a2e1-63e636e7e7c5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67f57583-c229-4873-9c03-7c4e50f38073","sequence":{"long":4088},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"d13b936e-e1a2-e756-a2e1-63e636e7e7c5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./named_reader"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582979123878126,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./named_reader","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1492ebd1-b059-4b42-ba57-98d4e742c1cf","sequence":{"long":4089},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b84ad5a-4e82-4b6b-a939-b7dc6f0d748c","sequence":{"long":4090},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87f9ebcf-b429-4248-83aa-1dc88c1d58fd","sequence":{"long":4091},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec7f4ec2-43be-40f5-8c4c-967429bf7e44","sequence":{"long":4092},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6499c9c5-ce77-48ee-975c-7a743f93babf","sequence":{"long":4093},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7400c1b-b2ca-44f4-8136-61dd69883c60","sequence":{"long":4094},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2afbc218-fad9-4098-844d-1e75a702c484","sequence":{"long":4095},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82f36aa2-fbd9-41db-b6e7-b6b0c1e078cb","sequence":{"long":4096},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4adea07-682b-49f6-9f8d-cc3ed6df1e3f","sequence":{"long":4097},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a7f4032-1f97-472c-ac57-52af42ffa856","sequence":{"long":4098},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b73b7d9-7891-4956-a028-5ce2005b2934","sequence":{"long":4099},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7d593d4-42cb-49d0-9ded-be954d6a1d02","sequence":{"long":4100},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ab92d27-94f2-45c8-881d-b148427e480c","sequence":{"long":4101},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79317aa3-a10d-4748-a21c-e459b1480697","sequence":{"long":4102},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8ebd355-077d-4093-adc0-a46d089595ca","sequence":{"long":4103},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5602b11c-4838-4640-a1f2-f44292512788","sequence":{"long":4104},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38102545-3406-468d-ad71-db0c995adcbb","sequence":{"long":4105},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03297c0f-2410-4217-bee1-f78bff5db780","sequence":{"long":4106},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73a2a95b-0d6f-4dab-a802-1adbb4ef2675","sequence":{"long":4107},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fe00bd1-dee1-481f-a4a9-31951578a1b1","sequence":{"long":4108},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":27},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"eafcf6b5-df06-685f-86df-21037f68996a","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efcfcfd5-f79c-43dd-8765-6a2ef1d4c792","sequence":{"long":4109},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"eafcf6b5-df06-685f-86df-21037f68996a"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"04732720-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99772be0-04f2-4873-83e3-d06ba4a007b1","sequence":{"long":4110},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"eafcf6b5-df06-685f-86df-21037f68996a"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"04732720-467b-11e9-aeb8-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d9353bd-914b-487a-bdc9-33b5d1486913","sequence":{"long":4111},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"04732720-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68523168-b42f-42de-a2c0-58f3540368c4","sequence":{"long":4112},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":18},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6dbcd2d-92e3-486c-b2ee-1f9168725f80","sequence":{"long":4113},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"eafcf6b5-df06-685f-86df-21037f68996a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06a7c385-0029-4e0a-946a-406d9dc3af63","sequence":{"long":4114},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acbf9381-3a24-432d-97b6-2f3bed2c1ffd","sequence":{"long":4115},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04732720-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d208ffbf-c97f-4216-82e6-7797c55b278b","sequence":{"long":4116},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04732720-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34bc7faa-ddc9-4c21-80b8-9a2f75bf1e09","sequence":{"long":4117},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8deaacd4-903e-4b33-950f-933fb10ae016","sequence":{"long":4118},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64a4a974-3f62-48af-8f7f-135865634b27","sequence":{"long":4119},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51b3e106-35e5-46b5-8b14-3317acacb754","sequence":{"long":4120},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7081925-c5e5-4618-bd80-015a1cceecb4","sequence":{"long":4121},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":859},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b38b8e6e-cd2c-415f-853e-d26b57d34847","sequence":{"long":4122},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1041},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"050ef741-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1381,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582979123878126},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d225a7e-de1b-4e52-8a20-414f7af345c4","sequence":{"long":4123},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"050ef741-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1381","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1381","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed69a8a5-ade4-4020-973f-9f0ae69ad225","sequence":{"long":4124},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979673936273,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":408126},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef85eab9-81eb-451d-a14a-4731e15d5efa","sequence":{"long":4125},"type":"EVENT_OPEN","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":{"string":"/etc/cron.d"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980015553697,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00e808"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7606786-c221-49c4-8642-491e7943c047","sequence":{"long":4126},"type":"EVENT_CLOSE","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980015553697,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73c74fa1-f7ef-42a7-8f69-2fdef6aae3d1","sequence":{"long":4127},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":408126},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4dc59894-6700-4a9c-9c2a-46535cd129d8","sequence":{"long":4129},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7351063a-9031-4c00-a910-4bb80069ce9e","sequence":{"long":4128},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f4a68dd-43db-459c-bce8-43ede437221e","sequence":{"long":4131},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f4e3d41-ec7a-4d21-9cd7-90b60062ee76","sequence":{"long":4130},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27189e78-c849-4fc0-b873-ef7a1e2133a4","sequence":{"long":4133},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f46e25b1-a642-4c21-98d8-8c2bb6e61be8","sequence":{"long":4132},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ad41fba-855a-45e9-b0f0-a4bdeb0aba5f","sequence":{"long":4135},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"490dc5f7-1517-4837-bea8-c92cf33ddb5a","sequence":{"long":4134},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ba81768-28e6-4fa8-bcc2-356cc73111f6","sequence":{"long":4137},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"caaba273-d610-4c2a-9d29-c47050392085","sequence":{"long":4136},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44e84a54-7684-41d2-8ed1-a699949cddf4","sequence":{"long":4138},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36cb3396-edbc-43ee-a9d6-85239d36383c","sequence":{"long":4139},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3b906b3-a3a3-4290-bb92-b51d248b3371","sequence":{"long":4140},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"daa92a64-077f-4ad4-b5c3-ba7ebe3dd337","sequence":{"long":4141},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4918},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e67d96a7-0b47-4b90-9648-2ae68b4056ed","sequence":{"long":4142},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4971},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9116c6ff-1040-4ab0-b96b-9ebfe9d1bdce","sequence":{"long":4143},"type":"EVENT_WRITE","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07671677-4d28-473f-881a-98624500e51d","sequence":{"long":4144},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"411d86a7-88eb-4b63-a4e4-9213582d3034","sequence":{"long":4145},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f20d6636-2b26-4efc-91ca-fe7b1332435a","sequence":{"long":4146},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4005},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2841f083-8dc7-4a3b-81e6-60e420b3857f","sequence":{"long":4147},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4058},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfd8f504-f912-4874-98bf-bfed1ed2a159","sequence":{"long":4148},"type":"EVENT_WRITE","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4316f4a1-098b-4848-9451-d49b43b04507","sequence":{"long":4149},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"340fcb76-7a78-4200-8d92-f1d7a25d9ff5","sequence":{"long":4150},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a8a8eff-8ff4-4a0e-9142-3c202f6992e0","sequence":{"long":4151},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5010},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49b1725c-6549-4886-8e8d-7a8efbc265b0","sequence":{"long":4152},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5063},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d825784-f241-4d53-9642-542b4d456567","sequence":{"long":4153},"type":"EVENT_WRITE","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fce9952-87fb-42f4-a4b1-9ce160038b86","sequence":{"long":4154},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"414e19f1-16dd-452e-9b02-6690726cb716","sequence":{"long":4155},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cf6a661-8b1f-47ba-87b0-06fb3b160abe","sequence":{"long":4156},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4883},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"269189cd-58d2-47e4-b48b-3a8471c06ca5","sequence":{"long":4157},"type":"EVENT_WRITE","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab8a9c74-2955-4fbe-810f-e30e5e7467d2","sequence":{"long":4158},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6319db8-1d8e-4e18-985c-f28979016a78","sequence":{"long":4159},"type":"EVENT_SENDTO","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"520","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf14fd89-f15b-4f46-b54d-aa7373c37968","sequence":{"long":4160},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"520","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8531a3c6-2462-4ed8-b93e-7959de9197d9","sequence":{"long":4161},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e8d8fd2-af82-48c2-a7c0-e5bdbb9c3fbe","sequence":{"long":4162},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"050ef741-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"050ef741-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f502d8c-6017-4e8b-a8ac-feb5200e1761","sequence":{"long":4163},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb88da6c-0d08-4c28-880c-c34dfe21be33","sequence":{"long":4164},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"05a8917f-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1382,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582980135150042},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"708137c3-2ed1-4cb6-95e4-47b7fd21d2ea","sequence":{"long":4165},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1382","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1382","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c1c8c44-7964-48ea-8114-7868f8fd78ac","sequence":{"long":4166},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"7eec5b1a-792a-5556-aa79-9b231655b451","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6553fefb-d4c1-463b-80c2-b01ae09b964b","sequence":{"long":4167},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"7eec5b1a-792a-5556-aa79-9b231655b451"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./shm_exfil"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582980135150042,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./shm_exfil ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d5872be-7054-4108-8781-422d5cb08a56","sequence":{"long":4168},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"632b8dcd-a8e3-4048-b738-8dbfcfcd2e63","sequence":{"long":4169},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8877f4f-88cb-4e46-92ef-3b26b61e382a","sequence":{"long":4170},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23cd6de4-6f34-4267-8650-63fa1c1c49de","sequence":{"long":4171},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06e19e2e-9329-486b-9174-940b69cfef84","sequence":{"long":4172},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f607d787-868a-4686-9bfd-73614e6b2baa","sequence":{"long":4173},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72a8843a-5b04-4f41-9829-f6a598016204","sequence":{"long":4174},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e37fcbc-3e84-4985-b9ad-4d2d621e462d","sequence":{"long":4175},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980684087639,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":413024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16d291b6-c68f-450e-b2a5-3758bdbf908a","sequence":{"long":4176},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d66c0503-40df-4df5-9bef-8be5fd99be47","sequence":{"long":4177},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5af9ddb-5488-43c3-9f0a-3d36270c421d","sequence":{"long":4178},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":843},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0075d05-cca0-4436-98a3-a392a7497d69","sequence":{"long":4179},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1092},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"0644af0a-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1384,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582981158328683},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88c9d018-9471-407a-8fa5-ff8a89207c7f","sequence":{"long":4180},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1384","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1384","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3e2b1af-ed3a-4207-8c30-493d419560a1","sequence":{"long":4181},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd313c5a-161e-4b8c-8b56-a7a73aaab385","sequence":{"long":4182},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582981158328683,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f29202f-bc78-4e84-8739-6fcc862cb26a","sequence":{"long":4183},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c54387e0-c394-4b83-9270-3078c5d93478","sequence":{"long":4184},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11b78607-47bd-4468-a125-794baeef5ac0","sequence":{"long":4185},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7d5c463-d4b8-4259-8509-4ca45521d826","sequence":{"long":4186},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bac5e834-5345-4fe5-8344-2cb108b51dc9","sequence":{"long":4187},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"469d6fa8-5f68-4eb6-9c83-601dfa8d1151","sequence":{"long":4188},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03c6d8b7-e78e-4ee9-a710-d993df4c45e9","sequence":{"long":4189},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"020d071f-861f-4203-8ca7-29f294951adb","sequence":{"long":4190},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72a64f1f-712e-4e7d-ac8a-b4831c676c5a","sequence":{"long":4191},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60801635-4944-4c6b-8192-15789b2e7678","sequence":{"long":4192},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c35679ef-6899-4cd0-9b8c-47aa98e80c78","sequence":{"long":4193},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bde5ec14-e06d-438b-8c72-a0a0ea5bdc20","sequence":{"long":4194},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4118be84-1fda-485e-96a4-68dc79842c59","sequence":{"long":4195},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8990e8f6-796a-4d8e-87cb-267419c3dc04","sequence":{"long":4196},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b18d34f-3815-475f-809c-f035fd365e37","sequence":{"long":4197},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24706f95-8242-4d7f-896c-c2e850f45a2c","sequence":{"long":4198},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4771862-637f-4996-9183-ab5af8b83f38","sequence":{"long":4199},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fef6a38b-9cce-463a-92ff-f08ff0e7499a","sequence":{"long":4200},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67cd8d5b-b56b-409d-9679-6d220588b1c5","sequence":{"long":4201},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"754e4e7d-35cf-45a8-b237-7edd31dd3e00","sequence":{"long":4202},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981694131361,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":415975},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f073f32-6385-476b-8f08-75101c690be6","sequence":{"long":4203},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":415975},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfbf152a-d7f6-423f-93d3-fe6ce6214d22","sequence":{"long":4205},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86f2fd9f-9972-4ccd-b42d-da7c5b02f90a","sequence":{"long":4204},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f3cace7-38bd-456a-a63e-2088f872f90a","sequence":{"long":4207},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6929dbb-57a9-4b0d-aa48-b65d8b8223bc","sequence":{"long":4206},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"758a619d-6552-4551-8a30-763c306ca2c7","sequence":{"long":4209},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2acb32d-89ac-455e-b2f4-ebe458eabcef","sequence":{"long":4208},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b57df27-2b18-43a8-8ed2-c12e54f9dca2","sequence":{"long":4210},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84ddcd2d-8220-4f6e-907e-c9f199fecb53","sequence":{"long":4211},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b9120e9-790a-4a3d-81c6-5d22b894e086","sequence":{"long":4212},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa24d771-3795-4df7-b3e0-7ea3e6db08ae","sequence":{"long":4213},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4894},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e6e9ad4-6250-4a68-abbd-1126caf2a4d1","sequence":{"long":4214},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4947},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65f6fc05-f7cf-46c4-b28b-b3f75798eed9","sequence":{"long":4215},"type":"EVENT_WRITE","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2c10616-b269-4718-ae31-2b4568f87069","sequence":{"long":4216},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ad45ec5-80f7-4452-bfbf-b19944c0ea77","sequence":{"long":4217},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"913194a9-864c-4e3c-a95f-3a2094e1fdb7","sequence":{"long":4218},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2947},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f171a76a-f73c-4da0-9dfc-f49e1fab101b","sequence":{"long":4219},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3000},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7faa44bc-47f2-4f41-bba9-c6e69b533895","sequence":{"long":4220},"type":"EVENT_WRITE","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61aaaba2-de09-47b5-90c7-df2ec33e8d1c","sequence":{"long":4221},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ea76c1e-2804-4914-8c3b-548f895b65d9","sequence":{"long":4222},"type":"EVENT_SENDTO","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"521","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7175e15-78a5-4f4b-ad83-e079285a8e67","sequence":{"long":4223},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"521","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a88668d-1533-421e-a1ea-8a785a09cc97","sequence":{"long":4224},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f49c1f73-aa4a-4f1e-bf06-99b3cb3a161e","sequence":{"long":4225},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6dee8fc-1e6e-4ec0-949a-6933bb5c3b04","sequence":{"long":4226},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"722b38de-a07e-4c62-a339-768d052bf803","sequence":{"long":4227},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982134345512,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0db0de1b-08ac-4bbf-90bf-c45e9403d0e4","sequence":{"long":4228},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982134345512,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7bcd187-649b-46ef-b816-0fd934fe9ea5","sequence":{"long":4229},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4d3fe2b-27f5-40a4-b75d-5679284dccf8","sequence":{"long":4230},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2e7fc0e-1823-441f-a17a-69b07de92747","sequence":{"long":4231},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"06dfb5b9-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1385,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582982174660438},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"942cca5b-aa44-4fff-8331-0e77b8189f34","sequence":{"long":4232},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1385","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1385","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4ebda48-afe9-444d-ad2b-b7458458b3fe","sequence":{"long":4233},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"fdea8fdd-1295-d356-9512-4bf3c6d37104","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b07c908c-c6f3-4895-ac57-577ce9b3d2b4","sequence":{"long":4234},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582982174660438,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/signal.sh a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"769e2469-9fe7-468a-bdad-03742c14ddf9","sequence":{"long":4235},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1260b6f-31f9-47b1-b0dc-066b22531d4d","sequence":{"long":4236},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d30f8bff-03ea-4be3-93e0-a2e8077e791a","sequence":{"long":4237},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de13985b-7929-476d-b224-db33e527f792","sequence":{"long":4238},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75b2aaf5-5eaf-41bc-967a-0a9aaaef978a","sequence":{"long":4239},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36b11b12-afd3-4697-a2d6-a27c85723a6d","sequence":{"long":4240},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eaab5fbd-ebba-4632-8e30-ad036826d3ca","sequence":{"long":4241},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"546e1ea2-efda-4bb3-8932-593dc9b2e9bb","sequence":{"long":4242},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62325989-fcab-4abd-99d8-0208e033c814","sequence":{"long":4243},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e1a4730-0c08-439c-ba1f-3ffcf3fa5630","sequence":{"long":4244},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2533781-a90d-4058-a4a8-f6db6a223080","sequence":{"long":4245},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d99fd84e-bbe3-4887-ab9d-b9cef4d0a4b8","sequence":{"long":4246},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f707816-6aa5-4130-8486-1d6cb09542fc","sequence":{"long":4247},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f99b02f6-7836-43fc-bfa3-042398824623","sequence":{"long":4248},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c2a8c99-9ea5-4f71-b1bc-cf129e121f8e","sequence":{"long":4249},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61b29a67-85a3-46d3-96d6-455802f793a8","sequence":{"long":4250},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5ccd2f8-1daa-471a-a502-66da93609391","sequence":{"long":4251},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f1734e6-a2df-43b0-a395-3ffdb58cc768","sequence":{"long":4252},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e7e8a00-1d08-4410-a88d-a9027422a0d1","sequence":{"long":4253},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ed5436d-8c7f-4db1-b817-f60fa0236b4e","sequence":{"long":4254},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582982174660438,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/signal.sh a","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91ec6f08-2b66-4c51-accd-7d8e5e2e1fa0","sequence":{"long":4255},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e91e163-0f3d-4421-ab01-7a1de2b2b588","sequence":{"long":4256},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a795ea3c-405d-4d4c-b489-eba4e889b883","sequence":{"long":4257},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b22bda1c-9b3f-4ba7-bd39-c97ce4bd18a0","sequence":{"long":4258},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcaf6411-7707-4d6f-8f3d-bec30278f5b2","sequence":{"long":4259},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"207d6154-9f55-4ebd-816b-c1a13163d7f7","sequence":{"long":4260},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf30d230-0899-4214-a4d9-b76a5a4b1088","sequence":{"long":4261},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23125d2f-ce17-4b46-badb-74ef2ec5d445","sequence":{"long":4262},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99bb0ad1-d760-4ad3-aea1-881d38ccf0fe","sequence":{"long":4263},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41e3544e-2ca2-42ef-b6b3-6c78f547ce20","sequence":{"long":4264},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afbf902b-e4f7-4bca-a76e-3fc1aecd3aa0","sequence":{"long":4265},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23eb9424-e622-4f7c-9a41-74707543642b","sequence":{"long":4266},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d2aa326-7dc0-4425-9286-c9e32f1fb360","sequence":{"long":4267},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e110f6f3-43cd-4bce-bdc4-e697c5f47cfb","sequence":{"long":4268},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4462c7fe-8051-4e64-8436-5c37a727b040","sequence":{"long":4269},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e489ac4-4329-4db7-bc48-2474814238f6","sequence":{"long":4270},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c889017-5a9f-4cf2-bbd8-b76bc5406510","sequence":{"long":4271},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e966469c-284f-4981-ba6d-979877c65382","sequence":{"long":4272},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac6610e6-0d38-439f-91e5-dd0b72cb8406","sequence":{"long":4273},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"613e92c2-c4ac-4b5c-89c9-73d522aa5ede","sequence":{"long":4274},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7eede4e-d6c8-4771-9806-b66565863ff5","sequence":{"long":4275},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30eb8e99-264e-4df4-b95a-272c7e10a65e","sequence":{"long":4276},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91345f5f-69bb-44ff-a5d4-7c7e52b6671c","sequence":{"long":4277},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"191e4466-5569-43e1-b3bd-c5828eea08b8","sequence":{"long":4278},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2e692a3-eaaf-48d1-96c1-50b28c04d3d2","sequence":{"long":4279},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be21cbd7-a580-4824-8654-53a8092e461d","sequence":{"long":4280},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f9f1d33-49f9-4b15-8489-e6574e887845","sequence":{"long":4281},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80655902-ffc0-4213-9e5d-d7ca3d3fa2df","sequence":{"long":4282},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c28b20d-1ce6-48ba-844b-6688a0ed3938","sequence":{"long":4283},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86d6490e-ff76-465f-9d46-7392280ae94d","sequence":{"long":4284},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31f4a99d-02f3-42e1-af7d-069c0fcaae46","sequence":{"long":4285},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc8f6ce5-9c8b-4fd9-9d65-88600bc7debc","sequence":{"long":4286},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffca4ce3-07da-4370-b44e-9bb0b91d6f94","sequence":{"long":4287},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0d14f11-121e-4d9d-aa44-741b034556eb","sequence":{"long":4288},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"847b8475-298b-4422-9e83-972b375a49d6","sequence":{"long":4289},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce814557-1a6e-42fa-b59f-11f73d59178c","sequence":{"long":4290},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58fbf5ba-532c-4671-baeb-744171e50e54","sequence":{"long":4291},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"238a91d5-1259-4979-b7fd-0b48f56da738","sequence":{"long":4292},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83570c0e-dca4-40fd-a6cd-c673f1654847","sequence":{"long":4293},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c01af3e8-5adb-40ed-87b1-9725f1975283","sequence":{"long":4294},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2deebc19-7bbe-4e9c-8910-9b7135f2185e","sequence":{"long":4295},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6234b19-3864-4167-8437-e8d2233be776","sequence":{"long":4296},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b74fdf5d-15d9-45e6-9a3c-ed84a2e37f1a","sequence":{"long":4297},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01ffcd5a-8923-4d8c-9005-a0b0290f307d","sequence":{"long":4298},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"735e09f6-3bc9-4afc-8b91-1033d3c20e01","sequence":{"long":4299},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a3a1706-fb8a-4b2d-b164-7d9aa006d131","sequence":{"long":4300},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d3cf502-fded-4450-96c9-31a86d31d472","sequence":{"long":4301},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"336fef5e-bcfe-4934-81ce-0cefca5b7232","sequence":{"long":4302},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"629fd2b0-f164-4d3d-ba62-e9dfafd4d53e","sequence":{"long":4303},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08696f05-d891-4fb7-b16b-02dda421dc4b","sequence":{"long":4304},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86e6610a-7c3c-44ae-b0f2-3132e82ea027","sequence":{"long":4305},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a41edd57-bad5-483d-b17a-400c6b99b752","sequence":{"long":4306},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad6e6181-e59d-4a14-9613-ec244476036b","sequence":{"long":4307},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25d0151a-50dc-4bbd-b6f7-61f524dd1cb9","sequence":{"long":4308},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f81f6894-e206-4ab6-80a8-a6653c1fb654","sequence":{"long":4309},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00ce0526-5afa-4e55-ae3c-14ca76866ed3","sequence":{"long":4310},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e57f1d8-b299-4a9a-8ec5-6b0afbd0e713","sequence":{"long":4311},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bb69fbb-740e-49a4-8865-0d5b6a6a5e86","sequence":{"long":4312},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06cc8a79-8e2e-40f1-9fb4-a66b2bd16ab2","sequence":{"long":4313},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c01a7642-29a5-41a1-b8ce-1ff4d25f06ab","sequence":{"long":4314},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a68b3cc7-b5bd-4ab6-83af-39e1e617c867","sequence":{"long":4315},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d0b4c3c-c06d-4aa6-9d45-5cc8864359df","sequence":{"long":4316},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb86f7eb-8993-42d1-bf01-fedc7aba30ce","sequence":{"long":4317},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":289},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e709d8f7-0e09-49f3-9203-b4e68e92372b","sequence":{"long":4318},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":245},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"06e087e7-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1386,"parentSubject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582982174660438},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a7a34a7-782b-4d6b-b550-c810d1975ff6","sequence":{"long":4319},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1386","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1386","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27c4f648-fba0-4cad-8c63-117f1c5e6ec4","sequence":{"long":4320},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":44},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51c76ea9-770e-48ca-9c67-8da14303ed13","sequence":{"long":4321},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":263},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"06e09284-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1387,"parentSubject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582982174660438},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"497ef9c1-36e9-4d55-864e-1d013a799950","sequence":{"long":4322},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1387","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1387","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38082b9c-3934-4bea-8c63-e316b13b25c2","sequence":{"long":4323},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"410ec464-9bd1-40da-8a2a-bfb153133be9","sequence":{"long":4324},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"639c63dc-9d75-4ade-b686-0c2a223d8b99","sequence":{"long":4325},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fb01e22-a7b7-417d-bd9c-59df316fa073","sequence":{"long":4326},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87c07d1a-9282-4ba9-86fc-75f49ff2dd30","sequence":{"long":4327},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582982174660438,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65a40f87-7529-42f9-b6d4-1debd8356c3d","sequence":{"long":4328},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c790cff3-e000-410c-94af-cb756329a1b5","sequence":{"long":4329},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bc4bd1d-49aa-4bc3-a778-315990e66509","sequence":{"long":4330},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"093c954c-79d0-4c74-b5e3-2848e8a163ee","sequence":{"long":4331},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8ebdf3f-8daa-4f2c-814c-f75ab548abbd","sequence":{"long":4332},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14cae722-1037-4f63-9ff5-ab948e936b07","sequence":{"long":4333},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5539e078-107d-4b3b-9225-1f27d83f5861","sequence":{"long":4334},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27b4b308-8596-4148-92a6-d4872a94dd31","sequence":{"long":4335},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"671e3c6b-8a16-4c55-92b9-68c6ad085bba","sequence":{"long":4336},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7e4eb77-1edb-49be-88a5-41bf51d56b16","sequence":{"long":4337},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78d8dc5a-358b-4900-b6f8-74780e1c1fb0","sequence":{"long":4338},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"485b7894-b005-4f2f-a133-b22bbec28e35","sequence":{"long":4339},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"690a8310-a640-474f-b1cd-4b89f81ed1f6","sequence":{"long":4340},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7437d835-8190-43dd-a03c-1bae0b26bdf4","sequence":{"long":4341},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d96a3df7-9b11-4bbf-a810-708b60384758","sequence":{"long":4342},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aabbe5fe-e59b-4789-805b-315584ccb12c","sequence":{"long":4343},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"574fb205-b584-4bf6-a44e-00f07beffd1d","sequence":{"long":4344},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9e42484-52ba-40ec-abb8-01e20ce02764","sequence":{"long":4345},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3853a22f-1e62-4504-b1e2-de8e17adf4a8","sequence":{"long":4346},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f7889531-95ae-715e-ae95-c4adae711987","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c996fea-3a7b-44b0-a09f-ec58077020b7","sequence":{"long":4347},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"f7889531-95ae-715e-ae95-c4adae711987"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./signal_server"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582982183880903,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./signal_server","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3925104f-ef5c-49ff-99ce-edf4c41a8164","sequence":{"long":4348},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc26956c-dd2b-4a30-aa2a-835e1d1d08ef","sequence":{"long":4349},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89e6b9ca-5b50-45bd-a4ed-6b1f3402431a","sequence":{"long":4350},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f48d87c9-e355-4b04-a50d-fb1153f5d9fa","sequence":{"long":4351},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db77ff51-1414-4e0c-adca-a0a3bf783dc0","sequence":{"long":4352},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1bce8bf-cd7a-42f1-b446-f6595fa0dc95","sequence":{"long":4353},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b56cb7a4-23bf-4887-b77a-1e17d92ab890","sequence":{"long":4354},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"86731679-6196-845b-9661-bd57db846ad9","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18059921-f8b6-49dd-8f1f-33634effef56","sequence":{"long":4355},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":{"string":"/usr/lib/libc++.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c1e904b-978a-45f8-b0f8-758b8490c51e","sequence":{"long":4356},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94e9ba48-941b-4016-b6b0-886a779f5c43","sequence":{"long":4357},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99e6ef71-6256-4efd-8b2c-32195b6dd4f5","sequence":{"long":4358},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"053ce76a-a415-417c-a3cb-6fd1626f751d","sequence":{"long":4359},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e814a50-2bb7-4553-b628-e9a5b4c25d68","sequence":{"long":4360},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3fe6d41-f227-4ed9-b889-73c37f0c1a01","sequence":{"long":4361},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63a3742b-4db0-4cbb-8d88-462f6aa6ca14","sequence":{"long":4362},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eedca50b-b036-47fe-a7b1-f1b0aa72dd05","sequence":{"long":4363},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"679d0c13-65ff-4c6b-82d7-009fb90bf426","sequence":{"long":4364},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"11055fcc-3e6d-ad52-ad3e-07c112adcb50","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f913ef89-232d-4c28-a8e6-9576d69d0af8","sequence":{"long":4365},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":{"string":"/lib/libcxxrt.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"367d2577-f064-4e8c-990f-56dc07e92f98","sequence":{"long":4366},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7166f15-f41f-4712-aa70-ae768406b117","sequence":{"long":4367},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b5b78ad-6f15-4f5d-98f8-9ac3a1b84e01","sequence":{"long":4368},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c99af647-c92c-49ee-b433-4634aa9e061d","sequence":{"long":4369},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aba425dc-d2d6-4a6f-838a-d209341d2a94","sequence":{"long":4370},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7b17180-970a-451e-b324-4fb85322fc92","sequence":{"long":4371},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df577457-d929-4a6a-9d35-383fc20a7668","sequence":{"long":4372},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4b84b0e-47be-4e3c-820f-8464613e42e7","sequence":{"long":4373},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecfc1b51-6478-42af-8eba-7a11951f2762","sequence":{"long":4374},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43edd7ea-178b-4b4a-a507-510f9bd6abc7","sequence":{"long":4375},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":{"string":"/lib/libm.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d565dc2-d46a-4f43-b542-d3e4ff1844fd","sequence":{"long":4376},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc2e4cd3-7ea1-42a1-a7c2-b66b7b9f6caf","sequence":{"long":4377},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b744a568-5f25-4026-a85b-ad576506b112","sequence":{"long":4378},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47866a9d-f565-48e5-81bb-4372533e5162","sequence":{"long":4379},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fef82d8-dc3f-4bbf-9501-5800547355fa","sequence":{"long":4380},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77e3ba0a-4866-4653-a2e1-2970ec96d7b6","sequence":{"long":4381},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d272abfc-78a4-46f3-b102-d9d2f6312613","sequence":{"long":4382},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78ae7dd7-231b-46c8-a4f1-02e7f1c1056b","sequence":{"long":4383},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12489ff2-b789-4b59-a2fe-87fc6b568513","sequence":{"long":4384},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"a7ccc371-8123-4454-a381-b03504446d50","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5edab045-f1fc-4236-86d1-1d1387271c85","sequence":{"long":4385},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":{"string":"/lib/libgcc_s.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6dadf574-3c12-48a8-84af-81278413185f","sequence":{"long":4386},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8125001d-6f22-424d-a1b2-ab0d3a79d15b","sequence":{"long":4387},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982744802290,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":434234},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8740567-a3e4-40c8-8c9d-c98a4db5ed95","sequence":{"long":4388},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"740b3c52-1ca0-4507-bdb4-437d7fc2ff0d","sequence":{"long":4389},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e33a6048-44ae-4076-8296-6962677ff79b","sequence":{"long":4390},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e020410f-9c72-405d-a9c0-186dbf9eb14b","sequence":{"long":4391},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40556d2d-5d39-4949-b695-7fdeb33aee46","sequence":{"long":4392},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"181d1484-9256-43e7-82c8-757e1867edc0","sequence":{"long":4393},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55a07695-4184-4ea7-aba3-3fd78457532b","sequence":{"long":4394},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"077cbe80-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1388,"parentSubject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582983204405852},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3e0e5c0-47f3-4c38-a3ec-91464a69c342","sequence":{"long":4395},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1388","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1388","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c0a920d-49fc-488d-92b0-7d15a6698ff5","sequence":{"long":4396},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"74643ad1-37f8-b356-b837-c78bb6b345d2","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aafd3e87-ce05-4772-a4a2-24309d7c6720","sequence":{"long":4397},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"74643ad1-37f8-b356-b837-c78bb6b345d2"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./signal_client"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582983204405852,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./signal_client a","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"455e82d4-231a-40a8-b98d-9b303982e5c7","sequence":{"long":4398},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04f9f9d1-b8f1-4021-acc7-ff3c4dad03d2","sequence":{"long":4399},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50f728c0-702b-4bef-95e9-adbcbee2be61","sequence":{"long":4400},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bcc2ca9-4836-4dcd-86dc-f945999e7741","sequence":{"long":4401},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd049d20-f620-427d-9056-286e73da00e3","sequence":{"long":4402},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ed63ed0-6016-4096-89cb-8d6d543fba92","sequence":{"long":4403},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5cb31ff-9328-4bed-874c-0a8bdb9aa069","sequence":{"long":4404},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfc73ba5-0f6f-40ac-a17d-1b5ae4a054f1","sequence":{"long":4405},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":{"string":"/usr/lib/libc++.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a200f2c-437f-4232-90c4-b508fc8edf9f","sequence":{"long":4406},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be0841c6-dfc2-4bc3-8057-ff208b3573c9","sequence":{"long":4407},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0497a5af-1b61-4337-a8d4-1880a6a99215","sequence":{"long":4408},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f0918f0-c7ac-4b22-be7a-35f3005851ea","sequence":{"long":4409},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d084413-c053-4b6a-a036-ae96046c20a0","sequence":{"long":4410},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df2b2b49-bcf6-45b6-8de1-a9b7808b29ba","sequence":{"long":4411},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f99d8d5c-db5e-46f2-a82f-50bdebe49b85","sequence":{"long":4412},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4154ffa3-3c90-48f1-b48d-51b49f18a2ce","sequence":{"long":4413},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"497fdece-1a5f-49dd-8611-99dd08130e4b","sequence":{"long":4414},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"deb948cc-74c2-4ecc-9e4a-ddb4cf40ef3f","sequence":{"long":4415},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":{"string":"/lib/libcxxrt.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c253d64-dd17-431a-9dc2-559c340bbd28","sequence":{"long":4416},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9398595f-38cb-4879-8dcd-58457103c52d","sequence":{"long":4417},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd95efde-3d40-4a31-8b88-353b74be3d7e","sequence":{"long":4418},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2081c162-6038-4dec-8297-0841cf01c8ed","sequence":{"long":4419},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2296638b-23be-42f4-b053-c5b1416e68d9","sequence":{"long":4420},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8dd8c544-9d42-4ddb-ab01-6bdb65cacd5e","sequence":{"long":4421},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d381641c-7de5-46c9-aedd-bd203cb5d2a3","sequence":{"long":4422},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d42c6e1-5df9-4048-8a93-962ffab039f0","sequence":{"long":4423},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e62fa215-b921-42b9-936b-af90b7e2abc9","sequence":{"long":4424},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18e4aef5-ab3b-41c5-becf-8b735ac46e43","sequence":{"long":4425},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":{"string":"/lib/libm.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9092c102-05b7-4ac8-80a2-f5cff62a9232","sequence":{"long":4426},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fa2c730-2f8f-413c-96f3-ebd4f30b77f6","sequence":{"long":4427},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef8019fe-17d4-4300-82eb-221db43681ab","sequence":{"long":4428},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"189daa6d-b592-42fc-9f7f-5edbf75d0a89","sequence":{"long":4429},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"073649eb-d756-4767-b41e-cd8f162ed31e","sequence":{"long":4430},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d8222d5-c715-4d49-a1b8-d42e9252b984","sequence":{"long":4431},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6788f252-590e-4b31-865f-f223a483455c","sequence":{"long":4432},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3acd2ec-d1c0-42a7-9e87-0ef08c4d085c","sequence":{"long":4433},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"918a779e-bef6-46f5-8c1f-2eb45380d2d4","sequence":{"long":4434},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c653d91-d9ab-4e3a-b6b8-72c7980f412a","sequence":{"long":4435},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":{"string":"/lib/libgcc_s.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8c5d45c-df99-40f7-ba9c-902c67a03125","sequence":{"long":4436},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36b9bef7-5e25-45eb-8ce3-ab0b2fcfeb59","sequence":{"long":4437},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54016dca-8b10-4a9f-bbb0-de431d77effc","sequence":{"long":4438},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3600384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0067aa12-c9fc-40aa-bbc6-c76c651a9162","sequence":{"long":4439},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3600384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce313255-99b1-4683-bb4c-16158f206dd0","sequence":{"long":4440},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3637248},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29ef4ef6-9333-4240-b80e-3ec148099764","sequence":{"long":4441},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3637248},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50b1972b-784e-4470-9534-c6fe7d3ed395","sequence":{"long":4442},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3690496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"792ecd53-0329-4df5-837a-b24db771dd46","sequence":{"long":4443},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3690496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbb6b812-85ba-4136-b45b-ad8a9e880f2d","sequence":{"long":4444},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ea3eba5-29c6-4b99-a698-41e27bd5adb6","sequence":{"long":4445},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed6b01e5-5997-4939-ae0c-1213fbea9e82","sequence":{"long":4446},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9d5e429-8dc4-4800-8dd3-12405c54b6f6","sequence":{"long":4447},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faf721b5-8ef5-451a-a7fe-0f755852c37b","sequence":{"long":4448},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3702784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e5f2fc4-00c0-43e5-977d-c7d8c9e5912d","sequence":{"long":4449},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3702784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a583210f-6388-4743-a7bd-679dbcd8b171","sequence":{"long":4450},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4218880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4e9f143-6a5c-4a0b-98a3-d2370e79dcfa","sequence":{"long":4451},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4218880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b35be51c-0cbc-48f7-b3c8-ed1a524c8f09","sequence":{"long":4452},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5550080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3ae1ade-440d-424f-ad72-7629a73eb328","sequence":{"long":4453},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5550080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96b6a99c-3f9a-4995-90d5-f29e221c4c8c","sequence":{"long":4454},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"576254ae-0ddb-4c2f-8963-0340883b1429","sequence":{"long":4455},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e7af23c-409f-4ede-917d-10e9f6573367","sequence":{"long":4456},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"509b1507-4bbd-48b4-a8c2-8922f7f35556","sequence":{"long":4457},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce9eced2-3dea-4ca2-bed9-5aa56bf84faa","sequence":{"long":4458},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca38ee82-5c1f-474e-bdd9-33d086fe29c7","sequence":{"long":4459},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"163f90a6-7ee1-4add-aea6-4d15d544b445","sequence":{"long":4460},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"14d38b49-9f5f-7855-9f9f-80594578129e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"597483d1-9a93-4550-9f6e-45c451e2bca3","sequence":{"long":4461},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbf9b697-062a-448d-b588-b4876fc5dfca","sequence":{"long":4462},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5127b3f-2b4a-4021-9dc0-30bd26f4447c","sequence":{"long":4463},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c2137ee-e0ab-4af6-9b4e-3d9604aaa4da","sequence":{"long":4464},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"894e79ec-ba3b-45c0-b560-fb4ef11b43ab","sequence":{"long":4465},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51a1f0e4-dc5a-4b86-8996-e6ea65156b49","sequence":{"long":4466},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"263679ff-634b-4d0e-8875-d42084748019","sequence":{"long":4467},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"312d6181-488a-4cc5-94ce-902183419e2c","sequence":{"long":4468},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8166e291-e5bc-4a64-8e55-0abf023d3b6d","sequence":{"long":4469},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca4662a4-2c0b-4cd1-aec5-fe22b8398de1","sequence":{"long":4470},"type":"EVENT_UNLINK","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_unlink"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5b4f2e7-56e0-4362-a752-cd994eaa9d98","sequence":{"long":4471},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84dc7139-2fdf-40b1-b017-d6edfa5db209","sequence":{"long":4472},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72581106-e11c-49af-93ff-0b506c6792fa","sequence":{"long":4473},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e2150a5-c2c2-4244-a9e8-9c33b8d1ee98","sequence":{"long":4474},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9d84989-8ac7-4575-a439-b8e7f28559a8","sequence":{"long":4475},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":792},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"528c19f8-629a-4561-b49e-8353f98d41f6","sequence":{"long":4476},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1143},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"077dfec4-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1389,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582983204405852},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec77beb3-67d6-416b-9dcb-897765f5243b","sequence":{"long":4477},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"077dfec4-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1389","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1389","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8de37bc1-2de2-47fd-941c-26b6b9a6f1d1","sequence":{"long":4478},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"077dfec4-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6fd2ab6-b8a9-42ee-b798-ec53c7cec4c0","sequence":{"long":4479},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983773878145,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":443044},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3451d108-d956-45ec-b674-a5cf61d5c4df","sequence":{"long":4480},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":443044},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36aa3fad-aa29-4fb7-9434-4d66595e9c2f","sequence":{"long":4482},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82201792-7cef-4ed8-9299-f948e17865ce","sequence":{"long":4481},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d21067d6-61e3-4d51-a818-b415e883ea70","sequence":{"long":4484},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3159f26-3fad-4848-9447-69215e0c8571","sequence":{"long":4483},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e8895be-6c25-45bf-965e-cc02f1a01fd7","sequence":{"long":4486},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd77184d-43cd-4a8a-ba19-fc9fab2961d6","sequence":{"long":4485},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df813928-afc9-494a-8867-cef88e65ed77","sequence":{"long":4488},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5a83437-361c-4ab5-8c28-4b06399df06c","sequence":{"long":4487},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8eba5a3-246b-437d-aba4-6b548b5b804c","sequence":{"long":4490},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad60fbb2-7ee5-4aca-9d5f-9e354237efd8","sequence":{"long":4489},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37e327ac-5e08-4558-be27-4df422105160","sequence":{"long":4492},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"baab4d44-1a88-4010-ba85-60185a2b7059","sequence":{"long":4491},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bbdd633-7379-40b1-8f5e-349e0628e43e","sequence":{"long":4494},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21754932-249a-4899-95e0-d4c328d00931","sequence":{"long":4493},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a29b4f1c-9013-4737-bd59-eea7f870eecb","sequence":{"long":4495},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79007723-af7d-4c83-ad4e-aed415178948","sequence":{"long":4496},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fac22dcf-318b-4ff9-aa44-88a0cf5e3648","sequence":{"long":4497},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b58183a-3c14-4a8a-b1ca-4e7af5affa69","sequence":{"long":4498},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4726},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af5ea431-4e1f-4dc0-8bd0-cc4863b79aca","sequence":{"long":4499},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4779},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9177f420-8b7a-4662-8ac8-73aa1b916eda","sequence":{"long":4500},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a30644d9-bcf6-47db-99aa-295e17b5443f","sequence":{"long":4501},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16ae95aa-ecdc-4dfd-8e92-a154f04ad97c","sequence":{"long":4502},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"636938b8-6f40-45a8-a815-d77b48d60185","sequence":{"long":4503},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4336},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78529670-dca6-4855-b233-1463f036ed53","sequence":{"long":4504},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4389},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37735491-9963-4dbe-a5c6-6358b648bbe0","sequence":{"long":4505},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5d10476-1f14-473b-9d62-b7304362afd3","sequence":{"long":4506},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e858ae4-e42e-4f85-a6fc-fd7b5f6df928","sequence":{"long":4507},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c6e34da-fe75-4bed-95cc-e94a7dc9773d","sequence":{"long":4508},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4695},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f166fa4-1ecd-4140-8ae3-289ff53a1e7f","sequence":{"long":4509},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4748},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92de325e-f8c7-4e0a-b434-97eb0b453cf2","sequence":{"long":4510},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18ba9ce2-7ee3-4a59-a5b4-1a979ef6db37","sequence":{"long":4511},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce9b23b3-41a6-4f13-9993-059b8f3ec6d9","sequence":{"long":4512},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8b59b29-5c63-48aa-977c-c06726d2a206","sequence":{"long":4513},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4486},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13494d96-8056-4d7e-9c27-0884dce5e32f","sequence":{"long":4514},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fa6a5d4-ce4f-4fc7-94d9-f61e79e63b06","sequence":{"long":4515},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64c622a2-a3e2-4e9f-a902-68a993e65181","sequence":{"long":4516},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcae576d-d4db-4d4d-a680-2f4e72316593","sequence":{"long":4517},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4550},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed417e31-a769-43c3-be24-b245eb93fd3f","sequence":{"long":4518},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdc45f1d-9f04-471e-8e25-972d850afb88","sequence":{"long":4519},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35e793bb-43c3-4621-a0b6-33ae181c6c29","sequence":{"long":4520},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0fd16e7-70aa-4e7f-8b83-bf408b6266c3","sequence":{"long":4521},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4252},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9bec456-ab12-46e5-bd38-3bd7d0943b18","sequence":{"long":4522},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f723af3a-a0db-4e08-9461-36be22704641","sequence":{"long":4523},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22153b54-93d8-4077-acd5-af6f6f3af687","sequence":{"long":4524},"type":"EVENT_SENDTO","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"526","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7906fa88-efdc-4c0e-88f5-8b0993a619f8","sequence":{"long":4525},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"526","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c351091-acbc-4fc5-b747-743e31fd199e","sequence":{"long":4526},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c77221d6-5d07-41d5-9c13-902aadada1cf","sequence":{"long":4527},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3daf2b6c-f279-481b-8eb0-fda5fefa1938","sequence":{"long":4528},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a5f563b-5753-429e-bf21-5c553a16d686","sequence":{"long":4529},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4539},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d6dcf8d-634f-4468-8fc2-eda5d9d2cef7","sequence":{"long":4530},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a126d4fd-ca40-48d6-8fff-e7423939865f","sequence":{"long":4531},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e733051d-1cb1-4d8f-aae6-1891c2452654","sequence":{"long":4532},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4603},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ecd81d5-ee3e-4cca-af05-63b8a1c58b62","sequence":{"long":4533},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984143894132,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89eb79f8-a6e2-45a5-bd0e-2ed140e4580b","sequence":{"long":4534},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984143894132,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a33edeb-6f1b-44c3-9dfd-e4c242224c32","sequence":{"long":4535},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984143894132,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4305},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d2e9e77-4bc4-4842-9a36-52ab7ea49c19","sequence":{"long":4536},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984154114648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aafd69de-b7cc-4d05-90d8-7c2969fef0cd","sequence":{"long":4537},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984154114648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e922c165-729e-4318-9188-8000ff191313","sequence":{"long":4538},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984154114648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"312c8bb4-13a5-4e9f-82a2-0b725ab56be4","sequence":{"long":4539},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984154114648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ad61a65-f35f-4147-b6fe-a4bc9b915565","sequence":{"long":4540},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984167461125,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdd83d48-cedd-465c-bd75-eec2b4168b96","sequence":{"long":4541},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984167461125,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb1bf9a9-71e0-406c-a02d-ccc62f67f8d3","sequence":{"long":4542},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"077dfec4-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"077dfec4-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ef33adb-ec36-4266-8352-99f2a0ac6002","sequence":{"long":4543},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9010f982-8d45-4932-91a9-a447a6e47e14","sequence":{"long":4544},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"081702f0-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1390,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582984214699854},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e62e143c-6365-4cde-a904-6eb1f114b90c","sequence":{"long":4545},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1390","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1390","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9b6ab15-ba1a-4ca5-9a95-3523d48b87f3","sequence":{"long":4546},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"648191b4-da2e-2357-aeda-9bcac723947b","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5f34069-cc60-47e0-b91e-fe7f97d7f476","sequence":{"long":4547},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582984214699854,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/stream.sh a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b22fab1-3a54-4311-9552-c19ea06ee866","sequence":{"long":4548},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fcd1ea1-5665-465c-8d0a-43a66b85d2a9","sequence":{"long":4549},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"451723f5-8f25-4c43-8feb-a7a1750ee028","sequence":{"long":4550},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97f626c0-7f5e-4d4d-a0ee-a0ecf3490ea4","sequence":{"long":4551},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20039e71-d058-4586-828f-aab6e0767559","sequence":{"long":4552},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d45c34f-7c77-4e13-88a6-c9a08410d75e","sequence":{"long":4553},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bbb8ebf-f127-4fb5-9351-f8415869dc6b","sequence":{"long":4554},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"513446ca-d986-4fe7-b5cd-ba4580a1d652","sequence":{"long":4555},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53658b34-31e4-4099-aa45-75c71c0c3449","sequence":{"long":4556},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f402a9f-1075-4043-bf74-d82258a37216","sequence":{"long":4557},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1472de80-600f-440e-b7d1-55e28a915c01","sequence":{"long":4558},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2178c676-3653-4db4-add1-c14307772ecb","sequence":{"long":4559},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1736968-8eaa-4fc4-870d-cd4aaacaf6c3","sequence":{"long":4560},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32d2b570-8cba-4c47-b889-0be25899227c","sequence":{"long":4561},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a01d298-4890-4b43-8dfc-0bf8e30ee95b","sequence":{"long":4562},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"713a5883-1430-4e9c-b8ae-8a29ee032310","sequence":{"long":4563},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65581ed8-cfbd-491c-b681-a86ec6098aaf","sequence":{"long":4564},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"087ba7d6-2495-4810-aefe-a517198d6c71","sequence":{"long":4565},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8aeb6875-a0fd-425d-bec7-4c6bbebcd195","sequence":{"long":4566},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bff1ae7b-abbf-4f10-a098-d44e2744c4ef","sequence":{"long":4567},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582984214699854,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/stream.sh a","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6a53db9-0adb-4cd5-b7b7-967adeccf3a0","sequence":{"long":4568},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a261a089-d705-4ab5-9ed3-b5fe309260b6","sequence":{"long":4569},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c9ef17c-d214-4106-a629-236c0e62016e","sequence":{"long":4570},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a357f384-91b1-4524-b928-f5d224b915c9","sequence":{"long":4571},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4aee8b1-45f4-43f8-96e9-7ae58703f5f5","sequence":{"long":4572},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"865eb102-15e4-4207-a752-84e9f3ff33b7","sequence":{"long":4573},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dccef86-ce01-48ad-b005-dc47adfa48ee","sequence":{"long":4574},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2647541b-5b5b-4ab0-867c-19191b4658aa","sequence":{"long":4575},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1419550-2b70-426d-8c92-1b3cfbbfa767","sequence":{"long":4576},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4926a6e2-9235-4662-8477-3a7a0978eedd","sequence":{"long":4577},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"075db4a8-1af2-4a9a-8783-1bd77ce6a3c8","sequence":{"long":4578},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"040b4584-c2a1-47f7-922c-7e95e5221851","sequence":{"long":4579},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67c79a14-3aae-4866-974f-ea5fdc551b53","sequence":{"long":4580},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23b03930-d603-497a-8281-8db9ced096d1","sequence":{"long":4581},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5caa6a3a-7481-4d7c-8040-c608b6b09576","sequence":{"long":4582},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4fd282b-304b-4ccb-a7b5-48bddf545d3c","sequence":{"long":4583},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c69a086-ea64-458d-aaa1-c8b5632e5e04","sequence":{"long":4584},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2bda8ff-4008-44c8-be0a-755e06e694d5","sequence":{"long":4585},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"339be7e6-d644-428a-810a-f600679b6337","sequence":{"long":4586},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3d65702-bd6a-4f29-ae61-9bab84ccb17e","sequence":{"long":4587},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abb8eb48-d6be-43c4-a8d3-843b4c5011fa","sequence":{"long":4588},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2588a9b-751b-4b6a-974d-d696de351ad4","sequence":{"long":4589},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1fb694b-7580-4daa-9578-7f672761f86e","sequence":{"long":4590},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f4a1076-8bb6-4f64-9691-6696a63b4704","sequence":{"long":4591},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"783f81d0-6f61-4478-8c77-a3e236cf15f8","sequence":{"long":4592},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5822e904-c554-49e0-bf6e-b857f0bf2eb4","sequence":{"long":4593},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8474337e-11eb-4682-a68b-68bc9a899be3","sequence":{"long":4594},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba3a64fc-232c-493f-8430-8080a4d85c21","sequence":{"long":4595},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de902bc1-d6a1-44bc-b658-42efa6f85e84","sequence":{"long":4596},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d150e2be-a0d3-454a-b2f2-9817c6d0a5c3","sequence":{"long":4597},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b60b300-996f-4a34-a620-b3dcda1b71fb","sequence":{"long":4598},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"517848ff-d6f6-42b3-b6f5-de5b85ff7d6f","sequence":{"long":4599},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d2884c4-aeb3-49b1-bec9-d55706188c57","sequence":{"long":4600},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9def841-37c0-4b58-95e6-a575e7eb9928","sequence":{"long":4601},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"073497b4-6852-4d00-8adc-d70185444543","sequence":{"long":4602},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7316d498-c422-4ddf-b7c9-bb199f77dd35","sequence":{"long":4603},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58de0c9d-1558-4129-a2cf-c3b53230e1ab","sequence":{"long":4604},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d48dc17a-6f5d-4dc8-bbb2-23ccfb680292","sequence":{"long":4605},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"867f3c77-d657-43ed-85f2-8f3ea40faab9","sequence":{"long":4606},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95c9248a-e477-42cb-b62f-8228bbbfe6fa","sequence":{"long":4607},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1731eeaf-27bd-4a2f-93dd-5d700e52d23a","sequence":{"long":4608},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"075d8992-601c-470d-bd52-744ddc9423a8","sequence":{"long":4609},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcd1ffe2-4d1b-4335-b4aa-4b44d9764996","sequence":{"long":4610},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bba61902-5620-44dc-b15c-089ff0ec4a27","sequence":{"long":4611},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9b7fd55-58da-4b08-9547-8b83531d3f2d","sequence":{"long":4612},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9367492-6e6f-4246-a4ff-02fc4604c2dc","sequence":{"long":4613},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0809425-263d-4adb-90d4-a4610db954ba","sequence":{"long":4614},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b840297-6b0c-4cfe-82e2-3f83334be56c","sequence":{"long":4615},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd31ba41-8ef7-4482-bb8e-bd52d608e1a9","sequence":{"long":4616},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fed15c3-24b3-4e14-bf5a-f60b64b89a8c","sequence":{"long":4617},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa55c72a-c673-4260-b058-e37e82678dd9","sequence":{"long":4618},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa50b9eb-459d-4a1b-84b6-ba27322de084","sequence":{"long":4619},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8eeb9ca-e269-4a03-b0e4-fe7aa2cb4025","sequence":{"long":4620},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31556315-9dd2-491b-8ebd-07f8cac32da4","sequence":{"long":4621},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac5bedc8-67cc-4376-9ae0-14aac7a36ba9","sequence":{"long":4622},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24d9d5b1-1958-40f0-9b36-268e43e1a61a","sequence":{"long":4623},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c27db24-5aa0-41a2-b26c-9e68fc204556","sequence":{"long":4624},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbc6aefd-1d15-4cf4-97b1-b8930a64fab1","sequence":{"long":4625},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f45d403a-ab4a-4631-b1c0-568f9be2bf56","sequence":{"long":4626},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f32cd56-64f2-42d2-8af4-c72cb6942f61","sequence":{"long":4627},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be663a75-7a0e-4346-8ff0-5fbb46e9c200","sequence":{"long":4628},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c7267da-7721-48fa-9e7b-e5af73b12371","sequence":{"long":4629},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77e61bef-f321-43a2-9a07-624a92b44fcc","sequence":{"long":4630},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":290},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e09354e-f771-456b-9d0e-b8b203f3e659","sequence":{"long":4631},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":256},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"0817de1c-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1391,"parentSubject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582984214699854},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"785fe45d-907e-4809-a37b-f76170bf9ec7","sequence":{"long":4632},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1391","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1391","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f215f2ec-d24b-4ada-b3e1-f0eba74bb32d","sequence":{"long":4633},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":34},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7fe94ed-b8ee-48c7-89e2-a705434b5dab","sequence":{"long":4634},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":274},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"0817e89b-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1392,"parentSubject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582984214699854},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3a4b58b-98f3-4a3c-b13d-bd7e56f086db","sequence":{"long":4635},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1392","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1392","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"830ec234-d0ee-49a1-bdc5-0c104bb18f79","sequence":{"long":4636},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1761f5cb-8264-426d-bda6-a5a1b47c7742","sequence":{"long":4637},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c6f9a3d-d3c6-4fc3-a436-29d04e0de0d2","sequence":{"long":4638},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"084ff960-1c43-4a7e-ad88-c41d962dad76","sequence":{"long":4639},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a01bffb-8f47-457f-b72e-0d0c192b94d4","sequence":{"long":4640},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582984214699854,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bf76c53-6c51-4e07-8aff-a58541ab44ad","sequence":{"long":4641},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"eeac9f12-b277-945c-b7b2-6dc48c944589","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f16aeaa-94b8-4cad-bcf1-878bc944386b","sequence":{"long":4642},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"eeac9f12-b277-945c-b7b2-6dc48c944589"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./stream_server"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582984214699854,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./stream_server a","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"560f066a-1cb0-4d5d-977a-d102527585d7","sequence":{"long":4643},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7eab2e9-c0d5-44c4-8707-8184d09d8698","sequence":{"long":4644},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f682c619-0bab-4651-b912-c0c37a451f87","sequence":{"long":4645},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c83fe8ab-3cd4-4e7f-8fc3-918daae8c199","sequence":{"long":4646},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3d8904f-5618-4dd8-afbd-3aa3f4180078","sequence":{"long":4647},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b415a784-7f9c-4488-808e-0eae5e691eaa","sequence":{"long":4648},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a20feac-8c42-49f2-9e69-d7cb344fad48","sequence":{"long":4649},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81a1715d-fdce-4f0a-9643-a83cd2e503c1","sequence":{"long":4650},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11d0decc-f0d0-4caf-9f65-72acf1ab37df","sequence":{"long":4651},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0481aa45-5c65-4f50-b87e-2b514458cf58","sequence":{"long":4652},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23c273ff-3187-4275-92a1-ab3ec258175f","sequence":{"long":4653},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"754be6ae-a1df-4643-8137-c41842d79dcb","sequence":{"long":4654},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b09823cf-3c29-401b-a912-6ea5a6031be6","sequence":{"long":4655},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc4ee191-112c-460f-b178-eb3dee0cb850","sequence":{"long":4656},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e095628-f954-4301-a905-5f6be00120fb","sequence":{"long":4657},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6a09517-c821-40c3-bb36-aa6745370de3","sequence":{"long":4658},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac03350a-df14-4ac5-a187-de58183d628c","sequence":{"long":4659},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a11bb00d-82ad-433c-acdb-f7e1120534fb","sequence":{"long":4660},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a97a26a5-53b5-4913-9ea8-96395a211b2d","sequence":{"long":4661},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8937cde-38af-4e72-a9b9-02d66c898ceb","sequence":{"long":4662},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984223939650,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"0818480c-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00b080c4-4e36-4329-9363-706958a02955","sequence":{"long":4663},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"0818480c-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984223939650,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"08184bd5-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d963186-274c-460c-a1b6-e1748eeb5a22","sequence":{"long":4664},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08184bd5-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984223939650,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d25e2f85-155d-47b8-a150-543875bd87ee","sequence":{"long":4665},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984818638204,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":460817},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5c48e73-98e6-4eeb-b7ce-845cfb1635dc","sequence":{"long":4666},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1390","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1afaa922-9fdd-4356-bcd1-5d428812f583","sequence":{"long":4667},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c53ce260-718f-4d58-b3d1-1a91e0a4482e","sequence":{"long":4668},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c0e6b44-2f45-43ab-8afe-164991d05de8","sequence":{"long":4669},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c81fbcb8-36fc-402e-95f4-74254b88aa06","sequence":{"long":4670},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19d39037-c695-4fc7-bd7a-7adc6aa031a5","sequence":{"long":4671},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fc9eb5e-5cbb-4b5f-8be9-c78435fda6fe","sequence":{"long":4672},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"08b29b3d-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1393,"parentSubject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582985234024146},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fbcdb4a-f2cc-4c8b-8cb8-b655137a69c7","sequence":{"long":4673},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1393","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1393","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bd51f1a-8403-4cbb-93af-8a200667530c","sequence":{"long":4674},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"acf88428-0c9e-7555-9e0c-dc6fa5750416","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f2bc4c3-3656-4735-8881-d690d11ffa53","sequence":{"long":4675},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"acf88428-0c9e-7555-9e0c-dc6fa5750416"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./stream_client"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582985234024146,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./stream_client","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c94e296a-7655-4b0f-88f5-c9135e46f09d","sequence":{"long":4676},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ea36112-10a4-4662-b678-f20ccb3df194","sequence":{"long":4677},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"543f6442-c699-4099-aa1f-6c9a5e52f4d4","sequence":{"long":4678},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be468330-5560-4334-a1b1-09360790074e","sequence":{"long":4679},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"060f8cc7-4aff-4c71-9057-6d3a5c40489d","sequence":{"long":4680},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1069290-e2c3-404e-8c56-45495da0bd84","sequence":{"long":4681},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67f91853-58eb-4ddb-a97a-eb729ae52658","sequence":{"long":4682},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9917da9d-3997-4162-a740-9870441aa5e4","sequence":{"long":4683},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbb8961d-209c-4fef-b9f4-a88bf25a1152","sequence":{"long":4684},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52704385-2438-4bda-85a3-4c3e543f3f8d","sequence":{"long":4685},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42145c42-0067-4be9-9c0e-c46f716ea4ec","sequence":{"long":4686},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48fcfc5d-c632-4f1e-a118-956e163eab4b","sequence":{"long":4687},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ac3da52-8f54-4c11-aef2-c5befadd8afa","sequence":{"long":4688},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0095ff24-8713-473a-bd6c-a7c839105826","sequence":{"long":4689},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a5d2a92-abae-43fc-afcf-a6820869bdfe","sequence":{"long":4690},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77036158-ed8b-4a05-b6f0-bebbba2d33f4","sequence":{"long":4691},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10ae03dc-e357-4c97-b098-9f1518b577fa","sequence":{"long":4692},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21d76ece-20c6-47d9-a6a8-45dd1518ca39","sequence":{"long":4693},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11da3cad-bd3e-4bd1-89b5-07007a7f9fa6","sequence":{"long":4694},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"08b3030d-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59f57b6f-3622-462d-8aff-77d4cb6ef1b6","sequence":{"long":4695},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b3030d-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"08b30734-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82e96609-5b10-40f9-9f6a-50260cbff189","sequence":{"long":4696},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b30734-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"08b30ad7-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"0.0.0.1"},"localPort":{"int":10508},"remoteAddress":{"string":"0.0.0.1"},"remotePort":{"int":3490},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"08184f2f-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"0.0.0.1"},"localPort":{"int":3490},"remoteAddress":{"string":"0.0.0.1"},"remotePort":{"int":10508},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"08b310af-467b-11e9-aeb9-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"0.0.0.1"},"localPort":{"int":3490},"remoteAddress":{"string":"0.0.0.1"},"remotePort":{"int":10508},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37f75320-780c-4cd1-b68d-891af8be2e37","sequence":{"long":4697},"type":"EVENT_CONNECT","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b30ad7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","address":"::1","port":"3490","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fe47280-43fa-4902-9d8d-8babb2133205","sequence":{"long":4698},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2161966-82e6-418c-8b94-689c33572499","sequence":{"long":4699},"type":"EVENT_ACCEPT","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08184f2f-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"08b310af-467b-11e9-aeb9-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_accept"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"4","ppid":"1390","address":"::1","port":"10508","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c258f36c-fe01-4198-ac4d-decab808f8a5","sequence":{"long":4700},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":32},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"08b3272d-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1394,"parentSubject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582985234024146},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5663ae0d-0041-4c90-bb90-9cc841496e5a","sequence":{"long":4701},"type":"EVENT_FORK","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b3272d-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1394","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1394","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afbbedc5-b61b-4dec-ab6e-0c08c2eff8bf","sequence":{"long":4702},"type":"EVENT_SENDTO","threadId":{"int":100150},"subject":{"UUID":"08b3272d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b310af-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1391","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c4c4637-532b-4274-9305-4fbab6afca05","sequence":{"long":4703},"type":"EVENT_WRITE","threadId":{"int":100150},"subject":{"UUID":"08b3272d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1391","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31f6565a-a3c6-4979-9a41-0428fce86a24","sequence":{"long":4704},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"08b3272d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b310af-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1391","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ce656c6-d307-47cd-b7b0-c568d7712843","sequence":{"long":4705},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985823904780,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":465801},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec49bde7-e61f-4e1c-9b72-1b04cf2a3691","sequence":{"long":4706},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":465801},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a219ad1-c90b-47b8-9a3a-703fe5ad898b","sequence":{"long":4708},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59936985-35c0-4700-b346-fd89f383845b","sequence":{"long":4707},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b89f5b4a-2330-4daa-8541-175006428575","sequence":{"long":4710},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76b854cc-c6d0-4284-aec6-30b212530949","sequence":{"long":4709},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"562c4694-aee5-4453-a3a1-67cc75dc1628","sequence":{"long":4712},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb6caf16-4e8f-4131-ade3-ef6bcc80ae8b","sequence":{"long":4711},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23232cb8-74f0-4cbb-8ebe-c9358b5b846e","sequence":{"long":4714},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef5cee73-e24a-4c33-bb26-7e0dc9e85864","sequence":{"long":4713},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2932ccd9-a6d9-4983-94a2-918c9bfe5519","sequence":{"long":4716},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b603cb6-4299-4150-afcc-cb6a315fb41d","sequence":{"long":4715},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eabfc9d9-96c3-48b6-b098-97b81470138e","sequence":{"long":4718},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3536075-d767-470d-8c4a-c3ae66d730d1","sequence":{"long":4717},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71525217-c3b8-49b4-b9e1-531af682e9f5","sequence":{"long":4719},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9f82b84-249e-42d9-be42-bf110b0574a0","sequence":{"long":4720},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9a8a4d9-9aee-4920-8070-34e9b59dad94","sequence":{"long":4721},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31c3a6e6-26bd-4f64-b83c-6429e016cb04","sequence":{"long":4722},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4117},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb13ae1a-9b8d-4bfa-b140-77871f7f516f","sequence":{"long":4723},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4170},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ce5e0f8-6fe3-4a7b-b69a-5f96cd544f7c","sequence":{"long":4724},"type":"EVENT_WRITE","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"018b598c-4baf-4011-b774-840f743ff665","sequence":{"long":4725},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c39a6c4-5a1a-4a2b-b21e-66986141de1b","sequence":{"long":4726},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"650b4ba3-19e5-4cfb-bf9d-f9afaf37f365","sequence":{"long":4727},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4697},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17d03ab9-3868-4154-ac31-9048e6c8d00e","sequence":{"long":4728},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4750},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c86510ae-b5a8-4ea8-94be-8509a0df46ae","sequence":{"long":4729},"type":"EVENT_WRITE","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1f55aa3-1a7e-466e-a47c-e739d7ba7420","sequence":{"long":4730},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfac58eb-796b-4d99-94b4-1bc80975d139","sequence":{"long":4731},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"032a650b-2a2c-4749-83be-8ce9a77ec9f6","sequence":{"long":4732},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4050},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf7cc649-1340-45cc-abac-905010325f6d","sequence":{"long":4733},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4103},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef5d38d3-0985-4a6a-bf34-93c1a253b902","sequence":{"long":4734},"type":"EVENT_WRITE","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"754b2b34-e1f2-4219-bd6e-85b5cb747b60","sequence":{"long":4735},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dde1e12a-8948-460f-bdef-b5bc5dd218a3","sequence":{"long":4736},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21429d92-6cba-427f-8f7e-18d3741239ae","sequence":{"long":4737},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4893},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22f46133-7bc0-4149-9bad-9cc4644764c0","sequence":{"long":4738},"type":"EVENT_WRITE","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"646b9772-1b6d-4228-8eb2-e3c0a73a3ec0","sequence":{"long":4739},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96f7ab48-8bdf-40ab-a992-69ce3308ed4d","sequence":{"long":4740},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8824a983-e86b-49d4-a36f-ba87ae57ccf4","sequence":{"long":4741},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4980},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"838c040c-ee1b-49d8-b58f-98fa9dc839d2","sequence":{"long":4742},"type":"EVENT_WRITE","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62117f30-43af-4289-8468-06e032ace1d2","sequence":{"long":4743},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e83896b-8c7b-4100-8714-859577880f30","sequence":{"long":4744},"type":"EVENT_SENDTO","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"531","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c5bd39c-e6af-472a-a2eb-b58b1eb5ec1a","sequence":{"long":4745},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"531","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fffea39-4e4b-4fa4-b0a7-d78cb53f5a96","sequence":{"long":4746},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8186c72-adbd-4ab2-946f-3816d6713386","sequence":{"long":4747},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f9bfdc3-2000-4940-a715-9334d533f565","sequence":{"long":4748},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1624756-f194-4bcd-b163-d1ae7af860fa","sequence":{"long":4749},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4946},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ba08558-9459-48dc-b8f5-6d97b2a46391","sequence":{"long":4750},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb9e161f-78a4-4e10-bcdd-238722084132","sequence":{"long":4751},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b5004c2-b17c-4bae-a0f1-9431633ec192","sequence":{"long":4752},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5033},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4586ca0-1e8b-41c4-89bf-831dded3294d","sequence":{"long":4753},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986143882190,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88446f1d-7264-48ab-acf6-1285d2b4839c","sequence":{"long":4754},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986143882190,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08208ba6-4ce2-43f5-8649-6c848f3f2881","sequence":{"long":4755},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986154353840,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96d36740-3624-4746-bd48-152c6d89829c","sequence":{"long":4756},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986154353840,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1aef4d6b-0a27-45bb-ae91-bc8e360b7886","sequence":{"long":4757},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986164762457,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d34b118d-6ba0-4a19-b541-ab6dc005a33b","sequence":{"long":4758},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986164762457,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"08b37bd8-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1395,"parentSubject":null,"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39fa62d8-14a9-4c1d-9c5c-8ead42873528","sequence":{"long":4759},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"08b37bd8-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b37bd8-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91664fc1-8910-4a4f-bcd1-d48e923d5878","sequence":{"long":4760},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3de5f22c-c92e-4b75-950e-3159ff3ff48f","sequence":{"long":4761},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"094c9feb-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1396,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582986244400733},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0423ed37-6ea7-4366-a2a4-838cdbe7add5","sequence":{"long":4762},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1396","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1396","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4282d4a-77d0-4028-8b9e-834f5f74512c","sequence":{"long":4763},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c9e441c0-7c31-1a56-b17c-3f9a061af725","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73a0741b-98ff-4d61-8e05-ab4f18ccbc07","sequence":{"long":4764},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"c9e441c0-7c31-1a56-b17c-3f9a061af725"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./with_wget"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582986244400733,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./with_wget ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1ef53e8-7fd1-4418-af26-9b4297d4d6a4","sequence":{"long":4765},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd7108bd-f6eb-4470-b144-4c0fcec0b6c3","sequence":{"long":4766},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"915d9062-6d08-4173-abc3-4457ac2efea1","sequence":{"long":4767},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"509a6952-916e-4e43-9822-5268a22a028f","sequence":{"long":4768},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d4ba078-aa2f-4a30-89f6-af36bcc57710","sequence":{"long":4769},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f89574d4-224d-4ccf-a1ed-9564363207cd","sequence":{"long":4770},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72f64848-bb21-40ba-80cc-3071337a7ae6","sequence":{"long":4771},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0313f47d-2c5b-4ca7-b194-b08c81393077","sequence":{"long":4772},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"683ef95e-44a0-4faf-90a8-b463fd290bb2","sequence":{"long":4773},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09dcf19c-e723-4fb2-a190-466edf0c0729","sequence":{"long":4774},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2466f2e-e207-455e-8fbc-e55c5eb8a46f","sequence":{"long":4775},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1184cd49-669e-449e-8003-4b102269e5bb","sequence":{"long":4776},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76dd52ea-b715-49c0-a450-7ea2fbd7b2b0","sequence":{"long":4777},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9253d66c-9b2b-4e8b-8184-992ce2d2b79f","sequence":{"long":4778},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"252332a7-1ca7-4f03-b9f9-8de17962b37d","sequence":{"long":4779},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"179633c4-a60b-485d-9cb7-85e19745d73f","sequence":{"long":4780},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af8305af-ef7b-450c-b85d-cfebdb1b6d4c","sequence":{"long":4781},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dbbc9d1-a6cd-4585-9446-022e3a21c284","sequence":{"long":4782},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"487b9ada-b3d0-47fe-8ccf-144a2e8bf1ea","sequence":{"long":4783},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"094cee03-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1397,"parentSubject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582986244400733},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b162bcdc-9b3c-4aaf-8dd1-5690aac01c87","sequence":{"long":4784},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_vfork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1397","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1397","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"f3f7eadf-5a79-ba55-b95a-881315bae424","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e49ce093-51e6-4638-bc2f-809329b5fc10","sequence":{"long":4785},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"f3f7eadf-5a79-ba55-b95a-881315bae424"},"predicateObjectPath":{"string":"/bin/sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582986244400733,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sh -c wget http://www.google.com/index.html","ppid":"1396","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f0e1ed9-1396-4497-bf99-09c364fb12da","sequence":{"long":4786},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9301fb10-8769-4a36-b24f-ac21034b8a26","sequence":{"long":4787},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e77cb41-9a41-48b9-a793-f3385d64266b","sequence":{"long":4788},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f92c1e6-a27e-4a94-851f-13d3c8559b26","sequence":{"long":4789},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdcb2d5c-57a9-4b81-ac87-48d1b35c0e7a","sequence":{"long":4790},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61d08442-27e8-4d43-b429-dfa594357af1","sequence":{"long":4791},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e6b7385-acd3-492a-be9a-3f28566b1721","sequence":{"long":4792},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"152a8717-716f-265c-af71-11d7ac26ac9f","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7105745-ffb9-48ba-bf0a-511c360424d7","sequence":{"long":4793},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":{"string":"/lib/libedit.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4366ea25-187d-4a36-88cc-fd309b78a70a","sequence":{"long":4794},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c965f8b9-26fd-43ad-b71f-fc5fc81d2d18","sequence":{"long":4795},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d97c4444-c2d5-4477-9b01-142c673b5853","sequence":{"long":4796},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7fc009d-57ac-4310-b559-a6f984c71b20","sequence":{"long":4797},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc264e2e-5596-40dd-b3ed-bc8d36cc4156","sequence":{"long":4798},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a801083-8405-4d4e-b2db-b4dc3c09e340","sequence":{"long":4799},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1671752-e200-4b0e-8eb1-2dc528d1e0d5","sequence":{"long":4800},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e6d529b-c714-4754-8500-798fd8de11c9","sequence":{"long":4801},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1669702-5948-4b9b-869c-650bcd41a2a0","sequence":{"long":4802},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12f8b410-c505-4fba-8f2a-9e1098f7fb32","sequence":{"long":4803},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5200d531-1297-451d-8b52-bf3420bc62c0","sequence":{"long":4804},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a20e299d-398a-4027-bd07-b1d0d1eb8a53","sequence":{"long":4805},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d71ae9f-e6d2-401f-aedc-fad4059cf848","sequence":{"long":4806},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2818048},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d7249f0-68b9-4990-996e-fb9dbd4f415a","sequence":{"long":4807},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2818048},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46c5c0cc-9fd7-4808-a51b-58088f884876","sequence":{"long":4808},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3334144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4ed9400-dd3b-4e5f-b14e-70d53ff5031f","sequence":{"long":4809},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3334144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b36fedca-1526-4842-b7d2-5b03fbbfc31e","sequence":{"long":4810},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4665344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2220348a-5e9b-4e24-b528-78ebd39979a2","sequence":{"long":4811},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4665344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b3c2538-dc68-4df3-b71a-55cfbec540d3","sequence":{"long":4812},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19713a2b-9af6-495b-9d50-ab35678cd709","sequence":{"long":4813},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":{"string":"/lib/libncursesw.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e13875c-461a-41a4-9a54-da2fc7669d21","sequence":{"long":4814},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f117790-51ad-4a70-8c7b-002ac846c36a","sequence":{"long":4815},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2be7d259-c356-44d6-a1ca-3f8392375ce3","sequence":{"long":4816},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6983680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f03e5698-ce4d-4642-ae09-b3dc0c049bb2","sequence":{"long":4817},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6983680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9785843f-e461-4dfd-93a7-6dc6603f2bee","sequence":{"long":4818},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87f1d1c3-d5a9-47b3-9c63-f4fb846337a4","sequence":{"long":4819},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f9b6b93-d359-42aa-a1f3-3e61fb53d7aa","sequence":{"long":4820},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7356416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58c997e6-740d-4581-9897-c30aac46a81a","sequence":{"long":4821},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7356416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efb287be-fd0d-4010-8ade-d6c6f306a8e6","sequence":{"long":4822},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad413899-624d-4c3e-8b53-b8f807452ceb","sequence":{"long":4823},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76475561-729b-4431-a980-9db9246e2bd3","sequence":{"long":4824},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc80e954-aeca-40b1-8540-b156e9d36d34","sequence":{"long":4825},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7d61f41-6376-4db4-8141-a4e639129f40","sequence":{"long":4826},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7a74c37-35ad-471b-a27b-b895066dd429","sequence":{"long":4827},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32afa409-dc49-4b62-8617-4cf8af75ca81","sequence":{"long":4828},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad25e970-2a3b-47b2-9212-f74173aa6997","sequence":{"long":4829},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09221d41-ed13-4ba2-8cb4-6e493f80af4d","sequence":{"long":4830},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":725},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3dfe175-b5be-4f5f-8be6-6a6fdcf93130","sequence":{"long":4831},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1866},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"094d72a7-467b-11e9-aeb9-080027fc76ba","type":"SUBJECT_PROCESS","cid":1398,"parentSubject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552582986244400733},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee20020e-5729-4f92-874e-f3b1d161b323","sequence":{"long":4832},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1398","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1398","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85d8e4ce-ed56-47f3-acc3-cf3e48ab56a2","sequence":{"long":4833},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd01c0b4-81bd-4261-9ac3-1305b5e60ec2","sequence":{"long":4834},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582986244400733,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2980e8fe-96fd-4c7d-88af-c346de2aa0a8","sequence":{"long":4835},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5945a7f9-40f9-4d48-8361-aca1a9ad35a2","sequence":{"long":4836},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"360eb8dc-f2fc-4075-bcd6-76e494985d47","sequence":{"long":4837},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f281351-2703-4af4-a0a2-9418b3b3c312","sequence":{"long":4838},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cf95d3d-d5e7-48cd-9249-196048a449c2","sequence":{"long":4839},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f82d69ea-86f1-4e86-bb64-58484dd0a49f","sequence":{"long":4840},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a69fdfc0-377d-4ba1-94c1-5d379d064864","sequence":{"long":4841},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa308712-f1b3-476d-9288-9c10f2c00385","sequence":{"long":4842},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d5c6501-468f-451a-aa37-f7ee5c19a714","sequence":{"long":4843},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b90e29b-379d-43bd-b495-ccdee648bda1","sequence":{"long":4844},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75b38469-6bc2-4957-960d-f72c4d3be3bf","sequence":{"long":4845},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f53cafcc-d865-4ea1-9f91-7346b6512ade","sequence":{"long":4846},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"965adeca-01b9-4acb-bf85-cd178edecf7b","sequence":{"long":4847},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b225a67-f501-4e0f-b890-a38ed22bcfc9","sequence":{"long":4848},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"187ae9ca-2f9d-443e-b9f1-dc5bb9c1dfba","sequence":{"long":4849},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987074157366,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":479100},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3c06bde-93f2-4f4e-91f5-655d8c7cdb0d","sequence":{"long":4850},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfe821f1-d5c1-478c-96bf-722497beeaec","sequence":{"long":4851},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":18},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6e70e68-4ef4-4447-b17f-a2d7eb6a9067","sequence":{"long":4852},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b4de301-c9eb-4860-ac9b-679a7818f62e","sequence":{"long":4853},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7357bcc-23ab-4260-aff9-f51a2edc0ac1","sequence":{"long":4854},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63ade88e-f6fe-4704-972a-c950ce9cce5f","sequence":{"long":4855},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29b48f24-a0aa-4f0d-bcf2-50cf2633940c","sequence":{"long":4856},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2bf0fce-71be-4072-af5c-000937df982d","sequence":{"long":4857},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":50},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d1ac761-a748-49a3-a560-b47f3f3f8dab","sequence":{"long":4858},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988115532463,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":480275},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0435ba0f-01b0-4897-8483-1e5f4e982ee2","sequence":{"long":4859},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":480275},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ea687f9-ccb7-44fa-ad35-c318b5c93371","sequence":{"long":4861},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a8c629e-e3bb-4922-8192-2fbac45721e0","sequence":{"long":4860},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c19bec6-60a6-45e0-a5ef-c2bd4dceccb1","sequence":{"long":4863},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0adc461-2382-4d19-9ace-c0e2b05a3402","sequence":{"long":4862},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca5d8577-9d74-4d04-b706-7361674666c5","sequence":{"long":4865},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88300ea7-baac-45fe-9811-70f9740dbc8e","sequence":{"long":4864},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fac49dd-43b0-4e05-b35c-aa60b3d23cda","sequence":{"long":4867},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4f31f0f-374a-4140-a1b0-227bbdb1e956","sequence":{"long":4866},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"828c606f-04b9-480e-a145-839aafb83efd","sequence":{"long":4869},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf6b752f-b558-4b0f-9935-369376a3092a","sequence":{"long":4868},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31d9d72a-e6dd-4ff0-8b1a-f7e3f1a99909","sequence":{"long":4870},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e2ff146-2795-4c5c-8ecb-424677f3334a","sequence":{"long":4871},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a5cd769-1ac0-48d7-847a-cacb2846acb9","sequence":{"long":4872},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1395f74f-8c00-4a06-98e7-f5cadf9bf43d","sequence":{"long":4873},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4071},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e066d3f-cd95-423c-a5de-078b09b63d4a","sequence":{"long":4874},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4124},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0c0d2ea-a358-4fc9-8de3-018fbaa5d44d","sequence":{"long":4875},"type":"EVENT_WRITE","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07c29258-85ca-4fd3-9eac-7ac5338498e3","sequence":{"long":4876},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d46a6f4-27e1-44e9-a792-7860755e9e42","sequence":{"long":4877},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e77c3cce-89aa-4671-9584-18eb661bdddc","sequence":{"long":4878},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4807},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"465910a7-2d5b-40a7-982f-f2edb110d348","sequence":{"long":4879},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4860},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1491a590-fbd4-4107-989c-86a1c30de074","sequence":{"long":4880},"type":"EVENT_WRITE","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49a5ef55-540d-44d1-b72e-99cdd348cbb4","sequence":{"long":4881},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1f85ea9-0b7e-4220-87d7-f9aa8f7a0cd4","sequence":{"long":4882},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d90daf98-0b31-4b3f-a92c-5dcdb1546e4c","sequence":{"long":4883},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4409},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"892eb9e0-ac98-45a7-b4d0-1655cf9f611e","sequence":{"long":4884},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4462},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3cecece-aaec-472a-ac5b-249c3635ebe4","sequence":{"long":4885},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9745728-68c1-40de-9326-d77f0cdf0bc6","sequence":{"long":4886},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90d899c5-6e73-4c9f-a8d5-c415d2451301","sequence":{"long":4887},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e17f0d1-a960-4fa1-a795-35b7f445e734","sequence":{"long":4888},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c9631d4-24b2-48c0-8be2-02ed5ec94ad0","sequence":{"long":4889},"type":"EVENT_WRITE","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c152ba3a-16de-4b68-9d6e-796f42f19021","sequence":{"long":4890},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7fa13e4-90df-4f83-a49c-aaf15df99257","sequence":{"long":4891},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"448b2a4e-d237-46ed-8f6e-078b2a31ad1a","sequence":{"long":4892},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1171},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d5cfb16-2734-4bfd-865a-05fde7766196","sequence":{"long":4893},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1224},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed95349d-40c6-42da-afbd-917ffefb712b","sequence":{"long":4894},"type":"EVENT_WRITE","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8af819e4-4103-45db-9da7-af87d79d097f","sequence":{"long":4895},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d70d30f-3f5d-4f5b-b498-de9b7d932108","sequence":{"long":4896},"type":"EVENT_SENDTO","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"532","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8848a5f-da0d-4be2-9aab-a7045a09c55e","sequence":{"long":4897},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"532","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2da63a43-acd8-48fe-8f7f-285b278e3f45","sequence":{"long":4898},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a646aa11-689b-4569-9b24-ee5d93f7d299","sequence":{"long":4899},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988173936046,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07965933-946c-48cd-803c-1b5ce6abf229","sequence":{"long":4900},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988173936046,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"254408b8-2ebc-4357-b528-d8a6012a379e","sequence":{"long":4901},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988173936046,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54f1db43-2ec8-4627-9f62-15b8a39081b0","sequence":{"long":4902},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988173936046,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0848d152-54d8-4641-b675-95af4df37c95","sequence":{"long":4903},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28d2985f-0d95-4701-bc8c-2cf77b407e4f","sequence":{"long":4904},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"533","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3d0a7c7-86ae-4472-87b5-83e5e4f591a8","sequence":{"long":4905},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"534","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba39e762-e9a1-476f-8914-f76af5c422dc","sequence":{"long":4906},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"535","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7820a271-da29-4145-930d-6928cf99acd4","sequence":{"long":4907},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"536","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"384f2bae-7011-4000-9fdc-183c9b37bf1d","sequence":{"long":4908},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"533","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec86dcb4-867d-4a87-a25c-744778880449","sequence":{"long":4909},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582989123868619,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":484527},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"493ec93f-826c-4ee0-8bf4-f8d51da5d112","sequence":{"long":4910},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":484527},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd28d5a1-2665-490f-a88e-44b9ebe88955","sequence":{"long":4912},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdcaa25d-7e1b-40b5-9b11-5c52c153b6c0","sequence":{"long":4911},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"225eadf4-f21b-432b-836d-a87662cc8865","sequence":{"long":4914},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e3dc5eb-8905-4456-b31e-9821f7842bf6","sequence":{"long":4913},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7a0f47b-1860-428c-98e4-ef0c1a8dfebd","sequence":{"long":4915},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51a7a53e-1dbd-47af-b127-b6ddee7f9fb7","sequence":{"long":4916},"type":"EVENT_READ","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0efa5621-9829-45c0-ac3b-108072e8965f","sequence":{"long":4917},"type":"EVENT_READ","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4ef4e66-eff5-42cf-88b3-d5feace571b0","sequence":{"long":4918},"type":"EVENT_READ","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4248},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f484445e-3f08-4122-8ccb-a050d26c0a8b","sequence":{"long":4919},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4301},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afa7b863-d654-4edc-8e23-77dec5d385ea","sequence":{"long":4920},"type":"EVENT_WRITE","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"313db3d3-c99c-4a01-ab9e-aca6b9d70a49","sequence":{"long":4921},"type":"EVENT_READ","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02c8d9f0-c8a1-4090-9f15-ed3f267a4a6e","sequence":{"long":4922},"type":"EVENT_SENDTO","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"537","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bf7408d-fe8c-4f1c-8fb3-66e2d23f71c9","sequence":{"long":4923},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"537","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b599b7e0-02fd-4ce6-8135-2c44aa0ff9e2","sequence":{"long":4924},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d11c5b10-05c7-4e24-9e02-3e6bba27f89f","sequence":{"long":4925},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990133892948,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":486160},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db0366ef-0fa4-4ab2-8a39-9a10abab02d6","sequence":{"long":4926},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990133892948,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38796a58-83d3-4db2-a81f-c80705a5a413","sequence":{"long":4927},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990133892948,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d723791b-ea1d-44b6-b1a5-7e244691e01d","sequence":{"long":4928},"type":"EVENT_READ","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895034370801,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28a21e09-43be-4753-b86d-c90e85a01aad","sequence":{"long":4929},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"c1555c7c-d38e-9a58-8ed3-e319889a0469"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895034370801,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9aa5b9e-f019-412e-b083-4247a41bb16f","sequence":{"long":4930},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895034370801,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9900a4a8-e183-4b55-b411-3d1eb51cb60b","sequence":{"long":4931},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12ddde6f-4b05-4d49-a95d-42c86ba4bfb4","sequence":{"long":4932},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"351","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ada1cc3b-ff1f-4e74-b4ea-7741ce5f456e","sequence":{"long":4933},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"352","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6b20e10-9833-417f-81ae-1e9493cde0bb","sequence":{"long":4934},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"353","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"191176a0-fb63-420d-805b-e4b33af00112","sequence":{"long":4935},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"354","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8dfdc06b-7ca9-4bbf-8d5c-db4d63499375","sequence":{"long":4936},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"351","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2461453-84bb-4344-8311-c2623c3508d4","sequence":{"long":4937},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"352","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8a3bd08-b8bb-461f-a0de-7785e02bcf02","sequence":{"long":4938},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"353","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa00dd49-66c6-43d6-ad8f-2d3dd7f14b9d","sequence":{"long":4939},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895454372813,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"354","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"691cfac3-893c-43b1-88b1-526ed7e605fe","sequence":{"long":4940},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582895933902951,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1578},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f112b4ea-6a00-4c6a-8af2-826b088119fc","sequence":{"long":4941},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1578},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3188ebfe-f5ba-4ec1-8b6f-a976b00223a9","sequence":{"long":4943},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60eee966-1370-4f23-91b1-0e42e621f283","sequence":{"long":4942},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea2f50af-8ade-4cc8-9d72-d7fbb4d026fb","sequence":{"long":4945},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59bae7b8-b3cf-40f8-aab3-be5c6193340c","sequence":{"long":4944},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc2d8487-a87f-4831-8026-fba51622c0ee","sequence":{"long":4946},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6ba9b14-988b-4343-915e-6a6caff2dc89","sequence":{"long":4947},"type":"EVENT_READ","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a38f8c36-bfae-4a40-adad-a3e8d0c00d9b","sequence":{"long":4948},"type":"EVENT_READ","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c90e74af-df4e-4114-9111-c9e816dd0469","sequence":{"long":4949},"type":"EVENT_READ","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1574},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be02bdad-ee3d-46fc-b4c8-c94c43db383d","sequence":{"long":4950},"type":"EVENT_WRITE","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e577d4de-c075-46b4-a99b-9cb3cdc5d26a","sequence":{"long":4951},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1627},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"277896d0-f3e4-493f-955d-faac0c08c8c1","sequence":{"long":4952},"type":"EVENT_READ","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"487727fb-7c1d-4c30-9452-2b324cda15b7","sequence":{"long":4953},"type":"EVENT_SENDTO","threadId":{"int":100104},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"355","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eafdb3e5-b8e5-4882-8e51-81fb2965eda4","sequence":{"long":4954},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"355","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"014754fa-cb47-4b8f-b7e2-18456ec593bf","sequence":{"long":4955},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896124648272,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"550d0d4a-9ac1-4083-8af0-c0b1ce708d02","sequence":{"long":4956},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896134203227,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"642befce-e054-444e-8e2d-e9d20c376ed7","sequence":{"long":4957},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896134203227,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be0d5f8b-6b24-49ca-b124-0f58b8b55ac9","sequence":{"long":4958},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582896944139252,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":3413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"010166a8-1222-4dce-83b8-7e5a21cffad6","sequence":{"long":4959},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582897954065555,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":3775},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99d1e255-2a83-4539-8d8d-5e2f549ed751","sequence":{"long":4960},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":3775},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a160227-1924-4a5a-9f2a-fa7e65761b6a","sequence":{"long":4962},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db0c6f3b-ea98-4b97-a352-e3d7b7eb5242","sequence":{"long":4961},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f54b80d-38d1-46bd-b546-5c6884713369","sequence":{"long":4964},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e3e60cf-f4ea-4b4d-8d56-dc7527d9a580","sequence":{"long":4963},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ff5c5a3-b771-4b4f-a871-4b87ae52f667","sequence":{"long":4966},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4274dfbf-d727-438e-ba35-7686cccc9c60","sequence":{"long":4965},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33caac3c-4653-4546-92fc-bfa9ed9fe66d","sequence":{"long":4967},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85a5e248-57eb-4a94-aaa1-29c4069848bd","sequence":{"long":4968},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bacbc39f-da72-4c0e-a872-c96b12c3a328","sequence":{"long":4969},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5c2126c-2252-4570-9ced-a414f6bf1c6b","sequence":{"long":4970},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1831},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14c0799d-634a-4c56-b09d-7da4c9ffa70d","sequence":{"long":4971},"type":"EVENT_WRITE","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5c3f44c-e382-4673-966f-999437f319cb","sequence":{"long":4972},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1884},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e60bf25-d7a9-4dd0-8cf2-f507e6ec93d4","sequence":{"long":4973},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99d91858-b815-400a-a636-6855178041ed","sequence":{"long":4974},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9156b00b-d8b1-421e-8033-09fd684eb57c","sequence":{"long":4975},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ca20789-4f60-4693-905a-66af5a39a4cf","sequence":{"long":4976},"type":"EVENT_WRITE","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4530df16-677a-492b-a730-afe4eb39ff67","sequence":{"long":4977},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3db498ee-5312-43d2-a630-b072669eeab7","sequence":{"long":4978},"type":"EVENT_READ","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbc7fada-2bb2-4ec7-bca8-572b4d46e6d9","sequence":{"long":4979},"type":"EVENT_SENDTO","threadId":{"int":100105},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"356","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d71e7ea-f10e-493e-837c-c125e567a5c6","sequence":{"long":4980},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"356","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bfe0887-f870-45ff-9b40-448b441b2849","sequence":{"long":4981},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"519a5a5d-0780-4e26-b9cf-d50752e651e2","sequence":{"long":4982},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f664cba-2c58-4af1-9a07-e617c7464d4a","sequence":{"long":4983},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8f67003-f68c-4a11-bf2a-ee0ef556db8e","sequence":{"long":4984},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fdbb31c-fb59-4162-bb8c-e3246dc0b2e5","sequence":{"long":4985},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898124277080,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fcc8c93-905c-4660-aab1-d6e0e416e90e","sequence":{"long":4986},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e95cd8f3-44e1-434b-ba54-f0c4e637e271","sequence":{"long":4987},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"357","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ce6e2c7-0b35-49f9-9b7a-ac14486d3ea6","sequence":{"long":4988},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"358","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73d1e2d1-0e6f-45f8-adc9-2f7eb04f17bf","sequence":{"long":4989},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"359","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bd9ed58-e560-4eea-a235-923e79fabd54","sequence":{"long":4990},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"360","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9036b55-fdd3-4fe0-a47a-bb437e2c9e24","sequence":{"long":4991},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"357","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b1a7533-85e3-45a3-ac2a-9683c1f17a27","sequence":{"long":4992},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"358","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d58bf9b5-5ff1-41f8-8d48-d3c0deb579df","sequence":{"long":4993},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"359","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a216172-41d0-41a1-8175-1ca2cc946c16","sequence":{"long":4994},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898455045386,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"360","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f02cb1a-68fe-47d4-ba84-035cc719aa69","sequence":{"long":4995},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582898964841090,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":6972},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b37f890-7358-4f90-893f-4af27ae05232","sequence":{"long":4996},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582899973949516,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":7337},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e2bba73-d504-4cad-81be-7f25b4fcb3e6","sequence":{"long":4997},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":7337},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f71f2a1a-ac63-4d24-a323-61ed4c34e727","sequence":{"long":4999},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86b0b5fd-012a-49ea-9894-d328babc367c","sequence":{"long":4998},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6b79eca-85fc-45c6-8370-3352a12492a4","sequence":{"long":5001},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4efd165e-6318-471b-892a-4d30c487eaee","sequence":{"long":5000},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd453e61-8b5c-450c-9661-eba88ecee626","sequence":{"long":5003},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60006863-2d26-4e0c-811e-cf6bf57d4c54","sequence":{"long":5002},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62906a72-82ab-4ca1-ada0-f0a28f8dd851","sequence":{"long":5004},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c45ce21-7488-4386-ac5f-d2edd6b2a45c","sequence":{"long":5005},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"139bd4cb-da52-4ee0-8c84-59cc5567fe3b","sequence":{"long":5006},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"453bba87-097d-47f6-a13b-484aba9fff3b","sequence":{"long":5007},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3193},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"981573e6-a3f0-46db-a198-dc767c865386","sequence":{"long":5008},"type":"EVENT_WRITE","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cff73d37-6bec-4e78-ab5e-8fbd58b079c7","sequence":{"long":5009},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3246},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce2a2438-d736-41cf-8d5c-61c5498f6328","sequence":{"long":5010},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d8219a8-1b19-41de-97e9-f449a3cdfc03","sequence":{"long":5011},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"082c6e9d-f6fd-46a3-85b6-c6158b5f7291","sequence":{"long":5012},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e4c6dd6-b74a-44fc-810f-ab1285de1d02","sequence":{"long":5013},"type":"EVENT_WRITE","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf3137c9-8863-4369-8824-1aa66a1abda5","sequence":{"long":5014},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8333690-f382-4d92-a4dd-700806f7207c","sequence":{"long":5015},"type":"EVENT_READ","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3247b40-a8a9-4172-a517-483ff268712c","sequence":{"long":5016},"type":"EVENT_SENDTO","threadId":{"int":100106},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"361","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b64e8f4d-fde4-479b-829c-32a841babd3c","sequence":{"long":5017},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"ret_msgid":"361","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b44f923d-b069-45c6-9d54-fa030860b945","sequence":{"long":5018},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900123894482,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"252f8615-9962-4f65-a462-8f7319aa7481","sequence":{"long":5019},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900134758205,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62b1824d-9a8d-4ff8-9455-01f5bac1592e","sequence":{"long":5020},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900134758205,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cc30067-ea9c-4fc1-b624-b359906daf6a","sequence":{"long":5021},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900134758205,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ceddc76c-c9e4-4d7c-b2c2-8c372b093a51","sequence":{"long":5022},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900134758205,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"83aa0be6-c9ae-502c-83a7-2ea4fdfe8526","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"192.168.56.101"},"localPort":{"int":22},"remoteAddress":{"string":"192.168.56.1"},"remotePort":{"int":61633},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4aa9cf0e-7c5a-4cb3-95b3-a849e8674af8","sequence":{"long":5023},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100013},"subject":null,"predicateObject":{"UUID":"b54fd750-467a-11e9-ae92-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"83aa0be6-c9ae-502c-83a7-2ea4fdfe8526"},"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"650a882d-f1fc-586c-b9c4-499a7667e99d","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"192.168.56.101"},"localPort":{"int":22},"remoteAddress":{"string":"192.168.56.1"},"remotePort":{"int":61633},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b91ef82a-46f3-413b-8f2f-2e9b4deb4119","sequence":{"long":5024},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100013},"subject":null,"predicateObject":{"UUID":"d66412b7-467a-11e9-aea7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"650a882d-f1fc-586c-b9c4-499a7667e99d"},"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04bbd140-5380-4962-b8ea-cbd79b69a1bd","sequence":{"long":5025},"type":"EVENT_ACCEPT","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"b54fd750-467a-11e9-ae92-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"d66412b7-467a-11e9-aea7-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_accept"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"5","ppid":"1","address":"192.168.56.1","port":"61633","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"070b08db-4337-46cf-8d35-2d2e54efbf32","sequence":{"long":5026},"type":"EVENT_FCNTL","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"6","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2c119ad-07cf-4930-96fa-90242fac8219","sequence":{"long":5027},"type":"EVENT_FCNTL","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"772a44fb-7156-5e27-b653-732212cd589d","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"d6641bd1-467a-11e9-aea7-080027fc76ba"},"uuid2":{"UUID":"d6641bd1-467a-11e9-aea8-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"990e3f57-f656-4a94-8b49-c41733f3bf03","sequence":{"long":5028},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"772a44fb-7156-5e27-b653-732212cd589d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","ret_fd2":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"2d87dac1-5f0f-5cfb-8d06-3554db4401a5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"d6641de9-467a-11e9-aea8-080027fc76ba"},"uuid2":{"UUID":"d6641df6-467a-11e9-aea8-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f1ca30a-9d57-4dc8-8617-4bb30eda3067","sequence":{"long":5029},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"2d87dac1-5f0f-5cfb-8d06-3554db4401a5"},"predicateObjectPath":null,"predicateObject2":{"UUID":"d6641df6-467a-11e9-aea8-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_socketpair"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","ret_fd2":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c89c41eb-76f0-419e-a9d5-30147af04715","sequence":{"long":5030},"type":"EVENT_FORK","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1278","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1278","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e61c740-f9a0-42cd-bb59-c8f0e9d46eea","sequence":{"long":5031},"type":"EVENT_EXECUTE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"8bdbf70c-2584-fe5b-8425-ffe24bfe3202"},"predicateObjectPath":{"string":"/usr/sbin/sshd"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582900834145195,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/sbin/sshd -R","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1503b12c-581c-42fc-8651-ad5f986eae9b","sequence":{"long":5032},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc89c411-8a0e-47d2-99a9-c42516466521","sequence":{"long":5033},"type":"EVENT_CLOSE","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"d6641de9-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44d7086d-3220-42c3-8c81-004aa73abb8f","sequence":{"long":5034},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e681821-995e-4651-bcac-407841c55b45","sequence":{"long":5035},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49930813-d405-4e63-bbdc-0d7b6bc105f2","sequence":{"long":5036},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e14237ff-9464-4602-975c-56c4b87c96b1","sequence":{"long":5037},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2261139-2f9f-4aec-a73a-d459a8114dbb","sequence":{"long":5038},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":{"string":"/usr/lib/libpam.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c657736e-3557-4ab5-915d-33b58f64db6c","sequence":{"long":5039},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"597f6b07-8a38-4a8c-b67f-23277737c3a3","sequence":{"long":5040},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4cdcd114-c4ad-0851-adc4-bacbc10874a4"},"predicateObjectPath":{"string":"/usr/lib/libprivatessh.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63cde564-8183-4f18-8bc4-e4d7165ff795","sequence":{"long":5041},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4cdcd114-c4ad-0851-adc4-bacbc10874a4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66cebf5c-2f00-4f8b-8c7a-80ef253a8150","sequence":{"long":5042},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"068e7383-7f27-4583-9bc3-8c995d95e943","sequence":{"long":5043},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d490f534-4367-4619-8f79-79324fc44245","sequence":{"long":5044},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":{"string":"/usr/lib/libbsm.so.3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b693c08-27cd-427f-ac41-b320e3792e4e","sequence":{"long":5045},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"846fb91a-5e98-456e-87bc-a82b877ebb36","sequence":{"long":5046},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a1687d5a-9a65-045e-a59a-97b4fe04b3bf"},"predicateObjectPath":{"string":"/usr/lib/libblacklist.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f44e902-625c-4185-90dc-3869112cb2f9","sequence":{"long":5047},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a1687d5a-9a65-045e-a59a-97b4fe04b3bf"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"234d47dc-f579-428c-9830-7d6a7a084a91","sequence":{"long":5048},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"842f7c15-d3f8-6754-b8d3-e6077467aec3"},"predicateObjectPath":{"string":"/usr/lib/libgssapi_krb5.so.10"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"807083a3-8007-43b5-babe-2d9fe4c5770e","sequence":{"long":5049},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"842f7c15-d3f8-6754-b8d3-e6077467aec3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"415438ef-6db0-4fda-ab78-38cb871d6208","sequence":{"long":5050},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6f98459d-6d2f-ff5f-af6d-07280fffd3cb"},"predicateObjectPath":{"string":"/usr/lib/libgssapi.so.10"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6711f478-7ab2-4a92-aba0-5ae1feea9607","sequence":{"long":5051},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6f98459d-6d2f-ff5f-af6d-07280fffd3cb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a845694-0772-401e-8c42-019047169ec2","sequence":{"long":5052},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3a5de0c0-3468-0e56-a834-3339660e07e7"},"predicateObjectPath":{"string":"/usr/lib/libkrb5.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00cbfaaa-6352-4bf0-840f-f0d38353fcea","sequence":{"long":5053},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3a5de0c0-3468-0e56-a834-3339660e07e7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb71bba0-f3f9-4872-aec2-07c1fc052ef5","sequence":{"long":5054},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"002f9f80-1361-7654-a113-52b9a4768b0c"},"predicateObjectPath":{"string":"/usr/lib/libwrap.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d346201-8a55-4139-a59f-18297d5fd432","sequence":{"long":5055},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"002f9f80-1361-7654-a113-52b9a4768b0c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4167d62f-0479-4ea0-b5bd-17895fc8da7e","sequence":{"long":5056},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"65a0c3e1-4df2-5355-b24d-52809553d9e2"},"predicateObjectPath":{"string":"/lib/libcrypto.so.111"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b3c5eef-cbc6-44bf-b549-88fd36fdd776","sequence":{"long":5057},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"65a0c3e1-4df2-5355-b24d-52809553d9e2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dd4ab41-cfb0-4220-bc42-030bec50aad9","sequence":{"long":5058},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44184fdb-e1d0-4e11-b04c-43fded759afe","sequence":{"long":5059},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbc3c491-10e3-4529-ab1e-a7d6f8703923","sequence":{"long":5060},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"e6f4c6b4-7c40-ef56-807c-7da296efff27"},"predicateObjectPath":{"string":"/usr/lib/libprivateldns.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bf697fe-c8df-44bb-b248-168fcf9c2277","sequence":{"long":5061},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"e6f4c6b4-7c40-ef56-807c-7da296efff27"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7ec2683-fe51-47c9-aa65-613fc7afe657","sequence":{"long":5062},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":{"string":"/lib/libcrypt.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc492f1a-cd12-4dc5-8aa5-4478b4a07c51","sequence":{"long":5063},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f26ec5fe-cba3-4a60-b78a-710dc6cc3e2b","sequence":{"long":5064},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":{"string":"/lib/libz.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dd886be-1606-4b41-a99b-5398c29c52f0","sequence":{"long":5065},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a48bf103-f14b-4aab-afb6-82904b43a51d","sequence":{"long":5066},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":{"string":"/lib/libthr.so.3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cace9b99-5b9e-4eb7-81fc-38050a7db076","sequence":{"long":5067},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae74092c-66ed-4092-9df4-7c8cdee3aa6a","sequence":{"long":5068},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d1c77a04-4c52-7253-924c-62b47372e504"},"predicateObjectPath":{"string":"/usr/lib/libroken.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64c64dce-527c-41d5-aa89-a24d40d4060f","sequence":{"long":5069},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d1c77a04-4c52-7253-924c-62b47372e504"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"795dcb82-8699-430e-b1b4-4bc1aa3fcdf4","sequence":{"long":5070},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d"},"predicateObjectPath":{"string":"/usr/lib/libasn1.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c98a84c3-72ed-427b-a7e5-e8dd21b0bbef","sequence":{"long":5071},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"fd5be6a7-ea25-9c5f-a5ea-43dd4f9c595d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41f781f8-9f2a-46a0-885c-cf14be6a6e2b","sequence":{"long":5072},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f3b68756-6263-9455-a362-0034d594ada7"},"predicateObjectPath":{"string":"/usr/lib/libcom_err.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19232cbc-bfde-496d-905b-537250ebc094","sequence":{"long":5073},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f3b68756-6263-9455-a362-0034d594ada7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbe53a17-5e4a-4286-b1b1-9699eb3ac555","sequence":{"long":5074},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4a8576d1-4c86-4855-864c-eea21548af1c"},"predicateObjectPath":{"string":"/usr/lib/libhx509.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f75efe4f-3577-4d15-9dc3-295a4bd4d5e8","sequence":{"long":5075},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4a8576d1-4c86-4855-864c-eea21548af1c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69a52334-e7a7-44ca-a3b4-1d1b37afe1c4","sequence":{"long":5076},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5"},"predicateObjectPath":{"string":"/usr/lib/libwind.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"635cf3f9-71fc-4abb-8d52-bd15ff8e7a85","sequence":{"long":5077},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c0e66aa-abe3-c25a-a3ab-f89fbac2c4c5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99c01751-e1a4-4230-8ac2-c4f2404d4fe5","sequence":{"long":5078},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"99fc3185-2025-565b-a520-dc0cab56462c"},"predicateObjectPath":{"string":"/usr/lib/libheimbase.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45cc3eed-0531-41b0-9ec1-8c13c8af2536","sequence":{"long":5079},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"99fc3185-2025-565b-a520-dc0cab56462c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbc4c5aa-73c9-4846-bfa4-99b14e7ceada","sequence":{"long":5080},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"02a6c778-5410-d854-9054-fc1f24d8e4bd"},"predicateObjectPath":{"string":"/usr/lib/libprivateheimipcc.so.11"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdce84ef-b4ab-4b41-80c1-81783e89aaa7","sequence":{"long":5081},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"02a6c778-5410-d854-9054-fc1f24d8e4bd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3c86787-029e-459c-adfd-198116e1d4c7","sequence":{"long":5082},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"c0a44a27-28a6-d358-a628-06b288d3fd01"},"predicateObjectPath":{"string":"/usr/lib/libssl.so.111"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a09391a-a719-4247-9523-22b78688fc7d","sequence":{"long":5083},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"c0a44a27-28a6-d358-a628-06b288d3fd01"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70749e47-9145-41ff-a5b3-1f6bb6ada1d5","sequence":{"long":5084},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90db8010-fecd-41e1-b176-4940659671d2","sequence":{"long":5085},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7064f81e-0ada-41d7-a103-1b22f1953293","sequence":{"long":5086},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60090b11-f40b-47d2-b9dd-76f356ed209b","sequence":{"long":5087},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b64642e5-35e1-4545-817d-737edb75f9c0","sequence":{"long":5088},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"584d5e0f-3fef-4907-a527-a5deb6c0a571","sequence":{"long":5089},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e45a8d71-b77c-4ef2-8dbd-4560fca81522","sequence":{"long":5090},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"552ed4c9-b790-47a6-8f26-43b89fb37447","sequence":{"long":5091},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee7da232-dc16-4691-8219-c3f709b049d7","sequence":{"long":5092},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fde27e7-6bd2-45ae-9be3-3673929edc89","sequence":{"long":5093},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e85d62d4-eedf-453e-8790-563e27a4ebea","sequence":{"long":5094},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a28ac24c-1744-49bb-9e30-a38ed6632cf1","sequence":{"long":5095},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79c6dc7a-a5db-432c-ab90-0ff4023df9f0","sequence":{"long":5096},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e48cce6e-1695-4383-9d56-536db1175049","sequence":{"long":5097},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4877ed34-c510-4654-86d0-d75310747580","sequence":{"long":5098},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"960bcd7a-ecb6-4058-a6c8-40600329d50d","sequence":{"long":5099},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae30d423-6cdd-4871-b98d-f8c154e5b516","sequence":{"long":5100},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecffb99c-25a0-4c80-aac4-1116658961d5","sequence":{"long":5101},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4907b98-6ee2-416b-9cfd-048a93d5e19e","sequence":{"long":5102},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f220a904-2225-4912-9813-1ea08f297e35","sequence":{"long":5103},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e43cdc8e-888f-4eb6-b004-afe08fb46197","sequence":{"long":5104},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5e91ffa-7545-4f2b-9b31-d6c128b92ac3","sequence":{"long":5105},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a16403a-0a04-4736-8c85-b12f273898c4","sequence":{"long":5106},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900834145195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca1ba028-eb81-4b01-9169-673a86791b50","sequence":{"long":5107},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95d4d213-7734-4298-a5ba-ffe7bd206f4a","sequence":{"long":5108},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a42431fc-9813-4422-bd7a-12e97b07b2e2","sequence":{"long":5109},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf8fc089-bd66-4cd3-9e07-e1da7f477c30","sequence":{"long":5110},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82980bf9-ae76-4358-a86d-b0f1384c874f","sequence":{"long":5111},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"65a0c3e1-4df2-5355-b24d-52809553d9e2"},"predicateObjectPath":{"string":"/lib/libcrypto.so.111"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3d3a6fd-f960-45cd-94a1-e6822583e53c","sequence":{"long":5112},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"65a0c3e1-4df2-5355-b24d-52809553d9e2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"945aacff-857c-49ba-9a79-1572921182dc","sequence":{"long":5113},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"8a2ac349-5bae-1a5c-ae5b-70678c1aee0c"},"predicateObjectPath":{"string":"/etc/ssl/openssl.cnf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81379d3a-3af1-4237-a7e5-ecf5f00a544d","sequence":{"long":5114},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"8a2ac349-5bae-1a5c-ae5b-70678c1aee0c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4d3dbf4-2fcf-41ea-9182-9a7e814cce60","sequence":{"long":5115},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d665e1f3-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6c401c4-d0bd-432b-b367-a123198d4a67","sequence":{"long":5116},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d665e5a7-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8972cb11-83ec-4256-b98e-cd4d6dcf2f8c","sequence":{"long":5117},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb6773a8-f6af-4332-8f05-2e72d0c9e7b4","sequence":{"long":5118},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70a4f25e-ff15-4d70-9b42-0891262c28d1","sequence":{"long":5119},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81ba705b-acc3-4649-be1c-9a1ded04f9bb","sequence":{"long":5120},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5f11958-83a1-4fe9-bbca-afe583954d93","sequence":{"long":5121},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15d1e8d0-f0dd-483a-844e-625e87ed47fe","sequence":{"long":5122},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85fc1c9d-7338-42a8-9882-3e555b2ea8a2","sequence":{"long":5123},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79d7d223-6951-4660-9309-a084646bd1ed","sequence":{"long":5124},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54f780b8-c5c7-48fd-8b19-fb3b43b58a74","sequence":{"long":5125},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5f2b415-6d97-42f8-aed8-705a08ab675c","sequence":{"long":5126},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"580c1571-801a-4ef1-bcbb-0e949a1e7a36","sequence":{"long":5127},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b42ad0ab-df8a-4b4a-9952-8e1610e5388f","sequence":{"long":5128},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fabf20d2-6789-4156-87c6-e738989275c9","sequence":{"long":5129},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c8822f7-64d2-8f57-9264-2ff0a78fab74"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_rsa_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e923655-e6d8-449b-baa6-fdd6c8d3fbf8","sequence":{"long":5130},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c8822f7-64d2-8f57-9264-2ff0a78fab74"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33f08d90-04dc-4003-bec2-af5a036c6b4e","sequence":{"long":5131},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c8822f7-64d2-8f57-9264-2ff0a78fab74"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_rsa_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5364f4a6-13f6-405a-9229-303855dc634e","sequence":{"long":5132},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6c8822f7-64d2-8f57-9264-2ff0a78fab74"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35e8ed19-8bde-445c-8e1f-d85a960e7f33","sequence":{"long":5133},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d85dbf3f-8873-2550-b388-fc6420252c7c"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_rsa_key.pub"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76807b6b-0d4c-4a5c-b984-be792e69855b","sequence":{"long":5134},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d85dbf3f-8873-2550-b388-fc6420252c7c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a533a777-9826-49ae-bb5b-33b04fa5c8eb","sequence":{"long":5135},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2e02cb3d-0826-5359-a608-18eeb9531fcb"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ecdsa_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"741aa272-d6c4-4332-9d63-cc92281be575","sequence":{"long":5136},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2e02cb3d-0826-5359-a608-18eeb9531fcb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcf8b9c8-338d-40ac-a95a-a6137c0aa7ee","sequence":{"long":5137},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2e02cb3d-0826-5359-a608-18eeb9531fcb"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ecdsa_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c9d8178-5cf2-4afe-84ff-a8df33aeb81b","sequence":{"long":5138},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2e02cb3d-0826-5359-a608-18eeb9531fcb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18fd53f6-6193-4b06-aa77-f0f1185eadfc","sequence":{"long":5139},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3efd70ec-8129-a85e-a981-1a934ea8ee3c"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ecdsa_key.pub"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d57d9ed5-793c-42e0-b45d-4983621978d2","sequence":{"long":5140},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3efd70ec-8129-a85e-a981-1a934ea8ee3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c10a02bb-2ad4-4eba-80b7-12203f19f6d8","sequence":{"long":5141},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"9a762a17-c5f5-3250-b5c5-e86a20328528"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ed25519_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aae51e0a-eb85-4e2e-9c4c-1b6238f9154e","sequence":{"long":5142},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"9a762a17-c5f5-3250-b5c5-e86a20328528"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"154f5be8-9db2-41f7-a8f7-175ccca43482","sequence":{"long":5143},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"9a762a17-c5f5-3250-b5c5-e86a20328528"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ed25519_key"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45ca9a50-644b-4a35-b803-6d785c9a2aa1","sequence":{"long":5144},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"9a762a17-c5f5-3250-b5c5-e86a20328528"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbde0c47-18f4-4d5f-9a08-48ed87259a1a","sequence":{"long":5145},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6eb7ebeb-1f96-1e57-961f-e755571e202c"},"predicateObjectPath":{"string":"/etc/ssh/ssh_host_ed25519_key.pub"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3109ba02-e199-4f43-803f-7e1ac70b5cb1","sequence":{"long":5146},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"6eb7ebeb-1f96-1e57-961f-e755571e202c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"befcae04-3ff4-4153-b87d-e88aaed3f605","sequence":{"long":5147},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c3f5128-6a2c-4de2-9bbb-f1742d085305","sequence":{"long":5148},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"63","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6e42acb-b5aa-4f6d-b68e-d01fecc3ba3f","sequence":{"long":5149},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"79047e1d-240e-be52-8e24-bdde62be883d"},"predicateObject2Path":{"string":"/"},"timestampNanos":1552582900843933382,"names":{"array":["aue_chdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"518ca04f-2d95-4624-9261-bae928363722","sequence":{"long":5150},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6641df6-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"164bb806-b5ca-4947-9072-a5e6a9b82d24","sequence":{"long":5151},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f94823e-7427-4167-a52c-7ed527943c8e","sequence":{"long":5152},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cba8876-e760-4efd-bb4f-43e08c56bd8e","sequence":{"long":5153},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"048558e9-c739-44f7-828e-27e5a6283738","sequence":{"long":5154},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d1ba9e7-0c2f-49fd-b8a0-d4fb6ecfad03","sequence":{"long":5155},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"03614f72-3bf3-3753-b33b-4946a3373b97"},"predicateObjectPath":{"string":"/etc/resolv.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c65c333-2941-4ca8-aa37-93df343812d0","sequence":{"long":5156},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"03614f72-3bf3-3753-b33b-4946a3373b97"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efbf0497-8130-48fd-8c59-b931f851c9c4","sequence":{"long":5157},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"35657c19-0d44-6554-840d-56131465bb07"},"predicateObjectPath":{"string":"/etc/gss/mech"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbd4c0b6-34ee-48ad-92d6-1399d0808863","sequence":{"long":5158},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"842f7c15-d3f8-6754-b8d3-e6077467aec3"},"predicateObjectPath":{"string":"/usr/lib/libgssapi_krb5.so.10"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"6","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb36830e-f88c-4001-a178-f8e232763d44","sequence":{"long":5159},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"842f7c15-d3f8-6754-b8d3-e6077467aec3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b581c91-aabf-4d5c-a61a-7274783956e2","sequence":{"long":5160},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"16c3ea07-48df-ba58-9f48-087fd8bab643"},"predicateObjectPath":{"string":"/usr/lib/libgssapi_spnego.so.10"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"6","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b85a3903-8164-4fd2-84fe-b11f63f3fb42","sequence":{"long":5161},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"16c3ea07-48df-ba58-9f48-087fd8bab643"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a61585c4-c85e-494e-b9df-cb20f1e6acf9","sequence":{"long":5162},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac7f4592-d880-4aa3-bad0-ce831aca4499","sequence":{"long":5163},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"35657c19-0d44-6554-840d-56131465bb07"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582900843933382,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56c5a4a4-745a-4113-ad15-674682a2a026","sequence":{"long":5164},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901014716984,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":26345},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eea83471-110d-4f8f-9e25-072ff81c26ea","sequence":{"long":5165},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2b9241c-de80-4c77-8093-fe6309641665","sequence":{"long":5166},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7721720d-86a0-4dd5-9126-b2dda56e5455","sequence":{"long":5167},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13e87133-a426-44bc-8ed1-84c5ba26cccf","sequence":{"long":5168},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6f13a9d-2ee5-4d30-b102-fd49c4f82f25","sequence":{"long":5169},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa513da0-7280-4214-8d48-5b3e38831553","sequence":{"long":5170},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1ffe396-53d9-4940-93fb-ec5e0527170e","sequence":{"long":5171},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bae20c1b-fd16-41a3-b1b7-8e4f36290083","sequence":{"long":5172},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2603c55b-819d-4714-b4f9-f203844c863d","sequence":{"long":5173},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04cfb548-cd26-4503-aa26-9e91fe3657d0","sequence":{"long":5174},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8844946d-731b-4766-9e53-bd80e049c738","sequence":{"long":5175},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85c54fe1-0f20-4e96-8e67-c5a649b7f64a","sequence":{"long":5176},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61e73d58-2ef0-4dc2-a8dc-0808f706f9dd","sequence":{"long":5177},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"e1d2cd21-6a99-d55c-996a-4ae8bcd556d9"},"predicateObjectPath":{"string":"/etc/pam.d/sshd"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd5464f0-4c4a-4e7d-bd89-39bcbed5923a","sequence":{"long":5178},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":{"string":"/usr/lib/pam_opie.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02f6a5c9-d63d-4b68-9903-8f3d66894eb8","sequence":{"long":5179},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"067eae8e-12bb-475c-9e89-d84adce1b72b","sequence":{"long":5180},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7b30063-0534-4230-9007-a733bb85e654","sequence":{"long":5181},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":{"string":"/usr/lib/libopie.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b087b30-66be-4127-9074-73363387fa49","sequence":{"long":5182},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c8d59ed-ed5e-4404-b804-e4f45b32cd25","sequence":{"long":5183},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":{"string":"/lib/libmd.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17e103ec-a3c9-4cfa-ba0a-63a5c0186630","sequence":{"long":5184},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe89cfe0-0c02-4f84-a8e8-f088f2b2ea1b","sequence":{"long":5185},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b815019a-6fab-4275-92dc-7815a64322e3","sequence":{"long":5186},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee528125-a249-489b-8531-df5e9115fd58","sequence":{"long":5187},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"489abb51-29f4-4520-8104-01dedcdaccf2","sequence":{"long":5188},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3146256-4339-4250-a9d4-146b656aed93","sequence":{"long":5189},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":{"string":"/usr/lib/pam_opieaccess.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4b3bcd9-6eb7-4e5e-885c-52f4e4ec36c0","sequence":{"long":5190},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07091833-32d4-4676-ad99-028b48d31c67","sequence":{"long":5191},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92f10b60-a66e-4aa5-90c6-8038c3544801","sequence":{"long":5192},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65c29f6d-a9f9-4e5c-8138-d51cec3b03bc","sequence":{"long":5193},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77d81ea6-1435-4cd7-a390-7d4b6a067bc6","sequence":{"long":5194},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14934671-ac8c-45c4-bf75-cd9e95b8a126","sequence":{"long":5195},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"665cd15f-8fb6-44df-ac26-326d5a908ce6","sequence":{"long":5196},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1529aaa-35a7-48e7-809a-6633536fc1ec","sequence":{"long":5197},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":{"string":"/usr/lib/libypclnt.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ad8cf0a-983c-402a-a046-79fa634900d7","sequence":{"long":5198},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8203c8f-e28c-4d8e-84f0-3fc1b5c15605","sequence":{"long":5199},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9839126-ebd4-4846-b000-35bef167b75f","sequence":{"long":5200},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abdb2f33-7d22-44b5-8b84-ac9db837521e","sequence":{"long":5201},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4b672cb-a74b-48ed-bafd-a6fa3c07dbc1","sequence":{"long":5202},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"abf6fcaf-21ca-5a51-8a21-2a1e615a33b7"},"predicateObjectPath":{"string":"/usr/lib/pam_nologin.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c5a37f6-2217-4229-842a-539906264fa7","sequence":{"long":5203},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c28b3c2-2ba9-4e32-a3ba-e925461c74d3","sequence":{"long":5204},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"abf6fcaf-21ca-5a51-8a21-2a1e615a33b7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adc0869a-d1d2-4d6f-8efc-65f69f84fef5","sequence":{"long":5205},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22e31907-5f9e-44ee-9abb-dd6a27aaab09","sequence":{"long":5206},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"abf6fcaf-21ca-5a51-8a21-2a1e615a33b7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98b9f4d5-c38f-454d-aafa-3eab1eaf283d","sequence":{"long":5207},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":{"string":"/usr/lib/pam_login_access.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d07a847e-e0f2-4d44-9b3b-411105350e48","sequence":{"long":5208},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"799bbab1-0337-4100-9bbd-8e8b81b71061","sequence":{"long":5209},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9384a2e-e75d-4624-a1b9-9f1d8ed7b5e4","sequence":{"long":5210},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e86a8164-8149-4350-93e0-908034866ee8","sequence":{"long":5211},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bc7685d-afc1-46d1-b889-87f5030fb30e","sequence":{"long":5212},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c763667c-a137-465e-b81f-80b5bddda5ad","sequence":{"long":5213},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e41d9776-4f48-4363-bcd2-b38bee15f6ca","sequence":{"long":5214},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"498b9423-8092-475e-a392-9242645b20df","sequence":{"long":5215},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4dcfea73-feef-474f-a222-b537e06631fc","sequence":{"long":5216},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d45d3a6f-cd9e-420e-a2aa-60cb547228c6","sequence":{"long":5217},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":{"string":"/usr/lib/pam_permit.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"473bdd09-1a62-4bae-9597-46826d392766","sequence":{"long":5218},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43ad64e7-fad0-461a-8d11-2022c9bfb6c0","sequence":{"long":5219},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbb8461b-7cc1-4623-96e8-132cb93dd63d","sequence":{"long":5220},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7355c828-477d-4598-a09b-59f15f2917ab","sequence":{"long":5221},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5a0d786-d71e-448e-bb68-3d73a5f83e73","sequence":{"long":5222},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad9c5f95-6020-4f53-be00-d2575acd5882","sequence":{"long":5223},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2d1fa87-8e8a-4694-a3e2-d1c5fa92ae06","sequence":{"long":5224},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7edfe190-9eb8-4306-aa93-8500803729d5","sequence":{"long":5225},"type":"EVENT_MPROTECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d33872b1-585e-4685-9210-fef922444233","sequence":{"long":5226},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af5fb96f-ea1b-49aa-852f-f6fcd74bc483","sequence":{"long":5227},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"e1d2cd21-6a99-d55c-996a-4ae8bcd556d9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"941e45a9-e245-4ab7-aba3-afddd84c68d8","sequence":{"long":5228},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e51e7406-47de-438f-ad55-66a179c5b635","sequence":{"long":5229},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56b75c57-aaac-4953-909e-004b820ad538","sequence":{"long":5230},"type":"EVENT_CONNECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68855be-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","address":"/var/run/logpriv","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bec995e-ff18-4206-8e59-831375674693","sequence":{"long":5231},"type":"EVENT_SENDTO","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68855be-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"365","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc7cca70-e30e-485c-b35b-03c109167d57","sequence":{"long":5232},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"365","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"173088e2-7c71-4a5a-8408-540b9e939298","sequence":{"long":5233},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aafb7a4a-d952-865d-92d9-3ff2ed86d364"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":72},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"16","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebff6215-3a7d-4f9c-aeb0-c04704bfcb04","sequence":{"long":5234},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68855be-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901063960835,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6519a6a1-b224-45d5-94b0-395af660b6d8","sequence":{"long":5235},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9be4d726-cb97-48af-8170-2aff7e95a2a6","sequence":{"long":5236},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4df606f9-948d-4dde-8319-3f79c958dc63","sequence":{"long":5237},"type":"EVENT_CONNECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d689a296-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","address":"/var/run/logpriv","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abbdd6b2-d786-4f81-be66-28744d0ff9c9","sequence":{"long":5238},"type":"EVENT_SENDTO","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d689a296-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"366","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce29e669-7872-44c2-94cb-9dccefb0332e","sequence":{"long":5239},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"366","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c710625e-4162-4f2a-9c3e-69b09b3a17ab","sequence":{"long":5240},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d689a296-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8252333d-4f30-48b5-a423-12e61201eb5c","sequence":{"long":5241},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e28d2c8-37d2-4c87-9f5a-528bc006dba9","sequence":{"long":5242},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4612ec8d-7c93-44fa-b815-33eef0d87ba5","sequence":{"long":5243},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b0f2144-9457-41f3-9391-26127735371a","sequence":{"long":5244},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"624134f5-3b53-4e9b-8430-c576e39aff73","sequence":{"long":5245},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_setgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_gid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67a853fd-2068-4bca-a726-7a5d91a9cd34","sequence":{"long":5246},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_setuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c83eaa1b-94a9-4eb1-9709-3e856699decb","sequence":{"long":5247},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5521acb5-cceb-47a4-9b69-2aa2a86a9513","sequence":{"long":5248},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"984a3f19-4ff0-4228-880d-399a86fde105","sequence":{"long":5249},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_setuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a5b28ac-8eb9-46a6-a661-2b120aadadf6","sequence":{"long":5250},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901074287644,"names":{"array":["aue_setgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_gid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0831bb21-023c-48df-ae53-0c5869a21b04","sequence":{"long":5251},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b278e3ed-7f5f-4679-9643-28f1c95e65dd","sequence":{"long":5252},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc269e13-259a-44da-b134-a6bdc5241ab3","sequence":{"long":5253},"type":"EVENT_CONNECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68b229c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","address":"/var/run/logpriv","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e7650cc-951f-4904-934d-8c69e67aadae","sequence":{"long":5254},"type":"EVENT_SENDTO","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68b229c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"367","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8502a8f6-c1da-4169-89d4-cbd83f62c07f","sequence":{"long":5255},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":96},"programPoint":null,"properties":{"map":{"ret_msgid":"367","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e336204b-1216-43ca-ab8d-5e05fbd3e88a","sequence":{"long":5256},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68b229c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"451d2f4d-85e5-5e41-8e4d-3f4658210a34","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"d68b2f7e-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"d68b2f86-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b092f531-7d7e-4702-82d8-cfe2e976dc14","sequence":{"long":5257},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"451d2f4d-85e5-5e41-8e4d-3f4658210a34"},"predicateObjectPath":null,"predicateObject2":{"UUID":"d68b2f86-467a-11e9-aea9-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_socketpair"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","ret_fd2":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6659f43-bc59-4a36-a89e-fd6846ce2dcc","sequence":{"long":5258},"type":"EVENT_FORK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1280","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1280","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f966a53c-07e3-4cea-9058-defd7614e5f4","sequence":{"long":5259},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":{"string":"/etc/opiekeys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d7b3545-4556-44cb-a8ee-2c56cf3d8d8a","sequence":{"long":5260},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":{"string":"/etc/opiekeys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"9","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e83e2e55-ea47-481d-a755-94048444dafe","sequence":{"long":5261},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e567e31d-bcf4-44d3-8ac8-1516d36cb1a5","sequence":{"long":5262},"type":"EVENT_LSEEK","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad637ac5-3558-439b-9b55-1142d4bd02fa","sequence":{"long":5263},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22828c96-c580-4101-831b-482cd4177b97","sequence":{"long":5264},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5ea088f-322f-4b14-a738-d39715b32c20","sequence":{"long":5265},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1ad008e-85a9-4009-93e9-e9d45dd51e14","sequence":{"long":5266},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6514b881-c4e0-480f-b248-b4356480b254","sequence":{"long":5267},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2592960e-a4e6-44b0-acfe-d7ef38ce222e","sequence":{"long":5268},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b2e7924-99ed-4d13-aa28-2a14a091f8c0","sequence":{"long":5269},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5efc946-7357-4cd4-be54-1ad1236dbcbc","sequence":{"long":5270},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffb85d32-ad88-4c56-a036-40a3ed1fe2dd","sequence":{"long":5271},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13bfb171-a4e5-4ecc-94eb-8ab38a15284f","sequence":{"long":5272},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a72c60d-eee4-4ce9-87c9-c789ba59c90d","sequence":{"long":5273},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c917b657-9a93-447b-882d-2d740ccefb63","sequence":{"long":5274},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":{"string":"/etc/opiekeys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a453ebf8-c541-476d-ab3d-8ce6f1b3d2e2","sequence":{"long":5275},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":{"string":"/etc/opiekeys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"9","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b975c1ce-4d18-4c8c-974e-8cca29f3b067","sequence":{"long":5276},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b47e486-fd62-48c3-b1bc-6c88b500af4e","sequence":{"long":5277},"type":"EVENT_LSEEK","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2b3e2f7-9246-4695-8472-d04f313ecab8","sequence":{"long":5278},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4f1803ab-96cc-bf5a-8c96-b2d71abf75ad"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7985a6a0-1aaf-428f-b1d8-5b0c1761ab40","sequence":{"long":5279},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0effc033-c25c-49ab-86a9-a6c24be2e865","sequence":{"long":5280},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1de2ed5-1c99-4bd5-895d-d524dc610337","sequence":{"long":5281},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce0e8f25-acaa-4a5f-b025-d46d12b45664","sequence":{"long":5282},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"674ec118-af7e-4c69-8e98-6d4b24b161ae","sequence":{"long":5283},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ab44c8c-e699-4ff2-a59f-98de93d4916e","sequence":{"long":5284},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5618bda-5674-451a-a434-8fd477f3c672","sequence":{"long":5285},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b754c0b4-7647-479f-b65a-8ae54ebf3b88","sequence":{"long":5286},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffbbd0cd-f1d1-40db-ab05-69e24b8bd545","sequence":{"long":5287},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a49afa8-32bd-474c-afa6-c1d3cc1fd253","sequence":{"long":5288},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fb96f43-b16c-423f-bb39-4d7391da1def","sequence":{"long":5289},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b76adfc8-0a23-4ea7-86c6-c02000d21b9c","sequence":{"long":5290},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901083905501,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4bb9326-c71f-4926-9301-0b7b2348e87c","sequence":{"long":5291},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f656c48-1fb1-44cd-a4fe-2883f9ff0dde","sequence":{"long":5292},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"368","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2951b805-3412-420c-9f1e-744053ad688f","sequence":{"long":5293},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"369","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1fefaa5-f236-4cc1-900a-eff03cb31ba4","sequence":{"long":5294},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"370","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bad5e3be-b101-4f6b-bca0-0fe6d7fa8cf9","sequence":{"long":5295},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"371","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e007ac2-09f8-46c6-a8d2-55dfeab34806","sequence":{"long":5296},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582901454371866,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"368","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ada3791-78b0-4af7-8129-87cc84e30d43","sequence":{"long":5297},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902044028797,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":40841},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3618b0f-0eb2-4b57-a231-258f59a43643","sequence":{"long":5298},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":40841},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06565c12-4718-429c-b833-3e6a47c32800","sequence":{"long":5300},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a76eb2fe-950f-48f1-9007-9f784a714a7c","sequence":{"long":5299},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32b3816e-145f-4a08-8c8d-996f86949071","sequence":{"long":5302},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02c71587-8d90-4dc2-b9cd-94506526a69d","sequence":{"long":5301},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bc9e3bf-683c-4a28-99a0-be3a670a0e90","sequence":{"long":5304},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5308640-2145-4ab5-a83f-d02623f75e10","sequence":{"long":5303},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"627b0787-a4f0-4db6-9485-e9c6ef75eae2","sequence":{"long":5306},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca6b017a-c426-425b-a6c1-000be0f3f423","sequence":{"long":5305},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01f12126-ba74-45a5-a08b-4828adbd8bd9","sequence":{"long":5308},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4adda305-eb3d-45b7-af8c-d921baeb48b1","sequence":{"long":5307},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05036554-69f0-4389-be00-15d0c496e714","sequence":{"long":5310},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"023ae742-0874-4575-b218-44c63bcfe302","sequence":{"long":5309},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e784fe7c-4f98-4c50-a630-c3a62f08b444","sequence":{"long":5312},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5533f65a-3a1b-4b40-9dd4-6f209829a361","sequence":{"long":5311},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"510de450-aa0b-4335-a10a-f413a5c498a3","sequence":{"long":5314},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"207a955c-2dee-478d-a8c7-cdaaf78a0516","sequence":{"long":5313},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b76d3058-4611-4153-afd7-e07c8a777c3d","sequence":{"long":5315},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e81f1a2-4e3f-4ef9-a196-8f5c14f67dd2","sequence":{"long":5316},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df17b76d-2404-4721-90da-22396768d3a2","sequence":{"long":5317},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df31701e-876a-401c-beff-cb1855cffbef","sequence":{"long":5318},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4579},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2b6a645-197d-4512-9458-e00b66d51f19","sequence":{"long":5319},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75d60e3d-e59d-4fb8-a0e2-37b1d707c658","sequence":{"long":5320},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4632},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"525042ac-7857-4318-afeb-92b59d29eaaf","sequence":{"long":5321},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44d6acbd-3fbb-4569-a459-2b18b6c85f9a","sequence":{"long":5322},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"357e3e5e-63e1-4b6f-8e6b-81e2c8cffe9e","sequence":{"long":5323},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5740},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3063b2a-0d3e-4883-8939-75e28350f668","sequence":{"long":5324},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa3a8e90-acae-41a0-b41b-23dacaa2a8d9","sequence":{"long":5325},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5793},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"716904c7-aa99-4393-b3c3-7a728a6c1f66","sequence":{"long":5326},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b657b8b-d606-488c-9e86-5093ead5ab38","sequence":{"long":5327},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bab6b51-ab80-4807-a2e6-d8687ab2a63f","sequence":{"long":5328},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3817},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81570469-962b-440e-9e34-02361888e670","sequence":{"long":5329},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edc79b7d-289c-4db9-9296-e7be9f9ca797","sequence":{"long":5330},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3870},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d819bf46-e2c4-4072-8471-fd496215b1d9","sequence":{"long":5331},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7958635-c8cd-496d-918b-80d080777454","sequence":{"long":5332},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79c2bd00-92f6-4eec-8e96-4e39500912ab","sequence":{"long":5333},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4856},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ce5b0b1-c25e-4404-bb62-49754eb6da5d","sequence":{"long":5334},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd4c955b-b519-42a7-8dea-56b01cffebec","sequence":{"long":5335},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff3c1d8e-1b5f-4d75-b56f-01d67a485c45","sequence":{"long":5336},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e5df099-07f1-4e23-b402-354b2f9f7adf","sequence":{"long":5337},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5130},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94876511-ffcd-49c3-877d-10788c9aa6b9","sequence":{"long":5338},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77c99765-f746-4c3a-85d6-2a9a2feee25c","sequence":{"long":5339},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fcd7d2c-46f3-4060-84ce-5fb44af24cf6","sequence":{"long":5340},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20392f7b-8cc4-4b98-ba5d-3d9dce73d360","sequence":{"long":5341},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5263},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d957e051-9787-4495-8493-c68592edcb8e","sequence":{"long":5342},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"567ff57b-21c4-4a58-b997-d85cd929a12f","sequence":{"long":5343},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d6997d3-02f3-4a6c-80ca-6adf77447efb","sequence":{"long":5344},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b08c805-a6f1-4992-a24f-2d72caebd527","sequence":{"long":5345},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4091},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15b8fbc1-a6e4-4f47-a8a5-4e6fe0669d5b","sequence":{"long":5346},"type":"EVENT_WRITE","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfdfac7f-19ce-461f-8320-9e82fabcb150","sequence":{"long":5347},"type":"EVENT_READ","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb3039bb-c48c-4e62-a182-df290819f0cc","sequence":{"long":5348},"type":"EVENT_SENDTO","threadId":{"int":100108},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"372","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c729129-0c11-47af-82f5-77a3162cbeb5","sequence":{"long":5349},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"372","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8734b74-f2d8-4ffa-bb6a-c8b5ad47950f","sequence":{"long":5350},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902124793290,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df50dc9a-3ce9-4f39-bffc-62a88be4185f","sequence":{"long":5351},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902134213067,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35971c25-ac59-4ba6-a98b-5951ab86942d","sequence":{"long":5352},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902134213067,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d15472db-2d7b-4c99-931b-98c8ff4847c0","sequence":{"long":5353},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902134213067,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4909},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcb4e270-6f9f-4390-a66c-6deadaa6e3d9","sequence":{"long":5354},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902134213067,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea739a73-3cd4-412b-9d43-27c4a1e7efb1","sequence":{"long":5355},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902134213067,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d17ba7b-b66d-4dd3-8857-4c05496076f2","sequence":{"long":5356},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902143910395,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5183},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15a43cb5-5f7a-4cf1-b83e-15c91348ec45","sequence":{"long":5357},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902143910395,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41ca38c6-951c-4efb-9d6f-130a6afb71be","sequence":{"long":5358},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902143910395,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40975a75-627e-439b-a934-e80e90a08156","sequence":{"long":5359},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902143910395,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5316},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b37e2f1-5303-490a-bb23-fae53976bae2","sequence":{"long":5360},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902153929763,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ac82eb3-8781-4ce6-9525-221f5dd72320","sequence":{"long":5361},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902153929763,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"feeecc56-f7c5-4071-b7e6-bbc3666f5ef2","sequence":{"long":5362},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902153929763,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4144},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b09d59f7-f30f-452d-800b-30aeed8cc01a","sequence":{"long":5363},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902164461959,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"130e008f-ce4d-4dfb-93ef-f2bde71649e1","sequence":{"long":5364},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902164461959,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c199e49b-b0f9-4929-a1cc-41264922c980","sequence":{"long":5365},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902164461959,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbfded4f-fdb1-4d61-8142-71d858417199","sequence":{"long":5366},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902164461959,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fe168a4-efb4-4388-84a7-5475f0b60ac9","sequence":{"long":5367},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902173894545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"024d5e1d-ec7d-4d43-a5e7-56111cc4bfb1","sequence":{"long":5368},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582902173894545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcbce8fc-9f5b-476a-95c1-3b75418abe69","sequence":{"long":5369},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40a4612a-36d8-4953-ad60-3601b721c4a6","sequence":{"long":5370},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d32231d4-1311-4786-b668-e438cfa70ee7","sequence":{"long":5371},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4107663-6f92-4350-afc3-e07eb785a439","sequence":{"long":5372},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ff16598-f059-4424-a2db-ca324d2e6112","sequence":{"long":5373},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0efd2c7a-fa19-4aba-b14c-ef932edad08d","sequence":{"long":5374},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be0a29b3-2f9b-4b3e-85ff-890e0bf564d6","sequence":{"long":5375},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa3880cd-33a8-42d6-a9e0-a5eb70c3ac22","sequence":{"long":5376},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d6b7631-3209-4715-b80b-14ee322bb558","sequence":{"long":5377},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c99e378-10c4-4ea7-b337-29bf828468b1","sequence":{"long":5378},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e081c93-a3c6-446d-ae50-452e6e92d148","sequence":{"long":5379},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77958e7f-6726-4f48-8fd3-9a9fa2f8a354","sequence":{"long":5380},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51c9e00d-547c-4382-9818-2b957e620cd0","sequence":{"long":5381},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":{"string":"/etc/login.access"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5445b51-6cdc-4232-b0a4-a0c7e47fd18b","sequence":{"long":5382},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7b83861-5912-4418-8f5f-7232e69078ed","sequence":{"long":5383},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71d5bc09-0b9e-43ae-95b6-36a1e1202389","sequence":{"long":5384},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efa4947e-c3ec-4c4b-86b9-dbc32df7f189","sequence":{"long":5385},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfbb9536-e49d-49a4-8635-a45a3d6111c4","sequence":{"long":5386},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b27fc4d6-a18d-4398-8a99-b20d79a43fcd","sequence":{"long":5387},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2b679cc-35ab-43ab-9fef-0bc29adce2de","sequence":{"long":5388},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"702c4a02-26be-4b05-a6d3-b4c0b4fa55cc","sequence":{"long":5389},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c825870a-7d17-4d69-88f1-f280cdb870a3","sequence":{"long":5390},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18938d2d-0a4b-4d93-b268-6aba2c45cff0","sequence":{"long":5391},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58e8fd97-7b5e-4a4a-a92d-8c7c0367dd38","sequence":{"long":5392},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42e35a80-ad6d-4558-95d9-27c28e8f0f18","sequence":{"long":5393},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a1b4db3-5fb5-4b58-afe4-e8a5923d1fd4","sequence":{"long":5394},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01711c9d-df27-4d0e-8d40-77b1f8903d84","sequence":{"long":5395},"type":"EVENT_EXIT","threadId":{"int":100107},"subject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d68b38c5-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903024284413,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6ef5b6c-49b7-4462-ab65-eb784dbf087b","sequence":{"long":5396},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d68b2f7e-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0f477a3-e5f0-4417-a1ca-f21c72788a2d","sequence":{"long":5397},"type":"EVENT_EXIT","threadId":{"int":100102},"subject":{"UUID":"d6767a33-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d6767a33-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d602b750-3a3c-4a28-b4f2-108181c12e8c","sequence":{"long":5398},"type":"EVENT_CONNECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b3f08d-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","address":"/var/run/logpriv","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72665280-46f4-45fe-9434-10829ff23b61","sequence":{"long":5399},"type":"EVENT_SENDTO","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b3f08d-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":140},"programPoint":null,"properties":{"map":{"ret_msgid":"373","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f4508bc-a0cb-41bf-891c-ecae9204187e","sequence":{"long":5400},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b3f08d-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6117a3f-b7a1-4cb3-b5b2-0f716360e545","sequence":{"long":5401},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6766e84-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fddd434-95b4-45f7-a709-522706b1e3d4","sequence":{"long":5402},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d6641bd1-467a-11e9-aea8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ebbdd95-62ce-483c-a37f-8a07158f85a9","sequence":{"long":5403},"type":"EVENT_CLOSE","threadId":{"int":100089},"subject":{"UUID":"b54fadf6-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"d6641bd1-467a-11e9-aea7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba4f568d-02f7-4975-9c74-19ec280a7b2d","sequence":{"long":5404},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":140},"programPoint":null,"properties":{"map":{"ret_msgid":"373","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0a790a9-8c44-40b6-a674-9369004c8896","sequence":{"long":5405},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aafb7a4a-d952-865d-92d9-3ff2ed86d364"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":66},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"16","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4380b8fb-ed78-4ac8-ae0e-b6d2882f4976","sequence":{"long":5406},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aafb7a4a-d952-865d-92d9-3ff2ed86d364"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":116},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"16","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9c27ec9-4596-4cc3-8074-c079b555b4e4","sequence":{"long":5407},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2d2507ac-3e04-4a51-843e-b086314a525f"},"predicateObjectPath":{"string":"/etc/security/audit_user"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7838146-a601-4c90-9a9d-a469467c2cf4","sequence":{"long":5408},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":{"string":"/etc/security/audit_class"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b545f22-b8e9-4796-8a99-2b51b262e65d","sequence":{"long":5409},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f5706a1-2c35-480c-b126-4978e8db700e","sequence":{"long":5410},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"dc2bb48d-13bc-c451-bc13-145141c492f2"},"predicateObjectPath":{"string":"/etc/security/audit_control"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"7","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cf78c00-6f03-43bf-b7d5-2054474b3bdf","sequence":{"long":5411},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2d2507ac-3e04-4a51-843e-b086314a525f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":27},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d4e0d0f-4407-4407-91d4-6f84dabe30d3","sequence":{"long":5412},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"2d2507ac-3e04-4a51-843e-b086314a525f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b81c1e8d-d351-46fc-b44b-bcddc93b25bd","sequence":{"long":5413},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"dc2bb48d-13bc-c451-bc13-145141c492f2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7705a5ff-df20-44db-9686-b8d83df93451","sequence":{"long":5414},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"dc2bb48d-13bc-c451-bc13-145141c492f2"},"predicateObjectPath":{"string":"/etc/security/audit_control"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"7","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89a0dc1a-ec45-4256-b1b4-b7f7b277dfee","sequence":{"long":5415},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":{"string":"/etc/security/audit_event"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4891b4db-8a3b-4959-8b8a-fa47c071377a","sequence":{"long":5416},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0affe5c4-9a10-4522-afd0-a081143e23f9","sequence":{"long":5417},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d277aa52-7d43-4fb2-965a-f7cae3a60c97","sequence":{"long":5418},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":27878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5925bc7d-5bba-4e6f-84f0-d555c8b76549","sequence":{"long":5419},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"397d4aba-8ffb-4b9f-8301-edc1bbf88140","sequence":{"long":5420},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dad686e-07c6-4093-9478-8cb7b9d76e37","sequence":{"long":5421},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"a70156ef-4174-5e87-b9cc-89c6de9cf2c0","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"d7b494b0-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"d7b494bb-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f98f5e0-4f51-49fe-a8e3-9adf4bd3f4a6","sequence":{"long":5422},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"a70156ef-4174-5e87-b9cc-89c6de9cf2c0"},"predicateObjectPath":null,"predicateObject2":{"UUID":"d7b494bb-467a-11e9-aea9-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_socketpair"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","ret_fd2":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e7b7773-531e-4a6b-bff1-03b233957da2","sequence":{"long":5423},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e807de1f-9f3d-4824-b1c5-573507d01bea","sequence":{"long":5424},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01ea9811-c734-4a1f-9de6-ab082bb259cc","sequence":{"long":5425},"type":"EVENT_FORK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1281","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1281","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b37bf90-9143-44a0-9ed0-d74dad84ccac","sequence":{"long":5426},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_gid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f23282d8-7fd5-4c71-a02e-e95b390a8b79","sequence":{"long":5427},"type":"EVENT_OPEN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72c59650-eec5-401c-930a-30f9192579cb","sequence":{"long":5428},"type":"EVENT_LSEEK","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1982a3f-3ac9-46ec-83ef-a14f51ab5904","sequence":{"long":5429},"type":"EVENT_LSEEK","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbe13c97-6b4a-4972-b592-522004ff3ce0","sequence":{"long":5430},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bc7f9d4-cdbd-414a-bb67-78a74de7a6ce","sequence":{"long":5431},"type":"EVENT_LOGIN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setlogin"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","login":"user","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44acbf1a-6905-42d9-8f34-1cac5c61f8ab","sequence":{"long":5432},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ce3a877-ffa6-4d48-ab84-e756aeb38a54","sequence":{"long":5433},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de166871-cbaa-47ad-b4dd-111db9daef39","sequence":{"long":5434},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97df303d-ef7f-4aa6-91e6-2ddee928d4ba","sequence":{"long":5435},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae674b45-5f1b-4205-bc3c-0dd6807b1bd1","sequence":{"long":5436},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8e7a714-9f6c-4627-9161-ab72ada44e63","sequence":{"long":5437},"type":"EVENT_OPEN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":{"string":"/home/user/.login_conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31f7753a-5b49-45f8-8bd5-2952047a7dbd","sequence":{"long":5438},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41466a5c-22c1-4ea8-abb7-c0a94b701aa3","sequence":{"long":5439},"type":"EVENT_OPEN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd6ee7c2-3ffc-4f01-8f0e-e4599a68a880","sequence":{"long":5440},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33d43d1b-0757-49c7-a206-cef5f6e35f8b","sequence":{"long":5441},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e02711f-e8bd-4938-aa4b-3fbc426c31e3","sequence":{"long":5442},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50039c3c-8003-4afa-9f85-fb0117bfc7e2","sequence":{"long":5443},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea9ff002-4b07-4b7d-b95f-2770a7b6c1ef","sequence":{"long":5444},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"290155fc-698a-49b0-a1b9-a281502b15dd","sequence":{"long":5445},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2e0385d-13fa-4eeb-9cea-08597f7e3692","sequence":{"long":5446},"type":"EVENT_OPEN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":{"string":"/home/user/.login_conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d5f864d-33d1-4e2c-9427-5de71403bb56","sequence":{"long":5447},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e06acc6f-2d28-47f2-89d0-d4d5ab38fde7","sequence":{"long":5448},"type":"EVENT_OPEN","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"10","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e23e7aa2-aa12-4c06-9e2a-b026617e48ad","sequence":{"long":5449},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7963fb9b-7252-4073-bf3a-396d51086427","sequence":{"long":5450},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3e42369-f76b-4fdd-bb4d-8e22890d6b32","sequence":{"long":5451},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbef0018-a56b-40d2-b596-11a17d371318","sequence":{"long":5452},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"0f5606d4-74b0-5fe5-932d-ba013f81588c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"d7b500cd-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"d7b500ce-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5241cfad-31ab-45bb-8258-154158a84be4","sequence":{"long":5453},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"0f5606d4-74b0-5fe5-932d-ba013f81588c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"10","ret_fd2":"11","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6df03c1e-5594-42b4-b673-36284303885b","sequence":{"long":5454},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e7550e5-05b6-4577-9bb1-62dca9c9d485","sequence":{"long":5455},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9f737c1-814e-4b9b-9ce9-57645f117db2","sequence":{"long":5456},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"783db88c-13bf-40f6-8af9-37fd4a2cb9b4","sequence":{"long":5457},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b500cd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"930f73d2-adb5-4e33-881b-a38ec3ee8afa","sequence":{"long":5458},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce425c69-7620-4d2f-a36e-35bd6d53b289","sequence":{"long":5459},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b500ce-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e3bd642-f363-4825-9007-85813d2091a1","sequence":{"long":5460},"type":"EVENT_OTHER","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_posix_openpt"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"9","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"667ea282-c625-4dbb-b817-2f681f18cc6e","sequence":{"long":5461},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/pts/0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"11","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"11","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dae3c05-b407-4010-8ae6-b8d5b59c45ba","sequence":{"long":5462},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903033904685,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff9122fa-3540-4438-ac1f-be7f32fcb862","sequence":{"long":5463},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26b77053-efb3-410f-9d6f-c78228fdb168","sequence":{"long":5464},"type":"EVENT_MODIFY_FILE_ATTRIBUTES","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/pts/0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_chown"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"1003","arg_gid":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7107ed8e-490b-42ec-829e-1c649b085553","sequence":{"long":5465},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2be8e31f-a696-4bc3-bab2-c26db7f36db8","sequence":{"long":5466},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbe7ef33-ebb4-4d13-90b3-38da71e22872","sequence":{"long":5467},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f214fcf5-4ebf-42df-b718-86bb36e3950c","sequence":{"long":5468},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b36f406-a634-46bf-b9ba-8994cd0d53d4","sequence":{"long":5469},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"825e1c50-58e2-401a-8f70-c15e1bd5f285","sequence":{"long":5470},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52ec1223-7d6e-46da-bd71-ee92f5b3148b","sequence":{"long":5471},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76c6cf27-12f4-41e2-8a4e-13003c9bae1e","sequence":{"long":5472},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7fb5124-0684-4fdb-8a18-32b186169489","sequence":{"long":5473},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89cc3cf2-5200-4fe3-b4af-826e5815d588","sequence":{"long":5474},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9be91682-f0ac-4406-84f1-994f8e4066f5","sequence":{"long":5475},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":{"string":"/var/log/utx.lastlogin"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa4e26b2-7b06-4892-bc4b-91e1ff7c422e","sequence":{"long":5476},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"daddcfec-47d7-4dd7-8da1-218f168d3373","sequence":{"long":5477},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"966ca9b8-b520-47b4-b462-8cfecbaf2ff9","sequence":{"long":5478},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b22b8a0b-1eef-4e12-950a-2f5063574628","sequence":{"long":5479},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4292a7da-ccf6-449d-b543-2150fbdddb88","sequence":{"long":5480},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e019b37-fcba-4959-8563-d283985d2949","sequence":{"long":5481},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f67c4b5b-58be-4b6b-ac57-5d99a93c4b98","sequence":{"long":5482},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfb9a1f1-1908-4c06-9641-1820bfc96c9d","sequence":{"long":5483},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"715687a2-474a-4315-bf76-b5e35471f69a","sequence":{"long":5484},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66c7aac8-6e31-41fd-9ab0-eab9933f56b1","sequence":{"long":5485},"type":"EVENT_READ","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8221dc7-3ac6-4595-b2c0-e3c576b4ae89","sequence":{"long":5486},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d897d6ea-b517-4ee1-b8de-a4ba0c5661f3","sequence":{"long":5487},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"97a20679-3a19-5355-993a-5a7f9553d88e"},"predicateObjectPath":{"string":"/var/run/utx.active"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a33bf3b-2c70-467e-a5d6-d3a01585b3d9","sequence":{"long":5488},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"97a20679-3a19-5355-993a-5a7f9553d88e"},"predicateObjectPath":{"string":"/var/run/utx.active"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100222"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01a4"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"13","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"558df21a-6d34-4e87-a42e-f97d2684c73b","sequence":{"long":5489},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"16386","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41f937a7-2ce3-45a1-8dd1-209a230a8f02","sequence":{"long":5490},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"97a20679-3a19-5355-993a-5a7f9553d88e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"521bec45-9320-4ec1-a07c-c989148afa5d","sequence":{"long":5491},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":{"string":"/var/log/utx.lastlogin"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100222"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01a4"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"13","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1791e0ab-0c09-4ff3-b13f-a8c3d5a7a56e","sequence":{"long":5492},"type":"EVENT_FCNTL","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"16386","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a56efb09-8108-46b0-ae11-dfdeabb348ab","sequence":{"long":5493},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":394},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b1c0ff1-9140-44f6-923a-20f1b3d3529f","sequence":{"long":5494},"type":"EVENT_LSEEK","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":197},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf45cad0-b09d-4238-ae7d-b8ea090ae369","sequence":{"long":5495},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"7f8bbbc4-f190-fe5e-90f1-5645aefe3bc0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21cd4c90-eda2-405d-aa1b-aa12033e5974","sequence":{"long":5496},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4516a868-a70c-915d-8ca7-5c9c1d91bbf9"},"predicateObjectPath":{"string":"/var/log/utx.log"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01a4"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"13","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43913d92-97fd-4454-aa6d-c30e873411a6","sequence":{"long":5497},"type":"EVENT_WRITE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4516a868-a70c-915d-8ca7-5c9c1d91bbf9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":83},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6d8f467-60da-4e1c-9e89-760b1501b14d","sequence":{"long":5498},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"4516a868-a70c-915d-8ca7-5c9c1d91bbf9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60ea8aee-23fb-4a6b-bc25-c9a641954827","sequence":{"long":5499},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"97a20679-3a19-5355-993a-5a7f9553d88e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d292a8c2-9660-4f68-be9b-132cf192186f","sequence":{"long":5500},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd7b507a-9ac7-4812-8598-d65f152351e5","sequence":{"long":5501},"type":"EVENT_SENDMSG","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b494bb-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_sendmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d90758d8-a37f-4185-a996-2b9356649ef0","sequence":{"long":5502},"type":"EVENT_SENDMSG","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"d7b494bb-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_sendmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"10","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59f274bc-8cc7-4272-9f7f-fb6a1df9f54a","sequence":{"long":5503},"type":"EVENT_OPEN","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"893c6e70-bfe5-4135-8808-73509e9c4737","sequence":{"long":5504},"type":"EVENT_CLOSE","threadId":{"int":100101},"subject":{"UUID":"d6642793-467a-11e9-aea8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"11","return_value":"0","ppid":"1108","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"254cb6f3-2c2c-4f08-a49e-159e1da5df4d","sequence":{"long":5505},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":52},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8d0f582-5089-455a-bb20-31f73f7ce4ce","sequence":{"long":5506},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":133},"programPoint":null,"properties":{"map":{"ret_msgid":"374","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b6f05b4-659d-433d-98bd-76c600348661","sequence":{"long":5507},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":133},"programPoint":null,"properties":{"map":{"ret_msgid":"374","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9937d7de-0e87-4914-992b-368b0d274af2","sequence":{"long":5508},"type":"EVENT_RECVMSG","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b494b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c50c0cb-d198-44c6-ba0d-fd72839b5d17","sequence":{"long":5509},"type":"EVENT_RECVMSG","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b494b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67e34868-0cff-4661-8194-5910e4a25280","sequence":{"long":5510},"type":"EVENT_FORK","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1282","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1282","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"566a8589-c380-4d5d-a1af-bb940119298e","sequence":{"long":5511},"type":"EVENT_CLOSE","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ef0a551-4d99-4ffe-bc54-1133812ad053","sequence":{"long":5512},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ac92204-27e5-4133-b5f2-b682c54b8cdf","sequence":{"long":5513},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb993e72-c640-4011-98ef-34a35cc57069","sequence":{"long":5514},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d20057ec-a7da-4b8e-830b-9e4141a0705c","sequence":{"long":5515},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96002c54-2c6e-4de3-b803-71da05fea0d1","sequence":{"long":5516},"type":"EVENT_FCNTL","threadId":{"int":100102},"subject":{"UUID":"d7b4a9b3-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"6","ppid":"1278","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04b612ed-dd70-43df-9d72-7c38c7475782","sequence":{"long":5517},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"375","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"646e043c-1329-47ca-98bc-6dbf79c7964a","sequence":{"long":5518},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"375","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d265342-a4b4-45de-bf08-b944eda983c7","sequence":{"long":5519},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/pts/0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"12","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72205d0b-da62-4b77-8c12-0e7ab2c3e0ad","sequence":{"long":5520},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"175f3dc3-6c30-4da5-9417-647580b1e887","sequence":{"long":5521},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"12","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fa95ab6-9d5f-4d81-a6f7-e1f975044156","sequence":{"long":5522},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0b85945-ef84-4f75-ad32-2bcacb585209","sequence":{"long":5523},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"13","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a08888b3-550f-4d54-91e4-f6f92a3e0de2","sequence":{"long":5524},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"376","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c69edbb2-2925-428d-a4c9-15c2de561cf8","sequence":{"long":5525},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"376","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fe6a8b2-9213-4137-a39e-8c080791cb1d","sequence":{"long":5526},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fcf113a7-aa96-585f-96aa-757b7f5884e7"},"predicateObjectPath":{"string":"/etc/motd"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f953c4b-ff39-4c14-88ca-09c5e5152d8b","sequence":{"long":5527},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fcf113a7-aa96-585f-96aa-757b7f5884e7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1747a13d-90d4-4e17-9b7a-4c3e6b3471e5","sequence":{"long":5528},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6d0c4bb-a38b-4b1b-baef-d9a8bf0f8f0e","sequence":{"long":5529},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"daaee2cf-b48c-4c9a-a170-260246497673","sequence":{"long":5530},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":{"string":"/home/user/.login_conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08f2d1c6-1a9e-4ce1-bfba-30e993a42c66","sequence":{"long":5531},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4ed02403-1761-215b-a117-fabcfb21c32e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bc26de8-9f2a-4018-a479-91863ddbae56","sequence":{"long":5532},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"12","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"12","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"012c407b-9797-4353-a7d7-542e3f82f238","sequence":{"long":5533},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"12","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"110b088d-0ae7-4106-ab3e-09108818a1cb","sequence":{"long":5534},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8db517e9-51e9-47fb-9dfd-7776053b2ff1","sequence":{"long":5535},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0a85fed-d403-4780-9ed3-8455523e14df","sequence":{"long":5536},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_closefrom"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"11","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a909ec5c-2c96-47a7-993e-2ba36f0eeab3","sequence":{"long":5537},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"802da701-0471-305d-b104-2b472d304411"},"predicateObject2Path":{"string":"/home/user"},"timestampNanos":1552582903044120595,"names":{"array":["aue_chdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abcca5c4-6ed8-46e3-a4ef-119a680f287d","sequence":{"long":5538},"type":"EVENT_EXECUTE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582903044120595,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"-bash","ppid":"1281","exec":"sshd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09a5aa34-5fbd-4db6-af37-865e15904127","sequence":{"long":5539},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19d4ec0d-8d44-4f4e-851b-a3e52c6f885b","sequence":{"long":5540},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b95739d6-20e7-468e-a763-8d0a089a188e","sequence":{"long":5541},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fddcaea5-d9f3-40a5-944e-cf4610cb0a64","sequence":{"long":5542},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ccac3a5-3624-4799-a5ec-0387e7589d63","sequence":{"long":5543},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84654550-4260-4b5a-b0dd-19c54186ba59","sequence":{"long":5544},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e3c9a0a-0bb7-4159-921c-7a08cb87c539","sequence":{"long":5545},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc2eeab2-56d3-4759-855f-09bb4adc8514","sequence":{"long":5546},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae17e6a5-1a6d-428b-a536-206e692a89eb","sequence":{"long":5547},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37cacd04-ec93-4b66-b498-e948a9cb07c2","sequence":{"long":5548},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e999ccba-27ac-4d1d-9ec3-c0d2a3f57c40","sequence":{"long":5549},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"605c3dbc-be2d-44c8-a7f2-256679f0c899","sequence":{"long":5550},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a05603a4-51ca-4873-8258-22c1d463d4a0","sequence":{"long":5551},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b46f84d3-5161-45b1-8b2e-39326dc0a38d","sequence":{"long":5552},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29194253-49e3-46a7-bd73-c9352914cf0d","sequence":{"long":5553},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7003d03-7f4f-43cf-b4ea-43275abac64c","sequence":{"long":5554},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"324eaae6-f1b5-4e53-8c52-724d3e5c3455","sequence":{"long":5555},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a9c96fa-1237-4bad-a925-aa11694126e2","sequence":{"long":5556},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d72b30b-fe01-4f6f-98b3-fc658bc79560","sequence":{"long":5557},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"274b8666-9717-4cf9-aa0e-3dc613ee7703","sequence":{"long":5558},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d395c34-ddb4-49d8-9b62-6e08a7f65e9b","sequence":{"long":5559},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"854429da-39c4-4fe2-803d-62d49f88959c","sequence":{"long":5560},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46c45da7-fbab-4c70-9299-89338d55fabb","sequence":{"long":5561},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2783d001-bd16-49fa-ac91-2e0f5f3c9664","sequence":{"long":5562},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6d1623b-b762-4ced-a0da-56bd6d636cce","sequence":{"long":5563},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ba90655-e76f-4185-9daf-8819d62fd6cb","sequence":{"long":5564},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed9102dc-df87-4a88-be8d-c670da245bd8","sequence":{"long":5565},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76097f69-17d3-45b0-bdad-72d68da80f25","sequence":{"long":5566},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903044120595,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8547231-1478-4072-ba20-8690a6815b10","sequence":{"long":5567},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":66881},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d9875aa-4f5a-4153-ae7d-de9dec695ea3","sequence":{"long":5568},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d14b4c23-3fa2-4418-b3d7-e8e2aab20c27","sequence":{"long":5569},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78f1f9c0-a4f4-4008-ad81-cdf7090ff233","sequence":{"long":5570},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b29b0a2-45b0-4ed3-9466-1836df33c435","sequence":{"long":5571},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24ffa048-4356-448a-a67b-8be58d844b6f","sequence":{"long":5572},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95b4c002-8969-4766-ae31-c92432c7b838","sequence":{"long":5573},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4dd1532-773b-4a9f-bae0-1f7b25b57fce","sequence":{"long":5574},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04c1e620-b170-42fe-803d-736d0c2e8eed","sequence":{"long":5575},"type":"EVENT_MMAP","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7607608-661c-4704-94f3-bd3a4f4fb83a","sequence":{"long":5576},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f73bee13-8b75-496d-8d82-07e11bc57227","sequence":{"long":5577},"type":"EVENT_MPROTECT","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f6db0ae-bd96-4887-a3bf-25a2eae4e225","sequence":{"long":5578},"type":"EVENT_MPROTECT","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"622afeb0-f56f-4d69-a72f-db8e520c1206","sequence":{"long":5579},"type":"EVENT_MPROTECT","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cd77611-2e80-4824-9be4-b10baf929de9","sequence":{"long":5580},"type":"EVENT_MPROTECT","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a414e056-7652-4c7a-8034-669ab216e21b","sequence":{"long":5581},"type":"EVENT_MPROTECT","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5c5e227-ebae-4690-ba1b-81bdbb99f831","sequence":{"long":5582},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69ec2c61-8b41-4d4d-b337-6cbc96bf0349","sequence":{"long":5583},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"105046be-7cfa-4c0f-9f11-432a754e2f7c","sequence":{"long":5584},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72becfe8-dc80-4898-aa64-1049b5fab65b","sequence":{"long":5585},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b75c4bb0-037d-497e-ad1c-539205d1e5af","sequence":{"long":5586},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c700c02c-2d6b-463b-b720-b116db12a786","sequence":{"long":5587},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8072edc1-16be-4b9f-b3c1-48dfdcf223a9","sequence":{"long":5588},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":{"string":"/etc/pwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b34be31-6160-409d-ab50-e1daaea9e6fc","sequence":{"long":5589},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ff468d1-da4f-4fe6-b5fd-29b1a7b4c224","sequence":{"long":5590},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f22fc9b9-55aa-439a-9215-f3d15c44b8aa","sequence":{"long":5591},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb1fa408-da94-482e-be32-e8ef63b2d852","sequence":{"long":5592},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51e317bd-12f0-4e6c-af3b-4a36dfaa547f","sequence":{"long":5593},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fb6207b-f5bf-496b-9acd-ac5a31fd73c4","sequence":{"long":5594},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b7e4506-3e67-4c2c-8a6b-25d0756280ce","sequence":{"long":5595},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b9014ba-892a-4f19-aad3-b559bd8a0642","sequence":{"long":5596},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0de53cc-829e-42a6-92ce-fca7071f6893","sequence":{"long":5597},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"879db961-0d9c-4e56-bc99-706902ae7e02","sequence":{"long":5598},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b958dee9-03c4-4d8b-a463-723b3c74b7a4","sequence":{"long":5599},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"377","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d80f1f44-e09b-451d-a10d-fead60a4e471","sequence":{"long":5600},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"377","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fcaa0de-2802-4450-b0fd-35a385712a29","sequence":{"long":5601},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3215fe78-226e-4dcb-90aa-cec90eef37a5","sequence":{"long":5602},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"047d4b08-1ae2-42b7-ab99-f1b5f34a6988","sequence":{"long":5603},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad029a78-ba0b-4476-a3c1-fc8b4f21fff3","sequence":{"long":5604},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"899a98ef-c182-4d57-8b3b-5439fc99f69d","sequence":{"long":5605},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1cfd99d-8d54-438b-a1ba-0653fa6c15c7","sequence":{"long":5606},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94bf6b51-955d-4850-97b2-3f84f307194b","sequence":{"long":5607},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73dc98af-8575-45ac-9d02-3efe4dae4e0a","sequence":{"long":5608},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cdc8911c-7575-ae53-b575-90e5c3ae1b34"},"predicateObjectPath":{"string":"/etc/profile"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d9df22a-f74d-4308-8497-3e4afeea04ec","sequence":{"long":5609},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cdc8911c-7575-ae53-b575-90e5c3ae1b34"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":562},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7caf2dfe-653a-4921-b818-8470ee74cf9e","sequence":{"long":5610},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cdc8911c-7575-ae53-b575-90e5c3ae1b34"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ae595ac-6422-47db-a1c4-f3e247911c63","sequence":{"long":5611},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3"},"predicateObjectPath":{"string":"/home/user/.profile"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eee1ee8e-f618-4a7f-9312-08b252804103","sequence":{"long":5612},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":881},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f3eb72c-7f16-4417-9c4a-e6543af5898f","sequence":{"long":5613},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f622d0a3-ee1b-ea5a-9bee-c0c0aaea26e3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903115740698,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bcb4f4f-82db-4a0e-926a-f72e7179aa3e","sequence":{"long":5614},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1283","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1283","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de39f185-9131-4d74-ab49-2bb86d80a80c","sequence":{"long":5615},"type":"EVENT_EXECUTE","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b003464c-20bc-2258-bc20-35a2f822aca3"},"predicateObjectPath":{"string":"/usr/bin/resizewin"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582903124345395,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/resizewin -z","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"308895e7-37d1-4482-88ca-229ef698535e","sequence":{"long":5616},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9454e0d9-f064-456b-b341-1db6a73f7cab","sequence":{"long":5617},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f49a9da-ebb7-447f-a2b8-77fed2d873d1","sequence":{"long":5618},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26445f1c-36f5-4083-a009-27ade2397f38","sequence":{"long":5619},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa5c0644-f4ea-41de-8ffa-df300c809230","sequence":{"long":5620},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"384979f8-e6ea-41a3-b506-44eb3e78a412","sequence":{"long":5621},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c827fd66-7274-4ae5-8d0d-bc7b25e59e65","sequence":{"long":5622},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d599dd9-f498-42e8-b832-411783256618","sequence":{"long":5623},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ea3e7c0-bc6d-452e-b7fa-40fa5becc1b6","sequence":{"long":5624},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5710ebd-0970-41a5-bd0e-f6c4747082f5","sequence":{"long":5625},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85c13c96-9d37-4435-8b21-0d3b9f8b95f9","sequence":{"long":5626},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07c7798a-8a4a-4373-b23e-220fda9db921","sequence":{"long":5627},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f4eca67-67fd-4344-a5ea-c84c4337b0d1","sequence":{"long":5628},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9fb8df6-2c07-4382-92b6-629a93cbe9bb","sequence":{"long":5629},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c39a3bc-1a58-4695-be1d-abfae7f75dd8","sequence":{"long":5630},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4c92859-a672-4d4f-b860-4d3953538212","sequence":{"long":5631},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cb4f7cc-c82e-4208-9a46-5b7afd78f7ea","sequence":{"long":5632},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36918ad6-a87e-4bc8-9529-67f41df73dc4","sequence":{"long":5633},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cfbe60c-1c1d-45fe-b832-e3f3c0b682fe","sequence":{"long":5634},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37bf6b37-3cd4-4f9d-af97-0da055379f8b","sequence":{"long":5635},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc440f3c-33a1-4740-bebf-ab117f000ee7","sequence":{"long":5636},"type":"EVENT_EXIT","threadId":{"int":100109},"subject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7c185e7-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"resizewin"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0885e7a-6e20-492a-b30e-521b5be36280","sequence":{"long":5637},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1284","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1284","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"354e3b06-a457-4611-95cf-aa0e76032a42","sequence":{"long":5638},"type":"EVENT_EXECUTE","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"973ecfbf-e437-0451-b7e4-41ba11046147"},"predicateObjectPath":{"string":"/usr/bin/fortune"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582903124345395,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/fortune freebsd-tips","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef94135d-e4fc-42fe-a736-005cc5d97498","sequence":{"long":5639},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec9650f1-3baf-4753-8c8c-263eb231f328","sequence":{"long":5640},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a90e300a-8968-41e4-9f8e-a815f9c2818b","sequence":{"long":5641},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d28b5e9-274e-4cb8-80cf-b9a04c7ef9d9","sequence":{"long":5642},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d3208ee-1edc-4d44-a477-2f237e22a66e","sequence":{"long":5643},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5005c09-0d8f-4169-ba6c-d95f5a3db6b1","sequence":{"long":5644},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"272f2e2e-361d-4763-b831-1bda317f03f2","sequence":{"long":5645},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12f5f6da-5415-43c4-b551-f99f0a7dfcce","sequence":{"long":5646},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25aa64e3-3c1c-4914-b4f4-d3f9befdc43d","sequence":{"long":5647},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2408448},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4114dfc6-2ae7-42e8-8fa9-d61127c5cdfe","sequence":{"long":5648},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2408448},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1749557-2f47-472f-939c-591df14aa846","sequence":{"long":5649},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17fad691-b0c0-47cc-9677-52d802aaa69b","sequence":{"long":5650},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"679ef68a-e106-459c-ac4d-dc0e9205b0e1","sequence":{"long":5651},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2928640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d397ac5f-bc7e-4f44-a982-07f3bf26d831","sequence":{"long":5652},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2928640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0241cd66-f694-4b4d-8ab0-6dc9d94c42ce","sequence":{"long":5653},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4259840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83f89fb3-a084-453d-9805-8443b6fe26c9","sequence":{"long":5654},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4259840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b51e4ce-c806-4eff-9b60-2c497600ca17","sequence":{"long":5655},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"629dcd1e-32db-4a07-90df-066d640238b9","sequence":{"long":5656},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5e49f67-f426-445f-8598-9a3eebee9826","sequence":{"long":5657},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d7c2196c-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582903124345395,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"fortune"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbd88900-2b0e-4efc-97ef-7b199dafb7d7","sequence":{"long":5658},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":75810},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92e53a30-cbdf-410c-b365-4ace1393a8eb","sequence":{"long":5659},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":75810},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0eb8264-e7cd-4ad8-8e11-6790d803493c","sequence":{"long":5661},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70db4d2a-288c-4d31-9f8a-6385ff6c7f7c","sequence":{"long":5660},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"915f98e3-7d18-40ca-baa7-881a8ae2b045","sequence":{"long":5663},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a829c0c3-e2ec-453c-8b17-6f97df8365ed","sequence":{"long":5662},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca6bb7b8-a375-485f-b02f-4f613fa95f01","sequence":{"long":5665},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba09e5cb-d29b-4fef-a5e9-ead4b30ddadf","sequence":{"long":5664},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904133954137,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66967401-7930-4239-bef9-ccba970e02b1","sequence":{"long":5667},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82ba7249-9434-4089-a2ec-3bb5759b5710","sequence":{"long":5666},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5680bd84-4397-4039-a457-88b033a2c78a","sequence":{"long":5669},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00022071-7249-411d-939d-29c4f5d1efde","sequence":{"long":5668},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a1ecd6f-4050-49fe-87fa-2f1e5231f71e","sequence":{"long":5671},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6097de4-2047-4a50-b4a7-ee8f0c6c547c","sequence":{"long":5670},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c4e32e8-b211-4602-b24e-a4dafb27c1d3","sequence":{"long":5673},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8913662a-5065-4617-af7a-f1edc2b8a1fe","sequence":{"long":5672},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad3c3a63-6a70-4419-9889-e97986e5059f","sequence":{"long":5675},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"390757ac-5939-4233-bdec-ec340e25cd97","sequence":{"long":5674},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb988021-ac02-41fc-8642-2cd2f0bbeb3f","sequence":{"long":5677},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc760050-84b8-4e02-aca4-11d31ccae074","sequence":{"long":5676},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fd9e833-bc69-4da8-b4f3-3c3e59e3c08e","sequence":{"long":5678},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1386629-7177-479e-8249-33820a7e73f3","sequence":{"long":5679},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84d524ef-ae17-414f-98c0-b24b4007da73","sequence":{"long":5680},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a59cc2a4-b68f-4d86-ab93-fdcb7689f03e","sequence":{"long":5681},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4102},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a6bbe45-0ae5-4ba0-92e2-429e1f0afaa4","sequence":{"long":5682},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44671380-1599-4420-bd4f-17303a47aa51","sequence":{"long":5683},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4155},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"748dbb57-0d17-4197-a8e4-c66547b1fd4a","sequence":{"long":5684},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8236fd85-3569-422e-9b2d-f738f8071157","sequence":{"long":5685},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"174c4fb6-0d76-4cf7-b05a-4cb0c8d325d4","sequence":{"long":5686},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3634},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ceb8fa06-952c-4e50-8fe6-dde24d8b89a3","sequence":{"long":5687},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b89dc292-9050-4c8f-8910-501aed137765","sequence":{"long":5688},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3687},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9703115c-a1b2-44d0-add3-a3544f613fbd","sequence":{"long":5689},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f6d5f95-cc86-479d-9fb8-edd0d4823688","sequence":{"long":5690},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3b8076e-6cbf-4fd3-8d20-d51bcc87d071","sequence":{"long":5691},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4553},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ad1ba2d-42f1-46e8-813f-563f92d99da5","sequence":{"long":5692},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9ad3eed-1802-4397-98f7-a7d5cae325b2","sequence":{"long":5693},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4606},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59b49d52-b473-45bf-9d22-35d05579b7b1","sequence":{"long":5694},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"466f253a-15ee-4f4c-a46c-118bccd74d3d","sequence":{"long":5695},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"258e8701-f0f6-4918-9a28-d33c7bf094a3","sequence":{"long":5696},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4190},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a85ed235-236b-4bd6-85c6-f57eb0d5b825","sequence":{"long":5697},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89898190-22ad-44da-a7c7-ab96cfda1bad","sequence":{"long":5698},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eae01dbb-f098-4888-8024-831b7abb1c54","sequence":{"long":5699},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c10c3632-23be-479c-b755-21ca8378d63f","sequence":{"long":5700},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4727},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d901546e-cb98-4931-a295-4250d53a5060","sequence":{"long":5701},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5764ec14-36cb-427c-ae25-d96377743037","sequence":{"long":5702},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa27ff0d-c7c8-4a77-8546-e1bcef8fc866","sequence":{"long":5703},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e268d25-16b1-4bbd-b3e9-0d99a3def095","sequence":{"long":5704},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4810},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a29f9fc4-6b56-4598-812c-5e42d890568e","sequence":{"long":5705},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"577a0736-652a-45f6-abeb-beca294ccd67","sequence":{"long":5706},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da8d4b1f-9579-4398-a6b7-1110a2c9985c","sequence":{"long":5707},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9491739f-c9c9-4364-b2fe-fdf768380dd5","sequence":{"long":5708},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4200},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e06211a2-fd99-4d47-8f32-14ffbbb98b30","sequence":{"long":5709},"type":"EVENT_WRITE","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f953de9-5e22-4d98-a956-971a80699129","sequence":{"long":5710},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c25ca9be-2bbf-42c4-928d-0b22d8f4b726","sequence":{"long":5711},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bef3ee72-2df2-47f6-a01e-814e193f3ba9","sequence":{"long":5712},"type":"EVENT_READ","threadId":{"int":100110},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582904143952425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4721},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d969166-3785-4082-a542-4c88af80ebc4","sequence":{"long":5713},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905153966888,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":79717},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c51817c-7545-4524-9db9-f3100b701963","sequence":{"long":5714},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905304236022,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"727bacf4-7606-4996-b32e-96b94e476704","sequence":{"long":5715},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905304236022,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9176de9-25c5-4376-9654-f49f7af5f761","sequence":{"long":5716},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905304236022,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09c4db8c-5bcd-4a89-936f-6b06e3dc50a5","sequence":{"long":5717},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905304236022,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"157f9200-790f-43a5-a4c9-e07c70310b14","sequence":{"long":5718},"type":"EVENT_EXIT","threadId":{"int":100074},"subject":{"UUID":"b583ceaf-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"b583ceaf-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1226","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"052bf391-7639-4445-9520-ac16fc26be67","sequence":{"long":5719},"type":"EVENT_EXECUTE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"dfc2891a-d014-6a5f-94d0-76881f6a1fb0"},"predicateObjectPath":{"string":"/usr/bin/nice"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582905743923559,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"nice -4 fsck -B -p","ppid":"1","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccc3caf0-6f8b-44e6-bbba-9f837c4ccf27","sequence":{"long":5720},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60945c2f-1842-40b9-a728-9c028348a1bc","sequence":{"long":5721},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59882e72-3b4a-470c-889d-46727e86755a","sequence":{"long":5722},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87015a1c-9eca-463e-a4eb-dc0e8d85e5ff","sequence":{"long":5723},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"549257df-0427-4fe8-8120-f90a4bb4a51e","sequence":{"long":5724},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"702fd605-1b6b-41bb-9d89-7a5adbbca331","sequence":{"long":5725},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d733d714-59f9-4fa2-955b-caf73e705c3e","sequence":{"long":5726},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4176c15f-d31f-42f3-ad87-cf23964f7a52","sequence":{"long":5727},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72af124d-0594-45da-815f-de27277fa070","sequence":{"long":5728},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5cb0c54-b506-4265-8a13-7bbc444f1392","sequence":{"long":5729},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02f77f7a-e80c-4a20-b285-542becbc64aa","sequence":{"long":5730},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef5a40e9-e37d-49a8-8c44-4c3fa28c9255","sequence":{"long":5731},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdece243-7ad1-41ad-a5a7-7f066f277773","sequence":{"long":5732},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f5cbb33-315b-43da-9d0c-f0ff1881ae39","sequence":{"long":5733},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c79bcd1-0831-4991-847f-26bfd52641c7","sequence":{"long":5734},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b39e617-fcd0-446b-aea8-5a4705ced45c","sequence":{"long":5735},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdabce36-d0ed-4c51-9f7e-d57108e4f4fe","sequence":{"long":5736},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66b73416-dde8-4b2f-8899-075928245330","sequence":{"long":5737},"type":"EVENT_MPROTECT","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"244eb654-a2f2-45eb-9207-0ff9fbf6b2d3","sequence":{"long":5738},"type":"EVENT_MPROTECT","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4d4738b-fbd3-4962-866d-c7862cd9a8b4","sequence":{"long":5739},"type":"EVENT_EXECUTE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"19a7640a-bde5-2058-a5bd-6734c820ce3a"},"predicateObjectPath":{"string":"/sbin/fsck"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582905743923559,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"fsck -B -p","ppid":"1","exec":"nice"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a00063d1-bfbc-446f-aed1-02094e0148f8","sequence":{"long":5740},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef04ef8b-78f2-4519-876c-a5ddfa4cca51","sequence":{"long":5741},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7946d81b-d71b-47e1-9765-8b3a69bf60e4","sequence":{"long":5742},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cca246df-3239-4e8d-9ffb-f870cc80ef62","sequence":{"long":5743},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69974973-5afd-405d-9051-d7163ed25fc4","sequence":{"long":5744},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb246129-0eb4-4987-9e3e-6267d95b8466","sequence":{"long":5745},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4858bf9c-f9b8-4a05-a5c4-31780c8ea471","sequence":{"long":5746},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4537ea2e-ad7a-477b-9003-0b8d04faeef8","sequence":{"long":5747},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03d7ffcd-57b2-4594-82e7-ba428819f12e","sequence":{"long":5748},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51b4f3b2-0b4c-4065-87bc-2d6e5bc71eca","sequence":{"long":5749},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c513306-59c5-444e-84a6-4e064745858c","sequence":{"long":5750},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2404352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e32ce77b-17f9-4af9-bff5-4c5946b91449","sequence":{"long":5751},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2404352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f032fce-53e2-4dbe-ab13-5adda34cbb7f","sequence":{"long":5752},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2920448},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e88bd468-7acd-4955-9ea3-f6beed499e6c","sequence":{"long":5753},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2920448},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a311d559-7106-45a0-bf50-745116778a3a","sequence":{"long":5754},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4251648},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb669dea-5b84-45c4-89d9-5fda5d65d638","sequence":{"long":5755},"type":"EVENT_MMAP","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4251648},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76dd73b1-caf5-46bd-8d0f-f106df935ef6","sequence":{"long":5756},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ad9a617-4d6a-4947-89c3-2cc85e51e46f","sequence":{"long":5757},"type":"EVENT_MPROTECT","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a25baaf-842a-4c61-b2c3-c8f83c5246a3","sequence":{"long":5758},"type":"EVENT_MPROTECT","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6266453-b181-4c72-9429-2de1d6d011cd","sequence":{"long":5759},"type":"EVENT_OPEN","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"7ff6a25d-5b88-aa5f-885b-b000bfaae0f4"},"predicateObjectPath":{"string":"/etc/fstab"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5389227e-74a3-4521-8ba4-ff3ed3b8f0f0","sequence":{"long":5760},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"7ff6a25d-5b88-aa5f-885b-b000bfaae0f4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":200},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faecba65-ec2b-47ca-96f7-44d3063ac0bf","sequence":{"long":5761},"type":"EVENT_FORK","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_vfork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1285","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1285","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fa8fe63-be50-4005-b402-83f32ad0e80d","sequence":{"long":5762},"type":"EVENT_EXECUTE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"434858bb-406e-6156-ae40-962bc661e15f"},"predicateObjectPath":{"string":"/sbin/fsck_ufs"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582905743923559,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"fsck_ufs -p -F /dev/ada0p3","ppid":"1226","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bda5e8e6-ce0c-47a6-8f13-0d829789b854","sequence":{"long":5763},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16d155e4-0821-4c07-a0ed-3c350b1d0d7c","sequence":{"long":5764},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2825d0a-ec99-43cc-9608-7c7db566ff03","sequence":{"long":5765},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fae5624-e064-42a8-9839-790315ac6f27","sequence":{"long":5766},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11a64d8e-e7b5-4156-9d33-84d37fbd50e4","sequence":{"long":5767},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3868145-c6d8-4675-98af-14701cce45fb","sequence":{"long":5768},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c08fa12-9d07-495c-86e5-bd3d70b0ce80","sequence":{"long":5769},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67baba79-e0ad-417c-862c-ef215477a576","sequence":{"long":5770},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":{"string":"/lib/libufs.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc79e8bd-6052-4105-882f-ca86348b29e9","sequence":{"long":5771},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2531328},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98074d27-1caa-475c-8444-7e3d23f489c5","sequence":{"long":5772},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2531328},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"987e8c73-ff69-4b1c-8a4a-d8261e567b84","sequence":{"long":5773},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2535424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2437993-661c-4f76-a5cd-e6abb4b8fee5","sequence":{"long":5774},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2535424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2045903-308c-4ed1-b876-03e99f165fd5","sequence":{"long":5775},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2555904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35990e99-cb36-4420-8fa9-705bed296f40","sequence":{"long":5776},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2555904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b1e8d43-d6e2-47dc-a739-d628006d9548","sequence":{"long":5777},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efd78ed5-b4b9-4fc9-a752-9f6dc40a2adc","sequence":{"long":5778},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23e72889-8515-47c0-92ad-314357cf2821","sequence":{"long":5779},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"705f2f64-9841-0e51-8198-9150c10e05a0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"659ef101-1287-48d2-a47d-606870b48e2c","sequence":{"long":5780},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6add9a5c-b1e2-40a0-aa46-414d7b8b0310","sequence":{"long":5781},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2531328},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"602f3be4-430b-45e8-8c25-fac75972d1a1","sequence":{"long":5782},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2531328},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d12b98a-8a57-4308-ba14-a7e910083ed5","sequence":{"long":5783},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2580480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fb1a13c-97ef-4f30-844f-f771277582bc","sequence":{"long":5784},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2580480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f164a753-79eb-474e-ad94-89e82ab378be","sequence":{"long":5785},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3096576},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57959930-3f15-4a3a-a927-4560f38e1846","sequence":{"long":5786},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3096576},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"953d6a79-4b77-43d3-9b38-84baeaaedf97","sequence":{"long":5787},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4427776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f895eefc-a607-4a6e-bfcc-22a5cc945e28","sequence":{"long":5788},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4427776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fda129f-6340-4d9e-8e29-f02ab92392b4","sequence":{"long":5789},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50e1a0b8-326a-4217-a399-acf8a4e8db1a","sequence":{"long":5790},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15e03401-040f-4684-8ab3-8c022cffbec0","sequence":{"long":5791},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce33e484-3db8-4e6e-ab82-41430cc2094e","sequence":{"long":5792},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905743923559,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad55edba-23f3-40f0-a666-4ee4f81e7acf","sequence":{"long":5793},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"50dc865a-db47-1c50-87db-7aecd01c5655"},"predicateObjectPath":{"string":"/dev/ada0p3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2973962-8cbc-47ea-83cd-764bd51cb69c","sequence":{"long":5794},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"50dc865a-db47-1c50-87db-7aecd01c5655"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8192},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b1b7a2f-8662-491b-963f-00b021c05902","sequence":{"long":5795},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"50dc865a-db47-1c50-87db-7aecd01c5655"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a328d1f3-e770-4a47-9ca8-1a162e05c820","sequence":{"long":5796},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"50dc865a-db47-1c50-87db-7aecd01c5655"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e74e4fbc-3222-48d0-9cd2-f190dd9a2365","sequence":{"long":5797},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"50dc865a-db47-1c50-87db-7aecd01c5655"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb1f9c27-bcbf-4f40-b34d-5a0e75fc9045","sequence":{"long":5798},"type":"EVENT_EXIT","threadId":{"int":100109},"subject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d952a902-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1226","exec":"fsck_ufs"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5845edb-6a7d-44e3-87f5-5adeb27717c7","sequence":{"long":5799},"type":"EVENT_READ","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"7ff6a25d-5b88-aa5f-885b-b000bfaae0f4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b898e416-e73d-4845-8f89-52b91d9c5954","sequence":{"long":5800},"type":"EVENT_CLOSE","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"7ff6a25d-5b88-aa5f-885b-b000bfaae0f4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa699580-be68-454f-a566-c0d1a6c18190","sequence":{"long":5801},"type":"EVENT_EXIT","threadId":{"int":100071},"subject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"b583c213-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905755579954,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"fsck"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"405c25eb-64bb-4656-9633-820512bca49b","sequence":{"long":5802},"type":"EVENT_EXIT","threadId":{"int":100084},"subject":{"UUID":"b583c3cf-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"b583c3cf-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582905794548453,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"logger"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea69074b-4ef3-4b4c-b5d8-4db7da78a5f8","sequence":{"long":5803},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906124611700,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":79717},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb5c92c5-288d-43dc-8f04-0e08179a383f","sequence":{"long":5805},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582906124611700,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b946b07-2808-4813-b131-203331e1f27b","sequence":{"long":5804},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906124611700,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1a29fa8-4613-4e72-bcfd-a98d6e632cb6","sequence":{"long":5806},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906178054811,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":88685},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c7b4d18-a6aa-4af3-820f-39ebbb5d0d64","sequence":{"long":5807},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906283883081,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dea78072-e528-46a7-bb1b-183294d16de0","sequence":{"long":5808},"type":"EVENT_SIGNAL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906293906646,"names":{"array":["aue_kill"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"pid"},"runtimeDataType":null,"valueBytes":{"bytes":"0502"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"signum"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1282","arg_euid":"1003","arg_ruid":"1003","arg_egid":"1003","arg_rgid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20aec472-5063-41c4-8c56-3edc67bdd9b7","sequence":{"long":5809},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906293906646,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f56c3350-15f7-463a-b666-30ce2adf6401","sequence":{"long":5810},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906293906646,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5694db47-8078-4d70-a6a4-b8841f027dbb","sequence":{"long":5811},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906293906646,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":21},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd94625b-a53f-4663-bfff-457b30cbebd2","sequence":{"long":5812},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906623959179,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef442409-e9c0-43e2-a760-9c455224017a","sequence":{"long":5813},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906623959179,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53175f90-981f-4650-bcaf-0300a72dc662","sequence":{"long":5814},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906714285543,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e737b2c5-ea8f-495d-b3ba-18e4b02a57ca","sequence":{"long":5815},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906714285543,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6362be30-b091-43eb-896c-f845d5b3d7f7","sequence":{"long":5816},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906843870856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35056a29-d8d4-43c7-8d7c-7df8bec563dd","sequence":{"long":5817},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906843870856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce88040a-1b66-43d9-bc12-82a4cf33fc94","sequence":{"long":5818},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906994149349,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"526a2808-b864-4265-8eff-b9dea7981b42","sequence":{"long":5819},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582906994149349,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d2002e7-ff02-4927-b5ef-efc70e4f34d7","sequence":{"long":5820},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907074986277,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cf9c52b-5b99-4e7e-9ec0-9cd3fccab803","sequence":{"long":5821},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907074986277,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5593af5-2803-492a-a792-63063624f159","sequence":{"long":5822},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907183946428,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":90319},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfa8a892-5126-4d66-928f-60095e2c68fe","sequence":{"long":5823},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907226215093,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89bffe12-0b97-472c-9b76-faeb2f0a5461","sequence":{"long":5824},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"802da701-0471-305d-b104-2b472d304411"},"predicateObjectPath":{"string":"/usr/home/user/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907226215093,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"74a0"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e6c2b30-cd88-43f7-b45a-9c2af5418c20","sequence":{"long":5825},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"802da701-0471-305d-b104-2b472d304411"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907226215093,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"305950d5-8005-46cb-92a0-8185e1afb8e8","sequence":{"long":5826},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907226215093,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":21},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0928c113-2bba-4a08-9a25-e95f5e295feb","sequence":{"long":5827},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"975296bd-58d8-46ac-bc49-4bec38101f86","sequence":{"long":5828},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"384","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a39016b1-bf54-4884-9624-a417aa149039","sequence":{"long":5829},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"385","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cd86c6a-98c7-4a2b-9b6e-345bedb3bc5e","sequence":{"long":5830},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"386","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80da32fa-86f5-4f7a-9181-8873aa00a7f7","sequence":{"long":5831},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"387","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b67b3f86-ae69-47b9-9807-5e80f42c0160","sequence":{"long":5832},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"384","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5508a1bf-2082-4c9d-9b5e-b5612189f7e7","sequence":{"long":5833},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"385","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f0d5253-d4d4-421a-9f5c-5b54c47058d7","sequence":{"long":5834},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"386","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bd5016c-885d-431f-9222-2e6987c82158","sequence":{"long":5835},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582907453874277,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"387","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2641c92b-04e6-42e6-8ee8-8324984e1de2","sequence":{"long":5836},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":90319},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f051139-6aaf-4a13-acf8-7a33a2313f95","sequence":{"long":5838},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acd2082e-727e-49e9-a5b8-10dab3fe6cbe","sequence":{"long":5837},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b979646-9c1b-4dae-8004-fb227c576da7","sequence":{"long":5840},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25624106-9a33-425c-86b9-52d8d5007dd3","sequence":{"long":5839},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc6a54b7-b292-41af-b065-f911a85d2c87","sequence":{"long":5842},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb7c958a-b242-4199-90d4-1d2f1e8cb49f","sequence":{"long":5841},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75b6e0a2-736c-4167-bb89-be1d72494a13","sequence":{"long":5844},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84fc784b-0d25-4218-a17a-823b25e6f4d6","sequence":{"long":5843},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a33a652f-c510-4ab1-8877-b661f0887be7","sequence":{"long":5845},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7854539a-0ce3-49e2-8c98-6a43cd95fed8","sequence":{"long":5846},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4da72205-04fb-4566-915e-dfe442d0ea4a","sequence":{"long":5847},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f2e0a34-ff76-4671-891e-a65deb438bc9","sequence":{"long":5848},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4520},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27638219-e69f-494e-a303-4d2ddc78a86d","sequence":{"long":5849},"type":"EVENT_WRITE","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4fccf02-46ae-447d-975d-1dc62c9753d4","sequence":{"long":5850},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4573},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c684be60-d24d-4d4f-ac58-c32ac0eb402b","sequence":{"long":5851},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be1bdd3c-95ab-430d-8371-7a3683ce7545","sequence":{"long":5852},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"118fa307-0d6b-45ee-94d7-19e88fb338ad","sequence":{"long":5853},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4440},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fbad070-de28-4648-b9c0-87650581cdee","sequence":{"long":5854},"type":"EVENT_WRITE","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03880f1b-b696-401b-a048-f1426e47ec9c","sequence":{"long":5855},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4493},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d532ab4-a13e-4f90-8073-0f1e023b52e7","sequence":{"long":5856},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"735a6b91-a18a-42cf-9d0f-7d13f6ed7f95","sequence":{"long":5857},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c710bd12-458d-4197-8bbd-db26e0bce554","sequence":{"long":5858},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1630},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"826f3f89-9ead-4009-8cc9-437a7d2dbf31","sequence":{"long":5859},"type":"EVENT_WRITE","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b2322da-7679-4f3d-ac8f-dc743a6177d0","sequence":{"long":5860},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1683},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16e06c0a-ef0c-477c-8cc6-784af108771f","sequence":{"long":5861},"type":"EVENT_READ","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87c12838-fa15-492c-88e6-dadd52f4b008","sequence":{"long":5862},"type":"EVENT_SENDTO","threadId":{"int":100112},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"388","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d69032e-a169-496e-bbea-7b5072d9c2b0","sequence":{"long":5863},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"388","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ccb0d95-b083-43f9-812a-7da24f128015","sequence":{"long":5864},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908124699371,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db1011b9-af8a-49b4-9139-1783aba09900","sequence":{"long":5865},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cc38374-ed80-4e62-b6a7-a5b4f920600a","sequence":{"long":5866},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d10c3b6-923f-41dc-b4c9-e007a29160be","sequence":{"long":5867},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29eff36f-b1a5-47c6-8d5c-110d3fe5a523","sequence":{"long":5868},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85287a1d-114c-489e-812d-649de0e344aa","sequence":{"long":5869},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bd534de-1cc1-4c92-9f64-c131ed105154","sequence":{"long":5870},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908133943755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c60bbf6-f8c9-4a5a-a456-f63044212859","sequence":{"long":5871},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908194056284,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":94688},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce3febef-0317-4819-9fd8-bf03f1fbffb0","sequence":{"long":5872},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908713861358,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a048212-1a1a-44cc-9905-90425aa74f30","sequence":{"long":5873},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908713861358,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"922cb623-a2b2-4cbc-9490-31397b747596","sequence":{"long":5874},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908904072636,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b59f2a7-0a8b-497b-9692-9893c1c8927a","sequence":{"long":5875},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582908904072636,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f4eea76-0eb2-44be-a862-f63fb1d355a3","sequence":{"long":5876},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909013925442,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41a087b6-15a7-4671-8b20-9eafa6fddb9f","sequence":{"long":5877},"type":"EVENT_OPEN","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5b518504-be76-5653-b6be-34ff435661ed"},"predicateObjectPath":{"string":"/home/user/ripe-prov-tests-master/"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909013925442,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00bed0"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a0c71e0-ff02-41f9-a95d-07010c0d9de8","sequence":{"long":5878},"type":"EVENT_CLOSE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5b518504-be76-5653-b6be-34ff435661ed"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909013925442,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db2992b1-4e09-4dd6-8a93-f065f5f7c363","sequence":{"long":5879},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909013925442,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7b220bf-44f9-4920-ba17-d2f0c1253a1b","sequence":{"long":5880},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909204168075,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":95840},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4fd9ccb-eeed-41f6-9c1f-b8e5a84f6960","sequence":{"long":5881},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909294044101,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01b7d45d-50d9-479b-abcf-d30d1352c433","sequence":{"long":5882},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909294044101,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25225457-e413-42b4-b569-76ff3d00267c","sequence":{"long":5883},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObject2Path":{"string":"/home/user/ripe-prov-tests-master/Linux"},"timestampNanos":1552582909294044101,"names":{"array":["aue_chdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cb17d55-cbd6-4514-8788-b7accb7b0add","sequence":{"long":5884},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909294044101,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f942b9e-4e9b-4304-bfb3-2aaab1256796","sequence":{"long":5885},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582909294044101,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":50},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0435ebfe-ab54-4be3-bb4d-f889897a3821","sequence":{"long":5886},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":95840},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b937d89d-f689-40d5-987a-9b4abe15a0b0","sequence":{"long":5888},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9eec0d6-a9b1-4d8d-ad46-bcf6854566aa","sequence":{"long":5887},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6d63382-cf22-4d59-acb9-077b89229242","sequence":{"long":5890},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2636f8c2-8ea2-46d8-940d-a6d2e695106a","sequence":{"long":5889},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3a74113-6247-4c67-84b6-89dd7d47e070","sequence":{"long":5892},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4681ddd7-0d83-43e7-9232-47bb621053ae","sequence":{"long":5891},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c632d78a-798d-47ed-9f66-463b6ae22db3","sequence":{"long":5893},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc1286af-fadd-4ced-9a60-78887872999b","sequence":{"long":5894},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3a3021d-d62c-4d36-ae2a-9cf97bb11721","sequence":{"long":5895},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"813a6423-45d8-4c6c-884a-172bc78d1df9","sequence":{"long":5896},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4365},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6dfd7db-288e-4f1b-95cf-48abad78a714","sequence":{"long":5897},"type":"EVENT_WRITE","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"735a2004-6378-456b-8171-b5a102f4ffd9","sequence":{"long":5898},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4418},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2992526c-fb69-4679-b28f-252b82d6e576","sequence":{"long":5899},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd54ffc8-52ae-4de5-8a05-d2e4df416ca2","sequence":{"long":5900},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4d4ae80-d09c-4c5a-84cc-91dcdaffeb07","sequence":{"long":5901},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1148},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"038ccb02-ee99-445a-83b8-bc5a41628ac3","sequence":{"long":5902},"type":"EVENT_WRITE","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e73e2632-cc48-40ec-a3f3-60b362f9e820","sequence":{"long":5903},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1201},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e91d0860-2775-4e25-93a2-a71a58f78654","sequence":{"long":5904},"type":"EVENT_READ","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"906ffb72-10ac-4450-bcd0-699ff7c8041a","sequence":{"long":5905},"type":"EVENT_SENDTO","threadId":{"int":100113},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"389","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ed7b830-3c4d-440f-9f77-6f283c0d1fff","sequence":{"long":5906},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"389","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6be998ad-86a3-439b-849f-255bb1fdc26d","sequence":{"long":5907},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1788d81-a76e-4114-8145-87d374e0ca34","sequence":{"long":5908},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d19cab2-8da0-4b97-8c63-f83bff26def7","sequence":{"long":5909},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910124538394,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81c7f3d0-c4e2-480d-8e02-1634ae704d88","sequence":{"long":5910},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910133863566,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23639946-fb99-495d-8ecd-81f6ee19724f","sequence":{"long":5911},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910133863566,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"baa51105-fe1d-4bb2-a89f-40e82f2f29db","sequence":{"long":5912},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910223880459,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":98904},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04f6bd20-b398-44ab-afc0-4cdc33bdca8e","sequence":{"long":5913},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910364402487,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5340cd57-73a7-43e6-bc56-0723ae81d711","sequence":{"long":5914},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910364402487,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34723bd1-8c69-4d09-8b3f-0e81165905fd","sequence":{"long":5915},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910364402487,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cae429c-9022-4d5d-94e9-fa873569da89","sequence":{"long":5916},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910364402487,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":32},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76f53415-2c3d-4914-95eb-4497e9c9b57b","sequence":{"long":5917},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b52c946-6a26-4aaa-9f8e-4c1b7dc990fe","sequence":{"long":5918},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"390","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6fa8212-f078-4954-9962-7bff0ea927cc","sequence":{"long":5919},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"391","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"860afc11-f592-41d4-b2aa-aa9414e6d74b","sequence":{"long":5920},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"392","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20ef4485-9988-45fa-b3e6-c29daeac76a1","sequence":{"long":5921},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"393","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a633713e-e02d-46b6-96a5-cf5e9810c3a3","sequence":{"long":5922},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"390","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94e6d52f-15ec-451a-989d-b527fd364c68","sequence":{"long":5923},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"391","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"459d3637-ca6d-49f3-9ed1-066cf061cbce","sequence":{"long":5924},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"392","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62ccdb13-a22e-4fbe-b223-afcd71ff0c0b","sequence":{"long":5925},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582910454003648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"393","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb4a9b80-ad56-49a7-910b-5e5162f70ca2","sequence":{"long":5926},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911233887268,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":100381},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e01e5e1-3afa-4a34-81d2-1342c4bce7d4","sequence":{"long":5927},"type":"EVENT_CONNECT","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"dc9aef12-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","address":"107.155.79.108","port":"123","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bcffcf6-0c0f-43db-ab89-b7299eeca791","sequence":{"long":5928},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"dc9aef12-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"432f02a6-25a5-55cb-b49a-0746c59bf6b6","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"10.0.2.15"},"localPort":{"int":123},"remoteAddress":{"string":"107.155.79.108"},"remotePort":{"int":123},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e87529a-342b-41b4-8bb4-bad5a99ae1e9","sequence":{"long":5929},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100092},"subject":null,"predicateObject":{"UUID":"b5434a9c-467a-11e9-ae89-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"432f02a6-25a5-55cb-b49a-0746c59bf6b6"},"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c41e461d-9e72-4a4d-b3ba-36d024de1c3c","sequence":{"long":5930},"type":"EVENT_SENDTO","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"b5434a9c-467a-11e9-ae89-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"ret_msgid":"394","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"22","ppid":"1","address":"107.155.79.108","port":"123","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78ad947d-7994-40c1-9dd6-9f0af5d58198","sequence":{"long":5931},"type":"EVENT_SENDTO","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"b541acd0-467a-11e9-ae89-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":102},"programPoint":null,"properties":{"map":{"ret_msgid":"395","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7726fec8-bb6a-4d59-8ad9-1d9046264e9c","sequence":{"long":5932},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b2110-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582911260647974,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":102},"programPoint":null,"properties":{"map":{"ret_msgid":"395","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91486bd7-e9ce-406c-8a54-c91766cc31a4","sequence":{"long":5933},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":100381},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e969492-b3cf-4a44-8931-b88d35bd9e16","sequence":{"long":5935},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fddcd475-d1bd-47b1-9244-ef97f109b1c2","sequence":{"long":5934},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e748cc95-1c9f-4875-b450-61e81a264e19","sequence":{"long":5937},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6dc789d4-5c2a-498a-abd8-8b6b93a90698","sequence":{"long":5936},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"096fb988-25ae-4d77-b8c4-ff5887db1696","sequence":{"long":5939},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c1fe145-7c56-4c49-853f-4a48e4bec154","sequence":{"long":5938},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac4fcb1e-a58a-4af6-a671-cadd9782dd69","sequence":{"long":5940},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f829568-3cb7-4df4-b6a8-baefbadb90e3","sequence":{"long":5941},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcbd5ecd-36e0-4b1e-af39-6c52d6d2850f","sequence":{"long":5942},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"069b964d-2634-437c-8b9d-f80679d98f42","sequence":{"long":5943},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3060},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef139f6c-9b7a-4c04-8f24-7bda07a006c6","sequence":{"long":5944},"type":"EVENT_WRITE","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98bf03fd-b1a0-452c-ac4b-583446bf9714","sequence":{"long":5945},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3113},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9aa7d47-9d36-4abf-ac4c-2dc2f54f4d16","sequence":{"long":5946},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb6542c3-ddf1-4e9c-a522-f1633adc6369","sequence":{"long":5947},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43dedad6-005d-4d1b-b327-88fbfb57e325","sequence":{"long":5948},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1473},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"432da0fc-f5f5-48cf-9da0-9e336fbba062","sequence":{"long":5949},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1526},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d91a07c-124d-4130-b2ac-a5450abe9a82","sequence":{"long":5950},"type":"EVENT_WRITE","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5842ccd-ae78-41b4-bf3f-89284198e06c","sequence":{"long":5951},"type":"EVENT_READ","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a24b3a8-af31-41d9-b574-e792fc5ca4d0","sequence":{"long":5952},"type":"EVENT_SENDTO","threadId":{"int":100114},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"396","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e5f7a76-75ad-42de-b4f4-65116d120310","sequence":{"long":5953},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"396","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b2831a4-c392-4eb0-a3cf-63aa1adb0dcf","sequence":{"long":5954},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab3875e0-8c37-498a-bbab-69623b71ba03","sequence":{"long":5955},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4bd7dc2-c8a4-4dd0-b951-a2389957e0d4","sequence":{"long":5956},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56a694b7-9edc-482c-9d76-45a772a02586","sequence":{"long":5957},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43680ab7-82e3-406b-be39-df3a47396dd2","sequence":{"long":5958},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912123877563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7055ccac-fb96-431e-a847-b24fdb7b87fd","sequence":{"long":5959},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912204256412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c72202e-21ff-45c2-bf1f-4eec23458f66","sequence":{"long":5960},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912204256412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4267910-10da-4d63-b071-8273198ef17d","sequence":{"long":5961},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912204256412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"061f0f01-f2e6-422a-81a3-b514089fcf02","sequence":{"long":5962},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912204256412,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":37},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"249f7308-8da2-411b-9ea3-54c27bd8e3e0","sequence":{"long":5963},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582912243951039,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":103965},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6806850d-5061-4853-9dd6-31d419f5ae1c","sequence":{"long":5964},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59910a7c-77b4-4fd7-899d-dee6b1f8f4f8","sequence":{"long":5965},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4947ff0b-2e45-4dc3-8856-45b434c67887","sequence":{"long":5966},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"321a7188-fd74-4e9c-a88e-96f9475e24db","sequence":{"long":5967},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbaae032-781a-4655-b0a8-c25953e151df","sequence":{"long":5968},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f274543-f1a3-4cbc-9f86-3066a4d99afe","sequence":{"long":5969},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d3e7347-d766-4a78-9fb9-1e5d98becad0","sequence":{"long":5970},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913234488621,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9549c67-2d07-4437-a8dd-f0b947e6fcff","sequence":{"long":5971},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913254283039,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":104813},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1de18306-4267-4972-9825-ae0f5db9fbcb","sequence":{"long":5972},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"464f90cb-37fd-4873-97b3-c0d4ddd3ceef","sequence":{"long":5973},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"397","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e12d422-10be-4454-b9a1-3b6fcd1d121e","sequence":{"long":5974},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"398","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"220209e5-1a59-442d-a711-e051ecacdfc7","sequence":{"long":5975},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"399","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfbd81a6-b58d-49c4-8442-0a847d2dd4ab","sequence":{"long":5976},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"400","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a62ec75-53a1-4f19-b55c-6578641f4667","sequence":{"long":5977},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"397","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05e42f9b-558b-4a75-ad43-c47bf121dbab","sequence":{"long":5978},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"398","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c428f790-ed0d-4751-9493-dbc010a83c56","sequence":{"long":5979},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"399","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a33ee50-be8d-4f2e-9c8d-cce83a537ec5","sequence":{"long":5980},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582913454267401,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"400","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67c7c67e-c2bc-4227-a143-be0e89da6324","sequence":{"long":5981},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":104813},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72651d48-18e8-44bd-be0f-b801989e3cdd","sequence":{"long":5983},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8dfcf304-10d5-4b2b-b1e5-d966fc2ded92","sequence":{"long":5982},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e8a3302-c32a-4361-ac34-6eeb9c3ba95f","sequence":{"long":5985},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b53491b5-dee1-4687-b08f-4b32b2f8f82b","sequence":{"long":5984},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7be8f270-a254-4bee-94ed-19a8986231f8","sequence":{"long":5987},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddef0e3f-757e-450a-969c-f6fc794dc022","sequence":{"long":5986},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8fe2e6d-1db8-4667-85f4-5e7feb1bce8a","sequence":{"long":5988},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28296784-4247-40d5-b9d0-db40dd63c27f","sequence":{"long":5989},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22c00a90-2444-4071-abe6-f71f6dd20373","sequence":{"long":5990},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7d908b4-7124-4c1e-b9d2-a6a56cd3f957","sequence":{"long":5991},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3580},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"606aadde-1c3d-42c3-ac3b-8d3e0eeb54a9","sequence":{"long":5992},"type":"EVENT_WRITE","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b831a098-4935-479d-b6c8-700a3ed3a70f","sequence":{"long":5993},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3633},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c8e5ca8-aa34-4f14-a74b-8e727dcd9737","sequence":{"long":5994},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"588f253a-642f-474e-b934-e4a9273d22da","sequence":{"long":5995},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"824d65a7-c2d7-4f62-a8ac-5507bfa5e002","sequence":{"long":5996},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":844},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18755b66-da19-4a5e-975a-2d5e80d2092b","sequence":{"long":5997},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":897},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"899104f4-a78b-4f9a-81cd-cf8cef2c0378","sequence":{"long":5998},"type":"EVENT_WRITE","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aadd6ffb-f70d-48b7-9471-4fc20c0303f1","sequence":{"long":5999},"type":"EVENT_READ","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a67f8c90-aa95-480e-ab8c-bdf22399673a","sequence":{"long":6000},"type":"EVENT_SENDTO","threadId":{"int":100115},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"401","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbb7544d-01b7-4df4-acf0-a240ba20c111","sequence":{"long":6001},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"401","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6082d98-986e-4a21-9a03-518282daf880","sequence":{"long":6002},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b527dd6-5607-4804-808e-a16e561741f6","sequence":{"long":6003},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a521717-4797-4e69-b996-c725f02263ad","sequence":{"long":6004},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"628cf2d6-1106-4464-83fc-17dd986b7981","sequence":{"long":6005},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"608c9285-ab71-4cd6-b314-66f4c3f399ca","sequence":{"long":6006},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914124368238,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91759dc5-d5f9-45c7-8e09-cb7486492037","sequence":{"long":6007},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914153936323,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1acab1e6-6c8b-451e-b415-03b7b75190c2","sequence":{"long":6008},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914153936323,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd1cc613-af88-494f-af23-1afad588ba12","sequence":{"long":6009},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914153936323,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e1b5fd6-37e3-4af9-85a5-5689db0e876c","sequence":{"long":6010},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914153936323,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71f174a3-3064-484d-b5d0-f4f6da2355e4","sequence":{"long":6011},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582914264068977,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":108412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6d2de0f-c6ec-4fc5-89bd-0a15b9fa9ffb","sequence":{"long":6012},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582915273963131,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":108777},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4d3f0ec-b59d-49b3-b58b-5d43d889a862","sequence":{"long":6013},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":108777},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20c99914-047d-4e30-9ab5-8d3f13f32460","sequence":{"long":6015},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c07e6b6-3853-423f-841c-3029b294f1a3","sequence":{"long":6014},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aef9f363-48db-4786-8165-225462e748e2","sequence":{"long":6017},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f15fc1da-2fec-455d-9317-ae7fe5db39bf","sequence":{"long":6016},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99f6bfbc-8a30-42f2-8a0c-f695fd72edca","sequence":{"long":6019},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d8ca74c-41fe-437d-aefe-babeb8fe59af","sequence":{"long":6018},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfb2d35b-f709-452a-be79-f145b1cfb385","sequence":{"long":6020},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6639d6f3-58d2-4eca-9e32-f5d6b0fc96ee","sequence":{"long":6021},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bdae0c8-e8b3-42d7-a8ee-5dcd988f5b7c","sequence":{"long":6022},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b19b382-61af-4146-929d-4281e65437d2","sequence":{"long":6023},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3595},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1cfb5a0-4766-4ac4-aa41-b93d3e8c6772","sequence":{"long":6024},"type":"EVENT_WRITE","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1aab56a-39c5-4356-80d8-cf29b447516e","sequence":{"long":6025},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3648},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc78e655-9899-46b0-9c8b-4926de3dfec7","sequence":{"long":6026},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4076d7b0-9b76-4677-b809-8c6b9659350c","sequence":{"long":6027},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43efaed8-d74a-4b48-8b01-5176421ab92c","sequence":{"long":6028},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af37abf8-8d8d-4b6d-8996-90473a73d581","sequence":{"long":6029},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90f5c823-9ceb-48cf-9bbf-962058e10f99","sequence":{"long":6030},"type":"EVENT_WRITE","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cd4d9a1-1f38-4e9b-a033-2cfb62907e48","sequence":{"long":6031},"type":"EVENT_READ","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cef82eb-4107-4b00-87f4-ffa0ef5f05e6","sequence":{"long":6032},"type":"EVENT_SENDTO","threadId":{"int":100116},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"402","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10022d79-71c8-4437-9ba5-480af0c99320","sequence":{"long":6033},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"402","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"020d9de9-7e6a-4b82-b3ca-da1a7d97bb7b","sequence":{"long":6034},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8299fa3-e839-4933-a7e6-2f5335528170","sequence":{"long":6035},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10f0c271-31fd-4084-a0e4-ffca13f893b7","sequence":{"long":6036},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68f7bebe-f0b4-4bf6-9c74-d127728f0cb3","sequence":{"long":6037},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e858a88e-0449-4510-a4b2-d11b0ff341e4","sequence":{"long":6038},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916123924774,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dcc2030-7e4f-42a1-b836-2ec9dfed8758","sequence":{"long":6039},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6494db4c-210d-4ba0-af6f-9c54517d9712","sequence":{"long":6040},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e07390d1-f110-4084-a42b-dc3ff937c2b7","sequence":{"long":6041},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1286","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1286","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec26161e-1c36-4043-8d56-7f18171dd03f","sequence":{"long":6042},"type":"EVENT_EXECUTE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./bash_commands.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582916153873169,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ./bash_commands.sh","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5f0d1b2-1abb-4bac-818e-2c37cb1408cc","sequence":{"long":6043},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f27c8477-795b-4344-a16d-1a0cde96ccfd","sequence":{"long":6044},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75dfcc98-4895-4001-8e73-8c2fd48992ff","sequence":{"long":6045},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"396bb438-7552-44c8-87ac-495d8fa59eae","sequence":{"long":6046},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15d3f1b0-f6b4-41c9-9467-3000bdd35367","sequence":{"long":6047},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19b6058b-cfd0-404c-8c01-ed788889ed6a","sequence":{"long":6048},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e0f2496-65a2-41fc-98ef-eaadf25456c3","sequence":{"long":6049},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3acb36a-b36f-408e-a17f-4b48cf7a83fb","sequence":{"long":6050},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7772a9e-6958-4d9b-bb3f-572d3593e4aa","sequence":{"long":6051},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2985166-a156-4848-b6e3-6d7275e9fbdd","sequence":{"long":6052},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78903f3d-c416-45b6-89a0-fcdbcdc6bf67","sequence":{"long":6053},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4052dbd-8de7-47d0-a6b5-6d07df262f53","sequence":{"long":6054},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d1f46c0-25b1-4039-bf3b-71486f58de85","sequence":{"long":6055},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc8ee008-086e-431c-bed9-b1aa959b3ef5","sequence":{"long":6056},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66ee72b1-8d8d-4e25-8f4f-8f9dc02caf63","sequence":{"long":6057},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dec1a36b-9531-4227-bdf7-421eba9b92cc","sequence":{"long":6058},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dcaea92-0904-44f5-a97f-dbb53af284c6","sequence":{"long":6059},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79f20c61-1192-45ec-b0c4-bf2a7df995d0","sequence":{"long":6060},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7698681b-b07b-4faa-b647-1ac2e76c687b","sequence":{"long":6061},"type":"EVENT_MPROTECT","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abaa033f-db38-4982-998b-5ad543369721","sequence":{"long":6062},"type":"EVENT_EXECUTE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582916153873169,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ./bash_commands.sh","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e892a4a-8092-4811-95bd-1f3112fbeb1b","sequence":{"long":6063},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01c72e2d-5a57-459c-a7f1-20ea90ac5071","sequence":{"long":6064},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47f74368-5e6a-4304-b445-bcfec5f19c6c","sequence":{"long":6065},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"577e7e97-dfd5-4451-898e-a07347795d8e","sequence":{"long":6066},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"973344c4-2608-426c-8e6b-697fbd7599e3","sequence":{"long":6067},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dcafbcf-cc80-45ff-a5ff-af5f6859573c","sequence":{"long":6068},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb31584d-3653-4fb0-b418-4e4e81d8db0b","sequence":{"long":6069},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cc1caee-afbe-4eba-a923-df72e37527e5","sequence":{"long":6070},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa701a28-b973-4a6b-a124-3a44db77ec5a","sequence":{"long":6071},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85377ea9-014f-456a-b46d-aee0610becb2","sequence":{"long":6072},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05d73861-1448-4662-b59c-14c1b5265f92","sequence":{"long":6073},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"912cdf9b-1bd8-4cbc-bc44-49c4a6e0be9b","sequence":{"long":6074},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c098832d-8f4a-4679-abc5-7289ea7cc822","sequence":{"long":6075},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fe6c5ed-a632-47ab-b2dd-9dd8fc6ec1ad","sequence":{"long":6076},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1f2e468-915f-4717-83b6-bcafd4ab16a9","sequence":{"long":6077},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c026bb22-0214-4c66-8109-06715a982deb","sequence":{"long":6078},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"372bac97-4168-4db1-8b99-4f45a02c9e13","sequence":{"long":6079},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f484f487-19aa-47f0-b31e-4a508644c8a6","sequence":{"long":6080},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed3c326c-7d37-4195-aa6f-9a3a9e4e9810","sequence":{"long":6081},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0f7e0b7-f904-44f5-a66a-50006cc49924","sequence":{"long":6082},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8d0f821-c417-4ac3-b0d0-3072bfed2491","sequence":{"long":6083},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a41fc13e-d13f-41d2-a1b5-c44bdf20c4ec","sequence":{"long":6084},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"099644d3-d755-4fd2-87fb-fae8a2f39a14","sequence":{"long":6085},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38b75b4f-ad5b-4785-8a2b-ccc5245bf060","sequence":{"long":6086},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e16e4999-033b-495e-9b04-5996c8aebf59","sequence":{"long":6087},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80525416-6f64-4b6c-91f9-a007849c441e","sequence":{"long":6088},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66323063-b60a-4cfd-9604-17b87293771d","sequence":{"long":6089},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9bbc556-dfe7-4e51-ac07-2915f43f9598","sequence":{"long":6090},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8395eda0-e923-4b63-bd66-519bc0f111aa","sequence":{"long":6091},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0607c094-ddd6-48f1-a42c-abc501ffe77e","sequence":{"long":6092},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6ac19df-60ed-4de5-a3d9-d10e8a7b04b2","sequence":{"long":6093},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"078feecf-3704-41aa-a84f-3bedd4391bf9","sequence":{"long":6094},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d67b4140-7b49-4fd3-a290-2eebc61b2f9f","sequence":{"long":6095},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8d52008-5ee1-4c10-b3c6-1f361bf59a3b","sequence":{"long":6096},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e2f0d71-883e-4446-880e-ccb0518caf1f","sequence":{"long":6097},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c11e01e1-9314-4e96-8344-072cc2a3bed2","sequence":{"long":6098},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cb402cf-dbca-4c32-aac0-f216361445cf","sequence":{"long":6099},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67c3c897-dec4-4598-af4a-a257eef62761","sequence":{"long":6100},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3a14ddb-68b9-495d-9242-b7539332e067","sequence":{"long":6101},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc6c9123-1a40-4540-b84b-e31ba1084906","sequence":{"long":6102},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4cca8f9-e17b-4233-9d39-98e6fd0ac5fe","sequence":{"long":6103},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d49ff30a-2b3d-46c3-a7be-e1af46ad2381","sequence":{"long":6104},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbd5d516-8573-4090-bce0-1c5a8f8d438a","sequence":{"long":6105},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ae18351-38f5-4c0c-91ff-6b44ca1499ed","sequence":{"long":6106},"type":"EVENT_MMAP","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916153873169,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4ddea29-6b8c-444b-9ade-76c55e5eaa2d","sequence":{"long":6107},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916294130790,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":117711},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1676c1dc-da87-48ce-9ec3-b9a7c9c044b5","sequence":{"long":6108},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac08f6a6-0522-44ab-a510-266e4007af26","sequence":{"long":6109},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"403","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e34af904-440f-49f1-964f-0b6b00e65839","sequence":{"long":6110},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"404","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f59a5ce3-ed0a-4dd6-aab0-21c19a8de66b","sequence":{"long":6111},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"405","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"420b8faf-62fb-46f1-b16c-76644c6fbbb7","sequence":{"long":6112},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"406","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e17ed70b-0ad4-4354-a963-672a451d4e07","sequence":{"long":6113},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"403","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3504db82-cf17-412e-bb54-40c9882c0013","sequence":{"long":6114},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"404","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e9d02f2-d3ca-4aeb-a6ed-70792b26348d","sequence":{"long":6115},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"405","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ff556fd-7685-4ee7-af66-08bdaec1daab","sequence":{"long":6116},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582916454462035,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"406","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7582580-6bed-473a-8a51-dcd70896b74a","sequence":{"long":6117},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"df874ee9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"df874ee9-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1fe42d8-5b8f-41fd-8209-cbc5e0c3c012","sequence":{"long":6118},"type":"EVENT_OPEN","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e980e09-14f0-40aa-900f-34e0a3f1a971","sequence":{"long":6119},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"886d8ee0-a564-4a64-b733-276cfe8d7102","sequence":{"long":6120},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15d9cc0e-b5e7-4bac-ae90-a6b50d17bb41","sequence":{"long":6121},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30ec1041-dd83-4bc6-8ce7-f7437fc05526","sequence":{"long":6122},"type":"EVENT_CLOSE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bcc53a7-1583-4902-9e89-32f4718a34ae","sequence":{"long":6123},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":445},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3687b6be-aeaf-4489-b003-10958df0d0cc","sequence":{"long":6124},"type":"EVENT_WRITE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":11},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4793c6d0-6197-498f-a48b-c04df7d245fd","sequence":{"long":6125},"type":"EVENT_WRITE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":11},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"705b694f-e874-47b7-ac35-2cb48fb0ef23","sequence":{"long":6126},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":241},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27ae7619-f94b-4b93-947c-6ee881b2243a","sequence":{"long":6127},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1288","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1288","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a988a69-6d1e-440d-af0c-c026c1055d5a","sequence":{"long":6128},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00f18050-ba5f-4ca6-a0b3-018d77c853da","sequence":{"long":6129},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c000b88e-d4da-4916-8547-c70b2bd7eca9","sequence":{"long":6130},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31c6aba8-1e34-4eb6-87a9-0943cabb5a35","sequence":{"long":6131},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d1524fc4-3a5e-855b-9e3a-5d212b8581ed"},"predicateObjectPath":{"string":"/usr/bin/whoami"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917183902486,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"whoami","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecfd1b11-8d48-4a13-aaf6-9a4a561ec798","sequence":{"long":6132},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fb8326e-a752-472f-8f90-67e82bb2c6cc","sequence":{"long":6133},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"162b5b7d-dd85-4a1a-b868-fd9a11f3dbc8","sequence":{"long":6134},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc25f5d4-175c-4bdf-9ae4-d67dac5cb973","sequence":{"long":6135},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4eb234c-83df-436f-a595-11bbc86f1246","sequence":{"long":6136},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"165d6f54-64f1-483c-a9a7-e731192041ea","sequence":{"long":6137},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13513760-9d2c-4b83-a217-34fc82013071","sequence":{"long":6138},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7403e689-e9d2-4676-addc-504e1351608e","sequence":{"long":6139},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d45889b9-f5ac-44a4-874a-776c9aaf051a","sequence":{"long":6140},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b98e1d7-0ddc-4057-8709-3e09113e5d9b","sequence":{"long":6141},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6acf961f-0af1-4538-a605-08e7e9a9d7a6","sequence":{"long":6142},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccce775e-a1ee-43b4-9a8a-21025f69204a","sequence":{"long":6143},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18783525-34b0-4d0e-84c9-eb0b40d83f3c","sequence":{"long":6144},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4aebb04-c01f-4515-85f3-9224027c0ff5","sequence":{"long":6145},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de45f52d-ba17-417f-90bd-56bb481b006c","sequence":{"long":6146},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b50ce29-00d6-4f7d-842f-4f7a7fca8f02","sequence":{"long":6147},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12e189f4-e22b-483e-a636-a425a343f8b7","sequence":{"long":6148},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe44f91e-da3f-48db-9df8-f9135b297ddb","sequence":{"long":6149},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec0f626a-fff3-46d7-a896-830674f42645","sequence":{"long":6150},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29eb81f1-68cb-41d9-8e96-78d43f5a87c9","sequence":{"long":6151},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eebe038e-f0ba-4c63-ac1b-a444dc442b8d","sequence":{"long":6152},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"555595bf-2219-4618-b5df-f7adf28f1105","sequence":{"long":6153},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b2ce1b8-2460-4616-b810-17d09a4153ec","sequence":{"long":6154},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7feb063-2d40-4a7d-999f-1f154906dc23","sequence":{"long":6155},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":{"string":"/etc/pwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab2e2abe-bb32-4d0e-91b8-caeeb4c9b56c","sequence":{"long":6156},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcfc0475-e52b-419f-8a06-f80c5679d7b8","sequence":{"long":6157},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cedd3241-3ce3-485c-9f35-1a46eede0cec","sequence":{"long":6158},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77441095-a97d-464c-837c-6dcf6e148a98","sequence":{"long":6159},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f829c2d9-92e5-4241-a7b9-a728ca8e9fac","sequence":{"long":6160},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"839b073a-7194-42ea-a6e3-70f432224b8b","sequence":{"long":6161},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a648eb3a-5aa6-413d-a63d-b9d9dfcba990","sequence":{"long":6162},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67ef428f-03c5-435d-9eb9-85356dd049bc","sequence":{"long":6163},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0888b451-37ab-4da8-93ab-0f815280f8f3","sequence":{"long":6164},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3af97081-3512-4f38-97c3-34a90079347d","sequence":{"long":6165},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff4e13dc-ff87-441b-99b9-ecfce549151d","sequence":{"long":6166},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60fb7aee-0018-44ee-8164-b7c6aa1c85aa","sequence":{"long":6167},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e022ec76-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c12956f1-b66c-47d9-9920-c1337a317e22","sequence":{"long":6168},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":351},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6470f01-ac18-497f-adda-c40b38d4c615","sequence":{"long":6169},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":270},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0a6785c-66bc-454d-863c-1adfce71393e","sequence":{"long":6170},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1289","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1289","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30e08dee-0b24-4d92-8b3d-7f668539692c","sequence":{"long":6171},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a71063b8-0570-4348-912a-c2f20815a053","sequence":{"long":6172},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f8325c9-67b7-4a10-ae32-e4ea140e4321","sequence":{"long":6173},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1f4a232-9b37-489b-be95-90ab664451c5","sequence":{"long":6174},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ab57cf3a-f09d-cd5e-9df0-38f66ecdfb24"},"predicateObjectPath":{"string":"/usr/bin/netstat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917183902486,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"netstat -n -l","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b206bbc5-597d-47f9-a4df-9099a693544e","sequence":{"long":6175},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f54cb29b-68a2-41b6-abc5-476c862badf0","sequence":{"long":6176},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df620e96-2767-4847-b3b9-ec1954c38c23","sequence":{"long":6177},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b477b1b8-4f2e-4ff8-8c80-ae3898e7c60a","sequence":{"long":6178},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a86a24e1-1bec-429c-9a5e-5db6d94274fd","sequence":{"long":6179},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58f73837-ee6c-4fb9-b1bc-34a1ba4b3a86","sequence":{"long":6180},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78494585-2521-4a94-bcbc-ae1fa428894f","sequence":{"long":6181},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca168a1b-ca8e-4561-9b1e-91d66cc7b83a","sequence":{"long":6182},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":{"string":"/lib/libkvm.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a3d48c1-087c-46a0-85fe-48c7deddb780","sequence":{"long":6183},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c0d95d2-44e8-496c-aded-245e2b5509fc","sequence":{"long":6184},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c770b938-b18f-4f45-970d-84a2dfc5b5bd","sequence":{"long":6185},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2555904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67423a1d-b54c-474f-975a-36cf3af90667","sequence":{"long":6186},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2555904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00f01bd5-2b67-43ab-8192-59fc760335d8","sequence":{"long":6187},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2580480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e3c18d0-1841-4b69-b75c-edae8b049f79","sequence":{"long":6188},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2580480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"339101cd-dfa1-48fe-9198-9d30746ec1d4","sequence":{"long":6189},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffb4850b-f036-4d04-8e02-c071ecf25cd7","sequence":{"long":6190},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31fb250e-dbb1-428a-a09a-17c69ad34a44","sequence":{"long":6191},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15d9d699-5300-4aa1-9d8d-8040e7ae99db","sequence":{"long":6192},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":{"string":"/usr/lib/libmemstat.so.3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a5696ba-3358-4c79-afef-d97638e57007","sequence":{"long":6193},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"109529e7-a555-41af-969e-afd4a148f649","sequence":{"long":6194},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3f19b33-c98f-4008-8235-32efd12d5169","sequence":{"long":6195},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ed227c4-7d5c-4134-9a30-d67baa065f1b","sequence":{"long":6196},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"193f2ddc-286f-4124-afee-28401b769244","sequence":{"long":6197},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2641920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77ef128e-c438-4abb-9929-e6350167abb9","sequence":{"long":6198},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2641920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ccbd33d-bdce-4c52-a6b8-8d0098f42402","sequence":{"long":6199},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ded81a87-365d-46b5-9a3d-52b4f3a87072","sequence":{"long":6200},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb0f56f9-2146-48c1-a0c3-1391735591f9","sequence":{"long":6201},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d0d0743-95ff-4dde-bc9d-2b94bc5e9e28","sequence":{"long":6202},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":{"string":"/lib/libxo.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71225dac-4393-4f2c-8829-71fe7b8e36c8","sequence":{"long":6203},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af66bbfc-9a24-40c3-9877-c5032d2de470","sequence":{"long":6204},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f36fb057-cdb0-4ab1-ab27-3d8cdebb4810","sequence":{"long":6205},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf772a73-ba6b-4e8a-ae42-8d5755e65884","sequence":{"long":6206},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2379890c-3f80-4637-bea6-a943a3a05d22","sequence":{"long":6207},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c4415ca-c3fa-4fc3-b906-d8706f15b5db","sequence":{"long":6208},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4d77471-31c2-42e0-b629-adf35b0ba9eb","sequence":{"long":6209},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2777088},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c58a9888-7e3c-43aa-b2ed-2637549d52ce","sequence":{"long":6210},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2777088},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b711cce-e3c6-4d77-904c-a0a1dc6c0ea2","sequence":{"long":6211},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c636b6f7-7e6c-4dec-a0fb-6e038f20f8a5","sequence":{"long":6212},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b94a5fc-78d6-4b3f-8c66-643232758f6b","sequence":{"long":6213},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5902e35d-a591-4f9e-aa6d-102afcac832f","sequence":{"long":6214},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917183902486,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c10c6dd3-fcb0-47aa-8fd5-71b63aa4b0b6","sequence":{"long":6215},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d55b3705-1d45-426e-aad2-f2a1951598b9","sequence":{"long":6216},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29a4ed78-8731-4194-b996-c8b5c22c1481","sequence":{"long":6217},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2822144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46dd1ca3-92a9-4859-98b4-7eedda80f2c1","sequence":{"long":6218},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2822144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d017a4a-565d-4e31-b7d0-0ae1e0b3c31e","sequence":{"long":6219},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcff3b19-42f0-4ca3-9ed2-320b6251b185","sequence":{"long":6220},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a64d3db-b5ca-4648-98d7-7e20542c291c","sequence":{"long":6221},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be0b3572-c956-46a7-8334-607168338ba5","sequence":{"long":6222},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":{"string":"/usr/lib/libnetgraph.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a63e2d42-73af-4bfe-bf31-a1a2e25342e8","sequence":{"long":6223},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fc577e3-1d1f-4783-a044-d05d3cd80be6","sequence":{"long":6224},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb6ba757-721b-4da2-aa3d-6a395f0a3f24","sequence":{"long":6225},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2883584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdd4bfd7-183f-49f5-8864-b5fef0056191","sequence":{"long":6226},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2883584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"433d383b-0c69-4672-8af6-df24f3627bdc","sequence":{"long":6227},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2891776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41759cf6-4bd1-4d46-b2f7-4449058b26f3","sequence":{"long":6228},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2891776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7610b84-681f-4df3-8efd-3a8a90501225","sequence":{"long":6229},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2899968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea37ea8a-865a-4573-8227-a5bdefad9535","sequence":{"long":6230},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2899968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b4431f2-fb01-446f-b77c-bc3403427a98","sequence":{"long":6231},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb9e5a76-bb72-437b-877b-1798cdf38057","sequence":{"long":6232},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7172e055-d985-4082-b730-5e0cf0582230","sequence":{"long":6233},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dacc916-da6d-45fb-a744-c961bc451221","sequence":{"long":6234},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3908aa50-09ca-4809-99a9-4534f0a2b4ab","sequence":{"long":6235},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72674831-3760-488d-b58d-4d2170a194c3","sequence":{"long":6236},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d513f5b1-a48a-4eb7-91c9-40924b4c5ad8","sequence":{"long":6237},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ca82ddc-043f-48d5-a10f-e5eeeb564518","sequence":{"long":6238},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f9f68bf-37bd-4722-99f9-1bf9539f0ae5","sequence":{"long":6239},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea874284-7c98-49ad-8ff9-e376e4736ca1","sequence":{"long":6240},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1195b68a-adee-46f3-b0da-74f86e620c63","sequence":{"long":6241},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f931ad9c-dca5-4d05-85f3-a8e45e140a40","sequence":{"long":6242},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":{"string":"/lib/libelf.so.2"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11d2303b-417a-4fa9-9bbf-5165ef05370e","sequence":{"long":6243},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a190878-21a8-4948-8db1-2af81b252a78","sequence":{"long":6244},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"071e642a-a57d-400a-9940-36246e11f105","sequence":{"long":6245},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7077888},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb36e83a-4a27-4b5e-a47b-6b8b3b02f5c3","sequence":{"long":6246},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7077888},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3552e8a1-55da-4f7e-906f-5f355ab61099","sequence":{"long":6247},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7106560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16f66c49-7eaf-4789-a634-ec26dac5711c","sequence":{"long":6248},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7106560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29e5bd95-55ed-433d-b375-f208e789a8c2","sequence":{"long":6249},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7176192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"570a1d59-269e-44e5-8895-be92114734b0","sequence":{"long":6250},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7176192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30d59b63-c048-473d-90cb-41a34921ce7b","sequence":{"long":6251},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8fbb354-2af1-4f17-a69a-041dd335e79f","sequence":{"long":6252},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4105bf3b-6317-490f-9185-8b6ead35ff0e","sequence":{"long":6253},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94c15c9c-b3a8-48a7-9e7a-5bec245d1372","sequence":{"long":6254},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"395b8864-d158-45a9-9589-b73a7fae4f79","sequence":{"long":6255},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cff1dabf-c912-451f-96bc-cb4504453539","sequence":{"long":6256},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e762899c-550f-4bb5-b101-9d3816f01dcc","sequence":{"long":6257},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c21a631-42a5-44d9-86ff-aca89bd99daf","sequence":{"long":6258},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4f736e3-d531-4a5e-929c-63728a29f9a7","sequence":{"long":6259},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06bda7a2-ef8c-48a9-a581-b84dfa80649a","sequence":{"long":6260},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3089},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cfbc669-c4a8-45ae-945b-4327aed894a8","sequence":{"long":6261},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e023b7af-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a467e420-ceda-4054-ae34-a1365d9b7a7f","sequence":{"long":6262},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":322},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"961192c7-2f12-418f-b46a-5a6092872496","sequence":{"long":6263},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":303},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02374d3c-1904-439c-a1fc-55000020459a","sequence":{"long":6264},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1290","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1290","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a906be08-eece-4369-8877-ce7340978907","sequence":{"long":6265},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43de4445-2ea3-4f34-90d5-63863a918192","sequence":{"long":6266},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25ebe8b1-0c18-4dc7-a6d5-29df5818686a","sequence":{"long":6267},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42497621-8103-4036-82cc-609d45699823","sequence":{"long":6268},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de3a34c1-0b17-8152-970b-4c2cb281885f"},"predicateObjectPath":{"string":"/bin/cat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917194287948,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"cat /proc/cpuinfo","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb0b34c7-b408-4fb7-aece-ef97dab06df9","sequence":{"long":6269},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b2ca089-ec0d-4cc8-b5bd-9ddeca69d962","sequence":{"long":6270},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6644cf7b-303e-4e8e-9f99-d9360e5f55ed","sequence":{"long":6271},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9af4179e-2836-4f68-8b93-f2fa3ecd0654","sequence":{"long":6272},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7619eb5-8b6b-457d-a5ad-069bc914d4cf","sequence":{"long":6273},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a471d0e-6f42-4641-a202-df9b39cdde8f","sequence":{"long":6274},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87cbd3d2-324d-4ed6-bfe8-7887dde8c8e7","sequence":{"long":6275},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae25f6c8-b804-4a84-bd98-5c6086d1d1f0","sequence":{"long":6276},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"342e010d-5c35-4f11-ad9f-29bdcb0ed5d7","sequence":{"long":6277},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f41abfb-cd18-45fd-aa0b-0412156257c7","sequence":{"long":6278},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42334554-a6f0-4a21-8662-aa0009793112","sequence":{"long":6279},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27d933ab-ea40-47b1-9c1a-c3887bb5a15c","sequence":{"long":6280},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9473e5e1-883f-4c54-a261-067296ab38e0","sequence":{"long":6281},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d360142-5980-41f0-8bcb-fe73226a92c2","sequence":{"long":6282},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2d6f55a-cda8-4457-96d8-1802627258f7","sequence":{"long":6283},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd727778-bf42-498f-846d-5ad1e361fcbb","sequence":{"long":6284},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34b29a7d-c1ad-47b3-8326-1fa95f530a13","sequence":{"long":6285},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74116806-c031-4c22-8f75-80406ef0789b","sequence":{"long":6286},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1dfe898-77af-40ae-a055-4b2493c4f2f4","sequence":{"long":6287},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4edbd1ac-97f9-450c-b99b-fd680fe32b32","sequence":{"long":6288},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01111876-c2b3-4624-a12e-238c66837ac6","sequence":{"long":6289},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a6ff5d9-7005-4091-97fe-08324697647c","sequence":{"long":6290},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cd57862-92ee-4bf9-a6a3-eb845800fb41","sequence":{"long":6291},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32a868e5-efa2-411d-bb25-afe1ac9c1d0f","sequence":{"long":6292},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8241a2b1-5918-4195-865c-182a3af0f509","sequence":{"long":6293},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e024fd03-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83e5472d-73e5-4576-9742-34321b48626c","sequence":{"long":6294},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":289},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8cc2644-98bc-43fe-835c-18fa6cf1f8ab","sequence":{"long":6295},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":336},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b63be33e-145b-4607-82e6-c5816613e0f8","sequence":{"long":6296},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1291","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1291","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e36e0e5-3b69-41b6-8274-ec44bfda2b5b","sequence":{"long":6297},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"683183a9-927a-406c-b1a8-247798c05b17","sequence":{"long":6298},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ba083e0-c524-47c0-983d-1cbd2be4ab43","sequence":{"long":6299},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ef2913b-94fe-4ef0-928f-c082eeddfd5f","sequence":{"long":6300},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de3a34c1-0b17-8152-970b-4c2cb281885f"},"predicateObjectPath":{"string":"/bin/cat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917194287948,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"cat /etc/networks","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9486b367-6f2b-4d8f-9921-50329a06f9bc","sequence":{"long":6301},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58ea1ec9-b70a-483b-b9bc-c5c50cc4f592","sequence":{"long":6302},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d0338a0-176e-4ba1-a3c3-d801880e15c9","sequence":{"long":6303},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdb9b739-8ae5-48b3-b4ab-ae70da01ddeb","sequence":{"long":6304},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7496e0db-23e3-42b4-a36c-e946a9244efd","sequence":{"long":6305},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb128c82-1c24-48d4-a6e4-06dce41fc074","sequence":{"long":6306},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e567fc78-2552-449a-9808-319c6772fea0","sequence":{"long":6307},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34c431c7-d590-4e23-9349-ba1237b5016b","sequence":{"long":6308},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69a15a11-e620-4bee-b7e8-f48b59dc5651","sequence":{"long":6309},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b55ce307-c90e-49a1-91c8-d3df2cfeb952","sequence":{"long":6310},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1806b9ec-f6b6-4b42-b74a-a122e8684dc4","sequence":{"long":6311},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2712006a-20d8-4acd-993a-c8316d74ef02","sequence":{"long":6312},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4a713fd-4064-4c40-a239-fe901b3e7109","sequence":{"long":6313},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11174a03-2653-436a-80bc-3a65470d9218","sequence":{"long":6314},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b10d2288-bd3c-4f2f-8d21-f17f6350c96e","sequence":{"long":6315},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33aade2a-1e4c-4253-87f4-052e90947394","sequence":{"long":6316},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b177721-a851-4c3d-b189-174467f0bcba","sequence":{"long":6317},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b392aff7-3bc4-484b-83ee-22552c529a9e","sequence":{"long":6318},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"527fcbe8-e1e1-4208-837d-cd57d7527913","sequence":{"long":6319},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c709e9a-06e0-4309-89b1-eeb76e4e9d0e","sequence":{"long":6320},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":{"string":"/etc/networks"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ffa7c72-08e6-4d8e-bffd-cd38d2b33c6c","sequence":{"long":6321},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":310},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1fe6f8b-4f08-4a60-a948-5f7c1a4c105a","sequence":{"long":6322},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":310},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed27ca80-684e-4cba-b4e6-df4c4c3ad143","sequence":{"long":6323},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64a2e0e8-4368-4c6a-a0d6-743a1ccaec80","sequence":{"long":6324},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15d24eb8-2cd9-4ec7-a10c-2d9ea4275ed1","sequence":{"long":6325},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd1927c3-4248-440a-916c-f5901d124ead","sequence":{"long":6326},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02564b5-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61bdb195-9f31-4cb9-a720-918fd47918d3","sequence":{"long":6327},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":256},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"790e6c02-dcf8-4803-bd36-af7d9bb12df9","sequence":{"long":6328},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c634539-fe63-4d66-9cfc-f238c622e10c","sequence":{"long":6329},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1292","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1292","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96bf1ff6-7c38-4739-b93d-645a6d9bcd74","sequence":{"long":6330},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917194287948,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a56b98f4-d6c3-44d8-aff9-ab39c85071b5","sequence":{"long":6331},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43374ff4-96c0-419e-a7f1-08c60a1c577d","sequence":{"long":6332},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba1c2730-afe9-4fb3-a6ff-89da3fa3b31f","sequence":{"long":6333},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"542d495d-cfb1-a954-b1cf-f79fd4a9303e"},"predicateObjectPath":{"string":"/bin/ps"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917203895228,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"ps auxx","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81bbb8b4-359e-44a6-bc89-d12e6e962694","sequence":{"long":6334},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c298f85-7e05-4b3a-a07e-ce25db562810","sequence":{"long":6335},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edaa40e8-4d60-448a-9ff2-d2e6d37535fe","sequence":{"long":6336},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a836ef11-4988-49db-9f7c-e5602ffbd057","sequence":{"long":6337},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8208b662-e2e4-4bf6-8169-b758b96862b1","sequence":{"long":6338},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8f2cc3a-d404-4242-9ef9-e10e1da77430","sequence":{"long":6339},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52c67aad-a0ed-46e5-92b6-e0743cb744a1","sequence":{"long":6340},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69772184-a1f2-499c-8bef-b9da62e78641","sequence":{"long":6341},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":{"string":"/lib/libm.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7746ebb0-03fa-47db-a916-a61b495a6340","sequence":{"long":6342},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f48e4fab-40fe-490a-80c8-5ddfe8257b77","sequence":{"long":6343},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83ab87ab-2a41-4b8f-b2e7-f4d32a500965","sequence":{"long":6344},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3cf830d-bd25-439a-8d09-bd294dd5cc17","sequence":{"long":6345},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55cd8022-625e-4a62-8e95-428d25100e50","sequence":{"long":6346},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31616c2f-2ffb-4f34-9b64-19639848e50f","sequence":{"long":6347},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0f03d37-5e51-40e4-a0bc-daafd39dd730","sequence":{"long":6348},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87ba0b92-3899-40b0-9e7a-762fe480d37f","sequence":{"long":6349},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22feb7de-cbc2-4640-8ae3-3e74ee941f81","sequence":{"long":6350},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"780b2e5f-8028-47c5-95b4-3e695d2a13f9","sequence":{"long":6351},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":{"string":"/lib/libkvm.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f46b35e-8885-492a-bc9f-4f5e3e25ac01","sequence":{"long":6352},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a7965ba-07da-429d-b8f2-2324794e3cc1","sequence":{"long":6353},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3e81078-7d82-4091-8ff2-c6aa916a8a11","sequence":{"long":6354},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c618260-a371-49f2-be9b-73803ee5597a","sequence":{"long":6355},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5d07dad-8246-4dcd-8621-ac536b39da1b","sequence":{"long":6356},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69786826-aa52-430b-bf76-0eda4d6b0c1b","sequence":{"long":6357},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd48e76f-2cd7-417c-acbb-73c931720510","sequence":{"long":6358},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2699264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67b17762-0386-4fa8-bb01-23d72d66766c","sequence":{"long":6359},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2699264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96106593-10e2-422e-8d4c-528d31406f63","sequence":{"long":6360},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"558ea6e6-02e2-46ca-84a2-1a1836a22532","sequence":{"long":6361},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":{"string":"/lib/libjail.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd09708f-6ad7-4a76-86c8-c36d67c9b58a","sequence":{"long":6362},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e72cbf7a-b99c-41be-aa3f-ebde78da6219","sequence":{"long":6363},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcc8d89c-a107-43dc-b672-5f6e6c79d6b9","sequence":{"long":6364},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bedd5b0-63cd-42bb-b400-963d9d506df0","sequence":{"long":6365},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"701d77db-290b-46df-99e0-d1b1f276dfe8","sequence":{"long":6366},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f537e15-a2cc-4ba6-b925-002fe03d371b","sequence":{"long":6367},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fc72efb-f975-43e7-94e3-b3372fd5febd","sequence":{"long":6368},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2736128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70ef232b-5fdf-4397-9fc3-17ec3feab138","sequence":{"long":6369},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2736128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d036cd70-a5d0-4d82-a70d-453b573d0782","sequence":{"long":6370},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07af4211-108a-4104-9bae-4ede1817e58e","sequence":{"long":6371},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":{"string":"/lib/libxo.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d18d8e0-a410-4aba-847c-74d2841aa008","sequence":{"long":6372},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e8feede-0a4c-4475-b153-69e7f518ebfc","sequence":{"long":6373},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d2bdc48-289c-46ef-bc44-125a762c4767","sequence":{"long":6374},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2748416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ea69008-12f9-4d0d-b6fc-ae5a0b62fea0","sequence":{"long":6375},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2748416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"596c348a-1934-4fcb-9aaf-fbb80de2e686","sequence":{"long":6376},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2781184},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1189458e-6add-4d3c-8985-36693a676ce3","sequence":{"long":6377},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2781184},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"888925e0-029b-4d65-8903-70279fcd1fda","sequence":{"long":6378},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b86fbfb-c6f6-44d1-b093-85f31a4a4013","sequence":{"long":6379},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79536241-9478-477e-a125-bc2ce367a140","sequence":{"long":6380},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d074b1e-5cc9-4501-af85-9b3e7b4efd7d","sequence":{"long":6381},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0481573-0e95-4ccd-b08b-f7b0dcb9ce3a","sequence":{"long":6382},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf271319-5380-47b1-88be-8d51c27fd0bd","sequence":{"long":6383},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69538899-d807-42a8-bc1a-722f2593d493","sequence":{"long":6384},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2879488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"778afdcf-f4c0-4966-8e63-bb1b4bfda3ce","sequence":{"long":6385},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2879488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da24a5df-12f6-498f-bde8-2697af017dee","sequence":{"long":6386},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0731a8c4-895e-4fe4-b3c0-8a5ffa5148ba","sequence":{"long":6387},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d86d06e5-c8ad-436e-82a6-2f605789b3c5","sequence":{"long":6388},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4726784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4483486-58d0-4c97-b6f9-beca73cfa1b2","sequence":{"long":6389},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4726784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"129c4395-2a61-48d1-be57-d11814187f96","sequence":{"long":6390},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a5c5db7-a67a-4a2a-a265-5ea77542ca3f","sequence":{"long":6391},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":{"string":"/lib/libelf.so.2"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1472938-1aed-4722-9208-12770e278f15","sequence":{"long":6392},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3851579-c051-479e-813e-31e37fbffdd3","sequence":{"long":6393},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9de7980e-dc53-409d-b463-62b2cfefc383","sequence":{"long":6394},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7045120},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a860382-9482-441d-a060-4f8478fbe26b","sequence":{"long":6395},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7045120},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5ff4239-d06f-455a-82f6-47759b808219","sequence":{"long":6396},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7073792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c26215e-65d6-4dcf-8286-198bda1311a7","sequence":{"long":6397},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7073792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5368b184-cff6-4b35-b5d1-165be8e8c314","sequence":{"long":6398},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7143424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"977f25f9-1d1b-45f3-a03e-6f1fb43dd552","sequence":{"long":6399},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7143424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1b71b94-f6a6-4925-9e5e-f2efc6cbb588","sequence":{"long":6400},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a678cb4f-5ff9-4233-b342-80a018b44934","sequence":{"long":6401},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ec44bd3-5b92-4734-9b61-348cd33138c1","sequence":{"long":6402},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b368dd8f-fce1-4366-a86f-e004b5eeed6f","sequence":{"long":6403},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41562dfc-24c6-4cbb-b54c-130de2f7e5a6","sequence":{"long":6404},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a01e4e3-d033-4314-bab6-e4eb535aa50b","sequence":{"long":6405},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84a3d6dc-9086-464a-8d1c-39ee3b212478","sequence":{"long":6406},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7184384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb60b980-2226-4184-8d67-0a90d58328da","sequence":{"long":6407},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7184384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a928df3-1aa0-4396-a1fa-b8e841cc6783","sequence":{"long":6408},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7229440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4eb6a51-e9c4-4abc-a42d-8ffc80cfa5ed","sequence":{"long":6409},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7229440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d152335-905d-4164-aa37-9a94226a9d30","sequence":{"long":6410},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f682d5c8-10a1-44f7-bb7f-280caa87e369","sequence":{"long":6411},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca914582-c450-47ba-b7ba-35fe937d39c4","sequence":{"long":6412},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79319282-77c6-43ce-99c7-0b6606cb2939","sequence":{"long":6413},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec0d39a7-3170-40b8-9b9e-14f95af13b30","sequence":{"long":6414},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6d7bf76-f355-44e9-a5a8-36adc3685377","sequence":{"long":6415},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6a30697-aac1-4d63-a7c2-87b0e0bec039","sequence":{"long":6416},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00499d2e-3ae9-43ac-9f17-dc65b213e441","sequence":{"long":6417},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d99c233d-4d53-48ec-9a84-5e8068441beb","sequence":{"long":6418},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38797472-eabf-41de-b555-c9afa69d69c7","sequence":{"long":6419},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d35c3dd2-4997-4bef-87fd-b92c6042eb42","sequence":{"long":6420},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"4","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9a37f7e-d292-4cbd-a353-1233cb82dccd","sequence":{"long":6421},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c567379-a8bd-4c9b-8e40-a16c788451f4","sequence":{"long":6422},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e511d3bc-719c-4a5f-8397-2ac6b7455ada","sequence":{"long":6423},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ee88aad-d2aa-4c92-9818-744ec8485bde","sequence":{"long":6424},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a51557a-7c1c-4ab2-ba5c-7db153d569bc","sequence":{"long":6425},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":{"string":"/etc/pwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dc7e319-c156-43bf-b091-a063c1fcf697","sequence":{"long":6426},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b7e04e1-1ad0-4af6-902a-232060523170","sequence":{"long":6427},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bec46ab1-f00c-4ea0-95fd-6949c3c3d6d6","sequence":{"long":6428},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bba8fbd0-60cf-4384-8002-46c98bfb9b38","sequence":{"long":6429},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/UTC"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"924a03c1-807c-42a4-b588-a66de83e887d","sequence":{"long":6430},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":118},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bfeecd4-512b-4334-8c30-8bd6221904ea","sequence":{"long":6431},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65e3d520-ef7a-428c-8a5b-8d61e0feca87","sequence":{"long":6432},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/posixrules"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"6100"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4e6ee22-7964-4726-b42e-b43a39869cae","sequence":{"long":6433},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":3519},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcbad141-e935-4058-b7ec-e41dc84a7859","sequence":{"long":6434},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6760b730-b52c-43e5-a55c-6d44cfa186b2","sequence":{"long":6435},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2c78ea3-f2aa-4a57-a863-7a904767ae5c","sequence":{"long":6436},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82f19acd-3ec7-446e-a1b4-689326a5322a","sequence":{"long":6437},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"565190da-8505-4dbc-b91b-822ba2ed91e1","sequence":{"long":6438},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73c6addc-b164-4310-a645-88b55cd5e5f5","sequence":{"long":6439},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9aa678d-eb9c-4860-8c38-5e20a7a24140","sequence":{"long":6440},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"059fc871-673c-4dab-83c7-85634350e580","sequence":{"long":6441},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4380},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5adeea77-fc78-41fc-9a54-60cd7193e82f","sequence":{"long":6442},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e025c619-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89beb06f-2093-42a4-9a1f-88e306f44247","sequence":{"long":6443},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":233},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"1974e148-493a-5dde-b1ff-0c3352cfe2f9","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"e026d50d-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"e026d50e-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3871ae32-791b-4457-9d7a-bb5010a6cedb","sequence":{"long":6444},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1974e148-493a-5dde-b1ff-0c3352cfe2f9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa206327-5876-47ba-97f6-b90510e02908","sequence":{"long":6445},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":423},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3a81397-1a3d-4acb-bb54-7c57a4a69847","sequence":{"long":6446},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026da24-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1293","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1293","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"baf2b458-690a-4098-b61d-26f4f394ec09","sequence":{"long":6447},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1294","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1294","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ce21fed-fe96-431f-a07f-c7619f4d31c0","sequence":{"long":6448},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e026da24-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a1d742b-2850-4b1a-9fe6-5e75e89db5c3","sequence":{"long":6449},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f188e80b-fd1a-4e19-b471-c9e9761b96e1","sequence":{"long":6450},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e026da24-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026d50e-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7df845f-46e7-4938-aecf-5458d5269494","sequence":{"long":6451},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e026da24-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026da24-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af2789d2-38fc-4a4f-a97f-5e2ee71ee0f6","sequence":{"long":6452},"type":"EVENT_EXECUTE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3f4e2dec-9008-5a56-8890-4814765aa0ba"},"predicateObjectPath":{"string":"/usr/local/bin/sudo"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917203895228,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sudo -S ls","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7362ff8e-90d0-427a-8866-ed71d2c39516","sequence":{"long":6453},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87f1d6a6-c514-4ff2-851b-baad0325e882","sequence":{"long":6454},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d0fb788-8603-4f04-a037-f330eef7e710","sequence":{"long":6455},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917203895228,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9e6369c-1eb5-44f6-bc01-32ca8558e0be","sequence":{"long":6456},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e440567-aa27-4335-9892-183e03935889","sequence":{"long":6457},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbb8f2b1-1cd5-4b6c-a982-ea63312bfc4e","sequence":{"long":6458},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a65bfde9-a096-421d-91f4-69f6609bbdba","sequence":{"long":6459},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d1cb075-5239-4060-988d-4882104101b4","sequence":{"long":6460},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f5f90f7-198d-4cbf-8ca6-e31813bb0e58","sequence":{"long":6461},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb282155-bcf4-4025-9521-e17d388d2cdd","sequence":{"long":6462},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c896e42-4dfc-4d86-9359-a4306f42514f","sequence":{"long":6463},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2510848},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53296124-b30e-44f5-86c7-cf3c4f2919f8","sequence":{"long":6464},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2510848},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"382ac7b9-a9ea-4ee8-807a-ed83b6d31796","sequence":{"long":6465},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38b836aa-229a-4020-bd9e-708acfceb191","sequence":{"long":6466},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b39cc02-e079-42fe-9684-a6e8e37e1b9b","sequence":{"long":6467},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2588672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58579721-c1d3-4cfe-a571-140c93335572","sequence":{"long":6468},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2588672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"692633e5-c304-40ca-abce-1f09ec1f6ec3","sequence":{"long":6469},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"426f10d9-0ddc-415a-a258-deb541faf510","sequence":{"long":6470},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":{"string":"/usr/local/libexec/sudo/libsudo_util.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30b78c56-0e34-4a74-880d-2da630ae093a","sequence":{"long":6471},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"870191a4-7de1-4ac5-bd26-14fe6a629967","sequence":{"long":6472},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"816f7c06-3bbc-4e93-8489-cfab77847f58","sequence":{"long":6473},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83c252bb-dd9f-4577-9698-8fc537a4afef","sequence":{"long":6474},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a4d4cee-5b0a-425a-a73d-6543cb5a978e","sequence":{"long":6475},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2637824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21032f11-b84e-4f53-bc7e-1d9f5b29da5d","sequence":{"long":6476},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2637824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6f3c684-d038-4838-8d3c-e32fe01b6760","sequence":{"long":6477},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1a2edd5-e603-49cf-9433-dbbfb4829e60","sequence":{"long":6478},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a01d5542-969e-45e9-967c-7ee1294a9e19","sequence":{"long":6479},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91986391-e979-4f92-b4f3-ae8b67cbd7f7","sequence":{"long":6480},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a112823d-3996-4622-9015-bb3c35e7a918","sequence":{"long":6481},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fb83b12-6510-479c-825d-049463af66a7","sequence":{"long":6482},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"558fa9e3-4d09-448d-9bb4-c32168b6ebc6","sequence":{"long":6483},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2703360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c3a6b50-7ed1-4902-a901-f67da6f22783","sequence":{"long":6484},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2703360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"caff7659-777b-4f7b-a14e-db4e0c8fe54a","sequence":{"long":6485},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8e23c57-9084-467e-a39c-8091dbbe897c","sequence":{"long":6486},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f084a640-19cc-4461-8306-463bd48bf7e8","sequence":{"long":6487},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2744320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34033676-c80f-490b-bc5c-e8da9aba6883","sequence":{"long":6488},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2744320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29454454-3b2f-4a05-86fe-0a85a833bb43","sequence":{"long":6489},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f302fec8-0fc9-4dcc-8fc9-731cb8cba9e9","sequence":{"long":6490},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7a6c9c2-6890-448a-a015-c7aa68c876a9","sequence":{"long":6491},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70840f7d-b863-4d5c-a514-e793d8b71387","sequence":{"long":6492},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0f422d2-9fd5-4798-b8bc-dc79a51eb4fe","sequence":{"long":6493},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2756608},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e398b98-3266-4170-bd9b-34c0076c2bfd","sequence":{"long":6494},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2756608},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca6c6be8-6c04-4f96-81b6-7fdd574f8935","sequence":{"long":6495},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3272704},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8290fc80-84e1-49a1-9c5e-9144ac4c7f15","sequence":{"long":6496},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3272704},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76e05e52-9c4f-4a59-b2d2-1342383167a1","sequence":{"long":6497},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4603904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc66b614-e1fd-4a5e-a7d7-1db0871dcb29","sequence":{"long":6498},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4603904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0098bbb-eab2-40a3-bb10-6adbce2a52fc","sequence":{"long":6499},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ec1e878-5968-49fa-a6f2-d31e1b252efc","sequence":{"long":6500},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ce19ba2-d80d-4bfb-9e79-b6d454b1e491","sequence":{"long":6501},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93bcba7e-3dac-49eb-bc35-28499c08f5bc","sequence":{"long":6502},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f884efa5-009d-40fb-8f81-583f1990c963","sequence":{"long":6503},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e707227f-e65f-4f59-af25-ebc112a4d4d2","sequence":{"long":6504},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5092c5f3-d7a3-4964-bfc5-ed57c094a737","sequence":{"long":6505},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80ffbff2-8272-40f8-b5a0-012b32648b2c","sequence":{"long":6506},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e55aaf6d-e3eb-4fb3-991b-fb3606ff2eef","sequence":{"long":6507},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b056cb4-a331-489f-b745-d08adee2d8d9","sequence":{"long":6508},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/UTC"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71079d3f-1f94-4f0f-bf65-864ebf80f712","sequence":{"long":6509},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":118},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5b6f362-5a03-4c26-a08f-e18170627485","sequence":{"long":6510},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47651557-10e0-4066-91b7-f8e4d3a589a8","sequence":{"long":6511},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/posixrules"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"6100"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d60fcad-4bc2-4710-a184-8172157f85ae","sequence":{"long":6512},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":3519},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6db186cd-e12f-40e1-b437-51e7dd1c469e","sequence":{"long":6513},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ebb3522-f600-4d3f-bbc1-1fa60ee81ffa","sequence":{"long":6514},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d0997fa-2141-4c2b-a8fb-28699c33636a","sequence":{"long":6515},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3811a5aa-8827-4e99-9fee-63a9f998815a","sequence":{"long":6516},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afa81b47-56fa-4497-8c65-b733c2486ca1","sequence":{"long":6517},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3860e8b-7845-4577-863d-09f399cb1841","sequence":{"long":6518},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8848ebf1-3347-49fa-9281-7dedf949a8f0","sequence":{"long":6519},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fb98c4a-e64b-4e2e-a7bb-fa8d7c4d6998","sequence":{"long":6520},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9aff5d59-84b6-453a-89e0-b093df95f5b0","sequence":{"long":6521},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02a52406-7bc6-440e-af14-fe087732f2a0","sequence":{"long":6522},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca13af91-13dc-4ed9-b589-5bd193b42692","sequence":{"long":6523},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a17f3f7f-22cc-4652-af26-d6366f2cc885","sequence":{"long":6524},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88d9da49-b238-4848-9b4f-2cc4f9c5c86c","sequence":{"long":6525},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bad9508a-82ee-40df-a8af-d900c8c7b964","sequence":{"long":6526},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2dd3833-5620-4f19-a09e-2136d2089298","sequence":{"long":6527},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24f3d333-a0b0-41c1-8760-45095a955288","sequence":{"long":6528},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b06acaa-db70-402d-a694-a03c13382071","sequence":{"long":6529},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d25df56-23db-404c-ba05-bb74f5c55add","sequence":{"long":6530},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c93fe54-0b53-4759-9c16-f258e0279fbe","sequence":{"long":6531},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6db5eb8a-5329-4efc-9110-e2feec8137a1","sequence":{"long":6532},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43249d45-5810-4ad0-8b01-968381f65f48","sequence":{"long":6533},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":{"string":"/usr/local/libexec/sudo/sudoers.so"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"188d5fd9-d4b1-4784-a160-e9e914c40bea","sequence":{"long":6534},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3a21dc5-bc78-4bd2-a962-52a85e546038","sequence":{"long":6535},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71de12e9-fe29-4892-9601-0e980d1b0a40","sequence":{"long":6536},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7319552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6701aacb-4071-4eaa-9105-4373704d9e1c","sequence":{"long":6537},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7319552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab4373e7-44c3-425c-86a7-2f6013628459","sequence":{"long":6538},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7434240},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90fb5234-402a-4035-9546-1b37cec8567e","sequence":{"long":6539},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7434240},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0578bb44-61c1-47b6-8da4-19d44a6d255f","sequence":{"long":6540},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7647232},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a03a096b-9bc4-4579-adeb-5488e2bbe021","sequence":{"long":6541},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7647232},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc140d1f-b27a-4785-a560-d829822d563d","sequence":{"long":6542},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e576d7a4-1b0c-4953-9b24-0cb145ba98f1","sequence":{"long":6543},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":{"string":"/usr/lib/libbsm.so.3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2412d69a-590f-472f-8b0a-51bc20867f33","sequence":{"long":6544},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65e26c74-e075-4657-a996-42fc93e94d2e","sequence":{"long":6545},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"576fd962-9316-44e2-898b-e2857286e580","sequence":{"long":6546},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7667712},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e770b97-6f86-47a9-ae78-4d4b283798a4","sequence":{"long":6547},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7667712},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0279758f-b226-4bc3-bb36-8311375fd64e","sequence":{"long":6548},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7708672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d298a2ca-f100-4dc7-b6da-dfa06b310f76","sequence":{"long":6549},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7708672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82a7f3e1-d8eb-41ab-a10b-8b5718c8bfad","sequence":{"long":6550},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7778304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0094c468-a65e-46d4-bf79-d09be782ad12","sequence":{"long":6551},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917213988194,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7778304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"680ffbf1-722c-4fd9-8936-715fa161c7f0","sequence":{"long":6552},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f3f6915-07c1-44e3-8877-16a79cac043f","sequence":{"long":6553},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":{"string":"/usr/lib/libpam.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55a5e238-a3d2-4f35-943a-d3b2883cec6f","sequence":{"long":6554},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ee74995-87ec-492f-a8e3-16baabb0cd7c","sequence":{"long":6555},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b69d158-c1ca-4023-a203-1c5de832d09a","sequence":{"long":6556},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7790592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84e65ac0-2826-486d-bec6-65628d51c755","sequence":{"long":6557},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7790592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38b10035-cd9b-4624-9ec2-d9964d2bee29","sequence":{"long":6558},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7815168},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7faf2dd-3238-458a-bcf4-08f65912f8a5","sequence":{"long":6559},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7815168},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d5c0edd-946d-4aba-b53c-e50ca05928de","sequence":{"long":6560},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7843840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aab25908-5522-4a76-8af1-9408bff27083","sequence":{"long":6561},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7843840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80d31004-a1eb-4221-ab56-9aeda67cca5e","sequence":{"long":6562},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abff050f-4c4c-4e1a-9b98-f93dbdd62b30","sequence":{"long":6563},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":{"string":"/lib/libz.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27020ac6-6d97-4edf-ae11-5f4f8e042fd8","sequence":{"long":6564},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59fb1b00-6f39-418b-a9fd-99aec188d35f","sequence":{"long":6565},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bc6d2db-6ef2-4f73-b119-940bf1a67c67","sequence":{"long":6566},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7856128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2867daf-6af4-45bb-b8cd-d84568b1834a","sequence":{"long":6567},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7856128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d16a71b0-89df-4405-9a49-60b3672744b9","sequence":{"long":6568},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7888896},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a5c651d-1499-4d17-8e63-20282143c9d4","sequence":{"long":6569},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7888896},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55fadbe5-a2f9-4e3c-a3f7-6d082a1675b1","sequence":{"long":6570},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7958528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2abfea21-c601-4ac2-9ee7-367324a7b0fa","sequence":{"long":6571},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7958528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"511acaa3-e5d6-4270-bb86-157bcff45b6b","sequence":{"long":6572},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95a31523-ba47-4e82-9706-348786a85fed","sequence":{"long":6573},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fee1f8f0-8463-4cdd-ab05-59f57c9435e7","sequence":{"long":6574},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f78f2de8-7ae7-4efa-b3a0-5e79b6fa10cd","sequence":{"long":6575},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09c5fd6c-b7af-409b-af4e-07a32efb40db","sequence":{"long":6576},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c55fab5b-8081-4c3a-b05c-b38b54665579","sequence":{"long":6577},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"0","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4eb7abe8-3c66-4a0e-bf08-b2cf1e79ec7a","sequence":{"long":6578},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06e3420d-85cb-4c93-948c-6683b517c2af","sequence":{"long":6579},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d73c63a-3a3b-43da-bea1-edad9a0b6976","sequence":{"long":6580},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":{"string":"/usr/local/etc/sudoers"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a51ae218-9b13-417d-a108-74e81768f256","sequence":{"long":6581},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":3678},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f326557-8d6c-4242-8f7d-c9b099f174cd","sequence":{"long":6582},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":3678},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0526db56-e7ff-4ab1-94eb-520bdb85f37d","sequence":{"long":6583},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"315679a3-0270-459b-88eb-1c0d50f29b2b","sequence":{"long":6584},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"0","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"caa026e4-64d1-4dd4-9247-b0308ca16714","sequence":{"long":6585},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"-1","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33e7af5f-53d4-4bbb-bb49-ab8583600dbe","sequence":{"long":6586},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"0","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d6cbc5a-32f4-48c0-90c1-e8393e9dad80","sequence":{"long":6587},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee625eb9-42cb-43be-b970-9daeddba2e43","sequence":{"long":6588},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"382d9507-c88d-7556-8dc8-bb47e67533c4"},"predicateObjectPath":{"string":"/usr/local/etc/sudoers.d"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00ffff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf19f6f4-3c68-4387-9e90-82d3e887bd4f","sequence":{"long":6589},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"382d9507-c88d-7556-8dc8-bb47e67533c4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99a73bf5-7e28-4308-b5cf-98c3a76c3274","sequence":{"long":6590},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0811aa3-9095-4d1e-83b1-4cdaeb31db67","sequence":{"long":6591},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"1003","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c65bc1ee-ff0f-441d-91d4-ddc5dc2f4255","sequence":{"long":6592},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f6970fc-802b-479c-ab3a-ebbaa86a86be","sequence":{"long":6593},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0030758-3f99-4d0c-8c4e-82d714ec89ff","sequence":{"long":6594},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd863744-2767-460f-a23f-e07f06c8230b","sequence":{"long":6595},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e225385e-d70d-44c9-8484-1837ce25cc18","sequence":{"long":6596},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e924d93a-49bb-42ea-a925-a6e7b839115c","sequence":{"long":6597},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bebc597-224e-49a1-9bc0-fde79226c470","sequence":{"long":6598},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2face2b-ff19-4c90-be78-239cb14e76e7","sequence":{"long":6599},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b56b5d1e-42cd-4db3-89b0-c13120a8f6dc","sequence":{"long":6600},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25d1326f-24b5-45fc-b5a7-00fb01e8391a","sequence":{"long":6601},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee3b94bf-ba24-407d-a38e-db72645380bd","sequence":{"long":6602},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c14a974-8d69-4ce7-b2d7-a6984d235606","sequence":{"long":6603},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d5851f8-43cb-49eb-8d78-cce79f6259cd","sequence":{"long":6604},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"296e9702-3f8b-423e-a6e3-df9f6f800e06","sequence":{"long":6605},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4f6b20b-cf5e-4834-93b5-90130beaa5ef","sequence":{"long":6606},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46c0d3b8-fd1f-4af0-8ce4-3ee5cf8dc400","sequence":{"long":6607},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bdc3637-995b-4cad-a6a4-e47580fab16f","sequence":{"long":6608},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8611ee21-12b8-45c0-9177-5a0b646c74b4","sequence":{"long":6609},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":{"string":"/usr/local/etc/pam.d/sudo"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c7a37a7-fd59-42e5-9ae1-f95da78878bf","sequence":{"long":6610},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":323},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73ba6c33-7391-482b-89db-c339c7fb29cf","sequence":{"long":6611},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":{"string":"/etc/pam.d/system"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f033a00f-54e6-4659-8f33-37610afd6bb6","sequence":{"long":6612},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":648},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8429bc02-1f78-4595-8e26-eebccbaf653c","sequence":{"long":6613},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":{"string":"/usr/lib/pam_opie.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0acf98b6-c868-4d60-8090-707f14201e31","sequence":{"long":6614},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef598d2f-661a-46b1-8d4a-58123171e451","sequence":{"long":6615},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6a73091-8da5-4f86-bfd3-de11c4d34daf","sequence":{"long":6616},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8c947b8-ee6b-4723-b0ff-0a7b05c8d750","sequence":{"long":6617},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8204288},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2f50274-4e86-4e25-864c-052910274545","sequence":{"long":6618},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8204288},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1621bcf0-b70a-4658-b99a-ceb23d77f3aa","sequence":{"long":6619},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8208384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83c29d58-3522-402b-8df9-1075f339efa5","sequence":{"long":6620},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8208384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c1e86be-13ae-461d-92a6-2a615b679c47","sequence":{"long":6621},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8212480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a626a511-3207-4e89-82e5-97fb6086a477","sequence":{"long":6622},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8212480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d1d9395-55f6-445e-be88-7810fd83b822","sequence":{"long":6623},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d17dcc64-70a7-4653-9f97-20d19ec7e32c","sequence":{"long":6624},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":{"string":"/usr/lib/libopie.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6420a5f8-29e3-4430-b27a-04e8fd25898f","sequence":{"long":6625},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b068720-1bbc-4240-bfed-918fa3b689f9","sequence":{"long":6626},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b59b5ed-8c80-4d76-bdcb-e300d9764cc6","sequence":{"long":6627},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8220672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"689fc616-6b28-48c4-a6a7-b20eb7b1598d","sequence":{"long":6628},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8220672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6e270ed-1f5f-4b16-afc4-a477f4438cf0","sequence":{"long":6629},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8232960},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"813d1903-9023-48bb-bba3-295234d78fd8","sequence":{"long":6630},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8232960},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4ea2b9d-35f0-42cc-bbf7-d9194388e4d2","sequence":{"long":6631},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8249344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"968c6698-f6db-4d82-aa96-f9ce03c405b2","sequence":{"long":6632},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917224096658,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8249344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1b5c893-a1e8-435e-9cb5-22f845968a30","sequence":{"long":6633},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"342e1612-e70e-4bc6-ab9c-c2e3937ed9cc","sequence":{"long":6634},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":{"string":"/lib/libmd.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d43fcb09-0234-4953-92b1-c389e3b59cea","sequence":{"long":6635},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d8dd49b-9a48-4517-90bd-92debf2c0f99","sequence":{"long":6636},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6bf7061-9290-4d1e-9703-7f3d0a28a76d","sequence":{"long":6637},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14680064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"679f9280-aeff-4210-8917-abd0c3f5cafa","sequence":{"long":6638},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14680064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6725fe1-8409-4b6f-a1a1-1c937235b7dd","sequence":{"long":6639},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14712832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bac83cd-edda-4dc3-9ab5-c2b8757efb8f","sequence":{"long":6640},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14712832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e077dad-e1fe-44ce-ae3a-b53127449db7","sequence":{"long":6641},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14794752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82768fb0-3d7a-4b01-b212-d134d70b7852","sequence":{"long":6642},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14794752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"301cc39e-5eb3-4564-a75a-9aed3b643d53","sequence":{"long":6643},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3016fca8-712b-47c2-973e-67998bf25b89","sequence":{"long":6644},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cddab20a-b762-4083-8ca2-c9b18842c845","sequence":{"long":6645},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"864a5759-0178-4798-bb9c-ed6e058e81fd","sequence":{"long":6646},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6ed8c18-f574-4a7c-b503-a51f719ad0a0","sequence":{"long":6647},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5afaf6b6-4b4f-4931-8a5b-d71218244aaa","sequence":{"long":6648},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":{"string":"/usr/lib/pam_opieaccess.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bc09005-30f4-4359-9f46-800f002abd39","sequence":{"long":6649},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6b40440-fba4-42f1-94e8-cc87c6c9c11c","sequence":{"long":6650},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cb69809-9fce-4aee-8346-a4ec235bf649","sequence":{"long":6651},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c89bda5d-bdc1-4309-bea6-49486be7dbe8","sequence":{"long":6652},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8269824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63cb4be6-f09a-41d4-bd22-c347ca59bf63","sequence":{"long":6653},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8269824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc44b42d-09db-44f0-8a19-138f09756903","sequence":{"long":6654},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8273920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f7a4c23-4a38-4dc1-9787-f636506a0777","sequence":{"long":6655},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8273920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1b0f674-8be0-4077-8130-dce37a44e2ef","sequence":{"long":6656},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8278016},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd6bc37b-a72b-452e-9f5a-a60bb10ca85b","sequence":{"long":6657},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8278016},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f87725d-d38b-4e93-bdc2-fcc5783411bc","sequence":{"long":6658},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62517956-73c8-42e5-ad11-b748393f85a1","sequence":{"long":6659},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b13dc2be-5748-47e5-82f2-951a5a9336bc","sequence":{"long":6660},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afa84e72-feaa-4c2c-83ad-8bbe66c6b086","sequence":{"long":6661},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5d9575e-8d82-4e37-84f9-cbebb7641a80","sequence":{"long":6662},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"031586fc-8d6c-4b47-95c0-b770159fd99b","sequence":{"long":6663},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b93489b6-4db3-469a-aa9b-aaf86fd400b4","sequence":{"long":6664},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e50d862d-6149-4068-bfe3-89ff27dddbef","sequence":{"long":6665},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8286208},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a188557-246a-4dd0-9dd9-f2fea3cd8a4f","sequence":{"long":6666},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8286208},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c50376f6-d354-44cf-b474-90de0c478e10","sequence":{"long":6667},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8294400},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91024173-663f-4031-b939-8bd259969509","sequence":{"long":6668},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8294400},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a745106f-4b40-470c-b529-4efad39f7a56","sequence":{"long":6669},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8302592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8f8e992-92e5-4973-9563-5623ae9eb6ca","sequence":{"long":6670},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8302592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf160a3d-ebac-4ed9-8fa0-62584de35172","sequence":{"long":6671},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"837a0990-2d12-4706-8316-a83e863e6cf3","sequence":{"long":6672},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":{"string":"/lib/libcrypt.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11d7bd7d-5400-4bb2-ae1f-1ec4c74ba724","sequence":{"long":6673},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47ac7dcc-d3e6-4c88-a08b-c066d4696902","sequence":{"long":6674},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1572ec6c-c481-4d2a-9e0a-7a991b79ec87","sequence":{"long":6675},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14938112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32612491-b815-4de6-91ee-ac2f79974b8a","sequence":{"long":6676},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14938112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52affe8d-3096-4bfd-b7d5-1c326d8a7022","sequence":{"long":6677},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14954496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e69050d-c922-42a9-9603-33f070abcdb7","sequence":{"long":6678},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14954496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ebe8b92-a3cd-4476-b322-00ae2f4814ab","sequence":{"long":6679},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14995456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e37e7884-bdec-4c38-aca5-5e4067e62677","sequence":{"long":6680},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14995456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"773436ed-0285-4b31-bea3-5de4e7410c06","sequence":{"long":6681},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e2a6ecd-2d68-4a4c-bad5-a77edb7c7a86","sequence":{"long":6682},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":{"string":"/usr/lib/libypclnt.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c536ada7-17b5-4b6f-9f3f-1c89b47d69d1","sequence":{"long":6683},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73da9743-7e97-4298-9435-f769c747315a","sequence":{"long":6684},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63e7ca87-62a8-4bb9-96d0-6e5d7d17b88c","sequence":{"long":6685},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8310784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6123634f-b446-401a-b550-ddeec81d2bdb","sequence":{"long":6686},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8310784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78389e32-2015-4663-ba64-f90a8d897a1f","sequence":{"long":6687},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8323072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"828bb6db-ed2a-4e7e-9390-67de8542280d","sequence":{"long":6688},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8323072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e659ca90-639b-4e86-9e21-009732c603e7","sequence":{"long":6689},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8331264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"674c8f06-6528-457e-a38e-d6b9f1530686","sequence":{"long":6690},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8331264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fecaeaa1-388e-4f52-9601-1a05104a8b2d","sequence":{"long":6691},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4b1acbf-47ad-4258-b079-e1cf1c6df10a","sequence":{"long":6692},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a89f7b7-c866-4499-a956-6098c4396856","sequence":{"long":6693},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"381c7393-0630-48b8-a112-2532d1aee37e","sequence":{"long":6694},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd222e3f-72dc-4778-8af4-b360d6cbc985","sequence":{"long":6695},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce88935d-fa1c-486e-a44f-fffec72f0e87","sequence":{"long":6696},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1f9f5a9-1fb4-4dd1-b9a0-b49bf554ba3d","sequence":{"long":6697},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3281635-e6d5-44f3-8bb3-524d2bbf949d","sequence":{"long":6698},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":{"string":"/etc/pam.d/system"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e718cfdf-8253-40a6-8f8e-7544bea8fcfd","sequence":{"long":6699},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":648},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f0c5351-8f2f-43b0-9959-58dee55c701e","sequence":{"long":6700},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":{"string":"/usr/lib/pam_login_access.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06c89e5b-e995-4bff-9fe6-fd40440ff232","sequence":{"long":6701},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"630c5ef6-372c-4fa4-af4f-37aec5913dc1","sequence":{"long":6702},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45bdc9f8-6c25-4a39-8ea0-00c4a8009318","sequence":{"long":6703},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14681f40-3fd5-4b5f-bfa7-03b77b43a759","sequence":{"long":6704},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8343552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48701999-e49c-4367-84b2-9c01060de6d7","sequence":{"long":6705},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8343552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a17ba60-4ceb-4a55-8413-5b3ac8b9fe1d","sequence":{"long":6706},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8347648},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c99479ad-7835-482b-923f-4795724da524","sequence":{"long":6707},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8347648},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f87fa59-6210-46fc-a378-2b7ff2676f0d","sequence":{"long":6708},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8351744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"815f5b8a-21fa-4353-b6e2-e8300fef0724","sequence":{"long":6709},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8351744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"918f9e6a-e9fb-4506-9dc4-863b35dbe4e4","sequence":{"long":6710},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"785edc9d-7290-4a2f-913f-4a4127e75924","sequence":{"long":6711},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"422e0e59-5fa2-4d95-8d33-bd0cd09f271e","sequence":{"long":6712},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10d16cb2-b707-4061-805e-45d71640b8e5","sequence":{"long":6713},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"180cd0d9-8cd9-47bd-b91f-d0d22d9dad14","sequence":{"long":6714},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b3c1e81-5d1b-4630-8a62-3ac17a6d44d4","sequence":{"long":6715},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8db1688-6bcc-4936-b6cc-e8bee4499ce4","sequence":{"long":6716},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd1c49a6-4b6f-4121-b7d4-b76e1629e227","sequence":{"long":6717},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8359936},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec07ee37-5e6e-40f0-8adc-a2ef1b35b9b8","sequence":{"long":6718},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8359936},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c7241b0-c41f-4b5f-b9b1-ae8d4aae2c0e","sequence":{"long":6719},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8368128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1eaf793f-e65d-4097-a107-49fc304968d2","sequence":{"long":6720},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8368128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a9509c3-a096-41ab-b1ac-9df3116d9d0f","sequence":{"long":6721},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8376320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b563c034-a4ed-4f5a-8301-a1c4700a847c","sequence":{"long":6722},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8376320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36bdb89d-4736-4df7-ae95-5f7a31625f03","sequence":{"long":6723},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb8d9c82-8202-48f5-b2df-ee78e51fb221","sequence":{"long":6724},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb2eaf19-59e2-4e19-bc62-fcbae8f18153","sequence":{"long":6725},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0674d075-95a0-4396-b9af-079d423a7154","sequence":{"long":6726},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac2f1d79-93fa-45ca-8fe3-05fd0ae596b3","sequence":{"long":6727},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5397f3ff-6bcd-4f9e-ae8f-8a9d649876eb","sequence":{"long":6728},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":{"string":"/usr/lib/pam_permit.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"643ebffe-df20-4f20-8264-3c04ec3f1728","sequence":{"long":6729},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cd4c370-ee9b-44cc-bf38-258f1fd60289","sequence":{"long":6730},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0bbbb55-652a-43f9-b7db-e4a94c4f81fa","sequence":{"long":6731},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03deabf6-9e09-413b-8644-f92ffde1bd59","sequence":{"long":6732},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15077376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9244462b-e0d7-48b4-a193-7cda779e131e","sequence":{"long":6733},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15077376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b3ddc64-56f4-48ce-ac2d-b9486051a995","sequence":{"long":6734},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15081472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68ac84a8-42ad-4181-bda6-282df3d6cbc6","sequence":{"long":6735},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15081472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"843e5cb2-2b22-4124-ab21-b55bf81601b4","sequence":{"long":6736},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15085568},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee610493-234c-4749-a8ad-4a3143199ff4","sequence":{"long":6737},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15085568},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56d145a7-4a3a-49a5-9c4f-92fdd9f863dd","sequence":{"long":6738},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4078c76-ba84-44c4-bc87-28faa2698cef","sequence":{"long":6739},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61f15a48-f031-4ca9-a1ea-765039fb6e1a","sequence":{"long":6740},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2051409-b8a7-486e-b812-30933ee1005d","sequence":{"long":6741},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":{"string":"/etc/pam.d/system"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"255f4929-a44f-43e7-a976-20028b133059","sequence":{"long":6742},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":648},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0e0669c-4386-41ab-887d-a3989362c3d8","sequence":{"long":6743},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"603983d7-fde4-47ff-b6d6-52296c2fcfea","sequence":{"long":6744},"type":"EVENT_FCNTL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"459a32a8-1900-47c5-8372-394e6baa3bfe","sequence":{"long":6745},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64ee32c2-f28a-4075-a7cf-1fd118f860f6","sequence":{"long":6746},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21a0ed4c-4905-4360-925f-edc3ba5688d5","sequence":{"long":6747},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15093760},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8b44c6e-1213-4100-8bc4-9b7689c7bb98","sequence":{"long":6748},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15093760},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06afc890-6dd4-4644-b9b8-784e39b954a6","sequence":{"long":6749},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15101952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"455ed730-3092-4b1d-8d23-2b4ee57f03fe","sequence":{"long":6750},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15101952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faf9bb64-c48c-47f3-90b9-dec091d9bb23","sequence":{"long":6751},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15110144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7b60f1f-4d83-438d-80e4-aef8e1b3b20d","sequence":{"long":6752},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15110144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a77b5eb-b712-4b1c-92df-fd29030d181a","sequence":{"long":6753},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"532aa492-20b9-4d6b-900e-3b5e80429ec2","sequence":{"long":6754},"type":"EVENT_MPROTECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"087161f9-fca4-4dd9-a120-2df78e90c027","sequence":{"long":6755},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fe9b7a7-0015-411a-b306-d1845ac7b1f5","sequence":{"long":6756},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03da8a77-bd0a-433b-af70-59b0ca39c68c","sequence":{"long":6757},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45323a0b-0d47-4cfc-8763-c93c0738913f","sequence":{"long":6758},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4ce3a61-adf3-491c-a0f0-8f2c37d5ed68","sequence":{"long":6759},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"288e4ecc-29f4-409a-929b-709949465c2c","sequence":{"long":6760},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":{"string":"/etc/login.access"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1710f9b-42de-4a4f-ac9c-4d4c862d4c6a","sequence":{"long":6761},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1785},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22b3513a-c5e2-4fb0-9cce-a671e594c16d","sequence":{"long":6762},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e44101f3-ae10-486f-bf31-6eb19c7596f6","sequence":{"long":6763},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b7829a2-e01d-4fb5-bdb0-f89654f8ae0c","sequence":{"long":6764},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df0f625d-ca3b-4ed0-bcab-61c140205ce0","sequence":{"long":6765},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"683dc9eb-13ad-4e44-9acb-c6c1a90257ae","sequence":{"long":6766},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa02e7ef-e2a2-4958-88f7-e006ba36e840","sequence":{"long":6767},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45e69bdc-dca3-447d-85fd-bdd3d515a0a5","sequence":{"long":6768},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":{"string":"/etc/ttys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0225e81e-d3cf-4aa6-a379-78adc4b5d4ed","sequence":{"long":6769},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2086},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59936728-ddbc-447f-a8a6-51e7a4cd1a36","sequence":{"long":6770},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0a3db93-cca9-4164-8a38-f1ea55cfff0d","sequence":{"long":6771},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfe03d03-bc4d-4b3a-8815-8cd4eab01c3c","sequence":{"long":6772},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"0","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23bd796f-868d-4095-915e-3e5cdd7d6b5d","sequence":{"long":6773},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df4980ca-5cb6-4807-b283-0d1e08fd3c4e","sequence":{"long":6774},"type":"EVENT_CONNECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02b4d2c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","address":"/var/run/logpriv","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c5f3307-28dc-4ae6-9103-78c7c7c1bf9f","sequence":{"long":6775},"type":"EVENT_SENDTO","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02b4d2c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":164},"programPoint":null,"properties":{"map":{"ret_msgid":"407","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4f2a762-d66d-4e90-bc06-403b8b617eff","sequence":{"long":6776},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":164},"programPoint":null,"properties":{"map":{"ret_msgid":"407","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03b4d798-f48f-43e2-aee8-46cef668b9f9","sequence":{"long":6777},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aafb7a4a-d952-865d-92d9-3ff2ed86d364"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":140},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"16","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7188291d-8a38-4709-afbd-4271ae2b3938","sequence":{"long":6778},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02b4d2c-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4ac9ba7-ad68-460c-8fea-1bec86c4304c","sequence":{"long":6779},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"361bc36c-2dfe-4171-94ad-4113dfcd4c8e","sequence":{"long":6780},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"1003","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dbfcfd7-0126-46f4-a99c-c89e6f4abdd1","sequence":{"long":6781},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"747a8c70-b13d-49a9-a59a-4743b50f617a","sequence":{"long":6782},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":{"string":"/etc/security/audit_event"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee43d163-a6bc-4ae2-92d5-a94070077a56","sequence":{"long":6783},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":27878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4d4112b-2811-4731-8d7b-eda9fd1d743a","sequence":{"long":6784},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":{"string":"/etc/security/audit_class"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb70419d-3e2c-4a16-a124-cd1ebd5f1e41","sequence":{"long":6785},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f343363-55f2-404a-add9-09a490816cfe","sequence":{"long":6786},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d2de607-a399-47d9-a2ad-7996063c7e91","sequence":{"long":6787},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ff9e977-9952-4871-b588-62a52a84e521","sequence":{"long":6788},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2146fbe-dfbb-45e6-adcc-4c14dedeaab2","sequence":{"long":6789},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e206082b-3014-4849-940e-fb3fc92784a1","sequence":{"long":6790},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebb62e7c-ccf5-4a7e-af72-40a649ce40aa","sequence":{"long":6791},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38b4ed7e-e16b-463e-bf59-ed7ef86bd802","sequence":{"long":6792},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2ca8f8a-26bb-472d-a869-4b505a0e668d","sequence":{"long":6793},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f58af6c6-72bb-4295-a4c7-f1e65aa8ea4b","sequence":{"long":6794},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":27878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4dba93ee-8f0d-47f5-a3e2-08064cbea1d2","sequence":{"long":6795},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd4b5096-0a29-4095-868f-15a8d215eff9","sequence":{"long":6796},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":27878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b417dfe1-7240-4046-afa0-62986baff8fb","sequence":{"long":6797},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15daee50-7a8b-4a22-866c-8a0a0237daff","sequence":{"long":6798},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db9a681f-59a7-4788-bf90-e87a38d039a8","sequence":{"long":6799},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e6ab5cb-d9cf-44d6-9da9-00c7250b8cc8","sequence":{"long":6800},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"431bd7c0-4631-4867-88ea-264f60b16f3c","sequence":{"long":6801},"type":"EVENT_LSEEK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a5f64bb-5f7c-43a4-aaf7-41798d1ea910","sequence":{"long":6802},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82922b8c-7c69-404b-b479-da3880c0ccc6","sequence":{"long":6803},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6101cfb-5ea6-431c-b1b2-b238a26a0a35","sequence":{"long":6804},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"-1","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"821316c3-49cd-4268-a4d4-a1a6bcafe454","sequence":{"long":6805},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f150deb0-99b9-4172-a4b6-bc60e679f416","sequence":{"long":6806},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f08d9b6-e31e-40ce-bc93-a0788aa580e4","sequence":{"long":6807},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"63","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7c97aa6-cefe-42ac-a854-a954f9031420","sequence":{"long":6808},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d727c491-2370-4808-bc36-81e83bbde36b","sequence":{"long":6809},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_gid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"b7ffa591-1b21-5b6c-ae6d-3b862ea46217","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"e02bec48-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"e02bec49-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abaf8b35-3154-47c1-b4c2-cc4a917c1a67","sequence":{"long":6810},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"b7ffa591-1b21-5b6c-ae6d-3b862ea46217"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","ret_fd2":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50f699bd-2318-4c6a-8702-8ae75f758992","sequence":{"long":6811},"type":"EVENT_FORK","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1295","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1295","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"2d3c57a7-95ff-5f9f-b4b3-18d5eebe8057","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"e02bf8c6-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"e02bf8c7-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2ecd58d-cc3a-403c-9cbc-486e4fa88f2f","sequence":{"long":6812},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"2d3c57a7-95ff-5f9f-b4b3-18d5eebe8057"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","ret_fd2":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb982613-fd11-407d-9999-4e9ddd428388","sequence":{"long":6813},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a651f29a-4009-414f-80d1-cf191c64b8b7","sequence":{"long":6814},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"0","arg_ruid":"0","arg_suid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c5b9b6b-f3f5-43a0-aa07-3d1dfabafa6f","sequence":{"long":6815},"type":"EVENT_FCNTL","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"1","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6674a24-f185-4647-9506-5a62f23b9b42","sequence":{"long":6816},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b05a4300-7bbe-47ff-baf5-2964a0530c82","sequence":{"long":6817},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f709ed1-85ee-4a32-891d-0fca4995841c","sequence":{"long":6818},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bf28d13-a496-484a-8167-030e7295adce","sequence":{"long":6819},"type":"EVENT_FCNTL","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917233945148,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"504218d3-2fbe-4f35-bb58-86997af35dad","sequence":{"long":6820},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bec49-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":{"string":"/bin/ls"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917245561708,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"ls","ppid":"1294","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f22f65c-e347-4093-b51b-12299af533c4","sequence":{"long":6821},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bec48-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eabb9157-7641-4054-85af-cbd953bffcc2","sequence":{"long":6822},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bec48-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"475a9d37-8a99-44ae-b51b-5eb07da1ed33","sequence":{"long":6823},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4506cd43-dbe5-4e68-9346-58fa41738146","sequence":{"long":6824},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bb03ab2-df94-42f1-8612-8d4147509bc9","sequence":{"long":6825},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"633290c4-560e-4d3f-86be-35e760449b9f","sequence":{"long":6826},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75c0cb05-6e95-4e16-9143-09ffaf3be146","sequence":{"long":6827},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53ceff36-5d76-4119-902b-fc8053fa8e82","sequence":{"long":6828},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7b4f919-1846-4621-ac95-6c1dfab14da0","sequence":{"long":6829},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9db96e8-252f-44fb-8938-167d3fea730e","sequence":{"long":6830},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2bb3684-f3aa-4ba8-9286-d8f06835d9ff","sequence":{"long":6831},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f482ed54-35bc-4340-b0a5-fb9fb46eb643","sequence":{"long":6832},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bf65e74-188a-466a-8c26-c7e9bb420c05","sequence":{"long":6833},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2420736},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abee2118-7a12-4db0-8398-a57169aa19f4","sequence":{"long":6834},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2420736},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0293a3e-7fb5-4184-a221-14b55989670b","sequence":{"long":6835},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2453504},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b55da6bf-e8cc-47d2-bd63-82d620e92196","sequence":{"long":6836},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2453504},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1964d500-0e6b-4679-9a78-ee05e9834cb9","sequence":{"long":6837},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85921ce6-6499-41d9-8f6d-6f215ee97301","sequence":{"long":6838},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3ef6a38-d403-4260-9d67-04f12edc57aa","sequence":{"long":6839},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c8f6158-fd79-4035-be71-93534bf85a8e","sequence":{"long":6840},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":{"string":"/lib/libncursesw.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf256dc5-d776-4b4e-9a07-5238caaac668","sequence":{"long":6841},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"802efa98-2381-484b-ba49-0b489c6d131b","sequence":{"long":6842},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b70230e-0d04-4844-a40a-725b38b06b9e","sequence":{"long":6843},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2514944},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f95bbcb-ea38-4fec-8974-9a0cc3d10394","sequence":{"long":6844},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2514944},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f04a8a27-ee73-4ced-9873-71a08a4b23c5","sequence":{"long":6845},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2682880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c6427af-00f4-4763-a2bf-5309d34738f3","sequence":{"long":6846},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2682880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7b3440a-6042-4aae-bb4b-e1d3f2d36512","sequence":{"long":6847},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2887680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27e1dc35-9a8d-4b63-8f2c-2a2014684da7","sequence":{"long":6848},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2887680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a822806b-9ccc-447c-b8fb-1a047f6d4042","sequence":{"long":6849},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e188d221-b47a-4b07-aced-dae4b2422317","sequence":{"long":6850},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"538cb8a0-8357-408d-a5a4-1d23c47fd321","sequence":{"long":6851},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a59c6b2-86ba-4230-bc67-595e188945ab","sequence":{"long":6852},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31771267-4132-41e1-b724-202e2818077f","sequence":{"long":6853},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b32596b3-8d26-44be-94ef-bc0aa8e002bf","sequence":{"long":6854},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ada6d1c-2992-4ce4-b07c-e8a7f44457ed","sequence":{"long":6855},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e3f56d3-6b92-4018-9cb2-49849b3e1f49","sequence":{"long":6856},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a587c4e-20fc-4716-b4a7-59bc609482d8","sequence":{"long":6857},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85cecc72-b931-4ad8-abaa-f326ad878f7f","sequence":{"long":6858},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c3597fe-5a84-4ed5-a7c3-ca99aa2aeaae","sequence":{"long":6859},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46a7aa9d-f54c-49cb-ac58-9c8ee467404d","sequence":{"long":6860},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f3be928-cf39-473c-9fba-eaf94aaa69b3","sequence":{"long":6861},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b4ba9e4-a0ec-45c2-9030-af61a05d68eb","sequence":{"long":6862},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c0b0f2e-c1fc-4388-bed3-52d7c0771874","sequence":{"long":6863},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"813ac9b7-47d6-44f9-9ab3-fa25bde341c0","sequence":{"long":6864},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1b56d29-61ee-4a6a-8058-e70b5d29d4b7","sequence":{"long":6865},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_fchdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b043c7f2-f7df-4378-8077-62e807e3f41c","sequence":{"long":6866},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce48791e-bcb9-4116-a173-e663db32acf5","sequence":{"long":6867},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e06f39c-8c64-4cba-88e1-92b9ca22f196","sequence":{"long":6868},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"950150c2-d820-40d3-be47-3a02e755e2f9","sequence":{"long":6869},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_fchdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad760b1c-e752-48bd-a1bf-7deb87a3bc9b","sequence":{"long":6870},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eaa6cb69-560f-44ac-a09c-87feeb619ff9","sequence":{"long":6871},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":119},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8e34f87-4cd1-461f-b275-cd68effe3c86","sequence":{"long":6872},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":107},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29d10590-460e-4563-bd7c-6f485c9ede6b","sequence":{"long":6873},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":103},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb80b193-1fcb-433c-b3b4-7a60f8c31588","sequence":{"long":6874},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c1297ba-cdad-4c46-950a-22485c6eda65","sequence":{"long":6875},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":104},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5104d5bb-ffbd-4206-8bab-194cadea2f06","sequence":{"long":6876},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":94},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ced895fb-94e8-468d-ae31-326e548cb86d","sequence":{"long":6877},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf2bd-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1294","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac3e7f87-1596-425d-adc1-7366bc47e36b","sequence":{"long":6878},"type":"EVENT_WRITE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf8c7-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d3a5e78-58da-4ef7-86d0-30c7633a2efb","sequence":{"long":6879},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf8c6-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05fd0998-3037-4865-a078-b1d767be643a","sequence":{"long":6880},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf8c6-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8e499ad-c43e-457e-b3d5-92063190417e","sequence":{"long":6881},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02bf8c7-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"493016c4-9312-4b8f-bca0-3f427929c698","sequence":{"long":6882},"type":"EVENT_EXIT","threadId":{"int":100118},"subject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e026e0b0-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"622de6cd-798e-49c9-ab2a-af484028c00c","sequence":{"long":6883},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":169},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a486dc7-6bd3-42c0-b1f9-a11417a7e71d","sequence":{"long":6884},"type":"EVENT_WRITE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12b42ade-4a53-49b9-a1d1-81498f6bd424","sequence":{"long":6885},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":489},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6b41fc5-00ce-4a83-90e7-5daf8cbc99e5","sequence":{"long":6886},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1296","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1296","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aadb6e5f-b8c8-4787-a4fb-a68b9e12b248","sequence":{"long":6887},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":103},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83c8f2be-643c-4340-ba7d-933453f47eb4","sequence":{"long":6888},"type":"EVENT_WRITE","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c1cd77d-d849-49e4-84e8-b769e0331d2c","sequence":{"long":6889},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54698203-b9ab-44c5-87a4-6207fa28bcee","sequence":{"long":6890},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f8748da-27a3-4587-84d7-a33cf06d9d99","sequence":{"long":6891},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65a41e8f-ae16-4883-9a75-e2366ef46436","sequence":{"long":6892},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":508},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe713af9-dcc0-4ef6-b113-caf81d060662","sequence":{"long":6893},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1297","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1297","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c40c040b-37bd-4c10-8b00-7d34cc362f27","sequence":{"long":6894},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bbf5999-44f9-419d-bcf2-ea2feadd740e","sequence":{"long":6895},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917245561708,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b62ceedb-19ad-4030-b2ce-470c95ca2bb1","sequence":{"long":6896},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f825300-ef39-402e-8305-748e350cdd8b","sequence":{"long":6897},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4526014-e433-4c26-b17c-beaa06df9ce1","sequence":{"long":6898},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9e10d2b-9675-4576-821c-ed5189f7ed5b","sequence":{"long":6899},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"324dfa69-291b-405a-8482-1d043350b2be","sequence":{"long":6900},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fb6ffe2-bb3e-43f1-b9ef-766f68e55f40","sequence":{"long":6901},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"653ed0bd-ab37-4635-9f3a-be3782b26b0a","sequence":{"long":6902},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b77e08f0-784b-40bc-9cf1-a6a775c60816","sequence":{"long":6903},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17c31e3d-3abb-49ff-9512-1fa3bc049481","sequence":{"long":6904},"type":"EVENT_EXECUTE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e7451145-d4d2-9753-92d4-25f153976db4"},"predicateObjectPath":{"string":"/usr/bin/nc"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582917245561708,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"nc -l 54321","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa282f05-5950-47c1-a296-b029bf223772","sequence":{"long":6905},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce8c7774-9f61-434e-9fc9-de533b062861","sequence":{"long":6906},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6475d251-757d-4f4f-b9aa-1a403d970fdc","sequence":{"long":6907},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb8dcc14-9875-48e5-9bd3-81fd48f3e733","sequence":{"long":6908},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1170ea0-cd67-437e-92ca-8fd7053fa992","sequence":{"long":6909},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6200c5a5-5bcc-4999-8c8b-cf1739f064dc","sequence":{"long":6910},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5293eb7b-5f16-43af-b475-63e72f3d24d2","sequence":{"long":6911},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"950af5c7-ece4-4ca3-9591-029679318999","sequence":{"long":6912},"type":"EVENT_OPEN","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":{"string":"/lib/libipsec.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb476473-e4ca-4c0a-8e01-a4ebbb184159","sequence":{"long":6913},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d290043-600b-428b-aeb3-8cc13d943e19","sequence":{"long":6914},"type":"EVENT_MMAP","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917245561708,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04c4e5e4-95d8-4fb0-a765-b803ae3c9f0f","sequence":{"long":6915},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582917485712666,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":195593},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a2b98a7-bb2b-4ca9-a997-4a508c09cda7","sequence":{"long":6916},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":195593},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b2dfa49-0f9b-482e-a731-916041a9d681","sequence":{"long":6918},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17d398a0-54bb-4551-999e-8216787d28e8","sequence":{"long":6917},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8532e230-040b-420b-99a9-c00e615ca4f3","sequence":{"long":6920},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de2d3f6f-7da4-490d-8194-09c9d6b37f9c","sequence":{"long":6919},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b52685f-f99f-46db-8603-b336386edae7","sequence":{"long":6922},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cf32e06-8d7e-4891-ab2b-f386acb9c7ea","sequence":{"long":6921},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ff72974-36a6-4e1f-b9a0-8de648d2bf88","sequence":{"long":6924},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"685b3a51-cfc3-4faf-a7eb-6f28b307a83f","sequence":{"long":6923},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c5e1408-f126-4bab-8533-139214646672","sequence":{"long":6926},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d730bf5-cbdf-4523-b704-375af0773f9d","sequence":{"long":6925},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"591cfcec-b7c6-4262-b237-0fcd32a64f12","sequence":{"long":6928},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38c5fc01-4652-4f4b-a66e-cbcb171a3eea","sequence":{"long":6927},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3be8493f-e917-409c-87a9-c83a392035b8","sequence":{"long":6930},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f827647-f160-4a7e-aecb-5b39c3fb40e4","sequence":{"long":6929},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b7ea691-7881-44c2-9e78-39f221f97a30","sequence":{"long":6932},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26347e05-8e2c-4316-83e8-2288620e8ee5","sequence":{"long":6931},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cf3f008-03d8-4b41-ba7a-acc4a2e2dd42","sequence":{"long":6934},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dee5ab50-1519-4928-bc9d-4d15bd9e77ae","sequence":{"long":6933},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f63c9e21-bf5e-47ee-ac63-59243fddce84","sequence":{"long":6936},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14f84f0d-5d5a-494d-958e-44aadb2fb733","sequence":{"long":6935},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f08223f-d5dd-4b7e-982f-0fbc45020575","sequence":{"long":6938},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57228cb9-51b9-45a2-aca6-5a1ba97621ed","sequence":{"long":6937},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccd4b2d4-04ef-4469-8fcc-0aa484b7ec1c","sequence":{"long":6940},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab58c226-6b4a-45a3-bdbd-8cb27cc8390e","sequence":{"long":6939},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2d46367-bc28-4650-b4ad-ef0980023996","sequence":{"long":6942},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"234c8d32-e33c-48af-8ef0-f2b5c24892c6","sequence":{"long":6941},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cde24b3-027d-4b86-9c5b-637a6a700690","sequence":{"long":6944},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c3fbbd1-26a7-45ae-85b6-a6125b9974b7","sequence":{"long":6943},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1109f834-e15b-49e2-839a-50c770fbf84a","sequence":{"long":6946},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"797a7200-5a95-44f6-a6fc-3a4ebde8bef9","sequence":{"long":6945},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"943cdf72-3049-4cf4-9fe9-a99499b687a2","sequence":{"long":6948},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3bb3f33-db15-4d37-b987-fc57dac01c01","sequence":{"long":6947},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"357f52a6-34e0-45b5-9914-a0f82491a30d","sequence":{"long":6950},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c8bd30e-48e3-4317-85d4-195e909f4ef0","sequence":{"long":6949},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd7d9dce-fd21-4f2a-82d3-719c5303a2ce","sequence":{"long":6952},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e68c989f-715f-41c7-a7ee-065d2c4ec0c1","sequence":{"long":6951},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ed88d90-0c29-48b0-9909-fc01d261bbef","sequence":{"long":6954},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f86782d-b364-49f6-b4b5-bbcd9452170c","sequence":{"long":6953},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68f51935-0085-43df-ab51-f1cdfc62b527","sequence":{"long":6956},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dab5784-ca91-4472-ae3d-916cf4b8bc3e","sequence":{"long":6955},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebcfc69e-d378-4b22-a485-981d9b0fc5dd","sequence":{"long":6958},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"356417f3-8975-4c86-9bb3-8df5ae5325de","sequence":{"long":6957},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3dc4a5b9-fd76-4411-b132-4e81361e34cb","sequence":{"long":6959},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4300f01-82a2-403e-a348-efb7b4fc7d34","sequence":{"long":6960},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1547a106-17de-4ad3-8c99-fe03b355bf16","sequence":{"long":6961},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76e027dd-6b6c-4964-a5f7-c15a60dca9de","sequence":{"long":6962},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4628},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddc2ab62-2201-4477-8170-4c03087ef000","sequence":{"long":6963},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2c88647-9440-4a10-bf0d-ef917af9569c","sequence":{"long":6964},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4681},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fa68f76-970d-4109-83ef-e03b612bbbc2","sequence":{"long":6965},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc573c6d-209f-4a10-9109-9a62db709c82","sequence":{"long":6966},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b68ec75d-c089-4296-9b96-21376db47531","sequence":{"long":6967},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4298},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db915108-89bc-4813-8b55-aaf195a8bed4","sequence":{"long":6968},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4351},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02579f9d-4967-4c85-8fd1-83645f4139c4","sequence":{"long":6969},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90fb5e13-3ce5-4893-bdeb-86c2ac46a9c3","sequence":{"long":6970},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a43ef2c6-ab73-43ca-b71a-d52536cbb473","sequence":{"long":6971},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54652697-c7f8-4393-a23e-ecd301361169","sequence":{"long":6972},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4787},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81cef726-232d-4c65-a312-e4f13de90fa6","sequence":{"long":6973},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4840},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68083215-29ac-4f64-9167-fa3c038fcb6a","sequence":{"long":6974},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918124100434,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7181cfe-1186-4cd3-9086-7cfd8efe4e8a","sequence":{"long":6975},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b7de6bf-8d34-4d80-8c49-653ab14aa373","sequence":{"long":6976},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba0ab650-2401-4dba-867c-e2bcc311a41f","sequence":{"long":6977},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4396},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e77cebe-1c3d-48d3-9337-731b52593e95","sequence":{"long":6978},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"280a2adc-0c8b-421d-9300-78d043aab35b","sequence":{"long":6979},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba65e2fc-2db3-40c8-ab62-83d6110260c1","sequence":{"long":6980},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae1ddb99-37be-4169-88e8-3d9c6f250588","sequence":{"long":6981},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4087},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e27968ef-a17d-4c5b-ba4a-2a713856c442","sequence":{"long":6982},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0e6879a-e3e6-4340-938a-4ca152964905","sequence":{"long":6983},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3ab6a90-6e7d-49d7-81e1-232a7661bc7c","sequence":{"long":6984},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da68ca97-3f23-402c-a995-5484698f3ee3","sequence":{"long":6985},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4338},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09aa1929-663e-498e-b9e0-b032bb00653b","sequence":{"long":6986},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c163cf40-d91f-4d22-8a2f-ecab97ce72c9","sequence":{"long":6987},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9906a5d-3dcd-417b-a89c-f0a042d4de29","sequence":{"long":6988},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bb13e58-b076-48a7-b2a0-ef2a34501c8a","sequence":{"long":6989},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4824},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76b21262-cd5a-46f3-b9a5-b1c727c659cb","sequence":{"long":6990},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9539180-d545-4ec1-a61c-f230d4f33911","sequence":{"long":6991},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4aec076-b275-4e7d-bb16-0768e1fa0d57","sequence":{"long":6992},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"045595a6-15d3-4981-b25b-f7440532bd33","sequence":{"long":6993},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4264},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"828029ba-75ce-434f-b29b-6dbf7cc182e5","sequence":{"long":6994},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83eacf8f-8542-4a0f-9462-4afb8e131802","sequence":{"long":6995},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10ee5b04-c85e-40b9-ad9e-9779b0c8ae40","sequence":{"long":6996},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0edd1e16-1472-485a-b093-a425d417b3a9","sequence":{"long":6997},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3913},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f745cf1-6755-459d-aa97-cd8d39763cb3","sequence":{"long":6998},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5822ef53-def8-470d-9e2d-a21957e3785d","sequence":{"long":6999},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71fa74ff-968f-45e2-bf67-df19b54aaa6c","sequence":{"long":7000},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cca0cdb-16d5-422f-9812-95203dcbf0cb","sequence":{"long":7001},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4723},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4866f796-4893-4943-93ea-a3dbdb103a62","sequence":{"long":7002},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b3f37eb-b493-433b-bdab-c53d7fce893f","sequence":{"long":7003},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"707ceff0-0b83-429b-83fc-a3ce40f87e38","sequence":{"long":7004},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfab11d0-6df2-42ea-953d-7dc3a6443407","sequence":{"long":7005},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3899},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"625b6d36-9ffe-45f2-9c1b-81abaa77fb8a","sequence":{"long":7006},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"453c709d-8fe2-4f4e-b508-d77b81becb96","sequence":{"long":7007},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8aa4c4e7-6ff2-40fe-9ea6-6e528fa55cee","sequence":{"long":7008},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b35e0f32-dae0-446c-a3ed-33d60d1b297c","sequence":{"long":7009},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4199},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1a94671-d80c-46d9-a78a-439da9fa9cc8","sequence":{"long":7010},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b02f074-5579-43ca-95f7-015c9a416513","sequence":{"long":7011},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3782e798-cb1c-4253-ac58-7d1cec2aa556","sequence":{"long":7012},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a7db278-f3a8-470b-b438-4dbd8e1aed45","sequence":{"long":7013},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3977},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eeb6a531-56cd-47a2-b0fc-a144e54c8284","sequence":{"long":7014},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e2ffddd-5210-483f-9a50-d66cf58b898e","sequence":{"long":7015},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffa90213-9481-4c1d-ab47-77848d7fe5cb","sequence":{"long":7016},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ded42a7-3523-4b17-abff-db0b5b158ebc","sequence":{"long":7017},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4245},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7c6d8db-7559-45c6-99dd-2574bf91670e","sequence":{"long":7018},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3633e924-e406-4fd9-a8f4-4050c247c1af","sequence":{"long":7019},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5c6f788-ac31-42e5-9e62-6d929571d028","sequence":{"long":7020},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d79da26-9485-4248-a6d3-bda641fedbd0","sequence":{"long":7021},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4214},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30ec97a1-9574-4648-85ae-b6ae236cbb4b","sequence":{"long":7022},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1df01d6-c178-40ff-9db8-0914fb05ee4e","sequence":{"long":7023},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b22d1195-bde8-4f4c-b5b1-3a8c29b38b3a","sequence":{"long":7024},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5614a78-b963-4893-8c5e-6c27e67289cf","sequence":{"long":7025},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4299},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c24ccd9-ef5d-458a-a834-ac757c14bb1f","sequence":{"long":7026},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffa2fece-9134-4a0d-9546-4884af3bf472","sequence":{"long":7027},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f794db7-42dc-4c98-9994-9dc77ee549b6","sequence":{"long":7028},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0c0aa0d-08af-44de-8e08-54cf358de6ed","sequence":{"long":7029},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4570},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e04076bc-f43b-405b-a69f-0b4442e61aa0","sequence":{"long":7030},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8a0d7e9-e09b-4c0c-bc9b-1e7eebc53fa7","sequence":{"long":7031},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69ffa2c5-eb6b-4fb9-b6cd-0b555ed85b5b","sequence":{"long":7032},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7abbe02d-f879-47c7-9a3b-fe8c299da632","sequence":{"long":7033},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4449},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a150443-3f7d-430a-921a-827f23d164fa","sequence":{"long":7034},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85ad063d-2e4e-41fd-8a02-141c18491b8b","sequence":{"long":7035},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29d31e39-fbaf-4fbe-9a3f-9915750f7078","sequence":{"long":7036},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3945},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc0478ee-f277-4cd2-aa16-134743ca802e","sequence":{"long":7037},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcf3d7d4-2549-4b86-b464-13903060315b","sequence":{"long":7038},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"198f64dd-b2fa-490c-ac08-4ab12282bbb9","sequence":{"long":7039},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff469d31-070e-4b38-99ec-bb3007a3374f","sequence":{"long":7040},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4109},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"563e6216-6779-4b3e-9865-216bf78e6668","sequence":{"long":7041},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b61c68b4-ca37-40a9-852c-8e58b84b4b05","sequence":{"long":7042},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d8e7fce-49dc-49ee-bbfd-36a840d50107","sequence":{"long":7043},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74d5d7a7-fc3f-4f2e-9f06-23d2461e14da","sequence":{"long":7044},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5021},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22f05739-ffe1-45dd-b4e9-42510e3bee35","sequence":{"long":7045},"type":"EVENT_WRITE","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7646ab3-ebcd-4533-b9fd-04c2d5468f7d","sequence":{"long":7046},"type":"EVENT_READ","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5200b6f0-6d7e-4b3c-a806-11a5e13fcc68","sequence":{"long":7047},"type":"EVENT_SENDTO","threadId":{"int":100119},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"408","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04d6a777-db91-4855-8fd7-46c88a9a10f6","sequence":{"long":7048},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"408","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bbefe5f-1139-4c46-8f5e-67078b844dbd","sequence":{"long":7049},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918133897608,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d6b04ce-8b30-4312-81c6-cca918735e16","sequence":{"long":7050},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918144488663,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c10c4c65-f50d-4931-9c07-943537c23995","sequence":{"long":7051},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918144488663,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae05d719-7242-4cdb-8d61-cf60e58e34e1","sequence":{"long":7052},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918144488663,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4140},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4de0e81-6aa2-4eaf-bf5b-2ecd8e4d9333","sequence":{"long":7053},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8ff96d7-90f7-4bb4-b101-a6b7b8f14713","sequence":{"long":7054},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a73a23b-2ea5-4e44-8306-38aae5461867","sequence":{"long":7055},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4391},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbabdb3b-4b3e-4aad-ba64-0337f5351da6","sequence":{"long":7056},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb2c7a2d-d63e-4280-bf5d-8771853a5bda","sequence":{"long":7057},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54ae7751-6895-4937-9461-efe891ef1008","sequence":{"long":7058},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918154039828,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4877},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e634ddc-75c2-4cc1-860d-7a8cfe665105","sequence":{"long":7059},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918167986826,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84b76355-9c35-41a8-9136-721c47ac8255","sequence":{"long":7060},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918167986826,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6752ef3-c210-4538-b487-2ab9d31eec2d","sequence":{"long":7061},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918167986826,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4317},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afacef6e-60b9-49f8-a057-ae06f651f2a8","sequence":{"long":7062},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05deff16-5182-4542-9104-fe337c39c933","sequence":{"long":7063},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8316fe09-5458-48f5-b768-7a3482244197","sequence":{"long":7064},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3966},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f7497c4-0110-4dab-a67a-37f85ea721e3","sequence":{"long":7065},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43a501e2-ac59-4367-bd74-6855b0b60eef","sequence":{"long":7066},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b142e38-e306-4742-8b07-5f32ef5be390","sequence":{"long":7067},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918174936799,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4776},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a56e1ff-fcca-4569-8e3a-52cd1d3c43ab","sequence":{"long":7068},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918188618677,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5eb8f77-ce6f-4388-a025-24923ab4ecd0","sequence":{"long":7069},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918188618677,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"648f31d3-f45e-409c-b8e7-f46720d1ec38","sequence":{"long":7070},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918188618677,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3952},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3621d692-4f63-4748-9a8b-2df89cc51215","sequence":{"long":7071},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c48ec01-762c-408f-9ed3-c56d87ffb60d","sequence":{"long":7072},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2510f85-13a5-4369-acc6-6145693d381d","sequence":{"long":7073},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4252},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca4d7c9b-2c9e-48f4-b9e4-6cbaef306edb","sequence":{"long":7074},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"754bba70-3611-4287-a61b-4b891fa8a0f2","sequence":{"long":7075},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77804948-d996-4e88-ba13-2ce5d33ce4b6","sequence":{"long":7076},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918194152918,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4030},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41ffff13-7b19-4459-8ccd-7c6d9d88bf92","sequence":{"long":7077},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918204342280,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5636089-4f1d-46fb-ae60-fbe6e5141952","sequence":{"long":7078},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918204342280,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa210a69-678a-4ceb-a2ac-b294567c6f95","sequence":{"long":7079},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918204342280,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4298},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d5606fb-4cda-4fef-b14d-31b443789d37","sequence":{"long":7080},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918216018019,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5be2f3e-37fc-4eac-a3b4-9d83615081ba","sequence":{"long":7081},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918216018019,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"464f2e12-4f02-4eac-ad88-14ecc0fef599","sequence":{"long":7082},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918216018019,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4267},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"729d9700-8696-407f-b6c3-e7f924159d6e","sequence":{"long":7083},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30e558b6-8750-47fa-b5e7-bb1ff6f0de97","sequence":{"long":7084},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"025ca133-79c4-4bc2-9549-b75c27bc18df","sequence":{"long":7085},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4352},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e532cefd-f4a2-441c-8800-aa7f8e551ac4","sequence":{"long":7086},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cee1b643-c7a3-48d4-ab42-655a3b7091ea","sequence":{"long":7087},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5801627-489c-48f9-af91-95eab6389249","sequence":{"long":7088},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918223937141,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4623},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e25c7de-f5e4-45f4-ab65-a5b7452ce32b","sequence":{"long":7089},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918234217398,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e770fd9a-3101-42f9-9cf7-22d82e1c1340","sequence":{"long":7090},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918234217398,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7abb9a8-dd28-4417-9ae6-956192a1c657","sequence":{"long":7091},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918234217398,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3998},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db87b379-cb96-4f10-a96b-16f44a1d36e0","sequence":{"long":7092},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffd66dd1-70ca-440e-b75d-c57f3fc7952e","sequence":{"long":7093},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d32eae33-7cc7-4040-b9ce-1e709f188a1e","sequence":{"long":7094},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4162},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e1234d7-964f-431a-9fe5-3f82108582f3","sequence":{"long":7095},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c33d532-7225-420f-9d2b-85f64f5e6f07","sequence":{"long":7096},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54380670-b282-4b93-bbe5-25e65209aca5","sequence":{"long":7097},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918243926462,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5074},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cafecb31-0736-4660-943b-b3d641c03cef","sequence":{"long":7098},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918253911946,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cade0817-bb90-4219-a90d-187b4f2f5d22","sequence":{"long":7099},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918253911946,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba3105d9-0a38-4a66-ab3f-cd0138cb5aec","sequence":{"long":7100},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9587d13b-62a0-4f01-9db7-84fb06b99fc0","sequence":{"long":7101},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f248fd2f-6362-47b3-9acd-1f3930eca922","sequence":{"long":7102},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02d3b31-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cb7bf8f-b769-454a-9573-a58d953d749c","sequence":{"long":7103},"type":"EVENT_READ","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"d3a4ecf8-7a30-56cf-8498-3c77cacf4b5a","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"e0c81a41-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dd09e2d-d90a-40f0-80ef-259dcf60c698","sequence":{"long":7104},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"d3a4ecf8-7a30-56cf-8498-3c77cacf4b5a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e2df546-2cf0-439b-9b9c-dc2d75c82812","sequence":{"long":7105},"type":"EVENT_LSEEK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":551},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd77a93c-509f-49f9-9c4a-315daa5c7174","sequence":{"long":7106},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1298","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1298","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"004d3ae2-cffc-5c32-a25f-5454b8736020","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"e0c83648-467a-11e9-aea9-080027fc76ba"},"uuid2":{"UUID":"e0c83648-467a-11e9-aeaa-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8690965-cd5e-4096-9462-7b8c86c8686b","sequence":{"long":7107},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"004d3ae2-cffc-5c32-a25f-5454b8736020"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","ret_fd2":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0421d8f9-c7c1-44ad-93a1-94233a428a36","sequence":{"long":7108},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1299","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1299","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a39428e-184f-4cdd-8a31-49b73686cb43","sequence":{"long":7109},"type":"EVENT_FORK","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1300","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1300","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ddf482a-5e3e-4da6-ba7e-ce9dbe0c44ba","sequence":{"long":7110},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63f98f94-df0f-402d-b0d2-3c2e491b2741","sequence":{"long":7111},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de3a34c1-0b17-8152-970b-4c2cb281885f"},"predicateObjectPath":{"string":"/bin/cat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582918266852861,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"cat EXFILTRATION_FILE.dat","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57e86785-f9c2-45cd-a901-fe11e2038e36","sequence":{"long":7112},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29b6d0e1-4410-46dd-9db2-2d684d7a0b57","sequence":{"long":7113},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b454ab9-7cfc-4dee-a904-4ea1f4dd6a32","sequence":{"long":7114},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d0b65ae-58d1-46c2-95fc-1666d71ff357","sequence":{"long":7115},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e7451145-d4d2-9753-92d4-25f153976db4"},"predicateObjectPath":{"string":"/usr/bin/nc"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582918266852861,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"nc localhost 54321","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"820308cf-cc5f-4a9c-acfa-44284f3a8b37","sequence":{"long":7116},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7eba752-7d77-4de9-9afd-ffb9a3ebe49b","sequence":{"long":7117},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3fed599-5deb-4c34-a7e5-f61938ab8e8b","sequence":{"long":7118},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9eb8a82f-01a9-44c7-8a83-fec7bf5f9233","sequence":{"long":7119},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a52b83cf-8ece-4270-a267-6cf34ec9a5e1","sequence":{"long":7120},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"091cfecb-79f3-4e29-891c-05870320c9f6","sequence":{"long":7121},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c12c15f1-6ea1-4ae7-a4df-3b94c16c6882","sequence":{"long":7122},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18983d7f-5fa5-4f66-861b-084677e73914","sequence":{"long":7123},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55b4c421-85a5-458e-9abf-e911544a4c47","sequence":{"long":7124},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de97419f-ed8c-45a9-9e20-589636d631c3","sequence":{"long":7125},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62469408-a325-4863-ba5e-be17d1ae7fe0","sequence":{"long":7126},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c4af970-e949-4780-946e-53878b0ccd30","sequence":{"long":7127},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4abb083b-be4e-451e-a4ca-24840dcde6b8","sequence":{"long":7128},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16b16aad-870f-42b0-a565-c1b36eadc0fd","sequence":{"long":7129},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a822a9ea-f2cd-42a8-86ff-df70ab8cfb37","sequence":{"long":7130},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fe0729f-e7df-4408-a687-716c0be24d29","sequence":{"long":7131},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4159ab2b-9fe9-42d9-a5de-7f034528985a","sequence":{"long":7132},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb78c7bc-98bf-4c63-958c-a5c3515c73cf","sequence":{"long":7133},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9e88a4f-5f1e-4161-b9c4-0f58725da448","sequence":{"long":7134},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4b1a5d7-4860-4f94-9df7-f325d3555f12","sequence":{"long":7135},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea47b6a0-6b16-4ec5-a588-2c58ae82e350","sequence":{"long":7136},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"760ab334-6a7f-40f3-8a28-2e5eaddc3ac6","sequence":{"long":7137},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ff3b8dc-1830-4de7-bf75-c0b56ac55920","sequence":{"long":7138},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebbb507f-6429-4abd-b11a-f994ae2da50a","sequence":{"long":7139},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bce03954-7e87-47ac-99fa-1163916b6cbe","sequence":{"long":7140},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f56da38-c60a-453e-a634-8c344eda546f","sequence":{"long":7141},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b44dab4b-5373-49f9-814c-103c6ec2fbc2","sequence":{"long":7142},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35d8260e-a30f-44ae-870a-8d941f099dc8","sequence":{"long":7143},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cda412bc-8b2f-4a30-b4ce-cd77f007224b","sequence":{"long":7144},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93a7fd3b-ddeb-4539-9456-b67b9ad5addc","sequence":{"long":7145},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"387a467e-ec6c-4c09-ba5a-ea6b3e631826","sequence":{"long":7146},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b87d693-4c5b-4403-838a-3d10812ccf5b","sequence":{"long":7147},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eba8b8c5-418d-426f-8aeb-6507bae8b100","sequence":{"long":7148},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b829bd2-6129-46b0-a0a3-1f8471095b24","sequence":{"long":7149},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8608928b-2dce-4c12-9576-c1dde2dcd7ab","sequence":{"long":7150},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e0db050-bf03-4691-ad48-ee5f1a5fb70a","sequence":{"long":7151},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdb19a3e-6ab5-4964-8452-c3b245b4605c","sequence":{"long":7152},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa27eaa9-a242-406f-937c-fd293837b067","sequence":{"long":7153},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aabf09bf-f2c0-4612-9b91-a44b471a5804","sequence":{"long":7154},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2416},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a35ed79-be73-43cf-a5d4-e878bdeac39b","sequence":{"long":7155},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2416},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65fab6b4-4822-47a6-b306-404462a884b2","sequence":{"long":7156},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0516653b-9954-4c22-bbaf-8bd1e16fc12c","sequence":{"long":7157},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee4fdd24-7406-4592-811a-4e75ef56002c","sequence":{"long":7158},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c81a42-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"382a47ec-8897-43d8-bd8f-fa6a5f03ac08","sequence":{"long":7159},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c820b9-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8d2669a-0e21-435b-bb57-355b52bc0220","sequence":{"long":7160},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f1c2767-31ff-418e-91be-2475ac470dc7","sequence":{"long":7161},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f6654a3-fd67-4b1f-bbed-ec31ff693c72","sequence":{"long":7162},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9128d26a-9820-46be-a1a3-99fb66bedc2c","sequence":{"long":7163},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae92bec1-9874-4663-8ecd-e96f3c80dd48","sequence":{"long":7164},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07e38094-8822-428c-8c23-7f8de95a4b75","sequence":{"long":7165},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e7ec0a7-ae70-4864-bcd3-743ad28d9416","sequence":{"long":7166},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":{"string":"/lib/libipsec.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94c7a6d3-245d-4f3c-bbd8-9dfee8f130ec","sequence":{"long":7167},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c741d38-f001-4936-98a2-ac39235cd362","sequence":{"long":7168},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ac3dd8b-2bac-4479-89d5-f3dc9de073a5","sequence":{"long":7169},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30484dc0-d8a9-4b74-a043-234466b1dfed","sequence":{"long":7170},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918266852861,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ea6e110-5c93-48ce-960f-57ce3d41c599","sequence":{"long":7171},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c4747ba-f234-455e-a54d-9b0b9342e13c","sequence":{"long":7172},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71146f4e-119e-476e-9740-09b8e662c40a","sequence":{"long":7173},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a35d1ef6-ffe6-4c54-b9b6-b2a54e0d1bed","sequence":{"long":7174},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9143d6a8-6f61-4c9a-9db2-484eb01a2631","sequence":{"long":7175},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2449408},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e57e01df-80d1-4ba6-b234-fa10ab0ac8e7","sequence":{"long":7176},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2449408},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce28b726-8b53-481f-9d2f-efc3312e514c","sequence":{"long":7177},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c48808ec-15b9-4ff3-bfdd-5648af520610","sequence":{"long":7178},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b9347fb-ed93-48f3-9e4d-f97251f1c456","sequence":{"long":7179},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8224ac78-7b8b-4854-908a-12fea7bdfdb8","sequence":{"long":7180},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"976adcfd-befb-4903-a057-8e2b344f8018","sequence":{"long":7181},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2461696},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82309523-023f-4474-b6b1-24f79c2deb3c","sequence":{"long":7182},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2461696},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"494128ad-c969-464d-b6ff-42354b5b49a7","sequence":{"long":7183},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2977792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bc95d91-72c8-4303-92b4-c71565047a14","sequence":{"long":7184},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2977792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"def819a0-7962-407d-9564-e541f1214e7b","sequence":{"long":7185},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4308992},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d7d2702-8d03-4241-acb5-635720d1e932","sequence":{"long":7186},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4308992},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55d7749d-f741-4451-b991-7f5e981234a7","sequence":{"long":7187},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a85bd12-eeb1-42cb-83b4-7c98a9406a28","sequence":{"long":7188},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21bd736a-453d-480c-bb33-6f4c0b314ab8","sequence":{"long":7189},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"998cc1f4-ba87-4c65-88dc-2f884eab611d","sequence":{"long":7190},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ee8bc01-4cc5-4e46-9af3-b92f8258df97","sequence":{"long":7191},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"176a2066-c56c-4e1f-bae3-85b40dc65291","sequence":{"long":7192},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4e48e2a-d88f-4166-9b4a-5c954804c8e9","sequence":{"long":7193},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce98126f-d9a7-414d-b8b8-38bea3672674","sequence":{"long":7194},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"655e0896-f3af-4559-a8d8-dda8ebed3524","sequence":{"long":7195},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":{"string":"/etc/hosts"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3c127b7-24c5-44ab-bfaa-4bbf41d5bbdf","sequence":{"long":7196},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1031},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1e66860-a583-4874-9f7f-f9d3328d827f","sequence":{"long":7197},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5eb8ecf5-bae1-4e85-b339-e02e3f898c10","sequence":{"long":7198},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76e057ca-4d56-4d19-8840-9af997d6a877","sequence":{"long":7199},"type":"EVENT_CONNECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e0c954e1-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","address":"::1","port":"1","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"867e4579-880b-461c-9e7d-992a9183108d","sequence":{"long":7200},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e0c954e1-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"912ee6a2-d15f-4206-bbd0-4e53744de7ed","sequence":{"long":7201},"type":"EVENT_CONNECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e0c95ac3-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","address":"127.0.0.1","port":"1","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b09854b1-b607-4a44-a6d0-0f5069150d1a","sequence":{"long":7202},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e0c95ac3-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"0a83bf65-e37a-5227-8d64-f188e519901c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"127.0.0.1"},"localPort":{"int":58335},"remoteAddress":{"string":"127.0.0.1"},"remotePort":{"int":54321},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b16aea3-de08-4d0b-bded-f9b777e25eb8","sequence":{"long":7203},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100015},"subject":null,"predicateObject":{"UUID":"e0c95f94-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"0a83bf65-e37a-5227-8d64-f188e519901c"},"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"598bc3a7-b441-5a5a-88a7-aed0cc62b656","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"127.0.0.1"},"localPort":{"int":54321},"remoteAddress":{"string":"127.0.0.1"},"remotePort":{"int":58335},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab1b3d2a-3767-49ee-8558-b6df92b33de9","sequence":{"long":7204},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100015},"subject":null,"predicateObject":{"UUID":"e02dc1a3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"598bc3a7-b441-5a5a-88a7-aed0cc62b656"},"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"147a5510-1303-594b-b996-64659da28382","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"127.0.0.1"},"localPort":{"int":54321},"remoteAddress":{"string":"127.0.0.1"},"remotePort":{"int":58335},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ff24e8b-5541-4244-8feb-3e63b27ee7b2","sequence":{"long":7205},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100015},"subject":null,"predicateObject":{"UUID":"e0c96387-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"147a5510-1303-594b-b996-64659da28382"},"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9e796a8-3112-41be-8340-a99a96f322f2","sequence":{"long":7206},"type":"EVENT_CONNECT","threadId":{"int":100121},"subject":{"UUID":"e0c8424d-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"e0c95f94-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","address":"127.0.0.1","port":"54321","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8db8d44b-196c-4437-8e0d-aa83faee6610","sequence":{"long":7207},"type":"EVENT_ACCEPT","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02dc1a3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"e0c96387-467a-11e9-aeaa-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_accept"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"4","ppid":"1286","address":"127.0.0.1","port":"58335","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"152ca9ab-c6e8-4b0d-998e-1dd8273ec526","sequence":{"long":7208},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9655b87-6e6a-4c6f-81e7-1031eeb61fb3","sequence":{"long":7209},"type":"EVENT_EXECUTE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"4a7e215d-fecb-7d56-8bfe-3c48a67db43b"},"predicateObjectPath":{"string":"/usr/bin/gzip"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582918273899564,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"gzip","ppid":"1286","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7de48fe6-0e31-41cb-9d8c-f63faa24ed02","sequence":{"long":7210},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b91d5297-c7e2-40c6-8996-289b8d9764d1","sequence":{"long":7211},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02276479-efc0-43aa-8f3b-b3ba670a6c91","sequence":{"long":7212},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03ca3088-0b2a-496a-9757-0d23936c3cf9","sequence":{"long":7213},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbdc3cb4-0228-4537-8104-2049667f37fe","sequence":{"long":7214},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffaef65f-8d7f-4094-9e55-c5c661cf6daf","sequence":{"long":7215},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52335ba9-0de7-4f79-9f97-43850b4e0d0e","sequence":{"long":7216},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82179807-7b2f-4c77-b1be-d57316c5e280","sequence":{"long":7217},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":{"string":"/lib/libz.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c7e3aa1-f6c4-448a-9e19-02498c5b7049","sequence":{"long":7218},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae0c04f7-b823-4a92-9484-c4abe7b4d4ba","sequence":{"long":7219},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d65a041-d4f4-4bdb-a06e-463bbacbe7b7","sequence":{"long":7220},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e7c295a-d3fd-41c0-b259-2d43052e0b18","sequence":{"long":7221},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9259ba5-1d57-4379-9cf4-9d7eea9c8207","sequence":{"long":7222},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2465792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6abe00f7-4225-483e-b5f0-6145e81bbc1c","sequence":{"long":7223},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2465792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bad38ecf-28c7-4ff2-b02c-5061a69136ae","sequence":{"long":7224},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2535424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dc32c14-35e8-4622-a47a-016112b48198","sequence":{"long":7225},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2535424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f527fdb8-ada7-4e43-ad92-15e1b5d9e382","sequence":{"long":7226},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81b197cf-3543-482e-82d3-4ce6889ad480","sequence":{"long":7227},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":{"string":"/usr/lib/liblzma.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec1161f0-9681-448a-b1c9-2683ef645d7f","sequence":{"long":7228},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6baddf37-b0c0-4400-8fab-ae33723d50ef","sequence":{"long":7229},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a698bb8c-6796-42a7-9267-061f35fdc503","sequence":{"long":7230},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d3fbf82-9dee-4eb5-90f5-e370b7cf7755","sequence":{"long":7231},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3801a9d-0760-4567-b380-1aa7a7710730","sequence":{"long":7232},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8b31e61-72ce-47ba-b86e-f889eec78a22","sequence":{"long":7233},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8287403-7792-4969-8a12-624ff7e61801","sequence":{"long":7234},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3c8ef75-1330-4b97-bbb6-df1d82876d55","sequence":{"long":7235},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc0cb6a1-fde1-4919-86fa-b10c9241350f","sequence":{"long":7236},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f3a6c25-8579-4855-b77c-3665a6301a68","sequence":{"long":7237},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":{"string":"/usr/lib/libbz2.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"371a19e1-b2cd-4b62-85c1-d858ab874667","sequence":{"long":7238},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fc3e471-bb64-449b-817e-7f558c649dca","sequence":{"long":7239},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b34e677-f3e7-432a-9a6e-e5cc8d1d0b66","sequence":{"long":7240},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"946765d1-91fe-4fc0-9b7f-3799c5cafaf4","sequence":{"long":7241},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4e2ed8b-f9d6-4c60-a5ad-2b4601487c4b","sequence":{"long":7242},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"e0c83aad-467a-11e9-aeaa-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918273899564,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2732032},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1286","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"768b1df0-2e5a-401e-9656-d63cec629238","sequence":{"long":7243},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582918573865723,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":224757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24e0f226-d5d5-4942-8210-54caecf5e0a5","sequence":{"long":7244},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c039feb-4c90-4042-98a9-3526e477ef98","sequence":{"long":7245},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"409","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e9c05ee-bb41-4c20-bf2a-6f2815c068e3","sequence":{"long":7246},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"410","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdffde09-2141-4ada-82b1-393ae1a4f038","sequence":{"long":7247},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"411","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bd5a1c5-cc12-419c-a365-50db8c1faee6","sequence":{"long":7248},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"412","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c98bf14f-af41-4ee9-8300-c3c7534e1c11","sequence":{"long":7249},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"409","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16e5bb01-0c36-4192-9280-2b5ec44fe356","sequence":{"long":7250},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"410","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"578897f3-8b56-48bc-a106-ace0abd912c4","sequence":{"long":7251},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"411","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5713db99-0a12-45ef-a9eb-f5a3856da1bd","sequence":{"long":7252},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919453955875,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"412","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef05ee5e-e225-4871-b931-14cd19d4651f","sequence":{"long":7253},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582919584302803,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":225933},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54856a85-3d58-4290-bac9-9e5e45327570","sequence":{"long":7254},"type":"EVENT_OPEN","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":{"string":"/etc/cron.d"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920014838623,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00e808"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2fee1f1-db16-452f-9c30-99e7bd6fd4f5","sequence":{"long":7255},"type":"EVENT_CLOSE","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920014838623,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc2951e4-5a4e-4f4f-ae0f-2777ec98c515","sequence":{"long":7256},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":225933},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03a11789-f18f-4a98-b303-6c9a0ae29b3c","sequence":{"long":7258},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99290a6c-bae6-4987-ab76-74cb585447ba","sequence":{"long":7257},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71791704-bcb2-4655-a0e8-a6105c48ff54","sequence":{"long":7260},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45f86d9a-1e4f-4fb9-9a94-373d02510c87","sequence":{"long":7259},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90b0e7c8-42f9-4044-b08c-77bacac40b69","sequence":{"long":7262},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d722436f-109d-408d-b426-87ea500e21af","sequence":{"long":7261},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45e97f0c-9d10-4c1e-8109-22b367cd7f84","sequence":{"long":7264},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56abc47c-5172-462f-a1d7-44321e4fb51f","sequence":{"long":7263},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31b041de-8108-4475-ba93-1963a01fe3d5","sequence":{"long":7266},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2bc1ecb-4ed5-4c45-975b-72189f8d356f","sequence":{"long":7265},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6ffe88a-2d2f-44b2-90c4-db7341448947","sequence":{"long":7268},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae5326ef-4555-4493-b2bd-ca24f33e5931","sequence":{"long":7267},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a7dd1a5-926a-43dd-85cf-0a1720f68014","sequence":{"long":7270},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"daec1354-e0af-44c1-a4b4-cd257c9c6455","sequence":{"long":7269},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23bce020-faeb-4580-8873-be35a3e1bc5a","sequence":{"long":7272},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39e8133a-3966-4675-b07c-a369e99edd11","sequence":{"long":7271},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6cd60a5-b69f-47c5-ba6a-0fda448aefdc","sequence":{"long":7274},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcd11c19-17b3-4e3a-b4e0-45451f6c9ada","sequence":{"long":7273},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4fc1ec3-5838-4789-9f5c-8dcf40eb3d7b","sequence":{"long":7275},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fac0f78-ef56-4aa1-b692-6fbb338c2c7d","sequence":{"long":7276},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"992cb0d2-913c-4af3-9543-70b0838cf65f","sequence":{"long":7277},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9602225f-9b6e-421c-9bbe-2ba39a9c9868","sequence":{"long":7278},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3589},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c837923-59dc-4b97-8e7a-6c2a1e326b8f","sequence":{"long":7279},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9cf9022-fc2a-4cee-9b5e-6ec34dacafe0","sequence":{"long":7280},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3642},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c3af78f-6e56-401f-a0f3-991b7197c9d7","sequence":{"long":7281},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3eca54e0-1004-4b22-aad1-8202b12a753c","sequence":{"long":7282},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de830031-f667-425a-ba09-984c649d493a","sequence":{"long":7283},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3961},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb7f970a-c503-4c40-90e5-6afab38dcb7e","sequence":{"long":7284},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4014},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"513eba9b-ac1f-4dd5-95e5-1fb6c3274b61","sequence":{"long":7285},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19ce0e23-44fa-4f52-81ec-c4d6979616ce","sequence":{"long":7286},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78708aca-7890-491e-aae9-9d0b977c17e6","sequence":{"long":7287},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59b584d4-e414-42e1-b272-ffc06f6f329a","sequence":{"long":7288},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3861},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"572f7731-1874-4ac7-ad24-29f60c5ae34b","sequence":{"long":7289},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3914},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ed900c8-b450-41f9-ab60-1017565e35af","sequence":{"long":7290},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"973a0748-947e-43a5-9d32-226896c8ceeb","sequence":{"long":7291},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ce0c081-ee14-402a-988f-967de3d8c044","sequence":{"long":7292},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4da8505-2816-4346-81b3-9102c6450bfe","sequence":{"long":7293},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4183},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fda763f-30b6-4d2f-acdc-80198177869d","sequence":{"long":7294},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2307abf-f40c-4a7c-a54b-c76e6b7de50c","sequence":{"long":7295},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e714aa7d-6048-467a-a30b-4f6b423530ea","sequence":{"long":7296},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41265277-d57f-454e-bf9f-6bb05f76c5d6","sequence":{"long":7297},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4589},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d68b1b08-23ad-4d73-8c38-1a80115515fd","sequence":{"long":7298},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24dd0ac3-d6b5-45d8-aa91-265c8c833339","sequence":{"long":7299},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25f91ed6-3516-4d50-b71c-ee701c8ad509","sequence":{"long":7300},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db7d80ea-bfa8-43c0-a908-f15aa8898e5a","sequence":{"long":7301},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4294},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd0e311c-1444-4138-9e20-455036862e46","sequence":{"long":7302},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d8b761f-76d9-4725-9673-dfa1caed76c9","sequence":{"long":7303},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f399157-1a85-4f07-8613-157c9e5214cc","sequence":{"long":7304},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7a4fa65-9910-4eff-b055-608a3c786e26","sequence":{"long":7305},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4659},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe817b08-3f0d-4c81-9f00-9414a94479ca","sequence":{"long":7306},"type":"EVENT_WRITE","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3513d44d-d66d-4df9-ba90-d461b47fb660","sequence":{"long":7307},"type":"EVENT_READ","threadId":{"int":100122},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920124301843,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cab60f5b-5dd0-4085-bc6a-fabb78a7e188","sequence":{"long":7308},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582920594048818,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":230095},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"799c6aa0-1589-45f9-856b-ab05b58620fc","sequence":{"long":7309},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582921604408901,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":230461},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48ee943e-2af6-4d25-8432-2d2cf2e150b2","sequence":{"long":7310},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":230461},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"966a3120-aee5-4929-ae8f-bc92ae3d7181","sequence":{"long":7312},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c80a97e3-2131-4bf4-a209-872f38ff1808","sequence":{"long":7311},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ea1f4d0-36cb-41a0-975a-3e5035e1fedc","sequence":{"long":7314},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cd1bfca-96fa-42e4-9192-4732d3a88970","sequence":{"long":7313},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a32a3acd-22d2-4e62-8485-c97b5ae51184","sequence":{"long":7316},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"444de467-4bb7-490c-92fc-224d0530e631","sequence":{"long":7315},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8dc65365-cab7-4d4d-a7de-efb5272150ac","sequence":{"long":7317},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0a5dfba-deb1-48d3-867c-295334a56e87","sequence":{"long":7318},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c89b264b-f7b4-4a7f-9b4b-66292a9fd0a2","sequence":{"long":7319},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc152b98-4e3a-4214-9dc9-1cf3394b19d2","sequence":{"long":7320},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4158},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1eaabc54-3022-4138-9843-ed74849ce71b","sequence":{"long":7321},"type":"EVENT_WRITE","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"380e7283-9d5c-4740-b616-960e136168dd","sequence":{"long":7322},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4211},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5383025d-3e49-465e-8b50-f68d5d16e62c","sequence":{"long":7323},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6aee77e-677b-4473-b9e7-36f8abe0d1b9","sequence":{"long":7324},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63428f92-02ef-4868-ad87-e163dbc9bba6","sequence":{"long":7325},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":362},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9831ad75-187c-4738-abe8-b70b04926a15","sequence":{"long":7326},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":415},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0396a1a7-fda2-494e-b59c-447c98e12361","sequence":{"long":7327},"type":"EVENT_WRITE","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9253c88-f175-4f1f-a97e-329ddde934e8","sequence":{"long":7328},"type":"EVENT_READ","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e345267e-5cab-475a-8999-9f7155f0fccc","sequence":{"long":7329},"type":"EVENT_SENDTO","threadId":{"int":100123},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"414","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7867065-30bb-4900-9557-d9da29402c2d","sequence":{"long":7330},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"414","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc424b17-4b03-49b0-80b6-3da42a703b7f","sequence":{"long":7331},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922124085113,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28d206c7-026f-4dbd-86f1-47e30c586a70","sequence":{"long":7332},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922134392999,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17766899-5af2-4158-a337-49ba27346216","sequence":{"long":7333},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922134392999,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4733651-6c37-4771-83d2-c46aa93e5953","sequence":{"long":7334},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922134392999,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ac448c1-9a7f-4f6c-a6a6-4b98f9a01791","sequence":{"long":7335},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922134392999,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3fae2b6-1b41-40ed-8991-157a09b438a1","sequence":{"long":7336},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42bf284e-4f51-4c5c-9163-ca15ee7ecf79","sequence":{"long":7337},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"415","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68218a4e-eef8-4d5d-97db-8f45c5bac087","sequence":{"long":7338},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"416","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3c5b3b5-e431-49c1-be10-e0d5bd72e8a2","sequence":{"long":7339},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"417","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29929fff-7f4b-4631-afd9-8d84d23476d1","sequence":{"long":7340},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"418","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a1ebbf1-bcd0-4711-ad1e-1afcb0f7819c","sequence":{"long":7341},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"415","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb351ed1-5e02-477d-8d02-dce3591cd08a","sequence":{"long":7342},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"416","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a656cd2f-3a90-4a79-ac8e-84c3ed204612","sequence":{"long":7343},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"417","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"298bb737-f3ad-4015-8826-39eef87d8514","sequence":{"long":7344},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922455276197,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"418","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88d93321-e131-46ba-9877-dc659acf5007","sequence":{"long":7345},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582922614154307,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":233683},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18353bc5-5012-4e1c-842d-aa5d3320ce9b","sequence":{"long":7346},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582923626871472,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":234048},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c217eb4-d538-40f0-b655-568d0d2c51e3","sequence":{"long":7347},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":234048},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"221ff534-56b2-4a99-8f6a-12f72e859008","sequence":{"long":7349},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e268bc51-0b94-43a6-a6ba-36ad301bda78","sequence":{"long":7348},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"358e3827-e9cc-4bd1-b9c8-eb435d18665d","sequence":{"long":7351},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c244c9a-6912-4373-9f91-c4e9dd48354a","sequence":{"long":7350},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d07b565f-4c31-41e3-8b40-7427723b81d1","sequence":{"long":7353},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc915da2-f18f-4920-850e-26560435d416","sequence":{"long":7352},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f82466d-86f7-43f1-b5f1-4ff668dd1947","sequence":{"long":7354},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3df71084-dea3-41df-bb85-412cda107212","sequence":{"long":7355},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"addef3bf-8132-46e7-97fc-303592ca3a06","sequence":{"long":7356},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1478ed3-a974-4618-922d-dae41f2987d7","sequence":{"long":7357},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3218},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"851e4fb3-b1db-4595-a86c-9689a16e01c8","sequence":{"long":7358},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3271},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bbc2505-0891-4d7c-9793-413ad942f6fa","sequence":{"long":7359},"type":"EVENT_WRITE","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4deb4e5c-e3f6-4e07-8f57-713cb2e7f4c9","sequence":{"long":7360},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e5d852b-3ed0-4637-a0e0-af180873c8d7","sequence":{"long":7361},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba05c5d1-c9cc-4f5c-b932-8c0f1a1b17ff","sequence":{"long":7362},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c0020de-8ef1-408d-bd8d-9d81fad53771","sequence":{"long":7363},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcfd5cdc-13ee-4600-9f4b-ed7d9600b122","sequence":{"long":7364},"type":"EVENT_WRITE","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d502073a-aaba-4b7a-91c9-73795fe8c376","sequence":{"long":7365},"type":"EVENT_READ","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49f768f9-2420-4ae3-bc28-8dffdc55ed8e","sequence":{"long":7366},"type":"EVENT_SENDTO","threadId":{"int":100124},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"419","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0b7fd47-ab19-4590-a5f7-c5547b127249","sequence":{"long":7367},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"419","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0eb29058-31fa-47d5-9b2e-d1615af843eb","sequence":{"long":7368},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"102e56ab-e9b7-4a33-bdd4-65f2f86754c0","sequence":{"long":7369},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08ed5a1e-f47e-4040-9499-4f52df862517","sequence":{"long":7370},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8a22588-ed89-4cb9-b3e8-f86d42209ce5","sequence":{"long":7371},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70f8bb0e-adca-4900-a7cf-0d272ada5011","sequence":{"long":7372},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924124301064,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7ff574e-5839-4a9a-bf12-c7f92806d2e7","sequence":{"long":7373},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582924634267384,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":236454},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbcda084-8e5e-4181-973b-b2253517dfe8","sequence":{"long":7374},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"390d0156-d297-4c28-bf3d-2b99a6278960","sequence":{"long":7375},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"420","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48b81aa8-04e8-49a3-864e-ada4f4a0efd7","sequence":{"long":7376},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"421","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34cfd517-5ce7-4200-b148-f8e511eccbfd","sequence":{"long":7377},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"422","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aea1a5e1-4327-42dd-a94e-703fe5cae692","sequence":{"long":7378},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"423","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"228977bf-4fa9-42ed-b5ca-d07362525bc5","sequence":{"long":7379},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"420","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e10dc02d-0200-4c00-b30e-5f89e80b596b","sequence":{"long":7380},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"421","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e45fcc6-412a-4b83-b9a4-6902ebaaf4c7","sequence":{"long":7381},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"422","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f2f9fa5-ca38-4877-972a-437303bdc40a","sequence":{"long":7382},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925454237701,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"423","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"930fbaaf-7b2a-4058-b21f-cf981e56f9dd","sequence":{"long":7383},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582925644157193,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":237625},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89672733-7c22-4355-9bb2-e23275998598","sequence":{"long":7384},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":237625},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6645ad75-61bf-41e1-88d7-70a279f4823a","sequence":{"long":7386},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07bf51af-9bf1-45bd-b1f5-cd3dd130dd02","sequence":{"long":7385},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fec78c5d-db7f-48b3-aed9-b394da760b9e","sequence":{"long":7388},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90583426-6de5-46b0-848e-9c9a10a2248d","sequence":{"long":7387},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcb1fe11-e9ea-47bf-a701-a42e4dc39d86","sequence":{"long":7390},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97db87b4-1f0c-4446-a822-9ef4978a1537","sequence":{"long":7389},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a72604b-8711-4f03-a885-29a3c135e6e4","sequence":{"long":7391},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b507c4b-62dd-400a-bd6a-accc35ae2f0f","sequence":{"long":7392},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc96622d-c870-4174-9a1c-e0bf5201accc","sequence":{"long":7393},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b055e66-1296-4f8a-8c1f-7f755164ea73","sequence":{"long":7394},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2402},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82724f27-90bd-4454-96a1-026a85a8586c","sequence":{"long":7395},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2455},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c82d38c-ce3e-4a35-b935-328a0258d049","sequence":{"long":7396},"type":"EVENT_WRITE","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9909f3a-8c85-4d9b-865b-968c9b697771","sequence":{"long":7397},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c006dfbb-baf2-4353-a469-3b694ef0d0fa","sequence":{"long":7398},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3d975b5-a4bb-4fee-aef3-aae0b088e435","sequence":{"long":7399},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1167},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ba77463-7c41-4ee0-98d1-d961a900ca28","sequence":{"long":7400},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1220},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad1af4b1-8d19-42c6-b5d1-5418f668f83a","sequence":{"long":7401},"type":"EVENT_WRITE","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae39b1e5-d899-4ad9-a19a-55556458b8aa","sequence":{"long":7402},"type":"EVENT_READ","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4206f01f-7e8f-4833-a469-79d7a7e568f4","sequence":{"long":7403},"type":"EVENT_SENDTO","threadId":{"int":100125},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"424","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0060282a-7f6b-49db-a671-e94197c7648b","sequence":{"long":7404},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"424","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8065e24d-bf83-4242-85c7-1a5fd9621dac","sequence":{"long":7405},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"473669c4-805b-4022-846b-d224c5e0925d","sequence":{"long":7406},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e613882-ec6a-4c62-9cb0-ad7d4786be3c","sequence":{"long":7407},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c085d04-5886-4005-bb44-0dcae7f75863","sequence":{"long":7408},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"215e5cc1-cc02-4c59-8461-907381c0f076","sequence":{"long":7409},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926124364179,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dec24521-f105-450c-b4a2-e6b11aa23187","sequence":{"long":7410},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582926684053300,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":240035},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16045cc1-fa7c-4473-99da-4abf210b332b","sequence":{"long":7411},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582927713020504,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":240399},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21b245e6-3714-490e-a2b5-8e2f592e73c8","sequence":{"long":7412},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":240399},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd5ff035-4471-48a2-920f-7cb994521d72","sequence":{"long":7414},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"983f7e7e-aa2e-4ac8-b833-a12c52daa0fe","sequence":{"long":7413},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c7f7f3f-0cfd-4ff3-8bba-0e062b526ae7","sequence":{"long":7416},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b47d7d15-ca72-476b-a594-ce6632fa8cb6","sequence":{"long":7415},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f44518d-4b20-4b5f-b41a-de23ac93f19b","sequence":{"long":7418},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a403c26d-4128-473c-ab56-7a53e70941ce","sequence":{"long":7417},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72e56948-81b6-4447-b0b8-2fc5a44f9f8d","sequence":{"long":7419},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ef20d13-e4a1-40d8-8ac9-f30464d5a3f4","sequence":{"long":7420},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d02a94c-765a-48e6-a729-2b2ba3c0d466","sequence":{"long":7421},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f91e1247-9418-4db4-9a36-92b7c8454078","sequence":{"long":7422},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2406},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76318827-dcbe-4c47-9ecf-2c08679096e4","sequence":{"long":7423},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2459},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe262eaf-366e-42e8-adfc-0631af8b1144","sequence":{"long":7424},"type":"EVENT_WRITE","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3f3f2e0-4d48-4927-9b0f-661225306f25","sequence":{"long":7425},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7218ac1b-1397-473b-b2de-6de3fc5b84c1","sequence":{"long":7426},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"901d605c-5d25-448d-bcbb-5f691a547585","sequence":{"long":7427},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbad45fc-6902-473b-80cf-229f8ad56e36","sequence":{"long":7428},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b74252ad-c24c-4576-adc7-a1c1d177b7e7","sequence":{"long":7429},"type":"EVENT_WRITE","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4439c5e7-b344-4608-8880-28d417aef756","sequence":{"long":7430},"type":"EVENT_READ","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"897470bd-5dd3-46d2-8e35-ed55b5576561","sequence":{"long":7431},"type":"EVENT_SENDTO","threadId":{"int":100126},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"425","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba9b005d-1599-43b6-b9b2-3576342de301","sequence":{"long":7432},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"425","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e02de06c-6096-43cd-a767-8de48d09ae04","sequence":{"long":7433},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928124226268,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33c0c34a-1185-45c9-9a90-a29939c5059b","sequence":{"long":7434},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928134166897,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d609553-acbb-42b1-ae4e-4ca203c512fd","sequence":{"long":7435},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928134166897,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ea518ab-659d-4ed4-b880-be0eb1053444","sequence":{"long":7436},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928134166897,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"615b3203-de92-44c2-9b88-e12a4ce7b56a","sequence":{"long":7437},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928134166897,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98bc829d-fc1e-4037-84ee-08a077e09582","sequence":{"long":7438},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96ea08dd-c44f-463a-a8f2-b531135dfea8","sequence":{"long":7439},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"426","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"171e7092-c51a-4ba3-a70b-de69adc9b91e","sequence":{"long":7440},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"427","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adf1561f-0e04-4ce9-8a9e-a4bf71edc311","sequence":{"long":7441},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"428","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"873051cc-3e79-49f4-9ea6-a4c5c8da1235","sequence":{"long":7442},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"429","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3254173c-77e2-4077-a325-a1d50b7599e0","sequence":{"long":7443},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"426","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"663fcb2a-6316-4416-aac6-477076aaf7a6","sequence":{"long":7444},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"427","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ac22afe-0891-4f34-a2b6-07163b189b19","sequence":{"long":7445},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"428","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65c29f33-e36e-4e43-8e59-3c8716d1e104","sequence":{"long":7446},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928469171529,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"429","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae2bcc7b-a52d-412b-b787-36cb9cff89a3","sequence":{"long":7447},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582928774225532,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":243606},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b8dbeb2-7062-416c-b8fd-956329d6d3da","sequence":{"long":7448},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582929784157083,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":243971},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c3da374-551f-4f0d-9b4c-558eb7653c6f","sequence":{"long":7449},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":243971},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3713cff4-2cba-46bf-9287-3f08ac89ebb0","sequence":{"long":7451},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b39132a-9975-4ad7-820c-47acb70ca930","sequence":{"long":7450},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28ebcd9c-af8f-411c-ae1f-ba376c0fa4e6","sequence":{"long":7453},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b90b2bdf-20b7-49cd-ab4a-f0bd1846c303","sequence":{"long":7452},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bf8cd64-505b-4a35-88ce-888fbf14907a","sequence":{"long":7455},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"363930ca-a85d-4d9a-b396-0249fb3902b4","sequence":{"long":7454},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb7e1105-ef72-48b7-9b5a-7389b8e55ebf","sequence":{"long":7456},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"787484d5-cf77-4356-9f0b-c780273ab6ec","sequence":{"long":7457},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba409c43-3bba-42dd-836b-68f43ba5a27c","sequence":{"long":7458},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15d54f32-c3ce-4f65-a69b-a7c028de3153","sequence":{"long":7459},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3203},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ed5a15c-47bd-41ad-8794-cbad642a12de","sequence":{"long":7460},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3256},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03780bd8-6c0f-47df-9369-6ff582858b47","sequence":{"long":7461},"type":"EVENT_WRITE","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d11b5de-7201-4b33-9817-7f5cc494f79c","sequence":{"long":7462},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce680b6c-be4b-4acb-8aae-3cc0029bd863","sequence":{"long":7463},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"794245d2-9aa0-49bd-92e3-fd90971397c5","sequence":{"long":7464},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8410819d-b351-4823-b5fc-161805c896d5","sequence":{"long":7465},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6521d90e-fd42-428b-92ea-2dd65fc48d42","sequence":{"long":7466},"type":"EVENT_WRITE","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"278d8377-1794-41f3-a311-6483bfc31eaa","sequence":{"long":7467},"type":"EVENT_READ","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf1778ec-6199-4b50-8847-74ee9d40b9b6","sequence":{"long":7468},"type":"EVENT_SENDTO","threadId":{"int":100127},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"430","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7aef147-4e74-48c2-a031-989ec6398ffb","sequence":{"long":7469},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"430","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f6391b6-ffd7-4d49-86c5-4beca7e956fa","sequence":{"long":7470},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930126236740,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50677f95-52e4-4fb3-82da-85b1e30a9d51","sequence":{"long":7471},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930164402700,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bec3a1ba-b2f4-41b7-9b43-a82fa8008a0b","sequence":{"long":7472},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930164402700,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c5c4bbf-b302-4754-ab13-97c2d8be67d0","sequence":{"long":7473},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930164402700,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fa6f9c7-86f0-4964-b78f-e37a9e5bbdbf","sequence":{"long":7474},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930164402700,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e440ae7-5627-40a5-a735-212ae768c3fd","sequence":{"long":7475},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582930834131946,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":246392},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3219a81e-0810-4bea-9af7-33c1d9c6765d","sequence":{"long":7476},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6a732e8-7eee-47b6-8203-ef067c465aa6","sequence":{"long":7477},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"431","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57ec37ac-85e0-4590-9b63-b4c2a3513c40","sequence":{"long":7478},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"432","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"204f5eb8-6e3c-4c1b-8b7a-2c4039af0bb3","sequence":{"long":7479},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"433","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04673028-e845-4871-8951-b31c474dcde0","sequence":{"long":7480},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"434","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcc23c16-f3ac-4aac-af61-296095704b6c","sequence":{"long":7481},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"431","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f20c9b54-5940-4e8c-8c5e-3404ef6901f4","sequence":{"long":7482},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"432","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bb03d5b-5d69-4d23-976b-c87ff7a88a6c","sequence":{"long":7483},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"433","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88c51c32-9c3d-4ef6-bcba-77bd28f9e9f6","sequence":{"long":7484},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931468915131,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"434","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28005825-ae4b-4c24-a95d-9877e786015a","sequence":{"long":7485},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582931874490959,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":247570},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3b0d72a-d65a-4604-b267-1c910411d76a","sequence":{"long":7486},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":247570},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c180653-e4e9-4ba5-b4e1-29fbb5ba2d2e","sequence":{"long":7488},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3309232e-f94c-4814-8df1-a03dc652e2cd","sequence":{"long":7487},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e77bb783-bb98-4949-9228-178cee3e2343","sequence":{"long":7490},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea768d62-33b8-4536-b48b-50838cad92ea","sequence":{"long":7489},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11f0de20-6a9e-4e99-a87d-4e2791b913b8","sequence":{"long":7492},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f60ceb9c-0c85-49c1-8ca7-33bef4c463d6","sequence":{"long":7491},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b237cdc-eea8-40f4-9da7-9f30449a8a79","sequence":{"long":7493},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71b77f4f-63df-4f60-91bf-408d4732c702","sequence":{"long":7494},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d256ce4-c150-433c-baf4-85df4fe218f3","sequence":{"long":7495},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85ee68dd-8b68-438c-b70e-feeb81ce4e2a","sequence":{"long":7496},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2417},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20b6ba10-abc4-4dc1-8c97-5eb503518477","sequence":{"long":7497},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2470},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"114df68c-690a-481c-a67d-8d34ea7f6fba","sequence":{"long":7498},"type":"EVENT_WRITE","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0db1d4a1-6763-404a-ae10-35e7e237c79e","sequence":{"long":7499},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fc9184f-1211-4106-9c0b-394465b48222","sequence":{"long":7500},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"999ab498-c539-4528-9a77-1daa99e809a5","sequence":{"long":7501},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1174},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c716b8c2-0b27-4256-92c4-5c861b6ea0e7","sequence":{"long":7502},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1227},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bf322e3-83b0-4440-b3ed-bae493fd236b","sequence":{"long":7503},"type":"EVENT_WRITE","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0020dee5-939a-43a1-a3e6-dfb29fdedecd","sequence":{"long":7504},"type":"EVENT_READ","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96ca6843-ca64-461f-8289-e4849d547178","sequence":{"long":7505},"type":"EVENT_SENDTO","threadId":{"int":100128},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"435","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e20cb4a4-4e7a-438e-8a33-6cbf09919286","sequence":{"long":7506},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"435","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57405d79-c084-43e7-b1f9-c436edf0358d","sequence":{"long":7507},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932125493089,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"545f90c3-a1f5-4d80-8a6d-941361aef7e8","sequence":{"long":7508},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932134613200,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11e0ac5d-aa25-4b28-887b-07fbe8bc01f5","sequence":{"long":7509},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932134613200,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"205d19ca-7eb5-4cc3-8a81-a93215133b86","sequence":{"long":7510},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932170453790,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e30293c7-bd19-47b1-9630-68db74f8fe31","sequence":{"long":7511},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932170453790,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adead9a1-9cb8-410f-aa2f-849e22f1016c","sequence":{"long":7512},"type":"EVENT_READ","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c96387-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23af4bd3-0860-490b-a0c6-06a3f3b09b6f","sequence":{"long":7513},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e0c96387-467a-11e9-aeaa-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2103b63f-8609-4745-bfce-eb3c6b6424bc","sequence":{"long":7514},"type":"EVENT_CLOSE","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02dc1a3-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dab9e966-451e-4fdd-9529-e68a0fc11d6f","sequence":{"long":7515},"type":"EVENT_EXIT","threadId":{"int":100118},"subject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"e02d16f1-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1286","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c50e9de-b1f4-444c-bf78-bbe41cf59a32","sequence":{"long":7516},"type":"EVENT_SIGNAL","threadId":{"int":100109},"subject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"df8637e6-467a-11e9-aea9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_kill"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"pid"},"runtimeDataType":null,"valueBytes":{"bytes":"0506"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"signum"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1286","arg_euid":"1003","arg_ruid":"1003","arg_egid":"1003","arg_rgid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd04a4e3-fe67-44ad-a83c-87957661c2ce","sequence":{"long":7517},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f05a98e2-fe26-4670-99fe-85c7931470a0","sequence":{"long":7518},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ad9594d-6ca8-48fc-a2c4-a36e3f85c932","sequence":{"long":7519},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932769036825,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":50},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85fe7075-1614-4c1a-a601-aaeee9bd879c","sequence":{"long":7520},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582932967496110,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":250819},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b40d32d4-b472-42bb-8411-52f52d55dfac","sequence":{"long":7521},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582933969545910,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":251183},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1db5fd2a-3205-4669-a985-e03779390e80","sequence":{"long":7522},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":251183},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c81b1d3-4a91-4ce3-9747-55d3e1ca46c0","sequence":{"long":7524},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef617811-b195-490a-8687-25ed76b5feaa","sequence":{"long":7523},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4460d2ec-8624-4d79-9135-07b3a4d7460f","sequence":{"long":7526},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93dc4c8c-b3a5-4750-9458-66a3ef2de495","sequence":{"long":7525},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e47eec9f-e6b6-4090-9ce5-62a605ce8acb","sequence":{"long":7528},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5c9e021-b1f2-44b9-9463-4261b0c7e6f6","sequence":{"long":7527},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06a10270-819b-40f0-98ff-a82e3be59b68","sequence":{"long":7529},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42dba6e0-76c2-48c4-b67d-ffe868dd5b04","sequence":{"long":7530},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2a44813-4767-4f34-ba76-b0683f4fb218","sequence":{"long":7531},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb335a38-a3ec-4463-81af-49dd3ff9c96d","sequence":{"long":7532},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3245},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1485b170-475e-426b-aa39-588eca01348f","sequence":{"long":7533},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3298},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4b9d78f-56a7-4c2f-85b2-dfbf9d27d2f5","sequence":{"long":7534},"type":"EVENT_WRITE","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c13f48f6-b7c9-45f3-863b-215af835bc19","sequence":{"long":7535},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd934776-631b-4532-8bb8-cbf9b5a1c835","sequence":{"long":7536},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cedd881c-f1cd-4bc9-8772-e53d9814f28a","sequence":{"long":7537},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbd03148-7b81-4e7e-81ce-21a7f91978cf","sequence":{"long":7538},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a36b2bf-60a5-47a9-b694-98b03806a155","sequence":{"long":7539},"type":"EVENT_WRITE","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce8dab2b-8867-4188-b103-c93df02ecdec","sequence":{"long":7540},"type":"EVENT_READ","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0aba6b0-48f0-4596-a14f-2d29039c70b9","sequence":{"long":7541},"type":"EVENT_SENDTO","threadId":{"int":100129},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"436","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e52ceb45-5495-4ff1-85ff-a9ea00ea31a0","sequence":{"long":7542},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"436","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58ac5a7d-8676-444d-a582-f3a3caf3966b","sequence":{"long":7543},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934124138338,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ce954e2-2b73-4d18-9911-28bb1fb124df","sequence":{"long":7544},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934133927192,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efca0fd9-7a55-469b-a562-18c9905a39d9","sequence":{"long":7545},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934133927192,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8acbdd20-cfd9-4763-bcec-09038f74d0bd","sequence":{"long":7546},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934133927192,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23d84e11-223b-4bd4-8f09-afc3195e3082","sequence":{"long":7547},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934133927192,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f40d0929-c29c-42b8-9c57-b21f0e26cc97","sequence":{"long":7548},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e1f3351-0533-4e0e-a1f8-0f66c38c73b6","sequence":{"long":7549},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"437","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20f63eef-b5ac-436e-a37a-12b3cf80e530","sequence":{"long":7550},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"438","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f84df84f-ea40-428c-8e91-0fc294e76a8f","sequence":{"long":7551},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"439","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4c8d475-44ce-4c7a-bfb2-d7cbe068859c","sequence":{"long":7552},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"440","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a78eab9-fa63-4118-9639-cb016e53cbc5","sequence":{"long":7553},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"437","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9c2426f-59fe-4598-b39f-e1c6a355503f","sequence":{"long":7554},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"438","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44e024c1-2839-4575-9a05-d3378c42235a","sequence":{"long":7555},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"439","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d189428-5682-430b-a9f7-891e478a4de9","sequence":{"long":7556},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582934470168651,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"440","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b56369df-87dc-4c3f-8b5b-b333180e7542","sequence":{"long":7557},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582935025523231,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":254399},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1951b64a-360e-49eb-819c-8fc02f595ea9","sequence":{"long":7558},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936033905299,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":254762},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21ce59dd-2be4-4533-ad5a-3f3a0947f438","sequence":{"long":7559},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":254762},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"125819f1-23d6-4d19-b15e-4aa026f5685e","sequence":{"long":7561},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bf4310c-a741-4a1e-bde0-40bc4378a0f8","sequence":{"long":7560},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"838567d8-7474-4c81-89ab-b555ef66ed8d","sequence":{"long":7563},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eddb23f9-21da-447c-b96a-b5375fe21b3b","sequence":{"long":7562},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a550db4a-1903-409c-af60-0a4bafd6d3ed","sequence":{"long":7565},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b10a4d90-5a8e-454b-9e71-a0fecea74d6f","sequence":{"long":7564},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83202a33-e359-4583-af47-636a2b3d39b3","sequence":{"long":7566},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0eb9abd0-259c-4878-9eeb-e315c86c6c9d","sequence":{"long":7567},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da0b62ab-382a-46ef-9cd5-222105ea0eb4","sequence":{"long":7568},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fbbe64d-8899-45d7-adf0-429d5cf88135","sequence":{"long":7569},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3212},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9adfc7bb-b994-460a-97a7-8ded49ea1ecc","sequence":{"long":7570},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3265},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a42c5d8-9fd6-4118-b08f-87bbcbd1e022","sequence":{"long":7571},"type":"EVENT_WRITE","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e64903ed-caac-4daa-b58b-f756a27b5f44","sequence":{"long":7572},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b5cc85e-b059-4654-a449-100b3bff13ce","sequence":{"long":7573},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3620afe0-6f18-4eb6-b458-e6510ccc3c8a","sequence":{"long":7574},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ac6f5af-290c-4ecc-a464-faf3d58706d8","sequence":{"long":7575},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7e6aab9-0f90-4f1f-86ab-63ae167ccf17","sequence":{"long":7576},"type":"EVENT_WRITE","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51c51ecf-1088-4e3f-944c-fd3e14f37196","sequence":{"long":7577},"type":"EVENT_READ","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca6abb0a-8f0b-4f38-88b7-a1f5bc100055","sequence":{"long":7578},"type":"EVENT_SENDTO","threadId":{"int":100130},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"441","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"521f8d72-1f9b-4dd3-95bf-a0f19731452b","sequence":{"long":7579},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"441","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfc8650e-657a-4dc6-9787-d6f6a9eda159","sequence":{"long":7580},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ff0f481-7a7a-4f92-8f4a-7e1b366285ba","sequence":{"long":7581},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f4e26f8-bb1e-4fe1-8a7a-5f6ca3ade03c","sequence":{"long":7582},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936123929158,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6af57cb-8cb1-4424-8c5e-c12ad7f1dfee","sequence":{"long":7583},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936133880472,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b271126f-d5f9-4074-9e57-b562b315dfa6","sequence":{"long":7584},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582936133880472,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab745f5b-a437-46be-92bf-444355f7c814","sequence":{"long":7585},"type":"EVENT_READ","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582951268242273,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f47acbf-345f-4392-b423-740fd481f2f3","sequence":{"long":7586},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"c1555c7c-d38e-9a58-8ed3-e319889a0469"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582951268242273,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66ed3c02-b22b-4248-8aa7-b40a0bb17c91","sequence":{"long":7587},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582951268242273,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1d09e3d-92f3-4b1e-927d-acb3b8135a6e","sequence":{"long":7588},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952124549143,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":257176},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cb0cc85-3534-48c5-a55e-83924e20966d","sequence":{"long":7590},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582952124549143,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ae7c903-ad50-4822-bcd6-81d2e8821054","sequence":{"long":7589},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952124549143,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d2e246a-5d49-4e3a-a502-1fc4b46e46df","sequence":{"long":7591},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952194028767,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":258177},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97ea5188-9459-4f1c-a7cf-cf338c39eec7","sequence":{"long":7592},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52ed2403-c8f7-4e7b-98c5-0ffb9254b7df","sequence":{"long":7593},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"463","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93998a5c-ce4d-476c-854a-aa885d39642a","sequence":{"long":7594},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"464","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75d045e4-488e-454b-8407-6088713ebe4d","sequence":{"long":7595},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"465","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"308da755-c96e-46d0-9c59-85804a93cb6c","sequence":{"long":7596},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"466","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff307d99-2070-4056-9757-338111eaf781","sequence":{"long":7597},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"463","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bffe11dc-85b2-4ecf-bd85-b8c9c9be6f06","sequence":{"long":7598},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"464","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a817a59d-ddca-4aea-b177-eb32a6a0be9c","sequence":{"long":7599},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"465","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0300c719-f13f-4789-a78e-c905d6f4811a","sequence":{"long":7600},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952524635900,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"466","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"763d0a2b-a1e6-4f73-9f27-f123faa33daa","sequence":{"long":7601},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952664295450,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f21e980b-6320-4959-b8ea-4b560724f616","sequence":{"long":7602},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952664295450,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"531ebba6-8c4c-401d-b7b0-d16e3103a80c","sequence":{"long":7603},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952664295450,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b04c7b58-c27d-4dbf-9afa-37d01f63a7d9","sequence":{"long":7604},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582952664295450,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4658711a-e855-46b9-bcd5-a0aa06d86a6b","sequence":{"long":7605},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582953204141200,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":259659},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad14e605-8263-418f-b4ea-52c55a84f171","sequence":{"long":7606},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582953588138412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e845e451-b61f-42e5-bdfc-7273672a629d","sequence":{"long":7607},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582953588138412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b3bf611-fe5d-4b94-b054-8ea222ac9239","sequence":{"long":7608},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582953588138412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ca7236b-f628-4f2d-8856-bd7ca1412746","sequence":{"long":7609},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582953588138412,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":21},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edf18923-067f-4856-9992-ef2812f833cf","sequence":{"long":7610},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":259659},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18b7ca1e-8d8e-4c1c-bd7e-52d00ce9ed50","sequence":{"long":7612},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa4ffc51-501e-479a-aa1b-b60ecc6f8b82","sequence":{"long":7611},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec0c3374-cb4e-4d2a-9698-efccad69f5c7","sequence":{"long":7614},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81637b37-2f02-4036-ac1b-57578a67e80f","sequence":{"long":7613},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83716287-2599-48c2-b0a2-2060329e2a78","sequence":{"long":7616},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bc7777e-60ae-4586-ae8a-6472381a477d","sequence":{"long":7615},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74f8eee4-dbdc-4222-93f2-1b04c179fb00","sequence":{"long":7617},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd1364ef-29ea-4b03-81d2-36c167e18bd2","sequence":{"long":7618},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5105cf67-fbd8-424c-ba2d-481a07b71a84","sequence":{"long":7619},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65482a2e-38cd-4ce9-92f6-7c9083e4e924","sequence":{"long":7620},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":997},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"033b4f5d-aaeb-45ef-840c-026412ff25b9","sequence":{"long":7621},"type":"EVENT_WRITE","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1cdef45-25e0-49ed-884c-3e9424c6be0e","sequence":{"long":7622},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1050},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f76aa01-6ca3-42f2-b809-227681f95c19","sequence":{"long":7623},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c59da6d-26e4-4efe-b01a-1bb71da47d9c","sequence":{"long":7624},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12e5a0db-15b1-4767-b363-bc453773195c","sequence":{"long":7625},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1478},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fdb95e6-ac54-4847-a6be-d695f1e508f3","sequence":{"long":7626},"type":"EVENT_WRITE","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"395cac76-7959-4566-8d41-ffaf5404d8a7","sequence":{"long":7627},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1531},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf7e4902-028d-4594-a400-26a862369903","sequence":{"long":7628},"type":"EVENT_READ","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e34d1cca-93dc-478e-8509-6dff54bd930c","sequence":{"long":7629},"type":"EVENT_SENDTO","threadId":{"int":100132},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"467","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1303ddf0-076a-49e1-90d8-a8ac085d8af4","sequence":{"long":7630},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"467","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79d2762b-6d1f-4918-87a8-2c5dcf84ad42","sequence":{"long":7631},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dd750f4-3e7e-49d7-8d50-79612d240558","sequence":{"long":7632},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd81dd90-9d79-4c1a-99e4-f40f8eecf904","sequence":{"long":7633},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954124034740,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf2d7d4d-f23d-4e1c-926f-1528a57cca92","sequence":{"long":7634},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954133942560,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b317b3c-efaf-4412-b47d-8520ae4e68ed","sequence":{"long":7635},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954133942560,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1713019-fb26-49c3-9115-067c2180565f","sequence":{"long":7636},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954219192362,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":262471},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af7b3c84-893c-4d4d-be5d-8ebac2de2e5d","sequence":{"long":7637},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954506555215,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a25a61c3-855f-4656-91aa-912e07487b17","sequence":{"long":7638},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954506555215,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f88b97d-b981-450c-982d-a00d609eb825","sequence":{"long":7639},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954506555215,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6019ff97-9854-4bec-b79d-6e749267f6e2","sequence":{"long":7640},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582954506555215,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":51},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ef11a20-3c68-417e-9eec-e40662a91fb0","sequence":{"long":7641},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955224328560,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":263158},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd1d50d3-50cd-495b-baa7-1f1c99b2e1ee","sequence":{"long":7642},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955413909882,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d11beac9-5297-4caf-b897-85553fee5fa2","sequence":{"long":7643},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955413909882,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"059d8cc6-6961-414a-9153-e0aedccd92dd","sequence":{"long":7644},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955413909882,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2dce480-a58e-48b0-8d20-082359f81521","sequence":{"long":7645},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955413909882,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":37},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f44fd426-2493-4413-9713-a2c2a1d59e3d","sequence":{"long":7646},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60c9d8d6-4329-4ce4-baeb-d2113e39d231","sequence":{"long":7647},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"468","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ef9f185-c6fe-4ebd-9acf-50b07433b482","sequence":{"long":7648},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"469","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d86f9ea-d4dc-452b-93b3-865add1f3c33","sequence":{"long":7649},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"470","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a80a0da-da8b-4f80-b405-b0f35e01c521","sequence":{"long":7650},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"471","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d53b28f4-713b-4e82-bd07-3518d9f64ba0","sequence":{"long":7651},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"468","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c11054a-a513-4515-9008-4a5bd235983b","sequence":{"long":7652},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"469","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aafb253f-d7ab-441a-b645-4e6dd3baebe4","sequence":{"long":7653},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"470","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4c1ff77-2300-4135-92e2-7f17f4ee38f7","sequence":{"long":7654},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582955524478350,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"471","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86e339c5-f3fa-4568-8d16-aefdbe3bd3f1","sequence":{"long":7655},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":263158},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a68eb8e-d2fa-456f-99be-da1bf2c15738","sequence":{"long":7657},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcfc4226-dae6-4478-8725-6559986df308","sequence":{"long":7656},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d64f2c14-2db9-4bc9-bb02-f72ed1a2feaf","sequence":{"long":7659},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47fb2cbb-5f73-415c-b083-2ead303f8112","sequence":{"long":7658},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8120fd1-3874-43ae-848e-38f99f987958","sequence":{"long":7661},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acd4d06e-8f5c-484f-94e6-54181881aa2e","sequence":{"long":7660},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23e718b0-288a-419a-b4c9-e5d3a3e9130b","sequence":{"long":7662},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bed1300-0616-4cef-93db-b661a504d107","sequence":{"long":7663},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c91c6807-5adb-4bbd-8ad1-135e46e0166c","sequence":{"long":7664},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efff6cfa-f53e-4157-9e20-9334031f5447","sequence":{"long":7665},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2808},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ebe290a-d8a7-4c09-b377-35ff78373b90","sequence":{"long":7666},"type":"EVENT_WRITE","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20c5e000-ff07-41b3-8a38-c0d6bd2279e2","sequence":{"long":7667},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2861},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e59a4e1-acbf-4238-8a3c-1e75b16631aa","sequence":{"long":7668},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9a2030b-d1f3-4305-9f6e-9400ea079de6","sequence":{"long":7669},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"261f59c3-c8e8-4603-af97-1f14092c1456","sequence":{"long":7670},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":683},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34547ed8-55c3-43f7-b909-274901a6b97b","sequence":{"long":7671},"type":"EVENT_WRITE","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c2dbe53-8bf7-4519-bd87-d89f8e4a3cb3","sequence":{"long":7672},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":736},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e534aaa5-cd41-47fe-b3a8-915eccd9647a","sequence":{"long":7673},"type":"EVENT_READ","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"943f5978-e1ec-484f-a610-bb7ffb2ee84b","sequence":{"long":7674},"type":"EVENT_SENDTO","threadId":{"int":100133},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"472","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0a95922-f145-422b-a112-f13e0ea38df5","sequence":{"long":7675},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"472","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"273574b5-48eb-4340-b986-fabeb621d722","sequence":{"long":7676},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b85a4fb1-0d16-4bc8-b2c7-3823b7facbc0","sequence":{"long":7677},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9516fdf-7038-492b-9ef5-d3b77742d067","sequence":{"long":7678},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bac9e17-39f7-46f3-9620-b9b922e8c002","sequence":{"long":7679},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfc593a4-1782-4ddd-87bb-0025b4e24de5","sequence":{"long":7680},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956124521893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6babbc4f-1eef-42c2-badd-5888f681c54f","sequence":{"long":7681},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956233997606,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":266753},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30ee86ee-075b-4142-8e9e-7b0d8cb8508f","sequence":{"long":7682},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956334770993,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"227fedf4-cb42-459d-b1ac-ca38d2fd952e","sequence":{"long":7683},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956334770993,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4f935bf-cfbf-42b8-bb9a-b517a6bcdace","sequence":{"long":7684},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956334770993,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97c69504-446e-4def-a311-e0d006c446f5","sequence":{"long":7685},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582956334770993,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae974572-99ff-4020-b63f-f6c2de4e98bd","sequence":{"long":7686},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582957249417963,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":267436},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06a09cf0-63fb-409d-a0b6-a3a317ac5ff7","sequence":{"long":7687},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":267436},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98dff016-757d-4c7c-9a15-c75c53a88e71","sequence":{"long":7689},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"999cd5c4-8669-4504-b621-d5e5ddcd4eb2","sequence":{"long":7688},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b2a484a-1962-4063-b300-03031b0b1604","sequence":{"long":7691},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de33d844-dac7-479b-9f34-b8ccf2e29f71","sequence":{"long":7690},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efa2ad7b-2d9d-46f8-9272-c1ffad1930c7","sequence":{"long":7693},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e342378d-da09-4a72-b219-a39bb2941521","sequence":{"long":7692},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f865582-ec5d-42b3-a22e-611192c34ebb","sequence":{"long":7694},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"282a3f8b-9738-4278-8514-8ab21e84326f","sequence":{"long":7695},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aff09b4e-7447-4c22-bb6d-93f7c48fa3da","sequence":{"long":7696},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"283f8828-9404-47c3-bbd4-675cb9994574","sequence":{"long":7697},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3591},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"758c9160-0583-4498-bcd7-e6a64d077ffa","sequence":{"long":7698},"type":"EVENT_WRITE","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a7b0eb1-a2d5-4f4c-bd20-08238fee49cc","sequence":{"long":7699},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3644},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd799eff-2050-4ae1-abe4-8301d1b59001","sequence":{"long":7700},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a961228-cf73-4ee8-aa63-045ffdcda091","sequence":{"long":7701},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"074ed58d-8123-4f66-9459-908af5a27594","sequence":{"long":7702},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":679},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8049a896-0299-4d8f-950e-53eac129199d","sequence":{"long":7703},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":732},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcb967a9-176d-467d-ace4-8ae7ee37f727","sequence":{"long":7704},"type":"EVENT_WRITE","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05a5ca63-40a8-4237-9fdf-39fea9bf8f78","sequence":{"long":7705},"type":"EVENT_READ","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56444373-2e76-4d56-919b-b6d3257723f7","sequence":{"long":7706},"type":"EVENT_SENDTO","threadId":{"int":100134},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"473","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"009b9d5e-ee3a-4858-9424-c42f446fec39","sequence":{"long":7707},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"473","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e794d21-9c4b-4879-8457-4f9d92576ff6","sequence":{"long":7708},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"775de2ce-7a60-448b-9078-51e4d41b30b5","sequence":{"long":7709},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"144be9c0-cf4d-494c-9e2b-ef88776811e5","sequence":{"long":7710},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05651d62-6188-4f38-9dc9-52231cf3efbb","sequence":{"long":7711},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b1eca0c-029b-48ba-909c-a4e522f6805d","sequence":{"long":7712},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958124064985,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67659b71-4528-4f9c-b08b-659af6c9c587","sequence":{"long":7713},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958254271204,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":269844},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"065e7b29-e361-4893-b1fa-bc74db1915b9","sequence":{"long":7714},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08b7a79d-413a-4329-810f-ade0b7c46ec8","sequence":{"long":7715},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"474","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47214dd0-efa7-4144-b163-5948af5034d9","sequence":{"long":7716},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"475","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e004302f-5c57-4d18-9d4c-1c31bb3da74f","sequence":{"long":7717},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"476","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55fa45e1-6bbb-4ad7-877e-6f462f98f439","sequence":{"long":7718},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"477","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc72bb00-04aa-4915-94cb-e88685ee9a30","sequence":{"long":7719},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"474","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b584dbca-d027-4f84-a9c8-423073cc68cf","sequence":{"long":7720},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"475","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c1fbbc4-c817-4881-8a49-3e221c94fec4","sequence":{"long":7721},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"476","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98828552-50a3-45de-81f9-23c1bf4b62f1","sequence":{"long":7722},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582958524009088,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"477","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dce18e9-de56-459e-a0de-921d2fdb731f","sequence":{"long":7723},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959264447168,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":271023},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"653c5313-0597-49ae-9ffc-660f76a036af","sequence":{"long":7724},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c961c06b-fcbe-423b-a9ca-947344e0214c","sequence":{"long":7725},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec4ed6cc-84d2-41ce-b2f2-0b191c6820d3","sequence":{"long":7726},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1337","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1337","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"372368cf-c1bc-41d5-aa55-86d326abc37f","sequence":{"long":7727},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582959814384316,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/all.sh","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f010215-9f33-465a-9f0c-9e2d8e47a88b","sequence":{"long":7728},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d5762e2-18c1-4872-8d74-8faa9b10b8ff","sequence":{"long":7729},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8574ceb6-aa8b-4444-ab85-42495c4e8800","sequence":{"long":7730},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"928c0dfc-e928-47d1-a4e6-1c2738be0032","sequence":{"long":7731},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52740331-35c6-4082-93fb-a37518f24731","sequence":{"long":7732},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"941f2d8b-2d58-4fd6-8f52-082051fdddde","sequence":{"long":7733},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbc22027-a224-4ed1-9eb9-3e990fabb8a5","sequence":{"long":7734},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14097aa4-82fc-4fb2-a5f5-6289e12caa6e","sequence":{"long":7735},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bea0126-1f8b-4eaa-b2d5-e1f6327cf499","sequence":{"long":7736},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"408f7587-5fc2-4e8b-874c-1f38f91f1417","sequence":{"long":7737},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a6d3099-0a9e-4241-a84d-f2b32ad6723e","sequence":{"long":7738},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ef1cf8e-06e3-4c06-8d64-29441cc4c63c","sequence":{"long":7739},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdcb4027-c0fb-4384-817c-6b41f53aac8a","sequence":{"long":7740},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5de83c89-73be-486f-838a-2c5d65f6e4ab","sequence":{"long":7741},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b27f210-8cea-4915-b082-7ac2b27c55da","sequence":{"long":7742},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53c16900-5b22-4dac-95ac-3686091868c4","sequence":{"long":7743},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecddd635-2579-4160-afe2-88426bf6c8cd","sequence":{"long":7744},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9479b3ac-e2e3-4d0b-bf30-ddbc79824618","sequence":{"long":7745},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aabb52cd-8af1-41f1-98c6-bba9feb59571","sequence":{"long":7746},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93a40b97-34a9-4d56-9d5f-4dfba4c33887","sequence":{"long":7747},"type":"EVENT_EXECUTE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582959814384316,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/all.sh","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b9cc715-d821-4a12-9716-b99985bbdb40","sequence":{"long":7748},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be536244-9b21-4e2e-8fc9-ea949b402515","sequence":{"long":7749},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f91b1203-b9e2-463f-bfb7-7bd499257f0d","sequence":{"long":7750},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a698ee71-19a7-478f-865d-c756be9e0173","sequence":{"long":7751},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f2a352f-a90c-4961-a968-f89bf1408fe6","sequence":{"long":7752},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb6f2b05-ddac-465e-a693-eaf35b2f1cfd","sequence":{"long":7753},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0f06eec-a5c9-42d9-8c7f-f3498cde9b47","sequence":{"long":7754},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51cc2a85-c762-46c2-b06c-6f5692657d4f","sequence":{"long":7755},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e17f5e5a-7651-4c31-9570-fffd0ca9e206","sequence":{"long":7756},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"469aa854-333c-451c-879f-4747384dd3f1","sequence":{"long":7757},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd2d2495-6c21-4466-b31e-d5b54c9e7521","sequence":{"long":7758},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4a1e6d8-d9df-4d4b-8ce8-623510d2702a","sequence":{"long":7759},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c11d556-20a1-4c49-ba73-ca3c82a10b8f","sequence":{"long":7760},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90246747-517a-43ce-8846-7d537ea01d0f","sequence":{"long":7761},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2daff4e7-bad7-421b-868d-6babbe4d1a96","sequence":{"long":7762},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d91e80e9-84c7-4ee3-a83c-868fd9b66978","sequence":{"long":7763},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5eca9efb-7761-4651-8d2f-7ef358e7db12","sequence":{"long":7764},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"162f6b05-a250-46c8-8d66-5555d2c15be9","sequence":{"long":7765},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40fcd249-f42b-472a-84c1-11ef759feebd","sequence":{"long":7766},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66916780-752f-4b43-b714-d6e40e2699c7","sequence":{"long":7767},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30ea23f1-aa76-4543-9951-99e27bfa230e","sequence":{"long":7768},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31d244d6-8727-49c7-a371-e1959ad4606e","sequence":{"long":7769},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91ba592c-6334-4389-bf0a-5b542a5641fb","sequence":{"long":7770},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e435422a-c24d-469b-b095-d98d18262d20","sequence":{"long":7771},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3df59191-8a81-4d07-ab4d-472b7ca7dcff","sequence":{"long":7772},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a93087f2-427d-4652-a505-09aef34455bf","sequence":{"long":7773},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5ae0aac-6cce-4836-8464-1d565ac38a72","sequence":{"long":7774},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cf147ac-4fdc-4066-99e2-a00e8e72da43","sequence":{"long":7775},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f943d21-4aa2-4150-94df-f224bac5dfe9","sequence":{"long":7776},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"089e2840-83c2-4f9f-98de-6208dda387de","sequence":{"long":7777},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17f3a9a7-557c-42f2-9554-f3b1e678b425","sequence":{"long":7778},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83e78fad-dba4-46e9-bda4-fa2910cc4723","sequence":{"long":7779},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3591b14-6e39-45a3-8393-d87a2fb256f3","sequence":{"long":7780},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f724ab2f-83d0-4a9f-8802-09c00b9353c0","sequence":{"long":7781},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc9337a0-beb7-4d7f-bdf6-32c871adf98d","sequence":{"long":7782},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"158d835d-2b88-43fc-ae5f-c01a3ed1fd29","sequence":{"long":7783},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf7f21f7-fb5e-4f4d-b870-2416ba5e71a1","sequence":{"long":7784},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"168bbdff-ea83-43aa-9d84-0fc6067adbaa","sequence":{"long":7785},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34d3c45f-18c4-4fa2-aebf-3ebc4d28ffbe","sequence":{"long":7786},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b6b7631-70ac-4c05-8657-62822b853d04","sequence":{"long":7787},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8b7b4cd-e897-4cd9-b1bc-ddb4056ce44c","sequence":{"long":7788},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39ae6083-9fe1-40ca-bef7-183734db5d8a","sequence":{"long":7789},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a7a90a8-09ff-42f6-af7d-d0c8956d81b0","sequence":{"long":7790},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ea59e34-5e70-45f3-b67b-afd1215c7341","sequence":{"long":7791},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff15c22e-feda-47fa-8ad9-c28f400dff48","sequence":{"long":7792},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81d8ba00-7020-4097-a282-0dbb5311b2b2","sequence":{"long":7793},"type":"EVENT_MMAP","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb3e40b8-805b-4144-81d6-92dae5d808cd","sequence":{"long":7794},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d817803a-bb65-4f8e-abe7-a1f7d9c41c68","sequence":{"long":7795},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccbcc01f-f2ea-44b4-b201-62737eb7cba5","sequence":{"long":7796},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"372bd6a6-e495-4238-82f6-131a33f3d6c4","sequence":{"long":7797},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38bd5437-fac1-439a-ae08-5e20cffb61ab","sequence":{"long":7798},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"854acdf7-fa4b-4d61-94f2-6ee9e078ae60","sequence":{"long":7799},"type":"EVENT_MPROTECT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64748a12-0614-449a-a92a-2eab299aaa28","sequence":{"long":7800},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f02fd36-39c7-4514-8b0a-10f334130152","sequence":{"long":7801},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da9e5003-f3bc-425a-8d34-7d20fa45df16","sequence":{"long":7802},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61febf71-e4c5-4b19-9f9c-bdac6f7e31fc","sequence":{"long":7803},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b48db815-76ad-475b-8d63-d70e6aa55ecc","sequence":{"long":7804},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0ed5562-7b52-449a-9f52-24e8566e1e2d","sequence":{"long":7805},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3257d3e-8f33-410b-9b5d-057e46ea4c46","sequence":{"long":7806},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47f66c21-2c43-4140-ae59-b092e4a002de","sequence":{"long":7807},"type":"EVENT_FCNTL","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2d8bb0c-9197-43b1-87df-be6f4a2447bb","sequence":{"long":7808},"type":"EVENT_FCNTL","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e620e9e5-77eb-48f3-8a43-5c0b06ed42d5","sequence":{"long":7809},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e96b9a0b-db49-42e9-bf33-5599ff2314c9","sequence":{"long":7810},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1884},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"302c94f7-a83a-44d5-9534-6b012060ceb0","sequence":{"long":7811},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":516},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a83f73f-5983-45dd-a106-29dac9826062","sequence":{"long":7812},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"f98d2634-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959814384316,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1338","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1338","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d235d701-5bb9-484c-902b-7caa7b270eae","sequence":{"long":7813},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"f98d2634-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582959824307368,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d5c48b3-fc09-4f0f-8c4a-ecbb8f19cecb","sequence":{"long":7814},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960284294164,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":279988},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9471da0b-5102-4bea-ab58-6c63b4f50310","sequence":{"long":7815},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"f98d2634-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"f98d2634-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2172e3df-42b2-4e51-977c-9764f1dcb879","sequence":{"long":7816},"type":"EVENT_OPEN","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cb9d3f8-aa9c-45d4-b573-4aaf24baed8f","sequence":{"long":7817},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca211413-8046-488e-960c-bc271610dab9","sequence":{"long":7818},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d4d9826-cef9-437c-8c19-466fc74a63ce","sequence":{"long":7819},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b1bea11-32ec-4ae0-809b-79a17f762701","sequence":{"long":7820},"type":"EVENT_CLOSE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cab4b69-779b-4783-803c-6286c8c1c404","sequence":{"long":7821},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9798e356-e5cd-4b2e-9c3d-ef321b2cf92d","sequence":{"long":7822},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":34},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"789756b1-9dbf-43aa-9831-da98d06ee401","sequence":{"long":7823},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1339","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1339","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8a4fbaa-ce1f-4617-830b-bb20403a993f","sequence":{"long":7824},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da92aa2c-42a8-47bd-b6d4-99155522bf4f","sequence":{"long":7825},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"56ecc1ae-1878-7b59-b818-6135097b8030"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./change_file_permissions"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582960834837726,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./change_file_permissions ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9eeee54-0a7e-44c4-b340-75b7f20539d3","sequence":{"long":7826},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1915377-1aed-4982-b9da-db347ef7f174","sequence":{"long":7827},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3b50fb6-3b80-4c90-a909-3bf60686c654","sequence":{"long":7828},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0b84043-953f-441c-9738-2e2722b20c6e","sequence":{"long":7829},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c66b97e-bf9a-4fe0-bda3-3b6a3b038d0b","sequence":{"long":7830},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a3ea04a-b814-4390-95ac-deb774d3dc92","sequence":{"long":7831},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ec06d26-05a2-42db-aa8b-b3727cb7f5fe","sequence":{"long":7832},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4201d83-3497-4213-a2b6-a3b2b99ab147","sequence":{"long":7833},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2b1bb90-e27d-43f2-af74-d8fe38c3923e","sequence":{"long":7834},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31fa4c07-be37-4f14-9da6-b04aa93f237e","sequence":{"long":7835},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf093bbd-e20c-4cfc-b8e2-3346917952ee","sequence":{"long":7836},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b35325e-830b-48f9-b735-144aee8ba92a","sequence":{"long":7837},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d013f834-0eb6-418d-baf6-9ed1ff90e2b2","sequence":{"long":7838},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8c7ac71-eab2-4797-9bf8-82213fbf6e4f","sequence":{"long":7839},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6b5d09c-8503-4ef6-b150-fcd98cb5ac9a","sequence":{"long":7840},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90a9e055-e76b-405d-806a-11b8faca4d46","sequence":{"long":7841},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76ec919c-a60c-4a5b-8835-725a71830338","sequence":{"long":7842},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d6c2710-bcea-4e28-a6ed-a9fde69cdaec","sequence":{"long":7843},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8139b651-f345-4dc4-86df-8c6b6d6f7ebf","sequence":{"long":7844},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63bfcbe9-f19d-4a42-a5fc-efb923ad34c3","sequence":{"long":7845},"type":"EVENT_MODIFY_FILE_ATTRIBUTES","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/README.md"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_chmod"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3fa26b4-9f93-4787-a85b-7839d5b9caf0","sequence":{"long":7846},"type":"EVENT_MODIFY_FILE_ATTRIBUTES","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/README.md"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_chmod"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b7"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe791b11-11ac-42f8-add7-85fcd853cf62","sequence":{"long":7847},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fa277e30-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9aa1c2c-83db-4c64-890f-2df7b6fbc27c","sequence":{"long":7848},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1368},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a363433b-e16c-41e0-afdf-df98d8da7d07","sequence":{"long":7849},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":532},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"197c5092-2213-47b3-8414-3c807441e8ae","sequence":{"long":7850},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1340","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1340","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e20859d-b18c-4b1f-b67f-8de1c9c14014","sequence":{"long":7851},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5247eb7f-021a-436f-bd3a-2c7f3701a28b","sequence":{"long":7852},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582960834837726,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eeeef1d6-2a59-430e-a4eb-d59c0eff32de","sequence":{"long":7853},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b866f2e6-0413-4959-9314-bddacced143c","sequence":{"long":7854},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7228178-b959-4d05-9764-748b6fc7709f","sequence":{"long":7855},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68ff3241-a105-4516-977f-2d6f419d370d","sequence":{"long":7856},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"719e537c-1c1e-4558-b6b5-ce7109f202e7","sequence":{"long":7857},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f9f5a3a-6de2-44d9-b80a-813deeded71f","sequence":{"long":7858},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41fb848e-b2c7-4cf2-9851-ce1e440414b1","sequence":{"long":7859},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582960834837726,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"405afcaf-f081-4418-a67e-9a48e2bf073a","sequence":{"long":7860},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961304776512,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":284908},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f138269-e249-40d5-87d8-32a717ae4c03","sequence":{"long":7861},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03de1090-da53-4bb1-90bd-c40720f9e3f4","sequence":{"long":7862},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"479","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"828d06a6-df24-4f27-9068-c300fe813e24","sequence":{"long":7863},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"480","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37ffcc8a-695c-4add-93a3-7a725d2cb06c","sequence":{"long":7864},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"481","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45a97d22-9967-4a67-b5c1-7737966324f9","sequence":{"long":7865},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"482","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f714304a-f842-4a11-aa97-eb7037134d68","sequence":{"long":7866},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"479","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f5f6619-d64f-4794-8ad0-89c99359e53d","sequence":{"long":7867},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"480","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fc0ef97-3296-40ca-8245-394578891be2","sequence":{"long":7868},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"481","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e94aeddc-5c26-45c5-93f8-09e9738526d1","sequence":{"long":7869},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961524402638,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"482","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fd929be-1bca-41a7-9f10-caaa58e4a7b3","sequence":{"long":7870},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fa27d8bf-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49588a47-4800-441f-9348-9c7018e8315e","sequence":{"long":7871},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b791783-35c4-44e9-afb0-d0a679ad98bd","sequence":{"long":7872},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c4cf47d-e6a6-4d40-a691-8039c1d644c5","sequence":{"long":7873},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1341","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1341","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a65fa06-0423-40a6-b3d8-452f093b0699","sequence":{"long":7874},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"767cb84e-183c-4878-8364-a84fd4f8a0e0","sequence":{"long":7875},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0609dc59-7cb8-de5b-b87c-35aeebded4bf"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_file"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582961854200266,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_file ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"615a4641-8f22-4bac-820b-54675e9d936b","sequence":{"long":7876},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7704ec9-e65d-45e9-9817-fee0008b7b07","sequence":{"long":7877},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aecf100e-c82d-4a5e-aec4-f5b16da6582e","sequence":{"long":7878},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"109d45ab-2652-4ac3-b912-ab7909b7fdc5","sequence":{"long":7879},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63ea21ae-0368-4aa3-ac0d-fa1eb9b003bc","sequence":{"long":7880},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a80eef4c-b5fa-4e45-935a-c71ad613f641","sequence":{"long":7881},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b4c84bf-b9c4-4972-b6af-026162e91fd7","sequence":{"long":7882},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"128cad07-de68-485b-bb74-c346f336af38","sequence":{"long":7883},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a54363a-f012-4e7b-a23c-a85088fead29","sequence":{"long":7884},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a921de6-29d9-49d5-8223-e93f502ae08e","sequence":{"long":7885},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ec8d794-f13e-43a7-9c71-1ebb15538e46","sequence":{"long":7886},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56c84cdd-e5dc-4d4a-a75d-0a9b4b4958ed","sequence":{"long":7887},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"963be2af-6a28-44c2-a2a2-a26011e09e44","sequence":{"long":7888},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"530da16a-d08a-488a-aa6a-5e15d89236f1","sequence":{"long":7889},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"139d10b7-17de-403e-b784-68a705e12267","sequence":{"long":7890},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5d8de9d-43dd-4de1-87ee-fc3dbc62d4f2","sequence":{"long":7891},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13dfe3c5-e2bc-4860-ae57-16c295032ca3","sequence":{"long":7892},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3282dbb0-b24f-44d7-85e4-44ac48769ebd","sequence":{"long":7893},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b62d89e-6d4f-4fe1-91bd-c0e994be9693","sequence":{"long":7894},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3120cf5-8597-401f-93af-b262d0b1bd5b","sequence":{"long":7895},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/README.md"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b19aa52a-beb4-42fc-9f15-52bc52ad4c69","sequence":{"long":7896},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"745458ec-83ee-b052-ae83-2efb22b0cb41"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/out.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae60ab14-6698-4b95-b8d9-9eefd5ab8179","sequence":{"long":7897},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2498},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48235f78-1a1c-4360-895d-788e97e5e427","sequence":{"long":7898},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95ae3e80-5367-4a2e-a8f6-2702e19be80b","sequence":{"long":7899},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ded1ccb-4e9f-4d89-af03-4077013c55fe","sequence":{"long":7900},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4f1fb7f-b819-4208-b788-75b31e87804a","sequence":{"long":7901},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bddd724-dabe-44e3-84e1-08f2d299e017","sequence":{"long":7902},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab087cba-c8a5-4d6c-9185-2b917674647e","sequence":{"long":7903},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"745458ec-83ee-b052-ae83-2efb22b0cb41"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2498},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efb4e1a1-b9c3-4f8b-b7f1-68ee382336c9","sequence":{"long":7904},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"745458ec-83ee-b052-ae83-2efb22b0cb41"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cbe7c8b-5ce9-4a5f-a95d-16ebbf4fd0fc","sequence":{"long":7905},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fac2e97d-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"391a118d-368a-4de9-a39b-734c08c5748c","sequence":{"long":7906},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1352},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d13290cb-3179-480b-be1a-2b9f2fec15c1","sequence":{"long":7907},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":554},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10c611db-2c97-463b-9c33-70b1bfd00bcc","sequence":{"long":7908},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1342","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1342","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a20f93e6-a541-433a-ad4f-e8b1f334d4c8","sequence":{"long":7909},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65561fed-04c4-404d-ba17-09f3169aae35","sequence":{"long":7910},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582961854200266,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"807d4436-d19b-453f-95d1-bb30ee4a711a","sequence":{"long":7911},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bf942b1-66ad-46ba-9c86-09d4b2e0b467","sequence":{"long":7912},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebdc18e5-4da3-4843-8006-8eb3760f0289","sequence":{"long":7913},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"daf4c26c-496e-40f0-9d3b-7c65fcd0ead4","sequence":{"long":7914},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12a91fd8-ec60-4db6-a5f4-9e11384ec607","sequence":{"long":7915},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9813e451-c52f-48fc-a871-7d9aeb9a937f","sequence":{"long":7916},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa76e278-2ccb-4ef8-8c05-19616e0d9c46","sequence":{"long":7917},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1509def8-fb56-43b4-ae38-78cd1322d15b","sequence":{"long":7918},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aeb77144-6d27-41a4-93e9-3b16d238995d","sequence":{"long":7919},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bd2bc4f-7013-46ec-9a5c-48b12361476b","sequence":{"long":7920},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"935521e5-a10f-4919-b422-ce954b87fbb6","sequence":{"long":7921},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce875546-24d8-42e5-9ee8-80da4fede9d8","sequence":{"long":7922},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8854e8f2-9f0c-45a7-8e62-a5ce284b797e","sequence":{"long":7923},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1532a875-4a3f-4b30-8ece-151032e999fb","sequence":{"long":7924},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a299777e-44ee-4ea7-9d4b-5e7d675b8874","sequence":{"long":7925},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd03750e-ede8-4d5c-9434-393ccbc01298","sequence":{"long":7926},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4552fc6c-d2ce-4714-8277-10a29e730448","sequence":{"long":7927},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91cdd6cc-5779-4ac3-9168-234527a8af2c","sequence":{"long":7928},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbe16833-2ccf-42b8-9838-06b73cf947cd","sequence":{"long":7929},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582961854200266,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7c629da-aabf-4f93-af9b-ec8e0978b2a1","sequence":{"long":7930},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":284908},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84918c11-98cc-42aa-959e-cb9ba3d4fe4e","sequence":{"long":7932},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1b34135-1bbb-4ebc-89e9-fa7d4dc34640","sequence":{"long":7931},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89ccff5b-e12f-4a37-ade3-83970347882a","sequence":{"long":7934},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c6e8e98-6ad9-4017-a8f0-33e6d110bf58","sequence":{"long":7933},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"095aaff6-7264-454d-96a0-ebdf3cb1b11a","sequence":{"long":7936},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9eb6a41c-2655-479f-adac-aaa9154e76ac","sequence":{"long":7935},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c8cf723-2064-484b-9362-fc740938deb3","sequence":{"long":7938},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec7f7cd7-62ec-45a3-84a5-e0ac68ffea5d","sequence":{"long":7937},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39cbe8fe-7c48-425e-978d-43077a6deb31","sequence":{"long":7939},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90814b75-05c0-4375-b2b1-ef1ecd266045","sequence":{"long":7940},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b921757f-27fd-4e41-9d48-9529d04d1093","sequence":{"long":7941},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fec5968-dd44-467c-b6da-bff6ab9112c4","sequence":{"long":7942},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4799},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc44b15a-8c24-464c-ba1a-b1762de74bb2","sequence":{"long":7943},"type":"EVENT_WRITE","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd4b0ebb-dc40-43f2-86b3-f4bbb90dbe49","sequence":{"long":7944},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4852},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"321ecb0b-c622-4a5b-bc0f-7a3394544e36","sequence":{"long":7945},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40a6a8ca-fa0d-457f-84a4-08dd5b2f8c0c","sequence":{"long":7946},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4d90294-042c-462c-972d-daae691f304c","sequence":{"long":7947},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4158},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55873781-9b1d-404e-8987-c695e98a0d43","sequence":{"long":7948},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4211},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dddcc8fa-e682-4b95-b70d-a56c9f4c98a0","sequence":{"long":7949},"type":"EVENT_WRITE","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7dd552e-206d-4911-9759-72d4c1826d52","sequence":{"long":7950},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e539045-bc3e-41fb-9f54-88d190257d20","sequence":{"long":7951},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb6f678b-f7d2-4b32-94f6-ee7d89621413","sequence":{"long":7952},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4916},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e9e5a4b-1502-48ed-b119-d0f968a381f7","sequence":{"long":7953},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4969},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afc43e40-0e0c-4ac7-b740-7fc2bc18cdd3","sequence":{"long":7954},"type":"EVENT_WRITE","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7dd07db-5d27-41c4-9a20-af3204d9d515","sequence":{"long":7955},"type":"EVENT_READ","threadId":{"int":100136},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962124021046,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9748701e-0b8e-432c-8194-2a0e67ee4c65","sequence":{"long":7956},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962316591861,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":294069},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29072b6c-dabc-4703-913b-62dd178c6cba","sequence":{"long":7957},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fac368df-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11bf86e0-9863-4931-b479-44cb1dac0b32","sequence":{"long":7958},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd871748-8e2d-43e4-a6a1-5c8a2dbcb4c9","sequence":{"long":7959},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e03e688e-090a-459a-a92d-a87e026aec50","sequence":{"long":7960},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1343","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1343","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75d164a6-8937-4f2c-a2ef-285965e6c4c2","sequence":{"long":7961},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9106d76-55db-4074-af23-b759c0a620aa","sequence":{"long":7962},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0f7e034a-4539-ea5b-b945-2560fbea7185"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582962864346154,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_buf ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e091866-6eea-493c-aa52-b6964c2ec221","sequence":{"long":7963},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b87b7fb1-47d4-4ae2-8a97-0eb7b4cab9c2","sequence":{"long":7964},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea67dbac-98af-49ea-941f-0d2bac367a66","sequence":{"long":7965},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4efad79-91e6-4a51-8b98-5110565a56bf","sequence":{"long":7966},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6580e5e-9f19-4349-9c54-32c008f475ac","sequence":{"long":7967},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2088437-434c-45ce-b074-3cb3ab5587ef","sequence":{"long":7968},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14e89a7c-50f3-4dde-9d90-00138e5e273a","sequence":{"long":7969},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d2c2b00-e8dd-4654-beaf-9dcade473030","sequence":{"long":7970},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12693c73-a28f-433d-91cf-6d22f2463126","sequence":{"long":7971},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1317ea30-815e-4285-aa4e-288d84c0904e","sequence":{"long":7972},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac0a8eaf-7fd7-48c8-a92b-41e3458cd9ee","sequence":{"long":7973},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff0b4f90-0b6c-40ed-9b6b-6657502841cc","sequence":{"long":7974},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0424f556-17b7-4b77-9b50-ed5f403f9168","sequence":{"long":7975},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eafead80-86c4-4905-bd16-85232ad77f7b","sequence":{"long":7976},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09af1573-633e-4ea3-80cf-ced12dd14375","sequence":{"long":7977},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0c80b81-70ae-419e-b8bd-1605bd6346b1","sequence":{"long":7978},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b78c0fe2-51b8-4748-ac89-5cff05730a2e","sequence":{"long":7979},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46e5afa5-0a48-4ffd-905a-bc42d162fb90","sequence":{"long":7980},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d35dd952-f13d-4514-9a1d-c34b7d650808","sequence":{"long":7981},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a037d694-458c-41d9-9365-1f0b0e503da9","sequence":{"long":7982},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fb5d222d-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8326551c-247c-4e8d-95ae-c0c138fed8e4","sequence":{"long":7983},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1330},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0f7762b-4cac-464d-8d9b-b3fc7d01bdc2","sequence":{"long":7984},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":588},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbf6d32b-3bfa-4f27-9591-bc2d72b7f147","sequence":{"long":7985},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1344","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1344","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f2c4b8c-40c2-4c62-bb37-86831f1fc0ac","sequence":{"long":7986},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd9de5d5-8732-4d97-bc7f-2c086ea5805a","sequence":{"long":7987},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582962864346154,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0016ea73-02b7-4ccc-96e4-7cb335df1d8f","sequence":{"long":7988},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f71bb08f-7c89-4dd0-91b4-8f4bd64410d6","sequence":{"long":7989},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34126798-539d-40af-bbf9-235003437eed","sequence":{"long":7990},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32a1da50-786d-41f1-96ab-135e9f21f4c4","sequence":{"long":7991},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9539f32a-45f8-4d85-a33b-c86bf949c824","sequence":{"long":7992},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec2fb874-fad7-4148-8980-8c31e98a437f","sequence":{"long":7993},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d57304d-80c6-4ecb-bd42-f5281449f7c3","sequence":{"long":7994},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6237e5e-1ed5-4dd1-a967-411657681cf5","sequence":{"long":7995},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d86457e-6480-4e40-aac7-1dedaeb93ae3","sequence":{"long":7996},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86191101-690e-4e3f-bb57-e78acfd97f12","sequence":{"long":7997},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c7a68ec-7071-47f1-975a-0698e062fa07","sequence":{"long":7998},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fd85c1c-8e9d-4fc8-8b7e-68e835a36608","sequence":{"long":7999},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6102ba62-92bf-4261-9364-ac3025f0ffc0","sequence":{"long":8000},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"259f962c-9263-48a9-a427-ef069408f608","sequence":{"long":8001},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582962864346154,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a90c557c-339b-48ca-b764-2f03514fd761","sequence":{"long":8002},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963333887767,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":298938},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd53cb57-cb29-4bf5-8ed9-b47d55000152","sequence":{"long":8003},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fb5d782c-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22d5b120-6d76-44ce-88c5-b81a9a65dc0e","sequence":{"long":8004},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a41c02c-c3d3-46cf-be4d-6998d3b4d3da","sequence":{"long":8005},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":38},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a2ca219-f272-4ee6-bc8c-b6ee5c6dde48","sequence":{"long":8006},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1345","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1345","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e000efe4-4884-4f24-8fdc-cd11601f0b78","sequence":{"long":8007},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bc42313-9900-4a0c-aa6b-9d8dfc5c3267","sequence":{"long":8008},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"8d001f29-417a-805e-ba41-cecf5e804caf"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_stack_frame"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582963874413329,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_buf_stack_frame ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed4a3b70-9d95-49b0-b060-13d6d4380c96","sequence":{"long":8009},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34b4a048-09ea-4890-85a9-69444f76a0b2","sequence":{"long":8010},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbfc96b4-535b-412b-a26a-2d5d32aa382b","sequence":{"long":8011},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb8fdf65-e9e0-4ce9-a7c6-61e611d8edae","sequence":{"long":8012},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8657f80-ac5d-460c-a3ce-f2268c07f9c8","sequence":{"long":8013},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de69c61a-eb39-485c-be06-58582821edf9","sequence":{"long":8014},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad73feea-6df2-462e-ac93-50eaa7325756","sequence":{"long":8015},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02e02737-e1d8-499f-865b-56ecb0ffefbf","sequence":{"long":8016},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edd3abd5-314c-4de4-8b76-a44fc10f2065","sequence":{"long":8017},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c1e0996-067c-40a7-b4bb-19ed36474873","sequence":{"long":8018},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b6c6b46-e588-42a1-b0ab-5eb4d3c78bbf","sequence":{"long":8019},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cc466e3-2418-4de8-ae21-0f998118611e","sequence":{"long":8020},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a489fbd2-d2bf-4d73-b22b-df03209aff2a","sequence":{"long":8021},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f60887b-c3f8-49a3-8c78-0d29f4477888","sequence":{"long":8022},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9337d7aa-fbfd-4b2b-a5ad-47e0a945b65c","sequence":{"long":8023},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7936a167-6465-4581-bc4b-94db1143fb71","sequence":{"long":8024},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37b6b6a6-13b6-4455-8075-84465e960a9c","sequence":{"long":8025},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc30b205-efa6-449e-abc0-3c1c4a5d10e7","sequence":{"long":8026},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e31d395-ed1e-4cf9-8464-41d37ef75b16","sequence":{"long":8027},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c230d6ba-5143-425c-8eda-66954bdf36ce","sequence":{"long":8028},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fbf7369e-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53905f94-3f80-405d-8928-03e4c9fb8f5f","sequence":{"long":8029},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1296},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebc1c543-844e-4602-8124-870f8a7c9483","sequence":{"long":8030},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":617},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a845022d-6cf0-444e-8aea-7ec42a64946b","sequence":{"long":8031},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1346","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1346","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e9c2d4b-b598-4936-a9f7-6c5b39fd01d2","sequence":{"long":8032},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15800ca5-7423-4fc4-9321-8bf058ba419d","sequence":{"long":8033},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582963874413329,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"731fb050-11f0-4f6a-8b0c-2353e59c8449","sequence":{"long":8034},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43868355-ff15-4893-8639-7d0cb06400fd","sequence":{"long":8035},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b762860-debb-4696-9c90-751c667551ac","sequence":{"long":8036},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d5ace4f-bee6-46bc-bd21-5b4c322f7e4b","sequence":{"long":8037},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3965f524-82b2-4969-a945-16f7c939fa5f","sequence":{"long":8038},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09c48dfb-1f4e-4931-be96-d3dd4b55ff45","sequence":{"long":8039},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0952da9-bdc8-421e-949c-3b00f59da841","sequence":{"long":8040},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42fe213a-f279-44bf-9de1-b1c56efa8696","sequence":{"long":8041},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4eeddb87-982e-42df-8fea-63c79d3ee075","sequence":{"long":8042},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7affcd30-6d1c-464a-933e-d3433fe3548f","sequence":{"long":8043},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"282d20bc-5f37-44cd-941c-8538f2e339fc","sequence":{"long":8044},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"479f85e1-1684-405d-ae13-c04ae84bd103","sequence":{"long":8045},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4404e8e5-29d7-4865-af46-d0b2cd66aaed","sequence":{"long":8046},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cfccb6b-efe9-4984-9855-a68c066bed87","sequence":{"long":8047},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582963874413329,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1acea138-7d8d-4113-ab3d-d96cb6e534a6","sequence":{"long":8048},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964344364848,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":303803},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d516700-d198-46f5-846d-f5accc64e73f","sequence":{"long":8049},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"495945d1-1759-41e8-bda1-41d5df87a095","sequence":{"long":8050},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"485","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75c9dfb7-45ad-4c92-90a4-6c50e1f8fcb3","sequence":{"long":8051},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"486","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79c98b26-53fa-45d5-86dd-435395d80110","sequence":{"long":8052},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"487","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c40bcb0b-7887-4361-9271-9a398770b4c9","sequence":{"long":8053},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"488","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13a9feb9-7251-45d0-89be-0da35836b08c","sequence":{"long":8054},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"485","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9db4b4a-43b5-494d-b199-4c593e61bb6a","sequence":{"long":8055},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"486","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d19b079a-fe4a-4d63-8ac3-32943021c88f","sequence":{"long":8056},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"487","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36d45196-bbb0-4a89-aae9-202b507a9788","sequence":{"long":8057},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964524393312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"488","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f9f87ef-3697-463b-9a82-e8949e8f5663","sequence":{"long":8058},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fbf7b574-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"863bbce0-bd44-490e-8032-9899ae676d21","sequence":{"long":8059},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58e8a600-0788-4d44-81c2-d81a77596127","sequence":{"long":8060},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f26dc355-5f1e-4d10-8e77-e90b6630688f","sequence":{"long":8061},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1347","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1347","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b721a64e-9ba1-4d49-b0bb-728b427225ec","sequence":{"long":8062},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df04ec8d-bddd-4dad-b179-a60276c03746","sequence":{"long":8063},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"656c7084-7a51-2d53-917a-60f4832de58f"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_string"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582964894021958,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_buf_string ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"104d30c7-e320-4656-8e47-2d31e5b13a80","sequence":{"long":8064},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76f8e0f5-7d27-4623-b30f-42daf114d9e8","sequence":{"long":8065},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0959622-858f-43e5-ba0d-d5622e215530","sequence":{"long":8066},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6ef9651-aa70-4fb1-b207-f0d740f23d8f","sequence":{"long":8067},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88ddef8a-f923-4159-b6c1-f5b7c949c1ac","sequence":{"long":8068},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08c0d922-74d2-440d-b1fb-ccfcf2f52d9c","sequence":{"long":8069},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9041e7d3-4c46-4fe9-85a6-7e8adff4227b","sequence":{"long":8070},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6132c63b-c7dd-4795-9cf2-235117049ee4","sequence":{"long":8071},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0504da4a-4fda-4d90-a087-9e050c975458","sequence":{"long":8072},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0157b800-62f1-47a7-872c-11c67921ad89","sequence":{"long":8073},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06626480-4cf0-4d84-bcd2-5005d5f84244","sequence":{"long":8074},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b390158-bcdb-4130-b824-11748abb703e","sequence":{"long":8075},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8493483f-6192-4a6e-8928-8571e9f8c989","sequence":{"long":8076},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b31492b-d59f-4d67-9811-2628e2ba3861","sequence":{"long":8077},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d0e3b40-46a2-406e-9dcf-38c86a9892d1","sequence":{"long":8078},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30335121-7e8d-42f8-88ff-938c169847f5","sequence":{"long":8079},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c035abe3-43ea-4a8b-a5ae-3273989a287b","sequence":{"long":8080},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68abb66c-b8fe-4e3b-9908-92bc8164ac20","sequence":{"long":8081},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dc78a43-2abe-45c4-9444-fd1682503b67","sequence":{"long":8082},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbc96cee-3551-4e71-bce8-7b900162ee9f","sequence":{"long":8083},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a9eeb62-f208-493b-ad08-c09dc01b37b1","sequence":{"long":8084},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fc92c880-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90398edd-f25a-4cb8-8d67-585074fa3902","sequence":{"long":8085},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1267},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c46be6c-499b-4d04-a102-60b12516003e","sequence":{"long":8086},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":644},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10479d92-9bea-4e28-b5d4-8d7ef04dbdec","sequence":{"long":8087},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1348","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1348","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26e513eb-d5b7-48a3-a719-42e636f56490","sequence":{"long":8088},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"698c3aa0-0cc0-46d5-ae63-86a214ec1d3b","sequence":{"long":8089},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582964894021958,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc39e325-1628-470a-a597-30644c355ea1","sequence":{"long":8090},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"704522cd-ae24-4b43-84e4-f71e69ac1294","sequence":{"long":8091},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"255970db-a2a1-4552-bb2f-5126588e24a3","sequence":{"long":8092},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b93789fe-426d-42ed-9e0a-f076c457065c","sequence":{"long":8093},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582964894021958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69c3d40f-d92b-4129-b998-d2d0fa7ba9f2","sequence":{"long":8094},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965354116724,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":308830},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da44a60a-be92-43fb-89fc-4a94d4457a5d","sequence":{"long":8095},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fc932cb1-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fe814e9-d67e-4865-a1ae-2b94b3483795","sequence":{"long":8096},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d87bd232-7c40-459e-bfb9-2e417c81afa9","sequence":{"long":8097},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":31},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a20803c5-96e2-41e4-90d7-b73219558caf","sequence":{"long":8098},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1349","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1349","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35d773e3-5bd0-445a-9178-9e3dd7600443","sequence":{"long":8099},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b4820be-ef8b-475e-a5d0-6febd86bf129","sequence":{"long":8100},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a40cfc78-90a1-075c-a190-f4d7ac07bd69"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_heap_buf"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582965904301107,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_heap_buf ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e647aa61-337b-4c48-bf2f-9a905ea16d3e","sequence":{"long":8101},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5cb0d7d-5af3-4967-baa0-b5d0485c878a","sequence":{"long":8102},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1467142b-3f8b-4979-9a95-aa584b95df96","sequence":{"long":8103},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e29def8e-a137-4aad-a558-d57cbf68448c","sequence":{"long":8104},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43888266-d1ec-48cc-a814-91bf07cb33f7","sequence":{"long":8105},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b7abc02-c290-4dba-9d8b-0a101adc4808","sequence":{"long":8106},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff79ea1e-ad31-40f7-ae74-165b6d8c31cc","sequence":{"long":8107},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15dd9119-f058-4d37-ad5f-c76392e9ccff","sequence":{"long":8108},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f891e6b-d339-4637-9246-376a49b1d876","sequence":{"long":8109},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6d0459c-eb35-449b-8079-f00d708a5330","sequence":{"long":8110},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c95f810e-db14-465a-a606-9fef46e88640","sequence":{"long":8111},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca8ed02d-9fa8-46f7-a3e3-4043972edcd6","sequence":{"long":8112},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebea9734-7c6f-43b0-b138-a13bb9f1b535","sequence":{"long":8113},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f22c38f-0750-4b8c-b80d-0409bccfbcff","sequence":{"long":8114},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9174b7a9-bdf2-48c0-9a61-244a88348533","sequence":{"long":8115},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5194e9c5-8128-46c1-90f2-32042e7d56de","sequence":{"long":8116},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fb2a12c-15ea-49b3-ae9d-d1b72e558f38","sequence":{"long":8117},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5da0e230-4a27-4270-9c3a-c91b3818348c","sequence":{"long":8118},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d555a2d5-b091-4835-b18f-63f94364237c","sequence":{"long":8119},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49882cf6-3908-47a0-8ca1-f939aab48161","sequence":{"long":8120},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fd2ce4c8-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cba61fbb-9b8c-4c9b-ba08-1680334843a6","sequence":{"long":8121},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1240},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f903ebc1-9103-45ad-a484-a18c797fc10b","sequence":{"long":8122},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":663},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f1fc926-99b3-4e4a-bb84-e42c0c02372a","sequence":{"long":8123},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1350","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1350","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d01bbe3-266f-4755-a149-19b7f2db3de3","sequence":{"long":8124},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4cc02b6-e07b-4835-b98a-1fff538a810f","sequence":{"long":8125},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582965904301107,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c49517fc-c773-4b60-a3a0-086cc736cddd","sequence":{"long":8126},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca2e1f14-1963-43db-82e7-117e36959272","sequence":{"long":8127},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ab126ad-3dd4-44d2-9a08-975a4523657c","sequence":{"long":8128},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2ad45c8-0344-4462-9919-cac979f8bd46","sequence":{"long":8129},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0d50070-d125-4b0f-b55c-1e62662f4f66","sequence":{"long":8130},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be256df9-5146-44b6-a8d2-0a61268cef15","sequence":{"long":8131},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e28fceb-8497-4138-859e-00866ee40a44","sequence":{"long":8132},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa84183a-831c-4d48-967b-56ce258609a1","sequence":{"long":8133},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e80080f5-dd4b-4b7f-afab-cb1ef3cf7ea4","sequence":{"long":8134},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a498d6a4-f121-400e-9706-4c654143576f","sequence":{"long":8135},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a5f9827-0104-4118-8393-55ec2575a68f","sequence":{"long":8136},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6557c138-c734-4b7d-b4c0-03ef234bdf18","sequence":{"long":8137},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27d3d72b-15d6-460c-82fb-6913245d2bf2","sequence":{"long":8138},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f92840c2-736f-4c72-83cd-16926d482dcd","sequence":{"long":8139},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582965904301107,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d87d9130-f061-4a7d-9340-77da928563d1","sequence":{"long":8140},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966373962760,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":313695},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9f6aeef-50f8-4057-b734-7f7d72d82538","sequence":{"long":8141},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fd2d3a3f-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa8e4d6c-4b97-49ba-8846-3286e7259f72","sequence":{"long":8142},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"942b3afc-aa1f-4180-b792-9187c973e7c9","sequence":{"long":8143},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":23},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52e18301-87d1-4bfc-baec-0552e37b0ec8","sequence":{"long":8144},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1351","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1351","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ca5c25e-3eb0-47a4-9c89-025172e59bd5","sequence":{"long":8145},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73a11eff-c73c-4fbd-bacc-e772108bf5af","sequence":{"long":8146},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"1bca75f7-71d4-1553-9471-f02cd31597be"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./fork_process"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582966924213856,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./fork_process ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f01f8587-ca13-4258-badd-f13f3f1226e2","sequence":{"long":8147},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98f7423d-10b0-4f74-b5ee-d270d079bff8","sequence":{"long":8148},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c553f55f-27cb-4952-b806-acc8f70f3230","sequence":{"long":8149},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7355ff9e-9b12-4ba9-b8c5-3961d31987b7","sequence":{"long":8150},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ae55c3c-a1dd-4d90-820b-ea4437fd0fb8","sequence":{"long":8151},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9e565ad-6783-45cc-9ba6-6ca201b887a0","sequence":{"long":8152},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a0ac82b-3dcd-4970-b2ed-49e8cc24c802","sequence":{"long":8153},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47555931-684c-4025-8557-5e0c7f283186","sequence":{"long":8154},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"992c34eb-35ea-47a3-a493-21004253c9d6","sequence":{"long":8155},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"677899bf-aa04-4945-942d-4e964547ef8d","sequence":{"long":8156},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21d0d14c-772c-4167-9c18-6dcbe2bfc731","sequence":{"long":8157},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8791e45-c73f-4f9c-bff6-77c474fd2f98","sequence":{"long":8158},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8db17e5a-e9be-4dd1-ae57-39b68ac3b900","sequence":{"long":8159},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ab18cef-4401-4380-b71f-2dde93a9e7b8","sequence":{"long":8160},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f8b6912-6f33-43c0-bea0-e79c266cfa42","sequence":{"long":8161},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbfb350b-125f-48ed-aa53-bd1ce2037a56","sequence":{"long":8162},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5ad1cf8-33d7-422f-b167-c891a628e4c2","sequence":{"long":8163},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe6ccd78-5b9c-4d3a-a525-cc606b8777dd","sequence":{"long":8164},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f967eba4-5c9b-463e-8f36-bc0fffae500c","sequence":{"long":8165},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"289b36a7-4d7c-414b-8f55-3e05efff0a06","sequence":{"long":8166},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc8d004-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1352","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1352","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84e32228-9b66-4db8-9777-f23d2d4c02ec","sequence":{"long":8167},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7e7dec8-39ce-45be-88f2-b8e4b0377dff","sequence":{"long":8168},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc88672-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d1643b9-7510-4bad-974f-7e59c2204c93","sequence":{"long":8169},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"fdc8d004-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6b946b7-f3c9-404f-919f-d9dddd07564a","sequence":{"long":8170},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1221},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"501d48d9-1547-4755-ab30-d53430d4a72a","sequence":{"long":8171},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":677},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20ce7d8b-f207-4c4c-a4b9-fac24f05332f","sequence":{"long":8172},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1353","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1353","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a78ccc3-361d-4301-aaf0-d14846a12660","sequence":{"long":8173},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"fdc8d004-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc8d004-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebea11c0-2e11-45d9-9412-5029437786f6","sequence":{"long":8174},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"512df219-5400-414b-864d-643ccdeccb46","sequence":{"long":8175},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582966924213856,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"385474dc-8ab2-4e60-a081-a7fb71f049ca","sequence":{"long":8176},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e72c00a-483c-4ba9-925c-1eafd411fb28","sequence":{"long":8177},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa34eca9-512a-4ea2-8f98-8109cdf0bf98","sequence":{"long":8178},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b043a8c1-4bf1-455a-bc4a-b0eb434aede9","sequence":{"long":8179},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54b4243e-4358-4c7c-9871-e0d4232b10cf","sequence":{"long":8180},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f930d02-9f79-45e8-8983-79ebac3866f8","sequence":{"long":8181},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fe6613c-c3bf-40d6-917a-fc1532be1386","sequence":{"long":8182},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f62f2673-68dc-433c-a094-e6bf326be55e","sequence":{"long":8183},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"698c5ae8-f359-4379-8894-797fc1b43c29","sequence":{"long":8184},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b687ea8b-ce5c-41fe-b4da-5ba84a4fdb73","sequence":{"long":8185},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582966924213856,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01faaa57-61ee-404e-b79b-4f7698b3ea13","sequence":{"long":8186},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967394080897,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":318788},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98cac30f-5a77-461d-9910-598f1a18d25a","sequence":{"long":8187},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"506200e5-faf9-45e7-aaf7-32a1039d6c4d","sequence":{"long":8188},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"490","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eacf67a0-7169-4fec-aaeb-06c16fe97ebf","sequence":{"long":8189},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"491","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdf9213f-7946-4e38-98c5-a075bcf3823c","sequence":{"long":8190},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"492","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea4f4925-edcd-4cf0-b273-34fecfdc07ca","sequence":{"long":8191},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"493","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa5e86e9-b186-49b6-961a-3811a5d77a12","sequence":{"long":8192},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"490","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9ab3466-9a54-47b6-b514-768fb9730111","sequence":{"long":8193},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"491","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db1ac0a3-ae3b-4091-a2cd-d5efdef28159","sequence":{"long":8194},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"492","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de736872-151f-4bb0-9a42-ce6c4030b650","sequence":{"long":8195},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967524304611,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"493","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"954b9d3c-4e30-41fb-b1d6-0c3b5cabfe15","sequence":{"long":8196},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fdc941e4-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c687277-7c21-4392-ad1a-ed4c1737f0a8","sequence":{"long":8197},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62bae3cf-d3e4-40c6-89a3-8b07be1b9650","sequence":{"long":8198},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":18},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37935353-606c-4a5d-afdf-d4f510844d18","sequence":{"long":8199},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1354","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1354","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90dff3fe-0f4b-4107-ac22-c88c8dbf34bf","sequence":{"long":8200},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ff078e7-e08e-4ec5-95f2-0ff7afcd8d2f","sequence":{"long":8201},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2e1f69d8-d3e4-2950-a4d3-829bb0298789"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./listdir"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582967944522023,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./listdir ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29ee0462-1574-47ff-a65b-636f70c3d545","sequence":{"long":8202},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"532c0790-fac1-4ac5-a5ad-6a899e59c611","sequence":{"long":8203},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faeb792a-00fe-4b59-97e3-50293fd39b8d","sequence":{"long":8204},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9abfa44-14b4-4e70-9a12-6566856055f9","sequence":{"long":8205},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc93c908-c1ca-491b-904d-a69fa894fc3b","sequence":{"long":8206},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3af4e50-da5b-49b3-ac74-fbe6387a14b9","sequence":{"long":8207},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"455e7f3a-0be1-4ef9-9129-d531c11064c5","sequence":{"long":8208},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"baf66d8f-135a-4ad0-a424-ed87f56e241e","sequence":{"long":8209},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90aebf61-9c75-4927-9e8b-9993baf364b4","sequence":{"long":8210},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5610f38f-a9fa-490f-9674-55863c9e31ca","sequence":{"long":8211},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58a6c332-0750-41ff-8d12-e54f00b51d5b","sequence":{"long":8212},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17a2cf4a-adb3-4a5f-be02-6dabda180822","sequence":{"long":8213},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eaa57c70-d03c-4639-befc-4ff7e510eb4e","sequence":{"long":8214},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c14f458-01be-4095-8670-656c624546aa","sequence":{"long":8215},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07dbd09f-7e19-4375-85db-f155f2793bab","sequence":{"long":8216},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58990fe2-f442-4953-9436-93622da563c9","sequence":{"long":8217},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00fcb5ce-db2c-4d4a-ac96-e487667c515a","sequence":{"long":8218},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3387cecf-efad-44cf-a67e-35cd1d22d833","sequence":{"long":8219},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4803ee9e-4565-4684-ad97-ca938a6ba2fb","sequence":{"long":8220},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a89de0b6-61ec-4e3c-9d67-55b2aca2da01","sequence":{"long":8221},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00eb50"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0031ee84-d96b-4674-b2de-2f1b25a76fcf","sequence":{"long":8222},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faac187e-66ca-4226-a2ff-7d2c4a16878d","sequence":{"long":8223},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4780b11e-8295-43e4-badc-df0f9f2a3637","sequence":{"long":8224},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba2f6a77-4d86-4135-9134-bb3a9cc5ab04","sequence":{"long":8225},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80de5d75-1e0a-4cab-9baf-622eaa0b2eeb","sequence":{"long":8226},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":9},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa82ac6e-dfed-4ab2-a9cb-fc9b8fb680fe","sequence":{"long":8227},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d16ef45-2211-44eb-822c-195f4e8e0e02","sequence":{"long":8228},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28e59c02-4951-4a95-bed0-4a9a5e160716","sequence":{"long":8229},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7efe3d3d-9575-449e-aac5-a137c82ddb6e","sequence":{"long":8230},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e7edbfd-3f0f-4596-8d08-27bed30e54b9","sequence":{"long":8231},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ac8e917-3be8-4835-b911-04f56503abb2","sequence":{"long":8232},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f9fd33b-5591-4706-93d0-1fb33443ca26","sequence":{"long":8233},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":24},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fbfe235-e0a5-4c3c-bcc7-80bb8f07ae02","sequence":{"long":8234},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8588d95e-5e99-48e9-b6ee-e0831dd6dabd","sequence":{"long":8235},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7603f131-8ea5-4067-9f28-5e0e90c703df","sequence":{"long":8236},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2c9ece2-ce91-47ff-b9fa-d700097dc523","sequence":{"long":8237},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8114f04-54b3-4510-9d0a-eeff39b8b1ad","sequence":{"long":8238},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":23},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb1e13f5-9d09-4d89-86f0-3e19d4d10a56","sequence":{"long":8239},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":21},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c52d9107-0f58-43ac-85c8-051d9f4b9a1f","sequence":{"long":8240},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9b91eed-e27c-48ea-93a7-1db40ea96560","sequence":{"long":8241},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af37db55-0ea9-462f-8061-15599ecc5750","sequence":{"long":8242},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":23},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75ee4a8a-23d7-49d6-b236-918d0b8f5b27","sequence":{"long":8243},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":24},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42e4b774-6cf6-46fd-ba7d-424916c6da37","sequence":{"long":8244},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c377caf4-fa0c-42a0-b9cc-42dd6c66c6e1","sequence":{"long":8245},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"724f2d6e-15cf-4e42-9d6d-4c6e544965cd","sequence":{"long":8246},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b96a76f0-8dbf-4c47-8332-e92bb0407f54","sequence":{"long":8247},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5ce4b17-60c2-48ff-8fff-e1562c8b577c","sequence":{"long":8248},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd71965e-36b2-4271-a0d9-6e0f8efda1eb","sequence":{"long":8249},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1730bb4e-d628-40c2-ab0c-0e5d3aa552d8","sequence":{"long":8250},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"319b6dd8-894f-4911-a5e2-e320f8d69576","sequence":{"long":8251},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5a7652c-8c16-4929-87c0-7d958edc9726","sequence":{"long":8252},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a798646-2159-43cd-831c-583fc5e64792","sequence":{"long":8253},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9a45eb7-4b4e-4726-b9d0-3e61810a6b3f","sequence":{"long":8254},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ab0b778-52fa-4fc1-aaaa-ece095c42e18","sequence":{"long":8255},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5a467a9-2a1e-4357-b3b4-28537d239a75","sequence":{"long":8256},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b085224-f99e-42d3-85d4-1a84844ac7e0","sequence":{"long":8257},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"255e36f9-fd0b-415c-9833-04e5c62d9355","sequence":{"long":8258},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":9},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39b68705-e536-410e-ad63-0794b625b8c0","sequence":{"long":8259},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6e1d7a6-a821-49d3-ad73-394cf0155616","sequence":{"long":8260},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6aac6426-fffd-4837-80e9-d06252065202","sequence":{"long":8261},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3105e0ec-b64d-477b-947d-4b388dd8764e","sequence":{"long":8262},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fc456f5-4f51-48bb-a775-03ad1c86bfa8","sequence":{"long":8263},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f15cd975-4e34-4409-beef-03296c720857","sequence":{"long":8264},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a663a5aa-8e1d-4cd8-9713-3f186c24aea7","sequence":{"long":8265},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fe646b69-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24083efa-18bb-41e4-8a67-0b90161ad479","sequence":{"long":8266},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1207},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d61436a-435c-4094-8fdb-39f4e4138cb0","sequence":{"long":8267},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":698},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72586c4b-ba8c-4dc2-8012-54d3246fc61e","sequence":{"long":8268},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1355","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1355","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f59c9165-1d30-44bf-9978-ff905c07106a","sequence":{"long":8269},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e5f013d-5ebb-4d7f-8e97-3f179b922a17","sequence":{"long":8270},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582967944522023,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"294eb55a-0129-4332-9f2f-a41076d4437d","sequence":{"long":8271},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46028eec-97ce-483b-8b5b-1dae064160cd","sequence":{"long":8272},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec9921f6-0d36-4a2e-99bf-470970d8fd9b","sequence":{"long":8273},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"868a7bbc-2611-403f-ae51-07be3a466946","sequence":{"long":8274},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"005f7c6c-566d-4593-b957-7e0b83bf1da5","sequence":{"long":8275},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffee8fe4-abdb-415c-b8d6-5a39ecfa1bc0","sequence":{"long":8276},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42f46b50-d24d-430b-a2e2-4e9295b1ae75","sequence":{"long":8277},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582967944522023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da09e454-10bc-4cff-bb23-80bf20f0ceb9","sequence":{"long":8278},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968418492202,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":326677},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"090e4e04-5c96-4771-bec4-713900d6cb79","sequence":{"long":8279},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"fe654cca-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b815e66-557e-4d85-958e-4b33ef6b3498","sequence":{"long":8280},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca9d75db-1d6e-4ae9-9227-1cd14cd6661f","sequence":{"long":8281},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":25},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"747d976d-62af-4391-b661-3038b4252da9","sequence":{"long":8282},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1356","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1356","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4612d336-d4f1-495d-bc0c-5f2884f13417","sequence":{"long":8283},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77fef1f3-b0fe-4dab-adf8-ed19d4a5e547","sequence":{"long":8284},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"cbeb200e-1746-3e58-8617-b743583e4f59"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./make_directory"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582968958047837,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./make_directory ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdb5db52-d387-424f-93e5-827696453dc3","sequence":{"long":8285},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"595b07a6-89a9-4626-b091-15721fc103bb","sequence":{"long":8286},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e52f8ad9-217d-4175-9d3e-6cd88620c4d3","sequence":{"long":8287},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89d9e79c-f75d-4e91-9c24-f28836777120","sequence":{"long":8288},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c2aa310-4aca-4724-ad52-5c4404cd1e52","sequence":{"long":8289},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9569a5be-2c7b-40ce-af99-08204015f265","sequence":{"long":8290},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2013111d-f806-482e-86ff-785271910015","sequence":{"long":8291},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3694dee-73fd-47c6-9daa-2a23f0750534","sequence":{"long":8292},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"821047d7-3263-4c88-9015-757d3b8af778","sequence":{"long":8293},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13ffdf8e-8e91-45cf-a7ed-5d482784872a","sequence":{"long":8294},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"864010b8-640c-45f6-9611-1e7f19eeb8c4","sequence":{"long":8295},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f075f478-b002-4d18-ad70-ae2a9ee49fcd","sequence":{"long":8296},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bbc3ada-b1b6-4d1f-a6a9-1db9cab492e0","sequence":{"long":8297},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e775c59-341e-46aa-b94c-ad7f7e13eca1","sequence":{"long":8298},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"804791b6-7300-4cda-a8a0-899a0b619531","sequence":{"long":8299},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87fc438e-5f97-4483-b1a5-f9495c5cb028","sequence":{"long":8300},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24c410a8-abcd-4e8f-9a41-945e276deb87","sequence":{"long":8301},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c80c40fa-84bc-41a3-8c98-db7492d46ca4","sequence":{"long":8302},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4605f989-876c-47c6-8e62-7cadfb8de767","sequence":{"long":8303},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d58a7c5-5c7e-4c0c-96d4-3fabb7c66db0","sequence":{"long":8304},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ef2077a9-1b4f-685b-8f1b-6859ab685e9f"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/temporary"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mkdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02a11cff-2901-46bb-a04b-bc0c53c5865d","sequence":{"long":8305},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"feff028b-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40622e72-05cd-4ac1-8bd5-34cb55f1697e","sequence":{"long":8306},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1186},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cecc7c7-6b8d-40cf-b20d-c345f0a620c6","sequence":{"long":8307},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":727},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd100906-5393-489f-8741-a2b06030cbd3","sequence":{"long":8308},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1357","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1357","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83e111c0-7983-4a50-82ad-f0ba06eb8b89","sequence":{"long":8309},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cecd490d-21c6-4da5-b721-7d3229febdae","sequence":{"long":8310},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582968958047837,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52432891-30f6-4e06-99c8-ccad0ad30663","sequence":{"long":8311},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"224cb635-19bd-4beb-8a17-556b3032ea11","sequence":{"long":8312},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cabed3f-d3a6-4da4-988e-6f90204f67ba","sequence":{"long":8313},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e14a6567-6980-42e0-bda8-b79128b8c132","sequence":{"long":8314},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1c5e562-54c0-4f01-99a3-f12977e857be","sequence":{"long":8315},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1e54c1e-cdc1-4605-b5c3-98edb82a3aa0","sequence":{"long":8316},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae0bd304-ca1b-47b9-bd42-8982b74f0407","sequence":{"long":8317},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b7a1eef-f2c7-49be-8bf8-0dcdd679e78e","sequence":{"long":8318},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa165fa8-3c32-43b2-9842-8495a7fe3989","sequence":{"long":8319},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0b1449f-369b-4228-8e8c-5978ad7f3567","sequence":{"long":8320},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a220dadf-cf48-4d0b-bb78-39c057b7dd98","sequence":{"long":8321},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11364dbf-17f4-47d4-91ea-d517ebaba9d3","sequence":{"long":8322},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47f51c07-9755-4863-a4e5-97814e08fa4c","sequence":{"long":8323},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582968958047837,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5195240a-868e-4139-b6b4-6ed4c9abf215","sequence":{"long":8324},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969434831514,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":331677},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3e84ad7-d407-4fcc-bce3-0ff6fe209654","sequence":{"long":8325},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"feff8c39-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84b85157-3518-4856-a515-2409fec2a011","sequence":{"long":8326},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c73d7bba-8246-47d6-8d10-f9c81514d9b0","sequence":{"long":8327},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"578c6a07-710a-49e9-88be-67bccebf571b","sequence":{"long":8328},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1358","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1358","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d72419e0-31f7-4681-b730-17eac3898d68","sequence":{"long":8329},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e796859f-6b2f-490d-bd1d-140789e2bb93","sequence":{"long":8330},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6741c59f-8ce3-8e50-a38c-f0d1808ea1c5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_multi_write"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582969974290865,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./multi_read_multi_write ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b85b2e47-bf90-4128-8518-de724d23ea55","sequence":{"long":8331},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ee14cf1-67ac-4ddb-af05-0c0c7e48127b","sequence":{"long":8332},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ae955fa-53ba-488c-a23b-d65eff3d8edc","sequence":{"long":8333},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"089f25dc-9372-49ec-8bb5-46fb73ad9319","sequence":{"long":8334},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6692a647-a729-462b-b890-46cf6b5d7e91","sequence":{"long":8335},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e6d6c84-ce5d-47df-ad3d-d150a9831259","sequence":{"long":8336},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9859cc61-07e4-43c3-b0ac-fd37bf881006","sequence":{"long":8337},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f355b95c-914f-43c0-b424-89d2000dc727","sequence":{"long":8338},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0e5883c-c0bf-4118-b48b-d57c25c22008","sequence":{"long":8339},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"539aa006-74df-470b-82d4-8aa679b2477e","sequence":{"long":8340},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c13e311-227d-4604-b88d-25160f2aa0a7","sequence":{"long":8341},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f547de5-8e22-48c6-8617-2c82ee83317f","sequence":{"long":8342},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9441a123-1d36-4c09-adc4-8889f88adef7","sequence":{"long":8343},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d04d629-5771-4579-9c51-1d11d656698c","sequence":{"long":8344},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0909e615-5708-432d-9a1c-c13b1d7bc4ad","sequence":{"long":8345},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b914cbc-9afc-4fa0-a15f-a9be6b7ad272","sequence":{"long":8346},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ef011e7-9894-4ed2-bc49-eb4954360e87","sequence":{"long":8347},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dd24499-898e-4573-b98e-12caf81a87b6","sequence":{"long":8348},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbf25802-bd17-4d97-88bc-78de9ab66d9a","sequence":{"long":8349},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73922d15-46e8-4080-8397-ba5f54450fea","sequence":{"long":8350},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a828588-b152-400d-98b2-0ca37939e9ac","sequence":{"long":8351},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2164d86-8316-44e6-8907-4071acefe394","sequence":{"long":8352},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"9679d39e-c74a-3855-8ac7-3e3be538a626"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/output_file1.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"384cc2e8-58dc-41b7-b5a7-74124fbe7f88","sequence":{"long":8353},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"95dea952-8b38-a659-b88b-355249a60651"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/output_file2.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f3d4d47-01be-421c-9228-3b14a39c29ac","sequence":{"long":8354},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":209},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df076b82-46ed-49c6-8b3e-720970c5f9a2","sequence":{"long":8355},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":382},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbf9e30b-6ec5-477a-a1d6-faceba4fb40c","sequence":{"long":8356},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cb67e70-6820-464d-a2d4-1fea6841ad96","sequence":{"long":8357},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eec46154-7c14-414e-b884-db149b648315","sequence":{"long":8358},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"9679d39e-c74a-3855-8ac7-3e3be538a626"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":191},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7a379a5-3884-4c45-957c-8fd0ee6a3533","sequence":{"long":8359},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"9679d39e-c74a-3855-8ac7-3e3be538a626"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52a559de-715f-427d-8b75-e85d1c3c0b86","sequence":{"long":8360},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"95dea952-8b38-a659-b88b-355249a60651"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":187},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a18a40f9-2274-48e9-a818-35d1df7685af","sequence":{"long":8361},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"95dea952-8b38-a659-b88b-355249a60651"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2ba0cb8-52db-49ee-889a-cace2dc3a6d1","sequence":{"long":8362},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ff99fb10-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45288b63-27b7-4852-b875-42442a225de7","sequence":{"long":8363},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1157},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cdddbeb-cc77-4923-baed-de586fbfa595","sequence":{"long":8364},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24242c8e-faa4-432c-ab1b-9ed5605f63cc","sequence":{"long":8365},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1359","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1359","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa6630e5-d209-40c1-80e6-02a4e1275697","sequence":{"long":8366},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9e66746-f812-4ea2-9287-b5c06bb2b367","sequence":{"long":8367},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582969974290865,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec0320c3-2789-486e-8791-c368570f4ce2","sequence":{"long":8368},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1dcf61c-9dce-40c0-9c62-1f45729bf85e","sequence":{"long":8369},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c659260-0130-4c1d-85d2-1d10faf2ad38","sequence":{"long":8370},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab558662-a024-4c08-b5c5-4adf1a28fa4d","sequence":{"long":8371},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"370ea7ae-99ed-4301-92c2-1183715dea85","sequence":{"long":8372},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37506ade-52e4-4c15-948d-27102e8df42e","sequence":{"long":8373},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ada120c-ef4e-4eb5-b75a-5fd4ba123319","sequence":{"long":8374},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f26665c-4489-40f1-8fc4-8bd887a737bd","sequence":{"long":8375},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48230418-18a3-4ad5-82ab-f37b1208f70b","sequence":{"long":8376},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e441efc-8a42-4bf0-b506-f2fd7c16cdc4","sequence":{"long":8377},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e34f8889-e40b-4235-ba80-4c830ab5f6c1","sequence":{"long":8378},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f992de7-2402-475a-81db-d95bfbcde2d6","sequence":{"long":8379},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53fdde8a-4db2-4d1d-acb2-20c9401babd1","sequence":{"long":8380},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1e15a70-7694-4dec-97cf-c9696780e854","sequence":{"long":8381},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"067d9632-aff1-4157-9cd1-3586f9fa3f4f","sequence":{"long":8382},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82ad86c5-b995-4937-9199-512645848805","sequence":{"long":8383},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"237f80cb-0959-4b91-90cb-f6226dfc4a05","sequence":{"long":8384},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f44e73d-2274-4ea3-864b-620731a01821","sequence":{"long":8385},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a24571a0-b1ba-405e-90c4-f8454bca6f43","sequence":{"long":8386},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582969974290865,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64ab6a9a-3113-4904-b5b7-05cc1cc86ad2","sequence":{"long":8387},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":331677},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d2fad78-4a64-4de9-91c0-bb487f55253c","sequence":{"long":8389},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5efb2bfb-763b-42a6-bae9-79900b6d7c85","sequence":{"long":8388},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3d63884-1e5a-4bf6-bda9-97a374fb83cf","sequence":{"long":8391},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b567026c-127f-4fc1-b736-87827edd35f1","sequence":{"long":8390},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bbc8156-c7e4-4401-a66c-9386c229022e","sequence":{"long":8393},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fdad61b-896d-48d4-83b9-1516fc22b89e","sequence":{"long":8392},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5ca5053-359f-4829-949f-7c51aa3dbd09","sequence":{"long":8395},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1727af4-cd30-4bdc-afc0-de8400055094","sequence":{"long":8394},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ab6d102-cdfc-4526-b16a-dea236367950","sequence":{"long":8396},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93a4a9c2-6c3a-45a9-9d3e-a6fda3882abe","sequence":{"long":8397},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dc180f0-2a2d-408e-bbf1-9f83f5e60681","sequence":{"long":8398},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a85f6f8a-fe50-422e-a699-ecb011a425cb","sequence":{"long":8399},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4432},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0d5923f-fe6c-4bce-a48b-bcded9834a35","sequence":{"long":8400},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4485},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80183966-710a-4b97-b21b-520807561a9d","sequence":{"long":8401},"type":"EVENT_WRITE","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69eaa698-d672-4bd6-8002-7317092ecca5","sequence":{"long":8402},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7541e7f-ea77-4f55-a542-1e18a48a1dbd","sequence":{"long":8403},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18c924f0-ace7-43ff-8ea5-33c951723784","sequence":{"long":8404},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3449},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fae0ed4-3d2c-4531-a2ad-ff36b6f1f575","sequence":{"long":8405},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3502},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1441907-b2ea-4975-8614-a4439ab4dba4","sequence":{"long":8406},"type":"EVENT_WRITE","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1420c686-ad78-43f2-ba06-b478eba650be","sequence":{"long":8407},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b849ef63-505c-4887-957c-a58bb786777a","sequence":{"long":8408},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d90c4fd8-1dbd-48a6-a244-08bd3aa93d2e","sequence":{"long":8409},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4996},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c4e7cc4-75d0-451d-9ceb-9f862219cf02","sequence":{"long":8410},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5049},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1292a567-399c-432c-85a7-ac0626a8ac1d","sequence":{"long":8411},"type":"EVENT_WRITE","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a163a54a-a4d5-4004-87a3-1a2fce03c3c3","sequence":{"long":8412},"type":"EVENT_READ","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d586b5f-3d05-4146-9db0-8e61865e1c72","sequence":{"long":8413},"type":"EVENT_SENDTO","threadId":{"int":100141},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"495","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28cf2733-c852-4d95-a28a-f9beb9e1a22f","sequence":{"long":8414},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":111},"programPoint":null,"properties":{"map":{"ret_msgid":"495","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdf25b79-8dd4-410b-bf3f-9c7354c08a5a","sequence":{"long":8415},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970124025667,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3061b828-9584-4fd9-b62b-b0ace5cef158","sequence":{"long":8416},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970133899473,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27fae6c3-9597-41b9-9eda-c5e528cbed7a","sequence":{"long":8417},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970133899473,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe692663-0065-4c7a-8a08-52815025f07b","sequence":{"long":8418},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970133899473,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c467ce2-0490-4b6c-8d30-30c271331acc","sequence":{"long":8419},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970133899473,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79f28733-c73b-4203-af18-3dca0a05dcef","sequence":{"long":8420},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970464025726,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":341125},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79a6ceac-e130-411f-81df-dc4b506a627d","sequence":{"long":8421},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a394e5b-59cb-4192-8d9e-763bd5b9cfef","sequence":{"long":8422},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"496","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fbe01cc-34d4-4fd0-845e-f27d6df9660e","sequence":{"long":8423},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"497","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76adb61f-ba6c-40bf-b7b1-0d44d42249bd","sequence":{"long":8424},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"498","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2723260f-0114-4b43-8e0b-2dd3e7c5395a","sequence":{"long":8425},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"499","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b27a89a-1d77-4e6d-8336-e5af7def064b","sequence":{"long":8426},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"496","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47b1cc30-e49e-4c59-bf8f-314271193feb","sequence":{"long":8427},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"497","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bdd8531-0cdb-4936-8d57-8753220bdd1c","sequence":{"long":8428},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"498","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13670389-62e3-491b-91e2-5f6f1ba4ff62","sequence":{"long":8429},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970529488727,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"499","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3903d800-8292-475a-a5ff-ed99dc470308","sequence":{"long":8430},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ff9aa18e-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab73f3ce-5baf-4eab-ad9e-830be8a042a6","sequence":{"long":8431},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"552b446b-91ab-4d30-861b-777ef0d3413f","sequence":{"long":8432},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":34},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9beb22e-bd72-420f-92c3-bc9c90a6a9d0","sequence":{"long":8433},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1360","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1360","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de354a02-0d59-4d5b-8143-b69c746a655d","sequence":{"long":8434},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"647f508e-98d5-4ff0-b270-7b650d936c47","sequence":{"long":8435},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"d8b8f561-1e30-f858-b01e-d3c3b8f82fe5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_single_write"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582970993939804,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./multi_read_single_write ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d10dba00-9cb4-4396-9211-eec60232040e","sequence":{"long":8436},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c40fad50-0d8d-4d66-8fe5-71a7515f8e04","sequence":{"long":8437},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7036439e-1bbb-4a17-9c53-545a894f7c17","sequence":{"long":8438},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b160473-7750-45e7-8309-e871fb7583be","sequence":{"long":8439},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d3427d3-8e48-4ada-83ce-ae32db9ad883","sequence":{"long":8440},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2173ff50-5bb1-436c-b770-1cc0e7b52e12","sequence":{"long":8441},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"621f9a71-349c-49d4-aaeb-e20976321799","sequence":{"long":8442},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b5694f7-f7c4-4987-91c3-05c99fb52687","sequence":{"long":8443},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd19feca-af79-45dd-9aaf-7a896a4fbfbd","sequence":{"long":8444},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39c3021e-9cbb-4cfe-91db-29a8301d0182","sequence":{"long":8445},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bea0b57d-5aa2-489d-8506-57ef70e25b05","sequence":{"long":8446},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0ae2f65-e27a-4297-b721-5e7085105e74","sequence":{"long":8447},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e5462ca-fd48-436d-8113-580b17cc0c50","sequence":{"long":8448},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a5b6763-4ef5-4eed-957f-5b5caae90699","sequence":{"long":8449},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c379f0b9-6b5d-425c-990e-aa535a12cae9","sequence":{"long":8450},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c287036-c0ea-4073-92ef-703f776c0d1a","sequence":{"long":8451},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"765a7e29-5f42-4c9c-86b5-d4e804a75c85","sequence":{"long":8452},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0325362d-a3b3-4b06-a633-842c3f3652d8","sequence":{"long":8453},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c17ab9bd-20ff-409d-9e5b-330cf8b1e8fa","sequence":{"long":8454},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e0dd740-23d5-46c2-b086-d94206fa0f34","sequence":{"long":8455},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32703215-0af2-4ab6-80a5-dd45e62643b1","sequence":{"long":8456},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61bacfc0-8104-49e4-8265-7426b8b6a632","sequence":{"long":8457},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"93a7558e-de2a-0550-aade-8f47a0052450"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/merged_file.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"450c5268-d613-41a7-b9e2-428bc71007a5","sequence":{"long":8458},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":209},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9948a3ae-9c23-443a-afb3-c66057e67784","sequence":{"long":8459},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":382},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75235993-97af-4de5-a1c1-fd24a9dd2bd3","sequence":{"long":8460},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d662ea3a-8027-472b-a543-b21a6206b12c","sequence":{"long":8461},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"660f2105-342d-40cb-a35a-b4f9169f64ac","sequence":{"long":8462},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"93a7558e-de2a-0550-aade-8f47a0052450"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":378},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc2c198c-e821-479b-a237-4a8c89471691","sequence":{"long":8463},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"93a7558e-de2a-0550-aade-8f47a0052450"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98cdb2fc-3f7d-4165-a712-1ebaa42fbde4","sequence":{"long":8464},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00359f92-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c7cc68b-cd3b-48a2-8f75-b70aa8a22cf6","sequence":{"long":8465},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582970993939804,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1127},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cfcdbe1-2b8c-4ed3-a2d4-e595c9c9919f","sequence":{"long":8466},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582971483913741,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":345981},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c68dda5-8686-477e-9213-0bf31f3ea7e1","sequence":{"long":8467},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"00360eca-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00360eca-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09086da4-5607-4783-9f72-bd9c1c52607f","sequence":{"long":8468},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76495bbe-f771-4de8-950f-df8172d386b6","sequence":{"long":8469},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":27},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d43dfc6-0487-4db1-af0e-6b3d34d4236c","sequence":{"long":8470},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1362","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1362","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f77f264f-4e00-457c-87c4-250ad223a6e5","sequence":{"long":8471},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b47f2dda-95e9-41c9-a5c6-f2293b9e438b","sequence":{"long":8472},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6afebb5e-412d-d25c-ad41-600cfcd2423e"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./remove_directory"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582972009613134,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./remove_directory ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"422f332b-87fb-4af5-9f4d-0df99e45054a","sequence":{"long":8473},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98dfe5a2-5da0-402d-9759-c9eb64290501","sequence":{"long":8474},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"443113a8-292e-4fe8-af9e-544659d6382a","sequence":{"long":8475},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44a9a2ee-e298-4154-88c8-059fde5ae2a4","sequence":{"long":8476},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6ffd856-1b5c-4bdf-b28a-abf0b9b3b768","sequence":{"long":8477},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f785583-5098-4210-b3a2-a5af221f165b","sequence":{"long":8478},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd928f98-c0a0-4651-a5e5-93741a453c87","sequence":{"long":8479},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"487ee465-4dbc-4332-97eb-e29ba427cb8d","sequence":{"long":8480},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8a9aabe-7d78-4428-8a1a-48572ec889da","sequence":{"long":8481},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5efcc5d7-5325-4435-b782-87d2604e4006","sequence":{"long":8482},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"348add7e-2ed7-414b-9850-d1e303be0ec8","sequence":{"long":8483},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c530b07-3305-4518-a3cd-fb5fe28390df","sequence":{"long":8484},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69cf368d-029e-454f-9855-43d0f34b62f7","sequence":{"long":8485},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d300c889-4659-498a-a98f-dfbce440bc00","sequence":{"long":8486},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5969db3-8451-4b27-9987-271b46b503c1","sequence":{"long":8487},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7de43369-785c-4977-bae4-0b7d7bf96c8a","sequence":{"long":8488},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab541fd5-8c53-438d-a9cf-2cb37f044646","sequence":{"long":8489},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"244de785-062d-40f4-80d3-b0c9b42d6798","sequence":{"long":8490},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f41b9ce-f33c-4ca5-935f-a3c38b6cf27f","sequence":{"long":8491},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d814ebb-83ef-4ec4-865f-dd207608557e","sequence":{"long":8492},"type":"EVENT_UNLINK","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ef2077a9-1b4f-685b-8f1b-6859ab685e9f"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/temporary"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_rmdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab6753e2-b17f-4e06-afb3-6c0b4767b1f6","sequence":{"long":8493},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00d0b0a5-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3e1575a-7ff1-40c9-9309-e525299cb702","sequence":{"long":8494},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1104},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7870c9a9-f469-423b-aa42-40fdac4c5b23","sequence":{"long":8495},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":798},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0668472c-3279-4514-b88e-76aa0b460aac","sequence":{"long":8496},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1363","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1363","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cbf8216-810e-42bd-aa3a-9814faf617af","sequence":{"long":8497},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae80e8ed-d561-4e51-8deb-576fece75d18","sequence":{"long":8498},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582972009613134,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f337bc8-85a8-4dd7-977c-60b1627af2e1","sequence":{"long":8499},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61fc890c-5dd9-4b7b-8534-d2e01ec2150f","sequence":{"long":8500},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f03c3339-26a5-4000-bfe1-3d99e5e3cbee","sequence":{"long":8501},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7247cf9-5351-4c8e-8621-4187b6b3fa0f","sequence":{"long":8502},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2db5fa6-da7a-44d7-a909-eafc1ec6e133","sequence":{"long":8503},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bb38c3e-68c3-4b7d-85bc-130755875cc9","sequence":{"long":8504},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972009613134,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f63efde-f687-4194-927e-12bca5abccae","sequence":{"long":8505},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fce5f29-776c-47e6-a69b-a3525c7c010f","sequence":{"long":8506},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a71304b7-b18a-474f-a690-4c34e9332cf1","sequence":{"long":8507},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0325a005-e323-46e2-a037-c68d9c91293e","sequence":{"long":8508},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"927846f2-f366-41f8-86d2-0c2c032562c0","sequence":{"long":8509},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bbc99dc-629b-4afe-b3dd-09cc8fb8c7d3","sequence":{"long":8510},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d414448-e87c-4518-aec8-449a535f8b24","sequence":{"long":8511},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972013891088,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4add4d4f-46b9-4ae5-82a3-b5e59a0ffc2a","sequence":{"long":8512},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582972504128832,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":350970},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c8931dc-baa6-4b4c-b4fa-337cae405a80","sequence":{"long":8513},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"00d10d10-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa37b4ba-a66d-4d20-bfa5-760aef01a3d0","sequence":{"long":8514},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efe6af6f-1066-460a-af36-e8c5aa0b3f69","sequence":{"long":8515},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2989ece-13d3-487f-a99e-4e2303f31ae4","sequence":{"long":8516},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1364","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1364","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"174df52e-a203-4fbc-9bfd-4d3cf02677df","sequence":{"long":8517},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7da704fe-9105-49ed-b7b2-029382d9d149","sequence":{"long":8518},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"5b518504-be76-5653-b6be-34ff435661ed"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./remove_file"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582973023921563,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./remove_file ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3725d861-2736-48b7-8bfb-6de0072e7661","sequence":{"long":8519},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87dda5e9-7fba-4da4-8097-0ed0e3e8244f","sequence":{"long":8520},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21c199ad-982d-4064-8b7a-c86e51102846","sequence":{"long":8521},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d0b7f7b-b46b-47fa-ac4e-c2d68966ca39","sequence":{"long":8522},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6aa6609e-529a-4d2e-889b-56d9c009b90d","sequence":{"long":8523},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"502007a5-3dc5-44f3-8aef-82ff1cddd4f0","sequence":{"long":8524},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a0b19c3-cea1-4b6e-b382-6cc90fa0ab8d","sequence":{"long":8525},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d1a4927-9e69-481a-81bc-cbf823400267","sequence":{"long":8526},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b792230-eead-485e-8f60-87d8c81b0c19","sequence":{"long":8527},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15c537b7-bbd6-42c0-828c-7690c3bedbbc","sequence":{"long":8528},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19d2d96c-1452-4863-8b6d-87ec1238683a","sequence":{"long":8529},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92f49457-c47f-41fd-90fd-b9ae4909750b","sequence":{"long":8530},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"967c8173-f63c-4b1e-b340-cf263892eeb0","sequence":{"long":8531},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f74be0f7-1fd3-48b3-a34f-96deb3d8b93c","sequence":{"long":8532},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bfdfbd5-72f1-46d1-9c4f-e5359bbcd322","sequence":{"long":8533},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2eac252-16ba-4fb1-87d8-5a08c621e6ce","sequence":{"long":8534},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2e74bd0-555c-4ead-aaaf-143900114075","sequence":{"long":8535},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61c8bd05-18c8-4ee0-aabe-9425423dd7c2","sequence":{"long":8536},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae3adefc-564a-4a82-8452-f3c4bd06cf0b","sequence":{"long":8537},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a8b29e8-b538-4f3a-934f-3ef30a7b4761","sequence":{"long":8538},"type":"EVENT_UNLINK","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"745458ec-83ee-b052-ae83-2efb22b0cb41"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/out.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_unlink"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a26a80a-bdf5-4442-b0ec-e29e8f03439d","sequence":{"long":8539},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"016b62c2-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4334f4fd-328b-4b01-8ef1-b2e056a75dce","sequence":{"long":8540},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1086},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"760604b3-d94c-4a36-873d-407404e4e610","sequence":{"long":8541},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":872},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3467978d-e865-4233-a33f-4082ca16064b","sequence":{"long":8542},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1365","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1365","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cce1143a-bf9f-4084-b604-791a4ee49b56","sequence":{"long":8543},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1b11115-c313-4084-ad70-06a0e7936d09","sequence":{"long":8544},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582973023921563,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c78c3519-bcc2-4041-8af3-c393628068b7","sequence":{"long":8545},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f571eb7-fb91-45b7-a2fc-4c4e5fbfc84f","sequence":{"long":8546},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3661005f-1d4d-42e5-9a37-5f66702e8c60","sequence":{"long":8547},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79e110e6-4615-4ba7-8bfc-c8490861e392","sequence":{"long":8548},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aebe92c1-fe53-45de-a2f1-fa0833b0a941","sequence":{"long":8549},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89f456b1-4dd2-4c97-bcc8-6515e0cd7f83","sequence":{"long":8550},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1de8380-4c55-45f4-87e6-175b52205566","sequence":{"long":8551},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"955f1c4d-3057-4e3b-b10d-7029c622ce6f","sequence":{"long":8552},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e516994a-a6eb-4586-8d7b-edbb1e71755f","sequence":{"long":8553},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9db951d-ec42-4a26-bf7a-8d6b7cd16402","sequence":{"long":8554},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffc18807-a97b-41ad-8669-7f4549fee751","sequence":{"long":8555},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56db827a-644b-46ae-b6cb-f38ee0460691","sequence":{"long":8556},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c43dd6e-2778-4f1c-a449-e848b7e2960e","sequence":{"long":8557},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973023921563,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0473b0ec-9f7f-427d-a967-a104e3d8992e","sequence":{"long":8558},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":356013},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c4af417-e9c1-4e7e-8cd0-440754fed13e","sequence":{"long":8559},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc5e922d-3ed7-4345-9ef2-23a298b9163f","sequence":{"long":8560},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"501","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63f0bb85-afa1-4209-b018-b86a942f6b93","sequence":{"long":8561},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"502","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ceea8c99-bab9-4ab1-822f-e02edc897646","sequence":{"long":8562},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"503","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3a33e43-fb25-4e4f-8838-34d74f921e9d","sequence":{"long":8563},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"504","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4366c55-6a2b-425b-a5d5-98bd37d5b178","sequence":{"long":8564},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"501","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea022aad-60fb-43d9-ac9a-d21a16db4bfe","sequence":{"long":8565},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"502","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f0eb22a-b262-4baa-8c2b-eaeac7226942","sequence":{"long":8566},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"503","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcb69d9f-8d02-4893-a98b-94d3a3faf9e2","sequence":{"long":8567},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582973524142365,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"504","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddd2c81b-9604-4937-bbcd-af3fa3b8e8bf","sequence":{"long":8568},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"016bc3ec-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5170feb-cc54-49d6-be30-9527194c20fc","sequence":{"long":8569},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"911c5f82-b641-4f69-a20d-04b89acf19db","sequence":{"long":8570},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74414769-57b5-413b-8425-a43870723c60","sequence":{"long":8571},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1366","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1366","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ea9ec28-6c9d-4f4e-913d-8f8003b3d121","sequence":{"long":8572},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4dadf87f-e0d3-4607-83c8-1f9ed247e4d8","sequence":{"long":8573},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"5b518504-be76-5653-b6be-34ff435661ed"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copied_pipe"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582974034219849,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copied_pipe a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59d34f17-495d-4fcb-a623-56427218a543","sequence":{"long":8574},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fccda9e-f835-486d-8147-ca2d86017880","sequence":{"long":8575},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcf9e441-1018-4ca1-9565-2e3b806b65d2","sequence":{"long":8576},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"226dfc70-3e61-4f35-88ed-224a84b60e14","sequence":{"long":8577},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14355456-cbb0-4e47-8549-b855a9ba45dd","sequence":{"long":8578},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"838e486e-468a-4260-9f56-ca011209fadd","sequence":{"long":8579},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8b234f0-0a97-4aa9-9196-c4a33933b5ce","sequence":{"long":8580},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a5e534f-d3d0-4fe8-84fa-460e8d4e4b21","sequence":{"long":8581},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bf4d11d-5ff8-4019-b306-51e4a3e7086c","sequence":{"long":8582},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a858779-92ec-44ce-8633-fd947492569e","sequence":{"long":8583},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"241d9476-7137-4bf4-9f2c-c9e13b7c314d","sequence":{"long":8584},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"977d503e-5442-4694-9922-68c0ca1621df","sequence":{"long":8585},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da0a1760-e938-475c-bbfb-16fb8be24740","sequence":{"long":8586},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b28bd9b-fa66-4d1d-8660-4cb6c46aad1a","sequence":{"long":8587},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2919792b-a763-4271-bae2-cd6218313975","sequence":{"long":8588},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e4bff57-524f-4b3b-aee2-cb8e25c323f8","sequence":{"long":8589},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d4ee8cc-3bed-4eae-8ea2-14d73c080ee1","sequence":{"long":8590},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31ba1de5-eb77-4fb6-8ffa-8c5fc40b4cc9","sequence":{"long":8591},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ee264eb-ffbc-4682-8e40-9de321cd8b3d","sequence":{"long":8592},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"7846f689-00d6-5d8d-9ded-f91f3e48e00e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"0205e82e-467b-11e9-aeb7-080027fc76ba"},"uuid2":{"UUID":"0205e82f-467b-11e9-aeb7-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"499f1e8c-266e-47bc-b3f0-94a13b98b046","sequence":{"long":8593},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"7846f689-00d6-5d8d-9ded-f91f3e48e00e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89f553c2-8f94-4a1c-9f77-b72756c37cbe","sequence":{"long":8594},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205eb21-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1367","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1367","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67f78c95-c5ea-4087-8533-d0c4edfe9620","sequence":{"long":8595},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"0205eb21-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1366","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abe3b9a6-73d4-4179-97df-d06d1ce8cc01","sequence":{"long":8596},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"0205eb21-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205e82f-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1366","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ce4e6f1-f666-4a4e-8cf5-ed1f1763af3e","sequence":{"long":8597},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"0205eb21-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205eb21-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1366","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e950cc0-5f92-4dcc-9813-129b5f1b4b11","sequence":{"long":8598},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205e82e-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e5b8387-0936-4297-84a8-07a3144694ad","sequence":{"long":8599},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b997c1d-672d-421b-a1dc-3338a3f7a434","sequence":{"long":8600},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0205a2c5-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"969aab6a-3b92-4aee-9c48-82bf300e2eb0","sequence":{"long":8601},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974034219849,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1012},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b0562ae-5e86-42e0-96cf-6d00fd70717a","sequence":{"long":8602},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582974534337270,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":360849},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"155dc423-9597-4824-bb7e-91025ec02ac5","sequence":{"long":8603},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"0206281d-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0206281d-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"420b05c3-6540-4956-8e56-22dd2cd5910d","sequence":{"long":8604},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af298aee-b651-43ae-837f-d7db25a24fbb","sequence":{"long":8605},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e5badd6-a325-4472-b34f-eee43fc5e7b9","sequence":{"long":8606},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1369","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1369","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e584c700-ee2d-49c1-aef5-279bdb75a823","sequence":{"long":8607},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02af267a-1b3a-45cb-8a08-07d462b3671d","sequence":{"long":8608},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582975044355157,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/datagram.sh a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df0a49a5-831b-4f57-989f-dfc64a7808af","sequence":{"long":8609},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4de96382-7a0a-452f-aea7-8df234e97af5","sequence":{"long":8610},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac05ffbf-ed35-41f2-a13c-8e99ed9fee04","sequence":{"long":8611},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"074ea6f0-5834-43e5-a61a-fe9e2873ba93","sequence":{"long":8612},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"327598be-35da-4758-98e3-05d3710e3966","sequence":{"long":8613},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"425d9cef-3270-4d91-bcaf-90e0066888d4","sequence":{"long":8614},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a2008b6-7a15-43b0-a126-5e71c6af3a48","sequence":{"long":8615},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f69301e-d74f-4824-935e-b128cb64a75f","sequence":{"long":8616},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"718dad01-4238-4aac-85a2-0ef42db146d8","sequence":{"long":8617},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab129695-8455-4fd3-aa54-ba418b41e5b5","sequence":{"long":8618},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21f60b0f-b70f-4e43-a3c5-35fefce9732b","sequence":{"long":8619},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9e7bf26-8bd3-4047-b0f2-a62bc7957291","sequence":{"long":8620},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"167f9a9b-938f-4f3f-a865-c40aef9ffe92","sequence":{"long":8621},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1134327d-50cc-4a24-9b7f-499c545298c5","sequence":{"long":8622},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc764a00-a04b-4a6c-84ec-c689ac6d5074","sequence":{"long":8623},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4bbf83c-cf68-4354-8431-62801980b9c5","sequence":{"long":8624},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07dd9cff-d863-4906-ba56-62777824c2e4","sequence":{"long":8625},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8cd2fa0-0687-4924-8f64-80d48f7617a7","sequence":{"long":8626},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a88e0b2b-77fe-4ac9-84c8-2c199c47033d","sequence":{"long":8627},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8af2856-8901-404b-8435-59c985b136f0","sequence":{"long":8628},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582975044355157,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/datagram.sh a","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1db05d9e-6776-45bd-945f-40f5f192c93e","sequence":{"long":8629},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9e2109d-5aa0-48e5-b3ea-2dd432b49ac0","sequence":{"long":8630},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e72df474-2cbb-4e28-95b3-fe7fbaf3074d","sequence":{"long":8631},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1831692-e216-4b01-8f77-e7f94bee801e","sequence":{"long":8632},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d128553-ea73-4d61-88b5-a76011ecba61","sequence":{"long":8633},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"544fd55b-2acd-4056-96ee-7e203d09c930","sequence":{"long":8634},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e52f4a77-2024-4541-8996-b16fe5443273","sequence":{"long":8635},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0022ee83-5e61-4588-abc9-a91418f7abe1","sequence":{"long":8636},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d967ee8e-fe5a-4ffb-b5a1-bae43c3b5e78","sequence":{"long":8637},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87a7c7d3-10e9-4a42-a11e-3c70dace3113","sequence":{"long":8638},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e97c0d4-abec-4e38-9933-22d47c5d48b5","sequence":{"long":8639},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba223565-76e4-469f-be2f-e6bfd27cdab3","sequence":{"long":8640},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aba6d110-162a-4b1a-b50e-3c7b671bee4b","sequence":{"long":8641},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edc70aa7-9d01-48a7-ae16-cbcce8a09716","sequence":{"long":8642},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12bd70bb-2f88-4fa2-a423-ded8662e6c4e","sequence":{"long":8643},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0c1e727-a0d0-4e11-b0fc-a94ab621ea8c","sequence":{"long":8644},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89351cb2-f2e1-41d4-9674-45b7d65faa46","sequence":{"long":8645},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49058ad2-e224-4b81-bf37-e4be7b24340a","sequence":{"long":8646},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53e3a53a-d31d-4a4f-b2a7-653a94ee8e8e","sequence":{"long":8647},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99ee0c44-edb8-492c-9dd9-c8cf2c1ed3ad","sequence":{"long":8648},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1d9550c-bc33-42d4-a739-49e3b5547304","sequence":{"long":8649},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ab746f6-1056-449a-8efb-df815a3b9869","sequence":{"long":8650},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34fdc4c4-b599-4c50-b323-50123261cfbc","sequence":{"long":8651},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69b7d96a-8205-456a-8f22-b88c433e37c9","sequence":{"long":8652},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0eeeffd9-060f-4797-b5d5-5b6bde35f254","sequence":{"long":8653},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4a341b1-ab71-46af-9f2b-95ebdbcbc159","sequence":{"long":8654},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7868e81c-7035-459b-9ac8-741900e6e22c","sequence":{"long":8655},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9369dc5e-5aba-4c18-b979-322a9d88d1a4","sequence":{"long":8656},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8e7b0af-c12d-4ccb-b86f-fbeb058fe4f8","sequence":{"long":8657},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18c46169-f906-4405-8382-346beb95c419","sequence":{"long":8658},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1f0346e-5243-427a-9033-de79671b5a02","sequence":{"long":8659},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"673938ac-eef6-459e-9271-c34fb4852116","sequence":{"long":8660},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a586a5ff-014a-4b34-b165-f08c725838f4","sequence":{"long":8661},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8aaea21-7460-4341-83e9-11c4e714d5e5","sequence":{"long":8662},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af27925a-d387-40f1-a2ca-506fa7eeb45b","sequence":{"long":8663},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"835dfd8f-1b4c-4b3c-8a46-40945e16d244","sequence":{"long":8664},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ba8616c-554b-4e5e-b3c1-4e2edac83473","sequence":{"long":8665},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f439205b-c603-4190-b719-77c3ec49b35e","sequence":{"long":8666},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3a5c290-dac8-4d8c-b2a9-9543d67c8c7c","sequence":{"long":8667},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e721d59-d265-474f-8fb1-5c93abf27986","sequence":{"long":8668},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43d2a796-435b-4f0c-b23a-aebce9a0b79e","sequence":{"long":8669},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83d44fdb-f1e4-4918-99ca-33461bb5056a","sequence":{"long":8670},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"690c41b7-b3b7-42da-9c4a-37f1bb448e04","sequence":{"long":8671},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0879712-c319-40db-8bdb-4e92bab53856","sequence":{"long":8672},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc2c3c50-8159-43cd-84b5-a26e5f38bfe5","sequence":{"long":8673},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f91d2b7-5630-4cb6-82d1-f2360effe2d5","sequence":{"long":8674},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32eb42f0-d385-4429-b701-2f856b60577e","sequence":{"long":8675},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"258224ee-180d-476d-8e0d-cc24fa529c21","sequence":{"long":8676},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"341b9fa9-96c3-49e0-a303-06b883572813","sequence":{"long":8677},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9f8c031-a844-45ee-baa7-dfeb7216b82c","sequence":{"long":8678},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dffd92da-683c-4c81-8b30-e6f83122d307","sequence":{"long":8679},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb1a0fb0-87fa-44ac-9510-be81d4a3dec7","sequence":{"long":8680},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3dc955fb-5706-40f2-8695-5d56bedf8779","sequence":{"long":8681},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19a8695b-adf0-4102-b803-57f924cff095","sequence":{"long":8682},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"304a7c92-71f7-4025-b286-f339c48e9053","sequence":{"long":8683},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c43609a2-5df2-4167-9410-a234e35fb9e6","sequence":{"long":8684},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"613a8507-3692-44d2-ae64-a840412e84f6","sequence":{"long":8685},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f34b5e2c-c8ae-4a40-a78c-3f40a02f798c","sequence":{"long":8686},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0060e172-a377-4f27-af9a-a5529f85fc42","sequence":{"long":8687},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb5942a2-cf0d-4278-9aa3-288d16c8d80d","sequence":{"long":8688},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9c6a132-b974-47e8-b8aa-5c2301a6d5b9","sequence":{"long":8689},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ede14ed8-22aa-4589-9f1f-5dfaeac1ff62","sequence":{"long":8690},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e064100-a779-49cc-a681-5102c7def741","sequence":{"long":8691},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":296},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a1915b6-00db-46ce-bf0b-cdd0c9c6424a","sequence":{"long":8692},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":250},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b92c7cbc-69f3-4806-ba62-2ec3323ef876","sequence":{"long":8693},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1370","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1370","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"709440fd-a19d-44f5-afa8-0e9ca99a999c","sequence":{"long":8694},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb84967a-4b31-4697-9201-a7c44aff5d17","sequence":{"long":8695},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":268},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30c0c0b8-ca0a-44fa-830a-cb5319b074be","sequence":{"long":8696},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1371","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1371","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76d13fb1-85d3-4689-962b-740ee244d56b","sequence":{"long":8697},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1d02520-e5b4-417a-aefc-c42b7fc99d8b","sequence":{"long":8698},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03a771ef-e778-4461-89c8-676c7e840001","sequence":{"long":8699},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc4a74ae-521d-4684-b41b-71213d5f8e12","sequence":{"long":8700},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5dd8802-3c7f-4fd4-aee2-77b82f6d2321","sequence":{"long":8701},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582975044355157,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e47f3a22-644b-4774-b904-63873fcee694","sequence":{"long":8702},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e86d50e-499b-4695-9d60-d31a996a1f00","sequence":{"long":8703},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"373ba8a7-d481-4f5a-81d4-177fea4f8ab6"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./datagram_server"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582975044355157,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./datagram_server","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"884f9113-fe15-4e6c-ad45-9604b3992060","sequence":{"long":8704},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83cc3463-5ce1-4745-87a7-1965ff300ef2","sequence":{"long":8705},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89d74885-f8ce-40f5-b642-94d3dbae5704","sequence":{"long":8706},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4384932a-4c43-4b6e-b0e5-38312ec3a495","sequence":{"long":8707},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbb7894b-4ab5-400d-b9b1-8e3f9df5ab04","sequence":{"long":8708},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64de43f3-3e07-4deb-845b-3e0945dcf9db","sequence":{"long":8709},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ef412a7-ef80-44d8-9934-eac6087ef029","sequence":{"long":8710},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54cc05c7-81f9-4c8d-9193-5e664f1fb9a8","sequence":{"long":8711},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4dae98a4-cbe7-467d-a480-8a23cea636d9","sequence":{"long":8712},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd9ab103-128b-4abe-9e71-42ddc0155feb","sequence":{"long":8713},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d43f08bf-777b-4ddf-b940-6e384b7d5373","sequence":{"long":8714},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"696395b8-19fb-48c7-92d3-0abd7dc96bfc","sequence":{"long":8715},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4aeb1ba9-8a6b-4374-8733-69cd555380eb","sequence":{"long":8716},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"580cc5f3-affc-4950-80a7-9eab38373ffc","sequence":{"long":8717},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"239b4c53-0b79-4ce2-9608-a1d401104e8e","sequence":{"long":8718},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"232ee4d0-f0d2-45c8-91c8-9da27a13ef7e","sequence":{"long":8719},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e01fcbb2-7dd4-4eab-b56d-4d9e3fc8c9c8","sequence":{"long":8720},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbe707c7-d64e-4623-b4fc-6cbcaf620e23","sequence":{"long":8721},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"867a6ab2-50ad-4d4b-b3d6-fb3a9e8e0a81","sequence":{"long":8722},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b18e0a4-9064-4757-9d1d-a5a6597126ed","sequence":{"long":8723},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c147bf7-57cb-4139-b92b-792f4c569daa","sequence":{"long":8724},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f0d9a2c-c21e-4734-8ff7-eaeec45290eb","sequence":{"long":8725},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"073f6b7b-9026-42f9-a8ef-0528868bbe6c","sequence":{"long":8726},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9866bea-445d-441c-8646-cbf9f773142b","sequence":{"long":8727},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975044355157,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbdeaa05-5a42-4aa3-b2bb-f5e9499f8e73","sequence":{"long":8728},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2457d8f6-2e82-403d-a9da-9fc26bbfe120","sequence":{"long":8729},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdbd957a-ba94-46dd-b9bf-f72e4c4d0e5e","sequence":{"long":8730},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3bebf21-2fe7-46d1-aa36-47cf6f8d0041","sequence":{"long":8731},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db375229-105b-464a-b78a-7e87340fa6c2","sequence":{"long":8732},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8872559-b74b-4344-9809-293ea2641238","sequence":{"long":8733},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b7ae034-b3ca-4966-8d06-9931f4acf1eb","sequence":{"long":8734},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0e2f44b-be73-4104-83a7-319cd3ce4fa4","sequence":{"long":8735},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e80303d-b22e-48c6-bfa6-1bda454c43aa","sequence":{"long":8736},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b14600b4-ae38-4a50-8f7c-36b132ebf633","sequence":{"long":8737},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975053912224,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3dba948e-186c-4e04-9338-130952f5874b","sequence":{"long":8738},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582975573954964,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":374757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4024ef3-9b54-40a7-8834-c289105c1a17","sequence":{"long":8739},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a09f07-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"268107a5-ebdd-4856-8dd3-356adabe3e63","sequence":{"long":8740},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b06cf4e-accb-4a1c-9bfb-b88d00420511","sequence":{"long":8741},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9eb3e54d-f179-4733-b5dd-3b0739f57f93","sequence":{"long":8742},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5821d1e8-824d-4432-ad8e-000ab0e00a0f","sequence":{"long":8743},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c3aa7f1-5574-45c9-bb19-eadf4bc56350","sequence":{"long":8744},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06c3ccc6-d719-46e7-99eb-1d51991066cc","sequence":{"long":8745},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52c5972b-cba3-43d5-85a8-f04fdbced8e5","sequence":{"long":8746},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1372","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1372","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fd1b1c5-2942-407d-bde4-2799a8c476f3","sequence":{"long":8747},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e824062e-303f-40e8-925c-8dac14127afa","sequence":{"long":8748},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ffa1f988-cf0d-7f5b-8dcf-910bcb7fb68e"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./datagram_client"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582976058898304,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./datagram_client a","ppid":"1369","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d825992-1b4a-4769-8b0d-5576daff7587","sequence":{"long":8749},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d0150a5-3607-4650-a053-abf27000ffff","sequence":{"long":8750},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b66fa18c-0f8f-4c2c-9e39-aea8a369adbc","sequence":{"long":8751},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e824296-3269-4bd8-8ddc-7243441f460a","sequence":{"long":8752},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b51f0d6c-bf72-4813-b8fe-986c95db559d","sequence":{"long":8753},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"930b44c8-0daa-4801-8003-ff0abf027335","sequence":{"long":8754},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"127dba1e-73e6-429a-b0f4-28b54a3398d6","sequence":{"long":8755},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02102c88-890c-4ea4-9fd1-f11c58a0314c","sequence":{"long":8756},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0e1fc50-f5c1-4c30-8db2-c07c0d35af30","sequence":{"long":8757},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2665fdac-b96e-4991-8b2a-8c11765fd078","sequence":{"long":8758},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b25c858-c5d3-413d-bca2-f35cfce5cf91","sequence":{"long":8759},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fa99ec5-ac17-4022-bf28-cba827544023","sequence":{"long":8760},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d735ada-ccce-4d3c-9ef1-caa617585315","sequence":{"long":8761},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43ea170b-a55e-4156-9a9a-e161f2d74741","sequence":{"long":8762},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fe25760-247d-48af-9a3c-0f2ba1652f3b","sequence":{"long":8763},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11a5654c-cce8-48fa-a3d4-5869e79a07e8","sequence":{"long":8764},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54d5f711-87a7-4cb6-802b-9a26c9bb6b37","sequence":{"long":8765},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42933e1f-0fcc-493f-b011-2828844eb344","sequence":{"long":8766},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff779895-b3f5-4949-b6fb-44c8cb556278","sequence":{"long":8767},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f45b3571-b0a4-437f-92c3-67358e0f8092","sequence":{"long":8768},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033af1f1-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0de6884-4131-4366-983f-2f485045be1e","sequence":{"long":8769},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033af5b2-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ddd8d42-05e2-4cd8-8d8a-f5d498e5a939","sequence":{"long":8770},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"460bde97-7d89-5592-9592-31130a6cceab","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"::1"},"localPort":{"int":61810},"remoteAddress":{"string":"::1"},"remotePort":{"int":4950},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efc52eae-c327-4d9a-a5c2-3466c01643c0","sequence":{"long":8771},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100144},"subject":null,"predicateObject":{"UUID":"033b00cc-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"460bde97-7d89-5592-9592-31130a6cceab"},"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"6ea19015-e77d-5f61-9af4-17d595fb9014","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"::1"},"localPort":{"int":4950},"remoteAddress":{"string":"::1"},"remotePort":{"int":61810},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4f63257-fe26-4b72-b7d6-51a243d0abf6","sequence":{"long":8772},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100015},"subject":null,"predicateObject":{"UUID":"02a14724-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"6ea19015-e77d-5f61-9af4-17d595fb9014"},"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"229a1f1c-4ceb-4967-bcf2-8d961f6c02a3","sequence":{"long":8773},"type":"EVENT_SENDTO","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b00cc-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"ret_msgid":"506","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","address":"::1","port":"4950","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22e2eac8-dd9e-4e1b-b64d-bc718556cf63","sequence":{"long":8774},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b00cc-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"5e2e4aff-4dca-55ff-9f81-aaabb5d1ec87","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"127.0.0.1"},"localPort":{"int":29583},"remoteAddress":{"string":"127.0.0.1"},"remotePort":{"int":4950},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ea22b93-5f0f-4aff-bd35-6d19080132bb","sequence":{"long":8775},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100144},"subject":null,"predicateObject":{"UUID":"033b06bf-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"5e2e4aff-4dca-55ff-9f81-aaabb5d1ec87"},"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f357aa57-155a-455e-9ccf-94ae0157f395","sequence":{"long":8776},"type":"EVENT_SENDTO","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b06bf-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"ret_msgid":"507","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","address":"127.0.0.1","port":"4950","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a4476b3-14a5-4d57-9588-c50c2d77b0ca","sequence":{"long":8777},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b06bf-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8e9112d-ce8e-411a-8262-5e6dae5076a7","sequence":{"long":8778},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033a9f30-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd5b65c9-812e-4007-945c-a6f68b39d40e","sequence":{"long":8779},"type":"EVENT_RECVFROM","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a14724-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"ret_msgid":"506","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1369","address":"::1","port":"61810","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a3d38a3-89bc-4f1a-8fe5-fc9f2a8808ff","sequence":{"long":8780},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":31},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62b4279a-850e-47b4-a2eb-7155c996b539","sequence":{"long":8781},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976058898304,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c49ca6ae-c8e8-437a-afd2-b4336a325189","sequence":{"long":8782},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a14724-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b73c8a2-0850-48de-a95e-4b0da4998016","sequence":{"long":8783},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"02a0949b-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1369","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aaaa4640-4075-4b92-9430-9b6e706cd78c","sequence":{"long":8784},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b80f840c-011e-4fe7-867c-ea5dc760dcbd","sequence":{"long":8785},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"029fc20e-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"971743b6-8282-4e3c-ba22-66e694545bcc","sequence":{"long":8786},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":961},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fae7d41c-c690-4827-8e24-b4d845a01f24","sequence":{"long":8787},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":974},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5aa494d-0336-46da-beb5-71025fe76be5","sequence":{"long":8788},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1373","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1373","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72726b67-1fe9-49ac-962d-d71d8ee10eab","sequence":{"long":8789},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"820c9fbd-e93f-4a1d-b8d9-eac8576cc8a0","sequence":{"long":8790},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582976063965319,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"117fefda-4416-4bfa-ac9e-82c2855a6abd","sequence":{"long":8791},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ccac86a-b2fb-428e-b59e-99c4455eb1cb","sequence":{"long":8792},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b32a96ff-a09b-44a6-9d79-d70202ca1d82","sequence":{"long":8793},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3083494-14b4-4c31-a7a6-53381481dff4","sequence":{"long":8794},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22606d05-bff9-494d-a527-b1e2eaaebe75","sequence":{"long":8795},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3794b85e-b949-489a-9eb1-e83332790496","sequence":{"long":8796},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3adc091c-9470-41c1-b8d6-911b0a41bdd7","sequence":{"long":8797},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4aeeb98a-35ad-4f29-9796-6d1eb4fa6a46","sequence":{"long":8798},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e036a26-d678-4185-a21e-0f606fa2f1c1","sequence":{"long":8799},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46b21cc5-2a32-4682-8160-47e188e91cb1","sequence":{"long":8800},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09e1644e-bb57-4826-b28b-6dae7cbca080","sequence":{"long":8801},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d105270-d223-4e58-b09a-a4c8dc91f5ca","sequence":{"long":8802},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5d37a00-c7fe-4a85-a6c4-b8f6c58d5d23","sequence":{"long":8803},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cbf71ff-1762-4907-8213-58f05c347b40","sequence":{"long":8804},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cad61057-1147-4d81-bf2f-740796a48fc8","sequence":{"long":8805},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a09a74b0-3006-40f9-aa6a-bfd5d392400d","sequence":{"long":8806},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6b174a0-fc58-423c-ac4a-c4ad20a2fd0d","sequence":{"long":8807},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae4b2190-dc4e-44fc-9bed-b2eed3676b0b","sequence":{"long":8808},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b72408b5-4955-48b1-9910-f1bc20a60ba9","sequence":{"long":8809},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976063965319,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78738d71-e836-425d-ae13-7ae6dabd79b9","sequence":{"long":8810},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":374757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f71956a-8512-4fe2-8303-98892ac70138","sequence":{"long":8812},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72379c91-43df-4daa-a267-65bcbc546f74","sequence":{"long":8811},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"019f3eed-0554-4d90-9ea2-9e4ec88e14df","sequence":{"long":8814},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d705d11-6b5a-460c-bcd7-ffaefd3cd8ec","sequence":{"long":8813},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0eb9cc33-6670-40dc-b879-ed058a8b8277","sequence":{"long":8816},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b7f6dc6-3088-4a80-99a9-a5703efdcf36","sequence":{"long":8815},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49685bfa-af28-4402-8815-9d582a72df5e","sequence":{"long":8818},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9377430-0500-4ece-8b0f-f6130e661244","sequence":{"long":8817},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d34ae17-c4ab-4b9a-98b6-3e0a75a79ba2","sequence":{"long":8820},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19aef51b-0b77-4815-8c99-c98571bbdf78","sequence":{"long":8819},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a453089a-dfa5-4627-bf7d-60c317d7cd0e","sequence":{"long":8821},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"308557e5-0f5e-4f1c-a6a8-2a7ae38882ea","sequence":{"long":8822},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f9ed3b0-418f-4e18-aa4b-34c3cc5129cc","sequence":{"long":8823},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdc6d1f0-b2ef-4ff3-ae2e-d0c2ccce3eeb","sequence":{"long":8824},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4832},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a45cba30-d661-478b-9013-d4b76f7d63ca","sequence":{"long":8825},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4885},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3f1d4c3-9d94-421b-ac09-b4929dbe426d","sequence":{"long":8826},"type":"EVENT_WRITE","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"092e078f-8c64-47dc-9341-9b8eb2cc426c","sequence":{"long":8827},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8fba7e3-7339-44a5-9703-70c27e0a05e0","sequence":{"long":8828},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"229efa3b-f032-4a91-954c-fec084969386","sequence":{"long":8829},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4939},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4e3ac50-b0e0-4cd5-88b1-cd75a5bdd084","sequence":{"long":8830},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4992},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab43d23b-7e4d-4352-90b7-c690ad82aa72","sequence":{"long":8831},"type":"EVENT_WRITE","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e7f9234-f158-42e2-bc13-d9d803422f6b","sequence":{"long":8832},"type":"EVENT_READ","threadId":{"int":100145},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976124409490,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02348773-d3aa-48f1-ac8b-84b8b048c096","sequence":{"long":8833},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582976605249234,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":384214},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1664279-c868-444a-bdf5-b24327eb0212","sequence":{"long":8834},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"033b3c9f-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4567a9d8-071c-4a87-a34d-6852f844d1ac","sequence":{"long":8835},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50f4e970-6a93-4596-8439-a72b7c3703a5","sequence":{"long":8836},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"903d816c-8e0f-402e-9793-5f59ae160ff2","sequence":{"long":8837},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1374","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1374","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3148471-5c26-45f1-a3c2-35045ecfe74b","sequence":{"long":8838},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a98f97e7-5c4e-4653-8583-27a06af2c18b","sequence":{"long":8839},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"f5cca548-4198-c65d-9841-9bcbadc62d45"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./direct_pipe"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582977078937143,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./direct_pipe a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"844f1efc-3c5b-42bf-85f6-d9ee1420e83b","sequence":{"long":8840},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc4eead1-8e58-4fe7-8902-970a56997656","sequence":{"long":8841},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45351d64-49a7-4ad0-8d35-eb004de671b3","sequence":{"long":8842},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f68cc315-4b30-41d0-8e81-e03c15bcb47b","sequence":{"long":8843},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1136590b-12a7-4966-a75e-f76cf02be644","sequence":{"long":8844},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"643873a6-1051-46f4-80df-bdd558f0771e","sequence":{"long":8845},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0bfb7ae-0242-480c-acf3-b909e058f6f9","sequence":{"long":8846},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d30f8a0-4fa9-464e-8140-5765dc0ed8df","sequence":{"long":8847},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12740b90-d4a3-41d0-bf21-eca8c346dd55","sequence":{"long":8848},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c5a0c05-f635-415e-a2e3-3ed7d619f5bc","sequence":{"long":8849},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65ad5908-7e38-480f-b40f-a325850dca15","sequence":{"long":8850},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09e1a52d-1de2-4e70-97d1-ff3590dd66ff","sequence":{"long":8851},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0516b586-bde4-4dcb-aae1-d349f3cffa12","sequence":{"long":8852},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f13a8314-faf5-4aa0-9602-fbaa016743f2","sequence":{"long":8853},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88283691-73de-4553-9126-1346a932b021","sequence":{"long":8854},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0558f7fe-fd1d-4f7a-8a1d-168a0914f2f8","sequence":{"long":8855},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fc7332c-5715-4e09-911c-81b2098ee390","sequence":{"long":8856},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e8e3442-3088-40d4-bf64-b58eeaff40b2","sequence":{"long":8857},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fe8bc97-263b-4380-b214-a0bd7107005f","sequence":{"long":8858},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"2271a522-92b8-5944-8a03-11aa3f1291c1","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"03d65a83-467b-11e9-aeb7-080027fc76ba"},"uuid2":{"UUID":"03d65a83-467b-11e9-aeb8-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9747c9e1-7e74-4dd3-bc34-74a900623fea","sequence":{"long":8859},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"2271a522-92b8-5944-8a03-11aa3f1291c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65b12f5e-340c-49f4-8614-a15aa9921e79","sequence":{"long":8860},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1375","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1375","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4b94ee1-c83d-4f9a-a681-77e23fcba394","sequence":{"long":8861},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1374","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9c45d8d-65de-45db-967b-a14413231092","sequence":{"long":8862},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"03d65a83-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1374","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00ebefd9-21bc-48fb-bfc6-9dd5b713b398","sequence":{"long":8863},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1374","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6965a70-7c08-45f3-906f-147b18720258","sequence":{"long":8864},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"03d65d8b-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1374","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55cceadf-6ade-4dba-b0c2-c788dabc6ef5","sequence":{"long":8865},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"03d65a83-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09ba28e2-63a8-4bb0-9c2d-97ee822bff19","sequence":{"long":8866},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7eac63ea-c5a3-4e38-a45a-8152d41de026","sequence":{"long":8867},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1096119f-dac8-4213-9265-c160c638b996","sequence":{"long":8868},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"03d617c8-467b-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c420fe86-99eb-49ac-9a7f-02b3b27f49ef","sequence":{"long":8869},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":910},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f343ebb-80ab-4d34-914e-1613c1b72d39","sequence":{"long":8870},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1025},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa60efbf-4dd1-4b47-be87-039a695f5f60","sequence":{"long":8871},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1376","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1376","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29297797-1822-419d-98b7-c7246a797ac0","sequence":{"long":8872},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ec07829-c2ed-407a-92c6-5e0085497148","sequence":{"long":8873},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582977078937143,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7230637c-2bf6-4bf9-80b1-b0d50bbf61de","sequence":{"long":8874},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"938d7177-6850-4a7f-9dd9-fe2f8d45afa8","sequence":{"long":8875},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed0eadbc-76f7-46f8-b8b0-8d7e3ed67b26","sequence":{"long":8876},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7499438c-1834-4505-88f8-316040208012","sequence":{"long":8877},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acb32407-da10-4b9d-99b7-6593ce577a38","sequence":{"long":8878},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977078937143,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3d87f95-06e3-4780-8e56-0c4b40d5da98","sequence":{"long":8879},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582977614240236,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":389294},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c027c5cd-0c33-4ac8-bffd-88545590cf06","sequence":{"long":8880},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"03d69d45-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa0c3a63-d787-4217-a16f-5d79f0d5f611","sequence":{"long":8881},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4812777f-7c94-4b47-a64d-9aac24994e8d","sequence":{"long":8882},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":25},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9caace9-24ea-4296-a20f-18d5fad02b3b","sequence":{"long":8883},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1377","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1377","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c96b0ef-683f-43a9-ace2-fe09bbac976a","sequence":{"long":8884},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fcc7ea1-df89-4a12-98d5-03513ac0a304","sequence":{"long":8885},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582978093935240,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/named.sh a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf704035-19e3-4edf-a153-435694cbebb9","sequence":{"long":8886},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c77e8a0-2cee-4444-bbfb-22f96458cc73","sequence":{"long":8887},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f92b9e7-a5a8-4422-8ae8-38be51fd50c2","sequence":{"long":8888},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"889e3dbf-5d34-4c54-9258-c30a84970014","sequence":{"long":8889},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64adbcbf-e526-4c18-ac02-5dfae448485c","sequence":{"long":8890},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01a2569f-53ef-4207-9646-a6cd339800e4","sequence":{"long":8891},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b132b74-2fd5-4c40-b2a0-4c5c2f1791b2","sequence":{"long":8892},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfcbc06e-7386-48e8-bbc8-af39cc6163af","sequence":{"long":8893},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb600c82-3263-4252-b05d-a445dbb39c8c","sequence":{"long":8894},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01f7f901-4fa0-4b50-9cc1-444397d8e4fe","sequence":{"long":8895},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23301cc1-dbac-40e1-842f-07978738b7ec","sequence":{"long":8896},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a4789d8-5c7b-478c-9289-c02e5c173924","sequence":{"long":8897},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b700b53c-6704-4586-adc7-0d634507abf9","sequence":{"long":8898},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e474be6-1eeb-4f0f-9d2b-38a9a6038e19","sequence":{"long":8899},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2be8bbd9-732d-499b-9337-474a13065827","sequence":{"long":8900},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b81afdb-edb0-4d62-8f8b-a117aa743fa4","sequence":{"long":8901},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b17146e-b19c-4172-a2e0-c72efaf33c33","sequence":{"long":8902},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9692dd42-ffa3-46c7-a62f-6531a7419251","sequence":{"long":8903},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad847b48-43e9-4e1e-851c-d5c1f908e362","sequence":{"long":8904},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70b71774-e415-43b4-9f33-4e405536ecb1","sequence":{"long":8905},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582978093935240,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/named.sh a","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa0de8db-1151-4ca2-8ebd-7ca5d9b073fd","sequence":{"long":8906},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3570bf1-c10a-43ce-8911-b1d949adac8e","sequence":{"long":8907},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"052cae6f-9ccf-4f35-9893-139e293cdc78","sequence":{"long":8908},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8203e73-7c8a-414c-9887-bc7580f9e2ac","sequence":{"long":8909},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5553f36f-5513-4030-a008-bbda6f66077b","sequence":{"long":8910},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1f54bda-c6b4-4514-8575-0581e3701fc2","sequence":{"long":8911},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a721e1f5-5998-466a-a558-97cf30805f39","sequence":{"long":8912},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6c115e6-8d3b-48fc-9add-2fdd4f510b3b","sequence":{"long":8913},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afcc5ec1-da9e-4737-beba-20645e9b5031","sequence":{"long":8914},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bc726b5-90c5-443e-a3c4-5de801807867","sequence":{"long":8915},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90f2aef9-37c0-4e27-bd49-c9847ac4709f","sequence":{"long":8916},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bd325ed-0c8e-4ae4-a6de-29cd30d99da1","sequence":{"long":8917},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7f96f66-2b2e-40b7-b7ec-b73862917f37","sequence":{"long":8918},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad8c79c2-f770-4aea-ac80-a0098148963f","sequence":{"long":8919},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d33430d-2421-4da0-abe6-60d2d4582ffb","sequence":{"long":8920},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b056266a-a346-4271-8bf5-039098c44eae","sequence":{"long":8921},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6009739c-f8f2-4f8d-bf31-f00aafd6648a","sequence":{"long":8922},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2a411d6-1302-462d-90c3-178ba3f6fbe2","sequence":{"long":8923},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93321044-7f45-420c-997b-ca7902d4af2b","sequence":{"long":8924},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ceaf0249-0451-4c0b-bfae-e1a2206474a4","sequence":{"long":8925},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"845c4ab3-cc8b-47bf-b1a7-b55b572a9b55","sequence":{"long":8926},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45810b10-1162-4364-8ba0-42d3579eb954","sequence":{"long":8927},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f4214a1-b023-4546-a4c8-bf934323a456","sequence":{"long":8928},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ef97e4f-12df-4cf7-a3e6-7b4c34b6f939","sequence":{"long":8929},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f2bcff9-1574-49ec-88c4-7c2f81da16c8","sequence":{"long":8930},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"095ac064-0e8e-437f-99be-7dadee564add","sequence":{"long":8931},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6207fd1f-eea9-47de-af5f-b65777abbf76","sequence":{"long":8932},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe8d5d02-906b-448b-9b99-68d692cdfe5c","sequence":{"long":8933},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9acd4694-32ba-40e7-bfd7-5fd5ed82f8b2","sequence":{"long":8934},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6ff5827-49a0-4d77-b59c-47fe815bd8ba","sequence":{"long":8935},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2da0423-843f-4b09-b6e7-b41d3887678d","sequence":{"long":8936},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92badfa2-e9da-47e1-96d7-014a21f12fb4","sequence":{"long":8937},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0283693-49db-40d9-9080-29004dd58a2c","sequence":{"long":8938},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"996873a5-e7ea-43bb-a6f3-ac1b1a82748b","sequence":{"long":8939},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"456b2e6e-b498-4f3b-a0d8-a62a7a56c93a","sequence":{"long":8940},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d32d2d7-045c-48ce-8e34-eab34a5a4345","sequence":{"long":8941},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2595de8a-bde5-4499-bc3a-f8e268a582d3","sequence":{"long":8942},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e656552c-72a9-4bf6-a9d1-3d94905408aa","sequence":{"long":8943},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4b7a6a5-ceb4-4829-b359-1d56f5144192","sequence":{"long":8944},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"313ed1f6-8f97-4f8b-90ae-dc3dfc4b544d","sequence":{"long":8945},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40088472-a1ba-486e-ada5-d3327b1f8bb7","sequence":{"long":8946},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7f2ae1e-d62e-4e6a-8368-8348f03a358e","sequence":{"long":8947},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"197c562c-ff36-4a97-a84e-c46b5f8060fb","sequence":{"long":8948},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e57581d0-1c0c-4ce1-a4a4-24c9e2d7043a","sequence":{"long":8949},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7664b5d9-8de1-4e4f-abef-2c1110eb7eb8","sequence":{"long":8950},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dcd85ec-beb9-41de-9c9b-e39e76fae2fd","sequence":{"long":8951},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f34b6bd-b7f7-4b26-b251-c0eeca12865c","sequence":{"long":8952},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2afc5f2-d701-4b96-a668-aafaeceec445","sequence":{"long":8953},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6aef3356-51c0-49e1-95c4-76a3e3ab92e6","sequence":{"long":8954},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdc25551-3b64-4b46-9dbe-e924e3678ea1","sequence":{"long":8955},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc3c858c-e5fa-4055-94bc-443056e72959","sequence":{"long":8956},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9664a4d6-ddd7-4718-bb7c-dad2e2818b22","sequence":{"long":8957},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12cfad66-df2c-42a1-b109-56ced61ccc24","sequence":{"long":8958},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf599430-3e16-4185-8d9e-0a51fa9cc683","sequence":{"long":8959},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72652256-7383-4191-8e0b-8667d5e27a47","sequence":{"long":8960},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26ce7300-39be-407d-9cab-e4d028a770ae","sequence":{"long":8961},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7240f8f-45ef-4f17-8439-6daed55b8192","sequence":{"long":8962},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63df780c-829b-44f1-a209-9d16591818fe","sequence":{"long":8963},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39e04bb1-6c55-403e-8003-0d76e62c8396","sequence":{"long":8964},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8c48b7d-0488-492e-ac53-ec178943abb3","sequence":{"long":8965},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1301e93f-e918-4b16-9bdc-2d563dc58e6e","sequence":{"long":8966},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10ddb07c-0528-4545-8e50-1ff403d38186","sequence":{"long":8967},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48378591-ed16-49be-92ce-1c31c0dff56c","sequence":{"long":8968},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":286},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"135f7660-aa52-45c1-b58b-4e4573f4ddd6","sequence":{"long":8969},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":253},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"014d43fe-c359-4b38-9256-d32f585aed12","sequence":{"long":8970},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1378","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1378","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db1a2e5b-ad51-44f7-a4cb-2d640529a1ab","sequence":{"long":8971},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9246c92-2687-4627-bfe1-37fef39919f6","sequence":{"long":8972},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":271},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e522827-fbd5-4e1a-af58-b022ced1276a","sequence":{"long":8973},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1379","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1379","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78f8c7a9-cf10-4639-9ec5-dceaa38f5427","sequence":{"long":8974},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55cc972c-00c8-4081-8be8-08652bb9ace3","sequence":{"long":8975},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa3d8a1a-4d26-4c8e-9b08-bd9d6280baa1","sequence":{"long":8976},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978093935240,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f1803de-9cc1-4354-a010-efc07768627e","sequence":{"long":8977},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23212b73-88a5-46a8-b444-3eb72880cab0","sequence":{"long":8978},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582978104376001,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29f7ed5b-4c83-48e2-aeaa-838567870181","sequence":{"long":8979},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78245280-833f-428d-8ddb-41e57fdca809","sequence":{"long":8980},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"b0bc4f68-c591-a656-91c5-dcf6b6a6dfa5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./named_writer"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582978104376001,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./named_writer a","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f931ed7-599f-4812-b662-2c3a7aa20140","sequence":{"long":8981},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68d1980e-7522-4ae8-9619-911d03e19727","sequence":{"long":8982},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26b762d6-7802-4724-8a3a-8a248d4b3e6e","sequence":{"long":8983},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b29420e6-44db-4902-bb62-993c562158f9","sequence":{"long":8984},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2e4250a-1a9d-4a3f-ad05-d84345999bb1","sequence":{"long":8985},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3bffaf3-7532-43b6-9204-16ea2014bcba","sequence":{"long":8986},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ac1ccce-922d-4896-a189-c9d2dde882d9","sequence":{"long":8987},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f3eca3a-d28f-4367-8ef6-b0ac7aae5d23","sequence":{"long":8988},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"166365d3-3bca-47a0-9c21-5ba8946f023c","sequence":{"long":8989},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7514b83e-6dff-4c98-b15a-7a7dd09f2b0b","sequence":{"long":8990},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5b08666-e9d4-4aa5-a0d4-a522d069e781","sequence":{"long":8991},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db69d92d-28b8-4c34-b622-cc0878c41f6c","sequence":{"long":8992},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"358d0dee-57eb-414f-9e47-d0519a232030","sequence":{"long":8993},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a84b8c4-2a8e-4d96-b171-02da18670b71","sequence":{"long":8994},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f677af3-d84b-4f29-87a0-e5765d064a16","sequence":{"long":8995},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abcd29c0-8031-4ca2-b01f-445eb120ea32","sequence":{"long":8996},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0236c76d-2b1b-4680-a74d-9bd87279f02a","sequence":{"long":8997},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"896710f7-633c-479e-98e3-a55f6cc1b4f4","sequence":{"long":8998},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db206d6b-1fc6-4b82-9bfc-9a6e0972a70d","sequence":{"long":8999},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25704bb2-d60a-49e8-b66b-f8f4c6f475d0","sequence":{"long":9000},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23aee866-dfe0-4c5d-8daf-2ebf95d6f612","sequence":{"long":9001},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":27},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46615db8-7f23-41f9-aaf9-1c68c24dadc1","sequence":{"long":9002},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c431eb52-528f-4701-bc76-8afdd2fa7afd","sequence":{"long":9003},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c1efac6-42a5-43fc-8abf-bdfde5c1d811","sequence":{"long":9004},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea0d52a3-1ca8-4910-9155-e025bd37143d","sequence":{"long":9005},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d6f06c3-3283-4d53-be91-09d008c305ec","sequence":{"long":9006},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e39600c-0165-4e13-b677-83644120e64b","sequence":{"long":9007},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e4bcdb3-a04a-4f4d-b416-5ea8044b5970","sequence":{"long":9008},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87dc8a80-2839-4516-8d68-f633481ae5f7","sequence":{"long":9009},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dcc7282-627d-4838-bddd-2a856b99192a","sequence":{"long":9010},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a075507-9740-4e35-8004-10d6a33719c2","sequence":{"long":9011},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2ac69dc-0892-48b6-ae53-59c007775b80","sequence":{"long":9012},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ec8f6f0-97e7-4d43-9de9-3c5e9110a663","sequence":{"long":9013},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b660e97-4ac7-404d-a7a0-a9e050ea6d0f","sequence":{"long":9014},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978104376001,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20c5afb3-b014-4e08-889d-a601275b9aa6","sequence":{"long":9015},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582978653885691,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":403239},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c1f7c5c-3b94-449b-a442-c774b312a1dc","sequence":{"long":9016},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"04724c46-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99bc304e-636f-4262-b9ec-a1f63b7252c1","sequence":{"long":9017},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99795927-bf61-49d1-8b00-09aa042ff893","sequence":{"long":9018},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3aaeb68-c9b5-4290-a4aa-84b805394ff0","sequence":{"long":9019},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c15483b-f615-49df-963b-77c2fb67a55c","sequence":{"long":9020},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e95a2a8-aed6-4646-948b-3a08da3c565b","sequence":{"long":9021},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4153fdf-6357-40a5-9c40-13937ccef0c6","sequence":{"long":9022},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e3fa315-69a2-4701-9e6b-ea20a14369b4","sequence":{"long":9023},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1380","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1380","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9819aa6b-4c53-4101-a2c9-c9c2cbd914fa","sequence":{"long":9024},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6bdd8c3-43ff-4c71-bd9f-66d625124550","sequence":{"long":9025},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"d13b936e-e1a2-e756-a2e1-63e636e7e7c5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./named_reader"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582979123878126,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./named_reader","ppid":"1377","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a53a6d61-c066-4d17-9936-60f5f63bdffe","sequence":{"long":9026},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04f90ff4-a41c-41af-9ae2-f0a9ac7a19df","sequence":{"long":9027},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a421bb16-0038-41b8-96fe-b80c3cb32058","sequence":{"long":9028},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80593a57-a20b-4950-bb71-9533db5b8c19","sequence":{"long":9029},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"039fcc29-5bd9-4423-8f90-01f7a5814a2e","sequence":{"long":9030},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a8be41f-170c-4b85-a245-585f62bf92eb","sequence":{"long":9031},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"755d86ce-13fc-4750-8a50-c4cd7d2b3833","sequence":{"long":9032},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afdab238-d934-4a0f-9f72-83e06c6d407b","sequence":{"long":9033},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aaec8799-255f-4466-90a4-aa9987dab0bf","sequence":{"long":9034},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef198453-0c45-4fc8-9685-9e4bbd6353ac","sequence":{"long":9035},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5279de1-1d79-4514-ab61-e7dc192a800e","sequence":{"long":9036},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6a76b0c-3359-412f-8280-319d311d5984","sequence":{"long":9037},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42079f66-4fba-4676-b89d-9448935fc142","sequence":{"long":9038},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec707aa6-06ec-4445-8258-3c58cf2d467c","sequence":{"long":9039},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6d8271f-fd7e-4252-b299-44e914d41b4e","sequence":{"long":9040},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6791dd7b-1698-408f-afc0-c474154a8aae","sequence":{"long":9041},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6137f4a7-e003-4e55-b0d4-18a78f1c7967","sequence":{"long":9042},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f899bd78-5e53-4c3f-b54d-773cb34fd34f","sequence":{"long":9043},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae0b0a84-5aaf-44b0-9649-757a558964af","sequence":{"long":9044},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1ed09a4-fc55-420d-8b07-bd83c203d789","sequence":{"long":9045},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":27},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"285824eb-eac8-4d94-8abb-aa41d4d2ba4a","sequence":{"long":9046},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"eafcf6b5-df06-685f-86df-21037f68996a"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4712e5cc-f724-4025-b5b2-47bcd3fbdb4d","sequence":{"long":9047},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"eafcf6b5-df06-685f-86df-21037f68996a"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aab9368d-8369-4162-adf5-b2c7e8e3cf07","sequence":{"long":9048},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"04732720-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3cd2eb0-5d7c-4ac3-8a24-1571634b7fb9","sequence":{"long":9049},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":18},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1205c973-ae9d-4bdf-9fce-eaefca015283","sequence":{"long":9050},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"eafcf6b5-df06-685f-86df-21037f68996a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb5c147a-5ac3-4804-beb5-37ad3b783db3","sequence":{"long":9051},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"04724181-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f616f34a-0be8-4613-922f-ec0ebe334b70","sequence":{"long":9052},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04732720-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"472ef7a9-a111-4cc2-afa6-99e45a20ccdf","sequence":{"long":9053},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04732720-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f619297-2025-432d-bed4-c16f564f1c8f","sequence":{"long":9054},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac4bab4e-3f00-44c2-828a-8d73ce6048e3","sequence":{"long":9055},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"050e3275-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1377","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d95b969d-9e56-4505-b8b7-d954def3f5a3","sequence":{"long":9056},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0e8a8ed-95ed-4787-b4f0-3a95cc891d47","sequence":{"long":9057},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObject":{"UUID":"047114a8-467b-11e9-aeb8-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de565f34-2fd6-4b0f-a069-5658506c3c05","sequence":{"long":9058},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":859},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf44ecb3-5d9a-4df6-a422-c9be5399c48c","sequence":{"long":9059},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1041},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9cddf4d-74e5-494f-8d78-63061384dd35","sequence":{"long":9060},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"050ef741-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979123878126,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1381","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1381","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cd620bb-1293-4634-9e18-5824e85c9834","sequence":{"long":9061},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582979673936273,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":408126},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f279f8d-466d-40c6-a31d-fca1c8db3235","sequence":{"long":9062},"type":"EVENT_OPEN","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":{"string":"/etc/cron.d"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980015553697,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00e808"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21245f91-b124-4993-8fa3-3debff390178","sequence":{"long":9063},"type":"EVENT_CLOSE","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980015553697,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b21af14-e41a-4aa7-91ed-7b1ad5f74fc2","sequence":{"long":9064},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":408126},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6942abc1-4053-481e-bd9f-75ed43f3263c","sequence":{"long":9066},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1300e90-329c-4b0f-aad6-3bfd74bfefa7","sequence":{"long":9065},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1c5a8cc-1918-4b7a-87f6-d14538e9886c","sequence":{"long":9068},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0855b29-012a-4f66-a1fe-3cb9eb3a848d","sequence":{"long":9067},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7c682b0-9080-4ca9-a1c7-025b8b880bc1","sequence":{"long":9070},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1047299f-5d6f-433c-8a6d-ce7b9ba9c17b","sequence":{"long":9069},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e56687f9-9bd2-453b-b565-382834a452d5","sequence":{"long":9072},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"749a0461-eae2-4d4b-a668-202747650e3b","sequence":{"long":9071},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12eef622-efb5-4a0d-9be5-7bf44c32c245","sequence":{"long":9074},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbfed013-5fbb-4fcd-a0f7-4ae00170d29e","sequence":{"long":9073},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f48016b1-e9e4-436b-8e67-f9e5fe930945","sequence":{"long":9075},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d85a6af-cfb9-4380-9328-b959988a7798","sequence":{"long":9076},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c49f9f0-2175-4757-8204-a531bc6255b7","sequence":{"long":9077},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccf82210-618c-4505-8aa5-ddfdb95caaf1","sequence":{"long":9078},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4918},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"108e351c-1a71-44ae-9806-4734400b18ef","sequence":{"long":9079},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4971},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e45b345-8bb3-4119-a509-2a506d4bf721","sequence":{"long":9080},"type":"EVENT_WRITE","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8cc95db-0e75-4653-8564-ff7215a1990a","sequence":{"long":9081},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cb6ad85-e7bc-4b83-a861-f7eede60e98f","sequence":{"long":9082},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e269e4f-70f0-4388-af09-f3e7f83a2446","sequence":{"long":9083},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4005},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e11effd-f8b7-4375-a87a-36350adbd6ae","sequence":{"long":9084},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4058},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0787c25-dc80-4c50-80e9-e9b2b16a2af6","sequence":{"long":9085},"type":"EVENT_WRITE","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6a7796d-c686-4dd2-93c3-480dd063057c","sequence":{"long":9086},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0594dd9-7aa0-4d04-aefa-e6ddf27adfce","sequence":{"long":9087},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dbf1451-6915-43ed-b88b-8fa068a03d28","sequence":{"long":9088},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5010},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a08bd9a-8a00-41dc-8d1c-f2aaab666c04","sequence":{"long":9089},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5063},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"054c6068-f811-46e9-b90e-0086bb12bfcc","sequence":{"long":9090},"type":"EVENT_WRITE","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d6df604-7d06-4f54-b547-955ce79ad146","sequence":{"long":9091},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a67575cf-e5ab-4c88-9ebe-9d5031b9fe2b","sequence":{"long":9092},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"982837a6-e3c5-4300-8015-e3fb2ac43e96","sequence":{"long":9093},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4883},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7672b41c-d2cd-4e5a-9d58-41d19e1270d5","sequence":{"long":9094},"type":"EVENT_WRITE","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f79ddcd-44eb-411b-9c25-da737d8653d7","sequence":{"long":9095},"type":"EVENT_READ","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4194ce34-98fc-4ea5-a827-5467889fd9a3","sequence":{"long":9096},"type":"EVENT_SENDTO","threadId":{"int":100147},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"520","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"195d0f70-4862-4c8c-b7d9-6f89e2ae91d9","sequence":{"long":9097},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"520","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40d5ee21-1559-4b77-abab-d4483bcba756","sequence":{"long":9098},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980124882723,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4eed32e-6fd0-42ad-a298-2a945ab2f303","sequence":{"long":9099},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"050ef741-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"050ef741-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"924e89d8-30d7-4c7a-b090-2987bf8099f5","sequence":{"long":9100},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84f5a6e4-8010-46fa-82db-67d9c4b48cfe","sequence":{"long":9101},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"039d3f6b-2970-4b13-9d84-889c42bdc4e5","sequence":{"long":9102},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1382","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1382","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"452ec028-8358-47c6-b7b1-387e522a4d86","sequence":{"long":9103},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10e81cd5-a42a-471f-b87e-6cdffca3d504","sequence":{"long":9104},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"7eec5b1a-792a-5556-aa79-9b231655b451"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./shm_exfil"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582980135150042,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./shm_exfil ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72edaeb0-2553-4de6-8a51-807ee4dcc784","sequence":{"long":9105},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7afb07d4-64bb-4727-94a4-679d385f3f93","sequence":{"long":9106},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4d89eed-5646-4c98-b7e6-ccecfe8baba9","sequence":{"long":9107},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0328eb7-0a53-472d-ad4d-76a1e44eb6e5","sequence":{"long":9108},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4dc532d-0c04-4b50-8aca-0e1cfe9901ca","sequence":{"long":9109},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3b8fa0f-19c9-40a3-98cc-0559acad2493","sequence":{"long":9110},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"386a3a9d-521f-452a-844d-9a0ec6e591c8","sequence":{"long":9111},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980135150042,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb03fe1d-20f3-4fba-9117-d0a56d2a0165","sequence":{"long":9112},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582980684087639,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":413024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf154eb8-c5c7-447f-903b-3c39f3801149","sequence":{"long":9113},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62abb653-551a-43fc-a952-eee26abf7bee","sequence":{"long":9114},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"05a8917f-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3a3d9dc-b72a-4469-9b14-c21169cce1cc","sequence":{"long":9115},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":843},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd8dbb3d-9e9c-42f2-9752-ffbb69dc5280","sequence":{"long":9116},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1092},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cba05000-e65d-4ab6-a054-f71a3bcab439","sequence":{"long":9117},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1384","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1384","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e18a2114-6d1a-4747-9835-7fe6e0d2f887","sequence":{"long":9118},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16b94671-c0e3-42ee-b531-9bdc8a8b1587","sequence":{"long":9119},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582981158328683,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d2c3188-0cc4-48d2-8b2c-8eb67fe456c3","sequence":{"long":9120},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ab5c479-c169-48ac-b6d0-496866ff2bee","sequence":{"long":9121},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38da19be-4d37-4b2d-9f0f-84be7fbd56a6","sequence":{"long":9122},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7c04e63-b51c-4cf9-bf5c-b49240c3e601","sequence":{"long":9123},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52ff5bbb-88fc-4f71-927e-705be7cd40e1","sequence":{"long":9124},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d45e38aa-1a75-4121-a821-54085699157a","sequence":{"long":9125},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e27c2dea-c3f0-4762-ab4a-bdd97fee2dd2","sequence":{"long":9126},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"371a37ec-a8c9-4ca9-bdbc-e281e60f4b49","sequence":{"long":9127},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02f7c02b-0f83-4e96-b0d5-6f87ecce90ab","sequence":{"long":9128},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12983d7a-4ac2-47b4-b561-b0818f4931d8","sequence":{"long":9129},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f10d9876-017c-43db-89bb-e8f71035ce6b","sequence":{"long":9130},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"035e1ea3-1e85-42ae-bd38-fd418dd87c06","sequence":{"long":9131},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bac4cce2-97e6-4658-9528-3a05c3078203","sequence":{"long":9132},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39ae4fd6-9dc5-4b0d-ad0f-af70bef2f13a","sequence":{"long":9133},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c92887de-2846-4b52-b3e3-e81a54f29b24","sequence":{"long":9134},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db045304-93ba-404e-be7e-19a6119c138a","sequence":{"long":9135},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55d90c75-f90b-4bbd-b315-1615198a522c","sequence":{"long":9136},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ffd940b-b322-4bea-bddb-b357a5b4c0fc","sequence":{"long":9137},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65d15a30-9a13-4d4f-8562-7ced882c966f","sequence":{"long":9138},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981158328683,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9fa6799-afc3-46c4-ab34-1e6b303a8d19","sequence":{"long":9139},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582981694131361,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":415975},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53e55614-74c7-410f-8e6b-20c3aea932fe","sequence":{"long":9140},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":415975},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95606f26-07d5-4ffd-bdc9-711b6d147603","sequence":{"long":9142},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcdee225-2bbe-41ab-b82f-dfd912b90822","sequence":{"long":9141},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce91b1f4-a084-45da-a79d-409a1b6b99d0","sequence":{"long":9144},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe5c7e67-5653-4d66-9ad5-b9525605ea8b","sequence":{"long":9143},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"193c9743-c6fa-4e6c-bea6-999c0da7393f","sequence":{"long":9146},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebafb7ec-96f5-4644-8fbd-4ea17df4034e","sequence":{"long":9145},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba5b2cad-fe30-4619-bb2f-b317610b75b1","sequence":{"long":9147},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07954ee0-3059-41f0-81df-1fba4553cfbd","sequence":{"long":9148},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cec29a06-b790-4dd4-aeb6-d32752b4278f","sequence":{"long":9149},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a57e2b0-553c-4d4c-ba2c-e172da8b5c3f","sequence":{"long":9150},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4894},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6156c132-a6b4-482b-a2b1-15987166898d","sequence":{"long":9151},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4947},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34f5ad63-c1aa-44eb-a76e-f094ff72e20a","sequence":{"long":9152},"type":"EVENT_WRITE","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b702adca-3af8-46c7-9f3b-05c4e8070494","sequence":{"long":9153},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47a7a571-f978-4fc6-b268-edbfc1619cb4","sequence":{"long":9154},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8061a0e-6177-4991-ae5c-f226c5f5fa10","sequence":{"long":9155},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2947},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c471860f-95f5-404e-adbf-80b46532c836","sequence":{"long":9156},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3000},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53bf92b9-0d5e-4cd8-a3da-04e73a73230a","sequence":{"long":9157},"type":"EVENT_WRITE","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d8abcc4-d7bc-4b75-abe6-398fa03779c1","sequence":{"long":9158},"type":"EVENT_READ","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb0235ee-c657-4933-a123-692abea094a6","sequence":{"long":9159},"type":"EVENT_SENDTO","threadId":{"int":100148},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"521","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0d2f042-50de-498c-8e0a-f3dde1e9f4a3","sequence":{"long":9160},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"521","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d1251fe-4145-4141-8470-75123a097873","sequence":{"long":9161},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba6ed478-165e-42b4-a0c8-22dfdc81d9a9","sequence":{"long":9162},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49210b0f-ec82-419e-b5d9-cfc367fd8bce","sequence":{"long":9163},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982124887439,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfbb0574-469f-41a4-a0b8-f691ddd82b5d","sequence":{"long":9164},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982134345512,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f01c239-e685-42e8-90e1-99ca86523f3e","sequence":{"long":9165},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982134345512,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4118e42-244c-4d5e-b20f-90024222603a","sequence":{"long":9166},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"0644af0a-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9dbc2a1-b35d-4b3b-8f68-249226f335bf","sequence":{"long":9167},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10fee660-5440-44f8-84db-1bccfdd3dc35","sequence":{"long":9168},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e57634a-cd04-4477-aae8-7014894b531d","sequence":{"long":9169},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1385","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1385","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f620aebb-0068-4b7c-b7a7-6c8fe53e122a","sequence":{"long":9170},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56e386fd-e357-4725-a481-d80111db4f91","sequence":{"long":9171},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582982174660438,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/signal.sh a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b36a727c-ee7a-4f0e-ad33-693b2d7c564a","sequence":{"long":9172},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8f235fb-b842-4da1-b2e3-224cac3aee8c","sequence":{"long":9173},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26d26c9b-d18f-44b3-a0e5-7c2fa3d3ca84","sequence":{"long":9174},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"152d4aa4-7341-45e5-afc8-5cae467d90c6","sequence":{"long":9175},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5e31270-0faa-4184-8a4f-f4d4928058bc","sequence":{"long":9176},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1136ebd0-a285-4f7a-8b65-a5e20ebce06f","sequence":{"long":9177},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4083f7c8-cd5d-4015-9673-63dfa46ab7b0","sequence":{"long":9178},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3074ee6c-9953-4bdf-a409-165f130144a1","sequence":{"long":9179},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4038cf76-66c9-412b-b578-8b7d54c11fb2","sequence":{"long":9180},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a57ea272-a7a1-461b-a5ed-56d6ffcf0782","sequence":{"long":9181},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b97c9a3-4262-400f-ab6f-d4a7250ce8ed","sequence":{"long":9182},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f93ea87b-c6f0-4640-9e5c-c610cc4a4bc5","sequence":{"long":9183},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7f7baf4-9c99-4d00-9122-783aeba1ffc8","sequence":{"long":9184},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"377fd52a-59c8-4bbf-afde-98068afe9200","sequence":{"long":9185},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8971b58f-71dc-46f7-bf91-8160130218ea","sequence":{"long":9186},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7086f2e8-4d41-49fc-9d7b-1c001b32fd00","sequence":{"long":9187},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6efff36d-a63e-45e0-add8-c9d2244d92ec","sequence":{"long":9188},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69601b8b-9502-4359-997a-10539bc3d81c","sequence":{"long":9189},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffed1af8-f1b9-4e1b-99c7-7860c9518be6","sequence":{"long":9190},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc41883f-25fd-4824-ab4c-d19573d54e5f","sequence":{"long":9191},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582982174660438,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/signal.sh a","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ddef279-8dbe-4bd0-91d2-4b24f8602571","sequence":{"long":9192},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eda409ae-40df-464e-91f0-b30b458e12dd","sequence":{"long":9193},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3494a106-5b26-4586-b76e-60be9ab42aa1","sequence":{"long":9194},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8ac2e1b-0c96-4760-92b2-4a17c5eb8ed7","sequence":{"long":9195},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6605bcb-d600-43a7-9d38-773f066054c7","sequence":{"long":9196},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faea96f5-5a30-44c2-b038-d1e7665e51dd","sequence":{"long":9197},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6da5bcc4-9441-4c6b-b91a-6ddded5ef64a","sequence":{"long":9198},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b18bcc41-6b6d-42a7-96d8-bda3632f442d","sequence":{"long":9199},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d0babe5-6f70-44d2-808f-9a87510d6a7c","sequence":{"long":9200},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8dfd521d-a278-450f-8eda-5cfd468afa9f","sequence":{"long":9201},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb6720f7-7f56-424d-9ad0-9dc2c17d5413","sequence":{"long":9202},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f492e513-adb3-4c7c-bfcf-5e1212769e27","sequence":{"long":9203},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ed8bb81-00c6-4817-ac55-a3d576b50ded","sequence":{"long":9204},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84814b44-0515-4e1a-85a4-8ab538f15adc","sequence":{"long":9205},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e64dbc8-6607-4971-bbc0-c88000685224","sequence":{"long":9206},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a162af49-58f1-4ecc-9f1a-61b9cb97edcf","sequence":{"long":9207},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02781f01-6ff5-4a7e-ac77-f7964bf08d10","sequence":{"long":9208},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c482e1e-5af2-4784-a642-a647b524b712","sequence":{"long":9209},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1043ac7a-78db-46e2-b9ec-4652ad43c7a8","sequence":{"long":9210},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac1e5c46-d807-4b91-af2f-36b27aef7490","sequence":{"long":9211},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9959c7ba-1147-4bc9-9451-479bd928119c","sequence":{"long":9212},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"407cf4a9-86cf-45cd-9c6c-0a6e5b26ce67","sequence":{"long":9213},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1621278-137d-43da-8b10-bb03c2e3214c","sequence":{"long":9214},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f15eaf81-2e3d-472c-89ee-bac5ad195e60","sequence":{"long":9215},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbe6a347-3983-4508-ad36-a9fd28ea6873","sequence":{"long":9216},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec10b2d5-c381-433d-b3e5-b294b3d1a6f1","sequence":{"long":9217},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9104edf6-6cb7-4d4c-9bda-87c3e46f3646","sequence":{"long":9218},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3d93bc0-12dd-4f21-90c2-126815bd72d5","sequence":{"long":9219},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c400430d-84d4-45fe-b1b7-8feeaf4d751b","sequence":{"long":9220},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01ee8a90-4f65-4044-96e2-50d98f652d59","sequence":{"long":9221},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80949e5c-94e9-4330-aaeb-2c712721c8c6","sequence":{"long":9222},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fefa14de-8b42-476f-b46d-e6095debeac9","sequence":{"long":9223},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41824e29-9d83-4c31-b013-c36bcdcf28be","sequence":{"long":9224},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f69358a-4c57-4e26-8cdf-d160bb22517a","sequence":{"long":9225},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fac7b06-a5f1-4862-800f-57e8efc4756f","sequence":{"long":9226},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57d62ecb-91ae-4456-8e08-f85f2612f562","sequence":{"long":9227},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbcc4490-0f7c-4d13-b9d5-4c0e390cffc2","sequence":{"long":9228},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3533a147-f25b-4728-8c97-e4021d1c3af8","sequence":{"long":9229},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72602805-a0d4-4261-aca6-d8e81288c517","sequence":{"long":9230},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcf12aa0-fbd3-4735-b467-521819a0afb1","sequence":{"long":9231},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5da581af-b446-4ddc-b467-c833f2633b0d","sequence":{"long":9232},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"441d5c5f-51bf-4c83-af88-efde49063b4d","sequence":{"long":9233},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14a3779f-b535-4c99-a784-ac6da8b1c4fc","sequence":{"long":9234},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4613d3e1-3a72-41e3-aae0-91f94d771483","sequence":{"long":9235},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"844025c1-fd21-4228-a3ec-ecaaa448b42d","sequence":{"long":9236},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"952be53d-11a2-4703-9f91-85c247476f4b","sequence":{"long":9237},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a37ea96-9ff3-4716-866e-81e13f47e331","sequence":{"long":9238},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"621a6591-0c75-421b-94d4-8fe0eeb16c5a","sequence":{"long":9239},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67a4104b-1a01-413b-b9af-ecf9503dedc5","sequence":{"long":9240},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb8b3b00-a44e-4a13-ad32-87e503e8c591","sequence":{"long":9241},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd1c3cf6-9a1e-4172-83b8-444eec86b02d","sequence":{"long":9242},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74652f44-6e64-40e2-8c66-df33ee70a768","sequence":{"long":9243},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8946cb15-040a-48f9-80a2-2829ef9aad49","sequence":{"long":9244},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fffee8aa-ead0-4162-8778-ffaa51d1ddd1","sequence":{"long":9245},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94151c68-6051-41ee-9a13-3913ac0a5441","sequence":{"long":9246},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b7d9d76-942d-48bb-93ce-3a653c3e6a96","sequence":{"long":9247},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d68fcb6a-b357-41ea-9901-6a03153ecc87","sequence":{"long":9248},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"173a4e27-6daa-48e4-9171-870207faf662","sequence":{"long":9249},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a1f255f-2ea0-4c52-b1da-dd7b8b521793","sequence":{"long":9250},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"069d23be-81c7-4d2b-9880-823d89690a5e","sequence":{"long":9251},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cac343a-c9e1-4d32-8e99-bf4087c3f14b","sequence":{"long":9252},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"939d71a9-a374-437f-9a43-2e52c4318c72","sequence":{"long":9253},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7a4d500-420c-4934-aed9-b3ca99a54e8d","sequence":{"long":9254},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":289},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3660091-5959-4e18-b874-80c4200d2dd8","sequence":{"long":9255},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":245},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b6dd48f-e800-4d4a-9a3a-2b42ef4bce17","sequence":{"long":9256},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1386","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1386","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59c7ae45-8423-4384-90f7-d1f59bc0cae4","sequence":{"long":9257},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":44},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5b2c845-77d2-4ea5-99e4-8d48b87f0cab","sequence":{"long":9258},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":263},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccf7066a-cdb1-4560-a78e-b87b361a186e","sequence":{"long":9259},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1387","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1387","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42a92efb-a8ee-40f9-8bfe-58e13c6afc60","sequence":{"long":9260},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad1e0bbc-494b-4795-9dd2-624b5fe16e82","sequence":{"long":9261},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b685cae8-da99-4c22-aac9-0611147185c5","sequence":{"long":9262},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e8dcce0-97ec-4d57-ab1a-49453e5f05a7","sequence":{"long":9263},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10ee844e-ea59-4089-a404-c0d42edaf71e","sequence":{"long":9264},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582982174660438,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c88535e-ceec-48a6-9c40-a08f6a5c202c","sequence":{"long":9265},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"428c93a7-8eac-4500-ac45-84b46e2eb7af","sequence":{"long":9266},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c84202e9-4a54-416b-955a-d9ebae8b4b78","sequence":{"long":9267},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e77640ec-d35f-4053-9e2c-fa61dcfcb9d2","sequence":{"long":9268},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4df450c8-6bed-4644-811e-93e854fc1dfc","sequence":{"long":9269},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64cb58b7-ff36-4487-b6f1-d6975f8832f8","sequence":{"long":9270},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69685ca8-ef04-4351-967e-8c84781b2efd","sequence":{"long":9271},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d16b281a-4f71-48af-aad4-2def8b0d5290","sequence":{"long":9272},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f16f385-f817-4051-a251-4b4ec02c7dce","sequence":{"long":9273},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6c0edd4-4ee4-4d59-bad1-bcd6c17b7f87","sequence":{"long":9274},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33020dac-c057-4c76-a43c-f7781cbbc7d9","sequence":{"long":9275},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcc10a78-cea7-401f-8f6b-6acb067da23c","sequence":{"long":9276},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4862b66-90ba-496f-869d-a41269b2964b","sequence":{"long":9277},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6df4833-e033-4ab9-a4dc-cffaa325f091","sequence":{"long":9278},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6539b905-96e7-4fd7-937e-b5bbb261dee4","sequence":{"long":9279},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bd04d98-79c2-4988-af22-a8e2da346bb9","sequence":{"long":9280},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1dfbb90-ba89-4e1f-aae1-97943b9b78fc","sequence":{"long":9281},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ce6de80-adf6-44dc-8487-5b718ffa74a9","sequence":{"long":9282},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982174660438,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5abb35e1-3181-4ef3-868b-ea19b620d12f","sequence":{"long":9283},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a607bee4-27a8-4db3-8b38-569983d94c06","sequence":{"long":9284},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"f7889531-95ae-715e-ae95-c4adae711987"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./signal_server"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582982183880903,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./signal_server","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3d3db18-ec2b-4242-8dcf-16f4f53177dc","sequence":{"long":9285},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"343d184a-0155-4a8d-96f7-1fa802f0a7a5","sequence":{"long":9286},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35b96858-d12d-4871-923e-f096cdf825f3","sequence":{"long":9287},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8aaf48e-a5e9-4823-aaeb-e71d13830e0c","sequence":{"long":9288},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc893b62-3b69-4645-8782-141bf7386d33","sequence":{"long":9289},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03759d10-3544-4b19-bd54-e96c8a1379b8","sequence":{"long":9290},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44ef6e4e-cfe2-4268-a5ab-ac08fa45d418","sequence":{"long":9291},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d650fee-761a-4bb3-8c8e-8077ee0a0723","sequence":{"long":9292},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":{"string":"/usr/lib/libc++.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9b6c648-1534-467e-a5b6-417d04635205","sequence":{"long":9293},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cf43127-4002-4ab6-a086-35f88e4b1ac4","sequence":{"long":9294},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"683985d1-05d8-4663-89a1-0fec6af31dbf","sequence":{"long":9295},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f901d35e-aef3-4dc3-bc67-5f9a8c6bc815","sequence":{"long":9296},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60890da4-739e-48c9-bf42-f385f8c850f2","sequence":{"long":9297},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8eca42a0-3d1e-4149-9bb1-c7b115a53aa9","sequence":{"long":9298},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f475a352-59e0-4b9b-8aeb-53db35aa0429","sequence":{"long":9299},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23caf26a-ef59-4775-9b0b-a50a1d5a9ef7","sequence":{"long":9300},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ee2afdf-a910-4f6d-8270-821a14d0a7ec","sequence":{"long":9301},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2641d476-5eb6-4ff1-b5cd-9b4fa61edd83","sequence":{"long":9302},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":{"string":"/lib/libcxxrt.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"827cb629-8c22-4007-a999-5937f1390742","sequence":{"long":9303},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5aa0cc5-3a72-4c81-a3ef-e1699fbd5530","sequence":{"long":9304},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b139736a-f512-4134-b5ec-6190cda691f4","sequence":{"long":9305},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42069de1-a38f-4cae-87f0-69233feb7405","sequence":{"long":9306},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5b720a8-8172-4f3a-9ed0-8ec80fcd0d13","sequence":{"long":9307},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffd5d0b8-f549-491f-bc9f-41da3b6b0149","sequence":{"long":9308},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ad6a584-e507-4411-b306-6acffb1705c1","sequence":{"long":9309},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7df65fe0-5b00-456a-bd57-b8d6d72a7c9f","sequence":{"long":9310},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8afcb6b8-a738-4975-a51c-58246be22f57","sequence":{"long":9311},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"684197ea-537e-49e4-843e-390aaf3312c2","sequence":{"long":9312},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":{"string":"/lib/libm.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6cd2b61-4a63-4268-a267-33e2303a35ff","sequence":{"long":9313},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab66f343-cb85-409f-b2c4-181432245a5f","sequence":{"long":9314},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fc56132-f9a3-4c0f-b6a7-a928c18b1771","sequence":{"long":9315},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d03d5c80-92b8-4348-b170-efc578e527b7","sequence":{"long":9316},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06f81dfd-c440-4534-bf43-d740d4e04aed","sequence":{"long":9317},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f8444fc-5e0b-45e2-9f5b-c359e5cebe1f","sequence":{"long":9318},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73686b6e-b847-43c7-9bd0-e2c162e66864","sequence":{"long":9319},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfaaec85-164c-4e87-ae2d-da4a3fbbad71","sequence":{"long":9320},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1a026cd-b6b4-41c8-8a32-dd724f6fa6db","sequence":{"long":9321},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1db8428-cc9a-4c66-ac07-d6ac74bffd4a","sequence":{"long":9322},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":{"string":"/lib/libgcc_s.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b7b71f0-2875-403c-8747-da1b9dae0a5d","sequence":{"long":9323},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982183880903,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67fdb9bc-7584-4604-9e31-8c47be7da601","sequence":{"long":9324},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582982744802290,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":434234},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bbe79d5-b447-4792-9179-6dca57950980","sequence":{"long":9325},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"06e09284-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32f0de17-f15b-48d2-8534-f6558fb79c33","sequence":{"long":9326},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb9f7fc3-8c7c-4906-bf60-45f2f285b18a","sequence":{"long":9327},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50ba10be-95fb-4a3b-b1c9-cb51edb4526d","sequence":{"long":9328},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ace9ee10-9265-4bc8-9201-b6c4411be55d","sequence":{"long":9329},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d678654-19d7-455b-9398-6e109d919bde","sequence":{"long":9330},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d062a4ba-21a4-445d-ac02-43ca5927792d","sequence":{"long":9331},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1524a9dc-89a2-4f09-8810-ca54ad9d1464","sequence":{"long":9332},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1388","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1388","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55f767f4-0f43-47d1-8862-9172aee63629","sequence":{"long":9333},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d53faf88-1187-462d-94bc-8edc3b1e4244","sequence":{"long":9334},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"74643ad1-37f8-b356-b837-c78bb6b345d2"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./signal_client"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582983204405852,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./signal_client a","ppid":"1385","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f4ec802-9caa-4b79-8f13-fccc6466bbb8","sequence":{"long":9335},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e945fca-51e5-4b49-9bef-4bdbe68cda4a","sequence":{"long":9336},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b66d9473-531f-4d8e-9715-77ad80d267ef","sequence":{"long":9337},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7aa5a43e-1d66-4ac0-9dab-0bf4c9277c2d","sequence":{"long":9338},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77287cb4-735c-4693-9d77-0d5b8648bbbf","sequence":{"long":9339},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92a21342-543c-45a0-9b67-62ccfcbb0060","sequence":{"long":9340},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46f0d177-d759-4583-859c-cf5b5d12957b","sequence":{"long":9341},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ca12d5b-c55d-4d83-a07a-909790a15795","sequence":{"long":9342},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":{"string":"/usr/lib/libc++.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cd1b9f7-3835-4677-98b2-90fe1751ded6","sequence":{"long":9343},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"544ed50e-2ccd-42c6-ade7-9991ad2144a7","sequence":{"long":9344},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbaf17b7-bd5a-4419-b1e6-15ae9c42ffd9","sequence":{"long":9345},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90845f22-ca4c-47c6-9cde-257baf5f810b","sequence":{"long":9346},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecd20d9c-f25c-4e35-a455-25f1959cb6bc","sequence":{"long":9347},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"752c53d6-7108-4591-9be1-cdd94921c7b9","sequence":{"long":9348},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ca76d9a-0c7d-415d-931a-855b463f50d0","sequence":{"long":9349},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7177d008-beb7-4095-8b7a-97ba36cee345","sequence":{"long":9350},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b34e8aab-953c-415c-bdaf-fafef0f0a7f2","sequence":{"long":9351},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46fcd6af-a0d5-4ce0-be54-dfff3817f4b3","sequence":{"long":9352},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":{"string":"/lib/libcxxrt.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e87861c-f95e-4fb2-beec-74f6f8ed3698","sequence":{"long":9353},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57c4b8ae-5370-4b93-8e73-d7c3c5427cd8","sequence":{"long":9354},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37e6b46f-c00d-4799-a5fb-55fad1ce39c8","sequence":{"long":9355},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b082f6e8-8fd1-4a89-b951-38a20c95f4b7","sequence":{"long":9356},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"979e075c-1e48-47d6-a529-36832b1ad17e","sequence":{"long":9357},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5875949-8f4a-436a-bbe3-e94248105171","sequence":{"long":9358},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4abf70de-bc80-4c1c-9093-ea19e7f72823","sequence":{"long":9359},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d2a5be4-56ff-4202-b53d-43d6e3fcf023","sequence":{"long":9360},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d92443f-becd-4597-9e49-144ac1d98d59","sequence":{"long":9361},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"983efe59-82f9-4d7b-b559-910d10a1b58c","sequence":{"long":9362},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":{"string":"/lib/libm.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a234f39-bd50-41b9-a13a-fe7071efb2a5","sequence":{"long":9363},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f54a858a-96cf-4252-bd56-5a24563b4ee3","sequence":{"long":9364},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d3df916-7314-448f-8e51-6885d22fc162","sequence":{"long":9365},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60d5d062-e749-446a-8dd8-c4ad1ae7344d","sequence":{"long":9366},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec71c2b8-5f20-48e5-b05d-e574eeb76cb3","sequence":{"long":9367},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fe4429b-bdc9-4933-b2df-4bc9c234fe95","sequence":{"long":9368},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28fc4eda-e966-4af4-a0d8-7497eafad5bc","sequence":{"long":9369},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a2e77d4-ab7b-4e52-9034-09f92b9cf9c6","sequence":{"long":9370},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a66f56b7-5d96-4e26-a12e-60d4bbd4b57c","sequence":{"long":9371},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"181afd80-08d3-4646-84f6-dd7bb91049c6","sequence":{"long":9372},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":{"string":"/lib/libgcc_s.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcfe7e1b-1476-4eaa-9285-058a1597145b","sequence":{"long":9373},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"969fe70c-24b1-45ed-b714-b6c8e3949ac8","sequence":{"long":9374},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fe66edd-861e-4533-9034-d8a108ba1445","sequence":{"long":9375},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3600384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae30879f-513e-4a05-9233-c89dab34c2fc","sequence":{"long":9376},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3600384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af55fafb-b82c-4f6d-882a-9b76cde570b4","sequence":{"long":9377},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3637248},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50c60aa5-fbc0-496e-9b85-71c6a460ff57","sequence":{"long":9378},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3637248},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e675dfc5-499f-4751-8cf9-a8e23f94f247","sequence":{"long":9379},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3690496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc490325-5baf-4a75-b735-757f5170f8ed","sequence":{"long":9380},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3690496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57d058a7-8f2a-41b4-8cb2-503b2417e70b","sequence":{"long":9381},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1da75f49-539e-4e5d-a655-b72926bca715","sequence":{"long":9382},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c357b973-138a-4e88-a26d-0399269bb8f6","sequence":{"long":9383},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e221366-d5a8-4cb5-bd1b-dc304e154830","sequence":{"long":9384},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5c5648f-4e94-4664-9afe-6eb19a5bada8","sequence":{"long":9385},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3702784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76c5dfa5-9e65-49a0-9ff0-1dd1e7159500","sequence":{"long":9386},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3702784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5fbc23b-d60a-45e8-ac9e-d48d7c38307c","sequence":{"long":9387},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4218880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64c9efc6-6f12-44b7-b5bb-f17063b8c301","sequence":{"long":9388},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4218880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b3eb74e-d257-4c10-8957-d28e156f46c1","sequence":{"long":9389},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5550080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd48487f-2bf3-4a30-a998-937f9a7b638c","sequence":{"long":9390},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5550080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c3ae32b-7a2a-46e7-912e-acbb566c3df2","sequence":{"long":9391},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d033638-3c87-4f8d-abfc-25b45926297e","sequence":{"long":9392},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7c2b521-81a2-4843-a1c6-f8ea108a7766","sequence":{"long":9393},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02acd5df-727e-4e92-8a1c-4914d312d5b1","sequence":{"long":9394},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"561d8c9a-cc63-40bf-a8db-4e65a5e0c05c","sequence":{"long":9395},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fcaee1f-dd9c-41d4-8967-84fd05ee6223","sequence":{"long":9396},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c06a4a7c-c94d-47d8-9f29-de9a62cecf68","sequence":{"long":9397},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43c72185-c0eb-4c6d-8a1e-d38793289295","sequence":{"long":9398},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83fc34e4-ccdc-4620-8cb5-f512455d044a","sequence":{"long":9399},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e4dda1e-da54-4ef9-8da6-149a246f1e3e","sequence":{"long":9400},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48b2e166-6522-4dc7-8959-bc6d2bbc5b09","sequence":{"long":9401},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a84c7619-53e1-4db5-bd37-48d9c935c9f0","sequence":{"long":9402},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1848ca4c-da6b-45f6-a96e-df03541a57c7","sequence":{"long":9403},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0342dcbb-2b89-455f-a1a9-053b6695bab0","sequence":{"long":9404},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1818f84b-0ee5-4e69-aa61-57f4f0fec4f2","sequence":{"long":9405},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60b826ef-c514-4838-9cd9-e6a3127d8e07","sequence":{"long":9406},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"077cbe80-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21813584-99c0-43f2-b224-1c4871615c96","sequence":{"long":9407},"type":"EVENT_UNLINK","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"14d38b49-9f5f-7855-9f9f-80594578129e"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_unlink"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e271aa4-c2af-44de-970b-6d2685b48aab","sequence":{"long":9408},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c31fd9ad-b388-48b9-807b-b76e00095c11","sequence":{"long":9409},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"06e087e7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1385","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44900745-316b-4083-b3a5-74ac171574e7","sequence":{"long":9410},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b18def09-5236-434f-be94-bb68659c2c0f","sequence":{"long":9411},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"06dfb5b9-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4f244de-1a54-42f9-a174-29b41bae5ffb","sequence":{"long":9412},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":792},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2088430b-6d2e-4a66-aa2f-a53e1783a0c5","sequence":{"long":9413},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1143},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c000f0b8-d848-4dd2-8b26-a20dd4f538f0","sequence":{"long":9414},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"077dfec4-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1389","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1389","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f74d0ec-ef8d-429b-b183-41a700694253","sequence":{"long":9415},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"077dfec4-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983204405852,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"788e5db5-c22f-42ff-ad4e-83b3accd955c","sequence":{"long":9416},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582983773878145,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":443044},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b32b0962-aeb5-4836-8dbe-b75eff70f04d","sequence":{"long":9417},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":443044},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8df88139-8631-40b6-ba97-99de3f117644","sequence":{"long":9419},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecd2a7f9-5ca0-4810-8516-44feb8a0c5ba","sequence":{"long":9418},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d0618c2-31bf-492d-afad-646e9f280950","sequence":{"long":9421},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb802779-0148-4955-a01a-72bce564dfb0","sequence":{"long":9420},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ee84412-89d0-48f1-8e24-c43e71651148","sequence":{"long":9423},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cd3d83c-1650-4f1f-8dd1-879326af2a48","sequence":{"long":9422},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9f45bb5-3bf0-47ee-86dc-d3d35825837d","sequence":{"long":9425},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7953892c-f15c-454a-aeb2-281a0312f2ce","sequence":{"long":9424},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b8d782d-d650-457f-9232-c2d95c1f5a27","sequence":{"long":9427},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"083e8cd5-9d1d-4c00-a2d1-41cc4f389043","sequence":{"long":9426},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26323fc3-fd41-4fd7-b336-8f1ef0a6136a","sequence":{"long":9429},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71fb5c69-dec6-48cb-bb79-793b0067fcca","sequence":{"long":9428},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b848ba34-cad0-474f-b1ab-e0dd79971404","sequence":{"long":9431},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76699d35-d1a7-4401-9f2c-bfe2f4430800","sequence":{"long":9430},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e026af5f-c594-4caf-bc6a-ae98b30f9122","sequence":{"long":9432},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56bdfb72-fb13-4532-85e1-f568b38d439b","sequence":{"long":9433},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79f74972-ea79-4e25-96b7-c4d2e1d2728b","sequence":{"long":9434},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a92c11b3-5049-48b0-99d7-ec0f362684fa","sequence":{"long":9435},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4726},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d9b2ea1-86c5-4d31-9a04-2de18620ad91","sequence":{"long":9436},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4779},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b052e0a2-745b-4c8b-910a-1b4523d99d45","sequence":{"long":9437},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"853a73c4-12bc-4964-95ee-55f0577c2e7b","sequence":{"long":9438},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7154b745-21df-4932-98e4-69972f24bb65","sequence":{"long":9439},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"247151a6-27b3-45ed-a25d-4ceba45a8377","sequence":{"long":9440},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4336},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5658c21b-eb79-4c9c-8c55-57c0286079a6","sequence":{"long":9441},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4389},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"044095a4-e662-43ca-8334-556a18679a43","sequence":{"long":9442},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f791ee3-15ad-4146-b4fd-7b642a706eba","sequence":{"long":9443},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27a039c2-78aa-4295-9022-50a2fa0c9567","sequence":{"long":9444},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea1e3ec4-61eb-428a-9fef-bdc1f52e60b5","sequence":{"long":9445},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4695},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f76bc4a5-4576-4b85-81d0-a9349e65852f","sequence":{"long":9446},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4748},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38a45cf7-70f6-4780-9715-857fa7a3b9e0","sequence":{"long":9447},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e85d8c5-ad4f-4084-8fcb-6511e1d46f49","sequence":{"long":9448},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65f62833-7a6d-48d6-ac87-4b960ebd0965","sequence":{"long":9449},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a488c52-54e3-48f7-8df0-e481662aa84c","sequence":{"long":9450},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4486},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5125343c-a8f1-4bc1-aad8-2dcb49e263a7","sequence":{"long":9451},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"656ff955-1295-4f7f-8ccd-05e08dfdf468","sequence":{"long":9452},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f00f4200-8e07-441a-9cd6-5b097b7ba15d","sequence":{"long":9453},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5841b546-d946-4084-a4e4-3635960087ca","sequence":{"long":9454},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4550},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67af596a-29fc-4a54-9ac8-b30ac0ce1f9b","sequence":{"long":9455},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e867bb54-2239-4480-bcf8-edcad9f554a1","sequence":{"long":9456},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7abe666-9a9e-4a2b-95b8-f1f2c23b86ec","sequence":{"long":9457},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09142502-e403-427a-bef5-3de8d31e580f","sequence":{"long":9458},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4252},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49df86e5-5f1a-4e23-9dbd-b3b79c8694a9","sequence":{"long":9459},"type":"EVENT_WRITE","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a94bd57-1a1a-42db-b0f1-b25326e0c64a","sequence":{"long":9460},"type":"EVENT_READ","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1ac594b-fcdd-42eb-af5d-cf5088841f01","sequence":{"long":9461},"type":"EVENT_SENDTO","threadId":{"int":100149},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"526","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"defbc83c-1f96-4b1a-af1d-e741a3cf48ff","sequence":{"long":9462},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"526","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab7d80f1-859c-4964-bece-8d682914ceac","sequence":{"long":9463},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984123985942,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"670d6064-27ec-4f30-a010-7bbb7114e48e","sequence":{"long":9464},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"777231ee-0ab1-4e71-9f54-02cd56623109","sequence":{"long":9465},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cd5825c-100d-4f2d-ad36-94022a4c1139","sequence":{"long":9466},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4539},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35001de8-2926-4fe0-9309-899c03ee1193","sequence":{"long":9467},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1705d77c-2379-4946-bfae-8b98cafd85ba","sequence":{"long":9468},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be51cf12-0b74-4f7e-829b-f6590c288bec","sequence":{"long":9469},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984133945856,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4603},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71c2de2b-ce11-4536-9f61-38e13c24cf86","sequence":{"long":9470},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984143894132,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0300e9ce-8fcc-4ccf-8c8b-ba2e576c4efe","sequence":{"long":9471},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984143894132,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ca19332-f868-4de4-a476-c40287c4ed20","sequence":{"long":9472},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984143894132,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4305},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b55c5be0-b9cb-4b61-8574-682590406061","sequence":{"long":9473},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984154114648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56f691c5-60c2-4c3d-aa74-402410c742f7","sequence":{"long":9474},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984154114648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b27d779d-a9a7-475f-8dd8-4487843364e6","sequence":{"long":9475},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984154114648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"714e92cc-2da6-4024-962b-28b27671899a","sequence":{"long":9476},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984154114648,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9d39529-08a9-4a9f-825a-daf37243d450","sequence":{"long":9477},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984167461125,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99faf199-8412-4f88-a571-b98132f7b4aa","sequence":{"long":9478},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984167461125,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dac09c50-a6c0-479c-b55d-4b5136f22303","sequence":{"long":9479},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"077dfec4-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"077dfec4-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e30f677-1b6c-40f3-9023-431c2563b751","sequence":{"long":9480},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c78ec44-50a0-49ba-9152-a815d0201597","sequence":{"long":9481},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3ac6b18-7312-43fb-8a69-056059a2bc91","sequence":{"long":9482},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1390","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1390","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d3f2295-8dfd-46f0-b886-2d91686216fe","sequence":{"long":9483},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c05dd197-0a16-4c68-a31f-af767ff7593e","sequence":{"long":9484},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582984214699854,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/stream.sh a","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77ebcbb4-3953-4b88-ab0b-1efa2f29cbd0","sequence":{"long":9485},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d933ec5-1363-45ac-81fa-57bb4f49e904","sequence":{"long":9486},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abbb50c8-1bf1-4dea-9cec-a2e1e20e5333","sequence":{"long":9487},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0b31483-d48b-46b8-ad62-f3a2a4fed66e","sequence":{"long":9488},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ae282de-0cbb-42cf-b2d9-82f3391c5b1d","sequence":{"long":9489},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c65a2b1-56bc-40f4-b498-8010cdbdaae1","sequence":{"long":9490},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e88833e-e407-4b6b-a4ba-953c0f5d6a25","sequence":{"long":9491},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"965f5550-7c0f-4e1f-a4eb-d8b83cf9afaf","sequence":{"long":9492},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d411c3e6-c291-495b-98dd-f96d118dd321","sequence":{"long":9493},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c64ca2e-cd8f-4055-abf3-e796bfdb572d","sequence":{"long":9494},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4977d43-95aa-4dcd-9661-bdf9c4aa0a7c","sequence":{"long":9495},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae08a21b-0075-431a-811d-12eb0357f5d9","sequence":{"long":9496},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a70a49c3-ea7a-4888-a26b-0cc6dc7d9b05","sequence":{"long":9497},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bb386cc-55b1-4951-968f-4e66796b743f","sequence":{"long":9498},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bdf50b6-d68b-43c8-b424-9fb95b436909","sequence":{"long":9499},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29fe4cf0-3a7e-4005-a34c-a15fbf1bc11f","sequence":{"long":9500},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec64b136-ac4d-4c0f-ac47-4de758f3e3bc","sequence":{"long":9501},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1ffbe8e-35af-4201-b14a-114acdf910e8","sequence":{"long":9502},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"249be0bc-4e77-4fc6-8f75-0ee8de6c3c38","sequence":{"long":9503},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01931993-daca-4920-96b1-b5e744769a1d","sequence":{"long":9504},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582984214699854,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/stream.sh a","ppid":"1337","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2766a83-5bdf-428a-9274-48a3c0affe0f","sequence":{"long":9505},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61bed835-d8b9-4bd7-80ee-430cb4492692","sequence":{"long":9506},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb67d062-0bad-4e8f-8a67-90c951cfa8f9","sequence":{"long":9507},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"032cfa78-26bb-4688-a490-ed83c8b0b0bc","sequence":{"long":9508},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf1c25fc-9392-4e09-a436-c242e81903e0","sequence":{"long":9509},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5878537-3896-4c4d-9dc6-946a2cbd2672","sequence":{"long":9510},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97852dfe-ace4-4d56-aa56-70621bf13fe7","sequence":{"long":9511},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0dbeaae-41be-45a0-a911-6b2e383b19d1","sequence":{"long":9512},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a700d66-c4fd-4233-b567-2a0e2f9f805c","sequence":{"long":9513},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a13dcbce-1ace-42bc-ae2f-8cda5c0a4509","sequence":{"long":9514},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"affe06e6-112e-4fdc-b21a-4ac5445fc22d","sequence":{"long":9515},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a74b7f22-45ed-4104-9825-cfd9682c3f36","sequence":{"long":9516},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02e74f33-ce53-4745-9fc2-d2902d63f7c0","sequence":{"long":9517},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fa3096c-ad87-4d41-b1d4-89f1b3d4f1a3","sequence":{"long":9518},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bad3b4b5-ec59-4270-a4b1-418aca60d727","sequence":{"long":9519},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd30bf60-5691-4e9d-9378-91a27b887396","sequence":{"long":9520},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe306087-84d7-4e09-a3b2-988cee024b4e","sequence":{"long":9521},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca59dcbe-b477-4396-bc9d-bea89c8e41bc","sequence":{"long":9522},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efec186b-39c4-4620-97da-0a7b55a0a4b4","sequence":{"long":9523},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f1001d7-babf-4023-b585-a276c722449d","sequence":{"long":9524},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2773cdea-0906-460c-9b1e-a7ee696813b9","sequence":{"long":9525},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebe9ee4a-b38c-4a31-ad1f-21665ce1bb77","sequence":{"long":9526},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba75c060-d57a-44d4-bfa4-56a948df8912","sequence":{"long":9527},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b4f0090-a2a7-4a0b-88d3-f279084fc21c","sequence":{"long":9528},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"386d70d9-0a99-40c9-9cae-d647a0aab1ab","sequence":{"long":9529},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ee8ad2d-7dc6-4549-9ea2-ec25ed425b76","sequence":{"long":9530},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b23e7f8-2ef8-4bdf-b398-a53fbc08ff08","sequence":{"long":9531},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4d3820f-30f9-48d6-ac41-4245a83be267","sequence":{"long":9532},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa3a5831-6efd-45b8-a0f9-a6fd1b4a1bc0","sequence":{"long":9533},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ad23d9c-dff7-4f13-90e3-f0a652237a24","sequence":{"long":9534},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0d15a9e-c253-486f-aac1-0d6d784f3959","sequence":{"long":9535},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1bb9586-14f0-48e8-a6d2-b86998f1a1b9","sequence":{"long":9536},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3faa1f17-cc29-4b41-8bce-3ddcb30b2351","sequence":{"long":9537},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4275dff0-af2b-4c01-a26b-9507d68b7315","sequence":{"long":9538},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bb16230-faf1-4286-9e40-ce204f4c67c9","sequence":{"long":9539},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58f8e8b3-0452-4379-9d60-996ed4d84165","sequence":{"long":9540},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f911bd3b-5b0b-46c6-909a-5961b9eb2fe9","sequence":{"long":9541},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"981bde92-0124-47ef-9a99-3d2c652ef6f0","sequence":{"long":9542},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7710d2e0-8fec-452a-b48b-4d64125949d1","sequence":{"long":9543},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e35ba9d9-62cd-4e02-a5e2-6b53a46dbe07","sequence":{"long":9544},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3593c4cc-9968-4f73-9664-4401fc2a5baa","sequence":{"long":9545},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ee652d4-ee66-4dbc-aec2-bed4752b9eed","sequence":{"long":9546},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c135a42-0370-4526-bba4-65ef90c39c97","sequence":{"long":9547},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"249b872c-41bb-4550-9809-aec6b242fb35","sequence":{"long":9548},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf38276b-a6cb-4186-9d71-93b6cd329b40","sequence":{"long":9549},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c87176ff-7a9d-4422-b15c-94b1fc855878","sequence":{"long":9550},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cac2c036-5987-4f93-824e-e8ace2f2df89","sequence":{"long":9551},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc23afd0-2960-47c9-ab1e-ec6004820999","sequence":{"long":9552},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dffab0d9-0a8d-4aac-8908-0ae22be3ac80","sequence":{"long":9553},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"929a3080-e5f6-4146-9c06-4f4939d5bba6","sequence":{"long":9554},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37c34ce2-0efe-496f-8722-cbe23fdb9968","sequence":{"long":9555},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52525d07-5312-443e-9e25-e1a8d96daf5a","sequence":{"long":9556},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be4c0abe-4285-47d1-adcf-636bc24a870f","sequence":{"long":9557},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c302e9d-0910-44a0-b2e7-a89dee2ad722","sequence":{"long":9558},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1601a9e-a0a2-4f2d-8f7a-e2aaf02cc956","sequence":{"long":9559},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3be4211c-130a-4d66-b209-ac6b1d42ec9d","sequence":{"long":9560},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f2187ae-cbaa-4d7d-b609-883d3192fd92","sequence":{"long":9561},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a86ce81e-350f-4480-9a81-47be13ce3022","sequence":{"long":9562},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61fbe60b-83f2-44a1-8b61-54bb41263c25","sequence":{"long":9563},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27fca5d6-45c6-407d-a98a-d0286d623b19","sequence":{"long":9564},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"456ffb51-b173-4765-8773-a5a4b6f42803","sequence":{"long":9565},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"191aace0-f45d-41b3-b827-8e3cfce07390","sequence":{"long":9566},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec8a1759-af4d-4496-b183-fda95f3459cf","sequence":{"long":9567},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":290},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4960f427-3776-49c4-a25b-97511d2a5f36","sequence":{"long":9568},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":256},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea41dc95-5ead-42f2-8d5c-b0602f3c61d3","sequence":{"long":9569},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1391","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1391","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6d6a32f-4c71-4409-a1b5-f9689796c1f2","sequence":{"long":9570},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":34},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7ad147c-9989-4cec-aa01-6bbc0bce93fa","sequence":{"long":9571},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":274},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba5b80e5-b892-404b-8237-62f0d1895a1c","sequence":{"long":9572},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1392","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1392","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7aed4d7d-ec75-4b49-bfb6-93735145017e","sequence":{"long":9573},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb638263-7c4c-4fee-8aa4-84cdde21491f","sequence":{"long":9574},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"767cf553-b1ff-48cc-a5ab-05bdbb8707d4","sequence":{"long":9575},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d46640a-7e85-4f65-8592-ec6d5db9fc57","sequence":{"long":9576},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd722836-7014-40ad-aac9-545d42a8fb3e","sequence":{"long":9577},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582984214699854,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"372abdef-b8fe-499c-a9a2-b882cecadd27","sequence":{"long":9578},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e333097-5da1-4e54-b675-83b24c856830","sequence":{"long":9579},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"eeac9f12-b277-945c-b7b2-6dc48c944589"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./stream_server"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582984214699854,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./stream_server a","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67e6752f-db48-44e4-8bc1-3470a2af8c05","sequence":{"long":9580},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"738cd082-a7e5-42b5-a2e0-e95c9ed5c273","sequence":{"long":9581},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"185f557e-4635-4f45-9f5a-81d0288ce2ad","sequence":{"long":9582},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de701c2d-2aff-40e9-b147-79a2f70f0216","sequence":{"long":9583},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"572b0568-b42d-4fc6-ad6e-905b5c22dcca","sequence":{"long":9584},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16db4ba0-5906-4f3b-af85-58f03c7d65ac","sequence":{"long":9585},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7534156b-b2c7-4944-a588-1ef9419fb957","sequence":{"long":9586},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03936108-7d29-4210-8937-eb52d82e3e39","sequence":{"long":9587},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e00f7b21-4ebf-4829-bde8-59a6c669eeb1","sequence":{"long":9588},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e19f7c9-49b6-4813-9b14-1be5c89dfb95","sequence":{"long":9589},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39c03978-5452-4a03-8b2c-81fa099ba640","sequence":{"long":9590},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44f074c1-c9be-459d-a0b6-11745135a7f3","sequence":{"long":9591},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21ae9985-a2be-49b5-8db8-6b40f9406b15","sequence":{"long":9592},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c51a7ca-2e26-4e5d-845b-1d9a5a7c2865","sequence":{"long":9593},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2460ff46-59c6-4d8d-9b70-a70470a6dfc8","sequence":{"long":9594},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd29490e-8983-4c0c-9b56-84e2f87492ed","sequence":{"long":9595},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f44f9f6b-de1e-4e53-ac34-b27e178a52c1","sequence":{"long":9596},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e83a7c5b-76a8-4b99-bb7f-7788222509d4","sequence":{"long":9597},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cbf325a-1ad3-4304-bdb8-ad7a95d5cbfb","sequence":{"long":9598},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984214699854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0979793-0ed4-43ec-aafe-c8fdb508035a","sequence":{"long":9599},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984223939650,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"412af4ea-e4fa-4796-b0b8-2000b760dc33","sequence":{"long":9600},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"0818480c-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984223939650,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1665371-23b9-427f-b846-cb0789cb6126","sequence":{"long":9601},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08184bd5-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984223939650,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34eb8a7d-da8e-4207-acc9-2483c170afe8","sequence":{"long":9602},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582984818638204,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":460817},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b081ce4b-dd75-46d0-94ed-234d4d9e704e","sequence":{"long":9603},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"0817e89b-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1390","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b65584f8-cd50-4d1b-bbf5-4fb3cd5d561a","sequence":{"long":9604},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5666845-3897-4ca5-8da0-cada5280e29b","sequence":{"long":9605},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc8f62bf-9f2d-4ec2-a52c-7965f49b30f6","sequence":{"long":9606},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e64c468d-8ea4-4b1a-a3c5-d003e1a14b3f","sequence":{"long":9607},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b81a0a6-3d46-45dd-9121-cb03d30b9f4c","sequence":{"long":9608},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94ad0275-e456-41f6-9763-fd6f35475ecb","sequence":{"long":9609},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d534be6-74b7-4bf0-9fd8-83170b040e62","sequence":{"long":9610},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"081702f0-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1393","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1393","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9aa5071e-6551-42ca-b702-40d32eef0473","sequence":{"long":9611},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d35319c8-044a-4742-9281-35ddaa6c6a8f","sequence":{"long":9612},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"acf88428-0c9e-7555-9e0c-dc6fa5750416"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./stream_client"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582985234024146,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./stream_client","ppid":"1390","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d3535b5-c7e9-4105-91b4-a31a8f9f6dfc","sequence":{"long":9613},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9db24c2-254f-4a26-a086-6ef3d22e2030","sequence":{"long":9614},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1681aff-9d18-4213-a49b-426e868b67b3","sequence":{"long":9615},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c0378ec-ce18-45a2-8e24-11f835a4429b","sequence":{"long":9616},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bf64681-4120-44e5-b6b9-6c5122658bf5","sequence":{"long":9617},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19b31c83-595c-4e24-a7b1-79186a2dc9d0","sequence":{"long":9618},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d2f164e-64c5-4851-82d6-4c07ef6affba","sequence":{"long":9619},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07894107-3d6c-473d-929f-f4d4d9806f20","sequence":{"long":9620},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75de0f16-520c-418f-bacc-2a43a43e1db0","sequence":{"long":9621},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"741aae08-d9b4-4c5a-b1c1-7df75a883fea","sequence":{"long":9622},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b386bee9-1b92-4052-be5b-9639b018095e","sequence":{"long":9623},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9876e66f-4b8f-4428-984b-68b2dbd94abd","sequence":{"long":9624},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b251f20e-f9bc-4310-9384-1f0640b04eed","sequence":{"long":9625},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb2f0fe4-225f-46ea-b286-a4ac844e82e6","sequence":{"long":9626},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3a26815-f375-4472-9c35-3180b3a5a071","sequence":{"long":9627},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2c4577a-7873-4a25-95bb-235bf549dd20","sequence":{"long":9628},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eccb61c9-87a6-4ceb-8913-b8bef65e84d3","sequence":{"long":9629},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe52d024-5c08-4e14-b65a-e0efe323487f","sequence":{"long":9630},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bd429f9-34c7-4438-a6d6-e22557e49a81","sequence":{"long":9631},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5913f64-560f-4471-b0c3-c1a5bf2f61cd","sequence":{"long":9632},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b3030d-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d4985b7-d3b2-401a-a22e-46312f7477f4","sequence":{"long":9633},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b30734-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"03b64bc0-c996-5971-890f-b409fd60f1bc","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"0.0.0.1"},"localPort":{"int":10508},"remoteAddress":{"string":"0.0.0.1"},"remotePort":{"int":3490},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f530e420-ae2c-4d98-aea9-142996dc1896","sequence":{"long":9634},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100015},"subject":null,"predicateObject":{"UUID":"08b30ad7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"03b64bc0-c996-5971-890f-b409fd60f1bc"},"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"031df84a-788c-53f7-9605-ea199c28e698","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"0.0.0.1"},"localPort":{"int":3490},"remoteAddress":{"string":"0.0.0.1"},"remotePort":{"int":10508},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77589ccf-b456-4378-9782-330758ec86a8","sequence":{"long":9635},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100015},"subject":null,"predicateObject":{"UUID":"08184f2f-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"031df84a-788c-53f7-9605-ea199c28e698"},"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"67dafba8-ecd3-5798-9aef-51f71662aec1","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"0.0.0.1"},"localPort":{"int":3490},"remoteAddress":{"string":"0.0.0.1"},"remotePort":{"int":10508},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a94866b7-b4c2-4624-8399-d57cdcdf17a3","sequence":{"long":9636},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100015},"subject":null,"predicateObject":{"UUID":"08b310af-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"67dafba8-ecd3-5798-9aef-51f71662aec1"},"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"250856e5-71ad-46d2-83e3-987494ecbd4b","sequence":{"long":9637},"type":"EVENT_CONNECT","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b30ad7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1390","address":"::1","port":"3490","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cb6cd82-bda9-4c7c-a1a6-11c8b62cd3d1","sequence":{"long":9638},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"08b29b3d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1390","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bdf70e0-2589-4df4-9c36-64eb14eca3ea","sequence":{"long":9639},"type":"EVENT_ACCEPT","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08184f2f-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"08b310af-467b-11e9-aeb9-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_accept"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"4","ppid":"1390","address":"::1","port":"10508","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4a4e58d-fc50-4d4b-afe2-fcdb9cce8c4b","sequence":{"long":9640},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":32},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"611df01e-262a-4d89-8c8b-14218d3f2b0f","sequence":{"long":9641},"type":"EVENT_FORK","threadId":{"int":100144},"subject":{"UUID":"0817de1c-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b3272d-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1394","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1394","ppid":"1390","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b3f6c59-c157-422d-8a67-77a5541af2d3","sequence":{"long":9642},"type":"EVENT_SENDTO","threadId":{"int":100150},"subject":{"UUID":"08b3272d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b310af-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1391","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ae1adba-baef-4561-9d53-9273b81b00d4","sequence":{"long":9643},"type":"EVENT_WRITE","threadId":{"int":100150},"subject":{"UUID":"08b3272d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1391","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f9f639d-fe3c-4caa-ab78-c7717b775f47","sequence":{"long":9644},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"08b3272d-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b310af-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985234024146,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1391","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99e57f7d-9b20-4c88-a27e-ef90a815a489","sequence":{"long":9645},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582985823904780,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":465801},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44177495-e4ee-4562-a4d1-6d06a4ffceb3","sequence":{"long":9646},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":465801},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d12d741-fb56-4dd5-9506-92941a016667","sequence":{"long":9648},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53f5561d-486b-4a7d-91fe-4b8a276cf547","sequence":{"long":9647},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b59472b8-9006-42bd-a35a-cd76eeb19ba1","sequence":{"long":9650},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d9e6c8b-2ef0-449b-9d4a-5f1d3f6133dc","sequence":{"long":9649},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"365b0e46-0761-4404-b575-d9bb5c8a4414","sequence":{"long":9652},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18425a3c-5c12-4608-84b5-c9b6fc8fa876","sequence":{"long":9651},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2dfb58f-ff24-481a-a04b-f0cde7b4b45f","sequence":{"long":9654},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc07cd89-66dc-465d-bffa-4c2a9545bcd5","sequence":{"long":9653},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6dc6c12-7a4e-403b-845e-2f27a3d062a5","sequence":{"long":9656},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9a762dd-f24c-4f26-bfb2-9473b546e8de","sequence":{"long":9655},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dca35387-875f-4266-a709-98737bf98b4f","sequence":{"long":9658},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd630143-b491-44a3-a185-693071935131","sequence":{"long":9657},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aecd2521-22f8-41b9-9f75-294fd2f21eca","sequence":{"long":9659},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43da43c5-5137-4fe9-ad12-b325032c762c","sequence":{"long":9660},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ca404c3-89ab-474c-b481-6d8ca3450b26","sequence":{"long":9661},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41bfe399-cabe-4dcb-8d3a-b9b2ab0b598f","sequence":{"long":9662},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4117},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c42c47e9-31ab-48af-a468-8c669a5ffca4","sequence":{"long":9663},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4170},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d7e66e6-6184-4fbc-a681-d385a2892384","sequence":{"long":9664},"type":"EVENT_WRITE","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e57e1633-c86e-4d42-a3f5-f843312787c9","sequence":{"long":9665},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f084571-c1ab-4ff5-bbf1-bb10487fb69b","sequence":{"long":9666},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50d26399-293b-4f06-b8b9-4cd0d5f50c80","sequence":{"long":9667},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4697},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d9a6a37-dfdb-4e90-bc1a-8b28446a9898","sequence":{"long":9668},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4750},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b7b7675-799c-4b4e-b021-4ff0c7209ba3","sequence":{"long":9669},"type":"EVENT_WRITE","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e3fbbd5-f4ad-4af5-8a50-689385c4c743","sequence":{"long":9670},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c9050d4-09bd-4402-bae7-2b61057b858b","sequence":{"long":9671},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9bbab6c-ee43-4856-83d0-a31ce4dc4d60","sequence":{"long":9672},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4050},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f3dda7c-1240-4515-8db3-3633b71ac4c4","sequence":{"long":9673},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4103},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c882b86-778b-4073-965d-de087b0776d5","sequence":{"long":9674},"type":"EVENT_WRITE","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dcb7a0e-2741-40e3-9482-b649342fc523","sequence":{"long":9675},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a10e6257-23d4-49af-ab99-f02a7ecb5cf9","sequence":{"long":9676},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05e33c5d-ed4a-4548-aea2-056792c8195c","sequence":{"long":9677},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4893},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81f928c3-58d7-412c-b593-e20a11be33b9","sequence":{"long":9678},"type":"EVENT_WRITE","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9441fff-b08b-4c35-b608-322be4413740","sequence":{"long":9679},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1027c452-68ce-4448-9f4e-1306a116cd0e","sequence":{"long":9680},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"850db010-57a4-4420-a78f-e5a907cd2a42","sequence":{"long":9681},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4980},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"101a21e4-0302-4dbb-8227-d54f747cc627","sequence":{"long":9682},"type":"EVENT_WRITE","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b53d64b4-65ff-44ea-b60b-de0852e6a859","sequence":{"long":9683},"type":"EVENT_READ","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"854b8b85-b7a4-4123-8ca4-79f171cd3696","sequence":{"long":9684},"type":"EVENT_SENDTO","threadId":{"int":100151},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"531","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63649ac0-1154-49bb-88fc-6a4de71c4f58","sequence":{"long":9685},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"531","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d20b5319-66a9-4239-8c45-fd8d24168d8a","sequence":{"long":9686},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986124378135,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9508a091-a62b-4ac1-9d7d-c648e192b5a6","sequence":{"long":9687},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ce1862a-186a-4727-8333-2b00b7b6ce6d","sequence":{"long":9688},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46e16f2e-a16c-4843-9a3d-6c3f03baa5d7","sequence":{"long":9689},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4946},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85181dba-0513-433d-93ef-055a6231f147","sequence":{"long":9690},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c246113-e18e-4581-8541-cb2e9ed8ccbc","sequence":{"long":9691},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97efcc81-15d5-4443-853f-57fed6db809d","sequence":{"long":9692},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986134636454,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5033},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f846f394-91fe-46ef-ac4c-a0c6d6d208a1","sequence":{"long":9693},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986143882190,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ab151c3-7276-47c1-8441-7e804c6ec640","sequence":{"long":9694},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986143882190,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"861b8bb5-29a4-4a16-b7b4-3973e4e9f684","sequence":{"long":9695},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986154353840,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8226cdd-e5a4-4a74-a468-19b36dc530c0","sequence":{"long":9696},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986154353840,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af6856d7-dd94-45c6-b2e1-b57fe9de0384","sequence":{"long":9697},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986164762457,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"707d552c-14be-4362-b0a1-e3242da77a63","sequence":{"long":9698},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986164762457,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24f5ba12-bb19-4e4d-95c9-d312f1eab072","sequence":{"long":9699},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"08b37bd8-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"08b37bd8-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8106a890-19d0-4168-9d45-3225c58c102d","sequence":{"long":9700},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"016b20f2-3ee5-454d-a2ee-49cb88becf50","sequence":{"long":9701},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dab100da-0a57-40ec-98b7-4486bbd0784e","sequence":{"long":9702},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1396","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1396","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41052d4d-75d2-44e9-8bb1-37526de822ec","sequence":{"long":9703},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"474ab523-74fa-4659-8a97-f7824c09fc12","sequence":{"long":9704},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"c9e441c0-7c31-1a56-b17c-3f9a061af725"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./with_wget"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582986244400733,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./with_wget ","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff196f3c-9a0d-4784-92bc-c5530198887e","sequence":{"long":9705},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c77cdcdb-7983-4453-8161-7f90fad0fb86","sequence":{"long":9706},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fbb48a4-9666-4bd3-8ada-a70a64d0157d","sequence":{"long":9707},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5adaf737-1c3f-4e76-8194-706497ae2e1b","sequence":{"long":9708},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ede8ac13-ff72-4813-98a1-82eeffeef385","sequence":{"long":9709},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85b6b543-b32a-4fe8-a4cb-28528908d4fc","sequence":{"long":9710},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86e3dcaf-e03d-48f7-91a8-64f57060ce14","sequence":{"long":9711},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e571cc51-9f66-43bd-9e51-b699915b49ed","sequence":{"long":9712},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba148507-fded-4648-988a-713805e8f3e0","sequence":{"long":9713},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3eefb8e0-5ae9-48c0-af9d-ce70d07800c7","sequence":{"long":9714},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a6afa6e-08d2-483a-89ad-2d98a855c30f","sequence":{"long":9715},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfa3baeb-3076-40b7-b424-2cdccf235996","sequence":{"long":9716},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aebd5238-7b7c-4f70-9643-ed310a251869","sequence":{"long":9717},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64d81df1-5a8a-4516-ad0e-7100146d1cc8","sequence":{"long":9718},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3393f87-06ba-4406-9f3b-e0ede601e110","sequence":{"long":9719},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b105ff59-2c4a-41ec-b6af-0102935f898e","sequence":{"long":9720},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c487d0d-7de3-4363-810a-f86da829b6c6","sequence":{"long":9721},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70bc6e49-7b82-42a2-9940-1f505b79e2c5","sequence":{"long":9722},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6cd68f1-f7bd-4c5f-b15a-5fbad0871fbc","sequence":{"long":9723},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bb88040-52d6-49e0-ae37-9ac7391cb527","sequence":{"long":9724},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_vfork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1397","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1397","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"537bfd2c-e9a2-4717-88f7-ec31e3cd145e","sequence":{"long":9725},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"f3f7eadf-5a79-ba55-b95a-881315bae424"},"predicateObjectPath":{"string":"/bin/sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582986244400733,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sh -c wget http://www.google.com/index.html","ppid":"1396","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66088fe6-94aa-4666-9861-88f5d827fb9c","sequence":{"long":9726},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25374445-515a-4b1b-8ce9-e04b0b2b645b","sequence":{"long":9727},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4d6e618-b95e-43b9-b1ca-7153fd1d77f5","sequence":{"long":9728},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94912e54-46e4-432f-9ea5-b1228ddc582c","sequence":{"long":9729},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38523ecd-eb98-47de-b9ff-70d546ea719b","sequence":{"long":9730},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a41104a7-3d58-43eb-9925-6080e0a74c3a","sequence":{"long":9731},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27d4a413-8911-4227-a9ee-b4d6b2c002b6","sequence":{"long":9732},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e54903c3-11ad-47da-8ed9-c14e0fa43101","sequence":{"long":9733},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":{"string":"/lib/libedit.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ff6f831-2d26-444d-88dc-09ffdcd5a941","sequence":{"long":9734},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90264784-be57-4d67-96db-c2ecf69456d5","sequence":{"long":9735},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f67b279b-7bd0-48a2-bf0c-31cd16b74d55","sequence":{"long":9736},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3422a5d-dad0-47dd-a575-ce460b5771ea","sequence":{"long":9737},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fad1808b-c8c8-4fcf-a97e-d2898a490c2a","sequence":{"long":9738},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"670ca2c6-1abb-414d-9524-5c22547c2cbc","sequence":{"long":9739},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b09cde3d-1244-4e98-ba80-0d9defd14531","sequence":{"long":9740},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11990505-bf1e-4607-9f16-96e61ce42f19","sequence":{"long":9741},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da0c9f81-9147-440e-8639-caa190e22a5b","sequence":{"long":9742},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"976e3285-d140-405c-a93b-2ba66eece4d9","sequence":{"long":9743},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba474311-52f2-404d-a8ea-a5e981f20dc4","sequence":{"long":9744},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9c0480d-af17-4283-a539-4f1fb5aa0601","sequence":{"long":9745},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e978e464-3602-48ba-8372-81d02c0642ad","sequence":{"long":9746},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2818048},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26db49a2-972b-438d-9ec9-3823881d1a0d","sequence":{"long":9747},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2818048},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab73e425-349b-455b-b23f-dae6749d8ca7","sequence":{"long":9748},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3334144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9565688b-269a-4f78-a284-b9bf787366c4","sequence":{"long":9749},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3334144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae282e63-1ebe-4e56-8f1a-205130747306","sequence":{"long":9750},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4665344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b05e7aad-369d-4989-b253-88023b7bc3ac","sequence":{"long":9751},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4665344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca8c11be-c199-43fc-ad58-3d922c5705fd","sequence":{"long":9752},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6309374b-76c4-4c3d-add2-66d53913fb5f","sequence":{"long":9753},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":{"string":"/lib/libncursesw.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f427826-6ae5-47cb-b86d-dbdb524728bd","sequence":{"long":9754},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d58d75dc-99ef-4682-b11a-7b0b795a9c5e","sequence":{"long":9755},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09093fb3-90eb-46bc-90df-d45896771bb8","sequence":{"long":9756},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6983680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1abf83b4-41dc-465a-80da-d56ba2a6a49e","sequence":{"long":9757},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6983680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb5021b2-2e37-4f56-8f4c-af571e0d8eb6","sequence":{"long":9758},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4a0c247-1ba6-4c72-aade-eb73b0b83cf8","sequence":{"long":9759},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6abf6387-bb06-4295-8567-8f7295397773","sequence":{"long":9760},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7356416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52f6197b-9aab-488a-87fc-0a430b12b009","sequence":{"long":9761},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7356416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63bfc0f3-03a2-4ac4-8f79-217451ad6c2f","sequence":{"long":9762},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53e347f3-fff9-4e04-aac7-bda722b3ac2b","sequence":{"long":9763},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2f797a5-6c97-4de7-92b2-258796eb7698","sequence":{"long":9764},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7886cf1f-bd7d-4bed-b4f8-5cdc12011cbf","sequence":{"long":9765},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"136a3d3d-276d-4ef8-a100-61ca6ee77d3f","sequence":{"long":9766},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56184bc4-f1c0-47a8-8793-07df212639c6","sequence":{"long":9767},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24171efc-6e30-4de3-96ba-7bbb2a1109a8","sequence":{"long":9768},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"094cee03-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1396","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ade0ea62-7da8-466c-989c-50d3266f3a5a","sequence":{"long":9769},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"094c9feb-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffa45b78-90b8-4e18-8ec5-4c381bd17161","sequence":{"long":9770},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":725},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1785f989-510b-41dd-9b7d-3ba29d0f18f9","sequence":{"long":9771},"type":"EVENT_LSEEK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1866},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e4a9c8a-c247-4e4a-a4cb-daa2f3fd399d","sequence":{"long":9772},"type":"EVENT_FORK","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1398","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1398","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2141c0a-e669-435a-abe5-2ca1464d35ff","sequence":{"long":9773},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e536eaf6-4b7e-4bfa-86c4-8cbcb750f365","sequence":{"long":9774},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552582986244400733,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1337","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c965bbb-1a7b-4dda-b717-b9a6b345b52b","sequence":{"long":9775},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa9d1f85-1335-48c8-9ab8-9cef2d19b395","sequence":{"long":9776},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11e49f8b-d2a5-4ac2-b7a1-21a3c8139b78","sequence":{"long":9777},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19289e94-3ce7-4da1-af4e-69fafc6fbe13","sequence":{"long":9778},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21b66be1-52a3-4001-8eba-6b47f7b7977f","sequence":{"long":9779},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb911500-b992-4aa8-845c-8b005a0a31d5","sequence":{"long":9780},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a5017f4-f617-446c-8769-d3d1496fb0ff","sequence":{"long":9781},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74c18145-c3c3-46a6-9e5a-f8a1186eff8a","sequence":{"long":9782},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90197c3c-f551-4c58-a095-2a2ecec0c44b","sequence":{"long":9783},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4f484b9-9f99-4156-a569-d4efbf15cc7b","sequence":{"long":9784},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea5c508b-2eb3-4273-88f8-5b0b39aaf74f","sequence":{"long":9785},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ba5d818-a9a1-4f92-93a0-21e437bd30d0","sequence":{"long":9786},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76ac8ea9-bad7-4f63-a0ea-db54444cd33a","sequence":{"long":9787},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ec0c344-7bcc-4583-a41b-f6b65d8c1227","sequence":{"long":9788},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582986244400733,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38a2ce33-8ea2-4c92-9ab9-27f2f50f6c7a","sequence":{"long":9789},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987074157366,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":479100},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be431168-0407-46d1-ba91-682bf27c71a4","sequence":{"long":9790},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObject":{"UUID":"094d72a7-467b-11e9-aeb9-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1337","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"958f68f5-d136-4516-89ac-0d4975ba4340","sequence":{"long":9791},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":18},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82afb495-e3d5-47c0-a1a5-7f080eaa0dd0","sequence":{"long":9792},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8eaa98a0-ed5b-4c9d-ab9e-88818bdc1f0f","sequence":{"long":9793},"type":"EVENT_WRITE","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b32981f4-9e04-4338-97b5-34e9f3e02da9","sequence":{"long":9794},"type":"EVENT_READ","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4df59f2-ef2d-4fb5-a333-ae583652aa2c","sequence":{"long":9795},"type":"EVENT_EXIT","threadId":{"int":100117},"subject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObject":{"UUID":"f98bb0e2-467a-11e9-aeb7-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5184832c-0873-4e22-a9b2-c8655f66f71c","sequence":{"long":9796},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38cace76-53a8-431c-a665-c0d694d501eb","sequence":{"long":9797},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582987267490974,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":50},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d89c1a26-b5f8-4b56-ac0f-a97fe23409d6","sequence":{"long":9798},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988115532463,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":480275},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4bcfc1b-48d8-4d92-8ac6-a29da89e2d7a","sequence":{"long":9799},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":480275},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa7517ba-cda7-4734-b873-f6483b036dcd","sequence":{"long":9801},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae7ce3a1-2f26-4031-9a4a-fa922848710b","sequence":{"long":9800},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2687893a-7592-4a40-ab51-c81c9fab43d5","sequence":{"long":9803},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a108ecc5-ff51-40a2-83c9-930648b9c2b9","sequence":{"long":9802},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96dd021b-88c2-46a5-8ebb-64368371f795","sequence":{"long":9805},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6314c127-4534-46c4-bc01-fcacc4ba5070","sequence":{"long":9804},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"092fe31e-699e-4a48-9c8e-0d0a9a20a2c1","sequence":{"long":9807},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc7a9676-2f74-4b93-8c6d-598acd37bd9a","sequence":{"long":9806},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"048b3d78-04c0-4b4e-9db1-ee29a9cb4879","sequence":{"long":9809},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31bd7126-978c-4ae3-b2aa-ce478429e999","sequence":{"long":9808},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25fb4693-74fa-4b17-a803-e8a770b945a3","sequence":{"long":9810},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c89e3ef-7475-4f27-9207-739650d94883","sequence":{"long":9811},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cec3953-c02b-4b01-aa08-687c7e7356ac","sequence":{"long":9812},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82f4fcd9-60af-40e3-8d0c-6667f247154f","sequence":{"long":9813},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4071},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55a05298-2fd4-4012-a5bc-44cbe6663efe","sequence":{"long":9814},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4124},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12ef1275-b4cf-475f-be44-d5ad60c9da04","sequence":{"long":9815},"type":"EVENT_WRITE","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a219a681-af8f-4254-bda9-60f3cec7d587","sequence":{"long":9816},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2eff5b50-ffb4-42c3-bb86-4fcbea3efb90","sequence":{"long":9817},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f91c1c4-ee8b-4ff1-8fb3-dbbbf960148f","sequence":{"long":9818},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988125996282,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4807},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5832edf1-5e01-40ee-ae9b-836986fa9d04","sequence":{"long":9819},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4860},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af84c898-35b6-44a3-86cf-b8e6c34f515f","sequence":{"long":9820},"type":"EVENT_WRITE","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0140ec33-d88f-4012-b806-aee33c717b10","sequence":{"long":9821},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa9282b3-38dc-41b4-8976-b8a4f322494c","sequence":{"long":9822},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff073dc4-266f-413e-b972-3accfea01479","sequence":{"long":9823},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4409},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c20c515-267d-485d-8872-d4e15426b509","sequence":{"long":9824},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988133999679,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4462},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94345510-005e-41f7-99b3-6346d4ade7a4","sequence":{"long":9825},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c523b95-e030-474f-ad89-1c0bca6ae2ff","sequence":{"long":9826},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a915655-155d-4f65-8443-3141f7f9a222","sequence":{"long":9827},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c50e1f57-744f-4ddc-80af-46b50387fa32","sequence":{"long":9828},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8dae040-85ab-4da8-b5e1-8719004e68e6","sequence":{"long":9829},"type":"EVENT_WRITE","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca8056ea-bbe0-4d30-9ec9-c71c28e87586","sequence":{"long":9830},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5504a2a-06e5-4c87-8d8c-1ee23319d6ee","sequence":{"long":9831},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13bba318-5f3a-44a3-8ce9-3d39442868c1","sequence":{"long":9832},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988158826122,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1171},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ec8a262-edf9-416b-9d22-06ac0091c97d","sequence":{"long":9833},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1224},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f93ba95d-5bd5-45d4-a15b-87b2a89438d5","sequence":{"long":9834},"type":"EVENT_WRITE","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00796ccd-f44a-4061-a634-ac1ce5049024","sequence":{"long":9835},"type":"EVENT_READ","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6451377-76c9-47af-beef-c389fe51c06d","sequence":{"long":9836},"type":"EVENT_SENDTO","threadId":{"int":100152},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"532","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"698bbc81-47ce-4bec-a2b4-d5025e1f340c","sequence":{"long":9837},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"532","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f6cd860-8caa-4058-81d8-aff77c067bc2","sequence":{"long":9838},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988170844062,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44a83147-e9e0-49b1-9f61-c06777b9133f","sequence":{"long":9839},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988173936046,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"debf8051-cad2-435e-a0fd-bac63b3435d4","sequence":{"long":9840},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988173936046,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f06fda4-ae93-4c0b-abd3-6fff0bd8427c","sequence":{"long":9841},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988173936046,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"023fe139-d54c-4679-bb30-af099a8ea224","sequence":{"long":9842},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988173936046,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33f18277-966e-4595-bdc5-80be00b7d492","sequence":{"long":9843},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d71df648-53e8-481f-bd9f-e68e4591ea6f","sequence":{"long":9844},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"533","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efd03f36-9b8f-46a3-b1ee-b46b12d820c1","sequence":{"long":9845},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"534","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"193a35c9-d3c2-4bc0-8b01-fdd90d1114bd","sequence":{"long":9846},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"535","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52bcd9b9-9a1a-4b19-8479-1a1ed44ce64a","sequence":{"long":9847},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"536","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4b89185-9351-4be7-ab59-ac068c90a21d","sequence":{"long":9848},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582988523946631,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"533","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f10bc2ef-b93f-43fe-81fb-76c888e5aee8","sequence":{"long":9849},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582989123868619,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":484527},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d433322-21e0-40a5-8278-5635d470c40e","sequence":{"long":9850},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":484527},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c01e015c-e9d1-4e58-baa7-29def9b7a152","sequence":{"long":9852},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73ce9f18-94f7-4f8b-8fc4-3ce0de469c85","sequence":{"long":9851},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fe88150-c1d3-4f75-8dfa-4a6a0eb13152","sequence":{"long":9854},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac117322-0650-4353-9d71-6a3579df959a","sequence":{"long":9853},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b96a406-2e9b-41f2-af67-1db6368c06ec","sequence":{"long":9855},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cf3f9c1-bcba-410f-995b-411c00661b38","sequence":{"long":9856},"type":"EVENT_READ","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52a40bf8-e5d5-4bb5-9d31-198faf2444d6","sequence":{"long":9857},"type":"EVENT_READ","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb4e249b-2838-4f88-9c34-08b7fa5df7aa","sequence":{"long":9858},"type":"EVENT_READ","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4248},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0d3c47c-2cd4-4d88-b22a-61e3ab2d747f","sequence":{"long":9859},"type":"EVENT_WRITE","threadId":{"int":100098},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4301},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"747b818f-b70b-4190-8a5f-206829c6cde4","sequence":{"long":9860},"type":"EVENT_WRITE","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70efc3d2-9ecd-4a7c-ad22-cb6876d9d93a","sequence":{"long":9861},"type":"EVENT_READ","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"732f85f3-b54f-496e-beaf-1a7b86a8074d","sequence":{"long":9862},"type":"EVENT_SENDTO","threadId":{"int":100153},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"537","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23c380d1-b24d-4006-8357-31947f5567b4","sequence":{"long":9863},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"537","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cde4be0a-92e3-41db-a25b-5a7ae798664d","sequence":{"long":9864},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990124349634,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"142d6554-92c2-41f0-a898-dbc49736f90c","sequence":{"long":9865},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990133892948,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":486160},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9df88841-51d8-4195-af80-ee0d6eb59d27","sequence":{"long":9866},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990133892948,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6357a49f-ab16-4a80-87e3-f00c0987b806","sequence":{"long":9867},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0be36d-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552582990133892948,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff2894e6-7d8a-4e51-a750-59116f634e42","sequence":{"long":9868},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584214124584224,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":486690},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"207a32ca-0ea4-42d7-b06d-fdcd9365498b","sequence":{"long":9870},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584214124584224,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"757e4d84-08b8-4567-81ec-fa07949be96b","sequence":{"long":9869},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584214124584224,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8258e74d-58a8-4fd4-a60d-7220b4fecd10","sequence":{"long":9871},"type":"EVENT_READ","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aa61dd88-cb8c-fb57-8ccb-3d1617fb8ab3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584214194244634,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"857160b1-f4a3-496b-bad6-728a19fcda2d","sequence":{"long":9872},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"c1555c7c-d38e-9a58-8ed3-e319889a0469"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584214194244634,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80b6c54a-4d10-43df-a5ad-b845d97ded11","sequence":{"long":9873},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584214194244634,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5f59e32-8e2b-4dc9-b283-6063742753f4","sequence":{"long":9874},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584215124320762,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":487685},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"535c5883-b195-420b-bac7-5f69ab5b7c64","sequence":{"long":9875},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584215534083105,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd669c70-956c-4963-b520-4bc029aa8997","sequence":{"long":9876},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584215534083105,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16928","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0acd5f3-524a-4ab7-b723-6ed8f69207e5","sequence":{"long":9877},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584215534083105,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16929","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90e47f0e-e5d0-49f8-ad96-6e6d0eb26562","sequence":{"long":9878},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584215534083105,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16930","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1bacc7e-9d82-4d9c-bb44-dbcbec3783ba","sequence":{"long":9879},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584215534083105,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16931","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88b74a8a-4707-4142-81c4-09178c097b78","sequence":{"long":9880},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584215534083105,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16928","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"465a5c4e-d16a-482c-8f49-63af7b095f8e","sequence":{"long":9881},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584215534083105,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16929","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f13facc4-1a65-4a8f-af2c-a5d6606d5747","sequence":{"long":9882},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584215534083105,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16930","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af571b89-576d-4afd-a52d-d5e81da71a12","sequence":{"long":9883},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584215534083105,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16931","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa2907d0-9c3b-4756-9cee-80da7a05978b","sequence":{"long":9884},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":487685},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0791f7df-c334-4953-b54b-1b805cf776b7","sequence":{"long":9886},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"830ad6b3-2f0e-41da-86b1-e0fb77d0978e","sequence":{"long":9885},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f5b73d5-68b1-456c-ad06-cc06a2376690","sequence":{"long":9888},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16ef8b59-a7c4-4e70-9ebb-4103c281c563","sequence":{"long":9887},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e38ccde5-d34f-43a2-8fc7-864d30d045bd","sequence":{"long":9889},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b776c6d-f280-46d8-8288-6af578712689","sequence":{"long":9890},"type":"EVENT_READ","threadId":{"int":100170},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a16cabb7-c0b6-4081-b6da-9cd2328a1c6d","sequence":{"long":9891},"type":"EVENT_READ","threadId":{"int":100170},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b5c9212-85ce-4522-b924-d948d1d85b2d","sequence":{"long":9892},"type":"EVENT_READ","threadId":{"int":100170},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":991},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2eec233f-2eb2-4e8a-b663-b059fd54eef5","sequence":{"long":9893},"type":"EVENT_WRITE","threadId":{"int":100170},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d979352e-467d-11e9-aec3-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c7e541e-0f44-4c96-b3ad-3de7ee654998","sequence":{"long":9894},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1044},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1472274f-bfe1-4c05-ac54-6cacb80cbdf6","sequence":{"long":9895},"type":"EVENT_READ","threadId":{"int":100170},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8c78f51-f8d6-44a6-a1f9-afc00fe46934","sequence":{"long":9896},"type":"EVENT_SENDTO","threadId":{"int":100170},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16932","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4805a3c-344c-4160-af21-ae5e7b24fa89","sequence":{"long":9897},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16932","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"caaef5d6-fa28-4f10-8b62-799726c9b0f8","sequence":{"long":9898},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bece8de-8e20-45c2-9f14-b5b9d2e83fe4","sequence":{"long":9899},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38c38df6-4064-4373-b811-390d718328ac","sequence":{"long":9900},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216124855581,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"816b85b5-e757-492e-b20a-1de1c7d9d548","sequence":{"long":9901},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584216134014133,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":490395},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"590e6f25-f980-4b89-9e4b-dfe383516ae3","sequence":{"long":9902},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584217144147017,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":490757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"181f8f43-b6fc-4c5a-9250-27e21ae66ba7","sequence":{"long":9903},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":490757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c157e70c-85c6-4220-842f-91ea592e6705","sequence":{"long":9905},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c171a5eb-433c-4828-b50f-d74bd98df251","sequence":{"long":9904},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26674f2b-2f21-4960-8538-0c8883e250ee","sequence":{"long":9907},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"206ae7b8-57a8-4181-aa40-bd87b02a5ba0","sequence":{"long":9906},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c28b7355-5723-4114-9015-4bc0ef3fb9df","sequence":{"long":9909},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fc66476-f5be-47e9-b08d-d89b8b9561d2","sequence":{"long":9908},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3de56373-b498-4826-8a54-343681fe90f2","sequence":{"long":9910},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d1ebd30-5e7b-4572-aade-814e6fd977ca","sequence":{"long":9911},"type":"EVENT_READ","threadId":{"int":100171},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbc6ad72-ce98-479e-b4ae-d15415037dd7","sequence":{"long":9912},"type":"EVENT_READ","threadId":{"int":100171},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8db8f8e-adfb-4a6e-bf9e-130fb8667920","sequence":{"long":9913},"type":"EVENT_READ","threadId":{"int":100171},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2706},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4789403c-4351-4e95-98d9-007b56c9840e","sequence":{"long":9914},"type":"EVENT_WRITE","threadId":{"int":100171},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"169feac3-8e83-4606-9b83-3f04d33b62fa","sequence":{"long":9915},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2759},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"576265d0-55dc-4753-ae52-6c32e9839997","sequence":{"long":9916},"type":"EVENT_READ","threadId":{"int":100171},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e6b7df9-a9b1-4837-872f-aa33583b402b","sequence":{"long":9917},"type":"EVENT_READ","threadId":{"int":100171},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43b0bf10-dfdd-49a6-a187-dc6586c07244","sequence":{"long":9918},"type":"EVENT_READ","threadId":{"int":100171},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"386ee91f-b302-4a60-aa11-e3f65c083cac","sequence":{"long":9919},"type":"EVENT_WRITE","threadId":{"int":100171},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ef1f213-371f-4b29-b287-8088063faf85","sequence":{"long":9920},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51da2cc7-67d3-4f9b-857d-af216d1fa88e","sequence":{"long":9921},"type":"EVENT_READ","threadId":{"int":100171},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e033b4d4-d216-4c9b-853a-0c81525bf344","sequence":{"long":9922},"type":"EVENT_SENDTO","threadId":{"int":100171},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16933","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6fecdd7-fb41-4446-b151-3da41da67ef0","sequence":{"long":9923},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16933","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d837f8ac-03f8-4cea-8ef3-128a88b494d1","sequence":{"long":9924},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5773b20-bdec-40c3-9881-055d687ac44f","sequence":{"long":9925},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77f4872c-123a-42e9-aa2d-5509555e9b71","sequence":{"long":9926},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c68fbd59-bec8-4a51-bb91-2c9652809791","sequence":{"long":9927},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72c7f7c5-0c1f-4e3f-b8a5-238b990ae078","sequence":{"long":9928},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218123884085,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f5ee486-fec8-492d-88a2-890def24877c","sequence":{"long":9929},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218153886551,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":493182},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f1c4835-0836-4b04-a529-b5a511bcd75b","sequence":{"long":9930},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218534024445,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cb57c53-9308-4d52-92aa-c8627ccf9974","sequence":{"long":9931},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218534024445,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16934","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f99b74a-36e2-439c-9669-10ce9e0fc2a9","sequence":{"long":9932},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218534024445,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16935","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d527e7d7-b2b0-43f1-be43-8d59cc6094db","sequence":{"long":9933},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218534024445,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16936","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f87784a4-86c8-46e4-8d94-05c5a3b177d2","sequence":{"long":9934},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218534024445,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16937","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9fb5353-0076-46df-a65d-c00600d32f0b","sequence":{"long":9935},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218534024445,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16934","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"718ff157-3f91-4295-8d0f-e09a87d68b07","sequence":{"long":9936},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218534024445,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16935","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4404e55-231e-4c7a-805e-78dd9308c648","sequence":{"long":9937},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218534024445,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16936","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cbf692b-7631-451b-bb5d-35f65b8f2368","sequence":{"long":9938},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584218534024445,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16937","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac778f02-57b4-452d-ab5b-ce7e685dc8ac","sequence":{"long":9939},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584219163889083,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":494367},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25f329c9-6a78-44fa-9175-cca19cc1fa4d","sequence":{"long":9940},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":494367},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b78ffc0-4a52-4bde-92f4-c072fff158af","sequence":{"long":9942},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"deb67c04-15d2-4401-bbf3-c5d461d6a333","sequence":{"long":9941},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"671b2f68-4eda-451b-a57e-165b3b6c118a","sequence":{"long":9944},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff8eca66-175a-4f31-9fe1-eea0abe0caaf","sequence":{"long":9943},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f315e52-1d51-4ca2-a44f-313085cfbf32","sequence":{"long":9946},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1919e886-03fb-4b20-8421-807a00f6ed88","sequence":{"long":9945},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64519455-c264-4862-80f6-7bab6c4ee576","sequence":{"long":9947},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da5f3325-45be-4cc2-9cbc-78b8050894ef","sequence":{"long":9948},"type":"EVENT_READ","threadId":{"int":100172},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"063400b0-c6cf-4856-bfcd-283a6886143f","sequence":{"long":9949},"type":"EVENT_READ","threadId":{"int":100172},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e270250-bd18-4b79-abba-2dd62a7f04c0","sequence":{"long":9950},"type":"EVENT_READ","threadId":{"int":100172},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2421},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2171e981-4668-402a-adf0-658b84f4b2d6","sequence":{"long":9951},"type":"EVENT_WRITE","threadId":{"int":100172},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8fe2d36-c375-443a-b930-2e0c9944c9d5","sequence":{"long":9952},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2474},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f996408-7f4a-4203-b0b1-a393da452394","sequence":{"long":9953},"type":"EVENT_READ","threadId":{"int":100172},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76530269-2edd-44ce-8144-8c791908cae6","sequence":{"long":9954},"type":"EVENT_READ","threadId":{"int":100172},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"296b0cab-5e9e-455f-a912-9a29b34968e1","sequence":{"long":9955},"type":"EVENT_READ","threadId":{"int":100172},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1181},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e178846a-9adb-4cdc-8f16-94512183fa53","sequence":{"long":9956},"type":"EVENT_WRITE","threadId":{"int":100172},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb1b8d21-239e-4ec7-9698-b5852791cd18","sequence":{"long":9957},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1234},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13950b1f-7d3b-4d24-90b5-490d05acf31c","sequence":{"long":9958},"type":"EVENT_READ","threadId":{"int":100172},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3517d3e-6092-48e6-8a85-6c0a79ed929b","sequence":{"long":9959},"type":"EVENT_SENDTO","threadId":{"int":100172},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16938","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2d0e45e-4bc3-485c-83c2-b88becd5739b","sequence":{"long":9960},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16938","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28cdb2fc-8234-434a-9d30-2e392289cf80","sequence":{"long":9961},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8a33d7a-4327-4096-ab64-597822cfcc65","sequence":{"long":9962},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91dc4c0f-3cb0-45cc-8ce5-cfbfaa1a607d","sequence":{"long":9963},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220124212241,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ffad3cc-b90b-4171-9313-b124ef7638fd","sequence":{"long":9964},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220134149156,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3bdcc5a-e0e7-4937-b3f9-23488592342f","sequence":{"long":9965},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220134149156,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"663c4191-b1ed-47fe-89e5-ceb305fdaa35","sequence":{"long":9966},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220174656411,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":496796},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"e8d3878e-467d-11e9-aecf-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":null,"localPort":null,"remoteAddress":{"string":"23.131.160.7"},"remotePort":{"int":123},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a02e4f8-c6e1-4f8d-8727-336136a4949a","sequence":{"long":9967},"type":"EVENT_CONNECT","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"e8d3878e-467d-11e9-aecf-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220254401345,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","address":"23.131.160.7","port":"123","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61040981-7d70-4b4a-9de5-a652988de64a","sequence":{"long":9968},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"e8d3878e-467d-11e9-aecf-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220254401345,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"018906d5-6891-4532-aae0-c40b0bb773d6","sequence":{"long":9969},"type":"EVENT_SENDTO","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"b5434a9c-467a-11e9-ae89-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220254401345,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"ret_msgid":"16939","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"22","ppid":"1","address":"23.131.160.7","port":"123","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"790cfb18-f6cc-4322-b41b-76d0233b9611","sequence":{"long":9970},"type":"EVENT_SENDTO","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"b541acd0-467a-11e9-ae89-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220254401345,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":100},"programPoint":null,"properties":{"map":{"ret_msgid":"16940","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce7dea93-0157-4d2c-9c9b-c706c53c5d55","sequence":{"long":9971},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b2110-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584220254401345,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":100},"programPoint":null,"properties":{"map":{"ret_msgid":"16940","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28ab7a45-147c-4d29-98b4-5f332627e4b0","sequence":{"long":9972},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584221184231476,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":497951},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb05e313-87b3-4b13-8c19-b04ee5cccc61","sequence":{"long":9973},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584221539826639,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f316d127-013e-4b3a-9728-c5b46c0c8f77","sequence":{"long":9974},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584221539826639,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16941","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30a01d4a-8f64-4720-a982-4a7e9f94735c","sequence":{"long":9975},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584221539826639,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16942","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5a70a2d-392b-4119-91d2-04468ae53a1a","sequence":{"long":9976},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584221539826639,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16943","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f919459-cff7-4d0e-b8fe-0991f1fecb0d","sequence":{"long":9977},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584221539826639,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16944","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e89977c1-3cc9-4768-bb7f-468325779a25","sequence":{"long":9978},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584221539826639,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16941","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76503327-e51f-4eb7-965c-4b35900e795b","sequence":{"long":9979},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584221539826639,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16942","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"690a225a-45c1-43a6-b396-6e99303a2023","sequence":{"long":9980},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584221539826639,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16943","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b7eee17-1da7-4956-b93a-3bea395f7a61","sequence":{"long":9981},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584221539826639,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16944","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74e44b26-eab5-40c2-b053-6df2a6157e2f","sequence":{"long":9982},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584221824468319,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ba094d5-8d9d-48ab-845f-cef901e3e93b","sequence":{"long":9983},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584221824468319,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15f76df4-4fd3-41fb-8601-8f3eccd0ff25","sequence":{"long":9984},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584221824468319,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e2b15be-7932-4f2f-b3c5-774501a49e90","sequence":{"long":9985},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584221824468319,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ebd2211-3e94-48f5-953b-67756ea5ef8a","sequence":{"long":9986},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":497951},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aba746aa-2232-4c2f-b003-761cca72f44f","sequence":{"long":9988},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2e0ea14-37a2-45e9-a0e9-dad7ae5a118a","sequence":{"long":9987},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65bc527e-c11a-44f6-8b34-dec8fb33af88","sequence":{"long":9990},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cecfea7-cd8c-42f1-a5b0-988514a3f73a","sequence":{"long":9989},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa77d5de-77e6-423e-89a0-e3a5c3ed06af","sequence":{"long":9992},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef00a408-12df-43f2-96d7-b43b11419bf2","sequence":{"long":9991},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1b00444-8492-4171-8868-6c8af8032c31","sequence":{"long":9993},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d987f42-7680-4bde-a99d-7c3815d8c66a","sequence":{"long":9994},"type":"EVENT_READ","threadId":{"int":100173},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21ed52e2-d239-4b70-9d34-aa9c3d9f8813","sequence":{"long":9995},"type":"EVENT_READ","threadId":{"int":100173},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d9e6f29-8445-4f57-aef7-19dd2f42f942","sequence":{"long":9996},"type":"EVENT_READ","threadId":{"int":100173},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2425},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c543c65-7a20-4628-8914-96791b716f98","sequence":{"long":9997},"type":"EVENT_WRITE","threadId":{"int":100173},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da84c055-3728-4fe1-8288-647c45cf1b63","sequence":{"long":9998},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2478},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1de8a7d-d870-42c2-ad3a-6c68b9f318d2","sequence":{"long":9999},"type":"EVENT_READ","threadId":{"int":100173},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ee6b172-718a-4ed9-870e-4350ac69bdc8","sequence":{"long":10000},"type":"EVENT_READ","threadId":{"int":100173},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33243468-d1cb-4f3f-ab0f-76e5db0ab972","sequence":{"long":10001},"type":"EVENT_READ","threadId":{"int":100173},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1151},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b0f020d-5bb3-433c-b2ae-2eaa9265a6d6","sequence":{"long":10002},"type":"EVENT_WRITE","threadId":{"int":100173},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f2db7a5-b749-451d-9171-9d62c46275a9","sequence":{"long":10003},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1204},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d396893-f247-4eca-b754-69a342a7f5fc","sequence":{"long":10004},"type":"EVENT_READ","threadId":{"int":100173},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ac9a0dd-2284-47ba-a2d8-d1da7fdb863a","sequence":{"long":10005},"type":"EVENT_SENDTO","threadId":{"int":100173},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16945","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2bffa7e-ff63-42e6-b565-e2ac00b61c04","sequence":{"long":10006},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16945","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"727918b2-a589-476e-89fe-dae099f59196","sequence":{"long":10007},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07372906-9383-48da-b956-afcd2440dd67","sequence":{"long":10008},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4568db6e-387f-4e65-9846-98bb9dc8e596","sequence":{"long":10009},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7a79c60-9ec1-4edb-bcf5-6dc2abb6c5b6","sequence":{"long":10010},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"530a2037-8a7c-419f-81aa-183bf49df8e2","sequence":{"long":10011},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222123900893,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"522d6759-3d33-4e50-afcf-4208c822a2bf","sequence":{"long":10012},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222194047722,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":501567},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"548aa402-8694-4464-b969-f814d7478df6","sequence":{"long":10013},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222733900013,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0f7ddc4-cc39-4e57-bcc2-620deb63d150","sequence":{"long":10014},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222733900013,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f2ae61c-b361-44fe-b42e-11bd4c4a37ca","sequence":{"long":10015},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222733900013,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbd70d4d-f331-4959-8c33-3643f238d033","sequence":{"long":10016},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584222733900013,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"972f60a7-bbf2-4f2e-803d-4e718b2ddff2","sequence":{"long":10017},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584223203936803,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":502258},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5900a1ed-3437-42a5-bff0-24bb367e10e1","sequence":{"long":10018},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584223659195782,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e89f6cfe-34dc-4b50-bb5b-543102152162","sequence":{"long":10019},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584223659195782,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8d16ead-b8b4-4f51-8acb-a70236e88ff5","sequence":{"long":10020},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584223659195782,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e97975d4-858c-4950-910c-acedfd05b442","sequence":{"long":10021},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584223659195782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":21},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59a0d302-f810-42f7-99ca-91ecc4f82946","sequence":{"long":10022},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":502258},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14f367d4-4457-498f-be82-fc540f738cb6","sequence":{"long":10024},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f298c77-815c-4e69-9e90-ba725476441a","sequence":{"long":10023},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68dad2ac-3ba7-4744-8937-055e1ab2aab5","sequence":{"long":10026},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9d14c05-3aaa-40bd-9fb8-350b008fa0ab","sequence":{"long":10025},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3894dc9b-3e02-4a3f-b843-be0c593647a3","sequence":{"long":10028},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c178834-2186-4d0a-94d3-0d8545c7ac4b","sequence":{"long":10027},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"399ab3d9-1847-42d5-b46b-74f3e5928cd6","sequence":{"long":10029},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53fd34de-2665-4a06-b788-2da41af36747","sequence":{"long":10030},"type":"EVENT_READ","threadId":{"int":100174},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6b7640f-35c0-49dc-9442-07a92eb74e4b","sequence":{"long":10031},"type":"EVENT_READ","threadId":{"int":100174},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71ae9046-3ae6-4878-b615-4886d702076e","sequence":{"long":10032},"type":"EVENT_READ","threadId":{"int":100174},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3612},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"726a3d91-d5d0-4937-afa8-4ecaf3be48a5","sequence":{"long":10033},"type":"EVENT_WRITE","threadId":{"int":100174},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2af2874-29c1-4790-a0d3-aebf09a144a7","sequence":{"long":10034},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3665},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2114672c-39bb-44ce-9d4c-4c6ddc8345af","sequence":{"long":10035},"type":"EVENT_READ","threadId":{"int":100174},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68738fe8-f821-46c4-b7b1-ec95ecd3303c","sequence":{"long":10036},"type":"EVENT_READ","threadId":{"int":100174},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"458acd08-f99d-4b68-b453-66b6483c64e3","sequence":{"long":10037},"type":"EVENT_READ","threadId":{"int":100174},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":687},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e1d6028-fc7e-4110-aa07-350087d32fc1","sequence":{"long":10038},"type":"EVENT_WRITE","threadId":{"int":100174},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f04ff5dc-18dc-41de-b826-19d04ae2e2bf","sequence":{"long":10039},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":740},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00f9bbb3-2682-4a70-b09f-7824802b16b2","sequence":{"long":10040},"type":"EVENT_READ","threadId":{"int":100174},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd20c79c-d8b2-4496-8ed6-4ea6661e3a07","sequence":{"long":10041},"type":"EVENT_SENDTO","threadId":{"int":100174},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16946","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5905d61e-912e-4fca-8343-405188f217ef","sequence":{"long":10042},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16946","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fee7f253-6315-4d6b-b2a8-a4c24e13f17d","sequence":{"long":10043},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224128851998,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67a70e8d-faa3-4fb1-8165-87ec293d99b0","sequence":{"long":10044},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224136004800,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0693dce6-906f-4af6-a941-b76201a81962","sequence":{"long":10045},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224136004800,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b150eae5-0c7a-49e8-b0da-120551b3b375","sequence":{"long":10046},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224136004800,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c123c158-e9c9-4f7a-b0f8-ff489073773b","sequence":{"long":10047},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224136004800,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3b33878-4421-4ac8-b939-7e8b5bafba6f","sequence":{"long":10048},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224213876716,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":505084},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da8b158f-7fb4-40a1-8f05-870fae1a778e","sequence":{"long":10049},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224534037545,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd6e203e-73ea-405c-897d-09ac033be0e2","sequence":{"long":10050},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224534037545,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16947","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be264d89-8563-4543-8c6b-2eeb5805396b","sequence":{"long":10051},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224534037545,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16948","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"028b9bab-b7ae-4b67-8684-0f232017bb88","sequence":{"long":10052},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224534037545,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16949","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdca58d7-3273-491e-a6e3-b7a2290f8314","sequence":{"long":10053},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224534037545,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16950","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97473240-99b8-4a77-bc6e-3c4a9d03823c","sequence":{"long":10054},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224534037545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16947","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"636d1543-148d-4a10-9fdb-d9fcb1883ee3","sequence":{"long":10055},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224534037545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16948","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bf28bcb-685d-4340-a95d-55dae7175aab","sequence":{"long":10056},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224534037545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16949","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf48eb49-3263-4ed4-b402-da6259808c3a","sequence":{"long":10057},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584224534037545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16950","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38601b5b-8e43-40ff-a1f5-6eaae1a7e477","sequence":{"long":10058},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584225223945325,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":506266},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"858c44e8-e32d-4d0e-9254-8ce5c497cbe8","sequence":{"long":10059},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":506266},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aff5cdfb-c456-4ba0-a6d0-a23329a8e115","sequence":{"long":10061},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29071dee-6966-4fae-be34-41516a4228db","sequence":{"long":10060},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0cd485e-07b4-4eb9-9286-de88d304490a","sequence":{"long":10063},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2d02153-49ab-40f7-98a6-14a811b442c7","sequence":{"long":10062},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2a0fc9f-d798-4ecd-91d7-0cedaa424172","sequence":{"long":10065},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71349ffd-065d-41b0-b541-8608a4cbb19b","sequence":{"long":10064},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f2026b6-20d4-4597-ba58-94b4e59b11ee","sequence":{"long":10066},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e90f6d40-9809-4b4d-b84a-25eaace1076e","sequence":{"long":10067},"type":"EVENT_READ","threadId":{"int":100175},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"225d0463-d18a-47ca-a1e3-a6cec7bacb4f","sequence":{"long":10068},"type":"EVENT_READ","threadId":{"int":100175},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94071168-22ab-4885-8a98-8675d4e99cf5","sequence":{"long":10069},"type":"EVENT_READ","threadId":{"int":100175},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2822},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5685a43-ed8b-4c2f-822f-b02ea242d9d8","sequence":{"long":10070},"type":"EVENT_WRITE","threadId":{"int":100175},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d73e7ae-8dd6-4831-99cd-284709a95dba","sequence":{"long":10071},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2875},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcf059d8-255d-4220-ac5e-bc655da6a1cb","sequence":{"long":10072},"type":"EVENT_READ","threadId":{"int":100175},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"516263eb-69be-4a83-97aa-f37212cb0e3c","sequence":{"long":10073},"type":"EVENT_READ","threadId":{"int":100175},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e8ea63e-9624-4eb6-a1d6-b6a6e5bc98a7","sequence":{"long":10074},"type":"EVENT_READ","threadId":{"int":100175},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1178},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e9376d2-c962-4c35-8f76-cdc8a20116ec","sequence":{"long":10075},"type":"EVENT_WRITE","threadId":{"int":100175},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00433c42-af05-4c9a-992a-9088ed518b59","sequence":{"long":10076},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1231},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2b356e0-01fd-4640-8333-c0e2e7b6c6b1","sequence":{"long":10077},"type":"EVENT_READ","threadId":{"int":100175},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"feb42879-30b8-4cf5-9ca1-8202bf0ea38c","sequence":{"long":10078},"type":"EVENT_SENDTO","threadId":{"int":100175},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16951","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2372b45-f8ee-4c79-a5a4-e49c5696461f","sequence":{"long":10079},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16951","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"222548be-90b4-4550-a09f-90615f5bf8fa","sequence":{"long":10080},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c628c64b-e1ec-4d8e-8fbb-b508079c6461","sequence":{"long":10081},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1962c82-6ad7-4bd8-8cdf-e7327e5ad45d","sequence":{"long":10082},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0da9f5cd-fd78-434f-9aae-97953dfa9f1a","sequence":{"long":10083},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0740b1e6-57c2-40f6-a3bb-1a5b180b214c","sequence":{"long":10084},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226123871328,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"259c7866-1cf8-4b64-b9e6-af536b5dbefa","sequence":{"long":10085},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226233914850,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":508687},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1093994f-d83b-4da5-a65a-be4298d26221","sequence":{"long":10086},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97e76fd6-9e4c-414f-b8da-35b2d0f9fc74","sequence":{"long":10087},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ecab3f79-467d-11e9-aecf-080027fc76ba","type":"SUBJECT_PROCESS","cid":1491,"parentSubject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584226693997604},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cde7111-d58e-4428-b28c-fe826e0a7fc0","sequence":{"long":10088},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1491","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1491","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"712b918b-a75f-4ec9-9d58-eb4766a51297","sequence":{"long":10089},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./bash_commands.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584226693997604,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ./bash_commands.sh","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4b7fb01-7b99-46dd-8a0d-d0d2a9cd1174","sequence":{"long":10090},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3893f218-567d-4f7c-83d9-48d61358e0d7","sequence":{"long":10091},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05cf1757-347c-4931-9327-7bfbe7989ca3","sequence":{"long":10092},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fab701b-915b-4b02-b484-872e3217241c","sequence":{"long":10093},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d3e73f1-077f-4cec-a07c-911cc5e7070a","sequence":{"long":10094},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ff4fc6e-45b0-466a-b13f-ac7e3e43b10f","sequence":{"long":10095},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9f00ff8-8145-4b68-ae5f-b4e83a09ab20","sequence":{"long":10096},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b14dac0c-2a32-41f2-9013-93346abbc55b","sequence":{"long":10097},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2db9287-23d4-4d4f-bbad-3285546f4e67","sequence":{"long":10098},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3301beef-539c-49ea-bffe-21e75c8d04bb","sequence":{"long":10099},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7ac4dec-121b-4a6d-b3b9-62d2579bca26","sequence":{"long":10100},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51a59a79-bdc9-45fd-a16e-70e1f86e8894","sequence":{"long":10101},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14b5f90f-8db8-4652-8d2f-08ed0f51b83e","sequence":{"long":10102},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcfd4ae9-4f25-4c63-b008-76deaa8675d3","sequence":{"long":10103},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ca95be2-6b4d-4b2f-9d46-a304029c9ddd","sequence":{"long":10104},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ce99f96-8f56-4e4f-9ea1-a10bd058a11a","sequence":{"long":10105},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80d8f9fa-7e23-4d51-b869-78ecd6c6c2c5","sequence":{"long":10106},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e77dbdef-bd51-4510-9811-e5f001981459","sequence":{"long":10107},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"480b4dd3-90b2-4dce-9b82-88006d74dd77","sequence":{"long":10108},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcaf3d76-f9c8-41b7-9e22-d7ed7a311a11","sequence":{"long":10109},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584226693997604,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ./bash_commands.sh","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"986ef0cd-7ee6-4791-9914-141ebc132d14","sequence":{"long":10110},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6ad7fc4-c972-4ba0-b1ec-e2040ad8c361","sequence":{"long":10111},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226693997604,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ef1ac9f-69fd-46ac-928b-95f6a250dd8c","sequence":{"long":10112},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"025ec030-2254-43e0-8942-58bfc7488371","sequence":{"long":10113},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3efbd242-3c89-4940-a31c-dde51ad645a4","sequence":{"long":10114},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d99c51d-ae69-4e82-ba7d-078c8cdb5799","sequence":{"long":10115},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4bdc195-cff6-4e10-a45b-58b9012d7fa5","sequence":{"long":10116},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23fdcb0c-b042-49c1-93f8-cbc85ba82a43","sequence":{"long":10117},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d31295fe-5051-4ed5-96ab-74c0ea9bb229","sequence":{"long":10118},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33a13187-b469-4347-908c-187a3199ce5f","sequence":{"long":10119},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffb4367c-b295-43a9-9729-ae9dec844fe7","sequence":{"long":10120},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ba5bc91-546e-4d97-9533-97610b1a70b8","sequence":{"long":10121},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3763e465-f701-4ad1-8604-0dc9cff0c277","sequence":{"long":10122},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"858b6ad9-6b96-4fdd-b510-c0a9e99de189","sequence":{"long":10123},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee303af3-4db2-4ee0-bd14-d8244923221f","sequence":{"long":10124},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a1cf237-4730-4b61-9804-5f007ca7572a","sequence":{"long":10125},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c458ea54-1bf8-40cf-9551-8973b20edb8a","sequence":{"long":10126},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87ab8437-7826-4e60-b774-8f83275dccdf","sequence":{"long":10127},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d72365d6-f38d-4c4f-b000-9b7775bffacf","sequence":{"long":10128},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b600a9f3-6269-4a46-9246-4e8e5c066c9f","sequence":{"long":10129},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec0ddae9-f38f-445e-aae7-9f82fd88bc4f","sequence":{"long":10130},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e769b617-b9a0-44b6-9b56-47d56eb36f93","sequence":{"long":10131},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3446e85-9e4d-4e8c-bd1e-dde4e98b5d66","sequence":{"long":10132},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3776d217-0b97-4986-9911-791f202836a0","sequence":{"long":10133},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6453bb9c-8b8d-4481-909e-0f6825b5ef14","sequence":{"long":10134},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28d7d7ea-023e-4f6f-b964-2cf17882577c","sequence":{"long":10135},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cbe6488-7cbb-497b-b3d2-c385ee68d932","sequence":{"long":10136},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3331cdb-f6c2-4c15-9a4f-ecf034dba2df","sequence":{"long":10137},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d6cc76b-3260-4d27-bd0e-3544fb9b9956","sequence":{"long":10138},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fe7a3ce-cb8e-4def-828d-f6d026765fab","sequence":{"long":10139},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d5a7a92-aaff-4b46-9275-231a6cf15846","sequence":{"long":10140},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"205f944c-9979-4397-9394-54c8b3135234","sequence":{"long":10141},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4c766b5-81f5-450b-870e-5c21684ef81b","sequence":{"long":10142},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25e540bd-a786-4426-8321-319faefd1fdc","sequence":{"long":10143},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c96ce61e-6175-4e23-95ec-5ec96e2afc9f","sequence":{"long":10144},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b3aa80c-5a9b-496b-9d09-e76bde964f9c","sequence":{"long":10145},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccb93078-b631-4520-9a8c-04fa5a6ae9e7","sequence":{"long":10146},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"100b8db7-d5c1-48ff-a0aa-38f647077101","sequence":{"long":10147},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cce091d5-204d-4704-bd32-66bd2720df39","sequence":{"long":10148},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61d908ac-8a1f-4268-86c3-85f217bb150e","sequence":{"long":10149},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c065b628-cfe3-4417-a310-c24c99fd6e94","sequence":{"long":10150},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa09704c-63c9-40c7-9e13-e6377f460d06","sequence":{"long":10151},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa3bea48-0627-4c45-9002-6773d3d952fb","sequence":{"long":10152},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e03adc99-63e5-45d2-a276-3878e3501279","sequence":{"long":10153},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"755aba65-3d6f-4d19-8623-e6035f3299df","sequence":{"long":10154},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b085e1d-7001-457f-a546-d846d35195e0","sequence":{"long":10155},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8f974db-f453-4626-aa49-699fabbc5886","sequence":{"long":10156},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb0907e3-840a-416a-8802-6049764526a5","sequence":{"long":10157},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6941fa6d-15d5-468b-a8d1-d4c4f7ea299c","sequence":{"long":10158},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9326b84-ac0d-4a3f-8ef2-15611bc54a96","sequence":{"long":10159},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c80727ef-945c-47c4-807f-8c889fc4a160","sequence":{"long":10160},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb1d39e1-09ca-43bb-8b43-66287d00b440","sequence":{"long":10161},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cca8c76e-4ab2-4b44-a2e3-d7d331750291","sequence":{"long":10162},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c807a618-f026-40cd-a029-43b153faefca","sequence":{"long":10163},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9168db3a-2009-48f2-abdf-5ab7c8400499","sequence":{"long":10164},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./bash_commands.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a573dd2-32e0-493e-a934-5158c2ce7a36","sequence":{"long":10165},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7820bc22-7b54-4905-ac7b-574572016d67","sequence":{"long":10166},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e131243-eab7-4ecc-ba19-5c3afe8cd326","sequence":{"long":10167},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbf7c444-a2a7-43b4-9d80-d4ca40275445","sequence":{"long":10168},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d930b3a-e7b7-4468-9c9c-edf85893aa19","sequence":{"long":10169},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bec81fe6-81e4-4e44-8c06-2ce2f32b3ad5","sequence":{"long":10170},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"318a9978-88ee-4ec1-bd39-da8f979172d1","sequence":{"long":10171},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6a712ab-dce2-4a25-a836-bf7ea5496b25","sequence":{"long":10172},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":592},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6aa73cf6-143c-4ca0-bef5-935fc5cf100e","sequence":{"long":10173},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":11},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed303ba5-f15c-49f6-a4f7-8fe5768a1bd0","sequence":{"long":10174},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":11},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90aae04b-c3e7-4253-bf44-e693cb83242c","sequence":{"long":10175},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584226703947958,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":11},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7b75c4d-2bcb-438a-9f05-fd0300ff94d2","sequence":{"long":10176},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227264471263,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":517549},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e735fd6b-ed3d-46b2-9bcf-e6aaf5070204","sequence":{"long":10177},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227534437584,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a988119e-d798-42d0-b42f-5c17874b7c4d","sequence":{"long":10178},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227534437584,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16952","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f15a03a-18b0-4e85-a069-5443b263e20b","sequence":{"long":10179},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227534437584,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16953","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90a88696-a3e3-480c-a57e-ca125a2efbc4","sequence":{"long":10180},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227534437584,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16954","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a839126-af51-428f-8cc0-e30f497be0fa","sequence":{"long":10181},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227534437584,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16955","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc1e4306-f32c-4250-9459-ed693db804d2","sequence":{"long":10182},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227534437584,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16952","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79095c2f-4841-4ad2-8d37-d08f4fb0833a","sequence":{"long":10183},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227534437584,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16953","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8185c5c4-9075-405f-b2ce-a976a2833605","sequence":{"long":10184},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227534437584,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16954","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e78f8a82-34bb-4163-9ac6-a6147e0bbe88","sequence":{"long":10185},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227534437584,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16955","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ecac45d5-467d-11e9-aecf-080027fc76ba","type":"SUBJECT_PROCESS","cid":1492,"parentSubject":null,"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de2a3221-d040-4c81-84cf-6172ed4ce7f3","sequence":{"long":10186},"type":"EVENT_EXIT","threadId":{"int":100120},"subject":{"UUID":"ecac45d5-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ecac45d5-467d-11e9-aecf-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd0e569f-46f3-469f-8301-96702cafdcdb","sequence":{"long":10187},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23172fda-f674-43ee-a10b-e02f6d889dc3","sequence":{"long":10188},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8ce4a7b-bb98-4a4e-9643-3840215ece59","sequence":{"long":10189},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d783cab-8394-416d-aa6e-a31fb52cc12c","sequence":{"long":10190},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3acd5ae6-58c7-4ce2-9ae4-47813a1f8874","sequence":{"long":10191},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b12be959-e3e4-4c10-8750-b1f5988d1c96","sequence":{"long":10192},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":445},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69d60f15-9591-4666-b140-6d48d8f36186","sequence":{"long":10193},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":11},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df543146-9cf8-40f3-a5df-d10380118bcf","sequence":{"long":10194},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":11},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddfff3c9-2fe8-4290-8a65-43e2f8dd5917","sequence":{"long":10195},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":241},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ed460855-467d-11e9-aecf-080027fc76ba","type":"SUBJECT_PROCESS","cid":1493,"parentSubject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584227714423859},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d112a91-305d-4ca5-a777-5770be8265b3","sequence":{"long":10196},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1493","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1493","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42fe5395-c35a-4413-97da-39cee40b18f2","sequence":{"long":10197},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e11f5879-f7fc-4998-8582-0df64e0a7a30","sequence":{"long":10198},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90ef423e-4eb8-4cea-bba6-9378ba2367e2","sequence":{"long":10199},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40b4c687-2c31-4305-88fb-05d62fac3f0d","sequence":{"long":10200},"type":"EVENT_EXECUTE","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"d1524fc4-3a5e-855b-9e3a-5d212b8581ed"},"predicateObjectPath":{"string":"/usr/bin/whoami"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584227714423859,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"whoami","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ee7571f-ca75-47ff-9731-e1a3516aac44","sequence":{"long":10201},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02c2f143-1689-4998-8240-52c5c4e8a850","sequence":{"long":10202},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"133af7e8-89d0-4745-93fb-6d30ab5c2382","sequence":{"long":10203},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdb5071a-54f5-4746-9025-25562f6feca2","sequence":{"long":10204},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1d32e56-337c-4d0f-b1ca-bd16108d1ff0","sequence":{"long":10205},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ce762e8-19b4-4ca5-a5b8-e2bdd85e7aaa","sequence":{"long":10206},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfaa9bd4-1fb7-475a-a86e-8454d7803796","sequence":{"long":10207},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f691773-8cbd-4e93-bc59-fdae752d84bf","sequence":{"long":10208},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cea917ce-efd6-4721-91d6-9a1e9d859ad2","sequence":{"long":10209},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45039f7d-f06e-4bc6-9ef3-f799b2c01356","sequence":{"long":10210},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b182e5b7-a6c2-423b-b9b3-338c2a6f691a","sequence":{"long":10211},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cfacf73-de67-4cf5-b7b3-9914749ce9fa","sequence":{"long":10212},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cabd7764-e28d-4371-8fbe-79bf26225fc7","sequence":{"long":10213},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1edae40-6470-41c6-a444-e64e56afccf2","sequence":{"long":10214},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02a1d330-b6d7-47ed-bdb0-3d57026d0e96","sequence":{"long":10215},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f2e809f-0b07-4af4-ae20-fca71e5cb886","sequence":{"long":10216},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dc36448-6e74-438a-8038-ebddb56baadf","sequence":{"long":10217},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c5815db-db60-4c14-9a02-04b93ec311ba","sequence":{"long":10218},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c006acd6-3b7e-4775-92c5-92513ab8a84b","sequence":{"long":10219},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82aff0dc-1765-45ab-9be4-0a77b0841052","sequence":{"long":10220},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6a46fc6-ccd0-43a5-9448-bff8a0556de6","sequence":{"long":10221},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"496fe683-ad24-4e39-8166-75762636a794","sequence":{"long":10222},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae1c596b-984f-471e-91d8-8f01452e0405","sequence":{"long":10223},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13b1c61d-f58a-4fe8-aeb2-f96f35591fed","sequence":{"long":10224},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":{"string":"/etc/pwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f82fd7d9-8410-414a-b5f7-13aceab775f7","sequence":{"long":10225},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"730a940b-2d2c-4678-aded-94abdc93f594","sequence":{"long":10226},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d51eb562-6d09-42a2-a14f-666002b74ea0","sequence":{"long":10227},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53ddafab-1bc4-4a0f-b144-f50c1711f42a","sequence":{"long":10228},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46c61cfe-8164-49e1-b26c-3548a2c8472c","sequence":{"long":10229},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8adf2372-7690-4bab-9f5b-c71c36a11620","sequence":{"long":10230},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2c5f0ff-89eb-4f70-92c5-581d1c6ad852","sequence":{"long":10231},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9cf2253-7c4b-4060-b2e4-027c7eb0bce1","sequence":{"long":10232},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f0ea4aa-8061-4b78-9f89-cecbb6458118","sequence":{"long":10233},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7bae1bb-d043-4ff5-8f45-2f8509681c59","sequence":{"long":10234},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a6b5753-1a47-4285-998b-cdcf5204e3ae","sequence":{"long":10235},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4e540bb-131a-4a05-980f-ce5cef9d2a2a","sequence":{"long":10236},"type":"EVENT_EXIT","threadId":{"int":100120},"subject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed460855-467d-11e9-aecf-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"831aad6d-3c37-4614-9a5a-cc54b0ac3eda","sequence":{"long":10237},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":351},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dda85748-6b63-4ce7-a1e9-3c20893d830a","sequence":{"long":10238},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":270},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ed468077-467d-11e9-aecf-080027fc76ba","type":"SUBJECT_PROCESS","cid":1494,"parentSubject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584227714423859},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3085c6b-be01-446b-b0c9-94dd4039adcd","sequence":{"long":10239},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1494","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1494","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f03d1f3e-09ea-466a-8210-404c401db54d","sequence":{"long":10240},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c000f67f-484a-4bd6-9242-61da7f6f462a","sequence":{"long":10241},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29d0f69c-89ea-4ddf-8b34-dde96166c2ce","sequence":{"long":10242},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c714075-f94f-4239-9543-e3c0198d9fce","sequence":{"long":10243},"type":"EVENT_EXECUTE","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ab57cf3a-f09d-cd5e-9df0-38f66ecdfb24"},"predicateObjectPath":{"string":"/usr/bin/netstat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584227714423859,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"netstat -n -l","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21cee081-7aff-4f31-be04-65ef95b11bfe","sequence":{"long":10244},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98ba880a-aecd-49b8-a8c2-87281b9b2233","sequence":{"long":10245},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7bbedb7-bbe9-4bc4-aa36-d5959bb628c7","sequence":{"long":10246},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20baf1b8-141d-4636-96a1-951b062a62c9","sequence":{"long":10247},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57f4060f-0a97-4f2e-96d9-d1a7d3244bf6","sequence":{"long":10248},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"200b6f66-48a0-428b-a285-246b78f868b1","sequence":{"long":10249},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07184ca3-b29f-4a7c-82d2-106d6f59a347","sequence":{"long":10250},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c845d39a-9e67-42c9-961a-a864d7473f9b","sequence":{"long":10251},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":{"string":"/lib/libkvm.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2cdf057-0f13-4626-9dee-ef6a2950dbf2","sequence":{"long":10252},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfa25dfa-bf82-4b94-94ab-9a0dd5a6e932","sequence":{"long":10253},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d695f9ba-489e-4fa4-a609-c7c8600cd597","sequence":{"long":10254},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2555904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a3b50f7-57f1-479d-828f-e0fdbf950802","sequence":{"long":10255},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2555904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c14bbc7-bc47-400d-86f5-ef311d72faa0","sequence":{"long":10256},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2580480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af6d89d0-d570-404e-80ef-85b700f54d6f","sequence":{"long":10257},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2580480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c845922e-4d36-47f0-befb-a3f8f1205370","sequence":{"long":10258},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57b2c948-512f-4612-8117-0a828f92285c","sequence":{"long":10259},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6ee0cc5-36c6-491a-ac03-3702eb9759fb","sequence":{"long":10260},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c43e70f-55f0-4600-a925-6aa4130eef30","sequence":{"long":10261},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":{"string":"/usr/lib/libmemstat.so.3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77bb9c9a-2ed3-46d5-b62f-cfd6bbc14e3f","sequence":{"long":10262},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8fd3dd7-8e3f-406d-85df-955a014b028f","sequence":{"long":10263},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2177ca98-fc73-438a-87d1-040c9c83bc43","sequence":{"long":10264},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d10cf8d6-323e-4f45-b205-f8e31a42237b","sequence":{"long":10265},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2950d732-4764-48d3-9598-846daffbe069","sequence":{"long":10266},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2641920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f346dbc-ed9e-49c5-b027-0a4761eeca94","sequence":{"long":10267},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2641920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3e579cc-65b7-4e55-ae44-d2c9e463c96f","sequence":{"long":10268},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"641ccd22-207d-4649-b133-b82ccaf48e9f","sequence":{"long":10269},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e1191eb-bfd7-41bd-9d20-1481f79d3dce","sequence":{"long":10270},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"79f5d4d1-43bc-2c5f-bc43-f067df2cf245"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c43b15cc-b6d2-48c9-917e-e2370396db51","sequence":{"long":10271},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":{"string":"/lib/libxo.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1dca45d-80a8-43d2-8df7-2d7f544cbd2a","sequence":{"long":10272},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9247b938-b952-4969-8c82-e287afa187d7","sequence":{"long":10273},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7946972b-ce85-48ce-8dc4-6376a261312e","sequence":{"long":10274},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e58315a2-b4d3-4ce0-bfd9-2c4dee6bd998","sequence":{"long":10275},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"002439a7-450a-4a97-9a23-f2f6cad0205b","sequence":{"long":10276},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de491a45-5f88-48a6-b0ce-687d95ad610d","sequence":{"long":10277},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"508be26b-b8b2-4250-908b-a0baaa690b4a","sequence":{"long":10278},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2777088},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8d577b9-08a8-4438-8dd3-fa750bb98312","sequence":{"long":10279},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2777088},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c019afb4-1adc-4fbb-a1bc-01c1dc2ea3d0","sequence":{"long":10280},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3b700c2-0076-41c6-b35c-ca2e7081aa79","sequence":{"long":10281},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08b54fae-eea8-428d-997e-09b01c88afb2","sequence":{"long":10282},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"673aa5d2-1a4f-413e-a21d-df140356c929","sequence":{"long":10283},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af868663-08b3-4bf4-9641-89d27bb37937","sequence":{"long":10284},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69f4fa94-5d63-40bd-8dd6-c444fbd21f59","sequence":{"long":10285},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19b1e6a2-1cb8-4a6f-a3f2-9af922e2c905","sequence":{"long":10286},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2822144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f04446bf-cd68-4f66-a3f0-8539f766b139","sequence":{"long":10287},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2822144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"985fb8ce-0274-4363-a0c8-b4b07667754c","sequence":{"long":10288},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af708f65-48ed-4076-beb8-5ed4a6df9be6","sequence":{"long":10289},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"936fe520-c2d9-4e8e-aec8-e76ec1acddc9","sequence":{"long":10290},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fda8e65-2c02-4454-9fa4-ef04a2327b6d","sequence":{"long":10291},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":{"string":"/usr/lib/libnetgraph.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d92c088d-9472-48cb-80d3-fd077055016d","sequence":{"long":10292},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"834f1c6f-1e12-4348-a20e-a79906d19069","sequence":{"long":10293},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74addd21-1fa4-4833-b776-a08f8239fc4c","sequence":{"long":10294},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2883584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ef492ac-a0e3-47a4-9e5f-edc0a3004ba5","sequence":{"long":10295},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2883584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca5f415f-ac3d-426b-b788-9339b74d5e8d","sequence":{"long":10296},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2891776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c27cc3d3-8302-4fcb-8efc-3a8c20585db0","sequence":{"long":10297},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2891776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47b747c6-6b6d-4d6a-9847-6b7b7cb20668","sequence":{"long":10298},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2899968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3ded549-5af0-4efa-aac9-941aa3c1f030","sequence":{"long":10299},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2899968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6dbb43bb-0c07-442b-8dbe-7bb9723c112f","sequence":{"long":10300},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"603b87e0-3252-8c5e-9232-acf89e8c9393"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2fce616-1065-4165-8e78-f9fa79833354","sequence":{"long":10301},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"145a0b98-9258-406d-ae00-15b667b61038","sequence":{"long":10302},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09e6da3f-16c3-46dd-a24e-18b9838627a8","sequence":{"long":10303},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55cb205c-3924-459d-8eeb-31e6ab38623d","sequence":{"long":10304},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01d02102-582b-4430-bc12-e41a29bfe8c9","sequence":{"long":10305},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd1b8050-1954-408e-9891-bd86acac1125","sequence":{"long":10306},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34d4541d-141b-4db7-bd5d-577d6ddbb915","sequence":{"long":10307},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f471b38-086f-4da4-878b-2ce5d0edf777","sequence":{"long":10308},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ac1092c-4cf3-489c-98ee-d0a67ffa1040","sequence":{"long":10309},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d80a5f70-976c-4064-a2fc-e27562c56619","sequence":{"long":10310},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"506324c7-32f0-49aa-a682-deafbb602deb","sequence":{"long":10311},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":{"string":"/lib/libelf.so.2"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53a7203f-0cf8-44ef-9a34-37f950bcf301","sequence":{"long":10312},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54e1c1b2-bfa6-4c75-add6-5194140e3d14","sequence":{"long":10313},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2551808},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5df1fcf1-8033-410c-952b-f411f1d944bb","sequence":{"long":10314},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7077888},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29f68929-5b4f-48cd-95fe-f1b2d4e2cf6d","sequence":{"long":10315},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7077888},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35760485-7985-4473-888e-dd442a8874b8","sequence":{"long":10316},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7106560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a993905b-8a56-4c07-9c3e-106b1ba4f32f","sequence":{"long":10317},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7106560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfd72084-1e02-471a-b71a-a0fd06632d05","sequence":{"long":10318},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7176192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45032625-dbd0-4008-bd6e-123d37f9959c","sequence":{"long":10319},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7176192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19332511-9807-417e-801e-e199f78ea557","sequence":{"long":10320},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45067cb1-bd16-45ff-a51a-2e9355100331","sequence":{"long":10321},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5164652-77b2-41c9-8a1c-e3edda9c8a27","sequence":{"long":10322},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d0d69d1-8f09-4826-bf40-94c1a1c3c4c2","sequence":{"long":10323},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b4dfa55-573e-4c9f-910a-c74691fc155e","sequence":{"long":10324},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90baf26f-8c15-4388-aaf1-06b660988087","sequence":{"long":10325},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80752d51-9023-4501-a747-6b6b4110371d","sequence":{"long":10326},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6af24c52-1338-47b3-83fd-3d16c96ccee7","sequence":{"long":10327},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ea6ac89-daa6-4d11-b64e-196328dce545","sequence":{"long":10328},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab2047bd-e63b-4a40-9672-1902a2e7b793","sequence":{"long":10329},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3213},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fe56cfa-77c1-4ab8-a97f-b181da5756a1","sequence":{"long":10330},"type":"EVENT_EXIT","threadId":{"int":100120},"subject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed468077-467d-11e9-aecf-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"netstat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eaae35f2-173f-4dc9-98f3-82b501c4450f","sequence":{"long":10331},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":322},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a12204a8-ff56-4bb9-8c44-9374c68552f0","sequence":{"long":10332},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":303},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ed474591-467d-11e9-aecf-080027fc76ba","type":"SUBJECT_PROCESS","cid":1495,"parentSubject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584227714423859},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72a82436-56d0-4d3a-9431-2127498b410e","sequence":{"long":10333},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227714423859,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1495","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1495","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2fb79f6-b8df-408d-adc9-381421a50e76","sequence":{"long":10334},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8c502da-255f-4e2a-a170-256d7aba3f33","sequence":{"long":10335},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bfb5b07-9e75-47ef-a150-f1f95f0c3ac2","sequence":{"long":10336},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37c27007-ab95-40f7-a804-5d0e32a363b6","sequence":{"long":10337},"type":"EVENT_EXECUTE","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de3a34c1-0b17-8152-970b-4c2cb281885f"},"predicateObjectPath":{"string":"/bin/cat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584227723891923,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"cat /proc/cpuinfo","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c255d6d3-50c8-409b-b14c-eff94be6aac7","sequence":{"long":10338},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f16c988-0723-42be-bbd3-15275d24ad22","sequence":{"long":10339},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1216b056-acb6-45f4-acea-3d6c0e11bf12","sequence":{"long":10340},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d876703b-841b-4f55-b0f3-0ae0929c6d21","sequence":{"long":10341},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbf8d9fc-ead6-47de-a3d3-c7957ea1ab24","sequence":{"long":10342},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a83a10c5-a160-4908-b7bc-4824dfb6f16c","sequence":{"long":10343},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6328a808-a977-4b95-a932-b1bace4dccf0","sequence":{"long":10344},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86b63851-7dda-4c0a-b493-95230566e586","sequence":{"long":10345},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71726492-4235-47bb-b1cd-f453204138b9","sequence":{"long":10346},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"caa1566b-7b79-4e34-98c8-e811b8b82023","sequence":{"long":10347},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26a80269-adfb-4fbc-814f-74eb58e2e9cc","sequence":{"long":10348},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5296a544-b2f5-42db-aa23-afafb8f1d6a4","sequence":{"long":10349},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35c413af-53d5-4d9b-a3a1-526c3a697f8c","sequence":{"long":10350},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c754947-8d02-40c5-9f66-2cec90899786","sequence":{"long":10351},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6581e2d7-14da-4c27-8ff6-3dc0bdc21539","sequence":{"long":10352},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18ef79fa-a2a5-43fb-84c2-639f59d1c676","sequence":{"long":10353},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3db8e8f8-b03d-4365-ace9-df3e246ed56a","sequence":{"long":10354},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b77ac8b6-2dda-41f3-bdba-167864e130cf","sequence":{"long":10355},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ede81153-32b0-4723-80e2-053195598fb2","sequence":{"long":10356},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48d797ee-88e6-4f05-96fc-aa15c78b3804","sequence":{"long":10357},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e4ef532-64d0-4404-8d50-353d2080d39b","sequence":{"long":10358},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff63432b-51c6-47b6-98d0-65ef1c0bd026","sequence":{"long":10359},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5126254d-3a9f-4750-8b9e-104c2b1e2de9","sequence":{"long":10360},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a1a907f-9f15-4790-a669-2dddf3d93220","sequence":{"long":10361},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df67e499-da8d-4f8a-a514-3b7d17ad2fa0","sequence":{"long":10362},"type":"EVENT_EXIT","threadId":{"int":100120},"subject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed474591-467d-11e9-aecf-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07b56112-3062-45a6-a5c2-9950300a305c","sequence":{"long":10363},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":289},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"942d1a4f-aaf3-43dc-97e0-9af0c78123d4","sequence":{"long":10364},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":336},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ed47bd13-467d-11e9-aecf-080027fc76ba","type":"SUBJECT_PROCESS","cid":1496,"parentSubject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584227723891923},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb4ef3c3-b6dd-431b-8c45-cb943ce46cd6","sequence":{"long":10365},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1496","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1496","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6bbb6c8-a011-4ab1-9a72-b77148e495bc","sequence":{"long":10366},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"206c2c7a-d033-4465-8700-0f3120664c5e","sequence":{"long":10367},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"058ea567-6af6-46c0-b4e5-d6fab7dde0dd","sequence":{"long":10368},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afc4ad47-f074-4224-b16a-d329dc094da7","sequence":{"long":10369},"type":"EVENT_EXECUTE","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de3a34c1-0b17-8152-970b-4c2cb281885f"},"predicateObjectPath":{"string":"/bin/cat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584227723891923,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"cat /etc/networks","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e72d00f1-2856-4915-a6a3-9dd2f1695112","sequence":{"long":10370},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"628cf610-b447-44c9-b364-61e98607030f","sequence":{"long":10371},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c73bdc8-bac1-4264-be36-f0f5d81943ad","sequence":{"long":10372},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29876627-ceac-4042-924a-b4ae7fb1fd6e","sequence":{"long":10373},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67822438-a036-4e26-9e4f-8e26d8a72616","sequence":{"long":10374},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de043008-61e0-49ce-b3f2-665c146e7b58","sequence":{"long":10375},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7422b44-db5b-4b74-abe7-ba6cd0992cba","sequence":{"long":10376},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0b8e31e-a95e-4c6b-b7ab-75efe1d7ad79","sequence":{"long":10377},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e252013-2de8-43d0-b3af-0d124afc9af8","sequence":{"long":10378},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a5d0f1e-6362-436b-8ffb-f0ee3c6e3840","sequence":{"long":10379},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"201b89e8-b729-465a-a059-f103de3b81b3","sequence":{"long":10380},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea73f000-d82a-4405-8a07-9f8a0424064d","sequence":{"long":10381},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cc4b0ed-973c-4980-b206-636d9f71dfac","sequence":{"long":10382},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eab8ede2-2445-488f-9fe5-df1b598c3db3","sequence":{"long":10383},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85755d65-dcec-414d-917e-35e4b990ba16","sequence":{"long":10384},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d2f1401-bead-4bdd-a887-ee89fe444f10","sequence":{"long":10385},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c97f5693-154e-47f9-ba74-abd3448baf36","sequence":{"long":10386},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"780163cf-798c-4577-8144-09e21acffd66","sequence":{"long":10387},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56591008-8fbc-4125-b69c-9d7a6f2b67bb","sequence":{"long":10388},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fb07397-261f-4307-8713-97927562ae96","sequence":{"long":10389},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":{"string":"/etc/networks"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97dfd369-666d-4942-b1ea-74227dce6b1a","sequence":{"long":10390},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":310},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6695243d-5158-421a-b7d8-3321bfd2e7e6","sequence":{"long":10391},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":310},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9af70e40-1183-44aa-9d05-c60b405d0721","sequence":{"long":10392},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d77beeae-bcb3-4692-8b20-cdc5a81c22b0","sequence":{"long":10393},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"c21b29ec-2630-1554-b026-2ba75415bafa"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bd05eaf-d6f5-455f-9321-1303897156ff","sequence":{"long":10394},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ae52923-6d25-4484-af95-b20f9d069028","sequence":{"long":10395},"type":"EVENT_EXIT","threadId":{"int":100120},"subject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed47bd13-467d-11e9-aecf-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a6d82c8-58d2-4167-a97a-422c0f712e1e","sequence":{"long":10396},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":256},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfcc9bf8-8e47-4ab6-8f65-aec66a1a90b2","sequence":{"long":10397},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ed482372-467d-11e9-aecf-080027fc76ba","type":"SUBJECT_PROCESS","cid":1497,"parentSubject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584227723891923},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e6672c6-a988-4a63-92c9-be553e4a9699","sequence":{"long":10398},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1497","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1497","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ba29228-a751-40e7-b2cd-5481e13d58c9","sequence":{"long":10399},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"344f6907-165d-48de-bb4e-5ddd4be023b0","sequence":{"long":10400},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0209"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"955231ff-ccd7-4639-8952-95cb271de2bf","sequence":{"long":10401},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df902e34-f99c-4c4b-8a97-aab5a594441b","sequence":{"long":10402},"type":"EVENT_EXECUTE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"542d495d-cfb1-a954-b1cf-f79fd4a9303e"},"predicateObjectPath":{"string":"/bin/ps"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584227723891923,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"ps auxx","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eac50005-514d-4030-9bd1-5887a9961d60","sequence":{"long":10403},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d122d462-8b33-4a9e-86ad-486dc321ae27","sequence":{"long":10404},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6888fab6-434d-4466-99f2-dc3324ae5305","sequence":{"long":10405},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3f20d73-52ad-4507-b161-695a00f298f2","sequence":{"long":10406},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d27d28c9-7da7-4c40-8a9e-3cedeaf2d17f","sequence":{"long":10407},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18938609-f853-4075-9100-11b292ff49ea","sequence":{"long":10408},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"857ecf86-658b-4646-bb72-8ef28bd4a395","sequence":{"long":10409},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"518a90c4-6e04-46e5-9173-7db94529baaa","sequence":{"long":10410},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":{"string":"/lib/libm.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6e74e62-b65a-4700-871c-e039e5ac1b10","sequence":{"long":10411},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a617c479-19a6-4218-9268-e047deab923c","sequence":{"long":10412},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1abcd588-4787-4b1a-b395-c17d7e6b9c8f","sequence":{"long":10413},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddd43a64-fe10-43b7-824f-980bd9069456","sequence":{"long":10414},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7709497d-b6a2-46b6-9cb8-b79a4bf174b4","sequence":{"long":10415},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a09b076a-00e6-4670-9d81-0b83d6668ba6","sequence":{"long":10416},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06d531fc-76f1-49b3-bc7e-f63d79bfaed4","sequence":{"long":10417},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac0fb7b7-071c-46e9-9895-5d31309d5e9f","sequence":{"long":10418},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2621440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c765bc49-9f00-4402-be0a-6e134a0b8809","sequence":{"long":10419},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"158e432d-3ee7-4aa8-b054-6c883fa67bad","sequence":{"long":10420},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":{"string":"/lib/libkvm.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2b503bf-641e-4ad8-bf49-4599d66b0faf","sequence":{"long":10421},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35258cb4-11a2-405d-a246-b66c1e4854c8","sequence":{"long":10422},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"610c6ab4-f50c-4267-9268-7dc6120ed099","sequence":{"long":10423},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"430230e7-bd9f-414d-b495-d50fa04b5a42","sequence":{"long":10424},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2633728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62588fce-4f42-4b07-8626-67f83453b35a","sequence":{"long":10425},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd7955e8-ad98-4ec6-b9b7-7b48c012c704","sequence":{"long":10426},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00315e8f-3707-42b6-aace-c8093a3977b3","sequence":{"long":10427},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2699264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecb49e8e-9b9e-4ac0-bad6-221ac6b1661b","sequence":{"long":10428},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2699264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4be16328-2209-4052-9bdc-5a002f2ac7c3","sequence":{"long":10429},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"fee1ef9b-e913-9457-93e9-db4a97946773"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ec32a5f-df81-4a9e-9fa4-1db05d5f709f","sequence":{"long":10430},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":{"string":"/lib/libjail.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd9f9e53-9fe9-4822-bd72-f8b574f98e20","sequence":{"long":10431},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"579cc06b-cd5b-41e6-a11d-edd0f9563b89","sequence":{"long":10432},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8b4560f-61ad-4245-af93-9e481da1089a","sequence":{"long":10433},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cac66436-4c37-4697-a5d3-abd61d8a8758","sequence":{"long":10434},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3650149-fdd5-480a-8fa8-7c8a291b423c","sequence":{"long":10435},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04518d1d-927d-4218-9061-5b73c7f43fc4","sequence":{"long":10436},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c9db034-e59d-44b1-be99-59038b984f9d","sequence":{"long":10437},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2736128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bf0c933-3299-4b7a-b197-a4feaeea5539","sequence":{"long":10438},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2736128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d08de7f-8d8e-4490-9cc3-07ae186b0f4a","sequence":{"long":10439},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"5d16b826-67a0-1d5b-a067-c36f7b1d84a3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4318e04b-b43e-42c0-a06d-cc2d76adfa17","sequence":{"long":10440},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":{"string":"/lib/libxo.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9926606e-dee6-4aa0-8237-d6fbd06a1f33","sequence":{"long":10441},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"980b39f8-6330-4472-8fe5-22a73bf8fa56","sequence":{"long":10442},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b363502-4493-4011-b436-99ba82368f53","sequence":{"long":10443},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2748416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fb1b797-c249-4a6d-a3b5-1f210e6e0de4","sequence":{"long":10444},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2748416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"580e986c-4638-4801-bc96-3af5d23839d3","sequence":{"long":10445},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2781184},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07438568-83b9-4526-af56-dfd0572da312","sequence":{"long":10446},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2781184},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f415f7d9-6a94-41b3-aee1-9975f65fe9bf","sequence":{"long":10447},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"191afc1a-6272-4d89-a004-a35f7d55d087","sequence":{"long":10448},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2867200},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bae3e69-c9bd-4174-9557-957440782b2e","sequence":{"long":10449},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"41d1fada-b9cb-4e55-8bb9-caec854e4e9c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdd1bca6-07ac-40db-8135-7c235e850ebb","sequence":{"long":10450},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13aba6ad-1876-4de1-bc48-6556e146e92a","sequence":{"long":10451},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a0d3af7-b122-4417-83d4-918ff03e9b99","sequence":{"long":10452},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c493db6-444b-4377-ac85-432a3ab8f0f8","sequence":{"long":10453},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2879488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b752cbcd-817c-475e-a602-53da7d182e52","sequence":{"long":10454},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2879488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5e5906c-76f8-4b61-8d73-1166618c3af2","sequence":{"long":10455},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cf4d969-ee0f-48d9-aa66-bfc281239c51","sequence":{"long":10456},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a313e59-225d-4083-9835-366c0032ef7a","sequence":{"long":10457},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4726784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c39b721d-4dd3-4fe2-bf5c-ee187448459c","sequence":{"long":10458},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4726784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68735c52-f140-43fe-b2af-e26cd2ecbeff","sequence":{"long":10459},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f856fea-9406-49af-b1bb-cec0820f663d","sequence":{"long":10460},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":{"string":"/lib/libelf.so.2"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c39fc164-d161-4cfa-95a4-1c6e393e6ecc","sequence":{"long":10461},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ebb2479-be9d-4da4-b84c-2e0888ae69bc","sequence":{"long":10462},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a1061f1-9953-41df-b259-78d35abad710","sequence":{"long":10463},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7045120},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6230930c-a31f-408b-a8cf-6529d9a35ebc","sequence":{"long":10464},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7045120},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7795d4a9-70c7-474e-bfcf-1d31c68d4d8e","sequence":{"long":10465},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7073792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b35af46-badd-4c39-952c-5658073320bd","sequence":{"long":10466},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7073792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a16866c-0094-4e0b-a0f8-74a7d68e1e6f","sequence":{"long":10467},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7143424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba4cb6f7-3a46-4be2-80e1-418a90188f28","sequence":{"long":10468},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7143424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d868226-efe6-4d71-b854-70ad74627888","sequence":{"long":10469},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"7f31dff6-afc8-9257-88af-4252e792cde7"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e025354a-cf72-46f5-8eab-7a43f67a5213","sequence":{"long":10470},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d0e0c7e-04ee-478c-964b-77a5d7d78339","sequence":{"long":10471},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"258090b0-9662-4e12-b6b4-ce056b284cb8","sequence":{"long":10472},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8145ff8-3fad-4e18-96ea-850d3e2201a6","sequence":{"long":10473},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6a1872a-d80b-4998-aa0c-73860122463d","sequence":{"long":10474},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f10ebb5-dfb6-46a1-a8be-f9ccceb7ff52","sequence":{"long":10475},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7184384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a632aca5-9d4e-4978-babf-55107298b25d","sequence":{"long":10476},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7184384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eaf1f10c-2d85-47da-9f57-fdaa5ca02e84","sequence":{"long":10477},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7229440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82c9fd43-1336-494a-9e9b-e8e5b15db711","sequence":{"long":10478},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7229440},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f458d86-fd14-4954-ab45-0629642b0786","sequence":{"long":10479},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07e4585d-2dde-4e40-8b61-4f233d5ec125","sequence":{"long":10480},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c15e3aef-3a99-48d7-aa50-3e6ebca86be6","sequence":{"long":10481},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa5f4bfd-325c-42dc-b958-edd205398900","sequence":{"long":10482},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb603b12-5fba-420b-99e3-afecba6bb9db","sequence":{"long":10483},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d94cb65-5f6d-4c88-b415-b759e8632208","sequence":{"long":10484},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aed2a774-45f2-422c-9d3f-e7c212c886b1","sequence":{"long":10485},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd0d21bc-6267-4963-b96d-82ca8703caca","sequence":{"long":10486},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227723891923,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d781e79-d938-464e-87c9-af77fa7facf3","sequence":{"long":10487},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed94f899-f369-48e1-a110-31052e59b338","sequence":{"long":10488},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cf5b96c-6330-4014-81e7-fda963d6740e","sequence":{"long":10489},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"4","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f52fbe0-3328-4f50-a30b-81d85860644c","sequence":{"long":10490},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df72102c-77c4-4392-ad63-f20c16cd7ba3","sequence":{"long":10491},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"717a6d99-1978-46ab-8225-ab80f35a4ff1","sequence":{"long":10492},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"389a89f7-02bd-4a06-8231-b07817fad84d","sequence":{"long":10493},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b50bb1e-172e-4625-9577-8decebae8ac9","sequence":{"long":10494},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":{"string":"/etc/pwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca52aabf-3d14-43b9-8b2e-d70aefadb7e7","sequence":{"long":10495},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0038de0-d9e1-4884-8b6e-ae065358b3c7","sequence":{"long":10496},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23fdb07c-6d96-4474-9058-3ee8bfe10695","sequence":{"long":10497},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a1a2d13-1ebb-4e5f-a5ff-83fca434b4d9","sequence":{"long":10498},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/UTC"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83569ab9-97a3-4491-a99e-903a5ea590f9","sequence":{"long":10499},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":118},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5af6de2e-5083-4dd7-87ff-53ab486b6bd9","sequence":{"long":10500},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e76edd5-822a-43d1-b3a2-937eb3a02b3b","sequence":{"long":10501},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/posixrules"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"6100"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"751f5083-d2e9-46d8-a97f-1aaf2d8d66be","sequence":{"long":10502},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":3519},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"452fcb6a-281d-4e6c-beb6-070dea01f427","sequence":{"long":10503},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb6d132b-fd6f-4173-b663-9a2e3f2b0a52","sequence":{"long":10504},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10f6c2ca-6e2b-493f-9c1c-69c62521c4f2","sequence":{"long":10505},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e9a3b79-1102-41f8-befb-d3a3ab40a3b5","sequence":{"long":10506},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f95a3bb8-183d-4af8-bf6e-0fac3ac347c6","sequence":{"long":10507},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3781b503-1282-4d15-971b-2373f8ee0880","sequence":{"long":10508},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f975f04-5f6c-4ce2-83a8-66ee3076626a","sequence":{"long":10509},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"694235d8-35bb-46af-bb2b-63d11b7b671e","sequence":{"long":10510},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4434},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4454fc8-1947-436d-9698-8426d9537ab8","sequence":{"long":10511},"type":"EVENT_EXIT","threadId":{"int":100120},"subject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed482372-467d-11e9-aecf-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"ps"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"426b9bff-4ea2-4721-b889-090aec754fc4","sequence":{"long":10512},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":233},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"ed494a7c-467d-11e9-aed0-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"ed494a7c-467d-11e9-aecf-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"787ca8c0-daec-53de-af78-0257c9209b15","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"ed494a7c-467d-11e9-aecf-080027fc76ba"},"uuid2":{"UUID":"ed494a7c-467d-11e9-aed0-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e551f2a2-28f3-4108-8d1e-bc2adf813f65","sequence":{"long":10513},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"787ca8c0-daec-53de-af78-0257c9209b15"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e26fbf50-3d79-484d-86d9-d85dca85445f","sequence":{"long":10514},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":423},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ed495023-467d-11e9-aed0-080027fc76ba","type":"SUBJECT_PROCESS","cid":1498,"parentSubject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584227733870086},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28183426-3612-4d86-98bb-f9198790a2a0","sequence":{"long":10515},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed495023-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1498","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1498","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ed4956e2-467d-11e9-aed0-080027fc76ba","type":"SUBJECT_PROCESS","cid":1499,"parentSubject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584227733870086},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d95bd51e-187e-48f1-8c56-a1313f252cb8","sequence":{"long":10516},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1499","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1499","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"023aaa86-82e9-4e33-b3d0-0f92d9bb204a","sequence":{"long":10517},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed495023-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fd9646e-a779-4f64-b848-54bc78e990b0","sequence":{"long":10518},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7da8095-142c-4a20-8347-047958e96d30","sequence":{"long":10519},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"3f4e2dec-9008-5a56-8890-4814765aa0ba"},"predicateObjectPath":{"string":"/usr/local/bin/sudo"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584227733870086,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sudo -S ls","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef5ec856-f6c0-4f30-a87c-8f151d204e14","sequence":{"long":10520},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"269cc96d-1c2e-4fa0-85fa-68bb8dd17198","sequence":{"long":10521},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ed495023-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed494a7c-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0904b87-6c31-489d-8815-ab7569d2f5e1","sequence":{"long":10522},"type":"EVENT_EXIT","threadId":{"int":100120},"subject":{"UUID":"ed495023-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed495023-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9689da5-51b8-431e-a57b-43186c1412c5","sequence":{"long":10523},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be36edac-8d78-42d7-a08f-b778d634fadf","sequence":{"long":10524},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44dfdcae-6277-419c-aafd-208635226032","sequence":{"long":10525},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c4a5ac7-4c40-4a6a-9636-9317ff4d5d18","sequence":{"long":10526},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95be23b8-b010-45c9-a31d-d631e0628f77","sequence":{"long":10527},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4777a1d1-a19c-4097-8e77-62003e7d5133","sequence":{"long":10528},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"128f718f-266e-4d53-bd3f-cc66405bfc7c","sequence":{"long":10529},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1be84a51-9460-4bc6-83c1-7ec89ce35cc6","sequence":{"long":10530},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e491672e-fda6-4eae-9bb6-8d8b60622332","sequence":{"long":10531},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8701c4a-98da-4d22-8ae7-8e7451b9e8f9","sequence":{"long":10532},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2510848},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3bfb630-ad05-42cf-9aac-2625354a742a","sequence":{"long":10533},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2510848},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"583692c8-914f-41ef-af4a-9f6b2776afce","sequence":{"long":10534},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f431d67-84cd-4e41-8d0a-cff67a7f11b2","sequence":{"long":10535},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7446be22-bfb0-4715-bb98-ca029164c2d2","sequence":{"long":10536},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2588672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70f31950-3ed5-46c3-b477-5410e0f889b7","sequence":{"long":10537},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2588672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7863b893-c9ab-4f22-a828-f522cd5472e4","sequence":{"long":10538},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a58bdcc8-9488-477d-9531-3ba1d7b22774","sequence":{"long":10539},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":{"string":"/usr/local/libexec/sudo/libsudo_util.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41f42a9c-23bc-4f55-bb28-a9255283f567","sequence":{"long":10540},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abf55c21-6aab-4f3d-96db-b5f0e87a3c75","sequence":{"long":10541},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1da348c1-43b5-46d1-9a0f-d19babe628b4","sequence":{"long":10542},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1f23ca2-5227-462a-bf1a-e86339eae767","sequence":{"long":10543},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6262fb52-fdd0-45e3-98ad-19367efc46fc","sequence":{"long":10544},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2637824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9602438-aa03-4e64-ac5e-d22712cac46f","sequence":{"long":10545},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2637824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ee8bd22-add4-467a-8084-4d69095aca9a","sequence":{"long":10546},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4aa427a4-6f83-481f-941a-a7c05d0d28aa","sequence":{"long":10547},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92f31924-24fd-4907-925c-ce8fee9fbddf","sequence":{"long":10548},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"6318c23c-4c7f-9552-bf4c-2f482295e518"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83a22d93-361c-44d9-88e8-f4e99c896b60","sequence":{"long":10549},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da38f6ff-c25d-43da-ab2c-ece8f44ff1c7","sequence":{"long":10550},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c19b309-77cf-4465-be91-7841a0446150","sequence":{"long":10551},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"596f5da8-4b4f-4596-b60b-dbc31ffe694d","sequence":{"long":10552},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2703360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d887afb-6c2b-4c0a-904a-8f8cced3c4ff","sequence":{"long":10553},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2703360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8993bce2-bf7a-4f14-9574-2b687f2ab1cf","sequence":{"long":10554},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"216549c9-d521-4a79-a26b-e7c6a876b2cf","sequence":{"long":10555},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a079c871-535e-4741-bb4a-20a3b6a929cd","sequence":{"long":10556},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2744320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5f29e5d-4d26-442e-b418-60d3531677a1","sequence":{"long":10557},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2744320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87dab0b8-31c5-45d5-829a-c8b098816a64","sequence":{"long":10558},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6dcd0a2c-8406-41b4-8371-e0af17245d5f","sequence":{"long":10559},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13bd831b-80a9-4ef5-a2d3-b8aa8d68769d","sequence":{"long":10560},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01266dd9-0dde-403d-b496-1b5b3a5e0f7e","sequence":{"long":10561},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2506752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff0b8cea-77f0-4177-9411-932a0ff0b364","sequence":{"long":10562},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2756608},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a21bdfc-3e8a-4355-9685-a5f4fbf43bc6","sequence":{"long":10563},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2756608},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4017b4e2-a881-4bb3-8cb3-24f02b81d1a5","sequence":{"long":10564},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3272704},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7674efd-d338-4f56-9689-ff4bbddc2ea1","sequence":{"long":10565},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3272704},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4f3bbea-0ebd-4a33-bd7b-9c6f983ff8fc","sequence":{"long":10566},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4603904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25e372d9-a072-4377-ac26-4e6e775cb217","sequence":{"long":10567},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4603904},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1358e737-5f5f-4154-be63-32e8cb763a3d","sequence":{"long":10568},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83a4abe9-784a-46aa-bb61-cb2f48697641","sequence":{"long":10569},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e2cd5fb-148a-438b-98f6-e2e03e2b1b3e","sequence":{"long":10570},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d083f0a-29a7-4b1d-b416-93f640feb911","sequence":{"long":10571},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19b97b15-43c2-41fd-a91b-0fc97bf9f12a","sequence":{"long":10572},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cd5bd54-d153-4b49-886b-21a3ab0a039f","sequence":{"long":10573},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d2d3921-12d6-4382-9fcf-36796594f933","sequence":{"long":10574},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33812752-fe0b-4022-9383-a4167423e735","sequence":{"long":10575},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0219817-c3e3-4ba6-ab8c-3e7da9483b4b","sequence":{"long":10576},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0199a71-1906-4dd8-97b0-411ad393d5e9","sequence":{"long":10577},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/UTC"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"357ac1bf-0772-4d79-88b9-0a85cf9db082","sequence":{"long":10578},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":118},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f838644-55ae-4943-9c51-eb85d8796267","sequence":{"long":10579},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"01aaae62-8a03-3b5f-838a-d6569f3b2a48"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f485b1f1-28ef-4be1-9470-400528b5184d","sequence":{"long":10580},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":{"string":"/usr/share/zoneinfo/posixrules"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"6100"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df49ea9c-da59-4fef-9612-292677ac3b81","sequence":{"long":10581},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":3519},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20e7d07c-d097-4295-8a42-79d7c98644a3","sequence":{"long":10582},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"52914756-cb96-445b-96cb-2e502b44f61b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11ae2db1-5c5a-4db7-85e2-fad9782d3a66","sequence":{"long":10583},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e6ee008-b355-4a32-804d-5ae0345d4b53","sequence":{"long":10584},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6773043-d462-48eb-a7af-9edd20e595b5","sequence":{"long":10585},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b804fcdc-3db1-4174-a0ec-6e2cd7321f3f","sequence":{"long":10586},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b125d1d-5ce1-4944-952e-19acb1f11591","sequence":{"long":10587},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bd3a412-2fea-40ba-8157-c750eec29ddc","sequence":{"long":10588},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8ef4fe8-a25d-449a-b60a-93995cebaeef","sequence":{"long":10589},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98288d2e-a67a-4803-95e1-f7c61c842702","sequence":{"long":10590},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79319f95-5398-42d8-96af-8cafef935d5d","sequence":{"long":10591},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"559bd47c-74cc-4d45-bf8e-68d0ae090832","sequence":{"long":10592},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1841ea9-630a-4b2c-8955-b4e7eb0807dd","sequence":{"long":10593},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5132843b-8a40-4b3d-8789-e66cde037213","sequence":{"long":10594},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e135e282-b749-4fff-aa5c-42a3aae25c0c","sequence":{"long":10595},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"058bbe78-e983-4291-a8dd-eda7cf6a3780","sequence":{"long":10596},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0abdcbf7-f75d-467d-8e40-f1d6a7fa8208","sequence":{"long":10597},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dad7288b-37c2-4e6c-b412-29e97420a1a1","sequence":{"long":10598},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7172238-1e43-4622-accc-dac1501ed871","sequence":{"long":10599},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2f9849c-ef14-4c91-b0d5-d5002167315d","sequence":{"long":10600},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e1738a3-c3a6-4935-b22c-c65b280cc675","sequence":{"long":10601},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227733870086,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81b37745-96c3-466f-9ed5-b19d97ba0e8f","sequence":{"long":10602},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":{"string":"/usr/local/libexec/sudo/sudoers.so"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a74fba52-5114-4a83-b844-5bd933a61a6d","sequence":{"long":10603},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9b62fcd-0bd2-41e6-a78c-63c58b28a434","sequence":{"long":10604},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d97c466-85cc-4d7f-b98f-e215fbec0612","sequence":{"long":10605},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7319552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"337c86ea-5e30-4657-ada7-1dfc97618a72","sequence":{"long":10606},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7319552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"939e75dd-3a8b-4d72-81fc-407aa66376f8","sequence":{"long":10607},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7434240},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2304ed5a-f31a-43e9-abe6-8a64725ccba3","sequence":{"long":10608},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7434240},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80f73656-1f65-4413-9bb2-95511f4ee8fb","sequence":{"long":10609},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7647232},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06280806-c61c-433f-8472-8383c6606502","sequence":{"long":10610},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7647232},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abdfd004-e94f-4a2c-b8b3-eddd51303961","sequence":{"long":10611},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"2239233b-9622-735e-a296-89384e73935d"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1312efa9-0946-4488-8b81-61c526c75187","sequence":{"long":10612},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":{"string":"/usr/lib/libbsm.so.3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98232975-f6c0-44bf-a2d8-c0149d172089","sequence":{"long":10613},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8708856-7de2-4042-8f25-83ab23e49e4d","sequence":{"long":10614},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff7b8eff-0a00-431c-8d5d-dba6ca6709c6","sequence":{"long":10615},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7667712},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3200c7ae-8706-441d-94a4-768e112738ba","sequence":{"long":10616},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7667712},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9637311f-c54f-479f-9f4c-36e8e56d7e9e","sequence":{"long":10617},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7708672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cc1f017-07d1-4fb3-b955-5b5a718c117d","sequence":{"long":10618},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7708672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb47b2c8-a126-4d00-a149-c4864b44c79b","sequence":{"long":10619},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7778304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edf5d793-e8ed-455c-8755-ead70200b4ca","sequence":{"long":10620},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7778304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36fe22c1-4fab-40d0-9905-de0d4c45a121","sequence":{"long":10621},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f606e2dc-2d1a-8e54-9a2d-e654148eb90e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41bcb3a2-3e09-4a41-a3d5-1396174bb949","sequence":{"long":10622},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":{"string":"/usr/lib/libpam.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"594cb6a3-0903-4f67-bacb-c883523bb8c0","sequence":{"long":10623},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"246749ce-8ca7-487e-bd67-fe965a4a4bb5","sequence":{"long":10624},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73974643-c7dc-40e4-915b-eb02c471ff9b","sequence":{"long":10625},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7790592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e0b4906-a81e-4ee5-99f6-a56a3e76497c","sequence":{"long":10626},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7790592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb550b65-fd97-4fa3-aeb3-30118c2b6ee5","sequence":{"long":10627},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7815168},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1da572b7-4420-46e8-aecb-2fb214678ee1","sequence":{"long":10628},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7815168},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fc4757b-6500-4fdb-bccf-49aef8001996","sequence":{"long":10629},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7843840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c274b33-11a0-4c18-a44a-7094e0d87c76","sequence":{"long":10630},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7843840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2eb85f3e-1cdc-4bd7-8986-27aee87a2ef6","sequence":{"long":10631},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65de4e55-cbe9-4a8e-9e57-063277c664d3","sequence":{"long":10632},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":{"string":"/lib/libz.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba86528b-7e27-4a9c-9b0e-f8c9bcf31263","sequence":{"long":10633},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89de3676-241b-4e58-a7da-3ebcd33b4251","sequence":{"long":10634},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7315456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f70fe69-0a0c-4c8e-9468-161096aaab6e","sequence":{"long":10635},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7856128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8832dfa-5223-4da3-983b-c62afed13498","sequence":{"long":10636},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7856128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"605c4562-a3c7-4538-9227-2a7c1cc76855","sequence":{"long":10637},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7888896},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a39f3ed9-3ed2-44fa-8f2d-ef659e21848e","sequence":{"long":10638},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7888896},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96abad04-62cc-42c6-9891-6aaac8e16622","sequence":{"long":10639},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7958528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e6cca7e-269c-46da-9ffc-8f0ebd9dccef","sequence":{"long":10640},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7958528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8edd474a-e458-4465-a11c-edbccdb31019","sequence":{"long":10641},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2382752-476a-434c-8f43-a2c603c7e082","sequence":{"long":10642},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec208515-9d39-40d1-9879-84339d877a27","sequence":{"long":10643},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ba72380-512a-4147-baa3-7f7a491a016b","sequence":{"long":10644},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3db5185-7c72-49a8-812d-a407f773f05e","sequence":{"long":10645},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a253367-7a71-4113-8b19-a27dec52443a","sequence":{"long":10646},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"0","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81a06ad4-6521-4de5-96c0-cfa757efefa4","sequence":{"long":10647},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29ff5881-6aaf-436c-9a47-7e8764917610","sequence":{"long":10648},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba6d5c07-8225-46ac-8e23-42b02c8ff0a7","sequence":{"long":10649},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":{"string":"/usr/local/etc/sudoers"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ac025b7-0331-4850-bd9a-9049487b541d","sequence":{"long":10650},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":3678},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f1665b8-c9f3-4abd-bdcd-f45347d85d85","sequence":{"long":10651},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":3678},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc9742ce-eac6-49e1-963c-d84f6f7dc324","sequence":{"long":10652},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae9ab223-ff3c-4c7d-81b2-29ca632348c5","sequence":{"long":10653},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"0","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3080dc0d-84a3-4dfd-ad5e-8df2464528de","sequence":{"long":10654},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"-1","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d6d71a0-183c-4d96-a90f-7dfbb1786912","sequence":{"long":10655},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"0","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b5aca9c-a9b9-43e9-8cdb-97ec14e5bb52","sequence":{"long":10656},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3daeb97-a673-4bee-99fc-6b711b66fd36","sequence":{"long":10657},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"382d9507-c88d-7556-8dc8-bb47e67533c4"},"predicateObjectPath":{"string":"/usr/local/etc/sudoers.d"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00ffff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"442b49ae-fc1b-4fe9-9142-eeaff2e1a557","sequence":{"long":10658},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"382d9507-c88d-7556-8dc8-bb47e67533c4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a583106f-2b20-471b-9ff3-cce15e05ee2f","sequence":{"long":10659},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a64634cf-f4f7-4dce-a079-cf33b5a1a96b","sequence":{"long":10660},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"1003","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"300c0957-adbb-401d-be4f-2246e9799dcc","sequence":{"long":10661},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a59508f-f722-48e2-9de3-8f03ecda7c45","sequence":{"long":10662},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9339163e-9bc0-45bb-a6be-cd83c0c9d6fd","sequence":{"long":10663},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"532d8243-874e-4cbb-ba32-66bb5c76c9e1","sequence":{"long":10664},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5056a5b-4283-4987-8021-f3703e16f3b0","sequence":{"long":10665},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d41395c6-0932-4473-b4c9-baf3791121a6","sequence":{"long":10666},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"539bf18d-517d-4e17-a634-7a78ed38bb3f","sequence":{"long":10667},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e0c40c6-5803-4bb4-ad39-93562cd9b6cf","sequence":{"long":10668},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f29ed27-4846-4fe8-aaa5-fac54407d24b","sequence":{"long":10669},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f150654-790f-49cc-9045-fe20c171a4bc","sequence":{"long":10670},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30e8ab93-ff36-42a5-b0f5-78b51f39618c","sequence":{"long":10671},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"692d49a8-2c39-4ade-a843-ee39c8d94090","sequence":{"long":10672},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5adffd33-15ee-41c5-87cd-0737a115e70b","sequence":{"long":10673},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b62e4a85-899f-466e-a374-d8592dec0254","sequence":{"long":10674},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10002c0e-6d90-45f7-9cbe-b6b9c6b3802f","sequence":{"long":10675},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b9f1800-8d12-416f-bbde-5105e45e9409","sequence":{"long":10676},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb2913f8-b056-4b83-b167-07444549cb5d","sequence":{"long":10677},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc3deae7-b24b-41fd-b907-6c329c1ebd32","sequence":{"long":10678},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":{"string":"/usr/local/etc/pam.d/sudo"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4d49433-e782-4538-b654-446bffae7f3e","sequence":{"long":10679},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":323},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a349184-4796-4a10-850a-b7ec3bc47bc7","sequence":{"long":10680},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":{"string":"/etc/pam.d/system"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1edb521e-95d6-4d56-9381-e02d57297d2e","sequence":{"long":10681},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":648},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e550b66-4857-4d5b-915c-4772ae726980","sequence":{"long":10682},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":{"string":"/usr/lib/pam_opie.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a05668df-3e15-449e-a377-5da0bc57b493","sequence":{"long":10683},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ac16d87-04a1-490c-a622-5c4c504573c7","sequence":{"long":10684},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab9fd4d6-4e19-4f8c-bbf1-3229ecc7c352","sequence":{"long":10685},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"277104ee-8697-4323-8219-aee50efdc669","sequence":{"long":10686},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8204288},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b9a42e2-9edb-4f14-bf2d-d417fed31649","sequence":{"long":10687},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8204288},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46668ee6-7765-4f48-be02-f1f59c0040c9","sequence":{"long":10688},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8208384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91a471a6-9b37-4fdd-a29b-06469fa180f6","sequence":{"long":10689},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8208384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0be7f784-ed3d-4eaf-86c0-8459bc07c90e","sequence":{"long":10690},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8212480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2660ef09-fa24-42bc-b21b-b963df33846e","sequence":{"long":10691},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8212480},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25ca137a-a115-4644-a7ad-97b93f1ae397","sequence":{"long":10692},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3158224a-8c32-4000-b546-5dcc7468d94d","sequence":{"long":10693},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":{"string":"/usr/lib/libopie.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7403df85-b414-4097-8229-015b0f501297","sequence":{"long":10694},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcbb8664-ee58-48fb-bcf0-d06a342e5cbb","sequence":{"long":10695},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27dd8ec8-d94b-4c80-8104-35ae36f417f0","sequence":{"long":10696},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8220672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73101a2c-dba1-4efb-bb39-dc2388989c2f","sequence":{"long":10697},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8220672},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b47e23a6-ab1d-4b45-86ee-2d9b8df76cad","sequence":{"long":10698},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8232960},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3a26f26-90a9-4de5-9601-d78c337786a8","sequence":{"long":10699},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8232960},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28582a45-0196-4e93-837d-d72f193d559b","sequence":{"long":10700},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8249344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"672e0277-34f0-4fc4-a868-046afe5a85fe","sequence":{"long":10701},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8249344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b69ab09-10f2-4bd0-ace2-e7a02a95f197","sequence":{"long":10702},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"731abae6-8f31-c05a-b18f-0bfe5ac06da8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"435da80a-7da1-451f-9aae-1754111b9d9a","sequence":{"long":10703},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":{"string":"/lib/libmd.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"486d2161-b998-4eee-9b70-bef343850e06","sequence":{"long":10704},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da31bea4-6b49-4a99-8ee9-41f24ddfd2ec","sequence":{"long":10705},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2e0d951-c7a2-4470-a276-a571f984ed10","sequence":{"long":10706},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14680064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb51deaa-b2bf-4fbe-8da8-16eb4168c749","sequence":{"long":10707},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14680064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"884dcb76-229f-4411-b5bf-32f392afb068","sequence":{"long":10708},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14712832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3993f3ab-ae40-436b-98b6-15737c8dd69b","sequence":{"long":10709},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14712832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e3b9345-c516-4b81-ae29-deb4813208d8","sequence":{"long":10710},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14794752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ef3f888-18bb-4900-bc85-075e2e55a1f4","sequence":{"long":10711},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14794752},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86263c82-86ba-49ef-9527-24675e1b22c9","sequence":{"long":10712},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"a4d78665-6f27-8a51-a76f-7bf6a18ae91e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3aa16a6-9e6c-4854-a8e5-ef9f8ac43518","sequence":{"long":10713},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a27f810a-853a-421c-b010-4ef4cef6f603","sequence":{"long":10714},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8ea404b-cb45-459a-a084-c5df22c5267d","sequence":{"long":10715},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e45b8ee5-725e-4754-913b-c05f85a3540e","sequence":{"long":10716},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"7acb8e1a-7795-cf54-9577-7bb374cf7993"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05b68630-b1b2-4896-8b17-262e636e7dd2","sequence":{"long":10717},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":{"string":"/usr/lib/pam_opieaccess.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a263887-5fb0-4519-8273-a6d4770e7cba","sequence":{"long":10718},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7f03315-f2cc-493e-bf08-a0afa7e62f78","sequence":{"long":10719},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75ec6c67-0a06-4ac5-b6d9-edb494b78782","sequence":{"long":10720},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"beb4e9e3-2a06-4174-a7e7-30b0f7b9461b","sequence":{"long":10721},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8269824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c73150c3-f61b-4507-8502-37dbda84ae5c","sequence":{"long":10722},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8269824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b26024c-e86c-4716-89df-cb07675d76f3","sequence":{"long":10723},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8273920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e99f430c-c4f0-4551-99a8-7900152410d7","sequence":{"long":10724},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8273920},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6584b00b-bfcd-4f9f-82fe-7f006834a883","sequence":{"long":10725},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8278016},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef69d78c-9b84-47fa-b283-63c559e07f9d","sequence":{"long":10726},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8278016},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"948adb82-659e-4084-a3ac-b587edcf8f32","sequence":{"long":10727},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f0826ae-296f-4ec2-b662-4580f16d33a2","sequence":{"long":10728},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"429e7961-258b-4f94-96f0-984e06d94022","sequence":{"long":10729},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"4c76078b-0d74-bd50-b40d-548bf0bdcf31"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2919369e-8775-4220-904a-ee4108a5b5b5","sequence":{"long":10730},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2858e2bc-eff8-42cc-9d56-3ba7c4cfe269","sequence":{"long":10731},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c7dab13-cad3-4512-a858-8ef0b6eea16b","sequence":{"long":10732},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc6045a2-c7fc-4d84-8384-50a520a1a912","sequence":{"long":10733},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7589a605-3ea5-4b01-be76-942219ce6774","sequence":{"long":10734},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8286208},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4204d0b-2d23-4766-8348-af6f708695f8","sequence":{"long":10735},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8286208},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bc469c1-6c12-46bf-a47f-0f63ab5657ca","sequence":{"long":10736},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8294400},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f3a319e-ac4f-4bb6-9022-d47a0b48e686","sequence":{"long":10737},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8294400},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fc4e4cc-4978-4835-8de9-de8c959bcbe5","sequence":{"long":10738},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8302592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"820097e9-9bdd-48fe-9a31-20350f4c07b6","sequence":{"long":10739},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8302592},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a55a980-eebd-4a43-a380-b60c6cb2a8ba","sequence":{"long":10740},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0db1449d-c48e-40a0-af9a-770b881170b3","sequence":{"long":10741},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":{"string":"/lib/libcrypt.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cdc62f8-cfca-4cc1-92f0-fadd1f615a6a","sequence":{"long":10742},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"904078b4-dd9a-44a8-b2b2-d0e18a303d08","sequence":{"long":10743},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c2b0e5e-7c27-43bf-a12c-d40c5b33da4c","sequence":{"long":10744},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14938112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f25025e0-bd6f-4030-98f8-31d5660d9a89","sequence":{"long":10745},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14938112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1e7cc44-ac18-424f-b5af-2de7f24ae3df","sequence":{"long":10746},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14954496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60649d60-9ef0-4deb-879b-bd2b8483046c","sequence":{"long":10747},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14954496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9baa0ed-a067-472a-b4f5-113ec2f61c2e","sequence":{"long":10748},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14995456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a33b3023-68a6-475e-8f2d-d3c165254053","sequence":{"long":10749},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":14995456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98dbdc94-6077-425c-90af-84fcf764bc20","sequence":{"long":10750},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"361927fc-6969-1555-a969-68fff515170e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d11475c-c2f0-4b00-b786-041d993a6193","sequence":{"long":10751},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":{"string":"/usr/lib/libypclnt.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24ddf421-aa18-475e-868c-d8ade9565ca3","sequence":{"long":10752},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0f87e05-46f7-4f31-ad1f-d5b34490dfa5","sequence":{"long":10753},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3564632e-9a84-4c30-8095-37020f0e0abf","sequence":{"long":10754},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8310784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ce6047f-9484-493f-868c-7f3f92941275","sequence":{"long":10755},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8310784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df25299e-2585-4f5f-bfac-3171ff773318","sequence":{"long":10756},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8323072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"678eb54f-8a29-4c96-bbf4-f46e9fe110c4","sequence":{"long":10757},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8323072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ae1a1c4-3e8d-48c1-b4e4-665f9facb456","sequence":{"long":10758},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8331264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3fac431-855e-4b11-83b5-f7666ef26cfd","sequence":{"long":10759},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8331264},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcaa3765-510c-4d3d-b05f-ab9d74a3c35c","sequence":{"long":10760},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"18eb50ef-3995-7f5e-9539-43795e7f5284"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8763ed2-c410-4861-a4a3-92f0f40e0f56","sequence":{"long":10761},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a462b3d7-45dc-4512-8dd6-2b5a375f3f60","sequence":{"long":10762},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e36af9b6-d872-43b7-93b6-068b029763a9","sequence":{"long":10763},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adeb65b1-ffef-4af6-ba7c-bd065d120f50","sequence":{"long":10764},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f95b2899-c042-4a3f-aa30-92b8c47cc0ee","sequence":{"long":10765},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"166176e8-40e9-45f7-845f-0c7250347ec8","sequence":{"long":10766},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba93f77c-7922-426c-9f01-04970bdcf579","sequence":{"long":10767},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":{"string":"/etc/pam.d/system"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d85aca4-0fd9-4d94-b358-4558272c80fa","sequence":{"long":10768},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":648},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"269eec98-258b-4d91-b148-b510fdc9b060","sequence":{"long":10769},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":{"string":"/usr/lib/pam_login_access.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36264d96-5a99-4225-9b5c-a386c434a8ca","sequence":{"long":10770},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c890a96d-e8f1-41f7-ab2f-2081b239d455","sequence":{"long":10771},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24af1ee7-678e-4ec9-b093-be3dc88ad022","sequence":{"long":10772},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74146f74-9c23-4d20-bd83-740f39aa4ca6","sequence":{"long":10773},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8343552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69133b48-c186-46ca-871d-c600f06b4c28","sequence":{"long":10774},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8343552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50a1f48c-c676-44cf-9ffc-6499cafe29d8","sequence":{"long":10775},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8347648},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ce7cda3-0150-4270-82d4-baf8243e95aa","sequence":{"long":10776},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8347648},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bf84051-ba30-421b-af70-964150362cac","sequence":{"long":10777},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8351744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6dddb489-1ea3-4273-aa81-5657208e50af","sequence":{"long":10778},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8351744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da38e9ab-7b8f-46a6-a493-7e9b121cc987","sequence":{"long":10779},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b700466-153e-4791-a087-78a725266361","sequence":{"long":10780},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8dc57c00-eedc-4595-83c4-8a4676e1b2fa","sequence":{"long":10781},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"3c3bd098-e401-ae51-81e4-136b51aedffb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5aa75338-9ac2-4b73-ac85-d86a2e18e16a","sequence":{"long":10782},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5baf3f52-7156-4c5a-8806-daa7476f5c1e","sequence":{"long":10783},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f05fd5b5-2427-4c0d-b17c-a2193c961a65","sequence":{"long":10784},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffd1dd73-bbec-433f-8bd5-6ed3cb8071fb","sequence":{"long":10785},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f244f62a-9bab-4e58-96e0-34ece8ca7fcd","sequence":{"long":10786},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8359936},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a52c7776-51d7-47ad-9a70-3787313d65cc","sequence":{"long":10787},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8359936},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c422586-db27-49ca-9f0c-8d14a8092b1c","sequence":{"long":10788},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8368128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4103d84e-81fc-42fe-97d7-3fadd419b936","sequence":{"long":10789},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8368128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6b90fc1-b97d-425d-9734-03ed96cc1774","sequence":{"long":10790},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8376320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61f58e47-f98b-49cc-9e7c-f95b28a5bf80","sequence":{"long":10791},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8376320},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"583a3ebd-cb62-4838-9858-2a0c664e05af","sequence":{"long":10792},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2174bb42-c79a-4aab-83d6-bbb5ee027dc2","sequence":{"long":10793},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cba5b83d-3d0c-495f-af2a-ac9df1507454","sequence":{"long":10794},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d78083fa-3214-4009-9a39-a5e43ec2fe80","sequence":{"long":10795},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a781660f-36a2-488e-8857-586ea55b880b","sequence":{"long":10796},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecfca691-e427-44c8-8de7-f9935a5fe0e4","sequence":{"long":10797},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":{"string":"/usr/lib/pam_permit.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"6","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee3ec174-0c0b-4ebf-8a73-b8216770ce3f","sequence":{"long":10798},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc602aa2-1f6a-4715-b37b-ac9f5683f3a6","sequence":{"long":10799},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b488327f-3235-464d-ab1a-de9ecf9d3e02","sequence":{"long":10800},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3e7c22c-dacd-412d-93e3-e281d000154a","sequence":{"long":10801},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15077376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70d2c900-bc5d-4b9a-93b3-8459d89d5db5","sequence":{"long":10802},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15077376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c2c213a-b247-4431-b160-a4340f1402a0","sequence":{"long":10803},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15081472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7161416-6ec3-4da8-9a4d-17e73b4f4a27","sequence":{"long":10804},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15081472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"178576f8-3b84-46f7-997c-38c4bed651f0","sequence":{"long":10805},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15085568},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0fc3dfc-7a6d-4be8-b7fb-62054c439e88","sequence":{"long":10806},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15085568},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a47ff3d5-e83c-43c7-b905-23c3bf37a1af","sequence":{"long":10807},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab268e82-98a7-449c-9334-4bf8d75dcc5d","sequence":{"long":10808},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff43f9d9-2175-488e-bdec-1a82050b6b22","sequence":{"long":10809},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"b1857442-6384-095d-8463-a0938d09e3b4"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6e444e1-7bc2-4bb2-a17d-92f8c23f872c","sequence":{"long":10810},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":{"string":"/etc/pam.d/system"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7d09b0f-d067-457a-9d97-f6a45395f55e","sequence":{"long":10811},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":648},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b745f238-f101-40ea-a66e-4497395579aa","sequence":{"long":10812},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":{"string":"/usr/lib/pam_unix.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8e0b697-a850-443a-9ea1-7ce694ae5b6c","sequence":{"long":10813},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"11"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fac17db6-080e-44bb-9c86-cf32d48a6ede","sequence":{"long":10814},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aacb37aa-c5b3-4783-9367-d6976ed28391","sequence":{"long":10815},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":8200192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4d9b848-0391-4dd4-9027-e40eed3b612d","sequence":{"long":10816},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15093760},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3895b7a5-215b-46ef-a426-dbea2e56c99f","sequence":{"long":10817},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15093760},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34aa871b-e619-4397-9643-2d73b8f06d40","sequence":{"long":10818},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15101952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c635663-a20d-43e7-a25e-949dffe8382d","sequence":{"long":10819},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15101952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ef73ce7-f26d-433c-8e9d-a016cab514b9","sequence":{"long":10820},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15110144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7222690f-1fd4-483d-8bbc-52c5f9aab5b1","sequence":{"long":10821},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227743896003,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":15110144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5a071ae-5f3e-460d-81b0-a5ff3ff32375","sequence":{"long":10822},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdc56f15-9452-4329-adb1-e90d09b1a051","sequence":{"long":10823},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9d4dd01-3dc6-488e-8577-9c533658de28","sequence":{"long":10824},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"bd4f3750-1951-5c56-9119-d1a4d65c8c52"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba95a19b-5e63-4d7b-b48b-0ba9524c8757","sequence":{"long":10825},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7445b7e5-c85e-4102-b247-e5fb11efdcda","sequence":{"long":10826},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"c08b1e6b-42bc-d15e-bc42-1a3c2ed1eb2c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1e33ec1-0153-434a-96df-b41dab2849c7","sequence":{"long":10827},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f6aaa55-dac1-4484-8d2d-139eca5150ce","sequence":{"long":10828},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"48de70ac-ab23-ae52-a3ab-f629e2ae3418"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"659e1927-456e-4506-87f2-846b71d2151d","sequence":{"long":10829},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":{"string":"/etc/login.access"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5fb2b28-5d26-4ad8-9cb6-cbfc05885ceb","sequence":{"long":10830},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1785},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4003fafe-9928-4db5-9e83-0b63bf9f0eb7","sequence":{"long":10831},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b16db130-815b-4c40-b7ef-96fc3f90707b","sequence":{"long":10832},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"d38a73f1-9f17-6458-979f-93bf586467d6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"826e0341-cf54-43b6-8c25-b66902571c32","sequence":{"long":10833},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46667645-dede-4e8a-867c-1aa2787c93f8","sequence":{"long":10834},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a59cb14a-2198-46de-ab6d-06c8f899fe48","sequence":{"long":10835},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"392a68f5-7ada-408c-bec9-44183de8269d","sequence":{"long":10836},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb805e75-7afd-40af-870f-20f5d5adac45","sequence":{"long":10837},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":{"string":"/etc/ttys"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c31568e-bbef-4461-905e-3af075a0162d","sequence":{"long":10838},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2086},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97a99138-c600-4d09-a62a-2f9f75d78797","sequence":{"long":10839},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0e0a3e0-adeb-41fd-b4de-ead652655fad","sequence":{"long":10840},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f92e526d-6218-7d5b-9862-69e68b7d7dcf"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87bf0b80-ea02-45db-b8a9-eef6b803222b","sequence":{"long":10841},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"0","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b5435c8-0d98-469d-93f0-e1e47a1c0e40","sequence":{"long":10842},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ed4c3241-467d-11e9-aed0-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9eea91b-b0f7-403f-9989-c39172d5ba3d","sequence":{"long":10843},"type":"EVENT_CONNECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4c3241-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1491","address":"/var/run/logpriv","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de520742-658a-4178-a2dd-3e71ede97776","sequence":{"long":10844},"type":"EVENT_SENDTO","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4c3241-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":164},"programPoint":null,"properties":{"map":{"ret_msgid":"16956","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4685d1c-880e-43b2-8715-f254f0b39587","sequence":{"long":10845},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":164},"programPoint":null,"properties":{"map":{"ret_msgid":"16956","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff5d080b-b75b-4365-aafe-44dc0c9dc898","sequence":{"long":10846},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"aafb7a4a-d952-865d-92d9-3ff2ed86d364"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":140},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"16","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2386f63-7716-4eb3-b8db-41639220dfd0","sequence":{"long":10847},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4c3241-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77368f57-a081-4b6c-86d5-01f6e5b4614b","sequence":{"long":10848},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1003","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a0b964e-d28e-4236-a2bd-5491bba2c21d","sequence":{"long":10849},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"1003","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd877ffb-37f4-4fd7-940c-56862585a7b1","sequence":{"long":10850},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"06078de3-2eda-d757-9a2e-abc657d728cd"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df8485e4-37dc-449d-a334-ff5ec1ef5d1b","sequence":{"long":10851},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":{"string":"/etc/security/audit_event"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9fd9cb2-5a0f-4c63-b2d2-0af535998268","sequence":{"long":10852},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":27878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"543a976f-ed9e-4779-b0d8-2e7b038b3fd5","sequence":{"long":10853},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":{"string":"/etc/security/audit_class"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77f4931d-098b-43e4-88df-4f9d948af69f","sequence":{"long":10854},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce7d3d51-667e-403e-8e11-3c361aaa6b1f","sequence":{"long":10855},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6de2aeb8-ae7b-4f51-a506-bcd2cedcfb4b","sequence":{"long":10856},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3150973c-14d9-45f7-ad43-79d38e8beae4","sequence":{"long":10857},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"520a14e0-e51a-45f0-8407-20c17950ed05","sequence":{"long":10858},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69916de6-2df6-4de1-9c03-d9b51d8af3d6","sequence":{"long":10859},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ca344bb-82df-4321-b4c1-623ca2dd957b","sequence":{"long":10860},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30102cdd-e2ce-4032-adba-b73fa1344c5e","sequence":{"long":10861},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aae7f596-00e8-443b-96dd-c9521ada4071","sequence":{"long":10862},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14059e82-0a0c-49cd-8da4-1bcf8cd75d87","sequence":{"long":10863},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":27878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"222ce4e6-4a55-4e5d-85c8-d6ede48ef818","sequence":{"long":10864},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0df3ac7f-d4bb-4a10-b822-99ac0dfea262","sequence":{"long":10865},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":27878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94a4ba59-0e91-4f99-b946-d04d2743f2fd","sequence":{"long":10866},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f4fd9f3-84df-4e85-871f-83526193047f","sequence":{"long":10867},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b6928da-de1a-4ae9-b019-0b27b97b202e","sequence":{"long":10868},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"068e3010-0134-4a27-a5ad-0e9ed468946d","sequence":{"long":10869},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed5e4212-a7f4-4e17-82e2-2cd35d97c88a","sequence":{"long":10870},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c65784c8-7588-46d4-a1dd-015262c8fca5","sequence":{"long":10871},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":560},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6307dfca-42e0-480e-9adc-fe63a5ec295d","sequence":{"long":10872},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fd9ab74-27c9-4642-bae5-f109249e6a4b","sequence":{"long":10873},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_setresgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"sgid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"-1","arg_rgid":"-1","arg_sgid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abfcd5a4-ce8e-495f-a05c-46c7619af20e","sequence":{"long":10874},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"ff"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"-1","arg_ruid":"-1","arg_suid":"-1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"172b7a3c-a301-4d99-af72-6e6c999b48db","sequence":{"long":10875},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79661b12-6e5a-445a-826f-1fe7986feb4e","sequence":{"long":10876},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"63","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e909f36d-7e85-49dd-9554-9ff4cd589109","sequence":{"long":10877},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_setuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ed48b07-ad90-48a3-9e48-e078b6914176","sequence":{"long":10878},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_setgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_gid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"ed4cd450-467d-11e9-aed0-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"ed4cd44f-467d-11e9-aed0-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"6a634548-b595-5f72-b946-8182cbb8f065","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"ed4cd44f-467d-11e9-aed0-080027fc76ba"},"uuid2":{"UUID":"ed4cd450-467d-11e9-aed0-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5894a087-5273-4bb9-a981-01773e3c9ca3","sequence":{"long":10879},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"6a634548-b595-5f72-b946-8182cbb8f065"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","ret_fd2":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ed4cda3e-467d-11e9-aed0-080027fc76ba","type":"SUBJECT_PROCESS","cid":1500,"parentSubject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":1552584227754893579},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96b520fb-7f4d-44b1-b421-93b94b0fe2b0","sequence":{"long":10880},"type":"EVENT_FORK","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1500","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1500","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"ed4d0745-467d-11e9-aed0-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"ed4d0744-467d-11e9-aed0-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"e198e712-f679-555d-ae50-2faafb3927e2","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"ed4d0744-467d-11e9-aed0-080027fc76ba"},"uuid2":{"UUID":"ed4d0745-467d-11e9-aed0-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74a444b1-b595-47f0-9844-884860be900e","sequence":{"long":10881},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"e198e712-f679-555d-ae50-2faafb3927e2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","ret_fd2":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f2aad14-9e5b-4c49-acc3-74c5a758a154","sequence":{"long":10882},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1499","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf88b8f8-7407-48ae-8fe1-07ae28ca2a8e","sequence":{"long":10883},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_setresuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"suid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"0","arg_ruid":"0","arg_suid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1499","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcc96196-1bb3-46de-bbbc-24bfa8431c0b","sequence":{"long":10884},"type":"EVENT_FCNTL","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"1","ppid":"1499","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8d6835e-e9ec-48c5-9ba1-6d276b3e3105","sequence":{"long":10885},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1499","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4efa1e8e-78c4-4ca9-ad13-91b70694c187","sequence":{"long":10886},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"914fe8b4-bc73-3e57-b3bc-41d1373eed3c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1499","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0705d246-47be-4cbf-9e7d-269bafc715ab","sequence":{"long":10887},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de49b29f-2171-c15f-b121-40390fc15206"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1499","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"595d20d5-99d3-4fdd-9905-5cb080d996cf","sequence":{"long":10888},"type":"EVENT_FCNTL","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1499","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"313ade80-a1aa-431b-aa57-58fe64bb8a49","sequence":{"long":10889},"type":"EVENT_EXECUTE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4cd450-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":{"string":"/bin/ls"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584227754893579,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"ls","ppid":"1499","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b74ceaf-e117-4ec0-84a9-ae6a7f855987","sequence":{"long":10890},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4cd44f-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6acd4580-a5c1-4c46-bd26-a6737504c04d","sequence":{"long":10891},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4cd44f-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae6108b5-e9bb-4936-a7c5-4507a4dada33","sequence":{"long":10892},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6140258e-8f4d-44c3-b113-3b1005bc357a","sequence":{"long":10893},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27ce57e9-e22a-439a-b8be-2eb574b2a5b5","sequence":{"long":10894},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ce0800c-ebfb-4ac7-a640-01bc1e2e8b45","sequence":{"long":10895},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25e13bf3-a20e-49e6-9aad-36dbcef9b365","sequence":{"long":10896},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d96ca85-49ee-480a-ab7b-801c27c3778c","sequence":{"long":10897},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5ceec8b-d1d3-4ecb-b961-bff278d1e009","sequence":{"long":10898},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e6896ab-9bc5-4033-a9dc-fa6c83218f81","sequence":{"long":10899},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b48eadc4-227f-441f-8f41-8f2c43814c84","sequence":{"long":10900},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1296c110-ac33-4a67-ade1-805e5074616b","sequence":{"long":10901},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff7bd2fa-fe13-4e1b-b48b-6f904dcda2a7","sequence":{"long":10902},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2420736},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a4d299b-b6f5-413a-a1a4-09f9e2183e56","sequence":{"long":10903},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2420736},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a343b79-70e7-414c-b613-04b133547caf","sequence":{"long":10904},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2453504},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"984432ae-0907-401b-b0fd-c880f68b38da","sequence":{"long":10905},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2453504},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6e769cc-3b90-46c3-b92e-9f451eb11062","sequence":{"long":10906},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"553ca6e5-9bd9-423e-a28a-dceeb8ac2287","sequence":{"long":10907},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"459d8dde-388b-479c-b56f-72333363035d","sequence":{"long":10908},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f719376f-1ae7-4ab8-aed9-73e5ca794763","sequence":{"long":10909},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":{"string":"/lib/libncursesw.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6f6e39a-19c9-497d-b3b8-1f756dffe9b7","sequence":{"long":10910},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c1ed0d1-57d8-48d5-9e80-e20113fd5a75","sequence":{"long":10911},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e4963ed-c33e-42a4-a486-a2afb4607877","sequence":{"long":10912},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2514944},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6585d7a-4c95-41a9-9ce1-07dcf446bf8c","sequence":{"long":10913},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2514944},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"471b41a2-e70d-4988-8b3e-7d6a7e633e39","sequence":{"long":10914},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2682880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1262a093-e661-42a0-b1b5-af8796d5a747","sequence":{"long":10915},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2682880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0682461-9682-4938-a189-5f06504215b4","sequence":{"long":10916},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2887680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28001550-e016-4625-bcf3-dacfcfb7201e","sequence":{"long":10917},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2887680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f868f313-c124-4c9a-aa7a-e3228837c439","sequence":{"long":10918},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e73839c-f069-4c86-9728-4ddb80cf18c0","sequence":{"long":10919},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fc3d8b4-a7ef-4075-aba6-3e10d7b992ea","sequence":{"long":10920},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83ba076c-8db6-483a-a2d3-b1b9d61d9035","sequence":{"long":10921},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2a74f71-77d1-4cb8-9c18-9fba67416382","sequence":{"long":10922},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8306d41c-0666-4d44-b4cc-4a066169149d","sequence":{"long":10923},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2912256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8594973-daa5-4fed-87bf-b83ddc39cbfb","sequence":{"long":10924},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e769175c-a2b9-4ad5-bf06-7486526f60a6","sequence":{"long":10925},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3428352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3cec8fa-fa1a-47d4-9870-869ac829d2f3","sequence":{"long":10926},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8c1b492-7264-4b55-af09-42b29f989973","sequence":{"long":10927},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4759552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"233fc2b0-3f00-4417-88b8-11bdaa22c4fd","sequence":{"long":10928},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"584d8e5a-f115-473f-a3fd-fae66cb3840c","sequence":{"long":10929},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17bb5adc-5ff9-4d46-83e7-b990f3643330","sequence":{"long":10930},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d92141b2-8a44-4701-8c7c-7ab6d0e5c169","sequence":{"long":10931},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227754893579,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79b36158-850a-454b-93d7-4e96bfbf70b6","sequence":{"long":10932},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6de50c9-5f58-4551-97fa-3eef257bb65d","sequence":{"long":10933},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6b3a353-bec4-4d53-8829-632395b6078a","sequence":{"long":10934},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_fchdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49aeed02-8e51-4f4a-b59a-0da9c4f509d8","sequence":{"long":10935},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"601af478-e050-47f4-981a-5dcd5fbfecd3","sequence":{"long":10936},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa9d661f-5b75-4b00-997b-33645c389ec4","sequence":{"long":10937},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0377767-300f-4503-abc3-d39a4ab8700f","sequence":{"long":10938},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_fchdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1211e9bf-be35-40e9-a5bc-2740af3b5557","sequence":{"long":10939},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"718d7e2d-22c9-45dc-8681-447fad68a924","sequence":{"long":10940},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":119},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3aa834f-7856-4161-8771-9e675b94e888","sequence":{"long":10941},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":107},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"009d8a10-1954-4286-933d-2b4b95e49898","sequence":{"long":10942},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":103},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61d4df25-0c8d-481a-9c66-09bc30d005da","sequence":{"long":10943},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed8b1c11-fef5-4b83-b57e-ff5bd10efb6c","sequence":{"long":10944},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":104},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8454e08a-43f8-4bd6-bf63-26a60a6c5fd1","sequence":{"long":10945},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":94},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e69029a-aa88-4877-999e-5ff029b81b27","sequence":{"long":10946},"type":"EVENT_EXIT","threadId":{"int":100120},"subject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4cda3e-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1499","exec":"ls"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d53d1a52-feff-4991-b166-fffe1d94e87f","sequence":{"long":10947},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4d0745-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0791da00-344b-459a-a3a9-4a487018c49d","sequence":{"long":10948},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4d0744-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9068283c-caf7-43f5-b2d3-7cf1df4783f4","sequence":{"long":10949},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4d0744-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"769749a9-bfe2-43d4-ae09-85c6013a05af","sequence":{"long":10950},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4d0745-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1dfca82-c506-437c-92a9-e930ffdac8a9","sequence":{"long":10951},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4956e2-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sudo"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9bbd3f8-61b2-42ca-b0d1-968343050fde","sequence":{"long":10952},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":169},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7189b23c-d2c6-4452-9c50-e67e1c88d428","sequence":{"long":10953},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbe5f58b-4b89-4dcb-ba21-6e935406a931","sequence":{"long":10954},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":489},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ed4e1828-467d-11e9-aed0-080027fc76ba","type":"SUBJECT_PROCESS","cid":1501,"parentSubject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584227764730935},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b03dd90-f82d-4de8-9e9f-ddf201961eb8","sequence":{"long":10955},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1501","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1501","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46ba7ebf-1903-4435-afb5-155fd0cf74a8","sequence":{"long":10956},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":103},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"214c74ab-1456-4658-a88a-d7968c2bf18e","sequence":{"long":10957},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa3fb1c0-51ea-4d87-9391-e8a0bc92d00f","sequence":{"long":10958},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f2f2f9c-a250-47a9-84e3-999d568a3989","sequence":{"long":10959},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87e3cc89-5bcf-4701-a05c-f2a596eb140f","sequence":{"long":10960},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b19ce825-0a8e-4ac4-b56a-4b757a540bf4","sequence":{"long":10961},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"e7451145-d4d2-9753-92d4-25f153976db4"},"predicateObjectPath":{"string":"/usr/bin/nc"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584227764730935,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"nc -l 54321","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2ba5f1d-49e6-4416-95c0-f63db44fa543","sequence":{"long":10962},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0e0b80e-c4ff-4b6c-8383-0be4d6bdd89a","sequence":{"long":10963},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":508},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ed4e6160-467d-11e9-aed0-080027fc76ba","type":"SUBJECT_PROCESS","cid":1502,"parentSubject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584227764730935},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6d57214-9cb8-4573-a1cd-3e94d3a8ce5e","sequence":{"long":10964},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1502","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1502","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75b997b2-5ac8-4895-99dc-ba813790eca1","sequence":{"long":10965},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c08dd7c-2363-4a46-9dcc-36423f13218c","sequence":{"long":10966},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c129fbe7-4353-4f69-bad7-1c62b2c088e8","sequence":{"long":10967},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4892ca69-bf56-44c4-b48c-f72beafad581","sequence":{"long":10968},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0818a085-3103-4cb1-aa1a-5af7c21b6753","sequence":{"long":10969},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c518694a-f735-4a39-bd3c-68d588b358fc","sequence":{"long":10970},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"899148c8-faab-444a-958a-1613937728f7","sequence":{"long":10971},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":{"string":"/lib/libipsec.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"670fc788-87f8-4341-9b1c-dcff86faea8c","sequence":{"long":10972},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1f65e1b-4f00-4d63-b163-650b31236cc1","sequence":{"long":10973},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dba25e54-e735-4510-b619-ee79d7b2d5e6","sequence":{"long":10974},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ad19496-d7bd-4029-80ee-13ddfcabee1e","sequence":{"long":10975},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fab8e77f-8cf3-4e97-a152-904dea95e447","sequence":{"long":10976},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32c1fce7-b414-48cc-8c34-7dff7425aa8a","sequence":{"long":10977},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62c2996b-68d3-474d-9135-38f5cab7ce49","sequence":{"long":10978},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2449408},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e30adb87-0420-4a13-91c5-ae5d521e22c8","sequence":{"long":10979},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2449408},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3769d615-8d55-485c-914c-e0b8d5a3695b","sequence":{"long":10980},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81e34754-d99d-4c6a-891c-25de3f2b5ac2","sequence":{"long":10981},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bce812ca-8db3-46e3-b177-9ddded4a3860","sequence":{"long":10982},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9feb8d32-2b9d-4bbc-ba1d-de1b0982177f","sequence":{"long":10983},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c73e9fa-ede6-4ce0-812f-b721e81951a0","sequence":{"long":10984},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2461696},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b60d986a-d043-4e95-b709-f28454ad9e9d","sequence":{"long":10985},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2461696},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2478dd05-6fb8-4e19-9773-a4cb68e38e0d","sequence":{"long":10986},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2977792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03276bae-caa5-4a00-863e-62f55513d31d","sequence":{"long":10987},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2977792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3bf9d49-7f57-4427-9cf9-6a23793eed2d","sequence":{"long":10988},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4308992},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eeab5dd9-5c3c-45a2-9f54-4faf3caf5f06","sequence":{"long":10989},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4308992},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f5f7d40-0938-4510-86c6-c7a3699055d2","sequence":{"long":10990},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35ca9e58-af71-428e-8294-2253234be327","sequence":{"long":10991},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed91267c-d868-400f-a17b-be38460d6a01","sequence":{"long":10992},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"283c0657-333f-48cc-8c71-dd9df2341264","sequence":{"long":10993},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c0e89d6-df71-46bf-8275-861d1fc196e4","sequence":{"long":10994},"type":"EVENT_EXECUTE","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584227764730935,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35acb630-ede7-43c8-a669-a9c822e07ac7","sequence":{"long":10995},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"306badb7-a4a4-4221-bf85-e5f95f7e406f","sequence":{"long":10996},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ed4ed62e-467d-11e9-aed0-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2799dab7-727b-40d7-8cb6-904f3a3b94db","sequence":{"long":10997},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4ed62e-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"ed4edb36-467d-11e9-aed0-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0ba60ec-68bd-48f4-8aa9-55732364b378","sequence":{"long":10998},"type":"EVENT_BIND","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4edb36-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_bind"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","address":"0.0.0.0","port":"54321","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"349e0068-c3b9-4597-af79-c19b05e8f144","sequence":{"long":10999},"type":"EVENT_OTHER","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4edb36-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_listen"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef9b046c-7825-4569-8e4a-a388a12c1f81","sequence":{"long":11000},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ce9fbe8-0c36-4192-8f5f-f018de0c260a","sequence":{"long":11001},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227764730935,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e6c1db8-2576-4dfe-aae3-c21f9e71c25c","sequence":{"long":11002},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42c7c027-7494-4d2b-9188-79c8acd64c18","sequence":{"long":11003},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4968e8b-409d-46f3-ba69-75b5420df816","sequence":{"long":11004},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"181d6e02-2160-491c-bd31-cacfc59b0df2","sequence":{"long":11005},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79056793-61ee-456c-824f-984c703cd9c7","sequence":{"long":11006},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e7d51c7-5066-465f-82b1-12efb568d3a1","sequence":{"long":11007},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a9687df-532f-4b2f-9414-97e31e271f32","sequence":{"long":11008},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3001e054-debe-442a-a08a-c890c0ea463b","sequence":{"long":11009},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4bd0d99-862a-480b-912b-2335c4e9844a","sequence":{"long":11010},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c280285-3600-4571-b03d-c2d00aa1fd8b","sequence":{"long":11011},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"465171c9-04ab-46f9-880f-cba8ea94f5ab","sequence":{"long":11012},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a27d6546-69b0-4f17-ac2c-66d4fcab6606","sequence":{"long":11013},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be9539a6-1c4a-422f-ae79-fe7a5a6693a3","sequence":{"long":11014},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f1aa643-843a-4359-84d7-e20ae0d6e257","sequence":{"long":11015},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8c9ffa0-a577-4862-ada4-102899921ae8","sequence":{"long":11016},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c85407ec-ddfb-4b6c-b4f1-fb35c8e18a01","sequence":{"long":11017},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584227773954188,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"834fc773-fe07-42e6-b25a-670f289c86b7","sequence":{"long":11018},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228123853254,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":517549},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17ab84e7-13a1-4f1e-bccb-3508e39cfa23","sequence":{"long":11020},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584228123853254,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd1bd0df-ddad-4c50-a921-64cf36b86225","sequence":{"long":11019},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228123853254,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d0e5a50-fdec-4102-9851-bd58677542e5","sequence":{"long":11022},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584228123853254,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"887c3e07-a8b5-4094-93ee-1dfc18abfe57","sequence":{"long":11021},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228123853254,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39fda4da-16e8-48fc-a06b-902f2d684e9c","sequence":{"long":11024},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584228123853254,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39c82786-5829-4cab-acc1-0659af983fee","sequence":{"long":11023},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228123853254,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90558ea8-b93c-49cf-adb5-0541de948ecc","sequence":{"long":11026},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584228123853254,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11139cfe-8361-4e5b-a1b0-2b2a5d50a49b","sequence":{"long":11025},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228123853254,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"341cdc58-ffae-4834-a4b4-e6ac1e33b30b","sequence":{"long":11027},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228123853254,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7ffd641-bcd9-48f0-8977-03a64120a9a1","sequence":{"long":11028},"type":"EVENT_READ","threadId":{"int":100176},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228123853254,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"575eda00-d01e-4171-a7b8-ee4a9075217e","sequence":{"long":11029},"type":"EVENT_READ","threadId":{"int":100176},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228123853254,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e2311a1-0932-4623-87e3-f9352238589b","sequence":{"long":11030},"type":"EVENT_READ","threadId":{"int":100176},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228123853254,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2417},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"631caef0-43b7-4806-8a3f-0b21cde435e8","sequence":{"long":11031},"type":"EVENT_WRITE","threadId":{"int":100176},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228123853254,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"297bbffc-b7cd-41f2-9a81-904a9288bb29","sequence":{"long":11032},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228444725377,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":600032},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57ddaf26-69f2-4a5e-9e13-274b70deb949","sequence":{"long":11033},"type":"EVENT_EXIT","threadId":{"int":100120},"subject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4e6160-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3ba2587-0c52-49ef-b42b-18f37c171777","sequence":{"long":11034},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"ede96181-467d-11e9-aed0-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"ede9615e-467d-11e9-aed0-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"b324b4d0-d1f3-57b9-9c67-b604b1fbfca8","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"ede9615e-467d-11e9-aed0-080027fc76ba"},"uuid2":{"UUID":"ede96181-467d-11e9-aed0-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08164c51-2843-4a6f-8a3a-69585902515e","sequence":{"long":11035},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"b324b4d0-d1f3-57b9-9c67-b604b1fbfca8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8175284-f41f-48e9-b762-3c52585f8200","sequence":{"long":11036},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":551},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ede96800-467d-11e9-aed0-080027fc76ba","type":"SUBJECT_PROCESS","cid":1503,"parentSubject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584228785423457},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a93daca6-bdcd-41fe-b6bc-8be2aaf2014c","sequence":{"long":11037},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1503","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1503","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"ede96d0c-467d-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"ede96d0c-467d-11e9-aed0-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"39e0b0b0-e1d9-5eb8-b6dd-9b89be2a068f","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"ede96d0c-467d-11e9-aed0-080027fc76ba"},"uuid2":{"UUID":"ede96d0c-467d-11e9-aed1-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec8a844b-7dd6-4d04-b15e-6bc351d21456","sequence":{"long":11038},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"39e0b0b0-e1d9-5eb8-b6dd-9b89be2a068f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","ret_fd2":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ede9706f-467d-11e9-aed1-080027fc76ba","type":"SUBJECT_PROCESS","cid":1504,"parentSubject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584228785423457},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90b51ae5-133d-41ae-a50f-640a05c0d7da","sequence":{"long":11039},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1504","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1504","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"ede978f0-467d-11e9-aed1-080027fc76ba","type":"SUBJECT_PROCESS","cid":1505,"parentSubject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584228785423457},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cde82797-eddb-4048-bb1e-5d1cc388d829","sequence":{"long":11040},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1505","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1505","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62c6a704-4cb7-4b9c-a3cc-ac91ff07df71","sequence":{"long":11041},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a3d0426-a616-4472-a5aa-64d68194a43b","sequence":{"long":11042},"type":"EVENT_EXECUTE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de3a34c1-0b17-8152-970b-4c2cb281885f"},"predicateObjectPath":{"string":"/bin/cat"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584228785423457,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"cat EXFILTRATION_FILE.dat","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"553c9e59-6701-42a6-90e7-c4ebef9e8542","sequence":{"long":11043},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ab97c70-4696-4277-b947-096e2694b02f","sequence":{"long":11044},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a46da3b8-7aaf-44ec-8d46-44fc5df1f0e4","sequence":{"long":11045},"type":"EVENT_EXECUTE","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4a7e215d-fecb-7d56-8bfe-3c48a67db43b"},"predicateObjectPath":{"string":"/usr/bin/gzip"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584228785423457,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"gzip","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2815260c-f155-4ff6-b745-08e9b4bec7ff","sequence":{"long":11046},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0138780d-5a49-466f-a06a-6145fe78461c","sequence":{"long":11047},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"80cbe2de-0a3c-5459-bc0a-6bc9e954ff3a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"761e9a35-3e99-49c3-bf71-ccc1ed1bbae9","sequence":{"long":11048},"type":"EVENT_EXECUTE","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"e7451145-d4d2-9753-92d4-25f153976db4"},"predicateObjectPath":{"string":"/usr/bin/nc"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584228785423457,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"nc localhost 54321","ppid":"1491","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbcf99ec-5e4c-465c-8037-cedcefb7f3e2","sequence":{"long":11049},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd7f952b-2bd2-44ff-a563-0ccd03cdd74f","sequence":{"long":11050},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e89e969-03b1-4247-88b1-9580be301bec","sequence":{"long":11051},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d20c112-9197-44b4-b2d3-c81a8943ff9b","sequence":{"long":11052},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3905f3b-64a2-4fe8-ab44-434793df0e25","sequence":{"long":11053},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e67c9f71-bdb2-43c6-bb42-a28b0ceca80d","sequence":{"long":11054},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9be042d8-97c2-4732-ae82-d3cef4ef1aad","sequence":{"long":11055},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1cc2202-cd3b-4176-80e3-f34a63335aeb","sequence":{"long":11056},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9719c46a-3c9a-48b0-9ebf-db6e2b6ddde8","sequence":{"long":11057},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ce92f57-2c14-42b1-a9e1-ccd91fc9e631","sequence":{"long":11058},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c82ad2a7-a7da-4fad-82e9-9b37b5b3ed33","sequence":{"long":11059},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb349e77-3824-45ca-b17f-573ad6187942","sequence":{"long":11060},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfd2ea94-4047-4267-bbb4-7ce812256d8e","sequence":{"long":11061},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0719329-7aaf-49ee-9fdb-edd09874794e","sequence":{"long":11062},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e8f2f92-2957-4861-ac84-2c789e5cb19a","sequence":{"long":11063},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c38c9b00-7219-498e-acb4-2192f125f94f","sequence":{"long":11064},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b5c8267-3325-480f-bd95-eeaaf8e0ace8","sequence":{"long":11065},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90332680-3467-4c5c-b539-9ed1c9715c7f","sequence":{"long":11066},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4700694-5c63-4dbe-8da3-2284cd4d31c3","sequence":{"long":11067},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e12e4af8-6f32-47fc-83fd-ca3faf338000","sequence":{"long":11068},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/EXFILTRATION_FILE.dat"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"789ca4c6-7687-46f7-8911-0820a8d00a50","sequence":{"long":11069},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5de7cbd8-746f-4259-8212-3b5d8f09deea","sequence":{"long":11070},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ede96181-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0308797b-505b-48d1-8ba1-59dacf811162","sequence":{"long":11071},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84db5706-ca29-4f41-811a-584848f553e4","sequence":{"long":11072},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ede96181-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f778597a-c5d1-4a51-a5bd-5e50c1327358","sequence":{"long":11073},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e283834-5b2b-4812-95c3-e18f81773367","sequence":{"long":11074},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ede96181-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e508a722-abd1-4a90-8d20-bda8e0e60a1f","sequence":{"long":11075},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"474ada43-3289-4de1-a35c-fe4a4fc62298","sequence":{"long":11076},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ede96181-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d2fcc0d-4688-4f0e-847d-253d99f31790","sequence":{"long":11077},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70ef0fb3-f980-450b-bbef-c13e717a7581","sequence":{"long":11078},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ede96181-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04d861a2-1e9c-4ff6-b509-23f248760011","sequence":{"long":11079},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"606d23d1-a140-45ea-912a-826ad2a07a33","sequence":{"long":11080},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ede96181-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e951aa78-72c4-404c-bb36-2172776b6631","sequence":{"long":11081},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63a29801-fa59-4e88-b0ca-ad4e44ea6dff","sequence":{"long":11082},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ede96181-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16ddd097-5daa-4b45-a55b-3848260af784","sequence":{"long":11083},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"585b4495-0c61-416f-9807-a35c50ae1a3b","sequence":{"long":11084},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ede96181-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"274a21c4-ba95-4e83-a257-bcad390afc53","sequence":{"long":11085},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26d8c485-72b4-48a5-8a04-981b92e45bc0","sequence":{"long":11086},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ede96181-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4cc5eb4-eee5-4e02-a8b0-4c445544eb5c","sequence":{"long":11087},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78ca3d64-198d-4f72-9b84-bafefe8569c0","sequence":{"long":11088},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ede96181-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03f203b5-2ad7-43aa-995d-5975b0dfc24a","sequence":{"long":11089},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47f64bff-7c7f-423b-a93d-eb1a37a1948d","sequence":{"long":11090},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ede96181-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ec8376d-9f80-4e8c-8c57-b7ad1307b4f3","sequence":{"long":11091},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2186},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e231655-2115-4e52-9bce-72e7d562eb35","sequence":{"long":11092},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ede96181-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2186},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e7afac1-8f4b-4c42-844d-4e44b5a02385","sequence":{"long":11093},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39eeb155-be67-43a9-910b-61704fc8d57c","sequence":{"long":11094},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"cf557f18-9d85-b95e-859d-95f6feb980dc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbf15331-bb3e-4943-bc2e-60cae33a55d1","sequence":{"long":11095},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ede96181-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"537d4e4c-5b9e-4ba3-8597-5e47eb8b0e6d","sequence":{"long":11096},"type":"EVENT_EXIT","threadId":{"int":100120},"subject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ede96800-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"cat"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1d692f8-d0b5-479f-a73a-01ca7da87e27","sequence":{"long":11097},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e447e4f5-e430-499b-aa8e-0a22672300f5","sequence":{"long":11098},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75816659-3e5d-4d8c-ae04-0b86604ac9b3","sequence":{"long":11099},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8024476-c786-4096-a3f3-c5b3101ba815","sequence":{"long":11100},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"091e6563-4e38-41f1-af3b-3a739cd0bb86","sequence":{"long":11101},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81afe9f4-0fc9-4aeb-bb17-a737ca22e93e","sequence":{"long":11102},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0703794-c384-406c-957d-edda1025421f","sequence":{"long":11103},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":{"string":"/lib/libz.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9f0b425-937c-4b23-aa40-56197dc61452","sequence":{"long":11104},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fd6ffa8-0be8-4b5f-88bb-3397eaf4f6db","sequence":{"long":11105},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3cd4a04-35f2-405d-bedd-0869b17a3a3e","sequence":{"long":11106},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d2451ac-e8bb-4c9c-b4fc-6dc7bd2d1f46","sequence":{"long":11107},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25ebd078-175c-4dbf-b969-15ec3b2f3c4c","sequence":{"long":11108},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2465792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8f10c29-2e3d-4342-8b8c-203ff82df3c0","sequence":{"long":11109},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2465792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2adc3a11-1328-46fb-ad3a-2d07e1a63ade","sequence":{"long":11110},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2535424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1937ca12-4501-4376-8b91-c09216311e6a","sequence":{"long":11111},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2535424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5442b4f8-b0c8-4c2f-bf6a-4e81b5ce7337","sequence":{"long":11112},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"a55fa421-3072-7451-b230-2012f174bff1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dec14d15-f278-43c4-86cb-a9775f4f0b19","sequence":{"long":11113},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":{"string":"/usr/lib/liblzma.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32436c48-4fcb-4861-8bda-3961493b5561","sequence":{"long":11114},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b24bbb4-6937-4e66-b36f-d761eb2861ca","sequence":{"long":11115},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfc61319-09d8-4088-a92d-5960f390ac2f","sequence":{"long":11116},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f374f3d-8165-492a-9170-637fe670691d","sequence":{"long":11117},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cd27061-c1a7-4bac-90ca-a68f800508e2","sequence":{"long":11118},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5989fd43-ee95-4439-9a88-9dc3b9141fba","sequence":{"long":11119},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2605056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29dc938b-b5ed-48e7-b87e-61afbcd854a2","sequence":{"long":11120},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"336aeb45-c675-48c3-9976-d26bb1dc7fbd","sequence":{"long":11121},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2711552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96fcff44-8502-4b8b-8c10-33ac28ee54cc","sequence":{"long":11122},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ae7093f3-2081-df5b-8120-61c30bdf0c57"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32ae7868-5cb6-43ae-8bee-e8f4b6c8ce41","sequence":{"long":11123},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":{"string":"/usr/lib/libbz2.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61cff085-ab0e-4398-81ba-ee98422754a2","sequence":{"long":11124},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9cfd282-17d9-44cd-9860-d7ee853206b7","sequence":{"long":11125},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6eaccd08-d0b0-4fd1-8d40-e237376a6c8a","sequence":{"long":11126},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a7ed3ec-0835-4b3e-b0f5-d01af9a2f454","sequence":{"long":11127},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2719744},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5b24398-bfd0-4323-8a04-49f3b89fd142","sequence":{"long":11128},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2732032},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1268a98e-ec3e-487e-9b98-c081b08d3554","sequence":{"long":11129},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2732032},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b61d76f-18c5-4142-ae3a-f2e7a8a2e48e","sequence":{"long":11130},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2797568},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05045b12-d9af-4fc0-a598-1c60365761fe","sequence":{"long":11131},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2797568},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ebead4f-0fe3-4e49-a620-534c1a0e12aa","sequence":{"long":11132},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f18526b4-6913-ba55-9369-356b45ba4751"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24192256-1943-45aa-9bae-43dc31db4ca5","sequence":{"long":11133},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5561b520-ed55-473c-9a3e-9c02bb07d151","sequence":{"long":11134},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d530063a-15c9-4ad7-b2d6-eac727b6a59b","sequence":{"long":11135},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90cd8fa2-e0c6-47c9-9070-e5837cea3d51","sequence":{"long":11136},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2805760},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38c99e76-6fd7-4f18-b2f2-094d233ab038","sequence":{"long":11137},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2805760},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b7b46cc-5ea4-44f2-84c1-44e556141150","sequence":{"long":11138},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3321856},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2922b4a-8fb2-4a55-81c8-058b4ecaffbc","sequence":{"long":11139},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3321856},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca3001fc-d206-4441-b00a-4000f2cedb9a","sequence":{"long":11140},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4653056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"207a7dae-aed4-4b6f-8153-846849de8946","sequence":{"long":11141},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4653056},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ab708ca-b7ae-4bb9-9d79-be0802251c3c","sequence":{"long":11142},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1825faf6-4075-4949-a543-f172dad158d9","sequence":{"long":11143},"type":"EVENT_OPEN","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":{"string":"/lib/libthr.so.3"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6d5bdc6-bf2e-4111-9820-bdb8bf9f1eb4","sequence":{"long":11144},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2723b5f7-0787-4a31-94fe-95859a446723","sequence":{"long":11145},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2428928},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5722b4b3-d017-47c7-9671-ba0d111f8092","sequence":{"long":11146},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6971392},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"121d1c50-a84f-48f7-8ae7-16914fa8e240","sequence":{"long":11147},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6971392},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"389b0e6b-73c1-430c-8c21-f0382371110e","sequence":{"long":11148},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7024640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74dfa21e-70d3-43cc-ba7d-f808750064a8","sequence":{"long":11149},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7024640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d12d0ad6-33f8-48f9-bbaa-b089bc628ba8","sequence":{"long":11150},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7094272},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8c5ada6-efb6-47b9-b373-f664f129dc58","sequence":{"long":11151},"type":"EVENT_MMAP","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7094272},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc133976-d63d-49f9-9b9a-afe77e82807c","sequence":{"long":11152},"type":"EVENT_CLOSE","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c7381901-4ea2-b956-a24e-59a436b93c00"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d99dd3be-7800-4106-a175-99b0f3c4c146","sequence":{"long":11153},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f554e6f-1263-4e1d-994b-d5a8adb43a30","sequence":{"long":11154},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b779815-f40a-441a-97e5-2db5e2a070f8","sequence":{"long":11155},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"504cf787-8b00-4772-8679-5e6efdf2cbdc","sequence":{"long":11156},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5f78628-307f-4762-af7b-71ca6a7b9997","sequence":{"long":11157},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3096bae-86a3-4218-9a31-09bc185de843","sequence":{"long":11158},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7215bf46-34cd-4291-958f-f1bc8fa9ac6a","sequence":{"long":11159},"type":"EVENT_MPROTECT","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e23e1ea-eecb-441f-bd36-5cf76caa0def","sequence":{"long":11160},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ede9615e-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228785423457,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47242},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"072a5cbd-070c-4091-993a-e546f5701332","sequence":{"long":11161},"type":"EVENT_READ","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ede9615e-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa09cb97-8577-4998-832a-512a6fd2a099","sequence":{"long":11162},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ede96d0c-467d-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3820},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55700f9c-efe5-403b-94b1-7ddf9484a353","sequence":{"long":11163},"type":"EVENT_WRITE","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ede96d0c-467d-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba6d2bb6-b47b-4cd6-836f-ac7fb51ffea3","sequence":{"long":11164},"type":"EVENT_EXIT","threadId":{"int":100144},"subject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ede9706f-467d-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"gzip"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba823db2-2955-493e-b2c1-14de1ab6c44e","sequence":{"long":11165},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2961a766-6a09-4af2-ab2c-d9574147099e","sequence":{"long":11166},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65323d91-75c2-42ce-a903-906c42d4d5fd","sequence":{"long":11167},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9efa9c72-b80a-4522-af34-fabe8f49f5bb","sequence":{"long":11168},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6dc3c8af-8c3c-4c70-b4eb-7f2453242065","sequence":{"long":11169},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba8c0398-e90c-4c82-a85f-b7834704bc88","sequence":{"long":11170},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11f806c0-8e5a-4c8a-92b2-f9495190db6c","sequence":{"long":11171},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":{"string":"/lib/libipsec.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46dd0821-4791-4aa0-8264-de07f9974d59","sequence":{"long":11172},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15cca970-e425-43df-b223-630f04ef35fa","sequence":{"long":11173},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f7fd632-983b-40bf-8ef9-e95a4b9c0150","sequence":{"long":11174},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2333d27-d0df-4844-bcdf-87c085a92a81","sequence":{"long":11175},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53c2a091-54bc-40a6-9a42-f3105870026f","sequence":{"long":11176},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2bfbbd8-6c0c-4308-902a-c0c128f14e1f","sequence":{"long":11177},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2433024},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4f56425-5c81-4f48-a388-5ec3eae19c94","sequence":{"long":11178},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2449408},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff5b2be8-378a-4988-bce1-13104de2b244","sequence":{"long":11179},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2449408},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f96df5d-9ee5-42b5-8878-a52a2ba3d116","sequence":{"long":11180},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4df4e7fc-b5db-4c5a-97b8-2bdc60f32179","sequence":{"long":11181},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"227f6104-07c4-4c20-bd3e-d32a25cd9452","sequence":{"long":11182},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe797fbc-195c-4d6e-8e20-a0479294b4f2","sequence":{"long":11183},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57821bca-8f1d-4193-a4c2-58d63a606e5d","sequence":{"long":11184},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2461696},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d1978ea-5681-43b0-847a-4b609a8ce618","sequence":{"long":11185},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2461696},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d4ed0c4-5271-4e5a-ab09-999bb7d98af8","sequence":{"long":11186},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2977792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21269e1e-0fd5-4e14-8951-e4bba3cff183","sequence":{"long":11187},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2977792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e07b40ee-53d5-41c6-af1f-bfd24dc68e44","sequence":{"long":11188},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4308992},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0910918-1326-408d-9ca5-65d8a9a03d32","sequence":{"long":11189},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4308992},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea07e33e-be13-49db-b8f7-26e3e00f083b","sequence":{"long":11190},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a443678-b0e1-449e-9729-a991d8f24528","sequence":{"long":11191},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f8f5de4-f0ee-49d0-89cb-a07a1efb6367","sequence":{"long":11192},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d868d55b-84b3-4e0c-bab5-63b01d015211","sequence":{"long":11193},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b387665d-d937-43b1-91ee-aa5c146295e3","sequence":{"long":11194},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1df71322-c43a-4799-a8a0-84839d8b37e1","sequence":{"long":11195},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56c5b533-2ab6-45f2-b3f0-a507dd10c1e0","sequence":{"long":11196},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33349e22-bb4c-4e39-9c46-1c11ab4a682c","sequence":{"long":11197},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcd9af37-14ad-4e1e-b92e-02edd11bb5a8","sequence":{"long":11198},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":{"string":"/etc/hosts"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37ba8b71-f584-4045-8998-4b644c6dff69","sequence":{"long":11199},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1031},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"051c10d0-35b3-4623-bdc3-cb1e15a3d989","sequence":{"long":11200},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e1f1c5c-91c5-40de-abf9-173c49935b6a","sequence":{"long":11201},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"ede978f0-467d-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584228794039059,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08b6b7a9-ed4c-412a-a43f-725316f06e8c","sequence":{"long":11202},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584229493902856,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":617776},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7636d6b5-5802-4ae9-ae77-de01e46a6fbf","sequence":{"long":11203},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":617776},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb106b05-bd5a-44f5-8190-6b0e9f1d36a7","sequence":{"long":11205},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b4f761f-112e-40bf-8353-5b8cf09b54be","sequence":{"long":11204},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"318f6d80-9e35-472c-bf01-7912d1646439","sequence":{"long":11207},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3050e650-2ff5-4e07-8342-5ad14d0e31fe","sequence":{"long":11206},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0d599e1-63c6-4fea-82a8-52e1d4a8af42","sequence":{"long":11209},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3ab8cfc-34f5-462f-8762-cb5eca09ba8f","sequence":{"long":11208},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f16958d7-badc-4768-9a03-311572037138","sequence":{"long":11211},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f7c2cb6-bc24-406b-8006-ac40c006e6fa","sequence":{"long":11210},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68bf4a77-d54d-4289-bfb5-924e16a1200e","sequence":{"long":11213},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"688bc5d7-7583-461b-8728-d0e3a714769f","sequence":{"long":11212},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcfb9538-e3e9-45a3-92b7-7537bcf4e85a","sequence":{"long":11215},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"711e0db1-1a13-4bf7-871c-160ce9838e84","sequence":{"long":11214},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83e8af91-b253-41f9-89e0-f8d74034b957","sequence":{"long":11217},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8bea7b5-f38b-45ac-b826-6f86d2fe5874","sequence":{"long":11216},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82110a15-9fca-4c01-9cdd-25dc8cd3c2db","sequence":{"long":11219},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"766b742d-f1f9-4404-b4cb-13ccd4676b64","sequence":{"long":11218},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be78cf0b-92be-44a1-95ea-7e1fccaf2bba","sequence":{"long":11221},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db84d3ac-0e89-4453-ac0f-5822e5760a65","sequence":{"long":11220},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7728e8dc-c1da-4c50-aeaf-51f7da70ac34","sequence":{"long":11223},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b17b5c0e-d157-4a26-b797-0fa35ea47e98","sequence":{"long":11222},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c99e72f2-9e25-4aba-8a7c-f6e49532cec0","sequence":{"long":11225},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19b7b49a-e7ad-4f60-895a-10ff6d60f8ca","sequence":{"long":11224},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fee2634-a725-4253-b6b2-1ae23ed2db82","sequence":{"long":11227},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a286c128-a11e-4260-9ac5-8f415a28598c","sequence":{"long":11226},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c46df9ca-bf2b-4552-bd33-1b188d2ad079","sequence":{"long":11229},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e8e227e-b4a7-4ca7-8afa-7d37e0cc3ddb","sequence":{"long":11228},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1410f246-f604-47c3-972f-2879fe10becd","sequence":{"long":11231},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20fbc214-7661-4718-81fe-424c963faa38","sequence":{"long":11230},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d7b2ad7-3884-4472-8ac0-2a9b81b2fa02","sequence":{"long":11233},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e79041bc-1008-4ee3-9ca9-80af7ba2458d","sequence":{"long":11232},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0e32fa2-5925-4906-b431-c3e65eed37b2","sequence":{"long":11235},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"112ebba3-84de-4d1f-895f-bcdc2f1b5719","sequence":{"long":11234},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee132e64-5239-4d3b-a7f1-4dd4a4778481","sequence":{"long":11237},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d934f1a6-9e69-46b3-91ce-e6d26fafadb5","sequence":{"long":11236},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c388c4a3-7108-4b8c-8c7d-0534dc6466ba","sequence":{"long":11239},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dba0891-993f-4ca0-bb08-3300e71fada2","sequence":{"long":11238},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9dce5d4-d968-4bd3-a8d6-1ec0770a055a","sequence":{"long":11241},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c77e3b2f-bff8-476f-9af4-3d791ffc3cad","sequence":{"long":11240},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36a07027-0f52-4906-a122-9c7c9b221c25","sequence":{"long":11243},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb5734a6-40f5-4f19-ab12-d4e848d88ce0","sequence":{"long":11242},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83f4f722-154b-42b1-a804-43630a8cd406","sequence":{"long":11245},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2526362e-6fb1-47ef-8b1f-f776499300ad","sequence":{"long":11244},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41164242-390c-4474-a38d-9ab457380442","sequence":{"long":11247},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b44534d-52d7-457d-9d75-f8e9ff203c08","sequence":{"long":11246},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1f528a7-51f0-4e90-8e7a-7b370d41628e","sequence":{"long":11249},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2b84416-0510-40ec-b6c0-4795404c5512","sequence":{"long":11248},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c031a94-d282-4c72-95c3-c96bc331d256","sequence":{"long":11251},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc3796fc-ff21-45e9-882e-13ad62ae10ad","sequence":{"long":11250},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1f44543-c06b-44a2-8650-5f08d2430c15","sequence":{"long":11252},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31d80fea-4a08-46a0-b409-685c1d52a8d7","sequence":{"long":11253},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d884465-d588-43e1-971b-a98b03eb46f6","sequence":{"long":11254},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be5fdc37-5eb9-4a40-b095-f7fee99c7d64","sequence":{"long":11255},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4821},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ec55b77-e96f-4b04-bc63-6199ea34e2f3","sequence":{"long":11256},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f8f51be-5616-4c72-9d41-0aa064767fb0","sequence":{"long":11257},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4874},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04f04fba-1c1e-458d-99d3-f8b76bff477c","sequence":{"long":11258},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3b38d79-d1cd-409c-bf26-aab6f666a3d2","sequence":{"long":11259},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e2b1e5c-82e3-420a-917f-bd672a21c076","sequence":{"long":11260},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4407},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82cdaf7f-50f8-4279-b332-80e0a0f68f70","sequence":{"long":11261},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e49c9833-500d-4c50-a77d-63cb1ef8ff0b","sequence":{"long":11262},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4460},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c68d0ca3-8dfa-4e5f-a9d4-528b47d3422b","sequence":{"long":11263},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dae7fdda-f9d8-4071-ab40-506ce949f0c8","sequence":{"long":11264},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e9810e5-2b2c-442f-b2de-9f8f2d826813","sequence":{"long":11265},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4083},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c60d017d-c66c-4a1e-8ffa-cd496b818908","sequence":{"long":11266},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230124034672,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78d8f367-7f60-4db5-b00b-51b4c93854da","sequence":{"long":11267},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4136},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e068a018-85f1-49f7-87b9-46c46f306b40","sequence":{"long":11268},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4272e530-1d7c-4068-a7d2-c2386681c59c","sequence":{"long":11269},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"358a0af5-2b0f-40c7-aa31-13b905c8856f","sequence":{"long":11270},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4327},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8217539c-776f-4c63-ad26-d71b7798cfba","sequence":{"long":11271},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7218ba93-71af-416a-8545-b484a730bc30","sequence":{"long":11272},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f74b59d-4ace-4a6f-bd90-3149105c680c","sequence":{"long":11273},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62b52448-d490-411a-bbf7-7c6854d05f3e","sequence":{"long":11274},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4872},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a153398e-72f4-4a7c-a218-61100ec61eae","sequence":{"long":11275},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63b587e3-3686-49c0-8f85-097a4003e12c","sequence":{"long":11276},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f4500c0-d67a-45ee-ac31-8a7f78ca0548","sequence":{"long":11277},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf93de5a-c6cf-41f4-921e-23ced0e09356","sequence":{"long":11278},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4280},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c906ac55-7443-46d8-975f-df9cddc2d870","sequence":{"long":11279},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e607738a-3191-4664-be12-6358bc1bd8e4","sequence":{"long":11280},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a219e9df-b4a6-4aee-8bd7-e2a48668972a","sequence":{"long":11281},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11a9b323-6776-43cd-8aa0-ba503ac13d2f","sequence":{"long":11282},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3918},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cc587e9-4b42-46c2-9667-12cb87f74786","sequence":{"long":11283},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7687f734-c2c7-48f7-a89b-2a637189734c","sequence":{"long":11284},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c85c1d99-5246-4d75-a218-b2fd332e7e75","sequence":{"long":11285},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ac0c66f-e895-4cb2-970c-b5aa475ca0c4","sequence":{"long":11286},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4804},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81c43a15-42cf-4fae-ad44-22a6c1a2ed81","sequence":{"long":11287},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce85f0cd-b408-4631-8c45-90249c6752d3","sequence":{"long":11288},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e115959-e37f-49c3-a487-55ee259c3fb8","sequence":{"long":11289},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61fd7c40-cbf2-40d9-9820-bd291c7e8760","sequence":{"long":11290},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3923},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1eb8d70b-8967-44f1-a7a3-0cc1c28c66f0","sequence":{"long":11291},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28425b9f-8340-41bf-b6e6-d3058fa662e3","sequence":{"long":11292},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"795d41d1-3a79-48dd-9161-ddb50367d2d7","sequence":{"long":11293},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f009fd4-06ef-4a17-b215-42fab57a3179","sequence":{"long":11294},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4214},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8f549e6-b0cc-4410-a9c3-5050b67e791c","sequence":{"long":11295},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dec0baf-0a27-4bfc-9313-59402e6ae56b","sequence":{"long":11296},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2af5648-e453-405d-b657-0fb6e7543726","sequence":{"long":11297},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c79e3da-f9fa-4b7b-b7ff-3ae707aaa20a","sequence":{"long":11298},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3987},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df5f23d4-dd19-4c3b-a27d-8a70c725d62a","sequence":{"long":11299},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99da98c0-2d49-4ef8-9695-19e448bbdf35","sequence":{"long":11300},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52b97ecc-9b1e-465f-bf10-45455b5fa995","sequence":{"long":11301},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4387b498-bf74-4f88-9c15-fea4e9fd721e","sequence":{"long":11302},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4257},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dea0202-1378-4cef-9ee1-113e6ac1b5b9","sequence":{"long":11303},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bcb4814-fa16-44bd-9a23-d4cf17130728","sequence":{"long":11304},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f229efc-a8a2-4a6c-9dc5-ae07b4b9f140","sequence":{"long":11305},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed9cb280-dccb-4a29-b909-88e490c55e3d","sequence":{"long":11306},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4224},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7c0dea6-0df1-4d19-97f6-95e5cd6bf307","sequence":{"long":11307},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6cda6a0-054a-44fc-ac22-7d9ee8497513","sequence":{"long":11308},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2ead6bd-3bb8-4b61-8bf1-2b301ace460b","sequence":{"long":11309},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"878d2800-25a2-4706-9398-4f1aa9ccddad","sequence":{"long":11310},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4326},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e541896c-b75d-4ad4-8c37-a86ab4afdc48","sequence":{"long":11311},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a830f386-ec75-46a9-9db8-aa02410c0b35","sequence":{"long":11312},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7eb7592f-9154-4359-9546-f770385f5751","sequence":{"long":11313},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f52e9aaa-bc35-48b0-aa63-c18d759094ba","sequence":{"long":11314},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4587},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06850143-fe35-4324-9bb0-95b4522e16b4","sequence":{"long":11315},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02f8458e-cd25-4a45-aa03-05b5704782cb","sequence":{"long":11316},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c4e7510-bc05-4942-b492-148ff5e5dda0","sequence":{"long":11317},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a949b336-1325-44bc-82e9-eaa752e5e866","sequence":{"long":11318},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3968},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b222837a-2203-4b39-9753-053add1e0a2f","sequence":{"long":11319},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"259beaf4-99a0-4579-bf5e-12ba9eeb78cd","sequence":{"long":11320},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef670169-b0d0-43bc-8877-d17d966e8893","sequence":{"long":11321},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3474eadd-e30f-4df4-ab2c-64864d70fc03","sequence":{"long":11322},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4120},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5a0ed5e-a55e-4233-bdf3-f4b7b7fa9e74","sequence":{"long":11323},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"555b6007-8122-4c1e-876b-344d8a16c2e5","sequence":{"long":11324},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11f50044-93eb-4512-9ea1-5180768da664","sequence":{"long":11325},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"666b333e-6d07-48d3-b748-b7e35e5e039c","sequence":{"long":11326},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4380},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc63a676-40f8-4b30-af51-c8afeb0731a4","sequence":{"long":11327},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6024fbf-90ab-4b16-ab76-94b5e9951145","sequence":{"long":11328},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2a4189c-8c0f-4db7-b20a-236c43de700b","sequence":{"long":11329},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4803},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fb38a2e-6cee-4e80-aea2-310e2dcadf7d","sequence":{"long":11330},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d5e4a2f-8aa7-472b-a19d-0d1146335f31","sequence":{"long":11331},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35d4b17e-e38f-4a63-a3f9-cf915ada42d6","sequence":{"long":11332},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7011db51-b2dc-4d9b-acd0-46b4f33a9bd9","sequence":{"long":11333},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4486},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce232904-7c09-4ada-b0ed-a555e6bc5348","sequence":{"long":11334},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69dc4dae-78e0-45a0-9bad-7cb6a2c8b9f1","sequence":{"long":11335},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f418c9c-6494-41ff-a575-e2efa6845449","sequence":{"long":11336},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dfb188a-004b-4c7e-869f-29af7f345fe3","sequence":{"long":11337},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5242},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c99d7683-b9d4-4593-8ec6-d1b3932f903c","sequence":{"long":11338},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"288ab54a-7279-42b3-a780-a99666e2e2fb","sequence":{"long":11339},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9c90c6c-5142-4f58-9d99-2e060a6ea069","sequence":{"long":11340},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3aa9c2f7-83d2-496c-9d0a-49c3c1251e5f","sequence":{"long":11341},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4580},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83e3c642-efeb-46f8-b958-dfa569db71ed","sequence":{"long":11342},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c6cc686-c8c7-46ce-827c-9c23f693cbdf","sequence":{"long":11343},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6537fc05-0e6c-4b06-af71-6d9e5769a6a9","sequence":{"long":11344},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36159911-2a6a-4658-9da3-101a5b239684","sequence":{"long":11345},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3972},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4307f817-57e0-4711-9134-dbd1cf241a6c","sequence":{"long":11346},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83c8ab06-92a1-418e-ac59-6b4638138ecb","sequence":{"long":11347},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03c34f26-64a1-4845-93a7-349a46d30cf3","sequence":{"long":11348},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80ec2d13-212e-4d36-b15a-55f27896cb26","sequence":{"long":11349},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3934},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dbfae47-f372-4f98-bb8e-4c7fcb43cee0","sequence":{"long":11350},"type":"EVENT_WRITE","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8edc03e-0e8d-43d0-bca7-57250438fc01","sequence":{"long":11351},"type":"EVENT_READ","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1400d7f6-11b3-4bcc-bb9a-b932936e822c","sequence":{"long":11352},"type":"EVENT_SENDTO","threadId":{"int":100177},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16958","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14e3db11-f860-4b4b-a479-64553babf0f0","sequence":{"long":11353},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16958","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c429a585-bfe1-4373-af2e-333ff48f8408","sequence":{"long":11354},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230133848239,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef676c9d-f6e4-4870-8ede-fb9bd3c7b95c","sequence":{"long":11355},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230143852843,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31327e66-9da3-4f35-b27a-66bcd268fc72","sequence":{"long":11356},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230143852843,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d26ef61f-5977-44df-91d1-91af0e5ee7d4","sequence":{"long":11357},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230143852843,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4925},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f023d42-58f7-4313-83f6-adbd07082488","sequence":{"long":11358},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230159136457,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec4c999a-dec6-45e7-97ef-1267d00b09fa","sequence":{"long":11359},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230159136457,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72aae212-4adf-45cb-aa82-570e85579d4e","sequence":{"long":11360},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230159136457,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4333},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e96abc42-7c32-45fa-883a-e9a9c31f6d68","sequence":{"long":11361},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230166112437,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e2559c3-f2bb-4ff6-bf1a-a1c12fe596af","sequence":{"long":11362},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230166112437,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1da8220-7296-498c-96d4-bcf6b907ccbb","sequence":{"long":11363},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230166112437,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3971},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff41a780-075b-4b45-a5e2-3e182f097495","sequence":{"long":11364},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230166112437,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"867c98b1-55b5-4e20-b4c8-bf6814f9603e","sequence":{"long":11365},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230166112437,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24eb974f-948c-4059-bf81-393d247d4d35","sequence":{"long":11366},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230166112437,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4857},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d58ca4cd-f96b-48a0-af83-c06b38b2c13f","sequence":{"long":11367},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230174301917,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd208ec5-364f-4fdd-9733-2ccc9934c3ef","sequence":{"long":11368},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230174301917,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"514fca0e-c862-40f5-9102-f03fa5f62618","sequence":{"long":11369},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230174301917,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3976},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b103f337-e9e6-4a83-a125-3d991d37d527","sequence":{"long":11370},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230184506722,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83266262-5398-438b-8184-95e38aae7a98","sequence":{"long":11371},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230184506722,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b13140c-c0a0-4d96-89d8-9eb288918fe4","sequence":{"long":11372},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230184506722,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4267},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f2c1f0b-45ee-4bd8-97fc-07343ecc5ef2","sequence":{"long":11373},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230184506722,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e2c52ef-84bc-426e-b8b5-a604ed0df844","sequence":{"long":11374},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230184506722,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"609ab8ab-9ad3-47c3-acab-6b7512170515","sequence":{"long":11375},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230184506722,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4040},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59f5193f-436a-4f99-8348-4da525ef33f3","sequence":{"long":11376},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230193882177,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d843b407-a627-427e-bbcf-beefad94d488","sequence":{"long":11377},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230193882177,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"516cf4b6-5560-4c12-83aa-558d5bcc59eb","sequence":{"long":11378},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230193882177,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4310},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dd7bbb3-c582-4c2a-a550-d57de604c092","sequence":{"long":11379},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230203871715,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a50d0d16-1a0e-4578-9439-dec592eee72c","sequence":{"long":11380},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230203871715,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c93ec1a-6a66-4a58-be5a-33f766d8e413","sequence":{"long":11381},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230203871715,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4277},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5602eeac-b191-42b7-a07a-bcf92c8b10d6","sequence":{"long":11382},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230203871715,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48c90e3e-ba51-4ca3-a219-4e0adec754fa","sequence":{"long":11383},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230203871715,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46aa21e5-0e55-4ffc-97a0-bffd650a9bae","sequence":{"long":11384},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230203871715,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4379},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c31694e-415c-467b-a6f5-a60e01d392d6","sequence":{"long":11385},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230214499516,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e3b9dfd-c379-41f3-8538-dd1f6d05ee49","sequence":{"long":11386},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230214499516,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a322af6-2b2f-4a59-ad4e-f405de869cb1","sequence":{"long":11387},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230214499516,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4640},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6bd62de-419b-4eb0-a6e2-60bdc4ae267a","sequence":{"long":11388},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230224265106,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ca76d99-f155-46be-9f24-73492d93729c","sequence":{"long":11389},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230224265106,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59dd7462-afea-438a-9021-a115120ea8aa","sequence":{"long":11390},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230224265106,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4021},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fd6dd43-7f41-4f3c-a222-50c06c412e73","sequence":{"long":11391},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230224265106,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84217072-48da-4a3e-9ee2-8a8eca5d34f3","sequence":{"long":11392},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230224265106,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"748ee062-a61f-4b32-884b-e6c91fcc7cbb","sequence":{"long":11393},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230224265106,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4173},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1277de7c-5ca9-43be-a058-8406a0be33c9","sequence":{"long":11394},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230233853342,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1299b95-32a9-4c00-b023-ac10bd6aef60","sequence":{"long":11395},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230233853342,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a3d7f48-d4a6-464c-ba14-32b1848c62e9","sequence":{"long":11396},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230233853342,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4856},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1277a183-b0f4-4c72-833f-c3241c7bd88b","sequence":{"long":11397},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230243902171,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff3c882a-8e2f-4fa8-8f46-40d3a4bebdd5","sequence":{"long":11398},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230243902171,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df6e12a5-2a61-447b-83f2-c0cab6f7adae","sequence":{"long":11399},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230243902171,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4539},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68f6489a-ccf6-4038-8060-f49b6a1a2752","sequence":{"long":11400},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230243902171,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"564b7d7f-2c2e-4c51-ba3e-9e6262860eb3","sequence":{"long":11401},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230243902171,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0e62340-a768-4c19-a517-9fb6214544c2","sequence":{"long":11402},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230243902171,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5295},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f66a9c18-dc5c-4033-be2a-3db55c63b3e3","sequence":{"long":11403},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230253849267,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc212126-f163-4c39-9461-b73353f24797","sequence":{"long":11404},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230253849267,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0642a10-0943-43e7-b50d-55c5fe46d4f9","sequence":{"long":11405},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230253849267,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4633},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fda9ab25-2b06-4d6f-9ce0-06112ace8be7","sequence":{"long":11406},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230263879253,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0c0b7e4-29ba-4b76-a9f5-7b8af5840873","sequence":{"long":11407},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230263879253,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"842782ba-513e-49e8-99e9-427a1d496966","sequence":{"long":11408},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230263879253,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4025},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e213c3f-c150-4339-b9af-7a5002207efc","sequence":{"long":11409},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230273887434,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e826b64-0edf-4656-9cce-391e2f287819","sequence":{"long":11410},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230544152117,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":632797},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"269dd1a9-732f-4020-b8a9-cd185b005ec3","sequence":{"long":11411},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230544152117,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b11b8968-06d9-4aa1-b62a-e944ad731711","sequence":{"long":11412},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230544152117,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16959","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca2349fc-f3c3-4c60-8ac8-5549fb2e08f8","sequence":{"long":11413},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230544152117,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16960","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"735d270e-87e3-4d7e-841e-3703857e4665","sequence":{"long":11414},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230544152117,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16961","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b09b385-6216-4b71-9a87-9c8d8ace1fe2","sequence":{"long":11415},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230544152117,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16962","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c145f61a-3dc9-494f-a1d2-8390cd827283","sequence":{"long":11416},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230544152117,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16959","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e322d00-aa3a-49a7-ad09-6cdda7acdd94","sequence":{"long":11417},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230544152117,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16960","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78bcbe68-6d6a-4093-816f-f0decb6a7fe0","sequence":{"long":11418},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230544152117,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16961","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b269e6d-3227-4aa8-84d0-a7ef53d25897","sequence":{"long":11419},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584230544152117,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16962","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebb98dd2-6cd9-432c-bd52-4efc3044c53f","sequence":{"long":11420},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584231555482583,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":633972},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1ee2897-a5e9-4138-85f5-e44fdebe43a4","sequence":{"long":11421},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":633972},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90d3577a-ffcc-4e38-a7ce-4a3c331561f5","sequence":{"long":11423},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"148dffb9-3ca1-4a5d-bffe-dc1bd6815907","sequence":{"long":11422},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7547a715-607e-4945-9468-e7deff64cba0","sequence":{"long":11425},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7bf6337-49a1-48a1-8fcf-bb4f84587734","sequence":{"long":11424},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0dfac14-4b69-41a1-a1cc-0fdfb665e8bc","sequence":{"long":11427},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b44bd5df-88b0-4ff8-9c5b-0e20bc9d1c69","sequence":{"long":11426},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2e15c50-d279-4489-a642-fe8db449efb6","sequence":{"long":11429},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80d3e6c0-3913-4e4b-a631-8a19a88fbaae","sequence":{"long":11428},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d6c3bbd-ef1b-4131-96e0-2ea70940ab70","sequence":{"long":11431},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8816535-147d-47cf-a223-6a7d5d3b83f9","sequence":{"long":11430},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf300645-c97b-48d0-a732-8a44e7a61fb3","sequence":{"long":11433},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9460cac4-9028-4e1e-8c53-8e1c229c1119","sequence":{"long":11432},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06ce0283-ceee-4886-b6c5-8fe0e4175499","sequence":{"long":11434},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"764687d7-5b99-4eb2-9015-c5f64a71cd45","sequence":{"long":11435},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b9b766d-ee63-43dd-87b7-48118094b8a3","sequence":{"long":11436},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa73b754-5d6d-488a-806f-88b1029d6c77","sequence":{"long":11437},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3542},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df8e8835-c192-40bd-b427-17037e59c0ad","sequence":{"long":11438},"type":"EVENT_WRITE","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"112a68f2-134e-4d47-94d7-c0216a1b283b","sequence":{"long":11439},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3595},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30221f65-b4d6-4efe-99fd-50fb20301a43","sequence":{"long":11440},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd4e4ef1-633b-4eff-90c8-b00d67e7ab44","sequence":{"long":11441},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92537429-a8d4-46ec-a977-7737fb9a7c08","sequence":{"long":11442},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3942},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f71fc442-87fc-48ac-a8b7-636959d7c130","sequence":{"long":11443},"type":"EVENT_WRITE","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6442a1af-4e2e-42f6-be79-a59fd39e01ce","sequence":{"long":11444},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3995},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44073c6c-a50b-4665-a47e-ba2bb39bc8a4","sequence":{"long":11445},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19224ddc-d070-4d81-9473-6af3442c5c61","sequence":{"long":11446},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9728e99-95f1-44f3-a163-35cc168294e2","sequence":{"long":11447},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4139},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd063490-3034-4916-a5b4-dc259f81eee5","sequence":{"long":11448},"type":"EVENT_WRITE","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78ee1a45-1018-420d-a07e-50e2d8c0ef50","sequence":{"long":11449},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4192},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"499bf94a-c1a3-40f0-97b9-07ce2e769bdb","sequence":{"long":11450},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5bc78f4-093e-43fc-9580-21e4e6570b6c","sequence":{"long":11451},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a75ef7b2-5bc2-4aab-b632-82401f43e4c2","sequence":{"long":11452},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3382},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5c93f9b-2549-4c45-b855-e898d5fd555d","sequence":{"long":11453},"type":"EVENT_WRITE","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d21971c-75a1-4d28-bed5-e6ab32bd760d","sequence":{"long":11454},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e22f3fc9-b3b8-4ddf-9ec1-22be2f919994","sequence":{"long":11455},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a83af7d-6bf4-4ba0-a935-97b0e2569abf","sequence":{"long":11456},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1171},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c50b42ff-8aa2-4f67-86d2-a4c0ea49fb1a","sequence":{"long":11457},"type":"EVENT_WRITE","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abb2b6d9-19a2-4e9d-97fe-d852ff88e69c","sequence":{"long":11458},"type":"EVENT_READ","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0205d9c6-93ea-44a9-ae13-1ab9d058671a","sequence":{"long":11459},"type":"EVENT_SENDTO","threadId":{"int":100178},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16963","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29cce303-d659-40d8-a983-3c7838d79d0c","sequence":{"long":11460},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16963","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e2ded5a-cc2e-4a53-a3a6-dd68149af8e6","sequence":{"long":11461},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232124327011,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9f568be-0e2f-472b-8007-55d03b2783cc","sequence":{"long":11462},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232134041430,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5f3e4dd-a331-47f1-bfd7-c37a2da8daa1","sequence":{"long":11463},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232134041430,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"427323fd-ef5a-4a26-a014-1329d423f4c4","sequence":{"long":11464},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232134041430,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3435},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa73f368-8c55-46fd-9d1f-66e5fee8a2a8","sequence":{"long":11465},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232134041430,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da33fa71-7d22-4736-8ce0-2501dd0334e4","sequence":{"long":11466},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232134041430,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"636aeb3c-dc65-4316-b67d-a580bdcaf119","sequence":{"long":11467},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232134041430,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1224},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c60b248a-98d9-49fe-925b-9dc2fe19c6ab","sequence":{"long":11468},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232148434520,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09719fd3-e134-49a8-b48a-968c85f96db6","sequence":{"long":11469},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232148434520,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ba62d28-1054-4851-98f1-0d4d8191bd87","sequence":{"long":11470},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232153933994,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2697e36f-b625-4d7b-a4a3-35bc403f54d9","sequence":{"long":11471},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232153933994,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e153dbe-4454-43fd-94a6-6b9c1e04f08e","sequence":{"long":11472},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584232573855164,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":638079},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"654fb135-c88a-4f7b-9b0c-d34ddbfa9eb8","sequence":{"long":11473},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584233534321675,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0054dfd2-7b72-4bb4-9b75-91df9ca816d6","sequence":{"long":11474},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584233534321675,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16964","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a533c35-7926-4e5f-bbbe-c47754ea6098","sequence":{"long":11475},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584233534321675,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16965","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7ffa5f8-c78e-4710-9652-0370a5f614a9","sequence":{"long":11476},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584233534321675,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16966","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55b1c39d-2d5e-428b-be09-437c60b18940","sequence":{"long":11477},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584233534321675,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16967","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35bdd47a-6d2d-46bc-b147-49229e0c7a7c","sequence":{"long":11478},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584233534321675,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16964","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3216bc6d-2b2c-4344-aca1-1446e83fc1aa","sequence":{"long":11479},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584233534321675,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16965","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e9cb3ce-b9fb-4c7b-b78c-41087c7d9e6b","sequence":{"long":11480},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584233534321675,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16966","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"664affec-d1aa-44ff-80c2-f3d5cf386465","sequence":{"long":11481},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584233534321675,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16967","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40fe9103-fbf2-42f4-96cf-e5ab3823483f","sequence":{"long":11482},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584233583899865,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":639261},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1182ff9-3dce-4c56-b9ae-34acd3e7d032","sequence":{"long":11483},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":639261},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe5fd9d6-414b-44d7-a32c-1e4978cbfca5","sequence":{"long":11485},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb701141-2fa3-4f4c-933f-f7a55fdbf5d2","sequence":{"long":11484},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"094fe96a-8179-4c07-9b92-fdf73aa996f7","sequence":{"long":11487},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb68d24b-2fe0-4f1e-8d83-9eefa567b524","sequence":{"long":11486},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7216d629-aab0-4cb9-b846-17e8c3bf8fe2","sequence":{"long":11489},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"225af36f-fdc2-4ad8-be7e-4a47f996380d","sequence":{"long":11488},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0efb50b0-d464-422e-ab44-3989bcbeab6b","sequence":{"long":11490},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89d58cbe-0fa7-4211-b045-6d401b06d0ff","sequence":{"long":11491},"type":"EVENT_READ","threadId":{"int":100179},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3edacb01-8783-47f5-9779-29955ada92be","sequence":{"long":11492},"type":"EVENT_READ","threadId":{"int":100179},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a61d353-9b39-448a-b965-d19b846ab64c","sequence":{"long":11493},"type":"EVENT_READ","threadId":{"int":100179},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4103},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c1f0761-f386-4e17-bb04-98949493580e","sequence":{"long":11494},"type":"EVENT_WRITE","threadId":{"int":100179},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"477310ce-4533-40be-80c8-abad9272ff26","sequence":{"long":11495},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f85b41aa-9517-4736-8902-2d18494a67cb","sequence":{"long":11496},"type":"EVENT_READ","threadId":{"int":100179},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9839d554-c695-4bef-a271-7c0f385b9757","sequence":{"long":11497},"type":"EVENT_READ","threadId":{"int":100179},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b7cd41c-5c2a-46c5-b0e4-5ad8a91e9612","sequence":{"long":11498},"type":"EVENT_READ","threadId":{"int":100179},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1178},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fe87f2f-aa73-4f3a-9633-6d213dd4c838","sequence":{"long":11499},"type":"EVENT_WRITE","threadId":{"int":100179},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7c40fea-9dea-4fa4-9f17-b3f9b0e5f17c","sequence":{"long":11500},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1231},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7107290-a579-4fff-b129-87b320e83c53","sequence":{"long":11501},"type":"EVENT_READ","threadId":{"int":100179},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12a07cae-c288-4e71-a808-f04d6d8fd6fd","sequence":{"long":11502},"type":"EVENT_SENDTO","threadId":{"int":100179},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16968","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f27a9a85-a983-4c64-8d96-65ec8eeaa490","sequence":{"long":11503},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16968","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98f57ed0-3bf2-493f-aaee-8b7205cdb6a5","sequence":{"long":11504},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92ec1ec8-a5f4-4023-8cc6-4e877d9edd6b","sequence":{"long":11505},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34481ed5-b579-4315-9713-d65690d0183c","sequence":{"long":11506},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234124060706,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3918b57-81a7-47ac-8281-8327921adf50","sequence":{"long":11507},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234133884264,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc12ce53-55fe-474e-a2aa-51d8c84474c1","sequence":{"long":11508},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234133884264,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b6523ea-814b-4071-8c7b-c623d280bd92","sequence":{"long":11509},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584234594321050,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":641693},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3b8926e-dcb9-4d0c-baf7-ebfdcd966384","sequence":{"long":11510},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584235604092551,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":642056},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ae3c954-7365-4da8-bec3-3acb940f1c38","sequence":{"long":11511},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":642056},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bab9e3d-b044-481e-9898-8f7761570e2f","sequence":{"long":11513},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd90b309-f2e5-40d6-a4f1-705b23ef125b","sequence":{"long":11512},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4140e730-7eff-4869-b758-271835220bd3","sequence":{"long":11515},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"050d91c6-3213-4d9c-b56d-39530d0a0f33","sequence":{"long":11514},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d3f3d21-02c6-4c90-8f2a-02610c9460c3","sequence":{"long":11517},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09ed3d5a-707f-4d7f-a5c3-e85930e65056","sequence":{"long":11516},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fe7c1c8-91d8-48fc-996f-c7e5aa07e3af","sequence":{"long":11518},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94f0eb4b-defe-4312-a0b8-5bf5594e8eb8","sequence":{"long":11519},"type":"EVENT_READ","threadId":{"int":100180},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a879cdd-af08-417b-8a85-87c8595ca71f","sequence":{"long":11520},"type":"EVENT_READ","threadId":{"int":100180},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd1d5965-bc5f-4048-9465-68f3ec191ea2","sequence":{"long":11521},"type":"EVENT_READ","threadId":{"int":100180},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2428},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c03e677-9224-4487-833a-dc7559e2e1ae","sequence":{"long":11522},"type":"EVENT_WRITE","threadId":{"int":100180},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d3a047b-63ca-4fd2-aa7e-48992e20beb6","sequence":{"long":11523},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2481},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80af1c86-2398-4a0e-901e-16ddc52a05e1","sequence":{"long":11524},"type":"EVENT_READ","threadId":{"int":100180},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68da5737-3abb-4e61-ae51-5ea19a2153ca","sequence":{"long":11525},"type":"EVENT_READ","threadId":{"int":100180},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"367fa3d1-532e-42e1-bdeb-fd8e1b3af3a2","sequence":{"long":11526},"type":"EVENT_READ","threadId":{"int":100180},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9133b62-9cca-4e7d-8e70-cf1af832e81b","sequence":{"long":11527},"type":"EVENT_WRITE","threadId":{"int":100180},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"940d0870-cc8f-4170-9d78-30609fe0f9ff","sequence":{"long":11528},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"443feb3c-fa6e-44e5-9f67-881680549031","sequence":{"long":11529},"type":"EVENT_READ","threadId":{"int":100180},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6416f54-0c31-4cbb-a96a-02ec65443b03","sequence":{"long":11530},"type":"EVENT_SENDTO","threadId":{"int":100180},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16969","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31ee9bcb-3f56-4a3c-8f66-8d19cbfeb2df","sequence":{"long":11531},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16969","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cbfa785-4a75-4858-8160-1c64d1edfed2","sequence":{"long":11532},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a40ddb52-9f4c-455f-83d9-4df2107cc0dd","sequence":{"long":11533},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a571b206-a9fb-4b61-99b3-eb82790a2a86","sequence":{"long":11534},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0693e004-9110-4324-bcc3-7f6c6c44605a","sequence":{"long":11535},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9919ba9-3c59-40e0-a351-95f6afafa341","sequence":{"long":11536},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236124076565,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4a74e10-a173-40db-a633-911e55a56e85","sequence":{"long":11537},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236533867083,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a025aee0-8ac5-4598-8959-9704cf0e35e7","sequence":{"long":11538},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236533867083,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16970","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11b32ed9-c416-4a2f-bdd0-5407211a4f14","sequence":{"long":11539},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236533867083,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16971","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0061cd0e-6782-4f98-b9f3-0d3e62dcabfa","sequence":{"long":11540},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236533867083,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16972","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a429e0f-d1b1-42e4-9e1e-273f32ecd99a","sequence":{"long":11541},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236533867083,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16973","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"683b7439-4bca-449e-b643-9b4c9441322a","sequence":{"long":11542},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236533867083,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16970","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe6f744c-b764-47d3-9f21-15177b2ff3a1","sequence":{"long":11543},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236533867083,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16971","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dce2d7d0-a14a-4917-a6a4-0ee30a46eb84","sequence":{"long":11544},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236533867083,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16972","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61e51597-2ba9-407e-a197-f740ede79681","sequence":{"long":11545},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236533867083,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16973","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"638dcae6-13bf-4588-a497-829fa6254251","sequence":{"long":11546},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584236614304448,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":645284},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f98ac60-17d4-43ba-a449-5bf873232b98","sequence":{"long":11547},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584237623931354,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":645645},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd50a9ee-4b50-4110-b628-2cb85c3a7bc7","sequence":{"long":11548},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":645645},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e61fa2c5-937c-497e-8765-c1bb153def35","sequence":{"long":11550},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3983dc23-965e-40c4-9921-2c729d01a2e2","sequence":{"long":11549},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"734f580d-0006-4e48-b5e2-b63adff3a730","sequence":{"long":11552},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56915fc7-f4ed-4d46-bf6b-c2b5e8c01421","sequence":{"long":11551},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3615b362-a4e5-4e1e-974d-09003a430a00","sequence":{"long":11554},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba7ddf2d-0f14-49e1-9d80-2cc39cd5d036","sequence":{"long":11553},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ae7373f-3dfc-4b48-9002-383f4ccdc00e","sequence":{"long":11555},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b914cdc3-4e02-42d3-87fa-4f0dee512845","sequence":{"long":11556},"type":"EVENT_READ","threadId":{"int":100181},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db62f230-faf2-4d63-a312-adbea6b3ddee","sequence":{"long":11557},"type":"EVENT_READ","threadId":{"int":100181},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ccd0d17-9bbf-4cf4-bacc-075647b82c37","sequence":{"long":11558},"type":"EVENT_READ","threadId":{"int":100181},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3224},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bc3cb7b-270a-4b5c-942f-ac2baad5ff48","sequence":{"long":11559},"type":"EVENT_WRITE","threadId":{"int":100181},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3753b6de-df8f-487f-9487-c3620974cb77","sequence":{"long":11560},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3277},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"764d000f-c1b5-47b4-8eae-8d532a804f79","sequence":{"long":11561},"type":"EVENT_READ","threadId":{"int":100181},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80e665f6-64de-421b-8b21-7cc0c4256458","sequence":{"long":11562},"type":"EVENT_READ","threadId":{"int":100181},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32cf5aac-cbeb-4303-92c1-a3820e2e97fe","sequence":{"long":11563},"type":"EVENT_READ","threadId":{"int":100181},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":357},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85cf8851-d691-4293-bd5b-c8a3176ce07f","sequence":{"long":11564},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":410},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b733fbf-eeaf-4d93-adf3-f2c2a1dc45af","sequence":{"long":11565},"type":"EVENT_WRITE","threadId":{"int":100181},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5630966-c354-44fd-991b-7a212cc74907","sequence":{"long":11566},"type":"EVENT_READ","threadId":{"int":100181},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a1b9b57-3863-4ebb-90a4-23c3a6e0de11","sequence":{"long":11567},"type":"EVENT_SENDTO","threadId":{"int":100181},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16974","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70d81638-ed1f-4c2c-bc0b-29797f9ff886","sequence":{"long":11568},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16974","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbe657b9-d525-4950-bc57-68c580446a30","sequence":{"long":11569},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a7c21a1-aa08-4e42-b093-3cef7c84e281","sequence":{"long":11570},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4575a02-1723-4cff-b581-906ac17e0967","sequence":{"long":11571},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee688bc8-8120-4133-8f85-e5d5e40888fc","sequence":{"long":11572},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ed37f66-1532-4dea-b21c-bd5b8cf44b18","sequence":{"long":11573},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238124044631,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44164289-924f-4131-8700-07e8a96c9f77","sequence":{"long":11574},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584238634374313,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":648068},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45a68116-fcbf-42de-9e9d-3b96a468e156","sequence":{"long":11575},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584239533845286,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61402816-b259-45dc-9d55-365bbe762317","sequence":{"long":11576},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584239533845286,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16975","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2085984d-7dcd-4df7-a98b-372848b8f70d","sequence":{"long":11577},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584239533845286,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16976","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dc9f1d0-b01e-4ea5-93ca-a103fde816ba","sequence":{"long":11578},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584239533845286,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16977","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4693dae-d41e-4d67-a33f-c660550cfb0a","sequence":{"long":11579},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584239533845286,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16978","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87a213b8-27ff-4428-b476-2da239b2d864","sequence":{"long":11580},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584239533845286,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16975","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d121313a-ca3b-420e-9ac9-c1d708035e28","sequence":{"long":11581},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584239533845286,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16976","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7843d05f-cb1d-4b62-ada1-b310e8a11f5c","sequence":{"long":11582},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584239533845286,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16977","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4906d33-3483-4f93-9f76-5580464ced5e","sequence":{"long":11583},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584239533845286,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16978","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"797f024e-2bb3-491b-b61c-24e5bbdf1d78","sequence":{"long":11584},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584239644331221,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":649249},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"690a66b7-4046-4424-b9a6-1520feb98cd3","sequence":{"long":11585},"type":"EVENT_OPEN","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":{"string":"/etc/cron.d"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240013831477,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00e808"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a43a2f28-f560-46f7-87e1-fa2d8fea263e","sequence":{"long":11586},"type":"EVENT_CLOSE","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240013831477,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72ed74ba-9cde-4382-a498-e34a653b6fdb","sequence":{"long":11587},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":649249},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d3db428-011b-43f3-a27e-5981623f7dad","sequence":{"long":11589},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c84c071-892f-43ac-9a91-6ab278a62e2d","sequence":{"long":11588},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e464548c-4e04-4f60-9592-1d67f957fb11","sequence":{"long":11591},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"831000c1-8b19-4131-b291-a28500bc1cce","sequence":{"long":11590},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dbd14e8-9ad0-4af4-b598-bf9215b197dc","sequence":{"long":11593},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bcda16c-89f9-402b-8fa7-bb663847fcfc","sequence":{"long":11592},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebf15ac3-32bc-4f96-918e-0147c89f201a","sequence":{"long":11594},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d5d4109-1a10-4747-83bf-24ff0f0fe42c","sequence":{"long":11595},"type":"EVENT_READ","threadId":{"int":100182},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33da0a12-4719-4a0b-a950-1c4c4d730ae6","sequence":{"long":11596},"type":"EVENT_READ","threadId":{"int":100182},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a2fccd9-586c-4136-8208-e8868dbb5aaa","sequence":{"long":11597},"type":"EVENT_READ","threadId":{"int":100182},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2419},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a839c901-1a2a-4a68-a700-45d17ad64108","sequence":{"long":11598},"type":"EVENT_WRITE","threadId":{"int":100182},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"584db2ea-801e-4928-84dc-120d2f6a4726","sequence":{"long":11599},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2472},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd81c40a-bbd6-4a21-8213-4176cb373241","sequence":{"long":11600},"type":"EVENT_READ","threadId":{"int":100182},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a9a8640-8119-45fa-a453-1ce8d54f1090","sequence":{"long":11601},"type":"EVENT_READ","threadId":{"int":100182},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e0f27a4-bde3-4120-9e86-8ef9e8a6d085","sequence":{"long":11602},"type":"EVENT_READ","threadId":{"int":100182},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1177},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b500504-796e-42f9-b0fe-62c00bef6234","sequence":{"long":11603},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1230},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbefbefc-a6e0-49b8-b4b4-d726304892fa","sequence":{"long":11604},"type":"EVENT_WRITE","threadId":{"int":100182},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e2cf984-9a9b-4e9a-a88d-37694d46370b","sequence":{"long":11605},"type":"EVENT_READ","threadId":{"int":100182},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"215854c8-801f-4718-8e7b-c9aca48a9b2f","sequence":{"long":11606},"type":"EVENT_SENDTO","threadId":{"int":100182},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16979","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d31704c-4851-483b-bfca-457628fd349f","sequence":{"long":11607},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16979","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7783af96-35ee-4607-a08b-ba0d3647c6f2","sequence":{"long":11608},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5f0a27b-d826-4f78-9ab9-cf6ae7b0694f","sequence":{"long":11609},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a749bc9a-7f42-400e-8f15-fc99ffc69629","sequence":{"long":11610},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57f45131-b2a4-4205-9097-9b1a139d7355","sequence":{"long":11611},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c041c8ad-cf12-4acc-b4e4-d77c3acd9303","sequence":{"long":11612},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240124263657,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da97eb5f-df31-4232-8a37-d5efc087c89f","sequence":{"long":11613},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584240654589430,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":652060},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc5b806d-ea27-4a55-828b-87012feaaa0d","sequence":{"long":11614},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584241663878328,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":652426},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b6346c4-6b33-4c1d-bf37-c30715b5b90a","sequence":{"long":11615},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":652426},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f6baf10-3d5c-4375-a1f7-bf65346e402e","sequence":{"long":11617},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f033a30-1ec0-404e-96c7-1b0800a26411","sequence":{"long":11616},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38892837-9bea-4dd9-9a46-3b127d250410","sequence":{"long":11619},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8aaa187b-0f29-42dd-8b46-f56ad740b37e","sequence":{"long":11618},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efea11dd-a29a-4772-8f8f-84178918d03d","sequence":{"long":11621},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4ba092f-8576-4a54-9d72-0723230f2e3e","sequence":{"long":11620},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"406bc747-80d3-40b8-8194-7c18364bdfb2","sequence":{"long":11622},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0e36674-2d81-4b0f-a697-1ec30e5c65c6","sequence":{"long":11623},"type":"EVENT_READ","threadId":{"int":100183},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fc6c934-80f2-4855-ba00-be7e04f35600","sequence":{"long":11624},"type":"EVENT_READ","threadId":{"int":100183},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68c357e0-8be9-4486-9b35-61ad1bb086e3","sequence":{"long":11625},"type":"EVENT_READ","threadId":{"int":100183},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2807},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e382f7d-bd95-402d-bee2-e95d26a25a47","sequence":{"long":11626},"type":"EVENT_WRITE","threadId":{"int":100183},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"baf6c6a5-1f89-4878-bde7-fe5ce39be63d","sequence":{"long":11627},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2860},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea00b200-c1b5-43b2-822a-ba3360971578","sequence":{"long":11628},"type":"EVENT_READ","threadId":{"int":100183},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5b64b58-5aeb-472c-85bb-36eff9f099ac","sequence":{"long":11629},"type":"EVENT_READ","threadId":{"int":100183},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4b9936d-78ee-467e-80b3-8515ecafe7b8","sequence":{"long":11630},"type":"EVENT_READ","threadId":{"int":100183},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":362},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c78b8ea9-8505-4286-b1be-53b72fbc5d6c","sequence":{"long":11631},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":415},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed567d02-ded1-41ee-b306-1bbb0820ddbf","sequence":{"long":11632},"type":"EVENT_WRITE","threadId":{"int":100183},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab9d6b77-9790-4ccd-a195-523965569770","sequence":{"long":11633},"type":"EVENT_READ","threadId":{"int":100183},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0253911d-4dc4-4f0c-b3ec-5eca8b781c54","sequence":{"long":11634},"type":"EVENT_SENDTO","threadId":{"int":100183},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16980","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1091d5e0-1306-4a18-a84b-297721973ba0","sequence":{"long":11635},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16980","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4eb0956f-8c8e-4971-b756-416928bb8634","sequence":{"long":11636},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d5be2cd-5662-45b8-af98-6a3251793d72","sequence":{"long":11637},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e475344-d77b-43ee-9575-0b7b0577e8fd","sequence":{"long":11638},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38c9a24c-e8a0-4fe5-9c47-8d4ca7288c11","sequence":{"long":11639},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c4a86d8-3ec8-4738-942d-3cda878820b0","sequence":{"long":11640},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242123835901,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ad03c9f-4fe3-4158-95fb-5dca86019ed1","sequence":{"long":11641},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242533909016,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2ecceba-76eb-4c54-91fc-1fcf8878f40c","sequence":{"long":11642},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242533909016,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16981","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c135a687-47c5-4a78-81f8-7fb58b1d71bb","sequence":{"long":11643},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242533909016,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16982","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d6eee27-8ce8-49e1-aff1-63a8da275a85","sequence":{"long":11644},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242533909016,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16983","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"723a43ab-2465-4c95-b898-8d2f40c1a7a9","sequence":{"long":11645},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242533909016,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16984","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b77f723b-a583-4d9c-b526-539a6731079a","sequence":{"long":11646},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242533909016,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16981","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"461f5eb9-9ae5-47c2-9115-cd81ed4e1f08","sequence":{"long":11647},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242533909016,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16982","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ce104ba-6d4f-49d1-a634-6016e79bdd35","sequence":{"long":11648},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242533909016,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16983","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b7ad9b3-4fdb-4e6e-8e4e-2d0205b777cf","sequence":{"long":11649},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242533909016,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16984","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"761797c8-6b7e-4406-8a1f-a64ed535d63c","sequence":{"long":11650},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584242674177471,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":655649},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05580f34-341b-4d27-aaf1-bdd1b3383015","sequence":{"long":11651},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584243683918291,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":656010},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7e5dde9-25da-41a8-9f1c-993aea8565f1","sequence":{"long":11652},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":656010},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70dd722b-61c7-43fa-9372-330e4f8e35af","sequence":{"long":11654},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0c6a4e7-1ba6-422b-9313-d450430a4e13","sequence":{"long":11653},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb4ace75-4a09-43cd-ac67-dc579caeb24a","sequence":{"long":11656},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8188f1cd-1acb-42b9-b021-4859f543b808","sequence":{"long":11655},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"180c6284-d6b5-4f7d-9393-3e0332819265","sequence":{"long":11658},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d08f33cc-46f0-46ca-9f9f-645b98a1230d","sequence":{"long":11657},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce674730-9977-4c8e-b851-4f1645affeae","sequence":{"long":11659},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe21695e-5e62-4d2e-8d15-72c7e12ac86f","sequence":{"long":11660},"type":"EVENT_READ","threadId":{"int":100184},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69dc6a1a-fe61-4ff0-8e35-f42c7ed924af","sequence":{"long":11661},"type":"EVENT_READ","threadId":{"int":100184},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f0bebf0-b80c-44ea-bb41-91a27ba2978f","sequence":{"long":11662},"type":"EVENT_READ","threadId":{"int":100184},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3219},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7b42114-8add-4387-8611-5414f2c14391","sequence":{"long":11663},"type":"EVENT_WRITE","threadId":{"int":100184},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33bd6b71-cfbb-41ac-a601-92e6f43d8404","sequence":{"long":11664},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3dbc103-84f9-4274-b40e-b72fba75b5b1","sequence":{"long":11665},"type":"EVENT_READ","threadId":{"int":100184},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55a42701-61d2-49a8-8b88-282c0ddd1831","sequence":{"long":11666},"type":"EVENT_READ","threadId":{"int":100184},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0677dba-b315-49c7-8577-96aa6f941683","sequence":{"long":11667},"type":"EVENT_READ","threadId":{"int":100184},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":357},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b6a72b8-326e-40c9-813d-47e5a71afed2","sequence":{"long":11668},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":410},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"606f6cea-c439-4e06-ba75-541d47dde63b","sequence":{"long":11669},"type":"EVENT_WRITE","threadId":{"int":100184},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce084160-6437-4c1b-886c-024e75fc65f2","sequence":{"long":11670},"type":"EVENT_READ","threadId":{"int":100184},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c4cd16b-d702-4f7b-8d70-bc0e7734e1df","sequence":{"long":11671},"type":"EVENT_SENDTO","threadId":{"int":100184},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16985","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"657b3f0f-ada0-4d6f-b777-2657fcceaa13","sequence":{"long":11672},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16985","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"359e4d8b-f275-4282-a2cd-09202394b155","sequence":{"long":11673},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4564785f-fe36-4e35-9523-0025685e83dc","sequence":{"long":11674},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfa8fef5-7e1e-40cb-9f8e-8ca7c1854254","sequence":{"long":11675},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0151cdcb-d937-4ec5-aad4-586128ec48b8","sequence":{"long":11676},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8ee0f9c-5c04-4f01-9400-ee6adba1fa8d","sequence":{"long":11677},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244123864715,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ee539cd-bb8c-4349-b8c2-86ac1cd7f713","sequence":{"long":11678},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584244694062516,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":658433},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f01bb5d-eda7-4a93-84e5-0160a6c89da8","sequence":{"long":11679},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584245534369468,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4889d01c-cde3-4f8b-9a7a-1dd88d62f30a","sequence":{"long":11680},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584245534369468,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16986","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea7c2112-60fd-4aae-958a-c544af57452c","sequence":{"long":11681},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584245534369468,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16987","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fda9481-b2bd-4318-acee-71d7eb1894bb","sequence":{"long":11682},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584245534369468,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16988","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fafe1bad-d6a1-4ef8-a2d2-1c20017be212","sequence":{"long":11683},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584245534369468,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16989","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cefc13e7-df4e-49a9-93d0-c2676c824f7c","sequence":{"long":11684},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584245534369468,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16986","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3a6c74c-b649-4307-9551-a656ecf25575","sequence":{"long":11685},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584245534369468,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16987","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71023d38-ff1d-447e-82f6-cddc76cf0ce1","sequence":{"long":11686},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584245534369468,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16988","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ed55b6e-c7b7-49b8-bd99-52df9d0e6b24","sequence":{"long":11687},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584245534369468,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16989","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8165d3af-b7f4-4ca3-b735-7c7cceaf2fa2","sequence":{"long":11688},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584245703944747,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":659614},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b682e971-1f26-4e62-9d54-d5ad9bf62e19","sequence":{"long":11689},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":659614},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24426529-0c9f-41f3-83cb-9bd60b92a74a","sequence":{"long":11691},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cf3721a-7685-4f83-9eaa-b3447814842d","sequence":{"long":11690},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1e3eb7c-28f3-4a12-b2c1-a0ada56247e8","sequence":{"long":11693},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"379971dc-09d1-4d8e-bcf7-6dcbed1117e3","sequence":{"long":11692},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"311a867d-1da2-4b8e-97f6-7e2dc870972e","sequence":{"long":11695},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7ce832e-a00d-46cf-b736-c42e63ff7185","sequence":{"long":11694},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b58a950d-71fc-432f-a482-bd42740173ac","sequence":{"long":11696},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a27ea3f3-a099-4bb5-957b-e473b42daeee","sequence":{"long":11697},"type":"EVENT_READ","threadId":{"int":100185},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78d2a7bc-af5d-4bb1-9ee3-cb40da895efe","sequence":{"long":11698},"type":"EVENT_READ","threadId":{"int":100185},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17af53d1-e8e9-42c1-a6de-4a837091e807","sequence":{"long":11699},"type":"EVENT_READ","threadId":{"int":100185},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2419},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"111f3700-345f-4f01-8921-08821162759a","sequence":{"long":11700},"type":"EVENT_WRITE","threadId":{"int":100185},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77d1c457-c4ec-4fa5-8a38-f7ea6aa8972a","sequence":{"long":11701},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2472},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2995be8e-2a3b-41c5-aea4-2e55108cfd36","sequence":{"long":11702},"type":"EVENT_READ","threadId":{"int":100185},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a67cd36-9cd7-458e-a6a0-7e88bcdb9bb7","sequence":{"long":11703},"type":"EVENT_READ","threadId":{"int":100185},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3be672f0-1d84-4f54-b889-207aaf1e0404","sequence":{"long":11704},"type":"EVENT_READ","threadId":{"int":100185},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1177},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95657196-c8c9-4b50-b967-cad7d3155545","sequence":{"long":11705},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1230},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1863d56d-5f75-4dc2-8d79-2afb3a818bc0","sequence":{"long":11706},"type":"EVENT_WRITE","threadId":{"int":100185},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d50c2d5b-11db-4bbf-892f-97c4d41d41ee","sequence":{"long":11707},"type":"EVENT_READ","threadId":{"int":100185},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"391a396f-30ff-4840-80bc-8fd436dc7358","sequence":{"long":11708},"type":"EVENT_SENDTO","threadId":{"int":100185},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16990","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1159a7a3-f77c-4e3d-97a2-e1e73ecebdbb","sequence":{"long":11709},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16990","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9467265c-6899-4fdf-9edf-c4212d2f3b43","sequence":{"long":11710},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04a47e9e-e952-4fe4-9543-c887e0747a43","sequence":{"long":11711},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fe0f15f-0a30-4682-9f4f-9404f1139b54","sequence":{"long":11712},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb540d11-c559-4716-8460-59574c9aceb1","sequence":{"long":11713},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d7a6d25-d552-4144-bd12-d82101755d45","sequence":{"long":11714},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246124723019,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e5e28fb-5bdf-4db2-8e90-0bb476ac87be","sequence":{"long":11715},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584246714452213,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":662036},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebb78c66-217d-434e-934f-a5dc61f6df86","sequence":{"long":11716},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584247724106486,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":662399},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4437a6e-a7c7-4b98-8cc0-2fe8561f34c3","sequence":{"long":11717},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":662399},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c4d732c-b567-4d0d-b489-432da31b1f8d","sequence":{"long":11719},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfd5f11e-d7b6-4e77-a669-fed889abd8d0","sequence":{"long":11718},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd9a1066-63df-4118-87e4-314669c7f5e0","sequence":{"long":11721},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"069f6b48-acf5-426b-bea1-4e281728d79e","sequence":{"long":11720},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ad8da7f-5303-44d0-9345-cf37580c5d68","sequence":{"long":11723},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5115156b-a3d4-4497-987b-1eb022dc0cc2","sequence":{"long":11722},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5d53bee-da41-470c-9ead-cbfa52a33899","sequence":{"long":11724},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2824d6d-0e44-4a5f-9fbe-a2d55b463f59","sequence":{"long":11725},"type":"EVENT_READ","threadId":{"int":100186},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7124cbd8-fffa-4ef8-9758-db3b04d7fecb","sequence":{"long":11726},"type":"EVENT_READ","threadId":{"int":100186},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"785e94a9-035b-4fa5-a02c-8fd0ff0c313f","sequence":{"long":11727},"type":"EVENT_READ","threadId":{"int":100186},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2418},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd687c3d-5c8c-46ac-97e6-6f6e66907f95","sequence":{"long":11728},"type":"EVENT_WRITE","threadId":{"int":100186},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"763e3154-6a63-4919-b1d5-5d204ae9316b","sequence":{"long":11729},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2471},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74ff15c1-0e05-4a82-84be-8ee56f740afa","sequence":{"long":11730},"type":"EVENT_READ","threadId":{"int":100186},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29a352a2-f175-421c-8ade-7e73c23407d2","sequence":{"long":11731},"type":"EVENT_READ","threadId":{"int":100186},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2454cc7-6c6c-4f1c-92e6-bba672d07472","sequence":{"long":11732},"type":"EVENT_READ","threadId":{"int":100186},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d7e3153-4116-4e24-8acb-023a466d9f9a","sequence":{"long":11733},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5410781b-8ad7-49a2-9260-68ceffd17c61","sequence":{"long":11734},"type":"EVENT_WRITE","threadId":{"int":100186},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f65c79c6-f0e7-417b-83fd-33ef429a7d29","sequence":{"long":11735},"type":"EVENT_READ","threadId":{"int":100186},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"144e56d3-1c7c-4301-a37e-e365b913752b","sequence":{"long":11736},"type":"EVENT_SENDTO","threadId":{"int":100186},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16991","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f56c400-3fb0-402c-a219-41de6b00f9e4","sequence":{"long":11737},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16991","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41c59c8d-27eb-4c82-a8da-4cf374d0e018","sequence":{"long":11738},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffd1c4bc-24bc-4cb4-8fa2-d4323d12751d","sequence":{"long":11739},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"163c78f1-f8c5-498c-98a3-7a7394e1d722","sequence":{"long":11740},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4347bc74-0de2-485d-a0f5-539fdff8b0ac","sequence":{"long":11741},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fbf0771-b3cd-492e-acd8-05015554e07d","sequence":{"long":11742},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248123829994,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76debaa8-5b15-4fe8-87f3-9c1fda3b2061","sequence":{"long":11743},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248534469121,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9acbd8f5-52b7-499f-944b-06adb2ae49db","sequence":{"long":11744},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248534469121,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16992","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"334a4b2f-1654-4849-860c-d609ba573607","sequence":{"long":11745},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248534469121,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16993","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d80b18a-2ed9-4a88-9ed9-3b60eea97dee","sequence":{"long":11746},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248534469121,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16994","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6dce3d0e-0660-4057-808f-dbc7fd405f47","sequence":{"long":11747},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248534469121,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16995","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0b67a94-105a-4f1b-a3fc-287fd9a73bfe","sequence":{"long":11748},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248534469121,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16992","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67a4fc68-8dc8-4815-b9b0-9f151bff041b","sequence":{"long":11749},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248534469121,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16993","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffd1914e-573a-4fb3-9e92-d6d0d983f507","sequence":{"long":11750},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248534469121,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16994","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5aef5149-9bab-4d45-99b4-277f3c9d0afe","sequence":{"long":11751},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248534469121,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16995","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f09f9ae0-256f-4546-b4e7-70e7139dbc3d","sequence":{"long":11752},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584248733947226,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":665619},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8eaaffd-dbab-4a7f-bb1b-683b51eadb76","sequence":{"long":11753},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584249743883976,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":665983},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0453fdb-1bc2-43dd-bca4-343592f2d7ba","sequence":{"long":11754},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":665983},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b4f1d95-5676-4bba-9dfb-46a804daea17","sequence":{"long":11756},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5838eec-6636-45f2-878c-2415a877e880","sequence":{"long":11755},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"909313aa-bd3a-4b1e-83a9-6da0620d64e6","sequence":{"long":11758},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca7b9390-430a-4354-b004-c0166cfffbb3","sequence":{"long":11757},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c4ed7a2-c7a8-40d1-8562-74f30210b67d","sequence":{"long":11760},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21528594-8f8b-4d07-bd34-84b29260745b","sequence":{"long":11759},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03f530dc-9d45-4bb6-9bb3-04a80458c05e","sequence":{"long":11761},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78347a6e-b2d3-4e67-9572-b771aa5aab98","sequence":{"long":11762},"type":"EVENT_READ","threadId":{"int":100187},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f393cb8-ae07-4aea-8a46-6e4e2330a803","sequence":{"long":11763},"type":"EVENT_READ","threadId":{"int":100187},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e99c7d9c-c889-4cf3-b99b-47db6acd0259","sequence":{"long":11764},"type":"EVENT_READ","threadId":{"int":100187},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3216},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93bb59fa-f17f-4e8a-b56d-5e0918439bb6","sequence":{"long":11765},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3269},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aacbbd94-f5c1-4b3f-a1d9-06a61078a3d7","sequence":{"long":11766},"type":"EVENT_WRITE","threadId":{"int":100187},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8662563f-5727-4a65-a600-1cd8d8525b4e","sequence":{"long":11767},"type":"EVENT_READ","threadId":{"int":100187},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1730e2aa-d6e7-4874-95e2-9603426c3fb3","sequence":{"long":11768},"type":"EVENT_READ","threadId":{"int":100187},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa623054-615e-4521-ba19-5a32af61ea18","sequence":{"long":11769},"type":"EVENT_READ","threadId":{"int":100187},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8961e2b-683f-482e-90b3-30463618b74e","sequence":{"long":11770},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9097f42-a385-419a-bb26-55f68217ed1f","sequence":{"long":11771},"type":"EVENT_WRITE","threadId":{"int":100187},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2848cf7-fdb8-4c2d-a85d-02560a7a5741","sequence":{"long":11772},"type":"EVENT_READ","threadId":{"int":100187},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80469e30-f8d8-43f6-9926-417492ec84e0","sequence":{"long":11773},"type":"EVENT_SENDTO","threadId":{"int":100187},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16996","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d250306-cf09-4e94-84ad-36e56ec120eb","sequence":{"long":11774},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"16996","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e39c438e-e81c-438f-9ea2-2882bce26082","sequence":{"long":11775},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250124290863,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1539e57b-15a9-4280-bf6a-6d82d98973e5","sequence":{"long":11776},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250133889925,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a72fb74f-99d5-479d-a594-c687c064bf73","sequence":{"long":11777},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250133889925,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e993def-d198-4ebb-85ad-a152022f30e0","sequence":{"long":11778},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250133889925,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5b4af6c-5e8c-48a7-a86d-7ab0cab9cd76","sequence":{"long":11779},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250133889925,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58873b19-6363-4815-a6d5-24b607f1e04d","sequence":{"long":11780},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584250754130972,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":668417},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a05751a-00fc-4bee-a602-fe8bcc8c6146","sequence":{"long":11781},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584251533828907,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d589488-2265-43de-9617-b89aa619affc","sequence":{"long":11782},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584251533828907,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16997","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"979fab35-d9d3-42e6-8a0a-ac1a7516e583","sequence":{"long":11783},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584251533828907,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16998","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7a3bb7e-b756-471a-a01c-c639fc0b7cc6","sequence":{"long":11784},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584251533828907,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16999","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5613bbfe-77e6-4e7e-848f-0e9bdb8a29a4","sequence":{"long":11785},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584251533828907,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17000","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f2c6c3e-b70b-46bb-b4a1-3dda1c9797e6","sequence":{"long":11786},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584251533828907,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"16997","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b87e17d-6f9c-4496-88d8-faf2a4914a6f","sequence":{"long":11787},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584251533828907,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"16998","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42724406-314e-4b4c-9fa7-3d5e8527b2be","sequence":{"long":11788},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584251533828907,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"16999","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fe45ef3-bcfd-46de-902f-26169fd00c24","sequence":{"long":11789},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584251533828907,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17000","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eceb57e2-e21a-4f89-824d-c351a0659bd5","sequence":{"long":11790},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584251764182090,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":669604},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"602db5df-146c-42f2-b9e4-059e046c994b","sequence":{"long":11791},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":669604},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f92e8133-4153-491f-8cc3-d9e3802df09f","sequence":{"long":11793},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e457f08-b897-44ab-a81b-b96006c29477","sequence":{"long":11792},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1180449f-7c4a-426e-8f5f-0492e1dc277f","sequence":{"long":11795},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"891a0686-d2cf-43dd-bacd-9b920347df24","sequence":{"long":11794},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"967a8372-1721-48fe-9da8-77410cee0213","sequence":{"long":11797},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b96d0625-806e-4c2d-838c-a25d774a6969","sequence":{"long":11796},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ec6c3dc-1b0f-46ad-85c9-22be7864c76b","sequence":{"long":11798},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"127d8778-7492-4033-9c16-89c9f9d2ddcd","sequence":{"long":11799},"type":"EVENT_READ","threadId":{"int":100188},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0f51f65-1deb-470d-8e12-7d1aabf47590","sequence":{"long":11800},"type":"EVENT_READ","threadId":{"int":100188},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8d3d743-82e6-4a7f-a1df-f597548926b5","sequence":{"long":11801},"type":"EVENT_READ","threadId":{"int":100188},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2430},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90fdd458-f278-4af9-b860-e67940691145","sequence":{"long":11802},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2483},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee156fa8-2937-4c9c-90ca-8a772d06e231","sequence":{"long":11803},"type":"EVENT_WRITE","threadId":{"int":100188},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"556113a4-7583-4264-b094-46890c93476d","sequence":{"long":11804},"type":"EVENT_READ","threadId":{"int":100188},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8be1611d-20bf-4283-9175-7cd57a25ad7a","sequence":{"long":11805},"type":"EVENT_READ","threadId":{"int":100188},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a5d387c-f0a2-4cde-844a-50e5a76ced81","sequence":{"long":11806},"type":"EVENT_READ","threadId":{"int":100188},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1183},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c81e1a75-1b05-4e25-9a79-fbe1f524e98b","sequence":{"long":11807},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1236},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad0fecd0-949f-4af6-9afc-9c207964231d","sequence":{"long":11808},"type":"EVENT_WRITE","threadId":{"int":100188},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a9dfc96-025f-4bfd-acea-90349e65a2a2","sequence":{"long":11809},"type":"EVENT_READ","threadId":{"int":100188},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"954d74bb-1d16-4fe1-a518-59d0cf679c01","sequence":{"long":11810},"type":"EVENT_SENDTO","threadId":{"int":100188},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17001","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb360ed1-4986-49e4-9f23-aa1d50bb5edb","sequence":{"long":11811},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17001","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dce6d262-6408-4739-aae8-4293af5878b5","sequence":{"long":11812},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252128142806,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7877967-d72c-4b26-969a-c61d9803002f","sequence":{"long":11813},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252133832584,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52753dca-6fd8-4c33-a054-c3fc156becbd","sequence":{"long":11814},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252133832584,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faedc374-ba37-4fe8-b510-3e821b2f4bf2","sequence":{"long":11815},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252133832584,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"547d4fe6-5631-4945-8587-a83cefe871e4","sequence":{"long":11816},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252133832584,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a71b0573-57a0-435e-bd28-ea2872d19801","sequence":{"long":11817},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584252774116018,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":672026},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b64c769-6693-4d4d-bf48-4e8b3f3707fb","sequence":{"long":11818},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584253783852317,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":672393},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8c05678-baf1-4be7-9e2b-201fe6d979bf","sequence":{"long":11819},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":672393},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d7588f5-f632-4cc5-a3f0-fd059127fc34","sequence":{"long":11821},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47965a10-58e7-456b-9657-6864408537e9","sequence":{"long":11820},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0889d4f1-a0d5-48f0-acd9-4ee605fbb9ad","sequence":{"long":11823},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1d04e05-a726-428c-8640-406d09922026","sequence":{"long":11822},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cf61af9-49d0-4e3b-b559-fc55a022edd1","sequence":{"long":11825},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07c747a2-c42c-475a-b66c-a233256ce2ec","sequence":{"long":11824},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42be733e-c3fa-4223-bf58-f9ec63994536","sequence":{"long":11826},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a871295-d3af-4ef2-9fb4-4f968097ce75","sequence":{"long":11827},"type":"EVENT_READ","threadId":{"int":100189},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4fc0757-3003-412f-bbcf-fc0a7f571d30","sequence":{"long":11828},"type":"EVENT_READ","threadId":{"int":100189},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25541ea0-9577-45eb-b2b4-2f25b5e9d174","sequence":{"long":11829},"type":"EVENT_READ","threadId":{"int":100189},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2418},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a565afd-1c02-4441-b7dc-0b2601fa1b96","sequence":{"long":11830},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2471},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"caa3bd3a-ac50-48be-80cb-7fd1731a9025","sequence":{"long":11831},"type":"EVENT_WRITE","threadId":{"int":100189},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37ae6697-39e4-4ed9-a502-9817f7e57eb6","sequence":{"long":11832},"type":"EVENT_READ","threadId":{"int":100189},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08db91c2-6409-4c08-afbd-f38689d668d2","sequence":{"long":11833},"type":"EVENT_READ","threadId":{"int":100189},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a79458f9-c195-4cf3-af67-b2a616a1ff5a","sequence":{"long":11834},"type":"EVENT_READ","threadId":{"int":100189},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":363},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e473719b-3464-42fd-a9c6-82630838591e","sequence":{"long":11835},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":416},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb4a4bb3-156d-46fa-9d43-48a360a4411f","sequence":{"long":11836},"type":"EVENT_WRITE","threadId":{"int":100189},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5857a8e6-ede7-4152-9c78-6e86d73f46aa","sequence":{"long":11837},"type":"EVENT_READ","threadId":{"int":100189},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1220f254-dfa3-4236-b072-4897c8e392f8","sequence":{"long":11838},"type":"EVENT_SENDTO","threadId":{"int":100189},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17002","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d21123a1-02af-41bf-97a3-7085060e2a50","sequence":{"long":11839},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17002","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18e5939e-f7cd-4da5-beb1-2517c93db68a","sequence":{"long":11840},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24f514be-649b-495c-8acc-18ad4db9b606","sequence":{"long":11841},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"076c25d2-81d3-48b5-b1a7-bfc8fdf6fccb","sequence":{"long":11842},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90c0e1de-35db-40fb-a8d8-dcabd750cb42","sequence":{"long":11843},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa9a4bed-88ac-49ad-bbca-d89bf2126067","sequence":{"long":11844},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254124572306,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94ecc7ac-e1b7-4558-9152-7b858d483fd6","sequence":{"long":11845},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254533862315,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f12df37-0a68-4040-b644-48c9f752b767","sequence":{"long":11846},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254533862315,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cf41cbf-b304-48a5-be72-98de387c1a0b","sequence":{"long":11847},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254533862315,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17004","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28d8c790-0446-4f47-9a25-edfb729c9325","sequence":{"long":11848},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254533862315,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17005","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6368fdd7-183c-4f23-a97e-9c478cc86ab9","sequence":{"long":11849},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254533862315,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17006","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7aceb653-e686-43d1-9276-dc17736ba187","sequence":{"long":11850},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254533862315,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"430ae194-9fe5-4bc0-8b19-8600e371eec0","sequence":{"long":11851},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254533862315,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17004","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a15296ee-bb21-41c1-98ab-471894072a50","sequence":{"long":11852},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254533862315,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17005","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e12aef2-ddee-466f-84cf-dad6f76988ce","sequence":{"long":11853},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254533862315,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17006","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c463c07-e20f-4d39-94e5-90d72ddf1c20","sequence":{"long":11854},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584254793926066,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":675609},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c60f1ea9-0ffa-4c76-8f11-01fe56b5018e","sequence":{"long":11855},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584255804132553,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":675972},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca4417aa-4a97-4714-8c54-6a53d0c17dc9","sequence":{"long":11856},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":675972},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92c35b11-37af-4ade-8a5e-19006d63e797","sequence":{"long":11858},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"106dc240-bb4e-4648-ac97-51267f0e6436","sequence":{"long":11857},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a95ca6f-9948-431c-b461-0bf18d7bba42","sequence":{"long":11860},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9b0417f-51b8-4c4c-b20a-eb0b7eb62e2d","sequence":{"long":11859},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faf6c6e5-114d-43f5-8a62-33407ead038f","sequence":{"long":11862},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a47f62c-ffe5-405f-ab6a-b35e2eaeed6c","sequence":{"long":11861},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"107b94e7-701b-4995-b8ab-d7c1828664ea","sequence":{"long":11863},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbcab5f9-a041-44fd-983e-f1ce42430643","sequence":{"long":11864},"type":"EVENT_READ","threadId":{"int":100190},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b5bc642-5079-4924-976c-c8bfd07fabd4","sequence":{"long":11865},"type":"EVENT_READ","threadId":{"int":100190},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"739d30c8-2973-494b-b282-1223e7057cb7","sequence":{"long":11866},"type":"EVENT_READ","threadId":{"int":100190},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3212},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"262a8104-5e9f-47d8-bf49-42f677efef0e","sequence":{"long":11867},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3265},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58702d91-ac4c-46f4-9d2e-98b47f1bef0a","sequence":{"long":11868},"type":"EVENT_WRITE","threadId":{"int":100190},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79e61edc-8f44-4ba4-9667-edfbcf7c3f4c","sequence":{"long":11869},"type":"EVENT_READ","threadId":{"int":100190},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aff7a313-6f07-4b34-94ab-0ab1aec91460","sequence":{"long":11870},"type":"EVENT_READ","threadId":{"int":100190},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8a79c59-f9bd-4c39-bad6-bc20d882f79a","sequence":{"long":11871},"type":"EVENT_READ","threadId":{"int":100190},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1827b91f-588b-407a-ab75-1a8b31b67361","sequence":{"long":11872},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98e4e1cb-2119-4272-a294-320636261abc","sequence":{"long":11873},"type":"EVENT_WRITE","threadId":{"int":100190},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1b6a474-7ca0-478e-9006-3057491350ab","sequence":{"long":11874},"type":"EVENT_READ","threadId":{"int":100190},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8e601d6-7381-4d79-b729-222a17e1ca34","sequence":{"long":11875},"type":"EVENT_SENDTO","threadId":{"int":100190},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17007","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cca3327f-8e59-4102-9946-039af3febf4d","sequence":{"long":11876},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17007","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c69b9273-c219-4bd7-ac24-3af49f183310","sequence":{"long":11877},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d74f0ef5-2a75-449a-8a02-4d3aff1b2e93","sequence":{"long":11878},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9be6ebf-2ffc-43db-a306-0f882c192969","sequence":{"long":11879},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c79c8bc-ca1d-45c6-aee5-10bb3fe5de9c","sequence":{"long":11880},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18c0a00a-a3e2-4179-be9e-e9c01a2eafc5","sequence":{"long":11881},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256123948563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bac29e1-cb89-486b-a11b-bae52b97a7fd","sequence":{"long":11882},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584256814318189,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":678389},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb67bdf7-e1f6-4850-9531-1251fc452d66","sequence":{"long":11883},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584257534350792,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12ef55e3-96b3-438a-9217-005d9c62e15d","sequence":{"long":11884},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584257534350792,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17008","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e02e23c-3f35-4e29-8362-078db6e3c027","sequence":{"long":11885},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584257534350792,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17009","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02b8ec95-81c0-4582-ac88-0ac77e0d2147","sequence":{"long":11886},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584257534350792,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17010","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fafe1368-864a-4214-b01e-1f581dd6025a","sequence":{"long":11887},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584257534350792,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17011","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"807737e8-9074-46d1-a644-6a8cbbc8178e","sequence":{"long":11888},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584257534350792,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17008","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59e64b23-b083-4e20-b356-870eacd2e4b6","sequence":{"long":11889},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584257534350792,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17009","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78c4c09b-d0b7-4d50-b8e9-3f6c6de68708","sequence":{"long":11890},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584257534350792,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17010","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd74b509-442c-4782-99ea-b40deb7da173","sequence":{"long":11891},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584257534350792,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17011","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00735db3-1ba8-41c2-88ee-81b5a9c3bb3a","sequence":{"long":11892},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584257824352420,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":679571},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"382b2b92-3b20-49f2-bb7a-9dcccd61dd4a","sequence":{"long":11893},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":679571},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b6f4d19-1b80-44ae-bf7d-c496e766287e","sequence":{"long":11895},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4decee69-82ab-48ac-9100-e79ef1e8499e","sequence":{"long":11894},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5aaa961a-2138-4ac1-8f11-333eacedf7b4","sequence":{"long":11897},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee5aa7ee-1f14-41cb-9fc5-898f1227caf4","sequence":{"long":11896},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63749610-58f1-4675-bcc4-9ff8c8226d40","sequence":{"long":11899},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bb4724e-9d59-4a1d-a731-9422e4dca80a","sequence":{"long":11898},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d05c149c-c889-48b6-92b3-c36670c0861d","sequence":{"long":11900},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8528e26c-c99b-4c30-97dd-1bca3c472476","sequence":{"long":11901},"type":"EVENT_READ","threadId":{"int":100191},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff331375-17e4-4750-9aea-9dd5e05359bc","sequence":{"long":11902},"type":"EVENT_READ","threadId":{"int":100191},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bddcdaed-eb66-463b-a556-9d95260d9259","sequence":{"long":11903},"type":"EVENT_READ","threadId":{"int":100191},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70f21511-be21-4bf9-af71-e8ae76e04220","sequence":{"long":11904},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2466},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c88c827e-a6ee-4612-94ca-292d293a15dc","sequence":{"long":11905},"type":"EVENT_WRITE","threadId":{"int":100191},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7c78db0-b578-4a90-9188-8305a9459b68","sequence":{"long":11906},"type":"EVENT_READ","threadId":{"int":100191},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6c18809-bcc4-418d-8fa2-7d3251a5179c","sequence":{"long":11907},"type":"EVENT_READ","threadId":{"int":100191},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"896ceee9-89cb-4570-8aff-a9f946dd2aa4","sequence":{"long":11908},"type":"EVENT_READ","threadId":{"int":100191},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1178},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8792f9a-ac67-4f92-921c-d7cf2dbc71a2","sequence":{"long":11909},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1231},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9b9bbc3-27b8-4b94-a253-33a5cc2edafc","sequence":{"long":11910},"type":"EVENT_WRITE","threadId":{"int":100191},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a898b90-1939-405b-a8e9-1cc7b8b3c2cb","sequence":{"long":11911},"type":"EVENT_READ","threadId":{"int":100191},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"745abead-8d53-404c-809c-2fb9e15dc0ae","sequence":{"long":11912},"type":"EVENT_SENDTO","threadId":{"int":100191},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17012","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40ccfed7-cb11-46a8-b9eb-c3bf8c63e5e5","sequence":{"long":11913},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17012","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72007390-da96-40a2-98d0-3c3ef248c224","sequence":{"long":11914},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a368eef-4e26-4f27-93bf-84ec4cfb64da","sequence":{"long":11915},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08419dd3-8d8e-4a99-ba83-86d07a387631","sequence":{"long":11916},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbaf2f80-60dc-4012-bb3b-56e41581a0ed","sequence":{"long":11917},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42abe121-aadb-4e22-bb85-69fb02933acc","sequence":{"long":11918},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258124207271,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1e596ab-5fd6-4e37-b400-e86c074504ee","sequence":{"long":11919},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584258834304908,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":681993},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dff748b2-1c69-4963-a3b6-080f0533a8f7","sequence":{"long":11920},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584259843893973,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":682354},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0038cfe-16cc-469e-a958-8ae354f69ed2","sequence":{"long":11921},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":682354},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12f49549-2575-49e6-b68c-39ac4d843d14","sequence":{"long":11923},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6b3cbca-9fbf-4c40-97f4-e63400f4f3f6","sequence":{"long":11922},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a187c9c6-a813-40b6-b123-af680f6e79dd","sequence":{"long":11925},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a8fb3a1-1eaf-4b24-b711-02f0afdb4fb1","sequence":{"long":11924},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b9afffc-548a-4aa6-a21f-e325516f776f","sequence":{"long":11927},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d16fac5-045b-4158-a64d-3194f918cad3","sequence":{"long":11926},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"603799a9-c5c0-4e31-81dc-7fb05f15b434","sequence":{"long":11928},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92e95e34-72b2-4326-a915-1a94e6bd989b","sequence":{"long":11929},"type":"EVENT_READ","threadId":{"int":100192},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e13ae42-4f50-496f-b60a-5ebfe6647520","sequence":{"long":11930},"type":"EVENT_READ","threadId":{"int":100192},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5bfd409-98f3-48d1-a526-689ab41a1943","sequence":{"long":11931},"type":"EVENT_READ","threadId":{"int":100192},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2418},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72406a03-a5c7-4647-a424-cb9ff86b9059","sequence":{"long":11932},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2471},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14862a87-89e7-489d-ad69-728804b19ed6","sequence":{"long":11933},"type":"EVENT_WRITE","threadId":{"int":100192},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a3be786-9f8a-4f22-804f-f283892c9ad4","sequence":{"long":11934},"type":"EVENT_READ","threadId":{"int":100192},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"788b25bc-9633-4bf8-9fdb-2571d82e01fa","sequence":{"long":11935},"type":"EVENT_READ","threadId":{"int":100192},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70fb0525-3c25-4b57-99f3-3d169fd21d49","sequence":{"long":11936},"type":"EVENT_READ","threadId":{"int":100192},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":357},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"844f77f3-9910-435c-a3b3-3c9c5ae59ee3","sequence":{"long":11937},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":410},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"480cb39d-7441-4a1d-b248-e267ea3351f4","sequence":{"long":11938},"type":"EVENT_WRITE","threadId":{"int":100192},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb099e76-bcb6-477d-b554-86829309ad00","sequence":{"long":11939},"type":"EVENT_READ","threadId":{"int":100192},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48b376a5-85ac-47a8-a58a-1321d851f955","sequence":{"long":11940},"type":"EVENT_SENDTO","threadId":{"int":100192},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17013","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b19f8cf5-f923-429d-be86-e4ed955cd44d","sequence":{"long":11941},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17013","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52aaa29c-4597-4bc7-8ed4-3a5069ac2d59","sequence":{"long":11942},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b9eefa6-c0d9-4816-aa0b-d7a01a9fb2f2","sequence":{"long":11943},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af7c62e1-4258-410d-8c76-3c11df2a3e60","sequence":{"long":11944},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e121d40-0695-4ce2-b82a-d8b8608dbb77","sequence":{"long":11945},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48ebab44-291f-4ebf-be1a-3db6bd7698dd","sequence":{"long":11946},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260123888849,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4395e832-e2e8-45a5-9976-1f21c55a51c0","sequence":{"long":11947},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260533887890,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faa3e9d6-d781-4aa5-9f34-7b1e2161db8d","sequence":{"long":11948},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260533887890,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17014","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b61dfbe-fcae-41bf-9f8e-f4ae3ac3c051","sequence":{"long":11949},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260533887890,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17015","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51cb2f3a-b1d1-4e86-865a-d8c7b1ed409f","sequence":{"long":11950},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260533887890,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17016","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7390a71-bb8e-4c31-9341-1b5511943a95","sequence":{"long":11951},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260533887890,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17017","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfdeeaae-c644-417c-8afe-e756086a7085","sequence":{"long":11952},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260533887890,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17014","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8819f8f5-3f75-40e9-b783-f41722484ea3","sequence":{"long":11953},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260533887890,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17015","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bde8e33d-2434-49cb-9a30-6632a001078c","sequence":{"long":11954},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260533887890,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17016","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddbc542c-e808-4b74-816c-125423760542","sequence":{"long":11955},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260533887890,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17017","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30bb311b-1937-4901-a7c3-5d70113cb423","sequence":{"long":11956},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584260853873240,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":685572},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2922d5a-70dd-4409-b9ca-a5cb1b84e771","sequence":{"long":11957},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584261864540108,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":685935},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59f4e437-1fbe-462c-bfac-0ad32505f4ab","sequence":{"long":11958},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":685935},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8950a44f-2c33-4ad8-b47b-f5127214ad0c","sequence":{"long":11960},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e526bedf-1e9e-43b3-bbd8-94e0032a7848","sequence":{"long":11959},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3b35c2b-ec91-48ac-8979-163ebc9e0e35","sequence":{"long":11962},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c97b7a87-8c58-49cf-bfc9-d24f2c04c470","sequence":{"long":11961},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b268cf9c-77a3-4179-abcf-95f086049f94","sequence":{"long":11964},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff5468b3-2e79-44ac-ab72-f813559315f4","sequence":{"long":11963},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d42a8d0f-af0f-4c08-8ea5-9cc285748126","sequence":{"long":11965},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fe87acc-2771-4353-b025-843579c3f3f8","sequence":{"long":11966},"type":"EVENT_READ","threadId":{"int":100193},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33cc7ac4-b06d-453e-8d87-2ae4af35e006","sequence":{"long":11967},"type":"EVENT_READ","threadId":{"int":100193},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2181f4d5-283e-40a7-a295-2b11e0b50275","sequence":{"long":11968},"type":"EVENT_READ","threadId":{"int":100193},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3214},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"274f9c83-616e-43a1-bfbc-e4a2eedc07cc","sequence":{"long":11969},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3267},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddf14c11-017c-47df-8f6e-fdc89ca19ca1","sequence":{"long":11970},"type":"EVENT_WRITE","threadId":{"int":100193},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07d01165-a30b-424f-b54d-934a4a80840e","sequence":{"long":11971},"type":"EVENT_READ","threadId":{"int":100193},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfd87d19-76bf-4e8d-8e0b-730c54c8b0e0","sequence":{"long":11972},"type":"EVENT_READ","threadId":{"int":100193},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca9db4db-e876-4e75-af18-764cf36d9a5a","sequence":{"long":11973},"type":"EVENT_READ","threadId":{"int":100193},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0224983c-ed8b-49f9-9f99-ca706a619188","sequence":{"long":11974},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbf508ec-85f4-4b3f-9c5f-0055ce1f72d5","sequence":{"long":11975},"type":"EVENT_WRITE","threadId":{"int":100193},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c17b6abe-117b-40a3-b0e8-f1dd283e1779","sequence":{"long":11976},"type":"EVENT_READ","threadId":{"int":100193},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00c5aa5e-d863-4b3d-a174-72c227cac35c","sequence":{"long":11977},"type":"EVENT_SENDTO","threadId":{"int":100193},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17018","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b527ec4-b3d7-470d-9ff1-aa634bc8cecd","sequence":{"long":11978},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17018","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3debacce-2624-4e5f-b6b7-7239308ae982","sequence":{"long":11979},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262127754195,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"235608e7-8e44-485c-a04f-259477faba0f","sequence":{"long":11980},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262134398557,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ced2cdc-5071-4610-b7e2-5be8dbfd141a","sequence":{"long":11981},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262134398557,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68fbd3ee-9a71-4bf6-8309-fb068e380cb6","sequence":{"long":11982},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262134398557,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08ce57ae-e36d-463d-9048-9ad18de275b9","sequence":{"long":11983},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262134398557,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7a9453a-ba11-4583-a40c-0022a38230fa","sequence":{"long":11984},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584262874554244,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":688364},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49ae3e57-58e7-4095-83c4-172b6cdbeac5","sequence":{"long":11985},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584263533867724,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e53b06ba-a868-4edc-8a57-749d5380dc87","sequence":{"long":11986},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584263533867724,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17019","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47040d55-ec47-4941-8d08-0e3672846119","sequence":{"long":11987},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584263533867724,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17020","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58e4bca7-8b86-40fd-bfd5-aac6d044abe7","sequence":{"long":11988},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584263533867724,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17021","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6c56a53-c7bb-44e3-9c7f-f0fe33df302f","sequence":{"long":11989},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584263533867724,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17022","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d697244-a1e2-4a8a-acae-1feca99cca9f","sequence":{"long":11990},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584263533867724,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17019","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9f76329-45ab-494f-a50e-6867bfcefcbd","sequence":{"long":11991},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584263533867724,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17020","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8682ac8-560c-441f-aae7-7b8005822005","sequence":{"long":11992},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584263533867724,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17021","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7dc354d-e92d-485f-8367-09a840bf53ed","sequence":{"long":11993},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584263533867724,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17022","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd6f697c-a078-47a2-a8df-2b9d79370e2d","sequence":{"long":11994},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584263884275814,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":689544},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"539e09c1-521e-4e67-9178-c4c7a34e7afc","sequence":{"long":11995},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":689544},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b410050f-daf4-41f9-be0a-1b60d6d69ad5","sequence":{"long":11997},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c86cd61-10f6-4793-9c19-1623feddda6a","sequence":{"long":11996},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7624e404-e64a-45d3-bd27-1c13689dad66","sequence":{"long":11999},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"751d8ae8-8a00-4aa4-9e7b-96d57a067d67","sequence":{"long":11998},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4b3fdca-ca17-4db0-bdee-e47ca5ec6423","sequence":{"long":12001},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15623629-a035-4bde-b362-82ba0209e9d7","sequence":{"long":12000},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e123a9d-84f4-48e0-8e0f-079fbfd38257","sequence":{"long":12002},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc0797f2-1f7b-4666-b951-6b31d91ca478","sequence":{"long":12003},"type":"EVENT_READ","threadId":{"int":100194},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41e9af01-df0c-4e1b-a36b-fc2bb2959378","sequence":{"long":12004},"type":"EVENT_READ","threadId":{"int":100194},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acbf8f2c-b97d-4d66-b806-e59d952d2505","sequence":{"long":12005},"type":"EVENT_READ","threadId":{"int":100194},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2425},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9795a3a1-b758-4624-9e27-5feeeb4f5e93","sequence":{"long":12006},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2478},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ebf76a8-22a3-477c-a42f-8cd0b9a5e848","sequence":{"long":12007},"type":"EVENT_WRITE","threadId":{"int":100194},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9466c0a-3498-4279-ac79-7243821dd7f5","sequence":{"long":12008},"type":"EVENT_READ","threadId":{"int":100194},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f35e3942-8657-4485-a88e-014ca7037551","sequence":{"long":12009},"type":"EVENT_READ","threadId":{"int":100194},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9735c183-7620-4308-9a8d-cc8d9b2999ca","sequence":{"long":12010},"type":"EVENT_READ","threadId":{"int":100194},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1176},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1dab165-7d37-47d5-b3f1-cf7c30fdacaa","sequence":{"long":12011},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1229},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9db4431f-c961-41d0-b264-7227eef621a9","sequence":{"long":12012},"type":"EVENT_WRITE","threadId":{"int":100194},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc0251ec-5964-4f82-b188-b76470e81a78","sequence":{"long":12013},"type":"EVENT_READ","threadId":{"int":100194},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"670c099a-f778-4998-9f46-843d1cf6fc7a","sequence":{"long":12014},"type":"EVENT_SENDTO","threadId":{"int":100194},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17023","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e73ae4fa-6caa-4e60-b987-fc3de440068a","sequence":{"long":12015},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17023","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8751bda8-ac2c-4b51-bb9f-43e607315cc7","sequence":{"long":12016},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9456e97a-6add-400e-9ba5-af45cf026475","sequence":{"long":12017},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"657f3bd7-8f43-401b-8a71-f2194d288787","sequence":{"long":12018},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264124147912,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ece63956-9ca8-4fcd-9e7a-59930b415763","sequence":{"long":12019},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264134179981,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aafa2b59-10bc-4fe1-b011-5ebf99387e0a","sequence":{"long":12020},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264134179981,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56cc718d-05db-48c8-8fa7-5968ef274cd3","sequence":{"long":12021},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584264894363233,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":691969},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0f9a59a-c85d-4cab-87d9-b0527e1d48c8","sequence":{"long":12022},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584265904052933,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":692331},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ed570e8-f172-4101-b437-d12d439c544b","sequence":{"long":12023},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":692331},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"735ee35f-72ae-4675-b653-03048a21a697","sequence":{"long":12025},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f61aaf8c-6ddd-45a9-a402-9aab90bb4a57","sequence":{"long":12024},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1cfb3eb-cbc4-4724-8a03-3b88a6855487","sequence":{"long":12027},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76ca212e-9161-40d2-86ff-6a2cf5d17429","sequence":{"long":12026},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"108e110a-8f31-4bf3-8ac0-cfee7cbd5b39","sequence":{"long":12029},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"814b34e8-6df8-4029-ab45-7a89d6d394bf","sequence":{"long":12028},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50f0658c-6642-4675-8e67-8972ec05571b","sequence":{"long":12030},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66275d13-3344-48d2-bbd9-262e0650e213","sequence":{"long":12031},"type":"EVENT_READ","threadId":{"int":100195},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40e83e3a-5ced-4476-a188-79567c3a153d","sequence":{"long":12032},"type":"EVENT_READ","threadId":{"int":100195},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"192741e6-1e88-4e5a-9813-036a17da1b9e","sequence":{"long":12033},"type":"EVENT_READ","threadId":{"int":100195},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2421},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14d23e82-9296-4f7f-97fc-c56b341d6105","sequence":{"long":12034},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2474},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1778052-39a6-4a64-87a3-ba5e4b330b53","sequence":{"long":12035},"type":"EVENT_WRITE","threadId":{"int":100195},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d97d4cc3-6f75-4010-a2c0-77b1c31a0ebb","sequence":{"long":12036},"type":"EVENT_READ","threadId":{"int":100195},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb63cee7-8912-4201-aa20-22c9b33d6fa1","sequence":{"long":12037},"type":"EVENT_READ","threadId":{"int":100195},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1268d761-496b-4028-9aeb-2031786f1edb","sequence":{"long":12038},"type":"EVENT_READ","threadId":{"int":100195},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"092a3584-5440-4363-b38d-0dec5133752e","sequence":{"long":12039},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20f34738-c794-46f9-8ec7-a8bdf7203837","sequence":{"long":12040},"type":"EVENT_WRITE","threadId":{"int":100195},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b07ea21-95b9-4edc-b716-2fc62a35fe0c","sequence":{"long":12041},"type":"EVENT_READ","threadId":{"int":100195},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"649214db-8ac9-46b6-8f8a-60cf43247b05","sequence":{"long":12042},"type":"EVENT_SENDTO","threadId":{"int":100195},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17024","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"431270fc-4cfa-4a69-9a22-8b984e426fcf","sequence":{"long":12043},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17024","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8db7ec8f-bb94-435e-a015-835928dc19b6","sequence":{"long":12044},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266123901719,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f8565f5-5829-44aa-b8ca-72d1fcb0f681","sequence":{"long":12045},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266133842429,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c97f0d3-d752-45ad-a10a-e36db2c57676","sequence":{"long":12046},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266133842429,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38098696-d8d9-43df-a457-bdfad9755743","sequence":{"long":12047},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266133842429,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15887a45-a4d3-4293-8b86-838aaf0b8954","sequence":{"long":12048},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266133842429,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f204c86-6fdc-4709-bd27-8f65ba49ea6a","sequence":{"long":12049},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266533970028,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c37786d0-87a5-4086-a1e2-ccd643da0f6d","sequence":{"long":12050},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266533970028,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17025","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8c9a6e6-d26f-4c1e-9ce7-bdc112fd5f4d","sequence":{"long":12051},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266533970028,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17026","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"532ba058-8705-451f-ad5f-42ff2f85be2e","sequence":{"long":12052},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266533970028,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17027","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be64663b-1beb-4dca-838f-c2fde7ab9280","sequence":{"long":12053},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266533970028,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17028","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"daf41071-ce31-4078-a9cc-1e11a0d155d8","sequence":{"long":12054},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266533970028,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17025","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"959507ae-7e65-4a3a-9584-209806839d9c","sequence":{"long":12055},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266533970028,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17026","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fad2e7c0-0d7f-4f9d-8aa0-e01efbed0147","sequence":{"long":12056},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266533970028,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17027","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f90c3a39-9339-4f64-ae50-db6c7b915fec","sequence":{"long":12057},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266533970028,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17028","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"419e6bd9-054c-467b-a877-5bba6ed656e8","sequence":{"long":12058},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584266966143998,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":695559},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07568499-678d-48c2-9343-3d931be83e92","sequence":{"long":12059},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584267974017195,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":695921},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"247a9c7c-daf7-4376-b9e2-a5fa81dcddfe","sequence":{"long":12060},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":695921},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b57d57f2-c30e-48fd-9c44-ee9dad6584ca","sequence":{"long":12062},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d740a48-621d-4e67-a0a9-c387303b2304","sequence":{"long":12061},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c39987f6-bbae-455b-a46e-41e6549e89dc","sequence":{"long":12064},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50f79a61-0f50-4871-b291-b0607e32a047","sequence":{"long":12063},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aee34517-2fe6-499e-846e-73145a175194","sequence":{"long":12066},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b584450-7073-40cf-a7cb-86ff1a1cfd83","sequence":{"long":12065},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6108b927-f706-4e7c-9999-3179f0525231","sequence":{"long":12067},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12920727-52fc-45dc-910c-2cb821f73c91","sequence":{"long":12068},"type":"EVENT_READ","threadId":{"int":100196},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"797e1bb9-1c1d-482b-9be1-33faf8d4fd1c","sequence":{"long":12069},"type":"EVENT_READ","threadId":{"int":100196},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"997e7520-5c13-4063-aeab-9db4fa424494","sequence":{"long":12070},"type":"EVENT_READ","threadId":{"int":100196},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3224},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d44c36f8-54bf-4da2-b841-8b2c156aef4e","sequence":{"long":12071},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3277},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3763513-eb45-4bb0-bfc5-e2c5f4f945e1","sequence":{"long":12072},"type":"EVENT_WRITE","threadId":{"int":100196},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c63e0c3a-74ab-49bd-813e-891f522f3299","sequence":{"long":12073},"type":"EVENT_READ","threadId":{"int":100196},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01db0483-791b-44cd-8395-22341fcce550","sequence":{"long":12074},"type":"EVENT_READ","threadId":{"int":100196},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b01368b-ab59-43c6-b5b1-fa646bebdca3","sequence":{"long":12075},"type":"EVENT_READ","threadId":{"int":100196},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eaea50d4-95f8-4b0e-ad1d-a1d55fb4bc4f","sequence":{"long":12076},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c157c58b-9e95-455b-9166-a2a74002ac79","sequence":{"long":12077},"type":"EVENT_WRITE","threadId":{"int":100196},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f27563e-fd99-4b1c-a529-755c848d4dff","sequence":{"long":12078},"type":"EVENT_READ","threadId":{"int":100196},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cef57e3d-c9d4-42dd-aa34-13c4e56ab177","sequence":{"long":12079},"type":"EVENT_SENDTO","threadId":{"int":100196},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17029","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e29a2dbf-60e6-4ac5-ba1b-622398f77e9d","sequence":{"long":12080},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17029","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"630d6db1-97c8-4186-9dc6-0b87d2a3065f","sequence":{"long":12081},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268123881800,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b38d6621-749b-430e-b1ac-f5ecd625ccaf","sequence":{"long":12082},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268165841756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a9462db-a613-4c37-ada9-aa1e3db5f3d5","sequence":{"long":12083},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268165841756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e88ca8f-3bb1-4c3d-89f2-645fcd45760b","sequence":{"long":12084},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268165841756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"794472aa-075f-4798-99d7-727fb9c324b8","sequence":{"long":12085},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584268165841756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"560ae6c6-a412-4b2b-9714-2a46a2840f9f","sequence":{"long":12086},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584269023879300,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":698347},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e29d89a-f60b-4540-9ab2-f2996eb6cedd","sequence":{"long":12087},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584269564508297,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96dcf6dd-3983-4c53-994c-97481e0865c0","sequence":{"long":12088},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584269564508297,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17030","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eeb178f1-1783-4e69-8a71-76f795995754","sequence":{"long":12089},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584269564508297,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17031","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d164dd5-1c66-41d2-9148-66aefe205c27","sequence":{"long":12090},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584269564508297,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17032","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40061e28-59ea-440e-bc4e-fd7a74e117be","sequence":{"long":12091},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584269564508297,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17033","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34ebcfa3-e633-410a-8e06-bea3cf875630","sequence":{"long":12092},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584269564508297,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17030","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32467cac-8aec-4d13-bd56-7e89ae265cf3","sequence":{"long":12093},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584269564508297,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17031","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f46804bb-b611-4928-aacb-af174e28cc10","sequence":{"long":12094},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584269564508297,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17032","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cba6d3c9-6684-4ead-9e15-4f43a6e60782","sequence":{"long":12095},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584269564508297,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17033","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25675c33-556a-4442-a5d7-ce472b83d6f0","sequence":{"long":12096},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270070336354,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":699531},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b52107a-0de2-4ffe-9cb4-38d26f553d3c","sequence":{"long":12097},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":699531},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d2b4445-6fcb-4cd9-a397-8b857c4d3922","sequence":{"long":12099},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d1faf39-c73b-4e6a-8bd2-11a6109f8876","sequence":{"long":12098},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1652b8e-3965-42de-9bd9-4bb1d70c3e90","sequence":{"long":12101},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e5ab0c8-7396-4b99-a771-1d6982c9dbc3","sequence":{"long":12100},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4adf19f5-1e26-46b3-bccd-d0cfa97b0ff0","sequence":{"long":12103},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1bf7677-d16f-4d52-929d-fd7dd31e4d5b","sequence":{"long":12102},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de28b897-4605-41b5-b8ed-7b72389d294f","sequence":{"long":12104},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d9054aa-d916-4042-ab8a-27d9dcc44413","sequence":{"long":12105},"type":"EVENT_READ","threadId":{"int":100197},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"302b5d72-abe2-4076-95df-220428f52442","sequence":{"long":12106},"type":"EVENT_READ","threadId":{"int":100197},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"204d0152-bf2f-4097-8645-334d97504793","sequence":{"long":12107},"type":"EVENT_READ","threadId":{"int":100197},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2422},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"862b1002-3582-4efc-a88b-874cd921a385","sequence":{"long":12108},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2475},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9e5f7e5-a6a2-41b1-a308-3d4e73b6dff4","sequence":{"long":12109},"type":"EVENT_WRITE","threadId":{"int":100197},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18740584-b88b-4b91-b55f-3273ac97c60a","sequence":{"long":12110},"type":"EVENT_READ","threadId":{"int":100197},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08f3fe97-89d4-4ff2-9b84-92a8a4b55c2a","sequence":{"long":12111},"type":"EVENT_READ","threadId":{"int":100197},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8229c0dd-43c6-4064-a20c-14eb1ab12f60","sequence":{"long":12112},"type":"EVENT_READ","threadId":{"int":100197},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1180},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b605c759-d388-40a8-a72b-de1286207b18","sequence":{"long":12113},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1233},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e19db6e-14e5-43b2-9403-61cb2f2a43f2","sequence":{"long":12114},"type":"EVENT_WRITE","threadId":{"int":100197},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7f43238-b3a8-4540-8844-1cc5b00d6726","sequence":{"long":12115},"type":"EVENT_READ","threadId":{"int":100197},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d776e48-6cec-495f-82c7-ae9efbafdde6","sequence":{"long":12116},"type":"EVENT_SENDTO","threadId":{"int":100197},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17034","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b43da18a-d616-49e8-9292-7d9e8fa53423","sequence":{"long":12117},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17034","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cb9e7ee-6820-433e-b609-ec21f074273c","sequence":{"long":12118},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270123874805,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eddca642-e17f-4d17-9bd1-354ada9f12df","sequence":{"long":12119},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270164540728,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a91d9ac2-0f1c-4672-9c59-7d2d9af9cc70","sequence":{"long":12120},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270164540728,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4f9bf45-b90a-49b9-bfbf-9a2bc4721c8f","sequence":{"long":12121},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270164540728,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d913e0ee-f198-411a-b7ee-5bc38ca32649","sequence":{"long":12122},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584270164540728,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"591a96da-c5fb-4a1d-8b19-7f5d379c94a7","sequence":{"long":12123},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584271118730958,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":701966},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91ac52d4-6a36-44dd-9167-b6cbc7690f83","sequence":{"long":12124},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":702328},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff951da0-6951-4374-b9d3-95cfec001f2a","sequence":{"long":12125},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":702328},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02bdf40e-4403-4ef6-8297-a4f0ddc9683b","sequence":{"long":12127},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cacbb137-901e-43b1-9043-30b6aa1c59d8","sequence":{"long":12126},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24815d6d-21c5-46a7-83c0-f7455cb1185a","sequence":{"long":12129},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27d9413e-ffb1-4951-8931-2b1b2c6bc100","sequence":{"long":12128},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"781d13c7-98b9-4241-9627-f9000517f5fe","sequence":{"long":12131},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"574b565a-ea53-4a8a-91a3-e895c4e841c8","sequence":{"long":12130},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd4bed63-7dd9-45bf-bd77-25e1c1c8a4db","sequence":{"long":12132},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d11512e-7ba9-44af-a076-22d09630cc27","sequence":{"long":12133},"type":"EVENT_READ","threadId":{"int":100198},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63fdc455-3d4d-49bd-8058-b15f13ac1397","sequence":{"long":12134},"type":"EVENT_READ","threadId":{"int":100198},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d132fd54-826e-486a-92a3-f60ed9e57b2d","sequence":{"long":12135},"type":"EVENT_READ","threadId":{"int":100198},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2431},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f653442a-3a7f-4c59-b152-8802d5a0ccc0","sequence":{"long":12136},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2484},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea27fba7-3e14-4b76-8ed2-2c7de1ab0254","sequence":{"long":12137},"type":"EVENT_WRITE","threadId":{"int":100198},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9144d966-851f-4001-a587-0bfba8118132","sequence":{"long":12138},"type":"EVENT_READ","threadId":{"int":100198},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed239fc8-29d8-4f2b-8391-025861dc80dd","sequence":{"long":12139},"type":"EVENT_READ","threadId":{"int":100198},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5cde478-2eed-4833-bce1-d46f24323067","sequence":{"long":12140},"type":"EVENT_READ","threadId":{"int":100198},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17007f08-7f56-49d7-bc27-46a9858cdeac","sequence":{"long":12141},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83c5e8d1-dd84-480e-9dfc-a42cc6e8c3fa","sequence":{"long":12142},"type":"EVENT_WRITE","threadId":{"int":100198},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5fb0403-6722-4c5c-aad0-1c973fa0630c","sequence":{"long":12143},"type":"EVENT_READ","threadId":{"int":100198},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f71d17f-70a4-44fe-8310-1eb40eb89dd1","sequence":{"long":12144},"type":"EVENT_SENDTO","threadId":{"int":100198},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17035","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e966a5b0-6b07-4c67-94ee-bd6a2d042b75","sequence":{"long":12145},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17035","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36a281cb-250a-43d5-9a0a-53f2e9c2e339","sequence":{"long":12146},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79d9ff3f-1314-48ef-92c8-cd5728c3bcb0","sequence":{"long":12147},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b1e753a-9f73-4418-89f8-80d309aaeb23","sequence":{"long":12148},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8dd309da-3b98-4b60-b0f1-b93039d897ff","sequence":{"long":12149},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf54b8c3-a729-4c29-b59f-59392b8e1b25","sequence":{"long":12150},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272123887175,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"065fcbc4-49e0-478a-a8b8-6d440b2f3f2c","sequence":{"long":12151},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272561514630,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d77394b6-b4e9-4ad7-8207-2ac25498621f","sequence":{"long":12152},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272561514630,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17036","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b38f91fd-373f-4a73-b5bf-7234b1a3a466","sequence":{"long":12153},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272561514630,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17037","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"427a1f81-a9a7-43d4-8459-626f2da6aec2","sequence":{"long":12154},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272561514630,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17038","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b28c1ba-5037-40de-a058-cabea2a731a8","sequence":{"long":12155},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272561514630,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17039","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d260a60-f336-44a8-989c-67d6bc0bb412","sequence":{"long":12156},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272561514630,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17036","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f068d26-7799-44f4-8ef3-c0088e1977e9","sequence":{"long":12157},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272561514630,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17037","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4dd205ad-a42a-409d-8835-9c249f6bdfe9","sequence":{"long":12158},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272561514630,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17038","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08aaa75b-eb3b-4273-8c59-899f78c4e379","sequence":{"long":12159},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584272561514630,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17039","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"006b7431-a403-4022-8813-f71029ff9277","sequence":{"long":12160},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584273214604315,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":705537},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e49a23ea-69dd-40f9-9cb9-5c2ba5f9a395","sequence":{"long":12161},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274123948691,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":705537},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14f3f7b7-f082-4648-8403-9d2d1ad63b8b","sequence":{"long":12163},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584274123948691,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6737b625-ec84-4898-9c08-45b39d3d0458","sequence":{"long":12162},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274123948691,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"753a563d-6b9e-4713-8f62-b8d5ba5ea9b6","sequence":{"long":12165},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584274123948691,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9658b87-b198-403c-b40a-fea7f1733655","sequence":{"long":12164},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274123948691,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c5f657f-a0f9-4b13-82af-2cee420eeafd","sequence":{"long":12166},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274123948691,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b967c65c-30a0-46bf-b0fc-1472355fd0b6","sequence":{"long":12167},"type":"EVENT_READ","threadId":{"int":100199},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274123948691,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41d19832-1be6-4ee4-9a6c-39dfc1c7c4ce","sequence":{"long":12168},"type":"EVENT_READ","threadId":{"int":100199},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274123948691,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"984e7d4d-633e-49ee-a6bb-e613d32fc4dd","sequence":{"long":12169},"type":"EVENT_READ","threadId":{"int":100199},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274123948691,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3205},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f01a35f-9bdd-4637-90e8-1ed4540628c0","sequence":{"long":12170},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274123948691,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3258},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f51f2ed-c9c5-4902-9860-d015bf1df08e","sequence":{"long":12171},"type":"EVENT_WRITE","threadId":{"int":100199},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274123948691,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90574da7-5799-4198-8a8d-0808f58ce141","sequence":{"long":12172},"type":"EVENT_READ","threadId":{"int":100199},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274123948691,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e633d1ed-28e8-4a7a-8780-dbfecb260f9d","sequence":{"long":12173},"type":"EVENT_SENDTO","threadId":{"int":100199},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274123948691,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17040","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f99e5609-2bbf-41d5-989a-e1a7110b6efe","sequence":{"long":12174},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274123948691,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17040","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"465a9459-a3a9-473e-a76b-a82dd02efe66","sequence":{"long":12175},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274123948691,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff57f252-488b-4b21-9893-99e12784e406","sequence":{"long":12176},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274162636101,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"023a2203-bf2c-4e16-9746-b93b35aeecfb","sequence":{"long":12177},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274162636101,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14cc9499-fdff-4907-83df-ed6f43c8d1ad","sequence":{"long":12178},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584274261818272,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":707369},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cb24bc4-e2ed-4fab-8594-7cd02bf0c80c","sequence":{"long":12179},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584275265379982,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":707734},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b93076e2-4bc5-44e8-aee8-9549b4348bd1","sequence":{"long":12180},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584275560981117,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd01e79c-671c-43f9-8e46-8a486e613efc","sequence":{"long":12181},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584275560981117,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17041","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"737decbe-4e9c-46f5-9365-c4ac900128d2","sequence":{"long":12182},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584275560981117,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17042","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f2e0989-0349-4f18-8d4d-182ec0a4a867","sequence":{"long":12183},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584275560981117,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17043","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a937d73-59ce-41bc-9787-4b8cc11c2043","sequence":{"long":12184},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584275560981117,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17044","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f28ddda-2d45-408e-bc5e-5a0a9c2742a2","sequence":{"long":12185},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584275560981117,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17041","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25d86c09-1eb2-4b63-80d8-6d8a09b08830","sequence":{"long":12186},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584275560981117,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17042","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ace58a16-6076-431b-bfdf-f419a94f3b45","sequence":{"long":12187},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584275560981117,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17043","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9a21fd2-e181-4546-bdb2-33a89a653bff","sequence":{"long":12188},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584275560981117,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17044","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"933402a5-e516-4673-ab65-f8eb4477e8c9","sequence":{"long":12189},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":707734},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52bcd136-77d3-4b57-9159-6cd18eb34d3e","sequence":{"long":12191},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52962e67-ecfb-4153-9a35-7c841228c1cb","sequence":{"long":12190},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1b5e370-e7af-408a-9798-6fdc15603b34","sequence":{"long":12193},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c78a1d7-3462-4f60-9ee9-b73b91d13c02","sequence":{"long":12192},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc208026-f527-4bd9-909a-5e07d7a5f806","sequence":{"long":12195},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9a9cd4e-a9ad-4cbb-8fc1-7f558350f80a","sequence":{"long":12194},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92287704-6544-4492-8a21-7887a28d9b4b","sequence":{"long":12196},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df3019d2-48bc-433b-b522-8f4b127b0d69","sequence":{"long":12197},"type":"EVENT_READ","threadId":{"int":100200},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b237d76-1b0f-4b4b-91c6-18a404b77441","sequence":{"long":12198},"type":"EVENT_READ","threadId":{"int":100200},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66ef49e2-f765-4b12-962d-651351607fbc","sequence":{"long":12199},"type":"EVENT_READ","threadId":{"int":100200},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1828},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b32d887-39c5-49c6-a566-014998747cea","sequence":{"long":12200},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1881},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39a32a84-ae9b-4b6c-897a-9348bf4453c5","sequence":{"long":12201},"type":"EVENT_WRITE","threadId":{"int":100200},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13673f54-e298-4533-8196-a50834e2c0c2","sequence":{"long":12202},"type":"EVENT_READ","threadId":{"int":100200},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"214a1cba-6894-4c2a-8f27-ec4be51b919f","sequence":{"long":12203},"type":"EVENT_READ","threadId":{"int":100200},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1616c06-f123-4472-b879-70f8d0fa350c","sequence":{"long":12204},"type":"EVENT_READ","threadId":{"int":100200},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22db19a9-cce8-4311-877d-bacfb2870a4d","sequence":{"long":12205},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59b89424-f7b2-4f13-8985-0ccc7a385ea7","sequence":{"long":12206},"type":"EVENT_WRITE","threadId":{"int":100200},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff54e8ee-7669-43f5-ac2b-c7c6768fae10","sequence":{"long":12207},"type":"EVENT_READ","threadId":{"int":100200},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75945880-f704-425c-9275-2030d5ec0870","sequence":{"long":12208},"type":"EVENT_SENDTO","threadId":{"int":100200},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17045","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a51328a-e0e0-4d33-be6d-43aedfc34983","sequence":{"long":12209},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17045","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ca60759-f0a8-4aa4-972e-c0b2303ed154","sequence":{"long":12210},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276124158270,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b710689-8eea-439e-b86e-a39418a28c23","sequence":{"long":12211},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276149563669,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"516da30c-e0ad-44fa-b647-391d2a83b18f","sequence":{"long":12212},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276149563669,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08dd47a0-fed9-4d11-920d-90a8bc773b7f","sequence":{"long":12213},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276149563669,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fa52b9e-d9fa-4c32-af2d-2321cd696aa2","sequence":{"long":12214},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276149563669,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb9e278a-d0aa-48d2-9944-3592d0590b8f","sequence":{"long":12215},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584276314020683,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":711054},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75af968c-865d-4b64-9a84-600448b2b82e","sequence":{"long":12216},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584277324255941,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":711417},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52f6ff61-7eb7-406e-970f-73db5c92e10f","sequence":{"long":12217},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":711417},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"761b7ca9-3dd9-4bd8-a656-3d8307e24206","sequence":{"long":12219},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae1e1ca6-86b0-4af2-a228-35bcbc8adaaf","sequence":{"long":12218},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c856733f-08db-49b8-8d84-83977943ebc7","sequence":{"long":12221},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9032a126-d0b2-4b0e-8831-f1a086aa9e7e","sequence":{"long":12220},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1fbcc0c-8bb8-418f-ace9-30d08da67ca9","sequence":{"long":12223},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d34ec029-1856-4a81-9390-9a6d6ae953ae","sequence":{"long":12222},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7bbc86c-138b-4da3-baef-c6cdadb02c93","sequence":{"long":12224},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80d78abe-bd2b-45fb-8924-7ebc5f006c50","sequence":{"long":12225},"type":"EVENT_READ","threadId":{"int":100201},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a1536a6-3dbe-4f98-95f0-b5845e95cb97","sequence":{"long":12226},"type":"EVENT_READ","threadId":{"int":100201},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52477eff-d0fc-4ba5-bb7b-bb8b5466dbbe","sequence":{"long":12227},"type":"EVENT_READ","threadId":{"int":100201},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3316},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78e2631a-1c5e-45ca-ae98-ca9c55e27772","sequence":{"long":12228},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3369},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53cb207e-d25d-4a7a-8743-d9b07f543adf","sequence":{"long":12229},"type":"EVENT_WRITE","threadId":{"int":100201},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3f86ffd-fd3e-45a7-9695-3d6406eebb3e","sequence":{"long":12230},"type":"EVENT_READ","threadId":{"int":100201},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db1de384-f17d-4bd8-bb0d-9a4110f19aa6","sequence":{"long":12231},"type":"EVENT_READ","threadId":{"int":100201},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd4932de-1e30-4f84-92bb-ecdb2d06c83b","sequence":{"long":12232},"type":"EVENT_READ","threadId":{"int":100201},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2b7a331-debd-4741-ba75-abcc9640e193","sequence":{"long":12233},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25197966-cb4d-424b-9fc5-f94c97b9d39f","sequence":{"long":12234},"type":"EVENT_WRITE","threadId":{"int":100201},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"997a8a8c-44f6-41c3-adca-89ab50d8b121","sequence":{"long":12235},"type":"EVENT_READ","threadId":{"int":100201},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1835e03f-406b-4241-9629-74298d244cdd","sequence":{"long":12236},"type":"EVENT_SENDTO","threadId":{"int":100201},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17046","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"163fce10-446f-45e3-8cb2-6d6980703415","sequence":{"long":12237},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17046","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f54dd8f1-a354-4c40-bf6f-0d69b068d9df","sequence":{"long":12238},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278123932225,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"191867c8-6882-48c4-95ce-a866c4c8a068","sequence":{"long":12239},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278136972446,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c779ee9-3a43-4b22-8b64-ae0024170e00","sequence":{"long":12240},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278136972446,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c8750d8-5bb3-4e6a-8bdf-89b91c8f7f77","sequence":{"long":12241},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278136972446,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8264c1bd-f661-4faa-bcad-9f4cdae6dde2","sequence":{"long":12242},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278136972446,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"995daaa1-8cf7-47b6-a91e-336724ba63e4","sequence":{"long":12243},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278343931312,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":713856},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd27484a-e055-4d6e-9038-4d5edac67486","sequence":{"long":12244},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278554763794,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3212229-25f1-445f-a99e-ffde1859a8ca","sequence":{"long":12245},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278554763794,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17047","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"399f2f3e-72ff-47ef-ac33-d6c08c9a3dd7","sequence":{"long":12246},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278554763794,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17048","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b5b55f2-22e0-41b0-9aed-fe2d5f6e7514","sequence":{"long":12247},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278554763794,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17049","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3dabad28-5a60-44e7-9d34-03a62ea8fda0","sequence":{"long":12248},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278554763794,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17050","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff0d285e-3561-46c2-9279-db9ee775062f","sequence":{"long":12249},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278554763794,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17047","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e2983f8-9434-4e34-b16b-1904e09a303c","sequence":{"long":12250},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278554763794,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17048","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a4f0dfd-bb84-4fc1-9b56-441f88176b35","sequence":{"long":12251},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278554763794,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17049","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91dbeeca-6804-42a2-baa3-0cc41007edf3","sequence":{"long":12252},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584278554763794,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17050","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41e80e1c-15ba-435d-ad98-a9c494009c55","sequence":{"long":12253},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584279354003829,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":715038},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"210b59a9-7a62-4c3f-8ccd-6c1bbef768ea","sequence":{"long":12254},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":715038},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b25ac0a-8f74-4ad3-bdd9-239e2320f589","sequence":{"long":12256},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34d9bac9-e5e7-4f1a-ad99-3f8382866f01","sequence":{"long":12255},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffdac11a-e98f-4020-9bf8-6de41467f467","sequence":{"long":12258},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68d6af95-4c54-4e33-9806-cd94ac28a849","sequence":{"long":12257},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f07fbc91-4c5c-457f-8ef6-709ed2f70352","sequence":{"long":12260},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a7998c4-471c-438a-ba85-689907bcb7cf","sequence":{"long":12259},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dac1535-3f5d-45fa-b724-533b21189e7c","sequence":{"long":12261},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd18cb9d-4889-407e-8161-9c205f1c367e","sequence":{"long":12262},"type":"EVENT_READ","threadId":{"int":100202},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"337a08c0-5dc3-40b9-84ce-58fec3a001fd","sequence":{"long":12263},"type":"EVENT_READ","threadId":{"int":100202},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b95742c-222f-48ba-8751-18d1722f131e","sequence":{"long":12264},"type":"EVENT_READ","threadId":{"int":100202},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2435},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3d015e1-f1d2-4fcd-b6b3-6a2bd70feced","sequence":{"long":12265},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2488},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ca735ff-b25a-4591-9306-8e89142e66e1","sequence":{"long":12266},"type":"EVENT_WRITE","threadId":{"int":100202},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4b22eae-56f4-46ad-88aa-d3547129ce63","sequence":{"long":12267},"type":"EVENT_READ","threadId":{"int":100202},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01958c1c-75e2-4b2d-84aa-b75cff5d4605","sequence":{"long":12268},"type":"EVENT_READ","threadId":{"int":100202},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef356e41-f6cb-49b0-9cf1-6fbf5b760bf1","sequence":{"long":12269},"type":"EVENT_READ","threadId":{"int":100202},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280124885136,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1178},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77c8b77d-6eb7-4748-acb7-6f78ed3eba4b","sequence":{"long":12270},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280134045337,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1231},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdb9aaed-4423-4f6f-bb75-6fc9e1204f71","sequence":{"long":12271},"type":"EVENT_WRITE","threadId":{"int":100202},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280134045337,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47516813-5a24-428b-9d14-db3a0caca8a1","sequence":{"long":12272},"type":"EVENT_READ","threadId":{"int":100202},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280134045337,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f70dd0e-c1fc-4d16-a19f-e69e4e6f432d","sequence":{"long":12273},"type":"EVENT_SENDTO","threadId":{"int":100202},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280134045337,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17051","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b31950ff-904f-4df4-bb3c-b35950df596f","sequence":{"long":12274},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280134045337,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17051","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0402d9b8-2d21-49f7-a5e6-c703af8c670d","sequence":{"long":12275},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280134045337,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db2cf20a-26e6-4df8-9adb-dec1b391d389","sequence":{"long":12276},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280134045337,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d93e19c3-25e6-4c92-9407-a9579c6969ad","sequence":{"long":12277},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280134045337,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4f89e6a-dd3b-479b-9ef6-b2c5ba5fc369","sequence":{"long":12278},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280134045337,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0adcdad-1703-4446-99c6-f05a3a325a80","sequence":{"long":12279},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280134045337,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0067d5c3-9d7c-473f-8b00-f0731e444a09","sequence":{"long":12280},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584280374211682,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":717470},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c02d72fe-8cb2-4afc-b2eb-1c97a687053b","sequence":{"long":12281},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584281384410608,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":717833},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcdaa30b-5060-487c-b8a4-d48f05797666","sequence":{"long":12282},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584281553835869,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a004b71a-7803-4fc0-bb09-9b64e5d64549","sequence":{"long":12283},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584281553835869,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17052","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47aa279a-2289-463e-a6a7-795c42d2dba4","sequence":{"long":12284},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584281553835869,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17053","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be00daff-fd55-4b2a-acdd-401445ab1c32","sequence":{"long":12285},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584281553835869,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17054","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f126b16-c35b-462d-b3fc-582e78d38ae0","sequence":{"long":12286},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584281553835869,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17055","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29f60d73-46b9-45af-8984-19db0508515e","sequence":{"long":12287},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584281553835869,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17052","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a8cb77c-56a4-4903-85c2-f8c37c080fb5","sequence":{"long":12288},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584281553835869,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17053","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd374db0-a0c2-4a1b-911c-90cedc953b7c","sequence":{"long":12289},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584281553835869,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17054","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcc0e417-028f-40b4-8748-54d0658324b5","sequence":{"long":12290},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584281553835869,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17055","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19ae7f9e-7e70-4acd-aa3e-5a3c53f1d5ed","sequence":{"long":12291},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":717833},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4ba6d8a-32b1-46a3-acb2-29cd188ef246","sequence":{"long":12293},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e816d9f-a2ee-4dfa-a3c1-c7b31b38f962","sequence":{"long":12292},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"498b2ed9-f32d-40df-9ac5-b68187a45521","sequence":{"long":12295},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94422407-29d0-472e-98e1-2faebdfc5133","sequence":{"long":12294},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0afbb60-3d0e-4235-9d86-852b8007adc5","sequence":{"long":12297},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f75c331-37e7-491e-8917-8fdbeefa9c02","sequence":{"long":12296},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbe340d4-8c15-4e05-8fbd-2db9dab280c5","sequence":{"long":12298},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09c314e6-22cd-4631-9508-e9684f8d853b","sequence":{"long":12299},"type":"EVENT_READ","threadId":{"int":100203},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c4788e6-0d0b-4ca3-b366-d8ea9013ed4d","sequence":{"long":12300},"type":"EVENT_READ","threadId":{"int":100203},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad7c7151-d6a5-405b-ad61-0219fafe10b6","sequence":{"long":12301},"type":"EVENT_READ","threadId":{"int":100203},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2428},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6caf3048-ca8f-43c9-949c-78d248d05815","sequence":{"long":12302},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2481},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c3d324e-1047-4c7c-b5fa-1d89306a834f","sequence":{"long":12303},"type":"EVENT_WRITE","threadId":{"int":100203},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5a69c48-320d-4393-8749-2c2f7e771249","sequence":{"long":12304},"type":"EVENT_READ","threadId":{"int":100203},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acdb5063-8914-4394-9b9e-1200349be6df","sequence":{"long":12305},"type":"EVENT_READ","threadId":{"int":100203},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"028df811-1c9d-4532-881b-bce6d383d6c5","sequence":{"long":12306},"type":"EVENT_READ","threadId":{"int":100203},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fcf6d81-b5c1-4a9e-9cb4-8d634630b740","sequence":{"long":12307},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83d890da-6533-417d-9f00-294c2a676b75","sequence":{"long":12308},"type":"EVENT_WRITE","threadId":{"int":100203},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2337a16-7cd5-4973-939e-389356f04511","sequence":{"long":12309},"type":"EVENT_READ","threadId":{"int":100203},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c5e803a-c164-43d8-9efc-76c7493fc51d","sequence":{"long":12310},"type":"EVENT_SENDTO","threadId":{"int":100203},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17056","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcb6d9e2-e312-4207-8981-b0417d524ea4","sequence":{"long":12311},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17056","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7dfde0c-ee8f-4cc1-ad57-486f4581dfbe","sequence":{"long":12312},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83ae537e-a2f8-4e62-af22-8e44311661bd","sequence":{"long":12313},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be7ea7fe-db91-41e5-ab43-7e0259e19e41","sequence":{"long":12314},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7af179bb-2d55-425f-a863-6782e7e7ffce","sequence":{"long":12315},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7123a078-fec1-4e72-baf0-6040ce888bd3","sequence":{"long":12316},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282123978006,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2cb59dc-14db-4f46-a69e-551e07edf44d","sequence":{"long":12317},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584282404109541,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":721137},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96e893d5-67df-4d38-8397-456b4a9eba9b","sequence":{"long":12318},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584283414598458,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":721499},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9de5cff-3321-4f4f-9de7-02faa80d8e17","sequence":{"long":12319},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":721499},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4532d808-7c77-44f5-ac7e-3cedd9ed75fe","sequence":{"long":12321},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0223ea43-ef3a-4d8e-97ef-04d7ab3600d4","sequence":{"long":12320},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"337818c3-3bd9-43c8-895b-393d308c9c39","sequence":{"long":12323},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12e02b4b-780e-4950-91ac-4a6e466c7d1f","sequence":{"long":12322},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a31238e-af9f-4bfe-acdb-b285d0ef126a","sequence":{"long":12325},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20c1c702-0e63-41c5-be5e-0e8e6bb2179c","sequence":{"long":12324},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dec59762-e960-470d-af59-69aaf489a00a","sequence":{"long":12326},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ff948ba-e654-4459-95c2-f157d89f8e2b","sequence":{"long":12327},"type":"EVENT_READ","threadId":{"int":100204},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a833ef88-6bfc-47a6-ba57-5cd2c072f4c2","sequence":{"long":12328},"type":"EVENT_READ","threadId":{"int":100204},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48df2775-617f-40d0-8864-0899697acaac","sequence":{"long":12329},"type":"EVENT_READ","threadId":{"int":100204},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3300},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"395da022-3a18-4a11-be47-f7303c808e6e","sequence":{"long":12330},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3353},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e39ed20d-d37d-419d-adcc-9e89bab142b4","sequence":{"long":12331},"type":"EVENT_WRITE","threadId":{"int":100204},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfff7aca-da1a-4a36-9f55-9c9c83bb2af1","sequence":{"long":12332},"type":"EVENT_READ","threadId":{"int":100204},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d29b6b6-f8a5-43e5-8a1c-8df57c45104f","sequence":{"long":12333},"type":"EVENT_READ","threadId":{"int":100204},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1ba38ee-f915-4a37-9f7c-d051f0c6e248","sequence":{"long":12334},"type":"EVENT_READ","threadId":{"int":100204},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3672eb19-5c91-4a82-b13a-fcc880f4fa47","sequence":{"long":12335},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"764288fb-be3f-438b-bbe3-2e8b4ac5fa47","sequence":{"long":12336},"type":"EVENT_WRITE","threadId":{"int":100204},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5652148b-89b6-4af4-a888-ac6ec731960b","sequence":{"long":12337},"type":"EVENT_READ","threadId":{"int":100204},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aec30c95-9920-4f77-ac2e-7f8596fe87e8","sequence":{"long":12338},"type":"EVENT_SENDTO","threadId":{"int":100204},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17057","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d4855bf-a874-482d-8be8-631714ac9d81","sequence":{"long":12339},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17057","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00fca326-ff49-4c43-9a59-4e1c8bf4d6ce","sequence":{"long":12340},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284123884601,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"300ad23b-eb66-4fc7-9561-965e856d6719","sequence":{"long":12341},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284134103346,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b63d9009-0e6d-4c69-ae00-9cffee9cd41f","sequence":{"long":12342},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284134103346,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c410687-257d-4508-a044-f50ab9198607","sequence":{"long":12343},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284134103346,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"104c2d30-9295-4aad-9d25-c1740dc707f5","sequence":{"long":12344},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284134103346,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52793de5-5b81-487a-be6e-b8ee11eb773a","sequence":{"long":12345},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284433873171,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":723931},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05f1dc52-7ee3-4116-8685-ab8baf626e70","sequence":{"long":12346},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284553900022,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d994f18-a85d-4f23-8091-d72a7a324fdc","sequence":{"long":12347},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284553900022,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17058","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89b4a96d-c6b3-4fb9-8856-5dfca5848f34","sequence":{"long":12348},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284553900022,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17059","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e13831b9-a22a-40f4-9f7f-2556985dc869","sequence":{"long":12349},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284553900022,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17060","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5b57839-19a4-484a-b2f0-9a7075938532","sequence":{"long":12350},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284553900022,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17061","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80659bca-0a62-41a1-b72c-e5672e34c5a0","sequence":{"long":12351},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284553900022,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17058","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1cf2f3e-6a44-41ab-b211-21d0f09f45a9","sequence":{"long":12352},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284553900022,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17059","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60a922fd-3ec7-475e-b56a-ea0cd7940ac9","sequence":{"long":12353},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284553900022,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17060","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28382d32-da5e-4f52-8ea7-a59b62627b9b","sequence":{"long":12354},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584284553900022,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17061","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c730af0-3453-4819-8039-668bcf76f452","sequence":{"long":12355},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584285444109498,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":725114},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e58b58e-db09-4b00-9f50-ca6fa5602f65","sequence":{"long":12356},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":725114},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2974e62-046d-4abb-b0b8-16b36c9a06f2","sequence":{"long":12358},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7ac667c-2097-424d-b200-c7c6b152b560","sequence":{"long":12357},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"069cf801-832e-42e1-8fd9-7b4387cef5c7","sequence":{"long":12360},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07b54376-c398-4584-b2c5-b6e1c423935f","sequence":{"long":12359},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1642e48-6fc6-45e5-b0af-4261a46c22a1","sequence":{"long":12362},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"baef206f-97d9-4c21-96da-54b2f7763267","sequence":{"long":12361},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e34291c-90d8-42fd-a27f-e41291b908f3","sequence":{"long":12363},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e749272d-3936-4dc9-a3a2-0fdccfabbf42","sequence":{"long":12364},"type":"EVENT_READ","threadId":{"int":100205},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1aad869f-f792-4c6e-bfe2-086ea8c15076","sequence":{"long":12365},"type":"EVENT_READ","threadId":{"int":100205},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4dcba931-a258-409d-b002-3ac54fa21acb","sequence":{"long":12366},"type":"EVENT_READ","threadId":{"int":100205},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2428},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42d3114f-2dc1-487f-82fc-aa7391e0fc89","sequence":{"long":12367},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2481},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"658a65c1-3b11-4c47-a094-23695e171c8b","sequence":{"long":12368},"type":"EVENT_WRITE","threadId":{"int":100205},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41083b60-d3ac-4231-bafd-f8956a57c154","sequence":{"long":12369},"type":"EVENT_READ","threadId":{"int":100205},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a298c646-e700-4498-8ad6-3a4cee90d147","sequence":{"long":12370},"type":"EVENT_READ","threadId":{"int":100205},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dea7b97-20c5-4688-90b2-d690341353e1","sequence":{"long":12371},"type":"EVENT_READ","threadId":{"int":100205},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1179},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"533df5d2-8589-4b68-9cf3-2068b003c2be","sequence":{"long":12372},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1232},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a8088fd-f172-44d5-8aa2-e8627153d276","sequence":{"long":12373},"type":"EVENT_WRITE","threadId":{"int":100205},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf0ab495-7c7b-43e1-bc6c-ad9503c5b239","sequence":{"long":12374},"type":"EVENT_READ","threadId":{"int":100205},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d5235ed-7ec9-4648-a10d-b02a1d06edb8","sequence":{"long":12375},"type":"EVENT_SENDTO","threadId":{"int":100205},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17062","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8fe29c6-10fe-4a10-92ad-6909c93b043e","sequence":{"long":12376},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17062","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"446c1a2d-f277-4a41-9083-dbe78dc3a2ad","sequence":{"long":12377},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286124380692,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38a13936-7705-4431-9405-06b2a297401b","sequence":{"long":12378},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286133982653,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4f8eaa7-7aab-4f3d-ac33-6efe422ade2b","sequence":{"long":12379},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286133982653,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"131d4e93-0bbf-46a7-b164-06d353523108","sequence":{"long":12380},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286133982653,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c62077f-112f-4fe8-95a5-853a024c86cc","sequence":{"long":12381},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286133982653,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"102a5b93-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":null,"localPort":null,"remoteAddress":{"string":"138.68.201.49"},"remotePort":{"int":123},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bbad4e6-2cfb-4357-8f00-721da22ffd2c","sequence":{"long":12382},"type":"EVENT_CONNECT","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"102a5b93-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286254429753,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","address":"138.68.201.49","port":"123","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31d3442c-f1c1-4cf8-8439-ff8792d8d257","sequence":{"long":12383},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"102a5b93-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286254429753,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b614bb17-1f3a-46dd-8650-f350a5fd8e47","sequence":{"long":12384},"type":"EVENT_SENDTO","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"b5434a9c-467a-11e9-ae89-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286254429753,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"ret_msgid":"17063","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"22","ppid":"1","address":"138.68.201.49","port":"123","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04ceb8e4-2cab-40bd-baf5-54465632686f","sequence":{"long":12385},"type":"EVENT_SENDTO","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"b541acd0-467a-11e9-ae89-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286254429753,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":101},"programPoint":null,"properties":{"map":{"ret_msgid":"17064","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88c478c4-7aed-4496-ae3a-541660dfa91e","sequence":{"long":12386},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b2110-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286254429753,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":101},"programPoint":null,"properties":{"map":{"ret_msgid":"17064","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d169d175-6704-466f-80ca-d339570eb320","sequence":{"long":12387},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584286464314603,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":728312},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0906092b-c307-4e81-928a-227188bf907b","sequence":{"long":12388},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584287473978910,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":728676},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2a27860-e010-4c83-9ccd-9f3148670723","sequence":{"long":12389},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584287554339483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d54f746b-6bfc-42f4-a1ff-2370b02d72cd","sequence":{"long":12390},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584287554339483,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17065","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00313d22-b266-4232-8340-99d3cbd437a5","sequence":{"long":12391},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584287554339483,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17066","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29aab926-cb45-4111-8ce4-40cdf74388c2","sequence":{"long":12392},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584287554339483,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17067","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aef43221-b743-48ce-967b-fb66a2225c89","sequence":{"long":12393},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584287554339483,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17068","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b102f90-c501-4b51-a6fd-7184d5cdc847","sequence":{"long":12394},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584287554339483,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17065","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b30e3e20-9de3-4077-aa1d-5647f89e6737","sequence":{"long":12395},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584287554339483,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17066","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27e632a5-436b-4afe-a8aa-6a21bdad0f9a","sequence":{"long":12396},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584287554339483,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17067","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1518c0df-9f4c-46d5-8984-7bc6e70f04b6","sequence":{"long":12397},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584287554339483,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17068","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6dc586c4-5d9f-44d5-93ba-54a6ed9444c5","sequence":{"long":12398},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":728676},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19007c79-4261-4c29-8568-76fd56f44c9c","sequence":{"long":12400},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6eaaad33-afdd-4bd3-b4af-44af6504da20","sequence":{"long":12399},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"372a20f2-4e70-4b50-9dae-af8cfa8e271e","sequence":{"long":12402},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"794dac70-d21c-4d72-beba-0a6a56c293ef","sequence":{"long":12401},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"955fdd17-a684-4440-bd3e-0e0c1609e2ff","sequence":{"long":12404},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c66aa7d-c7f3-4537-86ea-1d56067ba97e","sequence":{"long":12403},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d668cf5d-8cb3-4077-a8ca-a86ae7ce728f","sequence":{"long":12405},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"205ad4f5-49dd-486f-9e4b-2c9b12035e88","sequence":{"long":12406},"type":"EVENT_READ","threadId":{"int":100206},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d30c2034-13b6-4aa9-9c4e-50b8857363a0","sequence":{"long":12407},"type":"EVENT_READ","threadId":{"int":100206},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c1b66d9-ff01-4f08-8f6b-9b52f4b22763","sequence":{"long":12408},"type":"EVENT_READ","threadId":{"int":100206},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3194},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc6a5825-d949-494a-90aa-c9f7b1cc06fb","sequence":{"long":12409},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3247},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56c9c27a-f50f-4aa0-aab2-6a3e30095add","sequence":{"long":12410},"type":"EVENT_WRITE","threadId":{"int":100206},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"387b0cc7-e81a-443a-a07b-2021ae39aa6f","sequence":{"long":12411},"type":"EVENT_READ","threadId":{"int":100206},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da281b5a-e43c-412b-b4ca-85ad2079e671","sequence":{"long":12412},"type":"EVENT_READ","threadId":{"int":100206},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce5d2eff-9375-41c3-857e-de9d64658010","sequence":{"long":12413},"type":"EVENT_READ","threadId":{"int":100206},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3718d761-c542-4615-8d4c-8ca1727e97d0","sequence":{"long":12414},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62148593-c38f-4bf5-9d81-7a866cbb9c0e","sequence":{"long":12415},"type":"EVENT_WRITE","threadId":{"int":100206},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cd24973-03e9-42c2-8231-bd4705c0f646","sequence":{"long":12416},"type":"EVENT_READ","threadId":{"int":100206},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6448aa1f-0f0e-461e-9ac0-598d285dbc39","sequence":{"long":12417},"type":"EVENT_SENDTO","threadId":{"int":100206},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17069","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed6ef29a-d3e1-4203-9782-49c3012693ff","sequence":{"long":12418},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17069","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63884e20-4928-48ed-95e6-a2b4d4bce678","sequence":{"long":12419},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67630d66-2381-4a08-b58b-786412feba93","sequence":{"long":12420},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cc96d09-395f-40ee-abe4-54c9c182217b","sequence":{"long":12421},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5eb8efe-d94e-4319-b570-2f99d55c8f24","sequence":{"long":12422},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8254a9f8-df25-49b6-bbb3-00be5a241191","sequence":{"long":12423},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288123841431,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bb29048-c7be-4d69-a9a0-53c386e14932","sequence":{"long":12424},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584288494097284,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":731990},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"174f59f1-df60-45be-ac8c-1039b9682707","sequence":{"long":12425},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584289504468213,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":732353},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a453503f-7cfc-4b8a-bfd4-18896d8ce3f6","sequence":{"long":12426},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":732353},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eee13d4e-dbf8-4200-9c09-d8f998daaeed","sequence":{"long":12428},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10af0da3-6ce6-44c1-b56a-6ed41d347e9d","sequence":{"long":12427},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e02c77e-eb92-4e32-9422-b90034e7d515","sequence":{"long":12430},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af93fa42-07ae-4905-a689-18080d42e93f","sequence":{"long":12429},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8ff8d8e-1726-4907-bf8e-52e7a11065aa","sequence":{"long":12432},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c9e624b-d1b2-4c46-9731-2c13ad6c7246","sequence":{"long":12431},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5204094e-7ccc-4648-a341-5051fa819d40","sequence":{"long":12433},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2648f1ed-a381-49c9-820f-7555cfb38526","sequence":{"long":12434},"type":"EVENT_READ","threadId":{"int":100207},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14acfcd5-334b-4e8b-9065-eaa6fb8c2fc5","sequence":{"long":12435},"type":"EVENT_READ","threadId":{"int":100207},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14937b44-ba22-452f-9f35-a7ff3a35c0b4","sequence":{"long":12436},"type":"EVENT_READ","threadId":{"int":100207},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3310},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddb24c7e-55bf-4c5a-9afe-1423ce6c661f","sequence":{"long":12437},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3363},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92653aa5-b3eb-47da-9d74-148ba3596af4","sequence":{"long":12438},"type":"EVENT_WRITE","threadId":{"int":100207},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16871450-6863-466b-86d7-02e4a4240a22","sequence":{"long":12439},"type":"EVENT_READ","threadId":{"int":100207},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e01160c6-2f96-478c-bbb9-410d5e198cb0","sequence":{"long":12440},"type":"EVENT_READ","threadId":{"int":100207},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2e00398-2a06-4546-8eed-221e559637cb","sequence":{"long":12441},"type":"EVENT_READ","threadId":{"int":100207},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04f7f486-0fcd-4bfe-a8a6-74e13aff165a","sequence":{"long":12442},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d20b8ac-f6e5-41d4-935e-12de7d9b6ca0","sequence":{"long":12443},"type":"EVENT_WRITE","threadId":{"int":100207},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6435c3fb-7dc6-4f5b-9381-743aa9927a1e","sequence":{"long":12444},"type":"EVENT_READ","threadId":{"int":100207},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8749947-015e-4a14-91ca-f72ef158abfd","sequence":{"long":12445},"type":"EVENT_SENDTO","threadId":{"int":100207},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17070","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0ec44a3-e52b-4dd7-807b-ecb837e2f5de","sequence":{"long":12446},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17070","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2248a6ed-49b6-43cc-b88e-713dbfdb8c5d","sequence":{"long":12447},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290123963243,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33a29397-4934-4d1a-82e5-1a616b9ce5fa","sequence":{"long":12448},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290134155122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e38b2de-f8a7-4b87-8cea-899cfe6dfa9e","sequence":{"long":12449},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290134155122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7fbbe47-e2c4-4e61-b58b-c1c399824571","sequence":{"long":12450},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290134155122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"611ac651-99eb-4dac-bee8-1a2e1246baf3","sequence":{"long":12451},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290134155122,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2edd7a3-2e89-49cb-83ac-c55ab210b025","sequence":{"long":12452},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290523884679,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":734790},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b260ad4-248a-4721-9d21-5b7d7c74c194","sequence":{"long":12453},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290553853588,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53edf6be-8795-4cda-a837-90f56fc714fc","sequence":{"long":12454},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290553853588,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17071","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"991b54e5-4df0-4442-9171-d39f75946844","sequence":{"long":12455},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290553853588,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17072","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e07be07-de81-4830-b9b5-121bd970695b","sequence":{"long":12456},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290553853588,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17073","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eeb38100-0fe6-4f9f-aaed-1c8006911a85","sequence":{"long":12457},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290553853588,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17074","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01791d44-e8b8-44e7-b0d0-1ddd96c1c8e6","sequence":{"long":12458},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290553853588,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17071","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18724750-79ea-4f77-bf4e-87f69641fc82","sequence":{"long":12459},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290553853588,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17072","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e1fd501-9d2c-47bd-9d48-2aa0944a276e","sequence":{"long":12460},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290553853588,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17073","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed664b8a-333e-45fb-bf05-e2c55b1a9844","sequence":{"long":12461},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584290553853588,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17074","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"edeb0cca-467d-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f47221e-3101-4512-a28b-50aa81675d4a","sequence":{"long":12462},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"edeb0cca-467d-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584291523912098,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d384bc7-af5a-4208-9980-b1aa2292423b","sequence":{"long":12463},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"edeb0cca-467d-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584291523912098,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"969558c7-90fd-4920-bb70-57eada05eb5c","sequence":{"long":12464},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4edb36-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584291523912098,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbf6e672-08f6-4897-b472-9aa9fde57977","sequence":{"long":12465},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObject":{"UUID":"ed4e1828-467d-11e9-aed0-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584291523912098,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1491","exec":"nc"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f455d109-905e-43f5-b523-ba9fd4fdf921","sequence":{"long":12466},"type":"EVENT_SIGNAL","threadId":{"int":100121},"subject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObject":{"UUID":"ecab3f79-467d-11e9-aecf-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584291523912098,"names":{"array":["aue_kill"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"pid"},"runtimeDataType":null,"valueBytes":{"bytes":"05d3"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"signum"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1491","arg_euid":"1003","arg_ruid":"1003","arg_egid":"1003","arg_rgid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3def84ca-d2a0-4722-9f86-3e381b274577","sequence":{"long":12467},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584291523912098,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cae9e5b-ef3b-4467-99a2-00ca0cb1ad0b","sequence":{"long":12468},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584291523912098,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0294a50-3eb5-4962-bc8d-8d2114fa7cb2","sequence":{"long":12469},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584291523912098,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":50},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92db88b2-eb06-4d22-8136-a22b8483cd0a","sequence":{"long":12470},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584291534898678,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":736822},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"572e5bbc-2349-4988-94db-2afa0023e67f","sequence":{"long":12471},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584291713988210,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4aa8f71-2bdc-4cfa-b4b2-b56e7974ad36","sequence":{"long":12472},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584291713988210,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c1f7c95-3daf-4aa6-8a41-4177dc549d2c","sequence":{"long":12473},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584291923871502,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b558fb48-c437-4836-aeb6-f9a88b883633","sequence":{"long":12474},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584291923871502,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91e591b6-7b96-444c-a9b7-537417bf98ec","sequence":{"long":12475},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292093960690,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94b0b967-fd8b-454c-9f5b-016ea86736ab","sequence":{"long":12476},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292093960690,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0ef1b2a-9956-4b9e-84b2-9bc606778488","sequence":{"long":12477},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":736822},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfad21c6-17d5-42cf-922c-0faacb41c998","sequence":{"long":12479},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51241325-4164-43a1-b335-73322a8373ae","sequence":{"long":12478},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22435ce8-9c9a-4244-afe1-a5e24661d9f5","sequence":{"long":12481},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fbd51fe-dd4e-40a6-9586-f3808156ec94","sequence":{"long":12480},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f24ea76-6979-4218-8d5a-5dedf43b8e7a","sequence":{"long":12483},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af949b7d-06a1-4507-9ff1-fce1f6098cad","sequence":{"long":12482},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fde630c-7e87-48b2-94a6-8de6af248c58","sequence":{"long":12484},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c38cb0ed-5d11-4968-be77-5bc9f3566edb","sequence":{"long":12485},"type":"EVENT_READ","threadId":{"int":100208},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c59e97e3-d1ca-4620-b1e6-8dc0288ec5b3","sequence":{"long":12486},"type":"EVENT_READ","threadId":{"int":100208},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d517f74-e905-43b3-9c16-cf30959be4e8","sequence":{"long":12487},"type":"EVENT_READ","threadId":{"int":100208},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2433},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c27a5f02-3123-4d4c-940a-a35a1b47f40b","sequence":{"long":12488},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2486},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1a82d48-16a6-4db7-9be9-c4816e9c81a7","sequence":{"long":12489},"type":"EVENT_WRITE","threadId":{"int":100208},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11551d5d-3e65-4b58-ad9f-2192384a48fb","sequence":{"long":12490},"type":"EVENT_READ","threadId":{"int":100208},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"553633b6-72f2-48f8-b0ff-340678fed2b4","sequence":{"long":12491},"type":"EVENT_READ","threadId":{"int":100208},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f1e0939-35f4-4bb8-985a-ec890e3a12f5","sequence":{"long":12492},"type":"EVENT_READ","threadId":{"int":100208},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2028},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a60a5aa-edf0-479f-b14f-cb04dfd61688","sequence":{"long":12493},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2081},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5d9ddbc-05d9-44cb-a305-54d49fe78d47","sequence":{"long":12494},"type":"EVENT_WRITE","threadId":{"int":100208},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcf58226-bfc8-4a05-a150-299118a1f1ba","sequence":{"long":12495},"type":"EVENT_READ","threadId":{"int":100208},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2eb579f5-4b9d-40d6-8e9c-045c2531837b","sequence":{"long":12496},"type":"EVENT_SENDTO","threadId":{"int":100208},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17075","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6cf8a24-e760-4064-b7dd-630a1dff0bc7","sequence":{"long":12497},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17075","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14d10df7-d16f-4972-af73-30721ca97256","sequence":{"long":12498},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292123907396,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5b205b7-6d45-4117-8418-28a0251b5481","sequence":{"long":12499},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292133941659,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"682f0db4-c793-43cd-aef8-1940d3a5680b","sequence":{"long":12500},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292133941659,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16ad66c3-565b-4001-acf8-b2d6bc30d631","sequence":{"long":12501},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292133941659,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3897227f-8832-4cb9-a652-8fef817371ae","sequence":{"long":12502},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292133941659,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9023e2f5-1bfe-4490-bbe0-b91c87d5b09a","sequence":{"long":12503},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292144135537,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94c68fa7-1f5c-4731-b34f-745d1822d433","sequence":{"long":12504},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292144135537,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ee7d9a5-3596-463c-a831-596ef17b02fb","sequence":{"long":12505},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292184100274,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a16b4cbb-fbfa-4ec9-825d-2ac64ad19597","sequence":{"long":12506},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292184100274,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79b459a6-9665-4cda-ae2b-b9a9b98f13ca","sequence":{"long":12507},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292284020026,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a306ae3-9829-4a74-adbd-9610b1ec7072","sequence":{"long":12508},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292284020026,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da3fc0d0-23af-4c39-80d5-d4b2a41dac7c","sequence":{"long":12509},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292473998304,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24afc8b2-01e6-4ad4-9f38-7d2a25a35035","sequence":{"long":12510},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292473998304,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90a86823-48fc-4e5e-bf7e-7f9f1d1fb259","sequence":{"long":12511},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584292553886038,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":740401},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"433fbd18-5953-4a8f-8797-cde0e50d5355","sequence":{"long":12512},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293483909813,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9efd6e90-7f38-40fd-b5b4-b07c108f263d","sequence":{"long":12513},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293483909813,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"502bb230-53ed-4b86-a612-2569db468a2d","sequence":{"long":12514},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293483909813,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a5b4178-4e5b-4bd8-af49-c4c9ed8a0e2a","sequence":{"long":12515},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293483909813,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"700e7e7a-77dd-456a-ba91-33d55d454e52","sequence":{"long":12516},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293483909813,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4638df37-82cf-4a2c-a428-0069b58c50ac","sequence":{"long":12517},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293483909813,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c137f2f8-fd2f-49f7-94ad-38bceff1236e","sequence":{"long":12518},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293483909813,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a3529f0-31e1-493f-989e-7a80eff57589","sequence":{"long":12519},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293483909813,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ae58761-ec41-45b4-aff6-03ee4bb34ccf","sequence":{"long":12520},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293553874656,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3781df02-d4c8-4201-9ddd-bdc664b361a6","sequence":{"long":12521},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293553874656,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17076","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e65427a0-a94c-447d-a19e-75c9a5af39a5","sequence":{"long":12522},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293553874656,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17077","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c00e840-fe5b-40d3-8dcf-31e6b12de9f3","sequence":{"long":12523},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293553874656,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17078","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd38c68d-9df4-454f-92b7-6beb215b2c01","sequence":{"long":12524},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293553874656,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17079","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cc99830-1445-4142-9b17-04b05b8092a9","sequence":{"long":12525},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293553874656,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17076","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99844316-2ede-44f5-9f61-6edb92560c6b","sequence":{"long":12526},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293553874656,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17077","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb5ef89a-c938-4fb1-b44e-908af349bfe0","sequence":{"long":12527},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293553874656,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17078","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76c26dc7-015e-48ff-aa4b-b285a429d7d7","sequence":{"long":12528},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293553874656,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17079","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be103092-9918-46f7-9280-b0d9b8146b69","sequence":{"long":12529},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584293564056736,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":742168},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"124656d9-880b-4ff7-80ba-4343b870b8db","sequence":{"long":12530},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":742168},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdf30c9e-de22-4808-8dcb-93273daec3c3","sequence":{"long":12532},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56cd641e-47a9-4e7c-a29f-3683f14bd55b","sequence":{"long":12531},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21690813-eb17-4fa7-b6c9-2b460362698e","sequence":{"long":12534},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3711b1b7-c04c-4a89-9f43-639cc520e05a","sequence":{"long":12533},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c298c330-97fb-4020-8fa0-c9ae69a14db6","sequence":{"long":12536},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f536d7c3-8fd7-47f8-9fd7-14bfff593876","sequence":{"long":12535},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b5ed6b8-4aea-480d-896b-6a9247f0c9e8","sequence":{"long":12537},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20614d38-97f4-4e2c-9e24-10dcb4dbb0a6","sequence":{"long":12538},"type":"EVENT_READ","threadId":{"int":100209},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8e227e4-0c6b-43c5-94f7-035f10084c4e","sequence":{"long":12539},"type":"EVENT_READ","threadId":{"int":100209},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ce8fccb-53c1-4530-8138-2997edca7f9b","sequence":{"long":12540},"type":"EVENT_READ","threadId":{"int":100209},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3575},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ec7e648-5c48-48a9-9ad5-5b4e21c7ca86","sequence":{"long":12541},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3628},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"670d2de6-0c6b-4bc7-a129-5f75b2495ae1","sequence":{"long":12542},"type":"EVENT_WRITE","threadId":{"int":100209},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e886b5b-ffbc-489d-846c-7e16a3e4aebd","sequence":{"long":12543},"type":"EVENT_READ","threadId":{"int":100209},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d29c4927-44c9-4889-8d0c-3875713830fb","sequence":{"long":12544},"type":"EVENT_READ","threadId":{"int":100209},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa8bc1c7-b9fe-4f63-b0cd-c058b278fe52","sequence":{"long":12545},"type":"EVENT_READ","threadId":{"int":100209},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1763},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36680fba-71bc-4b8a-a347-6d3d73cafb68","sequence":{"long":12546},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1816},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e99980e-870c-4095-9d38-73fe2019c5a3","sequence":{"long":12547},"type":"EVENT_WRITE","threadId":{"int":100209},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6eef4dd2-fbe9-42fb-a88d-9bb39e1e8c67","sequence":{"long":12548},"type":"EVENT_READ","threadId":{"int":100209},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fcb015b-1e74-4bba-b0ea-2f06bd93f3a7","sequence":{"long":12549},"type":"EVENT_SENDTO","threadId":{"int":100209},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17080","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c23c85c3-1bcd-42d4-b2ae-9342b9711457","sequence":{"long":12550},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17080","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcc8a6c0-6ebd-4ed1-9868-2f15c28ebb01","sequence":{"long":12551},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d77c0f3b-ce23-4b6e-804f-cccbfcf38e83","sequence":{"long":12552},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f6fa260-1437-4b6a-8208-4c816322eab5","sequence":{"long":12553},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294124109425,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1720a8a-6a74-429c-8ed3-bd337a341d4d","sequence":{"long":12554},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294133977351,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81478145-5329-4e93-b71e-0a4a165e91dc","sequence":{"long":12555},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294133977351,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba3b187a-8d48-4341-aaf9-6f6fc48fca9a","sequence":{"long":12556},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294454380625,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9701342-2e36-41dc-b133-d6cb0f9b13f6","sequence":{"long":12557},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294454380625,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bb32d59-dbe6-4da6-86d5-eee95ab79d45","sequence":{"long":12558},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294463838783,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c2a60cd-ff2b-46e2-be79-a119149f0586","sequence":{"long":12559},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294463838783,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7570533-887a-4aac-a1e0-c5c836746893","sequence":{"long":12560},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294463838783,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86c79c7e-508a-435f-b41f-264656cd29b5","sequence":{"long":12561},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294463838783,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bf0a549-8220-4ddd-98b9-3f2331f502b2","sequence":{"long":12562},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294463838783,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6741b57e-8ab4-4519-93f6-3581d459cce0","sequence":{"long":12563},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294463838783,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc99597d-a46f-467c-add3-abb59d60ad4f","sequence":{"long":12564},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584294583997533,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":745176},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ed3b29d-5a7f-46e8-bb9e-84d6463341f6","sequence":{"long":12565},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584295473886203,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5efde358-fc1a-4adf-8f2d-c04ef70d9ff7","sequence":{"long":12566},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584295473886203,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"151bc46e-92da-408f-b61c-57750e540d81","sequence":{"long":12567},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584295473886203,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15ce57ad-93a4-457d-bb90-009725db6669","sequence":{"long":12568},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584295473886203,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8da86378-1b59-4c5d-a53b-67ac24ac59e5","sequence":{"long":12569},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584295473886203,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70999dcd-1358-4d61-affc-87454a1c04f5","sequence":{"long":12570},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584295473886203,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7d174df-94a3-45b0-afec-47dcb0fcf613","sequence":{"long":12571},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584295483956356,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"434cc255-2f89-4b25-9522-6e6638abedb9","sequence":{"long":12572},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584295483956356,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb3d339d-875a-4ebe-8009-a24820416832","sequence":{"long":12573},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584295593991259,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":746132},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9939ef5-150f-4368-a6c6-14735758a906","sequence":{"long":12574},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584295714062348,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97521f38-084e-4163-9ea6-ba1eca3dfaec","sequence":{"long":12575},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584295714062348,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efbcd076-7aaa-4675-beae-886f1a2aa0b5","sequence":{"long":12576},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584295883896525,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed55aaed-a090-48fc-97a7-04d6943a7940","sequence":{"long":12577},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584295883896525,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ccf174f-713a-4fd6-86ea-663ffa7d24d9","sequence":{"long":12578},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296063928133,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"590e87dc-cfa7-4339-bf53-20a96401398a","sequence":{"long":12579},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296063928133,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a081416-f7c6-4a9a-84c3-db9e52fc215c","sequence":{"long":12580},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":746132},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3820a58b-f654-4b3b-903a-d5b6d0bac484","sequence":{"long":12582},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe49b528-9a02-4d51-8cda-6cfd4b5333c1","sequence":{"long":12581},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c7748d8-f4ae-4fdb-becb-cc5acc4e4639","sequence":{"long":12584},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2040616e-b789-4722-ae5d-5091a0297b05","sequence":{"long":12583},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40170355-82ba-489b-8c62-e6045cdc024e","sequence":{"long":12586},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69a68fac-7c98-4189-9074-f166b4f315d7","sequence":{"long":12585},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c93272c7-53bb-420a-ae39-c153a2f9d5e4","sequence":{"long":12587},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa04b632-80fb-4b1e-8e65-2d4c83303243","sequence":{"long":12588},"type":"EVENT_READ","threadId":{"int":100210},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a28bc98-8ced-436d-9a43-d9a2a2c2e83b","sequence":{"long":12589},"type":"EVENT_READ","threadId":{"int":100210},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ab72018-e96f-4a1b-9884-2246353bffcc","sequence":{"long":12590},"type":"EVENT_READ","threadId":{"int":100210},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3004},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03c9142e-7cad-4f8d-845e-a2f12935f56d","sequence":{"long":12591},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3057},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e5ed78b-8201-44b0-b6f7-375a6962e978","sequence":{"long":12592},"type":"EVENT_WRITE","threadId":{"int":100210},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbf4e70d-d828-40bf-a294-ac6834046bda","sequence":{"long":12593},"type":"EVENT_READ","threadId":{"int":100210},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c92262ff-abd0-47c3-9e08-2dd267f0e606","sequence":{"long":12594},"type":"EVENT_READ","threadId":{"int":100210},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0a584a4-1df7-482a-b7ac-41d0fb0d6ea2","sequence":{"long":12595},"type":"EVENT_READ","threadId":{"int":100210},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":952},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b8da816-d87e-42da-ac09-989abcbf272e","sequence":{"long":12596},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1005},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6f3284f-a2b6-4204-89a3-aa8d7c54acf0","sequence":{"long":12597},"type":"EVENT_WRITE","threadId":{"int":100210},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a629d31-8a7a-426b-b667-2be1e58afc1d","sequence":{"long":12598},"type":"EVENT_READ","threadId":{"int":100210},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e811e34-3087-408f-805a-cfb2401deacf","sequence":{"long":12599},"type":"EVENT_SENDTO","threadId":{"int":100210},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17081","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24a0eadf-0a16-435e-8d24-9afe1ad6de2e","sequence":{"long":12600},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17081","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d5c8757-c538-46a9-a1fe-2982e0a0f9f5","sequence":{"long":12601},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296124492515,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d22e43b-27d7-4595-9025-62c59b509363","sequence":{"long":12602},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296133970829,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68adbc3a-3677-44d5-82a7-a55b8b6c6b87","sequence":{"long":12603},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296133970829,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e40f484-f5e6-4e0b-b5f5-dacf9c21b23e","sequence":{"long":12604},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296133970829,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92cdea87-8459-49aa-b634-6a3d0dc08b23","sequence":{"long":12605},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296133970829,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10d3fa0b-bf9c-4830-a6e7-f0388d4be94c","sequence":{"long":12606},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296144373591,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06f4c241-9aa2-44a8-8991-5ad3676ba0b7","sequence":{"long":12607},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296144373591,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80c2cecb-0046-4c5b-a6bc-e3c33eeb1ab0","sequence":{"long":12608},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296414265876,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99a3d5bf-4cbe-4dfe-b6b0-94dcdb5cd250","sequence":{"long":12609},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296414265876,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1b6395d-2101-46be-9820-f3de4ad2eeac","sequence":{"long":12610},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296494302835,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3b23098-4594-4966-858b-47196d6d85b2","sequence":{"long":12611},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296494302835,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43b09470-3687-40ff-9d7c-294674506d5a","sequence":{"long":12612},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296554162167,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0dc4990-8788-4cfc-99cc-53e0ec54864b","sequence":{"long":12613},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296554162167,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17082","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1db7961d-5383-42b5-a090-36249d46b630","sequence":{"long":12614},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296554162167,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17083","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"279af722-6d66-4c93-abd2-b901844dcced","sequence":{"long":12615},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296554162167,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17084","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28e5f9d4-381e-470c-8db1-50b2f5b03282","sequence":{"long":12616},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296554162167,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17085","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa3bd33f-8bc8-4bc2-8e32-6c914723f439","sequence":{"long":12617},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296554162167,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17082","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64c87879-37d1-4d47-861f-001517df5b2a","sequence":{"long":12618},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296554162167,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17083","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8988c89b-686d-49ae-920c-b9d3dc42334b","sequence":{"long":12619},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296554162167,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17084","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e0f8522-be20-45de-9d1e-caa1fd55889b","sequence":{"long":12620},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296554162167,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17085","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0d19b76-da92-4360-a593-484a537a0cac","sequence":{"long":12621},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296623880102,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":750376},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c740f54b-2829-431c-aa72-5e5056e32b3e","sequence":{"long":12622},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296623880102,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca40ca9d-d4c8-41f6-8130-d8511c2e68f6","sequence":{"long":12623},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296623880102,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44266fc3-df04-4493-9f88-89249493d82e","sequence":{"long":12624},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296743845299,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4eb8c5e-8417-4560-89f2-715700f17e77","sequence":{"long":12625},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296743845299,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9fb0dbf-b8b8-4bee-9f72-e30353c9fa10","sequence":{"long":12626},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296893867379,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b091731-3bff-4841-83d9-8f041103498c","sequence":{"long":12627},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584296893867379,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"199abe1d-6a40-4cce-aeb0-7ae373ae4c8b","sequence":{"long":12628},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584297634272779,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":751219},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dedabdf3-61f0-4219-8e34-e044ec7707bf","sequence":{"long":12629},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584297873898659,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d3ffa55-be38-4364-a050-c3aba56a49c0","sequence":{"long":12630},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584297873898659,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd561ef6-eabc-405c-947b-5600ec5a6505","sequence":{"long":12631},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584297873898659,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae4e858a-0592-4871-b66b-2e2030937a46","sequence":{"long":12632},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584297873898659,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8f5151f-bb7f-43c3-89cd-286478b14cde","sequence":{"long":12633},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584297884005270,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25c7757f-9c44-44c2-b7b4-ed116b1711e4","sequence":{"long":12634},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584297884005270,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bc1d703-2632-4b7c-a51b-4f446b0bdeef","sequence":{"long":12635},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584297884005270,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32cc5d0a-d241-4fe1-a845-00d4e3bfa486","sequence":{"long":12636},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584297884005270,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"973f324c-9e1b-4494-b3c7-ade46fea463b","sequence":{"long":12637},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584297884005270,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54040ac0-c8b8-449a-a32b-d83a27f555c5","sequence":{"long":12638},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584297884005270,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a4ccb15-d9aa-4229-8ad3-e1f70fa46f23","sequence":{"long":12639},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":751219},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ffca603-ee33-4925-85f7-1616364cdf02","sequence":{"long":12641},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c79c9abe-59bc-4590-963c-fa7c094e6238","sequence":{"long":12640},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcfa732a-2667-49aa-bfb0-0e9b2a268a0b","sequence":{"long":12643},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92d405df-fb40-47a1-a7b2-96a1eda598cc","sequence":{"long":12642},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c1f6e27-66a8-42e1-a4bc-9d17cc091e76","sequence":{"long":12645},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e50b4776-0170-43d3-8a5f-9f210ff62ac4","sequence":{"long":12644},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"471f3eb9-8ec3-4cea-9ce6-2aa3c79d130d","sequence":{"long":12646},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62bc47a7-1b52-4b06-8169-875ba3254eac","sequence":{"long":12647},"type":"EVENT_READ","threadId":{"int":100211},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f543c0be-2f16-4a35-9487-c9b773c44a47","sequence":{"long":12648},"type":"EVENT_READ","threadId":{"int":100211},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4c63cd2-fc6a-4e81-b88c-a93aef4c0298","sequence":{"long":12649},"type":"EVENT_READ","threadId":{"int":100211},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4240},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"398b0a98-c621-4285-a292-9fe9d64db851","sequence":{"long":12650},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4293},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65e840d0-2d53-446f-8d37-e62b31c38016","sequence":{"long":12651},"type":"EVENT_WRITE","threadId":{"int":100211},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73d59842-cf42-43bb-9dc4-6ba550d10cd6","sequence":{"long":12652},"type":"EVENT_READ","threadId":{"int":100211},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4a2d928-57c4-473d-a900-0374a770bcf5","sequence":{"long":12653},"type":"EVENT_READ","threadId":{"int":100211},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1721aa4f-62c0-4e5e-a7ee-ed5ff461ebc1","sequence":{"long":12654},"type":"EVENT_READ","threadId":{"int":100211},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":839},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"675ecb39-1193-4bb6-807e-00b73e35e2fb","sequence":{"long":12655},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":892},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55a94e01-f8e8-494c-8502-bb6ca9e3ea28","sequence":{"long":12656},"type":"EVENT_WRITE","threadId":{"int":100211},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a170601e-bdd3-444b-92bb-3428f8271d45","sequence":{"long":12657},"type":"EVENT_READ","threadId":{"int":100211},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a119ab07-5720-41bc-9d84-844cd1802bad","sequence":{"long":12658},"type":"EVENT_SENDTO","threadId":{"int":100211},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17086","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b25292c0-ff27-4f68-8d2b-8bc329a71bb0","sequence":{"long":12659},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17086","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e672959-7b98-4d23-bd90-0a57f33da929","sequence":{"long":12660},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298124326320,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"459d609b-471f-484c-89f4-d519b9f29ea7","sequence":{"long":12661},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298134767783,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43332915-9997-4ffe-8df3-29d131da1e30","sequence":{"long":12662},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298134767783,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1deae7ff-8aac-4266-81af-b72635864255","sequence":{"long":12663},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298134767783,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37adb6d6-2a85-4a47-b037-db135ab90351","sequence":{"long":12664},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298134767783,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bedb8dd3-9350-4d75-898f-8ec8af16e61b","sequence":{"long":12665},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298643846103,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":754438},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4c901a0-203d-4193-a9df-ae00f7039186","sequence":{"long":12666},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298794175888,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c515744f-4924-4f97-b003-f2984438061c","sequence":{"long":12667},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298794175888,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"17a487f0-467e-11e9-aed1-080027fc76ba","type":"SUBJECT_PROCESS","cid":1506,"parentSubject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584298794175888},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20251669-d652-4017-a197-73df32c1f66e","sequence":{"long":12668},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298794175888,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1506","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1506","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"789286b6-6159-ca52-9961-08e732cabe3c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5f88790-73a7-4b92-a4a5-c143f27e1968","sequence":{"long":12669},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"789286b6-6159-ca52-9961-08e732cabe3c"},"predicateObjectPath":{"string":"/sbin/ping"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584298803914949,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"ping -c 20 www.google.com","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a10349e5-0e53-42ff-a836-97e2e22fe38a","sequence":{"long":12670},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"971284d1-59de-4c4f-bae2-18199dd00e98","sequence":{"long":12671},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1df9fd5-d7d9-4a20-8d65-b0f5f4c2b558","sequence":{"long":12672},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85e9c0d8-2ab8-470f-822c-25a5745679f5","sequence":{"long":12673},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8dda135c-3fa3-4d1b-83cf-cf0758689e90","sequence":{"long":12674},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49ddcbfe-0255-4eb4-afd7-96549332ad16","sequence":{"long":12675},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae154b13-f73c-4c4d-b114-a8ea51f6bdb9","sequence":{"long":12676},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c3f766e-0b7e-4779-a167-17181e93ac1f","sequence":{"long":12677},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":{"string":"/lib/libm.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfeffd38-6219-40ce-8755-36ac1dde1e41","sequence":{"long":12678},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"654ada0b-4405-42ea-af3e-9f86f6102438","sequence":{"long":12679},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c39702dd-5d4e-4755-af10-6eb4d5adb12c","sequence":{"long":12680},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2420736},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc628c56-d350-4418-a572-3fba9598dd1e","sequence":{"long":12681},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2420736},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"304d2c8f-17c4-4346-b194-5b63e8fcfcbb","sequence":{"long":12682},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2490368},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"349d3d7f-22a7-4129-8e03-af4006de92af","sequence":{"long":12683},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2490368},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9a329a9-0e51-40c6-bb64-f6996e165847","sequence":{"long":12684},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2613248},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"285eb737-c324-49e3-8f30-539cf0b74d55","sequence":{"long":12685},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2613248},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"967c753e-e4bd-4d6a-904b-299b52d3ef54","sequence":{"long":12686},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"e0fb6a3a-f866-5c52-a6f8-c743325c1987","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e72f5928-f2a3-49e7-bc4a-3d723308fe9b","sequence":{"long":12687},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"e0fb6a3a-f866-5c52-a6f8-c743325c1987"},"predicateObjectPath":{"string":"/lib/libcasper.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2032d056-991b-4679-9d2e-495a42d2c458","sequence":{"long":12688},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"e0fb6a3a-f866-5c52-a6f8-c743325c1987"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea9c5858-e746-4745-be68-ec7dd4bc97a0","sequence":{"long":12689},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"e0fb6a3a-f866-5c52-a6f8-c743325c1987"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4814728c-4603-4085-b563-83fd0c967c35","sequence":{"long":12690},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"e0fb6a3a-f866-5c52-a6f8-c743325c1987"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2625536},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad894ff1-a653-4ab0-bf26-dd855066a116","sequence":{"long":12691},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"e0fb6a3a-f866-5c52-a6f8-c743325c1987"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2625536},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a62947e-af23-4f6f-a13e-ada20206a25a","sequence":{"long":12692},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"e0fb6a3a-f866-5c52-a6f8-c743325c1987"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2637824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a11c6d1-2b25-4181-a5c2-05e6b7312859","sequence":{"long":12693},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"e0fb6a3a-f866-5c52-a6f8-c743325c1987"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2637824},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7207e423-fbb6-49a6-aaf1-0f8ff2f382bc","sequence":{"long":12694},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"e0fb6a3a-f866-5c52-a6f8-c743325c1987"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1867e3ea-bce9-4afc-84b5-7ec4660b9068","sequence":{"long":12695},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"e0fb6a3a-f866-5c52-a6f8-c743325c1987"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dc85e60-1c5a-450b-ab9f-397a8f3c50e6","sequence":{"long":12696},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"e0fb6a3a-f866-5c52-a6f8-c743325c1987"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"d06aed7d-ad9b-b059-9bad-9a7fd9b06378","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b40d202f-e074-4708-8cc5-f3aa6e647664","sequence":{"long":12697},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"d06aed7d-ad9b-b059-9bad-9a7fd9b06378"},"predicateObjectPath":{"string":"/lib/casper/libcap_dns.so.2"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6044582c-ecb1-4d83-929c-fa50d86d6336","sequence":{"long":12698},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"d06aed7d-ad9b-b059-9bad-9a7fd9b06378"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50c084c9-de30-4473-b1f6-113921eb5ebf","sequence":{"long":12699},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"d06aed7d-ad9b-b059-9bad-9a7fd9b06378"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e026c72-e33c-4f85-b11e-a0dc6b4e69b3","sequence":{"long":12700},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"d06aed7d-ad9b-b059-9bad-9a7fd9b06378"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02475053-bac9-4d84-9de3-788036258009","sequence":{"long":12701},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"d06aed7d-ad9b-b059-9bad-9a7fd9b06378"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2658304},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"772ba5f4-e747-403a-b7b6-697fe84c5eb7","sequence":{"long":12702},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"d06aed7d-ad9b-b059-9bad-9a7fd9b06378"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2666496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"685c6fec-04e2-4084-a54f-f6b0cc5ce6e0","sequence":{"long":12703},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"d06aed7d-ad9b-b059-9bad-9a7fd9b06378"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2666496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c12427c4-4a27-4b7d-b21d-10993bcde879","sequence":{"long":12704},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"d06aed7d-ad9b-b059-9bad-9a7fd9b06378"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2678784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07bf993d-ae89-4c69-b473-09dd142aee72","sequence":{"long":12705},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"d06aed7d-ad9b-b059-9bad-9a7fd9b06378"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2678784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0b6df26-4d63-497a-b0e5-02efe29b48c3","sequence":{"long":12706},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"d06aed7d-ad9b-b059-9bad-9a7fd9b06378"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88aa5e92-90cd-4b7a-b973-9a5170ff8c10","sequence":{"long":12707},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":{"string":"/lib/libipsec.so.4"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02c1e168-cf29-4833-a507-98b1c61aafb7","sequence":{"long":12708},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22f6273c-7414-48c4-a4f2-8dae6c8cd148","sequence":{"long":12709},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f06fbc90-1d11-47b9-ad6f-2d2dd0c6cc41","sequence":{"long":12710},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"defd234f-ed71-4fe4-aa3e-f6be295b8d21","sequence":{"long":12711},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2691072},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9414b95-4343-4c47-bce9-5cff1a23137b","sequence":{"long":12712},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2707456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96f8eea1-42d9-437c-8835-88d266b21c3d","sequence":{"long":12713},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2707456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc87c3da-fa64-4cb3-a393-9b9ee558baf4","sequence":{"long":12714},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2723840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6d47aee-739f-451f-a49f-8a95306e2cbe","sequence":{"long":12715},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2723840},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17ac4478-bc37-4e75-93bf-f1e3f4a51e85","sequence":{"long":12716},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"0a766c59-f9d6-4e5f-96f9-b3f07f4e481a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31c7b9ce-61ee-442c-b0e2-be791bdd12ef","sequence":{"long":12717},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c458d10-8b09-4725-97eb-5e7d56f26bcf","sequence":{"long":12718},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26d24739-476b-4372-b409-e96e9987930c","sequence":{"long":12719},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f98e4c1d-a87c-47a8-acc2-6353275cf8ee","sequence":{"long":12720},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2736128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"509b49ee-4ed8-4e99-ad3b-75ed061a2e1d","sequence":{"long":12721},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2736128},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbb0724b-6cf5-4148-bffe-a05619c68ba9","sequence":{"long":12722},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a371932f-297a-4c13-92ba-4ec3745866b4","sequence":{"long":12723},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5574dde6-d4b3-49c1-ac9e-7ee926d0f60e","sequence":{"long":12724},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4583424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1c9e800-b42b-4197-a3e2-3769de7b7819","sequence":{"long":12725},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4583424},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0caf769-1f45-4944-9cc2-1797e91928e9","sequence":{"long":12726},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"9b790869-26ca-5d5a-8a26-7f02da5d7fce","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0e754de-430a-40d2-8d0e-94a6a259e859","sequence":{"long":12727},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"9b790869-26ca-5d5a-8a26-7f02da5d7fce"},"predicateObjectPath":{"string":"/lib/libnv.so.0"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8dd32d15-2eef-4112-9512-c188ee5d0ba2","sequence":{"long":12728},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"9b790869-26ca-5d5a-8a26-7f02da5d7fce"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a65aa61d-a22b-4667-9005-76fe294a171e","sequence":{"long":12729},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"9b790869-26ca-5d5a-8a26-7f02da5d7fce"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7acb7a84-f44f-47a0-a192-94df70c1a9c7","sequence":{"long":12730},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"9b790869-26ca-5d5a-8a26-7f02da5d7fce"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6901760},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e92d9d17-aeaf-4f44-a998-9cd3262a383e","sequence":{"long":12731},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"9b790869-26ca-5d5a-8a26-7f02da5d7fce"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6901760},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c32a0632-5e4a-41c7-adcf-ee4f94135af6","sequence":{"long":12732},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"9b790869-26ca-5d5a-8a26-7f02da5d7fce"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6942720},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"071248ef-9609-402f-8897-ab65816d2ded","sequence":{"long":12733},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"9b790869-26ca-5d5a-8a26-7f02da5d7fce"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6942720},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1ab85e9-5233-41c4-8770-0e69e608c83a","sequence":{"long":12734},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"9b790869-26ca-5d5a-8a26-7f02da5d7fce"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6995968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80592909-7a5a-44e4-8974-9e01dfcbb275","sequence":{"long":12735},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"9b790869-26ca-5d5a-8a26-7f02da5d7fce"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6995968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8269439b-502e-43d7-9396-95b541bd1833","sequence":{"long":12736},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"9b790869-26ca-5d5a-8a26-7f02da5d7fce"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"217144a7-e1e2-4d3e-8307-c6778021ddbf","sequence":{"long":12737},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"752eaa84-5182-4dbf-ad99-5c2ae7ce16aa","sequence":{"long":12738},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eda04951-528f-42af-a9b2-f51648a73353","sequence":{"long":12739},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"844b018e-2931-473a-a75a-8a0d54f84bbc","sequence":{"long":12740},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47afae65-4012-48f3-9473-45c1fccf0c0f","sequence":{"long":12741},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58c24d16-ab12-4e0a-b74f-fba438a02108","sequence":{"long":12742},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71cc8c7e-743e-4b66-9a20-d0e0c58723a3","sequence":{"long":12743},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb6b5caa-b39e-453e-92e5-463d9f39aa52","sequence":{"long":12744},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_setuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"03eb"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"17a64956-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"17a6494a-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"c0141a49-c725-5b6f-ae9f-364380ee9e80","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"17a6494a-467e-11e9-aed1-080027fc76ba"},"uuid2":{"UUID":"17a64956-467e-11e9-aed1-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4375c53-2450-478b-ab17-83c6d12d2d5e","sequence":{"long":12745},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c0141a49-c725-5b6f-ae9f-364380ee9e80"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a64956-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_socketpair"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","ret_fd2":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"17a64e20-467e-11e9-aed1-080027fc76ba","type":"SUBJECT_PROCESS","cid":1507,"parentSubject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584298803914949},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c11699c4-878d-4834-af7e-011c248f927b","sequence":{"long":12746},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_pdfork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1507","ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1507","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab58401e-8d2d-404b-86da-f23f0767dd90","sequence":{"long":12747},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"6","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dd40495-06fa-4fb6-a810-935d0c238637","sequence":{"long":12748},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c0a23eb-4d81-4852-8dec-cae0e38b7d32","sequence":{"long":12749},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a6494a-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":85},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"17a65cfc-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"17a65cf3-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"b03ee658-7ce8-5f4a-bbc5-61c7e2f66800","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"17a65cf3-467e-11e9-aed1-080027fc76ba"},"uuid2":{"UUID":"17a65cfc-467e-11e9-aed1-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b494c53-322d-4e06-8608-0648e5a12f92","sequence":{"long":12750},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100139},"subject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"b03ee658-7ce8-5f4a-bbc5-61c7e2f66800"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a65cfc-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_socketpair"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","ret_fd2":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1506","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"17a66018-467e-11e9-aed1-080027fc76ba","type":"SUBJECT_PROCESS","cid":1508,"parentSubject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584298803914949},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c3de962-6d84-4b39-81d1-d6831b9a8055","sequence":{"long":12751},"type":"EVENT_FORK","threadId":{"int":100139},"subject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a66018-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1508","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1508","ppid":"1506","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8379ace-48f7-4d75-8b21-94af5f4dcbec","sequence":{"long":12752},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"6","ppid":"1506","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45388038-0bf4-4b8f-892c-8a1b6d78bb74","sequence":{"long":12753},"type":"EVENT_RECVFROM","threadId":{"int":100139},"subject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a64956-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":19},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1506","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6587625-0a7a-48df-b2ee-351fe71e77db","sequence":{"long":12754},"type":"EVENT_RECVFROM","threadId":{"int":100139},"subject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a64956-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":66},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1506","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb7ecb52-653e-4f55-bc0f-87fdf5b044d1","sequence":{"long":12755},"type":"EVENT_SENDTO","threadId":{"int":100139},"subject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a65cf3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":54},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1506","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb1ac5a9-49e8-474b-bc69-78043ec56fe7","sequence":{"long":12756},"type":"EVENT_RECVFROM","threadId":{"int":100150},"subject":{"UUID":"17a66018-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a65cfc-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":19},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1507","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a5134c2-a64d-40f0-a7c0-aa967cd1cbbc","sequence":{"long":12757},"type":"EVENT_RECVFROM","threadId":{"int":100150},"subject":{"UUID":"17a66018-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a65cfc-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":35},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1507","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"17a69b3d-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"17a69b31-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"120c24a9-39ea-5013-94b3-d003b1562c9c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"uuid2":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2395172b-92da-4697-9586-e0384de91190","sequence":{"long":12758},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100150},"subject":{"UUID":"17a66018-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"120c24a9-39ea-5013-94b3-d003b1562c9c"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_socketpair"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","ret_fd2":"8","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1507","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"17a6a023-467e-11e9-aed1-080027fc76ba","type":"SUBJECT_PROCESS","cid":1509,"parentSubject":{"UUID":"17a66018-467e-11e9-aed1-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584298803914949},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a7952a9-f7b2-4d8d-900b-9e0f8af43479","sequence":{"long":12759},"type":"EVENT_FORK","threadId":{"int":100150},"subject":{"UUID":"17a66018-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_pdfork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1509","ret_fd1":"9","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1509","ppid":"1507","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58a6031f-27c4-44c0-80ac-7033fa54c778","sequence":{"long":12760},"type":"EVENT_FCNTL","threadId":{"int":100150},"subject":{"UUID":"17a66018-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1507","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e44aeaa4-3651-4722-b3ce-473da88f80d1","sequence":{"long":12761},"type":"EVENT_FCNTL","threadId":{"int":100150},"subject":{"UUID":"17a66018-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1507","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7e08d9b-8624-4516-be83-93d74e221ba9","sequence":{"long":12762},"type":"EVENT_SENDTO","threadId":{"int":100150},"subject":{"UUID":"17a66018-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a65cfc-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":87},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1507","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e2656bb-8016-4699-b4d3-6c6b9b27319b","sequence":{"long":12763},"type":"EVENT_SENDMSG","threadId":{"int":100150},"subject":{"UUID":"17a66018-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a65cfc-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298803914949,"names":{"array":["aue_sendmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1507","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d588288-8b46-4519-b329-674a4138b9a8","sequence":{"long":12764},"type":"EVENT_RECVFROM","threadId":{"int":100139},"subject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a65cf3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":19},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1506","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e88f5fd3-21d8-4a82-830f-04551f21254f","sequence":{"long":12765},"type":"EVENT_RECVFROM","threadId":{"int":100139},"subject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a65cf3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":68},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1506","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae2d4529-9763-46e6-b805-70e533d8419e","sequence":{"long":12766},"type":"EVENT_RECVMSG","threadId":{"int":100139},"subject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a65cf3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1506","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54ad4b6f-e407-4f89-ae86-7d0ab9dc9d2e","sequence":{"long":12767},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1506","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f60dc3ac-2c6d-4474-b8e2-d8dcba25d32d","sequence":{"long":12768},"type":"EVENT_SENDTO","threadId":{"int":100139},"subject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":91},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1506","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70383e34-03eb-4dd3-aa86-cc2f01902b76","sequence":{"long":12769},"type":"EVENT_SENDMSG","threadId":{"int":100139},"subject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_sendmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1506","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd1a8cd4-eb03-4ea3-963e-cbc701d50ac7","sequence":{"long":12770},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1506","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2ad22a9-bbe8-444f-a24f-2881525f0c09","sequence":{"long":12771},"type":"EVENT_SENDTO","threadId":{"int":100139},"subject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a64956-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":123},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1506","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0df6d806-1b3e-403e-8f4e-d04706e18f5a","sequence":{"long":12772},"type":"EVENT_RECVFROM","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a6494a-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":19},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"204b8aa4-f401-4b20-a8f2-c5e0231ad64b","sequence":{"long":12773},"type":"EVENT_RECVFROM","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a6494a-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":104},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"670cc988-6523-433c-84cd-f2e57f92b7da","sequence":{"long":12774},"type":"EVENT_SENDMSG","threadId":{"int":100139},"subject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a64956-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_sendmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1506","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1684a2e-6804-4d53-89a9-a725acb04414","sequence":{"long":12775},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a6494a-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60056a83-714f-4a7d-b9e2-e4f0a74f30d7","sequence":{"long":12776},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"6","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"486e764c-7185-422d-a455-462a9dca7c31","sequence":{"long":12777},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a64e20-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1507","arg_euid":"1003","arg_ruid":"1003","arg_egid":"1003","arg_rgid":"1003","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b50c80cb-9396-47a7-a1dc-69785ad1669d","sequence":{"long":12778},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a6494a-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07f106e4-f7de-43d2-b44e-5a3e7b8b4e05","sequence":{"long":12779},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":52},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e45a015-3e93-47f1-9ab1-a18896e4a7fc","sequence":{"long":12780},"type":"EVENT_RECVFROM","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":19},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1508","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9708d796-c777-42c4-b0de-5c64e0b92db2","sequence":{"long":12781},"type":"EVENT_RECVFROM","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":72},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1508","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af4fa449-8a18-4fd8-b258-3ff51ceec6ac","sequence":{"long":12782},"type":"EVENT_RECVMSG","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1508","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1f0b8c9-5f2c-4336-b472-f0486d1761c1","sequence":{"long":12783},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"7","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"7","ppid":"1508","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b23393c-53cf-4c1e-bf93-2001395ec028","sequence":{"long":12784},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1508","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59d4ca1b-8c87-4384-92e8-c0dcb4f0f2d0","sequence":{"long":12785},"type":"EVENT_FCNTL","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"6","ppid":"1508","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c98b78c-95f8-4e52-87a7-0b6454b5565b","sequence":{"long":12786},"type":"EVENT_RECVFROM","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":19},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1508","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1b6936d-b453-4573-a099-66471dc586d6","sequence":{"long":12787},"type":"EVENT_RECVFROM","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1508","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6b21c2a-3164-47cb-9985-705aefec047c","sequence":{"long":12788},"type":"EVENT_SENDTO","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":78},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1508","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e9303e9-ec8b-48f8-8dc9-67f62208ee7a","sequence":{"long":12789},"type":"EVENT_RECVFROM","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":19},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1118c7e4-61c8-46b7-8fca-899183c853b3","sequence":{"long":12790},"type":"EVENT_RECVFROM","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":59},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"872d67bb-a8e0-4f27-bd2f-9f53fe5449ad","sequence":{"long":12791},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":187},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2786200d-9319-464e-af09-b3dc684584b7","sequence":{"long":12792},"type":"EVENT_RECVFROM","threadId":{"int":100150},"subject":{"UUID":"17a66018-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a65cfc-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7dad975-193d-43b7-825d-b3e9b5dc2d3b","sequence":{"long":12793},"type":"EVENT_EXIT","threadId":{"int":100150},"subject":{"UUID":"17a66018-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a66018-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3751b3b9-b57c-404a-a692-b43bcc3aeb34","sequence":{"long":12794},"type":"EVENT_RECVFROM","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":19},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4b52a71-9f78-4734-a562-cc526adc4da3","sequence":{"long":12795},"type":"EVENT_RECVFROM","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":168},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8be02ce6-119e-4cc5-9742-42fc4679ea6b","sequence":{"long":12796},"type":"EVENT_SENDTO","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":52},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6027c93-930e-4882-9a19-0bb23718f8f4","sequence":{"long":12797},"type":"EVENT_RECVFROM","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":19},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86805c11-1399-4e5a-b122-71cab79bc9e6","sequence":{"long":12798},"type":"EVENT_RECVFROM","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3829c6a-78b9-4fae-8cd1-aee90d68ae87","sequence":{"long":12799},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":52},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73f15811-e91d-4c32-99b0-a988e4d150ad","sequence":{"long":12800},"type":"EVENT_RECVFROM","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":19},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08837f8a-283d-4530-bc1e-e13371d1e056","sequence":{"long":12801},"type":"EVENT_RECVFROM","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcca9000-f3e0-4c49-978e-af07894d570e","sequence":{"long":12802},"type":"EVENT_SENDTO","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":187},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"659b15e1-a050-4264-9f4a-9cbff6fcb22e","sequence":{"long":12803},"type":"EVENT_RECVFROM","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":19},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88105bb5-b7f2-438f-89de-d50b75f8b611","sequence":{"long":12804},"type":"EVENT_RECVFROM","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":168},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2d4584b-b969-482d-b062-dbbd920534e0","sequence":{"long":12805},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":222},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68fa531f-3b68-45e9-a46e-9a88631c2fc2","sequence":{"long":12806},"type":"EVENT_RECVFROM","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":19},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee43f6cd-97e2-4230-8167-ed15bd55b9b6","sequence":{"long":12807},"type":"EVENT_RECVFROM","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":203},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59eab91f-a57d-4cc0-b56e-eed9dba3c613","sequence":{"long":12808},"type":"EVENT_SENDTO","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":52},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f133608-dfbb-4535-bd20-80293eb44512","sequence":{"long":12809},"type":"EVENT_RECVFROM","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":19},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20e89dd5-4e77-4dbc-9a3a-03d4780cfd14","sequence":{"long":12810},"type":"EVENT_RECVFROM","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"623ecb43-dda5-488c-b2a7-b8c0e37c737e","sequence":{"long":12811},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b31-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":129},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21cbeb1f-8970-485f-9805-198461efc27b","sequence":{"long":12812},"type":"EVENT_RECVFROM","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":19},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f79fde37-a2f1-44d5-a1e8-5537886a9bdc","sequence":{"long":12813},"type":"EVENT_RECVFROM","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":110},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43f662a9-8326-420a-b5f5-09b45be334b3","sequence":{"long":12814},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"03614f72-3bf3-3753-b33b-4946a3373b97"},"predicateObjectPath":{"string":"/etc/resolv.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"567f864c-5a5e-472e-b593-0619efe3de8d","sequence":{"long":12815},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"03614f72-3bf3-3753-b33b-4946a3373b97"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":102},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e86a1337-3575-4032-a377-72d2d53cbd36","sequence":{"long":12816},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"03614f72-3bf3-3753-b33b-4946a3373b97"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c959ced-15b5-41f5-a788-21460efd07e8","sequence":{"long":12817},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"03614f72-3bf3-3753-b33b-4946a3373b97"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd45bab3-d16a-4cdd-b871-063f1ecd505d","sequence":{"long":12818},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a53968a-8cbe-4972-97ee-a226c31f388b","sequence":{"long":12819},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"052d9767-ab6c-4b21-bd94-0f233e64d6c5","sequence":{"long":12820},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d7c98cb-1b82-4485-8200-67420668ad16","sequence":{"long":12821},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"359a0c0b-b86e-4d10-a8c8-e21e8ba38e67","sequence":{"long":12822},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":{"string":"/etc/hosts"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fb4c54d-7818-44ec-8c5f-2a9152a940b6","sequence":{"long":12823},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1031},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b8d9bf3-fd28-4e20-938c-98124c02907b","sequence":{"long":12824},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75cad881-5447-4f67-8b6e-a7a1309aaabe","sequence":{"long":12825},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"17a77e7e-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":null,"localPort":null,"remoteAddress":{"string":"149.32.200.97"},"remotePort":{"int":53},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"541d02eb-3a69-43f8-b3f5-8ae3fb46a1c0","sequence":{"long":12826},"type":"EVENT_CONNECT","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a77e7e-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","address":"149.32.200.97","port":"53","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"e00e5a3e-4107-5753-8e37-efd372abb0f6","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"10.0.2.15"},"localPort":{"int":21853},"remoteAddress":{"string":"149.32.200.97"},"remotePort":{"int":53},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc54ac04-d26d-4352-ab8c-fa284fc5e8df","sequence":{"long":12827},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100120},"subject":null,"predicateObject":{"UUID":"17a77e7e-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"e00e5a3e-4107-5753-8e37-efd372abb0f6"},"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0705113e-9a0d-4bb7-a27b-4f2ac01458b0","sequence":{"long":12828},"type":"EVENT_SENDTO","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a77e7e-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584298813894517,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":32},"programPoint":null,"properties":{"map":{"ret_msgid":"17087","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"235e8c4b-4ef2-445d-aa34-c6265e8be156","sequence":{"long":12829},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584299694159893,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":770988},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"17a643e1-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b23fddd8-9e25-4528-af8d-fa2cfac2f083","sequence":{"long":12830},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584299844288362,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"17a645c0-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92dbe571-30f4-489a-8149-b78d070cf8a0","sequence":{"long":12832},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584299894293572,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74f4f6fa-2f9a-4d35-b689-971963444cf6","sequence":{"long":12831},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584299894293572,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0de6e881-413c-4059-831b-159543ad5ecc","sequence":{"long":12833},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584299894293572,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":60},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"326d2a4c-62ff-484f-93e2-6f2c4b58e22f","sequence":{"long":12834},"type":"EVENT_OPEN","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":{"string":"/etc/cron.d"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00e808"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdeee03e-1932-4f4a-ac42-e1eb415b993c","sequence":{"long":12835},"type":"EVENT_CLOSE","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"185e0fe8-467e-11e9-aed1-080027fc76ba","type":"SUBJECT_PROCESS","cid":1510,"parentSubject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":1552584300014421483},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e63743c-3798-45f9-a281-b621243570ee","sequence":{"long":12836},"type":"EVENT_FORK","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"185e0fe8-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1510","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1510","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"5ca33fc6-a233-c258-b3a2-9494d8c23030","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b97d73a9-53e5-458c-a089-ebd64c0a71e0","sequence":{"long":12837},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"185e0fe8-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"5ca33fc6-a233-c258-b3a2-9494d8c23030"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1141","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"322b6b83-e47e-3457-bee4-d897e73425b5","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3170d84e-e7b4-4f51-9803-3f09fa4885ed","sequence":{"long":12838},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"185e0fe8-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"322b6b83-e47e-3457-bee4-d897e73425b5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1141","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"185e28e0-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"185e28df-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"594533e6-48e5-5cf7-966d-b8de1445f2ac","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"185e28df-467e-11e9-aed1-080027fc76ba"},"uuid2":{"UUID":"185e28e0-467e-11e9-aed1-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53a760b3-17c8-4371-9804-798705529f72","sequence":{"long":12839},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100139},"subject":{"UUID":"185e0fe8-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"594533e6-48e5-5cf7-966d-b8de1445f2ac"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1141","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"185e2d48-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"185e2d47-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"d8e61905-22e0-5d2b-ba47-20358b271277","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"185e2d47-467e-11e9-aed1-080027fc76ba"},"uuid2":{"UUID":"185e2d48-467e-11e9-aed1-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92cf9ef4-e87d-49f9-b792-baad6018a8f3","sequence":{"long":12840},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100139},"subject":{"UUID":"185e0fe8-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"d8e61905-22e0-5d2b-ba47-20358b271277"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","ret_fd2":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1141","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"185e31a3-467e-11e9-aed1-080027fc76ba","type":"SUBJECT_PROCESS","cid":1511,"parentSubject":{"UUID":"185e0fe8-467e-11e9-aed1-080027fc76ba"},"localPrincipal":{"UUID":"992c0c42-aaa2-5424-b584-06e4fd60da90"},"startTimestampNanos":{"long":1552584300014421483},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f10613b-c4cf-41f5-a547-4f2d94164954","sequence":{"long":12841},"type":"EVENT_FORK","threadId":{"int":100139},"subject":{"UUID":"185e0fe8-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_vfork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1511","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1511","ppid":"1141","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"185e3c78-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29903746-a1f9-48b1-9808-f2dc2676d319","sequence":{"long":12842},"type":"EVENT_CONNECT","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e3c78-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1510","address":"/var/run/logpriv","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2df8b30-3ac2-457f-8f9d-1cdfb1f3fbb2","sequence":{"long":12843},"type":"EVENT_SENDTO","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e3c78-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":105},"programPoint":null,"properties":{"map":{"ret_msgid":"17092","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58f1d08d-711a-4c81-9f77-6c5417bd1bcc","sequence":{"long":12844},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e3c78-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27ef9c8d-20f6-4799-8b25-4d3514c0f0d2","sequence":{"long":12845},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"859a2f7b-99d4-48f7-a970-40174e76b9be","sequence":{"long":12846},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"013ecad3-b703-4935-aef8-321b7ddfb698","sequence":{"long":12847},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b890e85d-1d82-437a-8170-f2fba1f4c974","sequence":{"long":12848},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":{"string":"/etc/spwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33cfcf79-7891-4b8b-8da2-4a6b08e2720b","sequence":{"long":12849},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c73dd822-9f75-4de7-8e05-27bebcc992d9","sequence":{"long":12850},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2aa00d4-cd66-4456-9b20-40592af49b2c","sequence":{"long":12851},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05c307cf-b7ef-488a-86b3-b4c625fc79af","sequence":{"long":12852},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f4ec7b4d-364e-3f5e-8e36-25e21e3f3e67"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d81783ed-2e00-4bdc-9e37-25c03db64771","sequence":{"long":12853},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bb17fae-dd5a-490e-8875-422dce3542cd","sequence":{"long":12854},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ea55868-b5f2-4fe6-a6b2-975e4eabaf65","sequence":{"long":12855},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3ade75a-b019-42f0-9c4c-761793b50b8d","sequence":{"long":12856},"type":"EVENT_LSEEK","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80d40349-4ceb-4da0-9cc1-66a62c158f48","sequence":{"long":12857},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b751cff5-7b7b-4fa0-97e8-f2fe417519f6","sequence":{"long":12858},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3307ead2-2b0b-4713-8c49-057a13bb43b9","sequence":{"long":12859},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db8f8dd2-6578-420f-98bd-5083a301213e","sequence":{"long":12860},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_setgid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"gid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_gid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b17af6de-2853-45a0-8ef9-0540ff58d066","sequence":{"long":12861},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":{"string":"/etc/group"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63090b70-89d1-4efa-893a-73a19837ae61","sequence":{"long":12862},"type":"EVENT_LSEEK","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d164ada3-3587-46a9-808d-4d17ae64f61e","sequence":{"long":12863},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f211fdf8-c898-4f19-a977-edfbb8685137","sequence":{"long":12864},"type":"EVENT_LSEEK","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":504},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a5f80fb-db6a-4836-9ef0-8c0f0c90583a","sequence":{"long":12865},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6662ce37-d97b-4fc8-b792-7c9ce3ce2774","sequence":{"long":12866},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"5a32b0cb-0331-045d-b103-151f6d0491a8"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc88c991-a56e-43a4-9559-25fed0dee006","sequence":{"long":12867},"type":"EVENT_LOGIN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_setlogin"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","login":"root","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4a99f00-7695-4e57-bdc1-d7ce17d060bc","sequence":{"long":12868},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f6f2c52-0d81-461e-a92c-39966690d967","sequence":{"long":12869},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_setuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"uid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_uid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87aa4747-91b5-4d6d-9b66-81cb364b13b9","sequence":{"long":12870},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a0227a3-bae5-4b73-a2d7-02c45e9952c6","sequence":{"long":12871},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b56a6a74-8c82-455b-a916-56e5708bf2c0","sequence":{"long":12872},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":{"string":"/etc/login.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed4e2524-f884-40f1-b0ee-307985c247dd","sequence":{"long":12873},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b728f6b-d4d8-4782-ad83-e06723051b3d","sequence":{"long":12874},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dce47b9b-73eb-4362-96cd-97a4a15248cb","sequence":{"long":12875},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1525c914-c9ca-4099-8650-340271d1c453","sequence":{"long":12876},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41fe70b3-04e9-4e86-b2c4-587f7c3f5d92","sequence":{"long":12877},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b6dfdd1-f9f7-43c9-b69a-7d56a5d8e78e","sequence":{"long":12878},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37a395e0-175f-4143-a961-c0ff1aa64455","sequence":{"long":12879},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":585},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83e8df47-42d2-4dae-86a2-1fbd557ce350","sequence":{"long":12880},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0f882af-48a2-46e1-9cc3-3e286830e9d5","sequence":{"long":12881},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"4d541c5a-9f32-1253-b29f-e21bd3128288"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"881a79dd-1d58-4483-a2ce-873c2b7e73cc","sequence":{"long":12882},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e383f948-88bb-4a37-95c2-3c9aa2673bf6","sequence":{"long":12883},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"0","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bfe262e-c925-4f51-a09f-67bd88334308","sequence":{"long":12884},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_umask"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"18","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"4ed663f7-1a63-7453-a31a-44560374ad6c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_DIR","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6659f115-d35d-4332-b825-a99418bd2499","sequence":{"long":12885},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"4ed663f7-1a63-7453-a31a-44560374ad6c"},"predicateObject2Path":{"string":"/root"},"timestampNanos":1552584300014421483,"names":{"array":["aue_chdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b1bd17a-f4c7-4a17-ae75-cfb5f1887f83","sequence":{"long":12886},"type":"EVENT_EXECUTE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"f3f7eadf-5a79-ba55-b95a-881315bae424"},"predicateObjectPath":{"string":"/bin/sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584300014421483,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/bin/sh -c /usr/libexec/atrun","ppid":"1510","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47d52f01-802b-43b3-b94e-a1ae2c50fa62","sequence":{"long":12887},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8442748e-a2d9-4cfe-9201-a353010e2d3a","sequence":{"long":12888},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82e87709-d97c-4c02-be3e-192c0232f87e","sequence":{"long":12889},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"653d2a0f-45e3-47f6-b0a1-8592d26c90b2","sequence":{"long":12890},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9a0e0c8-ae94-43f0-a47a-7d61b0dbe813","sequence":{"long":12891},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39fc3aa5-70ad-454f-b7a8-2dafdd9e2db9","sequence":{"long":12892},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bf9acec-4c15-44a1-89fe-f3f66a854e1f","sequence":{"long":12893},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea942214-9830-4bf6-beee-4f27e9ea4f44","sequence":{"long":12894},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":{"string":"/lib/libedit.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73f6f134-1014-426a-87a9-e08a7e3d923a","sequence":{"long":12895},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"981e46b9-21a1-43ed-9008-9e28b949a9ea","sequence":{"long":12896},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cca3ddb-49e9-42a5-a7a2-29ef7b021f47","sequence":{"long":12897},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfa65ab3-6a76-400a-bce4-0b69958d64bb","sequence":{"long":12898},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63c20ca8-6277-4058-b78a-efee9c906a56","sequence":{"long":12899},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87fa4196-baa9-479e-b223-857d8cbf0714","sequence":{"long":12900},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc19e472-251f-4b47-a990-27ee5a7eef3c","sequence":{"long":12901},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29cfc073-996d-4b09-8502-685a971e9e43","sequence":{"long":12902},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fc4cacb-9ddf-4315-bacb-ee2d025fcab7","sequence":{"long":12903},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d659a9d-a3e3-45cb-ae62-c06137a17e4f","sequence":{"long":12904},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"850a275a-231e-41a0-b9b3-775d35ac50ca","sequence":{"long":12905},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"373e3475-8643-489c-bd58-4832da585cbf","sequence":{"long":12906},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300014421483,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49f689a1-c01a-4a00-a331-e10a72e55449","sequence":{"long":12907},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2818048},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c69124b0-d57b-4153-9495-d02499678e8c","sequence":{"long":12908},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2818048},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"451ec255-d74b-42bb-bb4b-bf167ae1fd14","sequence":{"long":12909},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3334144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3b2b53c-e4b7-4652-9a43-b336ff2068f0","sequence":{"long":12910},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3334144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cdaab31-d2a6-440b-adbe-85b18635db83","sequence":{"long":12911},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4665344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"014d756d-0702-47b1-8247-af66fc81ffb8","sequence":{"long":12912},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4665344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4fd7e73-f383-42f0-b1ac-699d8373188a","sequence":{"long":12913},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3432766c-c11b-481b-b184-cc69efa9bae0","sequence":{"long":12914},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":{"string":"/lib/libncursesw.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6bf410d-1a17-4eac-a480-153ca13bea61","sequence":{"long":12915},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7586d08-e0f6-4fdb-a1ef-4db21a40272b","sequence":{"long":12916},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"278e09da-4c49-440b-8583-bac2c0429038","sequence":{"long":12917},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6983680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4843a559-4e50-4931-8c89-ad99e5b31b77","sequence":{"long":12918},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6983680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec95395d-b026-4436-b2a4-1510fe448f6a","sequence":{"long":12919},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ee2bb11-8870-4671-9917-e65292e0af08","sequence":{"long":12920},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de0edf58-8e74-470d-9dd6-9239fe6af851","sequence":{"long":12921},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7356416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70fdb4cb-36d0-46aa-a187-4e7e0be5c48f","sequence":{"long":12922},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7356416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a44cf27-9bf6-435e-ac07-5f009ba0462c","sequence":{"long":12923},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f848e43-aa42-48ea-acb9-53f8e9419497","sequence":{"long":12924},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51a4b275-3a3a-49f1-bf00-902ccf0d3f6c","sequence":{"long":12925},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99be64eb-8e7a-4d57-bee5-ee3dcc0fdd65","sequence":{"long":12926},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ff09045-0e13-4ebe-b25e-7e6d2cd47a80","sequence":{"long":12927},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"5f1bc80d-8924-0358-a489-1d3dd8031ebe","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49c21a2a-b120-4cf3-878c-10d56303a7db","sequence":{"long":12928},"type":"EVENT_EXECUTE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"5f1bc80d-8924-0358-a489-1d3dd8031ebe"},"predicateObjectPath":{"string":"/usr/libexec/atrun"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584300024217175,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/libexec/atrun","ppid":"1510","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bc9b6b3-6f66-4d27-ae9d-4e8591cc1a6a","sequence":{"long":12929},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1996acf2-bb0f-41af-a3e1-00d39d845222","sequence":{"long":12930},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23339c38-4b1a-4165-9efe-ca82593a03bf","sequence":{"long":12931},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1ceb6e5-34ee-44fb-a649-2d1ba2ad22fa","sequence":{"long":12932},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df93d56e-6c9e-4919-a78b-72d02e5288be","sequence":{"long":12933},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"932f4118-0a69-4413-b9b4-9baf4d0f9134","sequence":{"long":12934},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e126840-1df4-4a99-ba7f-ad24058a35ac","sequence":{"long":12935},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f5d7e11-2fb3-480d-a115-9f99ecc5cea0","sequence":{"long":12936},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":{"string":"/usr/lib/libpam.so.6"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27d4a36b-2310-4cdb-98d5-118dde07c242","sequence":{"long":12937},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3935106-4dfa-4fda-a46e-e51ab00f76b1","sequence":{"long":12938},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5d04ba6-8d56-4d51-8171-ae8b1acfa3b0","sequence":{"long":12939},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6764aad-4345-494e-9c7a-a12af7b3232b","sequence":{"long":12940},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3495f9c5-4259-43fe-bfd6-fe0c79e03e20","sequence":{"long":12941},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70b628d1-a7ce-456d-be0f-f9ba56aa5064","sequence":{"long":12942},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2424832},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"178e8b04-8749-4a19-8c42-0dcd55fc0401","sequence":{"long":12943},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2453504},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82c3e2f1-6891-40db-9371-750f3d193359","sequence":{"long":12944},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2453504},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25c08c8d-2fd9-45de-b88c-4ef8610249c1","sequence":{"long":12945},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"20aa562e-78b1-685e-b178-e5904e689ef5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"becde588-2480-4429-a54e-4509623219de","sequence":{"long":12946},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":{"string":"/lib/libutil.so.9"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05195027-f185-4f6f-9921-b2441774c905","sequence":{"long":12947},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e618a53-54a9-412e-9a91-05a799853c77","sequence":{"long":12948},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b65ecfe8-f869-4e46-a62f-b0f2e12cf401","sequence":{"long":12949},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2465792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04303018-e55d-425b-ad83-5a7c3e593fa9","sequence":{"long":12950},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2465792},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e387832-71b8-4a11-a310-dc19ef129a32","sequence":{"long":12951},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2522da00-6841-4463-ad2e-51c6e5f7a941","sequence":{"long":12952},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2498560},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2191d4f0-01e5-45fe-8487-7602eef2dba7","sequence":{"long":12953},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6053e854-84d6-4393-a1f9-5ee19d73c318","sequence":{"long":12954},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2543616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65d47f1c-e855-4411-9cdd-6d0b695bb601","sequence":{"long":12955},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"358b737b-af6c-9c5a-acaf-aa7d5a9cb56a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68d31f73-24c9-474d-875b-123f8b1d2444","sequence":{"long":12956},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6d77cdb-5da7-445e-b571-6414a76865ae","sequence":{"long":12957},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ac54ae2-5c57-4310-9584-d13e35edcfbf","sequence":{"long":12958},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9461b945-69db-4ca0-8789-8851c0062b87","sequence":{"long":12959},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2560000},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a82e6744-bb6e-4956-8663-0d48b2db9852","sequence":{"long":12960},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2560000},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53652b48-e843-45eb-8f55-6306d111a905","sequence":{"long":12961},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3076096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82c9b644-23c1-465f-bb87-6c339536d475","sequence":{"long":12962},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3076096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6745f3d9-80de-4c77-ae64-7b95bb6c034f","sequence":{"long":12963},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4407296},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60551739-be00-4cf4-8df6-8c49884bcd01","sequence":{"long":12964},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4407296},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef9077e4-fdee-443c-961f-25f615f7ca69","sequence":{"long":12965},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff0c967b-291b-4cf2-ae6a-3bc5b1f6985c","sequence":{"long":12966},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b6cb3e4-f74f-4b0b-b88c-e51a3b25c349","sequence":{"long":12967},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4a3edc6-48a1-4e4a-b58a-6dc29c40eb19","sequence":{"long":12968},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300024217175,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d4285c3-f342-4b6f-8a6e-ecd6b6457dae","sequence":{"long":12969},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300033885404,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"caacb498-1f64-4091-ae7f-cd57844183fc","sequence":{"long":12970},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300033885404,"names":{"array":["aue_setegid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"egid"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_egid":"1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccb47ffa-f46f-4022-a84a-a27c0c80d6bd","sequence":{"long":12971},"type":"EVENT_CHANGE_PRINCIPAL","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300033885404,"names":{"array":["aue_seteuid"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"euid"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_euid":"1","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"8be76a6a-0af1-345d-b10a-39530d34b9b9","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_DIR","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f146b936-0fdc-45d4-8419-35dce99ad96b","sequence":{"long":12972},"type":"EVENT_MODIFY_PROCESS","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"8be76a6a-0af1-345d-b10a-39530d34b9b9"},"predicateObject2Path":{"string":"/var/at/jobs/"},"timestampNanos":1552584300033885404,"names":{"array":["aue_chdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6c843f7-53fd-4929-b578-71b679abdba8","sequence":{"long":12973},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"8be76a6a-0af1-345d-b10a-39530d34b9b9"},"predicateObjectPath":{"string":"/var/at/jobs/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300033885404,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00ec7c"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92b9693b-fc8c-481f-adec-83ffdf33f5f1","sequence":{"long":12974},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"8be76a6a-0af1-345d-b10a-39530d34b9b9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300033885404,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0698a3a5-9b71-4a3b-95c0-ad8a5eb3cac4","sequence":{"long":12975},"type":"EVENT_EXIT","threadId":{"int":100150},"subject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e31a3-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300033885404,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1510","exec":"atrun"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"134aa528-b31a-40c2-87b1-8abd7c767464","sequence":{"long":12976},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300033885404,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":105},"programPoint":null,"properties":{"map":{"ret_msgid":"17092","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"dc33ebb8-d658-595f-98d6-b7077f5992cc","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3614c776-66c1-4589-a7a5-39f6852fc26a","sequence":{"long":12977},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"dc33ebb8-d658-595f-98d6-b7077f5992cc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300033885404,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"18","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53358b84-2766-40f8-a7d1-6826a777b1ca","sequence":{"long":12978},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"185e0fe8-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e28df-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300033885404,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1141","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"544ce446-109a-46aa-b33d-e2ee6b151410","sequence":{"long":12979},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"185e0fe8-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e2d48-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300033885404,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1141","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1a63db9-adbf-4c1e-b823-cddf84dd2530","sequence":{"long":12980},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"185e0fe8-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e28e0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300033885404,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1141","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08c921a1-1465-4b6c-9d4f-2145337fa93a","sequence":{"long":12981},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"185e0fe8-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300033885404,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1141","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92b2139a-ee7b-43d1-9002-7d1527c2cee3","sequence":{"long":12982},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"185e0fe8-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e2d47-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300033885404,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1141","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d3bbb22-9d0a-4fc3-8952-afcbfdd59520","sequence":{"long":12983},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"185e0fe8-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e2d47-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300033885404,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1141","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14bb863d-415f-4963-b82f-772db0a2cd3a","sequence":{"long":12984},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"185e0fe8-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"185e0fe8-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300033885404,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1141","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09ca76da-15ae-4291-a33a-dbfe9449505a","sequence":{"long":12985},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":770988},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f562b78e-cf97-4ff5-b475-717056a458b7","sequence":{"long":12987},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a4183c3-2f5b-4669-88e4-81eb04ad3115","sequence":{"long":12986},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c0d66fb-826b-4532-81b0-49cbe7732666","sequence":{"long":12989},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2876d87-c1cd-4f31-9777-3a7ebb807f4a","sequence":{"long":12988},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9720265-68ec-4b0d-9bda-e20ab5508f5f","sequence":{"long":12991},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1297f71a-3076-43fa-9340-69347ddd8103","sequence":{"long":12990},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb1798d1-c468-4c3e-8352-23e4e595b612","sequence":{"long":12993},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a408604-0188-4cc9-980b-3a7001dc3b8b","sequence":{"long":12992},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48cdc47e-80b0-4aa7-85be-3943c8c4708e","sequence":{"long":12995},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2de6ff50-0768-4fb8-a11b-a8029ccb83a0","sequence":{"long":12994},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe0d6b78-ec5b-4b47-88a5-e8fd5f697137","sequence":{"long":12997},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58dd5843-848b-4132-8366-9b67e684f599","sequence":{"long":12996},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6459f3bf-8a1d-4b2b-8f2d-d4ae1e26e1b8","sequence":{"long":12998},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38a3972a-28bd-43d5-ad22-3bb794a18ad7","sequence":{"long":12999},"type":"EVENT_READ","threadId":{"int":100212},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f77e5db-7984-442e-8300-4d217115379c","sequence":{"long":13000},"type":"EVENT_READ","threadId":{"int":100212},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26b4dd21-be31-4180-8607-137abf43f30f","sequence":{"long":13001},"type":"EVENT_READ","threadId":{"int":100212},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3215},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee8be342-3340-4a5a-af72-ecb9364da0b1","sequence":{"long":13002},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3268},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d263d8bf-583e-463c-88d7-abf4ab8c9933","sequence":{"long":13003},"type":"EVENT_WRITE","threadId":{"int":100212},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66cc522e-8904-4bc5-9243-c9b4234196b9","sequence":{"long":13004},"type":"EVENT_READ","threadId":{"int":100212},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d374f390-3116-42e9-98a7-597477813635","sequence":{"long":13005},"type":"EVENT_READ","threadId":{"int":100212},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2efe8420-7e63-4147-aa9f-d88152f9ccb6","sequence":{"long":13006},"type":"EVENT_READ","threadId":{"int":100212},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4518},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e9829a5-7ee0-4e57-aa87-e6061cdfcf1d","sequence":{"long":13007},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4571},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"365db168-111d-48d7-86e9-daf29555d00f","sequence":{"long":13008},"type":"EVENT_WRITE","threadId":{"int":100212},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edc60fcf-1310-4688-a614-cc4d106450e1","sequence":{"long":13009},"type":"EVENT_READ","threadId":{"int":100212},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7468ccfe-6478-4574-9723-5e9889fb7b12","sequence":{"long":13010},"type":"EVENT_READ","threadId":{"int":100212},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3393921c-7557-49c1-bc02-28b4542b4154","sequence":{"long":13011},"type":"EVENT_READ","threadId":{"int":100212},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300124112844,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4035},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e5b7e07-ba62-46e7-aa3a-a6ad2f381520","sequence":{"long":13012},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300794008675,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":787930},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac2fe24e-f58c-4df4-bad5-5528033a34c4","sequence":{"long":13013},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300854442507,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a2b6bd7-3603-4bf1-a59f-1f805ce52dc4","sequence":{"long":13015},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584300903980356,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbe54167-ea24-4655-9dd7-3e244a329679","sequence":{"long":13014},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300903980356,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb816995-9e2d-4cdd-a10e-ac9119cb8c0d","sequence":{"long":13016},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584300903980356,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":60},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"439ff8df-81eb-49b5-afe6-920257910546","sequence":{"long":13017},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584301804090948,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":788703},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e629d97d-32fa-41cd-a2e0-b59440e14f56","sequence":{"long":13018},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584301864420919,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9f8ddd0-1526-49cc-912c-da7dd2923624","sequence":{"long":13020},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584301914796918,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e35c4e02-272d-47f4-927c-6c368545a69b","sequence":{"long":13019},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584301914796918,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e453d2c3-ac05-4d89-8131-299d9502066a","sequence":{"long":13021},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584301914796918,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":60},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a57a365b-bc76-4df7-a48a-c06f845a1c92","sequence":{"long":13022},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":788703},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3babb6c-17c3-4cfc-9fa5-693da268b504","sequence":{"long":13024},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f9525d1-3b8c-4960-9605-3e8faf51f290","sequence":{"long":13023},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32a93240-4bcd-4afd-87f1-df42dd4d2d1c","sequence":{"long":13026},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73e725fb-2f02-40e6-b06f-20893b4206c2","sequence":{"long":13025},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9ee993d-2f3e-4e72-a511-a6535f6a927e","sequence":{"long":13028},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e28b093c-b761-45ce-b371-555b4b1cdb1e","sequence":{"long":13027},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bf5778b-e114-4130-bada-710b7b96db15","sequence":{"long":13030},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46f3629b-6157-43f1-bedd-ba9e9f6e3285","sequence":{"long":13029},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b379f1c3-a88c-4720-9b13-911cba5e2b40","sequence":{"long":13032},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f4d8490-3a6d-4df8-b21d-e4c6f7263532","sequence":{"long":13031},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"039dc341-2a99-4d19-96f1-69be8fc3faf4","sequence":{"long":13034},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d5b6083-34b1-4602-8913-dee444994962","sequence":{"long":13033},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65f4a0ed-afaa-4ec3-986c-cb2b4782410a","sequence":{"long":13035},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2073f13f-a312-4228-ae2e-1e9fc6c56886","sequence":{"long":13036},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2875328e-6a83-4a62-b08b-50d764f4b5f6","sequence":{"long":13037},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e40226a-bdea-4a72-b965-f7d9a6b8d17e","sequence":{"long":13038},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4435},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"107b1104-f06e-4f41-afb0-2a384789f7d1","sequence":{"long":13039},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4488},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eeee2269-e2b7-4e53-b642-9037cb317b4b","sequence":{"long":13040},"type":"EVENT_WRITE","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92b71cdd-26db-445c-8756-f6e946897a2d","sequence":{"long":13041},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"974be2d3-e8de-4bd3-bbf5-1065e3809aec","sequence":{"long":13042},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ae99dfb-89e6-461b-932b-238e62084525","sequence":{"long":13043},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3999},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fddbbc94-1cf9-4163-9017-e507764d7182","sequence":{"long":13044},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4052},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbfe4e8f-2332-42b5-a872-ceddca091a01","sequence":{"long":13045},"type":"EVENT_WRITE","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fd1f264-e9a0-4c97-a0b2-8f00eff3ecfb","sequence":{"long":13046},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea997804-b356-43b6-a93c-9eb7212e16cb","sequence":{"long":13047},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60da27be-c322-4be8-872d-385f73ac9098","sequence":{"long":13048},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4270},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c299fad4-5857-46d5-a0a5-973e1d0572ea","sequence":{"long":13049},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4323},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c231e1f7-15c6-401a-87d1-4ba05ab3e14e","sequence":{"long":13050},"type":"EVENT_WRITE","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5b75c61-a28e-4e14-be1d-2728e591ef7a","sequence":{"long":13051},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e36afeec-2d3c-46be-9889-434dbff2833a","sequence":{"long":13052},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afde9b18-852b-48bf-b24f-550e5d08a9ea","sequence":{"long":13053},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4222},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1695b347-390d-4303-ac82-d9123b1d4e6b","sequence":{"long":13054},"type":"EVENT_WRITE","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302124341365,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e21739ea-e244-4129-9ac3-c6dcf63576f1","sequence":{"long":13055},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302133876652,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c10a60ab-5bac-4c4d-9c28-5be9e2172e31","sequence":{"long":13056},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302133876652,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95e87175-a4a1-42aa-b816-f4d98681d700","sequence":{"long":13057},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302133876652,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":769},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ff8800e-d980-4608-a1e5-f7c4297d2634","sequence":{"long":13058},"type":"EVENT_WRITE","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302133876652,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27bf8c80-20af-4902-97bb-de2e8be61a99","sequence":{"long":13059},"type":"EVENT_READ","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302133876652,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c712761-f468-42d5-920d-2451c8d99f74","sequence":{"long":13060},"type":"EVENT_SENDTO","threadId":{"int":100213},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302133876652,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17094","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"088056e2-81bf-4261-b9dc-935d565350ea","sequence":{"long":13061},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302133876652,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17094","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4d60474-e38e-4af4-a43f-dec4274d49e6","sequence":{"long":13062},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302133876652,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e90884a3-c43c-4673-ac02-e8f5f0332160","sequence":{"long":13063},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302133876652,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10479516-1660-4e24-ac9f-9b26b8e98730","sequence":{"long":13064},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302133876652,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"327d003e-a3dc-43d4-8735-d3ebc17bb9dd","sequence":{"long":13065},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302133876652,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4275},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdfddc37-338c-4ec1-8b8e-6d6f512e908c","sequence":{"long":13066},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302193998436,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d9d88ef-7fe0-4353-b881-99136558b1c7","sequence":{"long":13067},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302193998436,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"070ca971-3698-4b90-9fab-3e334baaeddc","sequence":{"long":13068},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302193998436,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":822},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1b8bb7d-7e44-43be-a573-9acecdcd6ea6","sequence":{"long":13069},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302193998436,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"027e2ea1-d61d-4487-bba7-3cd16dc63483","sequence":{"long":13070},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302833872609,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":793132},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"874f2387-4d87-4998-a045-6b4261f6262f","sequence":{"long":13071},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302873936468,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91b1ad01-8631-414e-9146-e7bda8281364","sequence":{"long":13073},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584302923907095,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c246869f-b0e2-47e0-b64b-9302f7b39366","sequence":{"long":13072},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302923907095,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2849911d-5eea-4114-a93f-3a932aa2703c","sequence":{"long":13074},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584302923907095,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":60},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f44f8be7-c6c3-4da1-a059-b56777795e9b","sequence":{"long":13075},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584303844198859,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":793909},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee471533-f857-4e7b-bc5c-5b8976957d13","sequence":{"long":13076},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584303883935567,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af9f7c84-908e-43da-a795-0076ce21d2f1","sequence":{"long":13078},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584303933997675,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99162c90-dfa1-48d7-9126-23cb6509e196","sequence":{"long":13077},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584303933997675,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"020ce77a-3c5d-48e4-9e87-4a000b9af201","sequence":{"long":13079},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584303933997675,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":60},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64c803d5-a07c-49e3-b9f3-698df16d23bb","sequence":{"long":13080},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":793909},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2a99af4-97cc-4145-8a49-514e63ab8144","sequence":{"long":13082},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"425bada0-659e-42bc-96fd-5bde183d3797","sequence":{"long":13081},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aff507c6-ac67-48f4-a81d-a9821e61d1e0","sequence":{"long":13084},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd687448-3065-46bc-8daf-f83e92275559","sequence":{"long":13083},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf3daded-a965-4b59-a0b4-ca1cb0ee7dde","sequence":{"long":13086},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87772132-938a-4ab8-80d6-b8346d4f61c2","sequence":{"long":13085},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08dd4b42-f377-4350-98f6-1ed6672b22a3","sequence":{"long":13087},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b714976-dd08-4459-bc6f-a63892024489","sequence":{"long":13088},"type":"EVENT_READ","threadId":{"int":100214},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a069154-14b6-4310-9f02-5fbfa3b68ef3","sequence":{"long":13089},"type":"EVENT_READ","threadId":{"int":100214},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a9c08ec-20f5-4667-8434-ec402a91ac63","sequence":{"long":13090},"type":"EVENT_READ","threadId":{"int":100214},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4425},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc39d14e-b0e1-4a1e-a847-8c887b125a80","sequence":{"long":13091},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4478},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3fbd2b1-e724-44e7-894a-9f1517ab6aa2","sequence":{"long":13092},"type":"EVENT_WRITE","threadId":{"int":100214},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5677413-8ae8-407b-8ba6-219b6558da48","sequence":{"long":13093},"type":"EVENT_READ","threadId":{"int":100214},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b46b88d4-fc6a-435d-8ed2-b508c1487248","sequence":{"long":13094},"type":"EVENT_READ","threadId":{"int":100214},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1c3cfd6-f594-4d9b-9ba7-c3563b77fd90","sequence":{"long":13095},"type":"EVENT_READ","threadId":{"int":100214},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":773},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4efb60c-5cdb-4d29-884d-789c75b5e184","sequence":{"long":13096},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":826},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6839a3b4-5d65-4342-8b03-0d6f7796695c","sequence":{"long":13097},"type":"EVENT_WRITE","threadId":{"int":100214},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18ae884d-b640-48d9-ba2f-344d7d071bdc","sequence":{"long":13098},"type":"EVENT_READ","threadId":{"int":100214},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13495729-bdd9-4bf1-8373-5a59e0a7f99e","sequence":{"long":13099},"type":"EVENT_SENDTO","threadId":{"int":100214},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17099","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86e2a968-95e2-460a-b363-34157469de02","sequence":{"long":13100},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17099","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60faa5bb-f3b7-4cca-9c3a-ec67a3629c6f","sequence":{"long":13101},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304124406074,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05a0da2c-d69d-4ace-882d-94a933230b08","sequence":{"long":13102},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304134477303,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"665eb115-737d-48c3-8bf2-e83da47fa3fc","sequence":{"long":13103},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304134477303,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68a18a23-a3fd-4e8f-b237-4bd497db00d3","sequence":{"long":13104},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304134477303,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39a94613-eaf9-46d5-b050-ca9faf4e53e5","sequence":{"long":13105},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304134477303,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23c87ca6-3910-4c1e-af99-8002dbb16afd","sequence":{"long":13106},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304864485100,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":796818},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f3f4ccb-fefc-40af-982a-c27a5576e7e5","sequence":{"long":13107},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304894058153,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9fae71f-674c-4d5a-aa2d-39feaed70749","sequence":{"long":13109},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584304944409214,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ff5204a-a454-4ff6-a6ba-307b99321b20","sequence":{"long":13108},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304944409214,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7ed281b-41a3-4275-9e9c-8dbcbed51771","sequence":{"long":13110},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584304944409214,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":60},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5a1eec7-ea09-489e-b3a4-ffa283f87bd0","sequence":{"long":13111},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584305553938232,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f368dcdd-c0cc-44de-b7f1-032609dcf854","sequence":{"long":13112},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584305553938232,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17100","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"009d162e-4140-4ead-8503-62b485da348d","sequence":{"long":13113},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584305553938232,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17101","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd84e2f7-2904-4f3f-aab6-b5f7ca269a21","sequence":{"long":13114},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584305553938232,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17102","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab3a1817-6f5e-4020-bd71-a6ed0fa9212b","sequence":{"long":13115},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584305553938232,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17103","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf7fe057-cfe5-44bd-8545-bc93ede0ef57","sequence":{"long":13116},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584305553938232,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17100","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1ef6e78-ba2d-438b-863c-807212a5c850","sequence":{"long":13117},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584305553938232,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17101","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dad5fa7-b99c-4e9e-8bd7-994d828b850c","sequence":{"long":13118},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584305553938232,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17102","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20e5e63f-6d2a-49d2-a869-36b7deb01916","sequence":{"long":13119},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584305553938232,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17103","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"170b03b1-81cb-403d-be52-3917ba7aa92c","sequence":{"long":13120},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584305874025976,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":798400},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a50954f0-22ae-4978-a1cc-66836543acee","sequence":{"long":13121},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584305904012954,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38d1192d-542a-4a0c-a845-2008daf2b0a7","sequence":{"long":13123},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584305964118315,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6508bdef-96b2-4643-aa9b-b4180e83a796","sequence":{"long":13122},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584305964118315,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8c26237-2835-4037-b429-0a4bcf26b8fc","sequence":{"long":13124},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584305964118315,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":60},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0f1b73f-9606-426e-abad-2f07413da050","sequence":{"long":13125},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":798400},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d44818f3-64b8-451b-ac2f-ed1b5ffe67a1","sequence":{"long":13127},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e811282-c2ef-4cdf-a61f-d24c388130a9","sequence":{"long":13126},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3866b215-d43a-40ea-b6a9-7e20fbc5551a","sequence":{"long":13129},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86381ae2-3154-42d2-b2fc-8298e206a903","sequence":{"long":13128},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24deb5c6-8699-4a81-9aaf-2a24514b5bac","sequence":{"long":13131},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fe5a252-c685-427a-a48c-ea3c936743ee","sequence":{"long":13130},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89484d8f-29f6-4ce6-add0-5306966b39b2","sequence":{"long":13132},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f92696b0-24a5-4ac9-b6e6-a7c35795f33a","sequence":{"long":13133},"type":"EVENT_READ","threadId":{"int":100215},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b2552ae-0be4-45fa-90b4-a01974effb19","sequence":{"long":13134},"type":"EVENT_READ","threadId":{"int":100215},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adad6d48-8503-4d4f-a7c9-e3f2b42cec32","sequence":{"long":13135},"type":"EVENT_READ","threadId":{"int":100215},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2905},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69e3eb3b-6906-4eb5-a6a7-4b7c17c774ea","sequence":{"long":13136},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2958},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dab983a-819a-4023-9f72-0318a609976d","sequence":{"long":13137},"type":"EVENT_WRITE","threadId":{"int":100215},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"772f4ecc-8942-4bf4-9c18-13897d704b5a","sequence":{"long":13138},"type":"EVENT_READ","threadId":{"int":100215},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f6c5e72-52cc-4e54-9ec2-d67a852c4329","sequence":{"long":13139},"type":"EVENT_READ","threadId":{"int":100215},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"289dfde9-755b-49c9-acf8-40b3d8c30430","sequence":{"long":13140},"type":"EVENT_READ","threadId":{"int":100215},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1578},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65a708ec-704f-47bb-984b-b6f3ad70b9bc","sequence":{"long":13141},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1631},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1705b3d4-c9b9-4872-8e56-08f1dcb1da55","sequence":{"long":13142},"type":"EVENT_WRITE","threadId":{"int":100215},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b63ef649-3b87-4343-a72a-7de784f1aee4","sequence":{"long":13143},"type":"EVENT_READ","threadId":{"int":100215},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96975455-b386-4aa3-aa2c-1afd5f0c3f95","sequence":{"long":13144},"type":"EVENT_SENDTO","threadId":{"int":100215},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17104","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"326acd3d-c67f-4d6f-ab3b-981edde84ce7","sequence":{"long":13145},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17104","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abaa120c-d072-455b-8e02-b8ab7d0bf51c","sequence":{"long":13146},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306124182607,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ab77713-8e36-4fc3-b8f6-4c87c10abc3c","sequence":{"long":13147},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306134640071,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c98965e9-09be-4aa1-9371-25e7d4087a37","sequence":{"long":13148},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306134640071,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7302ac23-97f1-4c45-a0be-8038bd21e9bd","sequence":{"long":13149},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306134640071,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c599636-c402-4a92-99e0-ba053dc35bfd","sequence":{"long":13150},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306134640071,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3ec46fe-6ad5-4658-80b2-342010010802","sequence":{"long":13151},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306893910587,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":801320},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7b302f6-518c-4ff0-beeb-11a000b13622","sequence":{"long":13152},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306914279290,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1bbbbd3-4c57-4330-9aec-ef3308e96d7b","sequence":{"long":13154},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584306963833526,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e13ecc75-fefb-4d4e-b7e3-2fe7fa32c47d","sequence":{"long":13153},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306963833526,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d739f8a6-f65d-42fe-bbb5-63528aa9daa8","sequence":{"long":13155},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584306963833526,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":60},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dad2034-f4fc-482b-a092-fc886db0f160","sequence":{"long":13156},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584307904622272,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":802097},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dc8a2b2-1fce-43cb-8df6-6e054e53ddc0","sequence":{"long":13157},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584307923991598,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9ada7b3-5b10-44d1-b950-dab1fc2aa0d5","sequence":{"long":13159},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584307974812964,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0dc0a93-e997-4da4-aa28-660663cbc8c3","sequence":{"long":13158},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584307974812964,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e44c07a-c08b-4697-a5ac-5ccc814f7817","sequence":{"long":13160},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584307974812964,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":60},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"489030a5-87c2-4a12-82f0-125a4422910d","sequence":{"long":13161},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":802097},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a317772a-eeac-4846-be66-14104241cfbd","sequence":{"long":13163},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e95f0281-ff07-449b-88d6-fcd6b912a745","sequence":{"long":13162},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64cd31c0-440c-4ac1-a594-d92e4e8acab3","sequence":{"long":13165},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ba868f9-dba4-4c65-8ab0-3e2b836be0aa","sequence":{"long":13164},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c83444aa-6881-4e00-a920-3b818fb93fa4","sequence":{"long":13167},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7250d29f-e89d-4677-bf99-e2a33d8f2faf","sequence":{"long":13166},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d1c991f-b46b-4b13-afed-5837780831ff","sequence":{"long":13168},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6d96c8b-9458-4c6a-9788-f785a14bfb23","sequence":{"long":13169},"type":"EVENT_READ","threadId":{"int":100216},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b258857f-e887-45a7-8188-ea8cf1e1019f","sequence":{"long":13170},"type":"EVENT_READ","threadId":{"int":100216},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab859bca-f9d3-4ef8-a952-dbaac02f7bea","sequence":{"long":13171},"type":"EVENT_READ","threadId":{"int":100216},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2916},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60c6fb50-4a60-4123-8537-a694e2921472","sequence":{"long":13172},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2969},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"462ddfcc-60e7-4af0-ac42-323ea1c1d431","sequence":{"long":13173},"type":"EVENT_WRITE","threadId":{"int":100216},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ff682ca-eff1-4049-a173-46b83ad6a033","sequence":{"long":13174},"type":"EVENT_READ","threadId":{"int":100216},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68dad013-fe5e-44bb-b78f-84dcf073ae0a","sequence":{"long":13175},"type":"EVENT_READ","threadId":{"int":100216},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a9e99f8-0983-43ca-93e8-4e2c2c5be77a","sequence":{"long":13176},"type":"EVENT_READ","threadId":{"int":100216},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":773},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f700a4eb-de8b-43cc-a143-3e3a19eebe0e","sequence":{"long":13177},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":826},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fec2533-8d09-4a83-9216-0738cb7a66c7","sequence":{"long":13178},"type":"EVENT_WRITE","threadId":{"int":100216},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a1bfa9e-634f-4a31-9152-402132deed80","sequence":{"long":13179},"type":"EVENT_READ","threadId":{"int":100216},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b953ed9-bdb0-48a8-8260-72cb50819a70","sequence":{"long":13180},"type":"EVENT_SENDTO","threadId":{"int":100216},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17105","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8bd4afa-88b4-4754-aca7-c25e1cef342c","sequence":{"long":13181},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17105","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5edfa364-8074-4c9e-8938-86b6d0904d66","sequence":{"long":13182},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5b0aac2-a08a-48c1-bbea-8d3634eeb5ea","sequence":{"long":13183},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"746904d6-0af7-4f10-9db8-2ca6f180b487","sequence":{"long":13184},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308123898758,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7078fab-db9e-4faa-8201-7c7848b2d38b","sequence":{"long":13185},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308134578867,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"119eff0b-9b1f-42bd-a4de-1620adc9468a","sequence":{"long":13186},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308134578867,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"369f4798-cbe1-4307-9ff8-c54db2a072a8","sequence":{"long":13187},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308554088644,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5487982c-9732-4e95-8a4c-a44103194ebe","sequence":{"long":13188},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308554088644,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17106","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84dddd23-fea8-4012-a0e5-fde23d59bc95","sequence":{"long":13189},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308554088644,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17107","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e9e6ee7-3bf6-4c7e-a236-65f0df955866","sequence":{"long":13190},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308554088644,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17108","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ca9f75d-dca0-4cc1-a84a-fcd02ab67f56","sequence":{"long":13191},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308554088644,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17109","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50d42d71-3499-463f-b21d-b71d8cc551b0","sequence":{"long":13192},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308554088644,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17106","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a48a7a3-a97a-4199-bf3c-83e95cdcac99","sequence":{"long":13193},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308554088644,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17107","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc179cb8-f182-42f3-af9c-4e223b804d2f","sequence":{"long":13194},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308554088644,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17108","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce9b1054-6eaa-43b5-9703-341a65b4b9dc","sequence":{"long":13195},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308554088644,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17109","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"138e6168-5ef5-470b-8378-5c724f5144be","sequence":{"long":13196},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308924164188,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":805796},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f4537b9-4cc1-42ff-980f-8c9df36e7941","sequence":{"long":13197},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308934110559,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a26ea103-8934-4777-970c-af74997ccc90","sequence":{"long":13199},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584308983874572,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9286a628-2ceb-4d65-ad1e-0deef2b0d765","sequence":{"long":13198},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308983874572,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2d0d43c-dc92-412d-994d-a02251e24d13","sequence":{"long":13200},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584308983874572,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":61},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f8e1540-152c-448f-98ff-99d6cb11c726","sequence":{"long":13201},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584309934422381,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":806573},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03ed8d0e-af98-45e7-b534-f7d8fe17c6e5","sequence":{"long":13202},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584309943871375,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9030e32-d557-4bc0-b74d-f839d8840452","sequence":{"long":13204},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584309993890072,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fac448f2-ac38-450d-aecc-736347d88a62","sequence":{"long":13203},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584309993890072,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83dd9742-48b5-4bcc-9005-2276ab903eee","sequence":{"long":13205},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584309993890072,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":61},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e3a5590-562f-40b5-bcb6-212f718fff67","sequence":{"long":13206},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":806573},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"426579b0-c7dd-4b6f-be94-450b26727708","sequence":{"long":13208},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10b3b218-600d-4ed0-acd7-f06ee558322c","sequence":{"long":13207},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f81f56f9-f944-4b6f-a1c1-472b421bcb59","sequence":{"long":13210},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f07c9d5-2c5a-4189-9b86-c3afd7a58504","sequence":{"long":13209},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45c92891-1a18-4fa9-bf3b-b2ff274409c3","sequence":{"long":13212},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c72ec92-29e2-48d1-aa4e-22b8ffff9708","sequence":{"long":13211},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c8b96c7-14b6-4fad-b3f4-d6797fbc96a9","sequence":{"long":13213},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96ba9935-2cfb-49b4-b2e4-1aadaf4eeca4","sequence":{"long":13214},"type":"EVENT_READ","threadId":{"int":100217},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bdf8085-5df8-4d24-8251-6f638c400d2c","sequence":{"long":13215},"type":"EVENT_READ","threadId":{"int":100217},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c20e828-1c6d-45f8-8a9a-2fba52de1ff5","sequence":{"long":13216},"type":"EVENT_READ","threadId":{"int":100217},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3695},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c12fa08c-9a50-4e61-93be-ab77f9643709","sequence":{"long":13217},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3748},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"420ae178-2fa0-45cc-83f3-1d4ac4093a78","sequence":{"long":13218},"type":"EVENT_WRITE","threadId":{"int":100217},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b884eb06-4ed4-4562-beef-d02ba85c71fa","sequence":{"long":13219},"type":"EVENT_READ","threadId":{"int":100217},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"231956dd-daa0-4d18-80bf-0263e7dc95c2","sequence":{"long":13220},"type":"EVENT_READ","threadId":{"int":100217},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df4bd7a3-1a44-4fe7-9b65-6cab3a26900b","sequence":{"long":13221},"type":"EVENT_READ","threadId":{"int":100217},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":773},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca4d8aa7-738c-4e55-a7f9-dcba68e66dc8","sequence":{"long":13222},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":826},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad76a7f7-3455-4592-ae7d-3cbbf2dce9df","sequence":{"long":13223},"type":"EVENT_WRITE","threadId":{"int":100217},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27d1a377-adc9-4227-afa2-40e828f1acbd","sequence":{"long":13224},"type":"EVENT_READ","threadId":{"int":100217},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebc2d505-472f-4aa3-994a-a0a2216f7c16","sequence":{"long":13225},"type":"EVENT_SENDTO","threadId":{"int":100217},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17110","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"068536e4-a3c3-4d5a-a2b6-32df66d96929","sequence":{"long":13226},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17110","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84c4fc1c-b07f-4978-9717-6074648fcdf4","sequence":{"long":13227},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310124131673,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6c97d2f-9b27-4c25-b6f1-ab4424262c5b","sequence":{"long":13228},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310133875974,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecc9c182-4463-418f-a1f6-45b094737e67","sequence":{"long":13229},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310133875974,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72d5d4c7-ff7b-4542-997b-040eaeb976b6","sequence":{"long":13230},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310133875974,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20098cfd-9f0b-4536-be18-afe5b3a89e7b","sequence":{"long":13231},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310133875974,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55b08a33-e13f-4459-a8e5-cf30efeda35c","sequence":{"long":13232},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310954182055,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":809492},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2ba7747-0c4a-4bc1-9bbc-fb18610034b1","sequence":{"long":13233},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584310954182055,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da8c7ca9-46d5-4f15-9db1-1a1d75517178","sequence":{"long":13235},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584311033961744,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c440c1db-03b2-4f20-8948-fee8020b348c","sequence":{"long":13234},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584311033961744,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47a104ae-4818-40e0-b28a-b9f8f55bb869","sequence":{"long":13236},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584311033961744,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":61},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6fb9517-277a-4b1b-a91f-1b59dac8abd2","sequence":{"long":13237},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584311553879724,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58407309-915e-49e9-8158-e6a6fc27470b","sequence":{"long":13238},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584311553879724,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17111","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15abda0a-4024-4d51-82b9-f58a07a0b212","sequence":{"long":13239},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584311553879724,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17112","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fbef190-b638-460c-96ed-6d55fb58000d","sequence":{"long":13240},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584311553879724,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17113","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47355fba-9811-4252-998d-0581a1ca9e4f","sequence":{"long":13241},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584311553879724,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17114","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60c3f1c2-aafb-4a00-a5ff-f91a10ff3cb6","sequence":{"long":13242},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584311553879724,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17111","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4dbcaec8-8ba6-481c-87a9-f7db2f019cc1","sequence":{"long":13243},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584311553879724,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17112","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fa83da5-3976-4c4a-97cd-61ad310c8039","sequence":{"long":13244},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584311553879724,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17113","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cf8fc9d-d441-4fdb-bf5b-b694f264a3e9","sequence":{"long":13245},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584311553879724,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17114","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70967f9f-27ec-4fcb-bf11-658626e7c016","sequence":{"long":13246},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584311963870183,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":811069},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dec90822-8844-44f5-898e-2c0e953dbbb2","sequence":{"long":13247},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584311974059893,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c553d1a-1677-4d08-ad14-8823ed80d9d6","sequence":{"long":13249},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584312024311349,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21bf8bee-d020-407f-a63c-de997c7af334","sequence":{"long":13248},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312024311349,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73784aee-0582-41d3-a86c-65ae71c6d386","sequence":{"long":13250},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312024311349,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":61},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e15f54f-ec0d-4245-8372-7df16fccec4e","sequence":{"long":13251},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":811069},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84cc2aaf-c6b9-4352-b4eb-74810e72170c","sequence":{"long":13253},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a070686-b362-4d8a-821c-0579674a47a4","sequence":{"long":13252},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dfee8ef-4ef4-465e-aded-d3da628cb7c3","sequence":{"long":13255},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd269920-9474-469d-9090-2501f07d401f","sequence":{"long":13254},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63f19efe-bf9b-4d45-937e-ed3fcf688fb1","sequence":{"long":13257},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bc2f74f-3510-4295-83e8-240b38c5adb8","sequence":{"long":13256},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f73ad215-88aa-4884-9421-631293a3142b","sequence":{"long":13258},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed056394-9ba6-4ece-90a5-d9b0cffb7ae8","sequence":{"long":13259},"type":"EVENT_READ","threadId":{"int":100218},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fe94100-2595-4525-9a93-955e2624712a","sequence":{"long":13260},"type":"EVENT_READ","threadId":{"int":100218},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33efa10d-7bcc-4026-af79-07a8e60daea4","sequence":{"long":13261},"type":"EVENT_READ","threadId":{"int":100218},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2915},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d8efd1a-bb2f-4569-a216-00bd6e87d463","sequence":{"long":13262},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2968},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f06951d0-3651-4696-a807-3155a8444244","sequence":{"long":13263},"type":"EVENT_WRITE","threadId":{"int":100218},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0fc975c-8806-4a80-9a7a-2e701ebc7146","sequence":{"long":13264},"type":"EVENT_READ","threadId":{"int":100218},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf768c3e-c9c8-4a62-b238-7f9d81e8c519","sequence":{"long":13265},"type":"EVENT_READ","threadId":{"int":100218},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ca40097-6286-459a-ab78-298c8e285af4","sequence":{"long":13266},"type":"EVENT_READ","threadId":{"int":100218},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1573},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4d633c5-2b93-4bbd-8885-54fd256125ec","sequence":{"long":13267},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1626},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d7b7004-4b49-443c-8e01-1f053fc30e4f","sequence":{"long":13268},"type":"EVENT_WRITE","threadId":{"int":100218},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9940f5fb-9af9-4035-b687-d3b8fc3b4676","sequence":{"long":13269},"type":"EVENT_READ","threadId":{"int":100218},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89e2e813-4b67-45b6-badf-4317c66f3a6e","sequence":{"long":13270},"type":"EVENT_SENDTO","threadId":{"int":100218},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17115","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c607d0ba-9abe-4027-94fc-28f4f7809ee3","sequence":{"long":13271},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17115","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81630ed2-0042-4c70-88f0-2be73272bf7e","sequence":{"long":13272},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312124016654,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"beb578b9-e36e-49cd-a850-dd9612664d7f","sequence":{"long":13273},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312134286677,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79c1630a-1e31-4e7b-bf64-4f6226627f4a","sequence":{"long":13274},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312134286677,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39614f9a-3ca6-408a-b056-f41dde9b05a7","sequence":{"long":13275},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312134286677,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64bc58be-63fe-4825-8b98-d8888b13ec98","sequence":{"long":13276},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312134286677,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85ad56eb-5490-46af-bc8b-57840ce22f51","sequence":{"long":13277},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312984134835,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":813982},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f08b53b-e314-444d-b159-b215816a1c88","sequence":{"long":13278},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584312984134835,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49c2a6bc-96d9-4ee3-aea3-e97364ebad9f","sequence":{"long":13280},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584313043929094,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73a0b56a-e3c0-462f-8112-104e70cdfc0f","sequence":{"long":13279},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584313043929094,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13a22794-e62c-451c-90e8-0ba9db9575da","sequence":{"long":13281},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584313043929094,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":61},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfd6904d-2e06-4446-bc78-7f800234a1b1","sequence":{"long":13282},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584313994464318,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":814753},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68201dec-cbde-430b-aa9d-22d41ca45742","sequence":{"long":13283},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314004295967,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"954daab9-bbf1-45ba-95e4-5f664d4053c4","sequence":{"long":13285},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584314054164511,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"248e6ed2-67c8-44fa-9b2e-27a6228cdb82","sequence":{"long":13284},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314054164511,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e281c09-55c5-43aa-bb35-3bd26079e975","sequence":{"long":13286},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314054164511,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":61},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcf6ae9e-e53b-4448-af9f-292dad785f12","sequence":{"long":13287},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":814753},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b65da5f-06ab-4411-b8f7-e78da72d2f4b","sequence":{"long":13289},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe46b2cb-06d8-4075-b590-d921bed9252f","sequence":{"long":13288},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c4da8cf-0c69-4787-b376-7136fed27396","sequence":{"long":13291},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0325ac5e-a95e-4a68-b2a0-fb5d54b24c71","sequence":{"long":13290},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2999b40d-4538-4b72-8ce2-5c401cf5bbee","sequence":{"long":13293},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"060eef07-76a7-4a2d-a9a4-afe73387a5b0","sequence":{"long":13292},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d9ec4a6-44bc-4f05-a048-a8893fd0ced2","sequence":{"long":13294},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40114b87-18db-478b-9269-d6fecf9b12a4","sequence":{"long":13295},"type":"EVENT_READ","threadId":{"int":100219},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bb175e9-ac50-4dae-8358-ea48efe94986","sequence":{"long":13296},"type":"EVENT_READ","threadId":{"int":100219},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44bdf980-77de-4e3e-a3db-561f709fbd1f","sequence":{"long":13297},"type":"EVENT_READ","threadId":{"int":100219},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2909},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55bd0a48-258c-4a1b-8e5a-40c1bc8188f5","sequence":{"long":13298},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2962},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b21209d-6bd1-4653-b519-9f4bba7aeef0","sequence":{"long":13299},"type":"EVENT_WRITE","threadId":{"int":100219},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f48c4784-2476-49ea-aa97-fc30ece98e2b","sequence":{"long":13300},"type":"EVENT_READ","threadId":{"int":100219},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"427d22ff-e92f-43f7-9e4a-3be1ff856337","sequence":{"long":13301},"type":"EVENT_READ","threadId":{"int":100219},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"472261de-21d8-46d8-9795-0ee0201be5e3","sequence":{"long":13302},"type":"EVENT_READ","threadId":{"int":100219},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":767},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8afdd8e0-a256-465b-8996-c942a6bd362b","sequence":{"long":13303},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":820},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"690593a2-af11-4080-9fd9-b005eeaa09f0","sequence":{"long":13304},"type":"EVENT_WRITE","threadId":{"int":100219},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"894f676b-54ff-4b00-8507-a44b9cadd72e","sequence":{"long":13305},"type":"EVENT_READ","threadId":{"int":100219},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7290c3ec-3612-4cb9-b389-3db74085d122","sequence":{"long":13306},"type":"EVENT_SENDTO","threadId":{"int":100219},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17116","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26b91bb4-09a4-49cd-8eb4-4258d1ae860f","sequence":{"long":13307},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17116","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d88f28a-d629-444a-a1e7-4357df197f36","sequence":{"long":13308},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314123963142,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b757a265-b6e2-4f44-94f0-7cf592f14695","sequence":{"long":13309},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314134273477,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d075dd22-1fef-4b30-86fa-b45bae415e96","sequence":{"long":13310},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314134273477,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4aa4c5f-c3be-4129-873b-3a280e1c74da","sequence":{"long":13311},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314134273477,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21b6db9e-9c62-4c55-aac3-f02c28a9c77c","sequence":{"long":13312},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314134273477,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc687e62-41ae-4d5f-9859-9e538f9f39e1","sequence":{"long":13313},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314553898162,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76382c23-ae7d-4e70-bb59-acd5555eaa2f","sequence":{"long":13314},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314553898162,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17117","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4afd1208-92c9-48cb-95df-f6755d59a5e4","sequence":{"long":13315},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314553898162,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17118","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4b68882-5aab-4a84-a616-02dd3f4c3d41","sequence":{"long":13316},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314553898162,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17119","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d315893b-7b8b-4c65-9973-cea576eb416f","sequence":{"long":13317},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314553898162,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17120","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"860ac304-2b1b-41c0-8f64-5a8d23eec993","sequence":{"long":13318},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314553898162,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17117","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1767fed1-cbf5-4f9c-bdf1-dd1171217a2e","sequence":{"long":13319},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314553898162,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17118","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eac8e34d-1389-424c-b655-a23f3d4f0958","sequence":{"long":13320},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314553898162,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17119","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"042280bc-aa03-4c62-8792-20c4c878716b","sequence":{"long":13321},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584314553898162,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17120","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e2901d9-102d-4a2e-8468-a256d33fc781","sequence":{"long":13322},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584315013906146,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":818464},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09092c83-4dc8-493c-a7b1-a272848218c2","sequence":{"long":13323},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584315013906146,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbc289ca-2cca-4a1d-add2-4003f88914fd","sequence":{"long":13325},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584315074208793,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c680ada-5244-4756-b08a-d8061072ec0d","sequence":{"long":13324},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584315074208793,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26da3031-135f-493d-932b-e154ca6e28b8","sequence":{"long":13326},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584315074208793,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":61},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4fa1ca6-fdfe-4258-844e-cf7cc7b52333","sequence":{"long":13327},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316024280872,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":819230},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ed72408-7907-4f0a-b1e8-cc4b7a4dbbb9","sequence":{"long":13328},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316033893872,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be76ffc9-346c-41e7-9a21-b7c9526ba565","sequence":{"long":13330},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584316084347592,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1f76a79-4a61-4c1d-9e03-12eca9c9cc3c","sequence":{"long":13329},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316084347592,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bce9dee5-b635-42f3-99b6-af00dc7d74e9","sequence":{"long":13331},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316084347592,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":61},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07802992-6037-458d-ac67-a209e7098939","sequence":{"long":13332},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":819230},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"035b9094-c03c-4617-9150-95907bc62ba5","sequence":{"long":13334},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2791528-aeba-4a71-acce-10735a9756c4","sequence":{"long":13333},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37967535-10cb-4adb-912d-9ed06a23f7fe","sequence":{"long":13336},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7b03f7f-a3ae-418e-a9e8-4c41a4be88b6","sequence":{"long":13335},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afbf11eb-c70d-4ead-bb81-63ddf881f04a","sequence":{"long":13338},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0300a4f7-9dd4-44ce-bd74-a7b405347bf3","sequence":{"long":13337},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd65a8fa-e8e9-468d-a354-823c9e620fc7","sequence":{"long":13339},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d95a620-8449-446a-aee5-6811f75a3c70","sequence":{"long":13340},"type":"EVENT_READ","threadId":{"int":100220},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbb2c550-886e-4fb8-b278-9d760353fc52","sequence":{"long":13341},"type":"EVENT_READ","threadId":{"int":100220},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f72311b-a1bd-4662-8ae1-8a701578e5a5","sequence":{"long":13342},"type":"EVENT_READ","threadId":{"int":100220},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3707},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b7cd784-696f-44ee-81fb-7bd035b026e6","sequence":{"long":13343},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3760},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28c4b297-310d-4ed9-9130-378e0f2ec2d8","sequence":{"long":13344},"type":"EVENT_WRITE","threadId":{"int":100220},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59eaf161-2c6a-4a18-a5a0-4ad31d727872","sequence":{"long":13345},"type":"EVENT_READ","threadId":{"int":100220},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68c4b7c0-3b6b-466a-abc1-aa45c384ad06","sequence":{"long":13346},"type":"EVENT_READ","threadId":{"int":100220},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9da2c02-e61a-416b-9fce-a87c8a360e29","sequence":{"long":13347},"type":"EVENT_READ","threadId":{"int":100220},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":762},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bb730db-c7dd-430a-af22-0d03765b19eb","sequence":{"long":13348},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":815},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a289a788-19a6-4e0d-bd08-15885da5bbe8","sequence":{"long":13349},"type":"EVENT_WRITE","threadId":{"int":100220},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea76991d-b14c-40fb-bdee-51e805b50d7a","sequence":{"long":13350},"type":"EVENT_READ","threadId":{"int":100220},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e8ca59d-144e-4593-8f07-94ea1ca050e4","sequence":{"long":13351},"type":"EVENT_SENDTO","threadId":{"int":100220},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17121","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f106732-1f37-472a-891b-bedc2e593fea","sequence":{"long":13352},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17121","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afe0d9ad-6568-4ca4-b7e3-bf9b0c3bd90f","sequence":{"long":13353},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316124183529,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcdfa52c-a95c-4dd6-8a6b-ff134d69ee1e","sequence":{"long":13354},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316133944445,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba308f51-4fcf-4f63-afd3-5317a6632e07","sequence":{"long":13355},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316133944445,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"006d126c-88f7-412e-a1ea-ca5834506aee","sequence":{"long":13356},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316133944445,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf018c56-2f3a-4964-a8ce-11a06ad24b5f","sequence":{"long":13357},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584316133944445,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68275563-aaa3-4d55-9eaf-1ba882e1f152","sequence":{"long":13358},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584317034437969,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":822156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56ef73d9-2748-43ff-95a3-8a82089932fc","sequence":{"long":13359},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584317043861904,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb6a00ee-952c-4646-85c4-7a31f1fd9cb8","sequence":{"long":13361},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584317093912383,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"681b360b-bd99-4f8d-8e1b-aba730481107","sequence":{"long":13360},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584317093912383,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df0814ac-6db1-4982-a585-a73acb5f2c9f","sequence":{"long":13362},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584317093912383,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":61},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb65923e-8e96-457c-95bf-75a363672ad8","sequence":{"long":13363},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584317553838314,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fe0ccf4-b3ff-46c3-a34a-8bcd40afc7e9","sequence":{"long":13364},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584317553838314,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17122","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3554ac12-7bac-46b6-9403-ab5df8a47cf8","sequence":{"long":13365},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584317553838314,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17123","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ec21c9a-7bb3-4809-8217-40846ee53d68","sequence":{"long":13366},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584317553838314,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17124","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c90454c-378b-49aa-98e4-120cabf3c4ff","sequence":{"long":13367},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584317553838314,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17125","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d87bcfb4-0be8-4d60-8d87-908152aa5b25","sequence":{"long":13368},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584317553838314,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17122","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce060f2d-2cc6-4118-bbe7-ca991e5e04ad","sequence":{"long":13369},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584317553838314,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17123","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1f06fe2-3909-42e4-bcd2-1f0098b9fa32","sequence":{"long":13370},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584317553838314,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17124","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f513337-8f41-4829-9b7c-0a7fe4e8ca42","sequence":{"long":13371},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584317553838314,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17125","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c155115f-23b8-437b-9124-1691cb2ac13b","sequence":{"long":13372},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318044870502,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":823739},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a35a1fb0-2d4d-40e2-89f9-8ab2bddded07","sequence":{"long":13373},"type":"EVENT_SENDTO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a643e1-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318053883643,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":64},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98d0ffe6-d7ac-46db-a871-557bf8ca845a","sequence":{"long":13375},"type":"EVENT_FLOWS_TO","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584318103911768,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c66bc759-6189-46fc-b83c-702301e9095c","sequence":{"long":13374},"type":"EVENT_RECVMSG","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a645c0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318103911768,"names":{"array":["aue_recvmsg"]},"parameters":{"array":[]},"location":null,"size":{"long":84},"programPoint":null,"properties":{"map":{"ret_miouuid":"17a645c0-467e-11e9-aed1-080027fc76ba","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1282","address":"172.217.9.4","port":"0","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3b8507d-7ff0-4629-9bdf-5210f0599616","sequence":{"long":13376},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318103911768,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":61},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cc36609-28df-441d-b966-749577b5114b","sequence":{"long":13377},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318103911768,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5699600-1b85-49d6-9bc9-b4bc26f952c1","sequence":{"long":13378},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318103911768,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":39},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90399530-73fb-4531-b29d-9c248ef91f15","sequence":{"long":13379},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318103911768,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":62},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf329f90-d007-4e4b-861a-12ac0c787287","sequence":{"long":13380},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318103911768,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":62},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a137a0da-f4dc-401c-b7bb-0b56e7f69a9a","sequence":{"long":13381},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a487f0-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318103911768,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee51aef5-0fb1-4c8b-b545-88985b2f72b9","sequence":{"long":13382},"type":"EVENT_RECVFROM","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318103911768,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02853bb9-7790-4758-9fb5-70fafbb2e690","sequence":{"long":13383},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a69b3d-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318103911768,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","return_value":"0","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b4528e3-a190-4f2e-a36e-9f6216a3d8f2","sequence":{"long":13384},"type":"EVENT_EXIT","threadId":{"int":100120},"subject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17a6a023-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318103911768,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"ping"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa88494f-91bf-48ad-95f9-ac504a75260e","sequence":{"long":13385},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318103911768,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d016b0c3-b568-4b94-8ee5-bff6b7bc8b22","sequence":{"long":13386},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318103911768,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":50},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a575e4f6-3974-4a28-bd64-23343c41a7ae","sequence":{"long":13387},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":823739},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2847638-6fc1-4d4b-a719-718397728c3c","sequence":{"long":13389},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d2d6182-df02-4989-a825-22b7e943b4f7","sequence":{"long":13388},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0cf8f34-e55f-4622-a934-df3c6b00c649","sequence":{"long":13391},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75b5e029-4ba5-40b0-87c0-97b9b64eafa2","sequence":{"long":13390},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e004423-71c7-4844-a879-de85c830daae","sequence":{"long":13393},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11a6d120-f6b6-48da-a47a-91b0179e0203","sequence":{"long":13392},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cf1e158-f402-4f73-a9c2-b6ff3608bd44","sequence":{"long":13394},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95c766ce-38b6-41c3-b424-b6204c9631b9","sequence":{"long":13395},"type":"EVENT_READ","threadId":{"int":100221},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa6e408b-b2ef-4f90-a4be-13c798467109","sequence":{"long":13396},"type":"EVENT_READ","threadId":{"int":100221},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4259fbf-3ecc-42e0-ad41-05f9cfceee05","sequence":{"long":13397},"type":"EVENT_READ","threadId":{"int":100221},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2922},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c9c9ef3-1b25-4bab-bbcf-3533d1875055","sequence":{"long":13398},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2975},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6719a9b5-36ac-4003-8767-dbb601472eda","sequence":{"long":13399},"type":"EVENT_WRITE","threadId":{"int":100221},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9851b8cc-9f81-4628-a658-d1e03469226b","sequence":{"long":13400},"type":"EVENT_READ","threadId":{"int":100221},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f704eb88-35fd-4295-acdb-7858116bf248","sequence":{"long":13401},"type":"EVENT_READ","threadId":{"int":100221},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c796ab92-dc43-40a5-9fa2-1b6982e74719","sequence":{"long":13402},"type":"EVENT_READ","threadId":{"int":100221},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1579},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6471c1b0-1609-4c53-bb02-28bec77bc9fb","sequence":{"long":13403},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1632},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28d41542-8382-4701-aee5-eb63a97ffa14","sequence":{"long":13404},"type":"EVENT_WRITE","threadId":{"int":100221},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"201ab889-e501-4a02-b587-ae5e06a3a55c","sequence":{"long":13405},"type":"EVENT_READ","threadId":{"int":100221},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a0d4380-80d6-42b2-9efc-cf0e976e8dd3","sequence":{"long":13406},"type":"EVENT_SENDTO","threadId":{"int":100221},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17126","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ac5ad8e-2a86-4837-bbea-c6ec060745f9","sequence":{"long":13407},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17126","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98812b32-6785-4b78-b63f-4390301837f6","sequence":{"long":13408},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318123919984,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a813c4f1-62b3-46f3-b456-a977ca38f0e2","sequence":{"long":13409},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318133868284,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4caf7a8-49fd-492d-8090-4dcb19cd3465","sequence":{"long":13410},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318133868284,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dffd64f6-7067-4721-aa34-9e7a48c1f3f6","sequence":{"long":13411},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318133868284,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"686975a7-3f0a-4406-9188-1dcb956b89e6","sequence":{"long":13412},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584318133868284,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8537f68-a787-4cc9-baa1-00e83a95c9c4","sequence":{"long":13413},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584319074052964,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":827409},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67bfa463-7a30-4996-a9a1-82726c6e4b61","sequence":{"long":13414},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320084299466,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":827772},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5df482ba-5e74-4cb3-8023-0229a524e0de","sequence":{"long":13415},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":827772},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54e314f0-a073-4196-ac04-be45adb70c08","sequence":{"long":13417},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d4db3dc-a08f-4161-a288-9abd67ec7823","sequence":{"long":13416},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"405bd994-9a7f-46c8-8169-2c71dee125f4","sequence":{"long":13419},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ff7af0a-4bd6-4052-aa1b-062001bb5645","sequence":{"long":13418},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46a28793-c4e8-453c-80ba-7fe213fc01c4","sequence":{"long":13421},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"699f39ff-a601-4e91-9be7-1645ed5bff32","sequence":{"long":13420},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eea88a23-c9a3-4099-85ea-527d82ea2877","sequence":{"long":13422},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f3f4f8e-70a4-42b4-929e-ff436c1d7660","sequence":{"long":13423},"type":"EVENT_READ","threadId":{"int":100222},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c5bf0d8-c451-44bc-b652-914228aa5acb","sequence":{"long":13424},"type":"EVENT_READ","threadId":{"int":100222},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a266413-8ed0-4800-bf59-7d1feb6ddec5","sequence":{"long":13425},"type":"EVENT_READ","threadId":{"int":100222},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3666},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e9320c8-6abc-4252-822d-e851d9666061","sequence":{"long":13426},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3719},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17ba3daf-3a4c-4cae-afc0-0097d1ec6ee8","sequence":{"long":13427},"type":"EVENT_WRITE","threadId":{"int":100222},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfa4ec99-b15b-423c-bfe1-43b04d74b1cc","sequence":{"long":13428},"type":"EVENT_READ","threadId":{"int":100222},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37aa906b-6d20-49dc-91b1-4a5d1761a60d","sequence":{"long":13429},"type":"EVENT_READ","threadId":{"int":100222},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6a105cc-4d00-4545-9ff3-f944105054f9","sequence":{"long":13430},"type":"EVENT_READ","threadId":{"int":100222},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dcd5e79-696e-46a3-9f4d-ac2ed91d0c2c","sequence":{"long":13431},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3797e270-9e77-4e48-a163-d18a23c8476e","sequence":{"long":13432},"type":"EVENT_WRITE","threadId":{"int":100222},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95367401-1267-421b-ae7c-72d0e742c662","sequence":{"long":13433},"type":"EVENT_READ","threadId":{"int":100222},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91f371d9-3ea9-48bb-a422-a5bc6f1f285e","sequence":{"long":13434},"type":"EVENT_SENDTO","threadId":{"int":100222},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17127","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5a1bc2b-e3a7-4ef7-ac1b-6683cd4fd227","sequence":{"long":13435},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17127","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d02f531-fbd3-4929-a599-b00a2d9240f8","sequence":{"long":13436},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320124659723,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"984e5c00-ba24-4438-8a1c-2bbd381dcd98","sequence":{"long":13437},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320134129462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5dfefcd-8098-418f-85cd-d5e0de3b1581","sequence":{"long":13438},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320134129462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50af74c3-226d-4663-9059-1b5725e2b16e","sequence":{"long":13439},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320134129462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"823b428e-0e57-4083-91d1-01474903e15d","sequence":{"long":13440},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320134129462,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ece71dd8-43ad-40f7-9c4f-c6d64d6c9e97","sequence":{"long":13441},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320554892025,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc8d4cc6-8431-44de-a081-7458a91582c1","sequence":{"long":13442},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320554892025,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17128","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b1b416d-29f0-4c6f-84f7-50b7a4bccddc","sequence":{"long":13443},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320554892025,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17129","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"545987fb-bac8-4327-8957-579ae3205285","sequence":{"long":13444},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320554892025,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17130","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd633f46-ef5c-49b7-b949-86959c49a61e","sequence":{"long":13445},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320554892025,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17131","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdf7d4a6-66b9-49b3-8bc5-75940a2f4d15","sequence":{"long":13446},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320554892025,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17128","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da835430-f8d8-423f-b394-a97ca4bf5688","sequence":{"long":13447},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320554892025,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17129","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"583b016c-2ea5-45bc-88de-eaca03950c96","sequence":{"long":13448},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320554892025,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17130","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"769ef801-52be-451d-b499-06ff2dbcff1a","sequence":{"long":13449},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584320554892025,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17131","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42c9c669-45ab-426e-9234-feac4613be45","sequence":{"long":13450},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584321103989747,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":831003},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc74bd15-7f00-4d79-96fd-adeec2ec7731","sequence":{"long":13451},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322114391625,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":831369},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5af31a91-b47d-42ec-80ee-823b639ffa8b","sequence":{"long":13452},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":831369},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2540f18e-7715-47d0-83b2-38094d579a3c","sequence":{"long":13454},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9630a358-2f99-44f8-8120-3939b5bd25f0","sequence":{"long":13453},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c75ed46a-373e-48b1-b23b-72fb9bf06a61","sequence":{"long":13456},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5798b6a5-439c-4a4e-bcc0-a88dbd987eba","sequence":{"long":13455},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c288395b-69f5-4398-964b-49e273d09a55","sequence":{"long":13458},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32f5c9b9-3431-4d1f-9ba0-2bdcd7531095","sequence":{"long":13457},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4059dca5-46c5-45b1-97ce-cd00a428ccc2","sequence":{"long":13459},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"805b2ad6-39c6-4503-adc2-9dee7078fdc5","sequence":{"long":13460},"type":"EVENT_READ","threadId":{"int":100223},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d385200d-e4ed-45bc-a3d1-e379a17b3997","sequence":{"long":13461},"type":"EVENT_READ","threadId":{"int":100223},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db56b93e-d58c-4f3e-b4c0-3e16fc55dacc","sequence":{"long":13462},"type":"EVENT_READ","threadId":{"int":100223},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3227},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ff4a02e-e8b2-4857-ba3f-23bf2718ac87","sequence":{"long":13463},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3280},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9afea89a-689a-43d2-95e9-e320f0e3f6d3","sequence":{"long":13464},"type":"EVENT_WRITE","threadId":{"int":100223},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d33ffb2-c772-40ee-ae5b-5eb62d7c8386","sequence":{"long":13465},"type":"EVENT_READ","threadId":{"int":100223},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"453f45d3-0f9a-4bb2-807a-c9f1c46a88b1","sequence":{"long":13466},"type":"EVENT_READ","threadId":{"int":100223},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6683e668-8f55-4258-a31f-94508065b069","sequence":{"long":13467},"type":"EVENT_READ","threadId":{"int":100223},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":362},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd3fe1d7-7370-4951-990b-3bc048274649","sequence":{"long":13468},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":415},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4760081-fc60-4c30-a74f-3e9fd68b520c","sequence":{"long":13469},"type":"EVENT_WRITE","threadId":{"int":100223},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a070ab4d-6a26-4c82-bc49-0914e5903b83","sequence":{"long":13470},"type":"EVENT_READ","threadId":{"int":100223},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9e93020-b3ce-4526-9589-c1ebb3c71cd0","sequence":{"long":13471},"type":"EVENT_SENDTO","threadId":{"int":100223},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17132","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7c8737b-d388-400c-82bf-c4abd3af19b7","sequence":{"long":13472},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17132","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f728d323-af01-4986-b732-f361cc7bc481","sequence":{"long":13473},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322124466850,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dab11b10-3a8e-4c72-b3c0-e52c9c9d9fa4","sequence":{"long":13474},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322134182087,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d774d602-f94d-4172-95e7-adbc240ea6d0","sequence":{"long":13475},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322134182087,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a628f0dc-a322-4125-aee0-18aca70283d4","sequence":{"long":13476},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322134182087,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"151c9273-cb7e-4532-85ba-ed94290ae2ea","sequence":{"long":13477},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584322134182087,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3de816be-c4c3-4073-91fb-7a375c52f7c9","sequence":{"long":13478},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584323133997085,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":833804},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e55f0f49-f6c7-4c77-8b50-86fabc64fd51","sequence":{"long":13479},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584323553875697,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccb82d96-cebf-463f-a0de-c5e401a56ea6","sequence":{"long":13480},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584323553875697,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17133","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d811c6d-e6b1-4614-963f-00f645acee62","sequence":{"long":13481},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584323553875697,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17134","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15bbbd4f-020b-4987-997f-a3b2ec5f4220","sequence":{"long":13482},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584323553875697,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17135","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61848ff0-8efc-4f3c-8131-808cef95301e","sequence":{"long":13483},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584323553875697,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17136","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cec177cf-11ad-4a76-acd4-5c78bffe9215","sequence":{"long":13484},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584323553875697,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17133","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"873828a9-1c48-43c0-924d-cbfc96cd9f2f","sequence":{"long":13485},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584323553875697,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17134","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"356957ed-9059-4eb7-a65c-212101621ea5","sequence":{"long":13486},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584323553875697,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17135","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bbf998c-12f0-4150-9161-9b16a702e759","sequence":{"long":13487},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584323553875697,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17136","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc92af01-ac66-4a87-aade-07e26c7a47bf","sequence":{"long":13488},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":833804},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59db42f4-c633-4e80-9ac5-b9763e05bb4f","sequence":{"long":13490},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fa57c4b-a980-4b3d-b468-896719003c96","sequence":{"long":13489},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01f5359f-0b03-47df-afa3-7398805543f9","sequence":{"long":13492},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2022acb2-e9e9-462d-894e-af4c8e92fa6f","sequence":{"long":13491},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12645f07-9830-44c3-a182-e2e613b68160","sequence":{"long":13493},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9641dd17-a528-4de4-b232-5655bc501388","sequence":{"long":13494},"type":"EVENT_READ","threadId":{"int":100224},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8b51905-5991-464f-8120-7ac28eb521ad","sequence":{"long":13495},"type":"EVENT_READ","threadId":{"int":100224},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7acc5c5d-1a30-4741-9040-1f192df00b43","sequence":{"long":13496},"type":"EVENT_READ","threadId":{"int":100224},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2431},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ed73b07-cac2-40c4-81ba-5e49a6c89c05","sequence":{"long":13497},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2484},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"556b7d2a-d734-442b-9763-db04e4dde2d8","sequence":{"long":13498},"type":"EVENT_WRITE","threadId":{"int":100224},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f974a38-c7ae-4955-a1b5-5b263f611e90","sequence":{"long":13499},"type":"EVENT_READ","threadId":{"int":100224},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b31ba53-d49c-43aa-8323-545ca3f341be","sequence":{"long":13500},"type":"EVENT_SENDTO","threadId":{"int":100224},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17137","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aad53370-fb68-4f5a-a048-4bff6f1bf5d4","sequence":{"long":13501},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17137","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"438306fe-2e01-4ae8-adfd-2274af76a5fa","sequence":{"long":13502},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8157565-d832-4246-af10-cd6b17203782","sequence":{"long":13503},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d894adb3-d5fa-4d13-8c02-664189296ea8","sequence":{"long":13504},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324124902872,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0d7c778-1078-4953-ad35-4ab3949ec88c","sequence":{"long":13505},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584324153868449,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":836511},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec26e59e-2f2e-4382-b906-94408cf5c6ec","sequence":{"long":13506},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584325164080546,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":836873},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1319572c-a950-4f0e-ac33-e7db5e138c82","sequence":{"long":13507},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":836873},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f39727f3-9f0e-4471-99ce-9c878aef127b","sequence":{"long":13509},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bb8842e-89c9-4f4d-8d2f-5abf1b609bd7","sequence":{"long":13508},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eadd6fc8-21bf-4e73-b37c-e43216b187cd","sequence":{"long":13511},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac6e9ea8-0df7-4355-8a1d-47828505938d","sequence":{"long":13510},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41771ce6-00a2-4e0a-bff4-c89637e669fc","sequence":{"long":13513},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bbbe2e6-ec34-49c8-8c62-4984beb88f7c","sequence":{"long":13512},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"103c8eea-5600-46aa-9f56-6ab1f079d581","sequence":{"long":13514},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c30a63c2-4a0e-4ba7-bee6-3aa6b18dd1b2","sequence":{"long":13515},"type":"EVENT_READ","threadId":{"int":100225},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad2de6a8-c9f2-453f-88e2-44c01d6d007d","sequence":{"long":13516},"type":"EVENT_READ","threadId":{"int":100225},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3413fe6-c96d-440a-972e-6d891c1f5847","sequence":{"long":13517},"type":"EVENT_READ","threadId":{"int":100225},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2703},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95ec4a29-ae09-483a-83f6-28d81ce355c6","sequence":{"long":13518},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2756},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf52a9df-f61e-4c7a-804b-140dff867944","sequence":{"long":13519},"type":"EVENT_WRITE","threadId":{"int":100225},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d608fb0d-340d-4364-989e-ab2604f04d17","sequence":{"long":13520},"type":"EVENT_READ","threadId":{"int":100225},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99da1242-5054-43d2-b413-66fb5615c453","sequence":{"long":13521},"type":"EVENT_READ","threadId":{"int":100225},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad60df5e-c60f-4975-b967-6ae40d92af87","sequence":{"long":13522},"type":"EVENT_READ","threadId":{"int":100225},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c09df8b1-f2ae-476d-b017-f498f57f1f11","sequence":{"long":13523},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d9013ed-e401-4f2e-906c-a4f32830d600","sequence":{"long":13524},"type":"EVENT_WRITE","threadId":{"int":100225},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2124330-6a7f-4a01-a8dc-02e94cd16396","sequence":{"long":13525},"type":"EVENT_READ","threadId":{"int":100225},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a532db3-72e5-43f7-9da0-39a3dda84957","sequence":{"long":13526},"type":"EVENT_SENDTO","threadId":{"int":100225},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17138","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25e6601c-3d2b-447a-990f-37c5c8ebf173","sequence":{"long":13527},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17138","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2022a58e-ad0e-44a0-ae4e-dd25ad484fc9","sequence":{"long":13528},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46d07f10-60cc-4fe3-bea0-f0f0f2d37ee3","sequence":{"long":13529},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73458ac4-8ce8-43a2-966a-044f9bd7af0f","sequence":{"long":13530},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326124196963,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b22ea35-2e59-42bd-9428-407e26755d83","sequence":{"long":13531},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326134645765,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d998f921-e03b-4d6e-87c8-c708147842b8","sequence":{"long":13532},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326134645765,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91a3b3ee-58cf-4d19-9e1c-f69b3c11bf50","sequence":{"long":13533},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326183959785,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":839311},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"604ce3a9-516f-4269-9313-2232ccc87c9a","sequence":{"long":13534},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326554340004,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af776400-de8d-478a-8a73-9d705501519a","sequence":{"long":13535},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326554340004,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17139","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97054a3d-2da7-4520-b641-14090a223dc8","sequence":{"long":13536},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326554340004,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17140","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a040ccb-9dbe-4c77-96c0-186fc713edbe","sequence":{"long":13537},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326554340004,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17141","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfcef65b-0cc2-4dd2-8d43-fdf8335316e2","sequence":{"long":13538},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326554340004,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17142","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a26b9288-1368-454f-be78-59a1e3abd49d","sequence":{"long":13539},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326554340004,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17139","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ac92c53-aa9c-4267-bfd1-6b372f708f1f","sequence":{"long":13540},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326554340004,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17140","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cc11d80-9a7c-4ea5-9a68-6023547f481a","sequence":{"long":13541},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326554340004,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17141","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36732139-0db5-4e38-917d-6646fdacd8d5","sequence":{"long":13542},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584326554340004,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17142","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51301e25-e706-4e72-bf14-1f0b8746b64f","sequence":{"long":13543},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584327194793165,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":840506},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a02ba7d4-a45a-4f55-a738-7ac723c4cd3b","sequence":{"long":13544},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":840506},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d9cf388-24d7-4a6d-9417-96f9def40310","sequence":{"long":13546},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71a4a243-7edd-4b83-89f2-bb570b3ead64","sequence":{"long":13545},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4060f280-dc93-40d1-b134-c60c94612421","sequence":{"long":13548},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de577d37-355f-44fd-b0ec-5d289825bfab","sequence":{"long":13547},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aae643ae-2bf9-49c4-b7c0-75f5d346b788","sequence":{"long":13550},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97b9900e-d6e6-4276-8336-64a9f73a9348","sequence":{"long":13549},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8e6dbad-049a-4bf8-8673-2c71e96dd04b","sequence":{"long":13551},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2541f65f-2789-4090-ab3d-d7c4714b83c4","sequence":{"long":13552},"type":"EVENT_READ","threadId":{"int":100226},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"381938bb-4907-464b-b3c6-89011e16cdc0","sequence":{"long":13553},"type":"EVENT_READ","threadId":{"int":100226},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7614feef-1023-44fd-a0ae-7677c8beceb1","sequence":{"long":13554},"type":"EVENT_READ","threadId":{"int":100226},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2434},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df0128d4-8587-4714-ad33-1239efe377a9","sequence":{"long":13555},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2487},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"deb36719-fe1d-417d-9d05-1639da445023","sequence":{"long":13556},"type":"EVENT_WRITE","threadId":{"int":100226},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39ed3cfb-2c70-4d16-8df3-70df72cf0fac","sequence":{"long":13557},"type":"EVENT_READ","threadId":{"int":100226},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b537f599-4d12-4df6-b5c2-4545bcf61593","sequence":{"long":13558},"type":"EVENT_READ","threadId":{"int":100226},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51abb80d-ec46-4a6c-88bf-3d5e4dcaeae1","sequence":{"long":13559},"type":"EVENT_READ","threadId":{"int":100226},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1191},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17144833-2e84-4e14-8c5e-090ff142a74e","sequence":{"long":13560},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1244},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b73ab9bf-a9d2-4c45-94d2-53ea081f7995","sequence":{"long":13561},"type":"EVENT_WRITE","threadId":{"int":100226},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6dd3b68-e452-4dec-8929-47b6687d9929","sequence":{"long":13562},"type":"EVENT_READ","threadId":{"int":100226},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"939f8a1a-7019-4095-afa5-9a8290ded1e0","sequence":{"long":13563},"type":"EVENT_SENDTO","threadId":{"int":100226},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17143","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"494bd6f9-e3c3-4668-88c4-227e45b6e0c4","sequence":{"long":13564},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17143","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8778d86b-2a70-4c3c-b118-bc7e04943cd5","sequence":{"long":13565},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42ef5964-1c7c-4877-ac07-8ea35ed618c0","sequence":{"long":13566},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab51254d-c309-4d4e-9065-0fb18c545290","sequence":{"long":13567},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328124030397,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9dd5c91-a074-4b1a-a9c2-c2580e31cda7","sequence":{"long":13568},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328134040024,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3048dd3e-7267-46eb-9819-a537d2f64b9e","sequence":{"long":13569},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328134040024,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f175e89e-9358-42e4-80b2-ecb36f686c95","sequence":{"long":13570},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584328213889521,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":842938},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3dbf2a15-fe33-464b-97b7-1a7f59e8afd3","sequence":{"long":13571},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584329223836438,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":843300},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"634dbcc2-0280-46eb-b709-0fc5164aa569","sequence":{"long":13572},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584329554107803,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f85c04f6-a66c-47de-89ed-55cf7ac398e1","sequence":{"long":13573},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584329554107803,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17144","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d6fa474-aa86-4e6b-94ed-c7eb72a5b4a4","sequence":{"long":13574},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584329554107803,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17145","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82e1e150-40a1-4f45-aa55-01ff0e44740b","sequence":{"long":13575},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584329554107803,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17146","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b52894ce-e1d9-4ff7-9e50-3c8aa53ff457","sequence":{"long":13576},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584329554107803,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17147","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"649c0f44-1b73-48b1-b223-99227a9b9325","sequence":{"long":13577},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584329554107803,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17144","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bfd0b4a-0882-4879-9114-07e337af4f85","sequence":{"long":13578},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584329554107803,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17145","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42f61b33-8d8c-4bbe-9223-8c2f26df779a","sequence":{"long":13579},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584329554107803,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17146","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e610337-a784-47bf-8276-af08195a89c3","sequence":{"long":13580},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584329554107803,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17147","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"505a2f9b-3b4f-4152-86ce-c084da480a67","sequence":{"long":13581},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":843300},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e161795c-84fe-411b-81d0-4b460ffe70f3","sequence":{"long":13583},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c42b58e2-db21-4993-80dc-29d4193a99d8","sequence":{"long":13582},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a561f53-ae0b-43c8-9909-1377e6b193d3","sequence":{"long":13585},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"becf729e-21b3-4e66-9308-e08c867aade5","sequence":{"long":13584},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7446e30-2caa-4e9a-b963-f96488ee1427","sequence":{"long":13587},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77efdb1c-3933-41d7-93e3-a0314a9aa38b","sequence":{"long":13586},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4584350d-67f5-47bd-b825-cc45ca1cb42d","sequence":{"long":13588},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8b1a993-aa0c-40aa-94a9-50ebcdcd2955","sequence":{"long":13589},"type":"EVENT_READ","threadId":{"int":100227},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebd7a37f-651e-43dd-978a-d74b11814816","sequence":{"long":13590},"type":"EVENT_READ","threadId":{"int":100227},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e5c71a3-953b-49fa-8f0d-40a9d55f838e","sequence":{"long":13591},"type":"EVENT_READ","threadId":{"int":100227},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2428},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"355b69fe-16e2-4cdf-836c-bde63aa82870","sequence":{"long":13592},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2481},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8079bcce-95c3-422a-8cf8-973182034cf6","sequence":{"long":13593},"type":"EVENT_WRITE","threadId":{"int":100227},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1adbc32e-fefe-4f34-91de-b9b3fffcad5f","sequence":{"long":13594},"type":"EVENT_READ","threadId":{"int":100227},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6e7b3d5-d8e2-4ba9-a067-728d2811dd96","sequence":{"long":13595},"type":"EVENT_READ","threadId":{"int":100227},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e524bf58-d2b4-469a-8554-b22dc91698ee","sequence":{"long":13596},"type":"EVENT_READ","threadId":{"int":100227},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fefa951-27e4-4806-962e-64904df2c017","sequence":{"long":13597},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60f38360-d138-4681-bc26-4cca20cad3a9","sequence":{"long":13598},"type":"EVENT_WRITE","threadId":{"int":100227},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eeaa20f2-a354-458a-af7f-aab6760dedee","sequence":{"long":13599},"type":"EVENT_READ","threadId":{"int":100227},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4d19d5d-73ce-44d6-8c02-d39609f9a246","sequence":{"long":13600},"type":"EVENT_SENDTO","threadId":{"int":100227},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17148","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdbf9187-86a6-467d-86c4-3d7b1c4ce9ab","sequence":{"long":13601},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17148","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1060c09f-5554-4f17-b789-d74f1c386289","sequence":{"long":13602},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330124359206,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6eb12d58-d23f-4cd8-b529-8b3e69235f19","sequence":{"long":13603},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330133942768,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce08d73e-f011-4543-97fd-71068a63d8cd","sequence":{"long":13604},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330133942768,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7ae8540-688c-467a-9886-a37798fc2d4f","sequence":{"long":13605},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330133942768,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"438513fe-53cc-488f-8bcf-90ce91417157","sequence":{"long":13606},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330133942768,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8288007-c79e-4e53-8b0c-9f8a329a3987","sequence":{"long":13607},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584330243929659,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":846613},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b947b5b-e1ea-4322-b049-5a8144db7194","sequence":{"long":13608},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584331254367044,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":846975},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31f073dd-01fe-4eae-b3b5-54708ab4540c","sequence":{"long":13609},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":846975},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc5a2456-150e-4de3-a16c-8972e2c88e88","sequence":{"long":13611},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68f9ae05-9740-4f12-8707-fc12fa5b081d","sequence":{"long":13610},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61c5747d-3367-414f-90eb-d4686950f96c","sequence":{"long":13613},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7d47632-71fa-40b2-89d6-6fc8694dbbd5","sequence":{"long":13612},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4554886c-1a1d-4083-945e-1eb3409d09da","sequence":{"long":13615},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca80456f-a053-45c4-877f-07bbc7bac59c","sequence":{"long":13614},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f5d3b6d-7444-412a-99fa-7760802dc6d9","sequence":{"long":13616},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2259e054-9820-4e4f-86ee-efa6b20db26c","sequence":{"long":13617},"type":"EVENT_READ","threadId":{"int":100228},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44f5bb3f-7ae8-4ad4-a6b7-010188e972ff","sequence":{"long":13618},"type":"EVENT_READ","threadId":{"int":100228},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9a1e257-3b9e-45d4-a9b6-7998ac01d454","sequence":{"long":13619},"type":"EVENT_READ","threadId":{"int":100228},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3309},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"205aa472-3fcb-491d-9ab5-a3db7a09b47c","sequence":{"long":13620},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3362},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ee505c5-d1ff-457c-b7a7-8cbd2261e3f9","sequence":{"long":13621},"type":"EVENT_WRITE","threadId":{"int":100228},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fab2635-d89b-466a-b2d9-3547c0a48c33","sequence":{"long":13622},"type":"EVENT_READ","threadId":{"int":100228},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c68f0199-47e9-458b-8e50-c4fa5d162cd9","sequence":{"long":13623},"type":"EVENT_READ","threadId":{"int":100228},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d553438-7936-42d2-8a24-78d171d8e51e","sequence":{"long":13624},"type":"EVENT_READ","threadId":{"int":100228},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00490323-5d1e-411b-a852-42559efc2cad","sequence":{"long":13625},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bd65c6b-e91e-4769-915c-fbdc00af7744","sequence":{"long":13626},"type":"EVENT_WRITE","threadId":{"int":100228},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d18b41ba-e362-4198-b43b-6fbfe18d6d5b","sequence":{"long":13627},"type":"EVENT_READ","threadId":{"int":100228},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20bb168f-6642-4ace-a8f8-49196a130797","sequence":{"long":13628},"type":"EVENT_SENDTO","threadId":{"int":100228},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17149","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab6d70a5-ca16-4c97-b77a-bad5738dce32","sequence":{"long":13629},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17149","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc6c07ef-fae6-4572-88c2-86e8fad9ae43","sequence":{"long":13630},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332124159729,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f934ca4-e13f-4271-b472-03e0112948c2","sequence":{"long":13631},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332133971845,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a01d92e-bbc7-4c76-a65d-ae1bb691c35b","sequence":{"long":13632},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332133971845,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"438b8431-353b-402a-89a2-78a9fa1778a5","sequence":{"long":13633},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332133971845,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b99e78fb-c9a4-4257-999e-a1768c09423e","sequence":{"long":13634},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332133971845,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a994541-4253-4dc9-93e8-f4a6b28ae5ea","sequence":{"long":13635},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332273954414,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":849407},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c95d50f1-e52e-48e3-8698-b4eee34e0724","sequence":{"long":13636},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332553866890,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"699b8b14-0849-4b7e-97eb-883c1f34eebe","sequence":{"long":13637},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332553866890,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17150","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8daf9d7-7856-4571-8aae-338e1bfeec02","sequence":{"long":13638},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332553866890,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17151","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd401faa-16e2-4db6-89e5-39a1ce926f37","sequence":{"long":13639},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332553866890,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17152","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1aea05c5-4793-44f1-929d-b7ba5e5b13a0","sequence":{"long":13640},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332553866890,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17153","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"096d398e-dc01-459f-b370-70db17e5d97c","sequence":{"long":13641},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332553866890,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17150","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b36d7f38-e738-42d6-814c-13fbc1eeea8b","sequence":{"long":13642},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332553866890,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17151","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d12ef34-a852-459b-86c5-6e40643828c1","sequence":{"long":13643},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332553866890,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17152","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77bf5914-17b7-430d-b3eb-3ed12321d58d","sequence":{"long":13644},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584332553866890,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17153","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1976df2-a6bf-477f-8c5d-810707b828c7","sequence":{"long":13645},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584333283975297,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":850585},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a86e991a-3145-4e2a-a25d-bd11c128786f","sequence":{"long":13646},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":850585},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00f1b6d8-4a2d-4155-a544-c4a2cb8cf18d","sequence":{"long":13648},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e950f37d-c9e3-49ee-9b9c-9efdba7f77f2","sequence":{"long":13647},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f48a771e-bda7-4a45-a11c-8b8915e306d2","sequence":{"long":13650},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4de37394-06b7-4d4f-a6ab-68e1ff9e2f84","sequence":{"long":13649},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e39bb3fe-0b55-47e3-a8c4-c460a1774d8b","sequence":{"long":13652},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce7f884a-298b-4801-b8dc-fc30b4731c72","sequence":{"long":13651},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"209425b8-8035-406f-a5b2-2a2fcbf5d795","sequence":{"long":13653},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95711669-56eb-4693-8023-a12f3370a471","sequence":{"long":13654},"type":"EVENT_READ","threadId":{"int":100229},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1329a81-b09a-42fb-9b15-b5b196772218","sequence":{"long":13655},"type":"EVENT_READ","threadId":{"int":100229},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"662d43a8-27d7-4e5f-adb7-8948b60b5eaa","sequence":{"long":13656},"type":"EVENT_READ","threadId":{"int":100229},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2428},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82b7084d-62a9-4d6c-bca1-da409f616881","sequence":{"long":13657},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2481},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc7a2885-1fd9-4449-a101-52bbe288feb0","sequence":{"long":13658},"type":"EVENT_WRITE","threadId":{"int":100229},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31f352a0-b4e7-474f-9b1b-6478eca4f85c","sequence":{"long":13659},"type":"EVENT_READ","threadId":{"int":100229},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64fc8029-10e2-4e8c-aa2c-72643bca78ed","sequence":{"long":13660},"type":"EVENT_READ","threadId":{"int":100229},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc473bfd-a216-4f83-888b-1e3312c549db","sequence":{"long":13661},"type":"EVENT_READ","threadId":{"int":100229},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1174},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f7640da-f66f-4e7b-8ae6-f4877c8df57f","sequence":{"long":13662},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1227},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ace3bef-1416-4c32-8122-af32057b4d9b","sequence":{"long":13663},"type":"EVENT_WRITE","threadId":{"int":100229},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"747dbc7a-deff-4214-ad72-5cdcc058b0c9","sequence":{"long":13664},"type":"EVENT_READ","threadId":{"int":100229},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adda7085-c2fe-4063-a0ec-2fe6d549ae7d","sequence":{"long":13665},"type":"EVENT_SENDTO","threadId":{"int":100229},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17154","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c78f25a-2db7-4614-9e50-69aae44382b2","sequence":{"long":13666},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17154","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea5c830d-2470-46d0-9e46-23c3e5a8bf89","sequence":{"long":13667},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9097f74f-9d3d-4847-b54e-30c5c7c1efd6","sequence":{"long":13668},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ab654f3-ec0d-42dc-a27e-fb5135da0a76","sequence":{"long":13669},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334124249050,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"965e70f0-9f62-46bc-822c-51c8b9d1fae2","sequence":{"long":13670},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334134586908,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7106b9d-1379-406c-8ff7-bc84954bb75b","sequence":{"long":13671},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334134586908,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51e0fa10-7046-4669-b484-b4324640ca5f","sequence":{"long":13672},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584334304267328,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":853018},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c215b936-467d-11e9-aec3-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2a3295c-8ce7-4c3d-8029-4d975d607de1","sequence":{"long":13673},"type":"EVENT_WRITE","threadId":{"int":100167},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"c215b936-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584335254600109,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"29","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"c215b91e-467d-11e9-aec3-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"004ca2a2-89be-4a93-ba3e-887d4bf8c185","sequence":{"long":13674},"type":"EVENT_READ","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"c215b91e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584335254600109,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"28","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"261c8712-2740-4c2f-8434-7c237c41cf1a","sequence":{"long":13675},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"c215b936-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584335254600109,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"29","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"612f0842-5f81-49d1-9f6e-508100b2ae7e","sequence":{"long":13676},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"c215b91e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584335254600109,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"28","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6467f793-e593-440f-89d0-b207371049b3","sequence":{"long":13677},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584335313843426,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":853753},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80e6e108-5299-42c7-b8cd-f66d9b555c70","sequence":{"long":13678},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584335554194831,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1139ba8-e1e4-404a-a4e1-f45cdba84d54","sequence":{"long":13679},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584335554194831,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17155","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e869f671-dd1e-4e5a-86bf-d87641908920","sequence":{"long":13680},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584335554194831,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17156","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d597134-fdf8-419c-8901-1222778c21f8","sequence":{"long":13681},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584335554194831,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17157","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30a1974e-2578-4568-b93f-00fba7e65d20","sequence":{"long":13682},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584335554194831,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17158","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1ab6f80-ceda-47ca-8608-78b6a34d3ae1","sequence":{"long":13683},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584335554194831,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17155","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef91e4fa-d5b4-4d24-b18f-0c4053f340cd","sequence":{"long":13684},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584335554194831,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17156","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9054e5e-8192-4fbc-a1ef-2c333ff56b17","sequence":{"long":13685},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584335554194831,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17157","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72a8152e-bc36-4be8-aa85-50ed557869ff","sequence":{"long":13686},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584335554194831,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17158","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"426e2088-95c4-4186-b4c0-3d8a5e554d5f","sequence":{"long":13687},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":853753},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23ed9b62-7dec-41b8-a43d-8218b4d00a66","sequence":{"long":13689},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47aed66f-2e9d-4cbd-ae55-ecbeed7ba072","sequence":{"long":13688},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d26dd956-39cb-4414-a5e9-4f4a62f9cc20","sequence":{"long":13691},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9b866fc-1c6e-4cfd-a8b2-08bd390f50d4","sequence":{"long":13690},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c7593b1-4df4-45ea-85bf-8ef5049465e1","sequence":{"long":13693},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6a5abe6-ecf6-4c30-b959-97467ed4d071","sequence":{"long":13692},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8dfe901-3be7-4c83-9c6e-f68a93eefcd7","sequence":{"long":13694},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58bb7543-8e96-47ad-bbd3-8219f3a73165","sequence":{"long":13695},"type":"EVENT_READ","threadId":{"int":100230},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b0aadf1-f021-4e42-ab39-58fab4f5b8d2","sequence":{"long":13696},"type":"EVENT_READ","threadId":{"int":100230},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ae54051-f597-4447-9acd-e38587e68a23","sequence":{"long":13697},"type":"EVENT_READ","threadId":{"int":100230},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2429},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b64a6f40-024f-410c-bef0-4a73ca16c221","sequence":{"long":13698},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2482},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b0b5905-c848-4298-baeb-6d4783bf8dc5","sequence":{"long":13699},"type":"EVENT_WRITE","threadId":{"int":100230},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19b8df75-fd49-4fb2-b158-e57781b02001","sequence":{"long":13700},"type":"EVENT_READ","threadId":{"int":100230},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"178f210c-1bad-4eb1-a191-937f54b0ec6f","sequence":{"long":13701},"type":"EVENT_READ","threadId":{"int":100230},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72a73495-c642-46d5-85cd-fab5886164ec","sequence":{"long":13702},"type":"EVENT_READ","threadId":{"int":100230},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":731},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3adb089c-7765-48c4-aef3-5069d660f579","sequence":{"long":13703},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":784},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdfc40f2-abd2-426e-81e2-d60c340c7023","sequence":{"long":13704},"type":"EVENT_WRITE","threadId":{"int":100230},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f81a0f59-e4d8-4167-ae74-9f92aa27d1df","sequence":{"long":13705},"type":"EVENT_READ","threadId":{"int":100230},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cb81926-515e-43a4-ab83-982dd3174a61","sequence":{"long":13706},"type":"EVENT_SENDTO","threadId":{"int":100230},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17159","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ee5b313-1a36-40fd-95b2-6b006f885c86","sequence":{"long":13707},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17159","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9e99151-c0cc-43d8-869c-ffaf3162e817","sequence":{"long":13708},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dc6ec58-bcda-4168-9bb2-67e26865e566","sequence":{"long":13709},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c720927a-dd1f-4189-aab2-635fedb0216a","sequence":{"long":13710},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336124158632,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"991377bb-9f00-4e58-884c-9e189eac9b2a","sequence":{"long":13711},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336133907511,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2de20c0-55d6-4fca-8aaf-5aba0f735262","sequence":{"long":13712},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336133907511,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7771021d-e789-4b5b-a89f-26ccd9a0abf3","sequence":{"long":13713},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584336334065373,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":857069},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48ba0002-c936-43d2-bd8a-2cce37943108","sequence":{"long":13714},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584337343906905,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":857434},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cf10602-56ee-488b-ae5f-2d13c75a030c","sequence":{"long":13715},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":857434},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9927fb88-c319-42c3-bd08-799d5f7ddccc","sequence":{"long":13717},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42aa26fe-ac34-436c-8871-6082c116fbf1","sequence":{"long":13716},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc0fc876-3be8-4fb3-8b00-bced5aaa0fbb","sequence":{"long":13719},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd19f2c7-bf3c-497d-bac6-92fae5534db2","sequence":{"long":13718},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b88eeb7d-b661-4d84-9d88-c18fe2ef376e","sequence":{"long":13721},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3467e912-1065-473d-bec3-ff3bb5649477","sequence":{"long":13720},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45916f58-fe94-4fd5-8ecb-83ab1f3e873d","sequence":{"long":13722},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ba63390-b1e5-48cc-88d7-aa24104f13c0","sequence":{"long":13723},"type":"EVENT_READ","threadId":{"int":100231},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3f18e89-20a8-4930-8bca-89767ffa7ca0","sequence":{"long":13724},"type":"EVENT_READ","threadId":{"int":100231},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c89a2ae-1a36-46be-8cc2-e367d713c35f","sequence":{"long":13725},"type":"EVENT_READ","threadId":{"int":100231},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3312},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7aceaad-3a11-41f8-ba8b-175845a53ad9","sequence":{"long":13726},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3365},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da1ee8cd-ca10-4f79-90cb-077bfeb14a51","sequence":{"long":13727},"type":"EVENT_WRITE","threadId":{"int":100231},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bed71943-ce11-4475-8df0-6150653f7b37","sequence":{"long":13728},"type":"EVENT_READ","threadId":{"int":100231},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4a90977-331d-47d6-946f-3b88d5f9f00b","sequence":{"long":13729},"type":"EVENT_READ","threadId":{"int":100231},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1069a07b-5006-47ba-b387-9efc908a86db","sequence":{"long":13730},"type":"EVENT_READ","threadId":{"int":100231},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8f89b32-c460-44eb-9c6c-bfbe2bc13d78","sequence":{"long":13731},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"075c4c8a-2923-475a-810c-7f4456947b82","sequence":{"long":13732},"type":"EVENT_WRITE","threadId":{"int":100231},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"631e243d-d17f-4245-86ca-fff87ddaca30","sequence":{"long":13733},"type":"EVENT_READ","threadId":{"int":100231},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c94e523-0a1f-496a-be91-6271242123df","sequence":{"long":13734},"type":"EVENT_SENDTO","threadId":{"int":100231},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17160","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d73712fe-24b7-479e-824e-fa250caf800b","sequence":{"long":13735},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17160","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a03fe9b9-f1d9-4a1e-b2b3-850f942f99d7","sequence":{"long":13736},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ece0cae-1f46-4145-9c3e-b7ec942cee07","sequence":{"long":13737},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93573b42-0e6f-4bbb-8065-62a09e79fa8e","sequence":{"long":13738},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338124426783,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e873b26-8af1-4bb3-b38b-252ab01f33ab","sequence":{"long":13739},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338133863464,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d0f027b-7577-4082-ae13-6c13478a1135","sequence":{"long":13740},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338133863464,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21098b8f-9b29-4020-80f4-942b243a3628","sequence":{"long":13741},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338363978514,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":859872},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"027b2f16-c230-488c-ba79-722c87914379","sequence":{"long":13742},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338554217516,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c422152e-de11-45b6-ad05-4441b6d40431","sequence":{"long":13743},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338554217516,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17161","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7d9ba79-71fb-42d7-9957-2f7b70203615","sequence":{"long":13744},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338554217516,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17162","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4864babd-737f-4600-8212-0a40da40c8db","sequence":{"long":13745},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338554217516,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17163","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d4e2c99-de36-436a-85d1-c57351de2c0e","sequence":{"long":13746},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338554217516,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17164","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0c677cf-ecb3-4f24-9237-a2ccc33d72cf","sequence":{"long":13747},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338554217516,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17161","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33b98cdb-241e-44ce-8da8-c874bb09060f","sequence":{"long":13748},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338554217516,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17162","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82aa0544-9176-4209-8d91-51331230a9ff","sequence":{"long":13749},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338554217516,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17163","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"050aa441-c349-404d-8642-bb2b39a73115","sequence":{"long":13750},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584338554217516,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17164","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ef7523b-2878-4e70-8f1b-96e8f6edd6d8","sequence":{"long":13751},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584339374520842,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":861056},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74bb765c-7009-4ec1-be7d-a0c46e91681c","sequence":{"long":13752},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":861056},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7127bb62-a365-4dde-b293-e108b39cc324","sequence":{"long":13754},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd8ec6d5-daf2-42f8-9c24-db9b73b7b16a","sequence":{"long":13753},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d9d6b7e-e474-43d9-aba8-db122543b418","sequence":{"long":13756},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d018f583-be9e-476d-bd9f-9232726a36ac","sequence":{"long":13755},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a39ce8df-5a36-46a6-951e-0692dc59b5f8","sequence":{"long":13758},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4abb9c3-46c5-4798-aa81-d8e1ed4ec94c","sequence":{"long":13757},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bad923d0-43ac-4f4a-8888-c00cc66143b4","sequence":{"long":13759},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d892b33-c2e9-4161-8280-89b097cf4749","sequence":{"long":13760},"type":"EVENT_READ","threadId":{"int":100232},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c259f712-a778-471c-9c5e-2c88f8a1a4a9","sequence":{"long":13761},"type":"EVENT_READ","threadId":{"int":100232},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20379668-390d-4e9b-840b-bf090510b7be","sequence":{"long":13762},"type":"EVENT_READ","threadId":{"int":100232},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2434},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a630732d-0033-4d1b-b2df-5ba386d3cf7f","sequence":{"long":13763},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2487},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b31f8880-f484-4129-9d5d-b8a64af15f2a","sequence":{"long":13764},"type":"EVENT_WRITE","threadId":{"int":100232},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38c2284e-058a-4bb5-adac-ac7109b78724","sequence":{"long":13765},"type":"EVENT_READ","threadId":{"int":100232},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2038deed-8332-4b06-bfb2-8664aa270a46","sequence":{"long":13766},"type":"EVENT_READ","threadId":{"int":100232},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26402beb-065b-4499-9340-7b2fbfdc55e0","sequence":{"long":13767},"type":"EVENT_READ","threadId":{"int":100232},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1180},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7645cc3e-45de-4911-ac4d-3e4d2136b5f3","sequence":{"long":13768},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1233},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13482586-21e2-496c-9816-6ac069b0c784","sequence":{"long":13769},"type":"EVENT_WRITE","threadId":{"int":100232},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8c8c1c1-4066-48cc-80d4-10c82fe4fea1","sequence":{"long":13770},"type":"EVENT_READ","threadId":{"int":100232},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"063e9f8a-b015-4de6-a871-6635a01cea19","sequence":{"long":13771},"type":"EVENT_SENDTO","threadId":{"int":100232},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17165","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d589e80b-6653-474b-9783-32605df5ffd0","sequence":{"long":13772},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17165","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8fa0dcf-82a0-42b9-9009-ac8ab5622cc1","sequence":{"long":13773},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340123996519,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b023616-d7e9-4beb-9874-857a69874fbf","sequence":{"long":13774},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340134619345,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"429f6a6e-4373-44bc-a3a2-a5cc14537f43","sequence":{"long":13775},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340134619345,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe70b609-23a0-41dd-888e-59e18c3af675","sequence":{"long":13776},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340134619345,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"400c542f-6951-4326-a129-398589ab4293","sequence":{"long":13777},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340134619345,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3706fd8f-bf88-450d-95ec-f031979939f1","sequence":{"long":13778},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584340394253710,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":863483},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c58f6030-259e-4a9a-a302-0cf7a2df54bd","sequence":{"long":13779},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584341404029043,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":863848},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac84ce5e-e420-4b3b-8b62-f0527f7a19d7","sequence":{"long":13780},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584341553840531,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b897ec0-fc74-4e5a-95b4-29f7d550a77a","sequence":{"long":13781},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584341553840531,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17166","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"441ff289-6120-4136-9c82-556f4b57ace7","sequence":{"long":13782},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584341553840531,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17167","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bb30936-f228-4f23-aaf9-48ebcbd5c3fc","sequence":{"long":13783},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584341553840531,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17168","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecee3d3f-65b9-48bd-97e0-a0e8e61163bc","sequence":{"long":13784},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584341553840531,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17169","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b604c49e-5344-4f6e-a7b1-eb0b794e5e6a","sequence":{"long":13785},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584341553840531,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17166","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbd442dd-6a16-446b-99eb-5e50d0451160","sequence":{"long":13786},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584341553840531,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17167","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebfd3905-77bc-4452-ad0a-4949f80c4119","sequence":{"long":13787},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584341553840531,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17168","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff12da95-720a-43d8-9398-bf264d685bbb","sequence":{"long":13788},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584341553840531,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17169","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b63c135a-45ac-429b-8314-699e1d09ca95","sequence":{"long":13789},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":863848},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2875a22d-cf36-4f39-8f9f-03df9a019447","sequence":{"long":13791},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8698814-e52d-4441-9667-2916458d43a4","sequence":{"long":13790},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66ffa581-1fdc-44ad-9cef-a110425bd3d7","sequence":{"long":13793},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2570da77-195c-483c-a789-d13ae69740a2","sequence":{"long":13792},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bdd8f15-3b1a-4ab6-be58-85414cbae97a","sequence":{"long":13795},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2409a517-98b4-4b02-9dd8-86f291e997b2","sequence":{"long":13794},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a0be276-741c-4191-931a-6299ae082f23","sequence":{"long":13796},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47bfbc4b-38b6-4952-8d19-e863758cd256","sequence":{"long":13797},"type":"EVENT_READ","threadId":{"int":100233},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61f5117f-1edf-42c5-af8c-a229639fbf6a","sequence":{"long":13798},"type":"EVENT_READ","threadId":{"int":100233},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1f9adbc-a34b-4d12-96b3-51f54a1f9a19","sequence":{"long":13799},"type":"EVENT_READ","threadId":{"int":100233},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2423},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bee18ab6-c1f0-4925-b772-ef66404ac6f3","sequence":{"long":13800},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2476},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98408b48-4935-471d-8acd-a88ede248942","sequence":{"long":13801},"type":"EVENT_WRITE","threadId":{"int":100233},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c243a66-90a9-4da7-8a1c-67d8799bd62d","sequence":{"long":13802},"type":"EVENT_READ","threadId":{"int":100233},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9172590d-1129-4244-8296-fb5339218370","sequence":{"long":13803},"type":"EVENT_READ","threadId":{"int":100233},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e50b2bb8-bf7a-4d81-bfd2-0f60c1d48aec","sequence":{"long":13804},"type":"EVENT_READ","threadId":{"int":100233},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4fbc4b8-87e1-4857-9fe5-400c2a889556","sequence":{"long":13805},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd928047-1eb4-4576-9122-b418425d5cf5","sequence":{"long":13806},"type":"EVENT_WRITE","threadId":{"int":100233},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59b796d5-42f3-40bf-a023-52204fd29925","sequence":{"long":13807},"type":"EVENT_READ","threadId":{"int":100233},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce4ad5ef-8666-4f9c-979c-0249e35f2cb6","sequence":{"long":13808},"type":"EVENT_SENDTO","threadId":{"int":100233},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17170","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e567cdd9-e13b-4f4f-9997-1b4304ec7690","sequence":{"long":13809},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17170","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4e78e08-24ef-4e4e-9bcf-19c82d9d2eb6","sequence":{"long":13810},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342124196461,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6de4e86-2eb0-4c49-9a3a-62292c916f5f","sequence":{"long":13811},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342133883155,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95acf1d7-544e-4a27-9412-479c50402d3d","sequence":{"long":13812},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342133883155,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86c953d8-d445-43f3-b4b7-39ab88318749","sequence":{"long":13813},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342133883155,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"704117ad-a8ec-41c6-8923-18e2bc605215","sequence":{"long":13814},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342133883155,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a1baeb5-9318-4c29-bfaa-1b40573ecdc7","sequence":{"long":13815},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584342424290180,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":867158},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f977d54-e9b9-4415-bcc6-e5caa4b7a031","sequence":{"long":13816},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584343434142827,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":867522},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"391a507f-f289-4cd9-b158-e14b08b404cb","sequence":{"long":13817},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":867522},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31fcc4ea-2d58-4ef0-8c02-d2b5a527fbbf","sequence":{"long":13819},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abbf65d4-5df6-4b75-8e39-852fb14c6811","sequence":{"long":13818},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d9665d9-c9e8-4dc0-95ce-1c455b0c6e78","sequence":{"long":13821},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0322be32-c3ca-486a-8732-558473533168","sequence":{"long":13820},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0841bc83-7f57-4508-9be6-de8f9084eb45","sequence":{"long":13823},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df1750f5-553a-4b94-ada5-52342be5fa8f","sequence":{"long":13822},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfdcfba5-b1d2-4bcb-9367-6920cedaa5ee","sequence":{"long":13824},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdd51cda-095c-4cda-977f-bc14ef269fc8","sequence":{"long":13825},"type":"EVENT_READ","threadId":{"int":100234},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0ffacb6-1fa4-47d0-b36a-2cb0d7d0ea63","sequence":{"long":13826},"type":"EVENT_READ","threadId":{"int":100234},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d22169db-1c28-44d1-ab01-369a71cdc213","sequence":{"long":13827},"type":"EVENT_READ","threadId":{"int":100234},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3306},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f59d338-0727-4875-b1bd-c89683d8feec","sequence":{"long":13828},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a929df87-4453-4f89-8e73-fe308425813a","sequence":{"long":13829},"type":"EVENT_WRITE","threadId":{"int":100234},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a6bf78d-93f7-4fc7-9239-8670b83823e8","sequence":{"long":13830},"type":"EVENT_READ","threadId":{"int":100234},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31df6e14-b552-4bd0-a8c8-523d8531d6f6","sequence":{"long":13831},"type":"EVENT_READ","threadId":{"int":100234},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1de5018-d26f-4916-86d2-88fa9da53af2","sequence":{"long":13832},"type":"EVENT_READ","threadId":{"int":100234},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f2a3dda-bef4-4a99-892a-0a90a48b9940","sequence":{"long":13833},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b23fbc8d-2cef-459d-a402-bd0eea675e2a","sequence":{"long":13834},"type":"EVENT_WRITE","threadId":{"int":100234},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2247507-d0c5-4571-92e3-589f3077a4ce","sequence":{"long":13835},"type":"EVENT_READ","threadId":{"int":100234},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d38faa7-cf43-478b-be5c-d2441e1a9107","sequence":{"long":13836},"type":"EVENT_SENDTO","threadId":{"int":100234},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17171","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04c40ab3-a2dd-474e-a841-743e486a4797","sequence":{"long":13837},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17171","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b6c163e-233d-4123-8ee3-7bca5a58b56b","sequence":{"long":13838},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344124257668,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7355fa6-4545-41a1-9ae7-8196ff10487c","sequence":{"long":13839},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344134165236,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e38076b-bfb3-4ab7-8f05-252dfe60c3ef","sequence":{"long":13840},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344134165236,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7fccca6-e25b-4099-a495-ca9f804fc2fa","sequence":{"long":13841},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344134165236,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3321ed2-9242-4b71-a5f4-11603fdfb097","sequence":{"long":13842},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344134165236,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31d76079-ad9d-4651-94a7-f542dc80f27c","sequence":{"long":13843},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344453910507,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":869957},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e228c212-4558-4425-805c-defdba4fde36","sequence":{"long":13844},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344554272571,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b887ed7f-d8b6-46ab-82e1-d3f631c6ceec","sequence":{"long":13845},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344554272571,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17172","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ace49d39-7661-46d4-bdc4-75e11abe50ec","sequence":{"long":13846},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344554272571,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17173","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6a86cf6-d41e-49ec-bf57-8d71ddb6f368","sequence":{"long":13847},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344554272571,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17174","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbe14863-5160-4d72-b7d2-9963f227478c","sequence":{"long":13848},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344554272571,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17175","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bfeb54b-2019-4578-ab93-07f47b749100","sequence":{"long":13849},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344554272571,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17172","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"014dfca5-5590-43ef-93f8-b0e40e4be761","sequence":{"long":13850},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344554272571,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17173","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad749197-909a-4280-be03-d52be873596b","sequence":{"long":13851},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344554272571,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17174","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4afed581-2158-415b-9914-e74264a5b30f","sequence":{"long":13852},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584344554272571,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17175","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9aeecd74-0a5d-4d78-ad5c-a5e11d5fcce4","sequence":{"long":13853},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584345464064441,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":871139},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93d406d7-757a-40f3-92c4-a1549648c20a","sequence":{"long":13854},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":871139},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"baa3134b-e999-4566-b78c-8c3b9e8fa53d","sequence":{"long":13856},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d35c258-3890-4681-b2fd-7bdb1dc350a0","sequence":{"long":13855},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21735ef2-6632-48a0-91f9-cede38d1f024","sequence":{"long":13858},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bf7444f-090e-4094-884d-30bd791e4f02","sequence":{"long":13857},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"621512d2-b2ee-4fe6-938d-2f849d921105","sequence":{"long":13860},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cf8c3e4-7cc5-4007-b81f-e4158bcbe248","sequence":{"long":13859},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ceaa0111-9080-4433-9e8d-acab82951b14","sequence":{"long":13861},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b355d5f0-5bd5-4e08-81f3-dd417efbb275","sequence":{"long":13862},"type":"EVENT_READ","threadId":{"int":100235},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a4f0049-3252-4643-b2a4-0c14cab5adb4","sequence":{"long":13863},"type":"EVENT_READ","threadId":{"int":100235},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"632492b6-90dd-455b-8373-79f81bbcbc53","sequence":{"long":13864},"type":"EVENT_READ","threadId":{"int":100235},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2431},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1652b108-e531-43be-ae9e-87d128874173","sequence":{"long":13865},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2484},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8a16611-511e-4c66-8422-0797d271f353","sequence":{"long":13866},"type":"EVENT_WRITE","threadId":{"int":100235},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c88ca474-45e6-4805-b7f2-507b0ca14d30","sequence":{"long":13867},"type":"EVENT_READ","threadId":{"int":100235},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01c1eaa9-b566-4d34-942d-94b22a93f1f0","sequence":{"long":13868},"type":"EVENT_READ","threadId":{"int":100235},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04b3d03b-7bc3-437e-b75f-1d7b4582ec2f","sequence":{"long":13869},"type":"EVENT_READ","threadId":{"int":100235},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1178},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"411cc57f-a8bd-44f3-9449-3df06e350910","sequence":{"long":13870},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1231},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"899590f2-f994-4a03-95ef-313047024077","sequence":{"long":13871},"type":"EVENT_WRITE","threadId":{"int":100235},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de7068bf-0c5f-4039-be47-743487bfe0a5","sequence":{"long":13872},"type":"EVENT_READ","threadId":{"int":100235},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be41f081-8c2d-48c8-a333-66197e070f59","sequence":{"long":13873},"type":"EVENT_SENDTO","threadId":{"int":100235},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17176","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef55f3b8-ee1a-45ec-87ad-d2f25e50bb1d","sequence":{"long":13874},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17176","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"128357ab-6716-4b86-9e36-eb364a0cbc53","sequence":{"long":13875},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346123866085,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a229831e-ff59-4158-9d42-d3f8319b96ae","sequence":{"long":13876},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346134170169,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebbdc3e1-cf84-49af-866b-33cd9f8e102e","sequence":{"long":13877},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346134170169,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ac8ef4f-c3c2-4ca0-911c-69296cf793f4","sequence":{"long":13878},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346134170169,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56c705c9-d553-430d-a3db-d8b9fa1869b9","sequence":{"long":13879},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346134170169,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"33ed8e85-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0422752-6b63-4f0e-9e17-cc2acf8d2228","sequence":{"long":13880},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"33ed8e85-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346254046273,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"33ed9753-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61e56b6c-8df8-474f-b008-447eaaad9d86","sequence":{"long":13881},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"33ed9753-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346254046273,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"33ed9eac-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"135ff9e6-6f74-4fab-8869-fa7e762f7c85","sequence":{"long":13882},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"33ed9eac-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346254046273,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"33eda7f2-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eae67ce6-aa10-43cc-beb4-beac3da0cc7b","sequence":{"long":13883},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"33eda7f2-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346254046273,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"33edaf7e-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c89aedc4-6953-4073-abfa-4c68fcdb71e6","sequence":{"long":13884},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"33edaf7e-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346254046273,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"33edb6bf-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5893ab6-1eca-4e4b-bda8-c17d2699d9a3","sequence":{"long":13885},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"33edb6bf-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346254046273,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"33edbdf4-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f9aed43-a78c-41d8-add7-def029089fa3","sequence":{"long":13886},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"33edbdf4-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346254046273,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"33edc6a7-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cddc4fcb-9bb6-4a15-b740-50b20889c6fb","sequence":{"long":13887},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"33edc6a7-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346254046273,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"33edcdea-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fda3e6b4-d967-49c9-a57b-b6a090aa5023","sequence":{"long":13888},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"33edcdea-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346254046273,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53231f54-2f70-44db-aa07-86c1a034cc26","sequence":{"long":13889},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584346494002074,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":875011},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5490238f-7cd4-4da2-acd9-d98940c2b63b","sequence":{"long":13890},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584347503963039,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":875371},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0059a5ae-f72d-4128-83f7-54e8728c9f84","sequence":{"long":13891},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584347554362864,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73fac31f-ac85-4941-966b-ba2adf0b65df","sequence":{"long":13892},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584347554362864,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17177","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c2d1e98-0d20-48e4-89bb-d3ab6449e0f9","sequence":{"long":13893},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584347554362864,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17178","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c80f2525-4ee5-4346-8fef-76decce62436","sequence":{"long":13894},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584347554362864,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17179","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74a2b53e-c1b2-4182-b991-c1c8c46f0ece","sequence":{"long":13895},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584347554362864,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17180","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9869535-8a0c-44b8-9307-614fdae4e3fc","sequence":{"long":13896},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584347554362864,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17177","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05c72584-72f3-4d70-808a-41baef23a472","sequence":{"long":13897},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584347554362864,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17178","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1034e92-264f-4b6a-b520-8038f33efa90","sequence":{"long":13898},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584347554362864,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17179","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53d6680c-9c79-4cd7-b6b8-7e0f35dd097e","sequence":{"long":13899},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584347554362864,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17180","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b5447c0-a438-43fa-9200-8547fc7079d0","sequence":{"long":13900},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":875371},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8123a15c-3649-442d-b349-836a9e165845","sequence":{"long":13902},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90e856a6-3325-4d46-96d3-0ebb8e51aaef","sequence":{"long":13901},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"244e50b4-76eb-44c3-999c-1750240a36d8","sequence":{"long":13904},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4357f086-55f4-4116-baeb-909d9c1ccb78","sequence":{"long":13903},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0a12373-8416-4117-ba71-0e5328b96548","sequence":{"long":13906},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfdcb003-6172-4d3a-83d7-37736be1368d","sequence":{"long":13905},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bae4955e-6381-407c-bfd7-5e8db9b17715","sequence":{"long":13907},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22334ae7-2608-4b53-a588-a01814806a2f","sequence":{"long":13908},"type":"EVENT_READ","threadId":{"int":100236},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d25a7d12-d4ac-4650-a0c5-8c547c713f0b","sequence":{"long":13909},"type":"EVENT_READ","threadId":{"int":100236},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f95dbfa-57f2-4ddf-882f-ea6724ac27ed","sequence":{"long":13910},"type":"EVENT_READ","threadId":{"int":100236},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3868},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79c40060-d0e1-4b11-bce8-6d65d541f745","sequence":{"long":13911},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3921},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42869e9c-a042-4abc-8742-c0ed5b3528c0","sequence":{"long":13912},"type":"EVENT_WRITE","threadId":{"int":100236},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"968ca546-c96e-4df0-adc6-ef42225835a4","sequence":{"long":13913},"type":"EVENT_READ","threadId":{"int":100236},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f0ce99a-c264-4224-8285-b2887a2971f2","sequence":{"long":13914},"type":"EVENT_READ","threadId":{"int":100236},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcdb9be9-1648-491d-9cdc-afebeb572f92","sequence":{"long":13915},"type":"EVENT_READ","threadId":{"int":100236},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":356},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a591721a-abc4-4f33-a5de-b3976bf38efd","sequence":{"long":13916},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":409},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b08672ab-6a58-4192-af7d-aa5bf5ca95fa","sequence":{"long":13917},"type":"EVENT_WRITE","threadId":{"int":100236},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c0d5bbd-1abe-43c1-a84a-4dcdbf8b5c3e","sequence":{"long":13918},"type":"EVENT_READ","threadId":{"int":100236},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e921eeea-48d9-4574-8f90-2730fd1ef7bb","sequence":{"long":13919},"type":"EVENT_SENDTO","threadId":{"int":100236},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17181","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"792a9249-4ca8-401f-9392-6d628f2c0531","sequence":{"long":13920},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17181","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb6f51bc-cccf-4a3c-b4c9-17fcce9e8dd5","sequence":{"long":13921},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348124323621,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a7907fc-9e10-4334-b2fc-76f668efe29c","sequence":{"long":13922},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348134785831,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63cc2364-b7bb-444e-8609-41814205b5e3","sequence":{"long":13923},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348134785831,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04012272-0767-4927-b1b8-05bfe5a17dc0","sequence":{"long":13924},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348134785831,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e92dca28-c432-4b11-8483-2f879f7b15d0","sequence":{"long":13925},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348134785831,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a0e0c1a-ac8f-4443-9ce1-670afc8ceab6","sequence":{"long":13926},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584348524309003,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":878686},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a029378-582e-45f8-aeee-ecbf9edefe1b","sequence":{"long":13927},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584349534585675,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":879047},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ac45f67-dea9-40da-aa7d-eb74760c2391","sequence":{"long":13928},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":879047},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fa1d11f-b661-41b5-830d-8bee0f0cff1f","sequence":{"long":13930},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89ffd2e3-60aa-42f5-8924-c0be2d6c86aa","sequence":{"long":13929},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37c5bc4e-12d3-401e-87c2-08f40ba13218","sequence":{"long":13932},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d9d363f-4b4a-4314-a8dd-634412aa1867","sequence":{"long":13931},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7982c39d-630c-4c83-ab38-fb541e089e2a","sequence":{"long":13934},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff8be8f7-6ccd-4b5c-9b76-ed24b4841f26","sequence":{"long":13933},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"374722f2-a52f-4bec-a056-5357196579eb","sequence":{"long":13935},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc6bdb0a-d7dd-4d0c-afc8-206a6f92cbe6","sequence":{"long":13936},"type":"EVENT_READ","threadId":{"int":100237},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"420d675f-cae5-4ecb-90ba-3cdb11ab715b","sequence":{"long":13937},"type":"EVENT_READ","threadId":{"int":100237},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"663346ed-ac77-41bb-8081-53e1138aa354","sequence":{"long":13938},"type":"EVENT_READ","threadId":{"int":100237},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3311},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2a5ba42-adc4-4dae-9987-d8ed196d9d6b","sequence":{"long":13939},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3364},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a9824f3-33b7-46c7-98f4-3276a05311bb","sequence":{"long":13940},"type":"EVENT_WRITE","threadId":{"int":100237},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08d09f6c-6638-4fd9-87f8-4576106900ca","sequence":{"long":13941},"type":"EVENT_READ","threadId":{"int":100237},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f03ef14-cb1f-4c45-985d-311fc302a895","sequence":{"long":13942},"type":"EVENT_READ","threadId":{"int":100237},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cf90f78-9fb4-4fc3-a028-f00a9c7d68c1","sequence":{"long":13943},"type":"EVENT_READ","threadId":{"int":100237},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":357},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fe0f776-145b-4aee-91d3-a5e8ea27be1d","sequence":{"long":13944},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":410},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55bde847-decd-4cd9-9acc-e96aa2b4d8f8","sequence":{"long":13945},"type":"EVENT_WRITE","threadId":{"int":100237},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac474ca0-47bd-422f-b021-ba46a27e2ccb","sequence":{"long":13946},"type":"EVENT_READ","threadId":{"int":100237},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8f85bf9-9ac7-4395-a45f-968e6d2dfaf9","sequence":{"long":13947},"type":"EVENT_SENDTO","threadId":{"int":100237},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17182","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33b7050e-ead4-40ed-894a-8d490a2e8cc8","sequence":{"long":13948},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17182","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7708cc74-f78e-4d98-8268-39f860422011","sequence":{"long":13949},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350124276936,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09d2e07e-9931-44db-888f-ec7a172c17f1","sequence":{"long":13950},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350134184753,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99684101-4aca-4690-89b2-e1f4f10e80ca","sequence":{"long":13951},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350134184753,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fb86c56-5b1b-4386-a52a-1df05fc4b4c6","sequence":{"long":13952},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350134184753,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbcdfd0d-03bd-4489-81dc-54413494fc30","sequence":{"long":13953},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350134184753,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"364ff73b-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":null,"localPort":null,"remoteAddress":{"string":"23.31.21.163"},"remotePort":{"int":123},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fe6843f-cbbc-4381-a6ea-ceb14b5e3d8d","sequence":{"long":13954},"type":"EVENT_CONNECT","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"364ff73b-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350254410108,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","address":"23.31.21.163","port":"123","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3b2c9b2-391a-4f28-9a21-cd0b9da6c737","sequence":{"long":13955},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"364ff73b-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350254410108,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0880aeb-a74c-4703-970d-56f6ea8777bc","sequence":{"long":13956},"type":"EVENT_SENDTO","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"b5434a9c-467a-11e9-ae89-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350254410108,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"ret_msgid":"17183","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"22","ppid":"1","address":"23.31.21.163","port":"123","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad17e671-cfd8-471e-9f1b-ae8309eaef58","sequence":{"long":13957},"type":"EVENT_SENDTO","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"b541acd0-467a-11e9-ae89-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350254410108,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":100},"programPoint":null,"properties":{"map":{"ret_msgid":"17184","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"699af12c-1a1e-4a9b-8a19-4a4bc6617dcd","sequence":{"long":13958},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b2110-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350254410108,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":100},"programPoint":null,"properties":{"map":{"ret_msgid":"17184","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81a3ebaa-9d73-4909-814e-77e3fb2b9390","sequence":{"long":13959},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350553853162,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":882250},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc87559c-6666-481e-8523-6ef5902feb04","sequence":{"long":13960},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350553853162,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b154dedf-2bad-495a-b623-113d06009545","sequence":{"long":13961},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350553853162,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17185","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8e4d6a8-4abd-49a3-805c-9ea859708f56","sequence":{"long":13962},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350553853162,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17186","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90b6b18d-ddf2-48ab-9bb5-f109a47964cb","sequence":{"long":13963},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350553853162,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17187","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08bb7248-10cf-4b2e-9a6e-a4dfeaa0b66d","sequence":{"long":13964},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350553853162,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17188","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7241d1a-49df-4c8c-9c5e-a4ce3083111a","sequence":{"long":13965},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350553853162,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17185","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9d89c99-bb2e-454f-9877-1651cdefbd99","sequence":{"long":13966},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350553853162,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17186","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f52c466-e2c4-49a4-8f1a-7ab265aee445","sequence":{"long":13967},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350553853162,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17187","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56d5d9b6-1839-41e8-9e4d-ad817dcdb881","sequence":{"long":13968},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584350553853162,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17188","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfc2ae54-ee93-460a-9028-3ba143957cef","sequence":{"long":13969},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584351563965247,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":883425},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88e3ae81-f297-473d-8014-b21ca90816f1","sequence":{"long":13970},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":883425},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8a4a57b-b7cc-4776-8693-5a8d5cebbae9","sequence":{"long":13972},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99da87cb-9820-488f-9b96-978a56d3c705","sequence":{"long":13971},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f67c4e1-4fe5-4d60-8973-719dd8eb4e4f","sequence":{"long":13974},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd4387e2-ea66-414e-b9fe-2a590e89358c","sequence":{"long":13973},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e3a0a3b-21d1-49c7-92da-a3c63ec7f585","sequence":{"long":13976},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4649bc2d-7e4e-4809-a52b-824c1ec0bc15","sequence":{"long":13975},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b17cdaa6-5b43-4831-a362-6dd363115b38","sequence":{"long":13977},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94df4f41-41a1-47e0-9ae6-ecece95be25b","sequence":{"long":13978},"type":"EVENT_READ","threadId":{"int":100238},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32d128f0-5286-4f50-848b-6c97f5536cd3","sequence":{"long":13979},"type":"EVENT_READ","threadId":{"int":100238},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d215d81-a229-49ff-b422-1d1981ce1f4f","sequence":{"long":13980},"type":"EVENT_READ","threadId":{"int":100238},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3199},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f19ce35-f6b0-4a6e-9c6e-906220582407","sequence":{"long":13981},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3252},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f03213b-79d6-4b20-a47f-b330d7aa389e","sequence":{"long":13982},"type":"EVENT_WRITE","threadId":{"int":100238},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c6a632c-9989-4bcc-9b31-0e37b9de30f8","sequence":{"long":13983},"type":"EVENT_READ","threadId":{"int":100238},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ff0be45-0827-405d-8547-a7c455f3b53f","sequence":{"long":13984},"type":"EVENT_READ","threadId":{"int":100238},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22076f51-6528-4b33-adb0-123d799a963a","sequence":{"long":13985},"type":"EVENT_READ","threadId":{"int":100238},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1171},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a100df4-b832-45d6-82be-b333cdaa6169","sequence":{"long":13986},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1224},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48b92161-03db-4104-af3d-45cc15c43de8","sequence":{"long":13987},"type":"EVENT_WRITE","threadId":{"int":100238},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73d0fcaa-c179-47fa-bc20-b217e3d050d1","sequence":{"long":13988},"type":"EVENT_READ","threadId":{"int":100238},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0882c381-41cb-47aa-8bad-5650ca112045","sequence":{"long":13989},"type":"EVENT_SENDTO","threadId":{"int":100238},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17189","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61bd7f9d-a499-4f4e-a791-a94a59ceadb0","sequence":{"long":13990},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17189","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03fb39a1-1d6f-4b0f-918d-883bc2cb39b1","sequence":{"long":13991},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352124308784,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c036252-f1e9-4afd-b2e9-d8cd5d40c07d","sequence":{"long":13992},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352134191124,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54f4c3d5-c4c8-4355-b55d-74307a2fa8ae","sequence":{"long":13993},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352134191124,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"712ec769-418f-4eff-94fe-eb95650865a7","sequence":{"long":13994},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352134191124,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2d6e5dc-6cc9-4806-9466-2f60dee3898d","sequence":{"long":13995},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352134191124,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9967f72-f1d0-4615-b4a2-1651ccd79947","sequence":{"long":13996},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584352584162883,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":885859},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4644578d-3254-42eb-9d7f-896eb2fc4afd","sequence":{"long":13997},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584353554305528,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ee643d2-1e79-4ef5-b832-e392e2d12ade","sequence":{"long":13998},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584353554305528,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17190","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"250ec716-47f6-4701-835a-ad386e97a393","sequence":{"long":13999},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584353554305528,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17191","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f786c3b0-f5bd-4091-ab53-b2b8aeafad2c","sequence":{"long":14000},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584353554305528,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17192","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"278f1ee3-752d-4dd0-b6fe-b898fdb3475b","sequence":{"long":14001},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584353554305528,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17193","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47f8638c-381b-4906-b14f-e0e30d1aded7","sequence":{"long":14002},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584353554305528,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17190","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2dd711f-22f1-4deb-bef6-52f467860e46","sequence":{"long":14003},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584353554305528,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17191","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef7396fc-5a1e-4259-97d1-41c08c1b686d","sequence":{"long":14004},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584353554305528,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17192","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58205e4c-005e-4657-9cb6-30e3a7682a79","sequence":{"long":14005},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584353554305528,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17193","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7c375c4-e401-495d-ad74-bef767bc12ee","sequence":{"long":14006},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584353594417320,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":887040},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f879895d-9af1-4823-b1f7-67c6d283db63","sequence":{"long":14007},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":887040},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46bcb369-42dd-4dd5-bb3c-9e9fe0990962","sequence":{"long":14009},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e44a5c45-25e1-4b25-ab81-c09ad63394af","sequence":{"long":14008},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9893fb1-1cc2-4e6e-8de7-cb3f5af90cfc","sequence":{"long":14011},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fd52e5a-7d2b-40ed-8e4d-41df8a256ba7","sequence":{"long":14010},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbd90108-ff2d-4ccc-96bc-be3453dee7b7","sequence":{"long":14013},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77e44c26-aa4b-4047-b91f-b25a7f5b3101","sequence":{"long":14012},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39a6339a-6eec-4585-9472-dffad356d48b","sequence":{"long":14014},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62948492-2b17-472a-abbe-c3ea29b0e823","sequence":{"long":14015},"type":"EVENT_READ","threadId":{"int":100239},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04b6ab8b-4ea4-49bd-8acb-0e8c0205ac6b","sequence":{"long":14016},"type":"EVENT_READ","threadId":{"int":100239},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"648ff79d-2551-431d-9dbe-03eee50569c6","sequence":{"long":14017},"type":"EVENT_READ","threadId":{"int":100239},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2430},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b242651d-24a0-4501-a9b4-555874acea67","sequence":{"long":14018},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2483},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5b27141-5ddf-44a5-88e4-88af0800413a","sequence":{"long":14019},"type":"EVENT_WRITE","threadId":{"int":100239},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78a2991b-fd24-4bc3-9f18-558aac1cb44f","sequence":{"long":14020},"type":"EVENT_READ","threadId":{"int":100239},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41c15681-b1d6-46c6-aac8-e95dfc1b7c30","sequence":{"long":14021},"type":"EVENT_READ","threadId":{"int":100239},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"413c39fa-b672-4176-b33c-d4ac91f8e2ee","sequence":{"long":14022},"type":"EVENT_READ","threadId":{"int":100239},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1177},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a836cfca-a88f-49de-a5f8-578beebd3804","sequence":{"long":14023},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1230},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5acdc160-0870-437f-830f-16bdea9ba0d1","sequence":{"long":14024},"type":"EVENT_WRITE","threadId":{"int":100239},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80f302e1-55d2-49b7-b626-6dc0708c4774","sequence":{"long":14025},"type":"EVENT_READ","threadId":{"int":100239},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fff1217-f89d-4187-917b-146d0a873eea","sequence":{"long":14026},"type":"EVENT_SENDTO","threadId":{"int":100239},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17194","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7184017-6cd8-4f99-bcc5-8c1b86755575","sequence":{"long":14027},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17194","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30418ce4-0705-4741-b5e5-83cc3dbf601f","sequence":{"long":14028},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354124436149,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f2bf829-0d9f-4f5e-bd16-ea14eee7525c","sequence":{"long":14029},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354133845363,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc4f2b21-f654-48e7-b370-9f34cd17e082","sequence":{"long":14030},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354133845363,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cff9d2e-e477-4a3d-bb2f-99040249c8c1","sequence":{"long":14031},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354133845363,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cead86c7-f4a5-4a7e-ba32-15765c39658d","sequence":{"long":14032},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354133845363,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d1368ce-0720-4e07-8c2a-7737351fe7df","sequence":{"long":14033},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584354613932763,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":889470},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7853802e-aaa9-4546-8597-07a070a81835","sequence":{"long":14034},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584355624310322,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":889832},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42c6dba4-6840-4a06-b696-5ac19b4cfef9","sequence":{"long":14035},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":889832},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82f060c0-482f-4de4-91c9-196b7b253bed","sequence":{"long":14037},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cc378d4-9f28-4b70-bee0-dada9402fcc9","sequence":{"long":14036},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a90a456a-0c57-41e9-9afa-04383d33c7d4","sequence":{"long":14039},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a5545c5-1eb8-458d-9570-1b4a782d3b5e","sequence":{"long":14038},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6571852f-feaf-42e4-808e-085d39f16187","sequence":{"long":14041},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30f3eb3f-7e5a-4fd7-8e74-5afedcf8cba4","sequence":{"long":14040},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7c27577-2a8b-47fe-8949-ca9b85275771","sequence":{"long":14042},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71388767-2523-42b2-bd1e-e4c78421a78f","sequence":{"long":14043},"type":"EVENT_READ","threadId":{"int":100240},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f63fd16-bed0-47b8-8aee-42acd007115b","sequence":{"long":14044},"type":"EVENT_READ","threadId":{"int":100240},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ed70c34-eecc-49cd-b5a7-450691217368","sequence":{"long":14045},"type":"EVENT_READ","threadId":{"int":100240},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2426},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25da26c0-7587-435f-9938-b26787e04cd0","sequence":{"long":14046},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2479},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bb20b8d-a514-46d1-af23-6cdc769b69fb","sequence":{"long":14047},"type":"EVENT_WRITE","threadId":{"int":100240},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed23bd01-8d20-42bd-97df-ff57fba25546","sequence":{"long":14048},"type":"EVENT_READ","threadId":{"int":100240},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fad6259f-781d-433c-ab80-a97c94572c5d","sequence":{"long":14049},"type":"EVENT_READ","threadId":{"int":100240},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aabc2c44-b4d5-4521-a497-12a0d392fbec","sequence":{"long":14050},"type":"EVENT_READ","threadId":{"int":100240},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"beae1b47-18fb-462c-b0c0-d84b03cfb8c0","sequence":{"long":14051},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a509426f-948b-4548-8297-ea679b59b76e","sequence":{"long":14052},"type":"EVENT_WRITE","threadId":{"int":100240},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63ec0e5b-4e1a-43cd-b466-50ce3a2cce2d","sequence":{"long":14053},"type":"EVENT_READ","threadId":{"int":100240},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3843a14-72d0-4302-b5b7-c158b0b88922","sequence":{"long":14054},"type":"EVENT_SENDTO","threadId":{"int":100240},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17195","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db6694aa-7425-4736-a69d-700e80228873","sequence":{"long":14055},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17195","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72f7cf70-b7b1-4c9f-a73f-abdcd651aecb","sequence":{"long":14056},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c418aad3-4e06-491e-93a5-fad1b5d5e973","sequence":{"long":14057},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81b43375-96a3-4638-983f-7c80610eaf6e","sequence":{"long":14058},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14309de5-3232-4997-85de-55c871420e90","sequence":{"long":14059},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98686b6f-7152-4376-9839-0cf4dd5c2dd0","sequence":{"long":14060},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356124264883,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b34006e-e400-47a8-adab-188614ec30df","sequence":{"long":14061},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356554258044,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e82f4fe0-7fcf-4e99-940d-480235b42502","sequence":{"long":14062},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356554258044,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17196","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13a66d4a-dbc6-439f-95ba-a31e319222b5","sequence":{"long":14063},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356554258044,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17197","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acf086f5-c1f9-4a79-808f-cab5241d0e20","sequence":{"long":14064},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356554258044,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17198","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68d858a8-ad68-472f-9f03-b3c28572189b","sequence":{"long":14065},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356554258044,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17199","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbaa721d-1188-44fc-a5e0-73f64f7dc71a","sequence":{"long":14066},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356554258044,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17196","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae6d1ac1-754a-4595-9871-bb2cad1da82f","sequence":{"long":14067},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356554258044,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17197","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"639a3bdc-e502-425d-804f-c75d36828df2","sequence":{"long":14068},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356554258044,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17198","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea3bccca-b357-418c-ac70-6695527a1192","sequence":{"long":14069},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356554258044,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17199","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffa3288b-45c8-4f09-8d9c-f28b65e418c7","sequence":{"long":14070},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584356644012080,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":893057},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b22d89e4-fdae-4e20-a573-74e65ffa1437","sequence":{"long":14071},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584357654009299,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":893421},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f605c4b8-5a24-42f2-ae00-7936d23da480","sequence":{"long":14072},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":893421},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9892bf1a-38b1-4ef5-85f4-e08be0cf203a","sequence":{"long":14074},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68c8dd04-23b9-4437-a835-356e3efe4627","sequence":{"long":14073},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c06367c7-7abf-481b-85a9-9ea40130d47f","sequence":{"long":14076},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bbd5ea3-3508-4221-891c-04e07fe812e4","sequence":{"long":14075},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93fe3ce4-ccd7-4369-8918-e3bc5c144d24","sequence":{"long":14078},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12166061-b2a5-4611-87cf-9fb269ea976a","sequence":{"long":14077},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ac9e9b7-9979-4eaf-a895-a452cee1a653","sequence":{"long":14079},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8408ace5-2a2f-48f3-a2cb-f523dbb347d3","sequence":{"long":14080},"type":"EVENT_READ","threadId":{"int":100241},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e269906-6c01-4b90-8ad5-9f1769515232","sequence":{"long":14081},"type":"EVENT_READ","threadId":{"int":100241},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09b1efc7-6265-4f18-bf55-56deb9c98a1a","sequence":{"long":14082},"type":"EVENT_READ","threadId":{"int":100241},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3221},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac7c50b4-724b-451f-84fe-6d0a46e85f24","sequence":{"long":14083},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3274},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47fe07cd-0678-4741-b5f5-1a6938529724","sequence":{"long":14084},"type":"EVENT_WRITE","threadId":{"int":100241},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76f92b7b-f367-4ead-a349-c90c1878dc03","sequence":{"long":14085},"type":"EVENT_READ","threadId":{"int":100241},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a927bc1-18ad-4294-a7d1-94b587891928","sequence":{"long":14086},"type":"EVENT_READ","threadId":{"int":100241},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d88da824-efae-4b4b-b03e-2aefdcdd834a","sequence":{"long":14087},"type":"EVENT_READ","threadId":{"int":100241},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80a8c0d6-8f91-408d-9752-04c28d48d5af","sequence":{"long":14088},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4141ba62-87c9-4cbc-bf09-077b83f5a52f","sequence":{"long":14089},"type":"EVENT_WRITE","threadId":{"int":100241},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e006d33c-fd90-4ca7-a6e9-dd9f05aef53a","sequence":{"long":14090},"type":"EVENT_READ","threadId":{"int":100241},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51bdb583-c8e1-4618-a51a-589ebf53ff8c","sequence":{"long":14091},"type":"EVENT_SENDTO","threadId":{"int":100241},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17200","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f5f7a74-8aad-4b0f-b31a-b53c1815de3d","sequence":{"long":14092},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17200","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b60d8c1-ba6b-419b-89b2-5a0ddb7b4781","sequence":{"long":14093},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358124429902,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd77ef5f-6e00-4d0e-8b0c-6007d128d946","sequence":{"long":14094},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358134010970,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cda5ebbd-43e2-451c-9d09-a691afe7d83e","sequence":{"long":14095},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358134010970,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"babdaa22-ce88-49bb-8d54-e122e0de2a56","sequence":{"long":14096},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358134010970,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97238bf1-3b4b-47e1-aa21-bcbfd7e85ad6","sequence":{"long":14097},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358134010970,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06e93b79-7a25-4ccc-920a-26352068cf4a","sequence":{"long":14098},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584358674080271,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":895843},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dda1dfa-0c53-4e11-8186-de05ee70fbe7","sequence":{"long":14099},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584359554835321,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee34ec86-1e01-46d2-843b-4a769686ebeb","sequence":{"long":14100},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584359554835321,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17201","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2389239f-979b-4f9e-bd03-3b2b92558e64","sequence":{"long":14101},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584359554835321,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17202","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9c83ff8-c4e9-4679-bd48-2253bcbcbad2","sequence":{"long":14102},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584359554835321,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17203","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ced44a3f-4c73-4306-817c-2ac663f43377","sequence":{"long":14103},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584359554835321,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17204","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29d70325-7508-4767-b291-79abb99ee9ad","sequence":{"long":14104},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584359554835321,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17201","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81d0346c-0f50-4a86-9f62-e0ed37ddb11d","sequence":{"long":14105},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584359554835321,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17202","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"351c63f2-5553-4b66-aba0-ab44c748d3f4","sequence":{"long":14106},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584359554835321,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17203","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c98766f0-e3e1-4eac-82ad-da4048d576ec","sequence":{"long":14107},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584359554835321,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17204","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"166c30d5-d7e4-4edd-a45b-7d13df003d94","sequence":{"long":14108},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584359684033327,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":897024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"538cbf54-e18f-48ce-8e26-5177f29fbfd5","sequence":{"long":14109},"type":"EVENT_OPEN","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":{"string":"/etc/cron.d"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360014564878,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00e808"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28249c5b-371c-43c9-abef-e637aede2f1e","sequence":{"long":14110},"type":"EVENT_CLOSE","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360014564878,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a22dbfe0-3fd8-4cef-8024-72c52ade89f5","sequence":{"long":14111},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":897024},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43198dad-6565-4d76-adb7-5df250fa01c8","sequence":{"long":14113},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4dc9b76-2a89-44c5-b667-9e2c2b695565","sequence":{"long":14112},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1017edc5-138a-4458-92bc-199ef544fcdc","sequence":{"long":14115},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a270aaf4-33aa-4a5c-8678-195264f78358","sequence":{"long":14114},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7362b08c-3134-48d3-929d-ce324530158a","sequence":{"long":14117},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e07e1927-5c53-46db-b27c-21042f41594f","sequence":{"long":14116},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f1359e2-8f2e-4720-b58e-9da272976817","sequence":{"long":14118},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2f306de-1938-420e-8053-aa5b1a0d53dd","sequence":{"long":14119},"type":"EVENT_READ","threadId":{"int":100242},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87cffe23-dcfe-4a1c-974c-7ebdc3252970","sequence":{"long":14120},"type":"EVENT_READ","threadId":{"int":100242},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc26423c-f7c4-4b43-9764-d5697bd88478","sequence":{"long":14121},"type":"EVENT_READ","threadId":{"int":100242},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2418},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"473761c9-9b85-4a20-a5a8-74019bea8f3b","sequence":{"long":14122},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2471},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d65044c7-b01f-4f67-ab5e-2b3d98c84145","sequence":{"long":14123},"type":"EVENT_WRITE","threadId":{"int":100242},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04b2af61-bab5-4c3b-8711-fef3e1b189be","sequence":{"long":14124},"type":"EVENT_READ","threadId":{"int":100242},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57bc59a4-f5b0-4056-b8df-6fcf0dd60d4d","sequence":{"long":14125},"type":"EVENT_READ","threadId":{"int":100242},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68319f74-695f-4a05-a14e-018b66b770f6","sequence":{"long":14126},"type":"EVENT_READ","threadId":{"int":100242},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1177},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c17f97d-8ec3-419c-9659-def0c3717ce7","sequence":{"long":14127},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1230},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e47576e-cb8b-4063-ac2a-216a98858818","sequence":{"long":14128},"type":"EVENT_WRITE","threadId":{"int":100242},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b8e73ae-69e1-4635-a9b2-c8856472c616","sequence":{"long":14129},"type":"EVENT_READ","threadId":{"int":100242},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88a1dbb1-5f89-417a-979b-a5b5d7333ddf","sequence":{"long":14130},"type":"EVENT_SENDTO","threadId":{"int":100242},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17205","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a399da50-0474-4a5c-8d00-929dd81868bc","sequence":{"long":14131},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17205","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f8c90a3-5e21-4a7a-97e8-a478afe1fe52","sequence":{"long":14132},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360123894557,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa46f620-a1fd-4b3e-8b62-966e2bb02af7","sequence":{"long":14133},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360133855941,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa447781-e574-458a-bde2-6a9fe922eb3e","sequence":{"long":14134},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360133855941,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c32939f-b2b2-4175-b4c8-37c5325bec47","sequence":{"long":14135},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360133855941,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a29bb738-e24c-48b4-8504-f910b01eb6ec","sequence":{"long":14136},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360133855941,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8ede999-98e9-499a-a350-782d5b97632f","sequence":{"long":14137},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584360703885969,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":899831},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f871aa87-4ac9-40a2-8e30-d5d34a3ebe08","sequence":{"long":14138},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584361714110689,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":900196},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05be64c5-5abc-48f4-acf8-583c7c02a7e5","sequence":{"long":14139},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":900196},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f326376d-95e7-4fd2-afc5-d00ba97f3bec","sequence":{"long":14141},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9458fce-78d8-4811-8cf6-51d01991e697","sequence":{"long":14140},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb56ad6e-49f9-42f1-a5e9-1abe8a7bae7c","sequence":{"long":14143},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4afbe9ad-6469-4862-a0eb-a75c9ca8e03d","sequence":{"long":14142},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98800166-1f1e-43dc-863e-0a3e2947323f","sequence":{"long":14145},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef03346d-d3d4-40d2-8fb7-3fbe7024339d","sequence":{"long":14144},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"341ae5db-77cd-440c-b091-97f5c163df7f","sequence":{"long":14146},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cb4ab12-0650-4789-9f91-e1d7ce87bf6e","sequence":{"long":14147},"type":"EVENT_READ","threadId":{"int":100243},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8c11e8c-5b77-44a2-a755-0c50bcb8ce85","sequence":{"long":14148},"type":"EVENT_READ","threadId":{"int":100243},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a05f3104-8ad7-4ae5-a38f-d17939f6d173","sequence":{"long":14149},"type":"EVENT_READ","threadId":{"int":100243},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2803},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6a0b05d-b018-464b-86c0-b5cac9ded797","sequence":{"long":14150},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2856},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a5374a1-2491-4a4a-a71e-aec25944c3a2","sequence":{"long":14151},"type":"EVENT_WRITE","threadId":{"int":100243},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af1c01e2-6f96-422c-9605-d23457c5821f","sequence":{"long":14152},"type":"EVENT_READ","threadId":{"int":100243},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e559d099-f743-466d-beae-5c451d3f75f0","sequence":{"long":14153},"type":"EVENT_READ","threadId":{"int":100243},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76909081-a54d-46f4-bf86-8ed63fc97080","sequence":{"long":14154},"type":"EVENT_READ","threadId":{"int":100243},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87bc23d2-65df-4045-bab1-6733825250cb","sequence":{"long":14155},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21d1d052-71b3-4ee9-ba99-733e71a7e4d7","sequence":{"long":14156},"type":"EVENT_WRITE","threadId":{"int":100243},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"356819ea-44af-4665-8e9d-005dd72a0ad3","sequence":{"long":14157},"type":"EVENT_READ","threadId":{"int":100243},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11374e17-d322-4ef9-9692-a12977c10740","sequence":{"long":14158},"type":"EVENT_SENDTO","threadId":{"int":100243},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17206","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fae091d3-667c-4be3-8ea2-c1a937ae0470","sequence":{"long":14159},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17206","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11facc57-347b-41ed-bc15-0352f66e64ff","sequence":{"long":14160},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4061cade-9e0f-468d-b7ea-8cc3c798d773","sequence":{"long":14161},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2196c16d-0045-4681-9cb4-2b6a47fd652e","sequence":{"long":14162},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362123966406,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af69d033-e122-45dd-8a38-057e9ca7c200","sequence":{"long":14163},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362133831640,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5e3926b-0c3a-4261-8c68-fac492704aad","sequence":{"long":14164},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362133831640,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9aea52d4-2ac8-4f7f-8bff-ffc8085c17bc","sequence":{"long":14165},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362554188816,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b369db7-a9bc-4dfd-ad90-7ca62a477fe0","sequence":{"long":14166},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362554188816,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17207","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2eac965b-f55f-4711-8725-9bb5ae00327e","sequence":{"long":14167},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362554188816,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17208","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d65fc251-0d07-436a-9604-e476d18c4953","sequence":{"long":14168},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362554188816,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17209","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff77b20e-e80f-4781-9986-92377de77f8b","sequence":{"long":14169},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362554188816,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17210","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3cffc72-b4d5-47eb-8a65-1540461c6a6d","sequence":{"long":14170},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362554188816,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17207","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c232870e-8707-4bec-af37-6cd825566979","sequence":{"long":14171},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362554188816,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17208","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b65524c-cda4-4833-8b3a-1d40254369c0","sequence":{"long":14172},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362554188816,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17209","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71d84048-6de6-496f-be8c-dcb832e30875","sequence":{"long":14173},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362554188816,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17210","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bd18055-1b1d-465d-ab49-a6172d0ad939","sequence":{"long":14174},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584362733980807,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":903421},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aac6ad65-84c0-4746-9ffa-3d3f758de955","sequence":{"long":14175},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584363744193316,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":903784},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48984c0d-041a-4804-9164-fb6eb3968b38","sequence":{"long":14176},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":903784},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02d43c0b-93fa-4dad-a68b-1ab8d21c063e","sequence":{"long":14178},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d48943e2-386c-4b20-8a0d-74a2d49bfb35","sequence":{"long":14177},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7861eed6-7bff-43aa-801a-7c4280b36959","sequence":{"long":14180},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06057734-153b-43a8-a97f-02abe61d999a","sequence":{"long":14179},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cac6c5cd-1a03-4177-a80b-1d901fbe5c5c","sequence":{"long":14182},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e45ee051-737c-41bf-b10f-46c88b48ef6a","sequence":{"long":14181},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfdd3062-6a1a-4f46-9908-534dc4d76882","sequence":{"long":14183},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65231811-ec13-4708-b5d1-e052e7f479f0","sequence":{"long":14184},"type":"EVENT_READ","threadId":{"int":100244},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e913174b-95a7-4168-812f-124897f2dc26","sequence":{"long":14185},"type":"EVENT_READ","threadId":{"int":100244},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f53a0f9-3d3e-428d-b6e7-941379fc4861","sequence":{"long":14186},"type":"EVENT_READ","threadId":{"int":100244},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3221},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d79ce97-bbe0-490f-8065-61694b2cc137","sequence":{"long":14187},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3274},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bc57356-1f4e-4cf2-8a44-df9e46afc71f","sequence":{"long":14188},"type":"EVENT_WRITE","threadId":{"int":100244},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29de2cb9-6f06-474e-a7b0-ecf21ace25d7","sequence":{"long":14189},"type":"EVENT_READ","threadId":{"int":100244},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d066804-5a6e-4b9d-a45d-7676560a77de","sequence":{"long":14190},"type":"EVENT_READ","threadId":{"int":100244},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2df0a73-3860-4455-b8a9-471e7b7f04b8","sequence":{"long":14191},"type":"EVENT_READ","threadId":{"int":100244},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89f3619e-0533-4cf3-8f12-85efbde15ef3","sequence":{"long":14192},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1aff7d35-1c83-49e6-b1ae-1dbed1b92e6f","sequence":{"long":14193},"type":"EVENT_WRITE","threadId":{"int":100244},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52f72b2e-6e29-4078-9466-8fdb4285e512","sequence":{"long":14194},"type":"EVENT_READ","threadId":{"int":100244},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c20ac1d1-d224-4755-93f3-c3bd39c95a59","sequence":{"long":14195},"type":"EVENT_SENDTO","threadId":{"int":100244},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17211","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04daecd7-3cd0-4e93-8de3-da59f3e2f577","sequence":{"long":14196},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17211","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3349c05b-1b75-464c-9101-9108a0c2b5f5","sequence":{"long":14197},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364123869278,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a21046ed-b23b-4fd2-9d75-21313388dd0f","sequence":{"long":14198},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364133962481,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"353ee7e3-900a-42b3-8c6b-8473ab02e693","sequence":{"long":14199},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364133962481,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3147df1-4c7f-4089-9563-ec2c39ffc10f","sequence":{"long":14200},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364133962481,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03b5ba63-3ade-4fa9-b5da-7f41d8e1ce66","sequence":{"long":14201},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364133962481,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0614e1c-d3ce-46dd-b5f8-28374f8e334d","sequence":{"long":14202},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584364764365507,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":906220},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77d3ab28-239d-48c3-8225-b1c053c8e3a9","sequence":{"long":14203},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584365553839168,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a80dd362-5ced-4f47-96be-4d948e047103","sequence":{"long":14204},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584365553839168,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17212","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4040363b-0323-4a09-b8bf-ef26d08875fe","sequence":{"long":14205},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584365553839168,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17213","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea917248-10aa-40e2-be50-60db97e3c93d","sequence":{"long":14206},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584365553839168,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17214","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56ed8e03-ef2f-40c9-896e-b4d731c0d1d9","sequence":{"long":14207},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584365553839168,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17215","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6878c18a-8f89-4a1c-9829-c878831f0d1c","sequence":{"long":14208},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584365553839168,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17212","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f46c1d3d-56e6-4fb2-8d34-e01a8f1d8ff1","sequence":{"long":14209},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584365553839168,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17213","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"930e738f-999e-462a-b081-c19c0a373235","sequence":{"long":14210},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584365553839168,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17214","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02cd43dd-6a90-4e84-b95b-d45e6c7fb558","sequence":{"long":14211},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584365553839168,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17215","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d905c50e-a5b0-434a-a367-c99feb101ce5","sequence":{"long":14212},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584365773863118,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":907410},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b62fe0d-4a69-4b2f-8e0a-5eaba7c39926","sequence":{"long":14213},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":907410},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d23a2f4-88b8-4394-89d7-f31779b99454","sequence":{"long":14215},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1099f552-1c02-4987-9f28-5dc8aae91a12","sequence":{"long":14214},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1145d83-82d5-47e9-96bf-df6de4b79c1f","sequence":{"long":14217},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"093a4781-d60b-4919-b507-d5da858c4d39","sequence":{"long":14216},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a07d7f9-7db4-49bc-89e5-6a4adeb4b080","sequence":{"long":14219},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65c48a0d-b356-43c7-a283-53dddff499b3","sequence":{"long":14218},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"add552f7-ebb7-483b-aab4-50ded448a848","sequence":{"long":14220},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8788c1dd-442b-44cd-929a-9cd50df6a0b7","sequence":{"long":14221},"type":"EVENT_READ","threadId":{"int":100245},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64bd9222-426d-4a60-8190-ea156dfb66df","sequence":{"long":14222},"type":"EVENT_READ","threadId":{"int":100245},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8b605f5-6835-4c47-92e9-385ad00cbe75","sequence":{"long":14223},"type":"EVENT_READ","threadId":{"int":100245},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2432},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f59fb35-394b-4f3c-8343-0860150bc25e","sequence":{"long":14224},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2485},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43d9917a-f17c-4896-b24a-80ecbeb173e5","sequence":{"long":14225},"type":"EVENT_WRITE","threadId":{"int":100245},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58883ac5-79ef-432b-a7a0-389fbf87ef86","sequence":{"long":14226},"type":"EVENT_READ","threadId":{"int":100245},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb554789-d441-496d-a7df-02e5afbf3b7f","sequence":{"long":14227},"type":"EVENT_READ","threadId":{"int":100245},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac785c42-4449-45f3-b7b2-ed52e50b40f8","sequence":{"long":14228},"type":"EVENT_READ","threadId":{"int":100245},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1186},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa6f7dda-2cf3-4399-98c1-a183636a39ba","sequence":{"long":14229},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1239},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"888a9ef4-d88d-4e65-a044-8c82d3f71215","sequence":{"long":14230},"type":"EVENT_WRITE","threadId":{"int":100245},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69300c16-a71f-4411-821f-a4b128940d42","sequence":{"long":14231},"type":"EVENT_READ","threadId":{"int":100245},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98598f4c-6927-4c7d-9117-ebdf42240a12","sequence":{"long":14232},"type":"EVENT_SENDTO","threadId":{"int":100245},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17216","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec7d6264-19fe-439c-a161-f2ef3b0c8de5","sequence":{"long":14233},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17216","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a426badb-8d6b-438a-b736-741e8663a6d9","sequence":{"long":14234},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fcb6715-4a7b-491d-9986-41840b0d3745","sequence":{"long":14235},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b821740-9451-42b1-ad5a-5530b820752c","sequence":{"long":14236},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366123868014,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47b30bff-989a-4a23-b962-0f1a2487516c","sequence":{"long":14237},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366134645641,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8374d82a-bec6-4d58-af80-4d2eb38190d9","sequence":{"long":14238},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366134645641,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"326d0ac8-4060-458f-8490-250dd61c5c86","sequence":{"long":14239},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584366794686340,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":909842},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a775a8d2-ed80-4cd1-9d3b-b349cc7dfff3","sequence":{"long":14240},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584367804437601,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":910206},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81952168-0178-4e96-821d-fd83e7408eda","sequence":{"long":14241},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":910206},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6692e25a-f692-4c74-bf5e-d7bfb1de43cb","sequence":{"long":14243},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a71ccd02-d79b-4d28-b66c-2c657a2c12aa","sequence":{"long":14242},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67048d54-7644-46b1-b827-370b0879dbaa","sequence":{"long":14245},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e20879bd-5b1c-41d2-99d9-a6a8cfbcab95","sequence":{"long":14244},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddf764b3-d7a4-4083-97ec-1bcc5f29de25","sequence":{"long":14247},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3444b01-18d6-455f-b606-3516c2120e34","sequence":{"long":14246},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08dcda6d-89e1-427b-ad09-76db5a8264fd","sequence":{"long":14248},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ade8906-6f69-46b8-a453-fe67c81f3d94","sequence":{"long":14249},"type":"EVENT_READ","threadId":{"int":100246},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6b4e0f0-ed60-438d-87f3-868fbc0b96ed","sequence":{"long":14250},"type":"EVENT_READ","threadId":{"int":100246},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aef73ddc-130c-4de8-9bd1-6e262ec9d4a3","sequence":{"long":14251},"type":"EVENT_READ","threadId":{"int":100246},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2428},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"618d6f75-c8ba-4574-93a4-1d76d254b556","sequence":{"long":14252},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2481},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1618f329-1abb-4c28-b8de-f4b6d37a53f8","sequence":{"long":14253},"type":"EVENT_WRITE","threadId":{"int":100246},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22d516e9-7630-4c78-991d-7d06fb6d0d70","sequence":{"long":14254},"type":"EVENT_READ","threadId":{"int":100246},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b180b2da-9f76-4946-ae6c-2f2247c8908b","sequence":{"long":14255},"type":"EVENT_READ","threadId":{"int":100246},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1507c5c8-eebd-4b93-a556-feeb2b4c0d57","sequence":{"long":14256},"type":"EVENT_READ","threadId":{"int":100246},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11b042fa-ac70-487f-ac7b-ae10623a7a5b","sequence":{"long":14257},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a3bea70-55e8-40e2-b750-e18264d47648","sequence":{"long":14258},"type":"EVENT_WRITE","threadId":{"int":100246},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c564c61-cc9d-41b9-879a-e0566ed3389a","sequence":{"long":14259},"type":"EVENT_READ","threadId":{"int":100246},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5199f36c-3c1a-406e-8fd1-bdfb04472e1c","sequence":{"long":14260},"type":"EVENT_SENDTO","threadId":{"int":100246},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17217","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3204433-69d2-4da4-8050-d6f2814ba590","sequence":{"long":14261},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17217","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b054e896-4913-493d-ad1e-194b1859e890","sequence":{"long":14262},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368123891729,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aef45a7a-4a43-4e1a-8012-d966229aa510","sequence":{"long":14263},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368134043616,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43a0cc8b-1502-41b7-a33f-be2206daa29a","sequence":{"long":14264},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368134043616,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efe2d899-07d8-4577-a760-555405081e3c","sequence":{"long":14265},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368134043616,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acc3009c-770a-4447-93bf-d12aed0bedf2","sequence":{"long":14266},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368134043616,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56a6605f-5fbf-43f6-9fd2-be3f227f39e8","sequence":{"long":14267},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368553925902,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43224789-764c-4106-b89b-9005d41c9367","sequence":{"long":14268},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368553925902,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17218","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5abd4e36-3241-42bc-9598-53095bfdcff6","sequence":{"long":14269},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368553925902,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17219","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7133e2e0-6f26-4fe6-b070-dbdd87af2131","sequence":{"long":14270},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368553925902,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17220","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"692812c1-afbb-4e04-af86-e90b593a2102","sequence":{"long":14271},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368553925902,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17221","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"257f4cc7-a25b-452d-a2bf-400a69fa1c6a","sequence":{"long":14272},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368553925902,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17218","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eca6b48f-2959-409d-b851-b8e8ce8e3e6d","sequence":{"long":14273},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368553925902,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17219","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb279d35-21cd-4349-8008-a66247f4af24","sequence":{"long":14274},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368553925902,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17220","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"301db198-8b59-417c-959d-a92790191766","sequence":{"long":14275},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368553925902,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17221","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58ef6c14-7c83-45ca-a663-992b2cebb875","sequence":{"long":14276},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584368824050917,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":913427},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc428ffd-201d-4700-868b-c10d0d571fe2","sequence":{"long":14277},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584369834248718,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":913791},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba62c991-334b-46ea-92bb-5fc2e18c7108","sequence":{"long":14278},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":913791},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0a57144-2415-4e65-b661-3f35a8f495c9","sequence":{"long":14280},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa2fdd2a-e73e-4493-90c8-92a330a82def","sequence":{"long":14279},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92ee809d-0a1e-4b76-853a-f5f1abed51bc","sequence":{"long":14282},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"400e7d3e-7ff3-4f1c-9beb-2824157445c6","sequence":{"long":14281},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"653b0faa-3170-466f-a882-3bb3700dbdf2","sequence":{"long":14284},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca4b7222-88b4-4c45-ac46-f26aaa05c9a1","sequence":{"long":14283},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58727ee7-0543-424d-bb33-3c58ccec7dfc","sequence":{"long":14285},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ea2029d-3b83-4c39-901d-3dbedcbf05f1","sequence":{"long":14286},"type":"EVENT_READ","threadId":{"int":100247},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32987817-4c53-4c35-bb59-b30a093d17d6","sequence":{"long":14287},"type":"EVENT_READ","threadId":{"int":100247},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67ba8440-7098-4da6-bf74-cc41135dbb8b","sequence":{"long":14288},"type":"EVENT_READ","threadId":{"int":100247},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3217},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72090f3b-8f86-45b0-b26b-2c81af19e0ce","sequence":{"long":14289},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3270},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62f41880-4da3-4ea1-8659-8b5788ba363e","sequence":{"long":14290},"type":"EVENT_WRITE","threadId":{"int":100247},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"862af634-5c98-456f-b70f-0b3c26694e13","sequence":{"long":14291},"type":"EVENT_READ","threadId":{"int":100247},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19981f2a-db96-4bb1-a6ee-6ce234eb445d","sequence":{"long":14292},"type":"EVENT_READ","threadId":{"int":100247},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f087bcca-f77a-4dfe-bc8b-71fb72143e03","sequence":{"long":14293},"type":"EVENT_READ","threadId":{"int":100247},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df770c0d-b262-4519-92f4-4a4a945720c8","sequence":{"long":14294},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1df54c9d-35e6-41b8-8c49-3b0d8f988ad0","sequence":{"long":14295},"type":"EVENT_WRITE","threadId":{"int":100247},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e994b1b-535d-4758-acad-b6d231c92162","sequence":{"long":14296},"type":"EVENT_READ","threadId":{"int":100247},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e971bad-34b5-4ad3-832a-ccbb889f0eae","sequence":{"long":14297},"type":"EVENT_SENDTO","threadId":{"int":100247},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17222","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c8543eb-6fae-416e-8c3a-be8482293661","sequence":{"long":14298},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17222","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"739b1fed-efdb-4758-b282-2e37d39d3be4","sequence":{"long":14299},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370124221789,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb81311c-87c5-42f6-a1a0-bd3f9055e667","sequence":{"long":14300},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370134064037,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f93700d-4adc-41e4-8769-5e144218890e","sequence":{"long":14301},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370134064037,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a7200e7-b9c9-4883-a66b-719d3ef09a0d","sequence":{"long":14302},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370134064037,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"caeb8ef8-9366-4590-b698-64361f34db9b","sequence":{"long":14303},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370134064037,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91b3aaab-4c15-4291-b059-00e9e8aa3c7a","sequence":{"long":14304},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584370853860699,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":916221},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e36dc2e-5172-443c-817c-828924ed6da8","sequence":{"long":14305},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584371553878608,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02ea06dc-5e3a-4496-a573-78f3c090bcbd","sequence":{"long":14306},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584371553878608,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17223","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55ad14ae-ce52-403a-9264-c498598a02fc","sequence":{"long":14307},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584371553878608,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17224","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3305600f-73b5-4436-832b-eac705b888c5","sequence":{"long":14308},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584371553878608,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17225","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15573586-5cf5-45f9-aad4-0d9649b85644","sequence":{"long":14309},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584371553878608,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17226","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cbad933-dcd0-4de0-b6b6-e65ae3cd7666","sequence":{"long":14310},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584371553878608,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17223","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92d403ac-af31-44da-9688-c2bd07ce3a6d","sequence":{"long":14311},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584371553878608,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17224","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfd4524d-20c8-430b-b8e4-1241eac3fef0","sequence":{"long":14312},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584371553878608,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17225","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a61c9f4f-d3ec-451e-9f68-2d14b61b1be2","sequence":{"long":14313},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584371553878608,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17226","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ed816f7-8312-4f9b-95bd-7c49e12eb696","sequence":{"long":14314},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584371864648124,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":917404},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c127a9f-44fd-4ebd-a526-e22ce0cf7f9f","sequence":{"long":14315},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":917404},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9bfb5a6-a819-49af-94c4-d342c77a0fa7","sequence":{"long":14317},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4deff558-cd30-46da-b0bd-419f42acf631","sequence":{"long":14316},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d666fc7-fae3-4301-8e35-8b57d61c5876","sequence":{"long":14319},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f41eb32-35c9-4a83-bb61-7189555079f4","sequence":{"long":14318},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a6524b6-c876-4f72-a016-01881a6a9ce6","sequence":{"long":14321},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b1950b4-7724-475f-b65c-67f87036c7bc","sequence":{"long":14320},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be35ff72-f44b-4e53-9513-2e27abf1bb1a","sequence":{"long":14322},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02ab6d3e-6b7f-4fb4-b81b-c25aca299630","sequence":{"long":14323},"type":"EVENT_READ","threadId":{"int":100248},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9e01f21-9aa0-43a8-9c6d-a3e6bea482f2","sequence":{"long":14324},"type":"EVENT_READ","threadId":{"int":100248},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b83ecc37-f3fd-421e-8708-471ddaaa25eb","sequence":{"long":14325},"type":"EVENT_READ","threadId":{"int":100248},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2426},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6b2d8e4-f9e0-4f33-9964-6f07db83ff32","sequence":{"long":14326},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2479},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"671ef29a-452b-45a7-93cb-33cc87f4585a","sequence":{"long":14327},"type":"EVENT_WRITE","threadId":{"int":100248},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"376a91a7-92c7-415a-9363-8ed7bcaee95b","sequence":{"long":14328},"type":"EVENT_READ","threadId":{"int":100248},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac822b25-a787-48f1-b046-94174a8d2a78","sequence":{"long":14329},"type":"EVENT_READ","threadId":{"int":100248},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4635217-681b-4cb3-9762-8f7c0ce38638","sequence":{"long":14330},"type":"EVENT_READ","threadId":{"int":100248},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1179},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"791edafe-2c8a-4008-a3a6-73f66fee4769","sequence":{"long":14331},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1232},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0237b977-f4f6-417d-a9fd-6bd776d47556","sequence":{"long":14332},"type":"EVENT_WRITE","threadId":{"int":100248},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55166a5a-c04e-4bcc-bfae-131eba7579c4","sequence":{"long":14333},"type":"EVENT_READ","threadId":{"int":100248},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0d8d0fa-66ce-4c9f-844c-0a149438c792","sequence":{"long":14334},"type":"EVENT_SENDTO","threadId":{"int":100248},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17227","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da101ba5-6db3-4a38-a57e-6adad28d7e53","sequence":{"long":14335},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17227","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fc08a46-7ec1-4f59-9f98-9328ac18e49b","sequence":{"long":14336},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372124675269,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0176ca8b-1ee3-49ec-b7d2-078172f40922","sequence":{"long":14337},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372133970173,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bbfad15-190e-4ed4-bf56-67d810f02526","sequence":{"long":14338},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372133970173,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"221aa763-2e3f-4318-8e39-aedaf4ad297e","sequence":{"long":14339},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372133970173,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ce31795-db1f-4ff5-9aee-880c49b01f25","sequence":{"long":14340},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372133970173,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f85e3043-8c85-4cc5-8ccc-c357b582dc35","sequence":{"long":14341},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584372883885518,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":919835},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1118284-82e7-4b44-b60a-8abe646e008a","sequence":{"long":14342},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584373893911586,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":920201},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf612af4-04d3-4fc9-95d8-cdaa67031523","sequence":{"long":14343},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":920201},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee1f424e-cec6-46a6-aa58-804264e4b11d","sequence":{"long":14345},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb183982-a91c-4004-abff-ee5ec1c27eda","sequence":{"long":14344},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad4ece29-6a5e-4a25-857b-a0bbf9e83631","sequence":{"long":14347},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94bbbd27-95a4-42bd-82e1-9797536ba974","sequence":{"long":14346},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aefa30e2-adc9-40e3-9789-bff0d5ce7d64","sequence":{"long":14349},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b61c095-6ba6-4e98-bb26-65b89bb5f5c9","sequence":{"long":14348},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"025faf56-69bb-4909-a9d1-e229288f3fcf","sequence":{"long":14350},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf9d2514-f5b9-443d-bbbd-03d6213fdf12","sequence":{"long":14351},"type":"EVENT_READ","threadId":{"int":100249},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2a4f64f-3a7e-4489-a88d-166fcc23211c","sequence":{"long":14352},"type":"EVENT_READ","threadId":{"int":100249},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d23e4ef3-886f-4f1b-a4ff-235a332d67e8","sequence":{"long":14353},"type":"EVENT_READ","threadId":{"int":100249},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2427},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d333b77f-36c2-42cb-9e9f-2b4047249082","sequence":{"long":14354},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2480},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff481938-544d-48c2-b4b6-b0ac2df6ef63","sequence":{"long":14355},"type":"EVENT_WRITE","threadId":{"int":100249},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10ce2254-b576-40cd-810b-a41367f02cb5","sequence":{"long":14356},"type":"EVENT_READ","threadId":{"int":100249},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c092e71e-19d5-4699-ae89-e47810cb09b7","sequence":{"long":14357},"type":"EVENT_READ","threadId":{"int":100249},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfb0c36d-e6ef-4e4b-abfa-5976cd33d0ec","sequence":{"long":14358},"type":"EVENT_READ","threadId":{"int":100249},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":362},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff8a326b-b135-4b93-82cb-cf1c7c66a364","sequence":{"long":14359},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":415},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6834c7b-4ba7-4250-ab51-e29284f24fae","sequence":{"long":14360},"type":"EVENT_WRITE","threadId":{"int":100249},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13a58704-f396-43b3-af95-99797ecb2d9e","sequence":{"long":14361},"type":"EVENT_READ","threadId":{"int":100249},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3fe9353-a08e-4ae6-bba8-8b33a0fcd99f","sequence":{"long":14362},"type":"EVENT_SENDTO","threadId":{"int":100249},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17228","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7e29414-40a3-4877-a38a-57f14e23f6e9","sequence":{"long":14363},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17228","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c754db72-3081-41cf-8528-3494045dea4c","sequence":{"long":14364},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374123883043,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a10589a8-6f22-4569-82d7-d779ff52a95e","sequence":{"long":14365},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374134100297,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"988ad0e5-5de8-4d19-91a5-17dbaeffe0e8","sequence":{"long":14366},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374134100297,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c04bded5-9ef5-4bdd-804e-c6f152b96373","sequence":{"long":14367},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374134100297,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb3ad6c8-482c-46bb-87d8-081cac7192fc","sequence":{"long":14368},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374134100297,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e76b11aa-7d4e-42b9-92e7-9a76ec08c2dd","sequence":{"long":14369},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374553880273,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd917257-f674-4eaf-aa8c-bf6690d0471b","sequence":{"long":14370},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374553880273,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17229","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f1a9b91-b6e2-4bee-9ef1-05e0c3fa96cf","sequence":{"long":14371},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374553880273,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17230","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25ff7268-f5da-4f28-88d5-023d063d844f","sequence":{"long":14372},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374553880273,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17231","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad017aec-d961-460b-b459-eb45a4376b98","sequence":{"long":14373},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374553880273,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17232","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4585f28c-7f8f-4d99-a55a-529c53696b4f","sequence":{"long":14374},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374553880273,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17229","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63f8bf09-7431-455b-ae24-81946c26de05","sequence":{"long":14375},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374553880273,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17230","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1599ac1b-b2cf-4e4f-bb12-f39323ba86ba","sequence":{"long":14376},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374553880273,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17231","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f911f84-faea-42e4-bc28-2686640c05d2","sequence":{"long":14377},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374553880273,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17232","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f87bf0c-6b77-4cb2-be6f-6643d1083505","sequence":{"long":14378},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584374913894183,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":923436},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bcf0695-7fc4-4b22-8ad4-1f71564e89b9","sequence":{"long":14379},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584375923865622,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":923799},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3474604-6f8d-4f11-842c-78c438de96b7","sequence":{"long":14380},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":923799},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c653dc8-402b-4b9c-842c-758e20d194e0","sequence":{"long":14382},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cf76978-ff3c-41f2-8305-16a45dd9cf3b","sequence":{"long":14381},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42366a9d-3fac-40c6-b47a-b14a071966b8","sequence":{"long":14384},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1685d688-072c-4b4f-9318-24a8dfadee2e","sequence":{"long":14383},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58f6adb5-d6f5-4cbe-a080-861de28a13f9","sequence":{"long":14386},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ed70082-780b-4d9e-92f1-e7fa745916ff","sequence":{"long":14385},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e3f3d5d-8a6d-4447-a4e0-8d86fc2b02eb","sequence":{"long":14387},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62d96fe2-b383-4175-97e0-5d220bba0dd6","sequence":{"long":14388},"type":"EVENT_READ","threadId":{"int":100250},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68c8b51e-7165-4d6a-8e7b-6df4ada4aad1","sequence":{"long":14389},"type":"EVENT_READ","threadId":{"int":100250},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d86a12dd-9c15-453b-a90a-c7094a3a425d","sequence":{"long":14390},"type":"EVENT_READ","threadId":{"int":100250},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3231},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"485c1727-31cc-48c1-a1c1-d4de61c8ace0","sequence":{"long":14391},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3284},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80795d6e-f0f2-48b0-aa0e-1da3bdd999b5","sequence":{"long":14392},"type":"EVENT_WRITE","threadId":{"int":100250},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"610966b9-8b05-4e45-a65f-ca82304210bb","sequence":{"long":14393},"type":"EVENT_READ","threadId":{"int":100250},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08b27602-fd19-4c20-a923-f7e38a42963b","sequence":{"long":14394},"type":"EVENT_READ","threadId":{"int":100250},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9817db7-e2b4-45bc-b424-2c8fdc20d82c","sequence":{"long":14395},"type":"EVENT_READ","threadId":{"int":100250},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a2c734f-b181-498c-a6de-fcc7e3ad755e","sequence":{"long":14396},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7e171db-5bdf-4878-9206-35d16b053e0b","sequence":{"long":14397},"type":"EVENT_WRITE","threadId":{"int":100250},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aaf3d79d-cb3b-421e-a7dd-4cf06e31cd50","sequence":{"long":14398},"type":"EVENT_READ","threadId":{"int":100250},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"005b3991-b1a9-4c4c-8aab-8619e6a2c119","sequence":{"long":14399},"type":"EVENT_SENDTO","threadId":{"int":100250},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17233","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"003b5810-ff3c-4102-aabd-5b936ea0f5b1","sequence":{"long":14400},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17233","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15cb3ab9-d6f4-4eb0-b6eb-d23e6ef2562d","sequence":{"long":14401},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376124305108,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"803270ae-fe34-416d-91ea-ffb89a468482","sequence":{"long":14402},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376133898481,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f10fb654-c39d-4a62-8e33-3619ce1da8e8","sequence":{"long":14403},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376133898481,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ce6a249-0345-4cf0-8d7f-8d3146a45801","sequence":{"long":14404},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376133898481,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"587f58bd-1c2d-46be-8338-7d7124e9cb58","sequence":{"long":14405},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376133898481,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a59c7689-2b65-472e-9601-eb7c30088463","sequence":{"long":14406},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584376933866868,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":926232},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7381430-553b-485d-b84a-76ea595aa37d","sequence":{"long":14407},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584377553868394,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39b6c063-c8e1-49cb-b369-b80d0a3ccd6a","sequence":{"long":14408},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584377553868394,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17234","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da3f4d9d-8e30-4a88-8352-179643b22c98","sequence":{"long":14409},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584377553868394,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17235","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76e012d0-bad6-479d-b6f4-3dc9381ec4aa","sequence":{"long":14410},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584377553868394,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17236","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a88f9fc-3be0-4439-9402-03212ea4ab99","sequence":{"long":14411},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584377553868394,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17237","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfa39dad-ec83-4312-bf04-f69ac663420e","sequence":{"long":14412},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584377553868394,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17234","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8a5211a-dd4f-4f01-b238-494d10dba01e","sequence":{"long":14413},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584377553868394,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17235","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa3b4b0e-3d63-4e04-9950-01aa3f85b014","sequence":{"long":14414},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584377553868394,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17236","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6359576a-df86-4b78-806d-6266a495c2a3","sequence":{"long":14415},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584377553868394,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17237","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0949a7b-1c28-4070-8402-96e5cb3cf2de","sequence":{"long":14416},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584377943853743,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":927413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"041a9b38-c226-4bf0-8433-3c8ff116684c","sequence":{"long":14417},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":927413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bc2edf2-545f-4aa6-b883-abde18e13b8d","sequence":{"long":14419},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94688caf-983f-4023-a6c7-5b3c4fc069a0","sequence":{"long":14418},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1d0a058-781e-4ea1-8e4e-d66563181e45","sequence":{"long":14421},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32b213f2-3006-455c-9ce8-2351f264bf7e","sequence":{"long":14420},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78c5035f-19dd-4071-8ba9-f7496d2e9c06","sequence":{"long":14423},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48525930-2bb9-4ad6-a8d6-ac199b74dc4f","sequence":{"long":14422},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c670c3d-2ed2-4734-a395-b9b42100eb5d","sequence":{"long":14424},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ca024c3-1d34-4994-ac55-4c50e9731b93","sequence":{"long":14425},"type":"EVENT_READ","threadId":{"int":100251},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7030a2a6-d3a5-4a86-a848-a93655e7d6e5","sequence":{"long":14426},"type":"EVENT_READ","threadId":{"int":100251},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d20a9cd-1ae1-44c0-8215-b4793fdc06be","sequence":{"long":14427},"type":"EVENT_READ","threadId":{"int":100251},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2429},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3abc5a1-75ff-4c2f-adcd-30e4a7b5fcb7","sequence":{"long":14428},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2482},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6002c239-8e0b-4fbb-a570-a2e51d6d2528","sequence":{"long":14429},"type":"EVENT_WRITE","threadId":{"int":100251},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed1f5aa6-f5d0-4a99-acce-dad663c2420f","sequence":{"long":14430},"type":"EVENT_READ","threadId":{"int":100251},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e14f8b7-d053-46fc-aed8-6b9558b4212a","sequence":{"long":14431},"type":"EVENT_READ","threadId":{"int":100251},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"208f375f-5a14-49bd-bf08-defa1eda5f6d","sequence":{"long":14432},"type":"EVENT_READ","threadId":{"int":100251},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1177},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"284a948a-cff6-41e1-8881-82a31990d72d","sequence":{"long":14433},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1230},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d08889a-f558-4d7e-9c74-5cd6e51f9c75","sequence":{"long":14434},"type":"EVENT_WRITE","threadId":{"int":100251},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"947744d8-51d9-4fbb-853a-c7c1139545be","sequence":{"long":14435},"type":"EVENT_READ","threadId":{"int":100251},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2150fc50-6a5d-4c7f-a780-61519f25dd41","sequence":{"long":14436},"type":"EVENT_SENDTO","threadId":{"int":100251},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17238","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3785177-0f28-4439-9e79-bb84aa37b34f","sequence":{"long":14437},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17238","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b4333a9-6b4a-416b-8cc4-80dd959420dc","sequence":{"long":14438},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378123936363,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4642852-11be-404d-b8d2-490df994bdaa","sequence":{"long":14439},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378133899775,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"696a3e5c-4113-4cbc-b6cf-3deb28d0288b","sequence":{"long":14440},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378133899775,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5ca9de4-e8c8-42ba-8156-0f183b60c6c3","sequence":{"long":14441},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378133899775,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b72c6688-1b98-484b-8b52-96d5f23ab074","sequence":{"long":14442},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378133899775,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16556ff3-6c8c-43a3-9f5d-c35f533b59e1","sequence":{"long":14443},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584378963889706,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":929840},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b88349d-f413-4562-a1cb-66956231b19e","sequence":{"long":14444},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584379974067358,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":930203},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfee18dc-5e8d-47be-b780-f578866dc49b","sequence":{"long":14445},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":930203},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54dba4b9-a69d-4e2d-9645-ff630dc4f929","sequence":{"long":14447},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3d01ea2-0e7e-4222-9b98-b0ad420de9bf","sequence":{"long":14446},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8530827-87b1-46f6-866f-ed3bd52e64cd","sequence":{"long":14449},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e146e9a2-8db5-4d5f-bd99-3690342f7a56","sequence":{"long":14448},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03d95769-d884-4574-96d1-e57e267319ac","sequence":{"long":14451},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00957ded-154c-4b85-a152-3199b2baf6f2","sequence":{"long":14450},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dec91d83-9b0d-4be1-8c11-94466cd3f684","sequence":{"long":14452},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"001b93f0-7316-44dc-8bf1-ed7b188f3b66","sequence":{"long":14453},"type":"EVENT_READ","threadId":{"int":100252},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca432b71-c728-4d54-8a15-a38cbf22068e","sequence":{"long":14454},"type":"EVENT_READ","threadId":{"int":100252},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36444fa1-7d72-4fa3-ad0f-bbc476d79047","sequence":{"long":14455},"type":"EVENT_READ","threadId":{"int":100252},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2423},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0b0c5ea-fa64-410a-a3ca-5fb6262c41da","sequence":{"long":14456},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2476},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d784feb3-471e-4215-b099-bf1c4a073924","sequence":{"long":14457},"type":"EVENT_WRITE","threadId":{"int":100252},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1d48281-9de0-477d-ba8d-51fecfa0d7c0","sequence":{"long":14458},"type":"EVENT_READ","threadId":{"int":100252},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"075e64e1-8d8e-4b2f-9311-d3353a03c28a","sequence":{"long":14459},"type":"EVENT_READ","threadId":{"int":100252},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64f27eb1-3429-45c4-a9e1-575adbd7d7d6","sequence":{"long":14460},"type":"EVENT_READ","threadId":{"int":100252},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b841e303-6872-40c4-bd1c-efc6ea46c718","sequence":{"long":14461},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b59bcff0-c671-4c0b-9728-64985c2b6337","sequence":{"long":14462},"type":"EVENT_WRITE","threadId":{"int":100252},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79320fc3-ba65-4bfb-b44c-75361eda16d1","sequence":{"long":14463},"type":"EVENT_READ","threadId":{"int":100252},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3563170-f1ef-424e-8660-6e0c535a3e18","sequence":{"long":14464},"type":"EVENT_SENDTO","threadId":{"int":100252},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17239","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ffdc67f-8053-4423-93c2-6d08c990d2f4","sequence":{"long":14465},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17239","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b27af029-7b1f-4337-b5c5-97d9d4e46ad2","sequence":{"long":14466},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380124047022,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d20f817a-0b7a-4dc3-adbb-f4230ca58776","sequence":{"long":14467},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380134004652,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da4704ab-9550-4530-9cd1-e1dff2d83bbe","sequence":{"long":14468},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380134004652,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d04cbd6e-de18-4063-a934-eeeca5c3e8dc","sequence":{"long":14469},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380134004652,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93fe3282-3bad-465b-be2a-dfce068cfa08","sequence":{"long":14470},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380134004652,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e91804a3-d90c-4ebe-a65f-6d2fe4fade3b","sequence":{"long":14471},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380553865075,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"065d5678-4c01-4472-9681-2090a0f7d859","sequence":{"long":14472},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380553865075,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17240","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"248380e0-ccb2-4a54-bab1-67db6f81315b","sequence":{"long":14473},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380553865075,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17241","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2e4ba23-0ab4-40e6-ba04-4e4d3181c225","sequence":{"long":14474},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380553865075,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17242","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0d34fa5-9d2f-4f7c-8a6f-09d3eb8116d1","sequence":{"long":14475},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380553865075,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17243","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c99d940-ac3a-45ff-a78f-5ad20e77aeda","sequence":{"long":14476},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380553865075,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17240","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b869f37e-473b-4183-9444-ce49194680df","sequence":{"long":14477},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380553865075,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17241","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f46b9517-9692-4140-bdb0-35bf44759748","sequence":{"long":14478},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380553865075,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17242","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9c088be-9cf7-4ebb-a468-33dbf237d36e","sequence":{"long":14479},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380553865075,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17243","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14984324-91cd-44d8-be3e-0242d6e35365","sequence":{"long":14480},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584380993941343,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":933424},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a2fd1e0-8ec5-4e38-91be-dfd90288f369","sequence":{"long":14481},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382004231439,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":933787},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01310fa8-6a23-476a-8c44-78c51973f67c","sequence":{"long":14482},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":933787},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2ab80c4-8a31-498d-a33b-99cc8dfd9f1b","sequence":{"long":14484},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cd85e32-50bb-41f7-964d-e8632113befb","sequence":{"long":14483},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"910042d8-8b35-4aeb-86dc-4d5c2af00fa7","sequence":{"long":14486},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1be6f11d-2ad9-4422-be3d-e4726bf1160c","sequence":{"long":14485},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f689f272-17c4-4055-86ff-83ba806ac159","sequence":{"long":14488},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e520c46d-a8e5-4c24-a863-8397d7170fc1","sequence":{"long":14487},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29d3da73-6b35-4934-aee4-2767462dc68f","sequence":{"long":14489},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"255d4497-40e2-4da5-b33f-05ea052a7a28","sequence":{"long":14490},"type":"EVENT_READ","threadId":{"int":100253},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9106006-71c7-4d04-bdc1-9b3c986e59e6","sequence":{"long":14491},"type":"EVENT_READ","threadId":{"int":100253},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"255a2c22-9f0e-42c6-95e0-2ca44f3eace4","sequence":{"long":14492},"type":"EVENT_READ","threadId":{"int":100253},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3217},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce6dfa83-d200-4971-8576-8f28cf2b311f","sequence":{"long":14493},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3270},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f314ffb4-84f4-47cd-a1ad-60300add733d","sequence":{"long":14494},"type":"EVENT_WRITE","threadId":{"int":100253},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c55bc83-e8f8-4619-a357-354c84668b0a","sequence":{"long":14495},"type":"EVENT_READ","threadId":{"int":100253},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8e038a4-f475-4880-8030-a16a923c0efb","sequence":{"long":14496},"type":"EVENT_READ","threadId":{"int":100253},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfa8e5f1-5977-4ebf-be88-21e9457050f2","sequence":{"long":14497},"type":"EVENT_READ","threadId":{"int":100253},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56b52da6-6930-48c7-926d-cd8ead9d6765","sequence":{"long":14498},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad91c86e-4dd9-4084-812f-32ed4f40e627","sequence":{"long":14499},"type":"EVENT_WRITE","threadId":{"int":100253},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28118e4c-1a49-47f0-8f0e-f6ef94e9cdd2","sequence":{"long":14500},"type":"EVENT_READ","threadId":{"int":100253},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac61fb3e-735b-4b32-884b-f883bee42134","sequence":{"long":14501},"type":"EVENT_SENDTO","threadId":{"int":100253},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17244","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79bbcb42-c1ef-41fa-ad82-200e219e4eca","sequence":{"long":14502},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17244","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d246ec62-2baf-4e40-8353-37f499f0e45b","sequence":{"long":14503},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382123908641,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e815e75-329b-450b-9149-856114b03575","sequence":{"long":14504},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382133890587,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8508890e-2464-464e-ab46-47617fae0bdf","sequence":{"long":14505},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382133890587,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3669757-7d97-4ba0-bb1a-0d388d26bfc3","sequence":{"long":14506},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382133890587,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b217a634-d57b-4215-a0f0-adab3196cebf","sequence":{"long":14507},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584382133890587,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3dd006f9-b617-4e60-aadc-7d89d04615bf","sequence":{"long":14508},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584383024287351,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":936230},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ed612f3-67b6-4336-9501-baffccebdaf9","sequence":{"long":14509},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584383554017323,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3140957b-d464-400d-8919-f31f2200578f","sequence":{"long":14510},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584383554017323,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17245","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad6465a0-6184-45e0-a89a-783e8f8bf6da","sequence":{"long":14511},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584383554017323,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17246","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1d85fd3-7c50-4456-8875-655e7eae0c4e","sequence":{"long":14512},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584383554017323,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17247","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30d48135-088b-4c33-a231-65b8618a21b0","sequence":{"long":14513},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584383554017323,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17248","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51ccea29-df0e-4f24-8e5c-07db084903a0","sequence":{"long":14514},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584383554017323,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17245","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"710ccaaa-89be-41bf-9696-2cd3858a6c18","sequence":{"long":14515},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584383554017323,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17246","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfd3f086-6112-44ff-9c12-427c0770b9ac","sequence":{"long":14516},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584383554017323,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17247","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70b30699-c662-4eb5-a6a9-4d7499092ef1","sequence":{"long":14517},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584383554017323,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17248","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2dd3edd-56f5-49e4-8b9d-716a44383f79","sequence":{"long":14518},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384034393256,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":937412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bc3cb51-0dd2-48e0-86a2-412f4087a958","sequence":{"long":14519},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":937412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d75cfb0c-b620-4f6a-9920-d210f5736470","sequence":{"long":14521},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ab38888-6edb-4cc2-8672-9225893a1c55","sequence":{"long":14520},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60b5145a-e53c-4aab-9058-47b39efa0328","sequence":{"long":14523},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6d58603-5ec5-4ae2-9ec8-aa1d10663198","sequence":{"long":14522},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b2f3258-2767-4186-a7c4-378eaca99e64","sequence":{"long":14525},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2805b09d-f293-43eb-9436-1454c9135144","sequence":{"long":14524},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7469a3d0-02bd-47f9-8b86-7e04b3f1d6bf","sequence":{"long":14526},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"443b459f-bcbd-41aa-9a6e-36de57748d00","sequence":{"long":14527},"type":"EVENT_READ","threadId":{"int":100254},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d08b1c4-6aad-4464-986e-ce82473d9ea7","sequence":{"long":14528},"type":"EVENT_READ","threadId":{"int":100254},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e138218b-ead7-44cb-a01f-0aa310b905eb","sequence":{"long":14529},"type":"EVENT_READ","threadId":{"int":100254},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2439},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a846bfb-5f4a-48f5-9d9f-5e23c043642d","sequence":{"long":14530},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2492},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"204c5796-8f97-469d-ab02-f699cd02657f","sequence":{"long":14531},"type":"EVENT_WRITE","threadId":{"int":100254},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c82c0e01-a2a6-4df4-8652-59c6da1e2a18","sequence":{"long":14532},"type":"EVENT_READ","threadId":{"int":100254},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b1d519b-f052-4ecc-9169-2b42f095ca2d","sequence":{"long":14533},"type":"EVENT_READ","threadId":{"int":100254},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b09a045-45f9-4715-94b3-0c14648fa214","sequence":{"long":14534},"type":"EVENT_READ","threadId":{"int":100254},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1178},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5c7656c-9d7e-4a38-ae58-313bf043ee71","sequence":{"long":14535},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1231},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8da02d1c-4fdb-4212-ade2-954c4ed946e2","sequence":{"long":14536},"type":"EVENT_WRITE","threadId":{"int":100254},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bbdd171-25af-4e31-8656-92a1ae634214","sequence":{"long":14537},"type":"EVENT_READ","threadId":{"int":100254},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88c3f63d-24a5-4c6b-9063-2b7923530588","sequence":{"long":14538},"type":"EVENT_SENDTO","threadId":{"int":100254},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17249","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5464b358-e838-400e-abea-6cd71c2e0fed","sequence":{"long":14539},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17249","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9f12b7c-7e4e-4b57-b786-050290d10585","sequence":{"long":14540},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384123867448,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57371407-b13a-4717-8561-b265a842ff9f","sequence":{"long":14541},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384134127942,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04116e13-afe2-4ce0-a65a-8ad0df6ad016","sequence":{"long":14542},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384134127942,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8dd7ba50-e1f8-4500-9873-b9bea1de7e34","sequence":{"long":14543},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384134127942,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75f021c9-9a4d-44fb-8b87-b4c193a6b222","sequence":{"long":14544},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584384134127942,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e39eef81-1f2b-43b0-87c7-b779c6b4cacc","sequence":{"long":14545},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584385053970141,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":939845},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b268e443-1da9-4064-a874-760c97af41c0","sequence":{"long":14546},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386063937286,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":940212},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30db42aa-d97d-4611-8dd0-dcd5aaa304d7","sequence":{"long":14547},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":940212},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0265fe14-286c-47cb-82b1-0647a35c9351","sequence":{"long":14549},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e6edb53-4161-4d5c-8dd1-e9e193df68aa","sequence":{"long":14548},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b92eda16-8610-424b-8597-4dbe015057b9","sequence":{"long":14551},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fae062e5-8a9d-45d7-9621-8d3ae493f26a","sequence":{"long":14550},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eeed0c46-abc5-4ab0-a0b5-332ccf5d5914","sequence":{"long":14553},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba84a34c-684a-41b6-a43f-59e485a438a6","sequence":{"long":14552},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4c911dd-7589-4623-afdb-6ce2073161ca","sequence":{"long":14554},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"449dc15c-ae13-4097-a413-18f41d55bb8c","sequence":{"long":14555},"type":"EVENT_READ","threadId":{"int":100255},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1788126-a862-40bc-8029-7bd1c90b0ef0","sequence":{"long":14556},"type":"EVENT_READ","threadId":{"int":100255},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbb64314-5b5c-40c4-988c-aea8b80878c0","sequence":{"long":14557},"type":"EVENT_READ","threadId":{"int":100255},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2429},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"616eecec-7388-413d-8def-6458f1444024","sequence":{"long":14558},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2482},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b1321e0-84a8-485d-a37d-18ff54462ca5","sequence":{"long":14559},"type":"EVENT_WRITE","threadId":{"int":100255},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd7a394e-c6dd-423a-b0b7-db134037d362","sequence":{"long":14560},"type":"EVENT_READ","threadId":{"int":100255},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"152880ec-93c7-4dde-a1ea-9cc38db0d111","sequence":{"long":14561},"type":"EVENT_READ","threadId":{"int":100255},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97cc2f3a-cd0d-4fe7-9d06-f1501fadf424","sequence":{"long":14562},"type":"EVENT_READ","threadId":{"int":100255},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":363},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6361b834-1af4-4dda-8ee6-fe59128bc4e0","sequence":{"long":14563},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":416},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edf1bc3b-bff0-41f9-bb55-dd358b277b79","sequence":{"long":14564},"type":"EVENT_WRITE","threadId":{"int":100255},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7d4e892-029b-4f3f-a7c8-fb4967cff0a9","sequence":{"long":14565},"type":"EVENT_READ","threadId":{"int":100255},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3fd204e-65c8-43c9-94b6-3eb9d2115fb3","sequence":{"long":14566},"type":"EVENT_SENDTO","threadId":{"int":100255},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17250","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0838a7f5-da39-4c7f-bdea-ca7ba849a64d","sequence":{"long":14567},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17250","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dd0cb46-2433-4555-a672-c5de0e45bbd5","sequence":{"long":14568},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a66c8db-c8ca-4520-a3de-a30613ab0175","sequence":{"long":14569},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a51dcba1-eba0-41ea-8ca6-0aa0e2fd1180","sequence":{"long":14570},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67811890-e3eb-4100-bc5b-b7131e6b6908","sequence":{"long":14571},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f90bf4a-3bf1-4766-b72e-877aaa4509d2","sequence":{"long":14572},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386124290196,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e1bdb56-fcbf-46ad-9911-3451281271e2","sequence":{"long":14573},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386554134484,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"320c3e6a-6384-490d-ae8a-46fc315ffe8c","sequence":{"long":14574},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386554134484,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17251","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a3c66be-9dd0-42f0-ba64-dabe0104793f","sequence":{"long":14575},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386554134484,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17252","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1aa5703e-c4c4-41c9-94e8-748fa17064fe","sequence":{"long":14576},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386554134484,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17253","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f87fe3dc-f660-41b4-b3c9-2731a51b2bd9","sequence":{"long":14577},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386554134484,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17254","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56bb10e8-fa17-4279-b9a8-ef10cc225e2b","sequence":{"long":14578},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386554134484,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17251","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"059c3424-9008-43fb-9f1e-3f3e5207cc96","sequence":{"long":14579},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386554134484,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17252","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ab52cbf-375a-40d5-8eed-21564b325800","sequence":{"long":14580},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386554134484,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17253","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc0fc9c5-9cd2-418c-ab7b-f12ce2989224","sequence":{"long":14581},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584386554134484,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17254","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5aee27ab-980d-43a3-a2f3-f1810be2976b","sequence":{"long":14582},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584387083901140,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":943442},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"763cec86-e32c-48a6-b8bc-dd0b3a62867c","sequence":{"long":14583},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388094338582,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":943805},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfde7a17-afc3-42ff-b7cb-b2b4bf8239b9","sequence":{"long":14584},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":943805},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cf7d40c-c8c2-479c-b556-afa8491b30c7","sequence":{"long":14586},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27475fd1-57d3-4a30-8e8a-8a3d90f735b2","sequence":{"long":14585},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89ec2842-7a36-4983-8524-d702d509af6f","sequence":{"long":14588},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"045318af-610a-49ae-bd4f-c0a390c3485f","sequence":{"long":14587},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78e13b7d-aafd-45c9-bbab-a2b5a54b3e94","sequence":{"long":14590},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8b4e1dd-dd63-46c1-99f3-28888bbd523d","sequence":{"long":14589},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6eb2db61-249a-464c-88e7-475fb2d4847e","sequence":{"long":14591},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e600c021-b3f6-467f-b346-42129b3a3426","sequence":{"long":14592},"type":"EVENT_READ","threadId":{"int":100256},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa392d63-e775-4f14-97c7-3fe45f38b6d6","sequence":{"long":14593},"type":"EVENT_READ","threadId":{"int":100256},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d9e7d26-f33f-4c15-83ba-a756109c5fb9","sequence":{"long":14594},"type":"EVENT_READ","threadId":{"int":100256},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3226},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"867c55ad-01a6-4ea3-85a2-8bf68f0dc679","sequence":{"long":14595},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3279},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d4f2abd-060d-4bd7-8181-8cb5dad30c30","sequence":{"long":14596},"type":"EVENT_WRITE","threadId":{"int":100256},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d9d7b8d-4305-4e9f-be9c-14c46edce72d","sequence":{"long":14597},"type":"EVENT_READ","threadId":{"int":100256},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb4fdb04-85dc-4bda-8d20-d8c75db2aa98","sequence":{"long":14598},"type":"EVENT_READ","threadId":{"int":100256},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c0e7954-5395-4e48-993b-bf43bb4387c1","sequence":{"long":14599},"type":"EVENT_READ","threadId":{"int":100256},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"500fa837-739f-42cc-924b-7337da4f8c48","sequence":{"long":14600},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"485354e4-a3f5-438c-a774-31b8a815c51a","sequence":{"long":14601},"type":"EVENT_WRITE","threadId":{"int":100256},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f36eb51-c148-40f8-b74d-9bec19fe3982","sequence":{"long":14602},"type":"EVENT_READ","threadId":{"int":100256},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84636aad-3175-4fe3-bce0-bed31a84b4ca","sequence":{"long":14603},"type":"EVENT_SENDTO","threadId":{"int":100256},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17255","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff1e1d14-f5f1-419b-a0d7-920a850e9be0","sequence":{"long":14604},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17255","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d8211ea-18a8-47d4-8804-de8f0b2d8ecc","sequence":{"long":14605},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388124630859,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cdb3d4f-96b1-4be1-a8d8-cd34df4f149e","sequence":{"long":14606},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388134091894,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a948b80-5f64-4dc6-a485-702c2f07e398","sequence":{"long":14607},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388134091894,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90608779-98ab-477b-a211-085e8ac9a0b1","sequence":{"long":14608},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388134091894,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02280412-6eeb-4c5a-ab08-e03bfa118a80","sequence":{"long":14609},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584388134091894,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e482060-6c6d-4ada-9c4c-2074862337f2","sequence":{"long":14610},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584389114277936,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":946236},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ddf389e-e1a7-444d-800a-15d90288c2d6","sequence":{"long":14611},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584389554442826,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1521c7f-fad1-47e2-b746-d18ef5dabaf0","sequence":{"long":14612},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584389554442826,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17256","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1592eb70-c518-43ad-80fd-a02d676ffc61","sequence":{"long":14613},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584389554442826,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17257","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7b9f6ec-8182-4b2f-b9ac-0139f99150e1","sequence":{"long":14614},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584389554442826,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17258","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3278fdc1-3fba-4ea0-8e80-c2e910754fb2","sequence":{"long":14615},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584389554442826,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17259","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02c590eb-1c8a-4022-898c-a223e84c7b2c","sequence":{"long":14616},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584389554442826,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17256","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03577f44-cf90-4061-8be5-76081a6b2546","sequence":{"long":14617},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584389554442826,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17257","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cab95f0-0506-4b2a-b153-ba2dcb5244b7","sequence":{"long":14618},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584389554442826,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17258","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d603b94b-8370-4db7-a85d-b72533b9b9be","sequence":{"long":14619},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584389554442826,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17259","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68d05e20-5d47-4798-ab2c-9c027c5eb901","sequence":{"long":14620},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":947413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad16e7ca-69c1-4413-b1ca-05db0b983b8f","sequence":{"long":14621},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":947413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c57e6a7-4217-4913-bd89-7c0768384b78","sequence":{"long":14623},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ecdd46e-3634-4ced-b099-2bbcb1804d1d","sequence":{"long":14622},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5ec5b31-6984-451d-b0df-a00682a7156d","sequence":{"long":14625},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59faa8a2-fd1f-4ea8-abd7-717be91c7db6","sequence":{"long":14624},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58db9824-ae2d-42df-9f55-458ad1d0debc","sequence":{"long":14627},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4685b9f-56d6-4e43-ad3d-978ed45d6ddb","sequence":{"long":14626},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d634cb25-01b9-43ab-aa68-677c6b91ace3","sequence":{"long":14628},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49e580b6-0996-40f6-b3bb-9a4524380c4b","sequence":{"long":14629},"type":"EVENT_READ","threadId":{"int":100257},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94ce43b2-1bbe-49a2-ba11-113c522b8363","sequence":{"long":14630},"type":"EVENT_READ","threadId":{"int":100257},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc9b70ba-9edc-44d4-8b2c-5b2dafb8205e","sequence":{"long":14631},"type":"EVENT_READ","threadId":{"int":100257},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2427},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a860dd6-8cf6-4f13-a353-a22d0c3c50c8","sequence":{"long":14632},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2480},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"156ed8f0-27c4-4408-b916-aff348571db0","sequence":{"long":14633},"type":"EVENT_WRITE","threadId":{"int":100257},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6424886e-7aeb-4ff7-8f4b-95e83afaf599","sequence":{"long":14634},"type":"EVENT_READ","threadId":{"int":100257},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3613105-7aac-450f-9a62-95b754c3b723","sequence":{"long":14635},"type":"EVENT_READ","threadId":{"int":100257},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97e83b60-c548-4bc6-843d-8e369db9ae67","sequence":{"long":14636},"type":"EVENT_READ","threadId":{"int":100257},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1173},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28b3265b-115e-4a0f-ae9d-64afda8de0af","sequence":{"long":14637},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1226},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89a3073b-d723-4d21-bd17-e580be8d5aa4","sequence":{"long":14638},"type":"EVENT_WRITE","threadId":{"int":100257},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390124155187,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"058e8a98-b6c6-4912-9722-4be427a0ba77","sequence":{"long":14639},"type":"EVENT_READ","threadId":{"int":100257},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390133865016,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b6e2c37-e73e-419d-91ea-c9c4eb731252","sequence":{"long":14640},"type":"EVENT_SENDTO","threadId":{"int":100257},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390133865016,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17260","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"442d0c42-2521-458b-98a2-d8bc02bfa269","sequence":{"long":14641},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390133865016,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17260","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb035aff-9566-46a4-b88c-a572b13b9aac","sequence":{"long":14642},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390133865016,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce9993b1-3237-467f-beed-ae3d0c2f467f","sequence":{"long":14643},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390133865016,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a486ce7d-cf0f-448b-a306-243203cc6d84","sequence":{"long":14644},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390133865016,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f158952-16ed-445d-b873-b05e128fc79a","sequence":{"long":14645},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390133865016,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de99492d-ec08-4ef7-9b05-d706e45f8fda","sequence":{"long":14646},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584390133865016,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee6d6574-2cca-4ca7-babf-5707229dae20","sequence":{"long":14647},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584391143928729,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":949837},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3df47b8d-07cf-4d78-8651-98c3e3f4ace8","sequence":{"long":14648},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392124088394,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":949837},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51527e41-ce7e-4100-bc12-2a1c4b3b58bc","sequence":{"long":14650},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584392124088394,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67599a17-337e-45b6-9cbf-3c72dc3e6233","sequence":{"long":14649},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392124088394,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a5c06fe-18ff-4293-bd47-6519189a1c2a","sequence":{"long":14652},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584392124088394,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3eb407b-cdd2-479b-8930-2bc1ae99022c","sequence":{"long":14651},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392124088394,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cbe0646-b947-4432-b796-b5588e348c6f","sequence":{"long":14653},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392124088394,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd1d0cce-2fd1-4fea-98b0-2362297e99a4","sequence":{"long":14654},"type":"EVENT_READ","threadId":{"int":100258},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392124088394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1695fa79-b036-4882-bca5-ce747336f934","sequence":{"long":14655},"type":"EVENT_READ","threadId":{"int":100258},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392124088394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10b88216-893a-4ecf-be7f-5b5d19a53eff","sequence":{"long":14656},"type":"EVENT_READ","threadId":{"int":100258},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392124088394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2420},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b80304f0-5be2-4f29-bf28-55261e5644ab","sequence":{"long":14657},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392124088394,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2473},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79e1ca91-f9b1-49f0-9b9b-694428d5fa1f","sequence":{"long":14658},"type":"EVENT_WRITE","threadId":{"int":100258},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392124088394,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"867874ff-c759-4eb0-a014-fd69f124bc45","sequence":{"long":14659},"type":"EVENT_READ","threadId":{"int":100258},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392124088394,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f5b672c-f75d-483f-99f3-ae77b6bc6571","sequence":{"long":14660},"type":"EVENT_SENDTO","threadId":{"int":100258},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392124088394,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17261","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae37944a-ccfc-4875-9277-0ec5a4af9032","sequence":{"long":14661},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392124088394,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17261","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"073680f7-ce89-4ed6-90c1-52b7d32771f7","sequence":{"long":14662},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392124088394,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c9acee8-f259-4559-8f73-d16a1c376e4a","sequence":{"long":14663},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392134298073,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c3f96fc-4dc9-4967-b5ae-595d273dd673","sequence":{"long":14664},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392134298073,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45ba970a-3fc3-4425-a8b1-cb1515a2e534","sequence":{"long":14665},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392154182085,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":951667},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59834982-a491-4e51-9d1b-09b3d04290ab","sequence":{"long":14666},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392553827362,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f681569-b4d7-40a1-8a19-3ea6a871219d","sequence":{"long":14667},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392553827362,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17262","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecf3d367-5976-4c64-9765-1dd5f8dab851","sequence":{"long":14668},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392553827362,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17263","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51c8d981-bf8b-4ee5-a8f8-1d9d769c8e05","sequence":{"long":14669},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392553827362,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17264","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"012000e2-297c-43b4-a989-ab1fc97e9ba6","sequence":{"long":14670},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392553827362,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17265","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"067e5f03-1c79-498f-bf2e-5d159e740f9e","sequence":{"long":14671},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392553827362,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17262","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b031f920-adb1-4f4a-8a95-054c36819890","sequence":{"long":14672},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392553827362,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17263","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfe5d177-101d-4849-a091-3efe2e6c3c0f","sequence":{"long":14673},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392553827362,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17264","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9a7d03c-4fb7-49f0-a29c-1ee7e765ed40","sequence":{"long":14674},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584392553827362,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17265","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae9bc1b7-18b6-40c7-97ec-96eba23934cf","sequence":{"long":14675},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584393164515330,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":952845},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef2a558a-7286-4af3-b30c-352baff674aa","sequence":{"long":14676},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":952845},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"758ebc8e-b0ff-4176-9403-10f9e6b225c4","sequence":{"long":14678},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bd5040e-3cc6-46df-9f83-ed88727b2c63","sequence":{"long":14677},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7088e869-ca92-4809-8504-cd940d915098","sequence":{"long":14680},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58f60e7f-7773-4498-a16b-5c56dd6a0a78","sequence":{"long":14679},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ba2cab2-081e-416a-ae26-2f21b2ad9e22","sequence":{"long":14682},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a1da672-626a-467a-bc67-b0aecc88ac2c","sequence":{"long":14681},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"236b7bad-5fd5-4ef4-a545-445f2c951da1","sequence":{"long":14683},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"397cecf7-6dad-41cf-8861-8709c783b46b","sequence":{"long":14684},"type":"EVENT_READ","threadId":{"int":100259},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c60143ba-948e-481b-bb36-941508fee952","sequence":{"long":14685},"type":"EVENT_READ","threadId":{"int":100259},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1afa370f-eec3-40d5-bd3f-5cb306dce9d9","sequence":{"long":14686},"type":"EVENT_READ","threadId":{"int":100259},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1826},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5f0663d-f509-4651-8c43-77f09ec1adbb","sequence":{"long":14687},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1879},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d3affd0-3abf-4e8e-bfe5-027dec4ade09","sequence":{"long":14688},"type":"EVENT_WRITE","threadId":{"int":100259},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"614c8b32-5550-4c11-a11a-de75b3964679","sequence":{"long":14689},"type":"EVENT_READ","threadId":{"int":100259},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b884df6d-72aa-4dc0-acb4-a314b735e883","sequence":{"long":14690},"type":"EVENT_READ","threadId":{"int":100259},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cba2938-8e75-4e9c-a899-2137ceff60e2","sequence":{"long":14691},"type":"EVENT_READ","threadId":{"int":100259},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1174},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83c493c1-80e5-4df6-bffe-0b755f61bcca","sequence":{"long":14692},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1227},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49397f38-737c-49ca-a3aa-57ab9704961d","sequence":{"long":14693},"type":"EVENT_WRITE","threadId":{"int":100259},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d5ed6fe-50cb-463d-a4f3-aab715077c26","sequence":{"long":14694},"type":"EVENT_READ","threadId":{"int":100259},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc0702c0-d9dc-4eda-89f7-58563628e123","sequence":{"long":14695},"type":"EVENT_SENDTO","threadId":{"int":100259},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17266","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21f564f5-c090-4efb-bc76-0c76ceb5b522","sequence":{"long":14696},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17266","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f69a81a3-0ae5-48cd-af79-f222bf64b017","sequence":{"long":14697},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"918fb4e7-9329-4599-a748-b1c4f31a10dc","sequence":{"long":14698},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10dbf7c8-ca70-473a-abb8-bd4539a211bf","sequence":{"long":14699},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394124128369,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1859c647-0674-472f-9c17-6ec3288cc81e","sequence":{"long":14700},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394133863101,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a748064-1d40-412d-a34e-2ab037a59b4e","sequence":{"long":14701},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394133863101,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49fe87c0-eaff-4660-b03d-e44efa6827b5","sequence":{"long":14702},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584394184016366,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":955278},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aba6f5bb-874c-4d21-9526-f59901ea7564","sequence":{"long":14703},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584395194647150,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":955642},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa57fc2c-0be5-4eb5-9300-57fee0c7ad39","sequence":{"long":14704},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584395554087565,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9a44cbb-856b-488c-a59f-a11ca8fe23bf","sequence":{"long":14705},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584395554087565,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17267","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8aad1c9-a850-4fc3-a5bd-13a12c67ef14","sequence":{"long":14706},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584395554087565,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17268","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"292e9796-6318-4357-b761-c32c7107c0d0","sequence":{"long":14707},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584395554087565,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17269","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5352eaec-f5fd-4370-b479-ed9cbbf08c93","sequence":{"long":14708},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584395554087565,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17270","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf90c363-b5c3-4820-87a3-e6c996eca9d5","sequence":{"long":14709},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584395554087565,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17267","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"632740da-782e-4dd8-9313-84142601328a","sequence":{"long":14710},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584395554087565,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17268","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c93af44-444c-4098-9e53-ee706b1564d1","sequence":{"long":14711},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584395554087565,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17269","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab539063-e66f-4b00-99aa-29007480393b","sequence":{"long":14712},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584395554087565,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17270","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94c9af22-7505-479c-9f12-962264ce5b8b","sequence":{"long":14713},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":955642},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b91c771-70fe-4f56-a498-5a4286b3d9fa","sequence":{"long":14715},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72ae500b-1982-4607-9db3-90d79ffb5511","sequence":{"long":14714},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d43be762-0871-4a37-a7d2-75bb2d8fa3f0","sequence":{"long":14717},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddea9830-b1ac-4a6e-bd83-42dd0fa6bcf1","sequence":{"long":14716},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96d628cf-4c80-4004-893e-6922044bc286","sequence":{"long":14719},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83f3e070-d45f-4484-b90a-6c91724cb861","sequence":{"long":14718},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fffbbaa-d86b-41ec-8260-cab922f49192","sequence":{"long":14720},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d92cae9a-651d-466c-b202-4169b3a99f35","sequence":{"long":14721},"type":"EVENT_READ","threadId":{"int":100260},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1eef04a-5aed-480d-95a1-23fa7dbdb943","sequence":{"long":14722},"type":"EVENT_READ","threadId":{"int":100260},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f7e9af6-76b0-40d0-abd2-1da0a383ffa8","sequence":{"long":14723},"type":"EVENT_READ","threadId":{"int":100260},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2429},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"984c9dfb-43b1-4c2c-892e-e8c14821ab3f","sequence":{"long":14724},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2482},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4a38c28-463f-4084-85a0-351de4ceb4f4","sequence":{"long":14725},"type":"EVENT_WRITE","threadId":{"int":100260},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83df71f8-2ecd-4de4-9fbc-ddf256a7a64d","sequence":{"long":14726},"type":"EVENT_READ","threadId":{"int":100260},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22c17ee5-0177-402a-9d48-37ae9f36af14","sequence":{"long":14727},"type":"EVENT_READ","threadId":{"int":100260},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6fb60a7-087c-4f0d-b647-c64c13ead1d9","sequence":{"long":14728},"type":"EVENT_READ","threadId":{"int":100260},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8b9d359-3afe-46e7-8545-b7fcd2c9f680","sequence":{"long":14729},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8aacd09-caf2-49f2-a782-cc2679f3f7fe","sequence":{"long":14730},"type":"EVENT_WRITE","threadId":{"int":100260},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e642edb4-43ed-4a85-ae63-f75220e085ea","sequence":{"long":14731},"type":"EVENT_READ","threadId":{"int":100260},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07637d44-7637-4666-9816-dc79c3002cf7","sequence":{"long":14732},"type":"EVENT_SENDTO","threadId":{"int":100260},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17271","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c063c6c5-6ebf-4cdf-8d90-eda039321ef2","sequence":{"long":14733},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17271","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db3603c4-84a8-47b5-91be-830741fe0f9c","sequence":{"long":14734},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396123894581,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8608ef1-7308-487e-9fea-940ace360631","sequence":{"long":14735},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396134149761,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33015169-5219-48ec-896a-17e4b2f87f54","sequence":{"long":14736},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396134149761,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a776a0c3-fecd-4e37-b44e-2972398994d3","sequence":{"long":14737},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396134149761,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13c96e06-3a33-41bb-9d05-df76d725f410","sequence":{"long":14738},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396134149761,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f1c2634-e111-4819-9de9-43ced9b8125a","sequence":{"long":14739},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584396214012424,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":958959},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b02dbf55-441b-4b2b-870a-dcb31771faca","sequence":{"long":14740},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584397224126901,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":959324},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e9345dd-4e9a-46b9-9c90-0a01cea15efa","sequence":{"long":14741},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":959324},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7d485e7-4a3d-41df-8a33-d8620180eff3","sequence":{"long":14743},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43fd7f76-5fa3-405c-a803-49bdfe861a2e","sequence":{"long":14742},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d5a80ce-fc1f-4464-9f0b-4fcf8bc43624","sequence":{"long":14745},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d81ed2ce-09ab-49e2-8d83-539b6af862e6","sequence":{"long":14744},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2789ca81-ae0f-42ef-ad87-af9c655b960b","sequence":{"long":14747},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93ed513a-4e6d-47f7-aacb-faad57925281","sequence":{"long":14746},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48545b2e-1d88-49fc-9919-95d5d16c0150","sequence":{"long":14748},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"930ce7eb-2088-44b6-8170-930f7102e227","sequence":{"long":14749},"type":"EVENT_READ","threadId":{"int":100261},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3b7c8f7-7a47-47a5-bb9e-ada27929ac91","sequence":{"long":14750},"type":"EVENT_READ","threadId":{"int":100261},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36287920-3b5d-4910-af29-c6060d8b5972","sequence":{"long":14751},"type":"EVENT_READ","threadId":{"int":100261},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3313},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5708a44-b2af-488a-875f-a31b122861fa","sequence":{"long":14752},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3366},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1af9b36-3f65-4ec9-87c7-097ce5150b75","sequence":{"long":14753},"type":"EVENT_WRITE","threadId":{"int":100261},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"422cb27c-5867-427e-81d4-85110aadd064","sequence":{"long":14754},"type":"EVENT_READ","threadId":{"int":100261},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11b80c5a-ab6f-4b35-9ef9-ba84d20e9403","sequence":{"long":14755},"type":"EVENT_READ","threadId":{"int":100261},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5389e01-6013-4179-9563-692e6d9347b7","sequence":{"long":14756},"type":"EVENT_READ","threadId":{"int":100261},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de8a3805-f6cb-480d-90d2-7a0d03d8f7ab","sequence":{"long":14757},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3824bd19-4509-4922-9f27-1b547a940cb5","sequence":{"long":14758},"type":"EVENT_WRITE","threadId":{"int":100261},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17adc072-4dce-4bce-ad33-026d419ee408","sequence":{"long":14759},"type":"EVENT_READ","threadId":{"int":100261},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c4a5d47-db2a-49b2-9c54-e8d098726f47","sequence":{"long":14760},"type":"EVENT_SENDTO","threadId":{"int":100261},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17272","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c60b33a-31cd-4403-9dc4-2190bbea1893","sequence":{"long":14761},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17272","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5c97619-6fa0-4743-b2cb-85cd1df2bd35","sequence":{"long":14762},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398124330943,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49ba5780-2e3e-47fe-b5d2-f2f6db0f38d4","sequence":{"long":14763},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398134141312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fd38f83-0447-478b-a7a9-5e0f30d5904e","sequence":{"long":14764},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398134141312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"379be21c-6b52-4318-a21c-08ee19dd4f14","sequence":{"long":14765},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398134141312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bd063b4-7487-457d-9877-ff0091eac630","sequence":{"long":14766},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398134141312,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecb6a1ca-8145-41e6-9966-768532816323","sequence":{"long":14767},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398243926468,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":961763},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94b83e17-d58b-450e-87cc-9456dfa9fc07","sequence":{"long":14768},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398553868433,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b3752a8-ba88-4c0c-9021-88dc703eef23","sequence":{"long":14769},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398553868433,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17273","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ee3d11d-b669-4508-89ad-56c240fddbf5","sequence":{"long":14770},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398553868433,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17274","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96836ff3-e326-4791-8e89-926ee05c82a0","sequence":{"long":14771},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398553868433,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17275","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1131c0a8-bb84-4388-ab0e-395c1b97a5ae","sequence":{"long":14772},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398553868433,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17276","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efba2d7d-f700-4d3a-85fd-9507798716fe","sequence":{"long":14773},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398553868433,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17273","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49e8c191-7be4-498f-bb13-0abb12263e92","sequence":{"long":14774},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398553868433,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17274","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53529e8f-d92b-4900-8612-1287e89aa1b2","sequence":{"long":14775},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398553868433,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17275","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ece7525a-228d-49d8-ae43-018cb2409dce","sequence":{"long":14776},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584398553868433,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17276","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50c9a6b9-56f7-432b-ac05-0fbadf6ca571","sequence":{"long":14777},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584399254338698,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":962947},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"495c05eb-e57e-489e-8450-66a8cb0e3d28","sequence":{"long":14778},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":962947},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0dcf380-136d-4537-b2ff-5a48d1167483","sequence":{"long":14780},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48ec4ac6-23fe-4909-8485-0e17facfe2be","sequence":{"long":14779},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06ecaf27-0089-407f-a95d-a3d38498459b","sequence":{"long":14782},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdcf30a4-bdb9-4cc4-a0f4-1056daace03d","sequence":{"long":14781},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f504f07e-85d4-4c7f-b871-64bf99dc144a","sequence":{"long":14784},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e134ef0-3d5b-4028-82f1-5776666aa2fb","sequence":{"long":14783},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b72ea2d-546b-4f4f-9333-837a137c0f52","sequence":{"long":14785},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0cac06b-2472-49a5-a177-bd26be69df61","sequence":{"long":14786},"type":"EVENT_READ","threadId":{"int":100262},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e519dad7-229b-4a4e-ac36-32f8d85b32d6","sequence":{"long":14787},"type":"EVENT_READ","threadId":{"int":100262},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"264d67be-f42f-4a53-bcb9-d3388ae72b2b","sequence":{"long":14788},"type":"EVENT_READ","threadId":{"int":100262},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2435},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c198f8fe-3e33-4067-9d71-a2166905e197","sequence":{"long":14789},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2488},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"487aceb0-ce3b-4afc-a354-74a3407089da","sequence":{"long":14790},"type":"EVENT_WRITE","threadId":{"int":100262},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdeef1dc-9e4b-4a22-a47c-a8f73acc6ee2","sequence":{"long":14791},"type":"EVENT_READ","threadId":{"int":100262},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b795e1fa-e1a8-4011-998e-0c6daa746ea1","sequence":{"long":14792},"type":"EVENT_READ","threadId":{"int":100262},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a33bef0-789b-48f5-9801-5974a42cbdc9","sequence":{"long":14793},"type":"EVENT_READ","threadId":{"int":100262},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1180},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5388b7fb-9b59-459c-9ac6-5bcb9ab3b748","sequence":{"long":14794},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1233},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"270c5758-d058-475d-bd05-f8abc7c1cc96","sequence":{"long":14795},"type":"EVENT_WRITE","threadId":{"int":100262},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35d51428-e936-4b95-bca7-b92ff696087c","sequence":{"long":14796},"type":"EVENT_READ","threadId":{"int":100262},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf5fbee7-5e67-40b5-9d63-6665918884ac","sequence":{"long":14797},"type":"EVENT_SENDTO","threadId":{"int":100262},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17277","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1aa696e-ce7c-432b-9d57-4b5e3e978eb9","sequence":{"long":14798},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17277","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c34759a9-1348-4e65-a061-f193e987e400","sequence":{"long":14799},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20dc3e9b-32bf-4c18-b441-d891a07c7298","sequence":{"long":14800},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c1c07af-59a7-40a6-b0ce-9230087c2758","sequence":{"long":14801},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400123897422,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"355ac981-55bd-4ad5-8f92-fee324ebec50","sequence":{"long":14802},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400133953956,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d9b951f-9ece-48f2-b4a7-8a2239013f7d","sequence":{"long":14803},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400133953956,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06b6d0d6-92b3-42d4-a2ff-9b56ee451893","sequence":{"long":14804},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584400273864730,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":965377},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbc7979d-1897-4e23-be36-6caf50aa6dc1","sequence":{"long":14805},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584401283859668,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":965741},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5603ad8-57dc-40a6-9e6e-418524de57f6","sequence":{"long":14806},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584401553884950,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d75c6be-3ef3-43c5-a4af-fe372711d2db","sequence":{"long":14807},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584401553884950,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17278","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db22463f-ffaf-4834-a092-262352536177","sequence":{"long":14808},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584401553884950,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17279","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd05cada-de1c-468c-9bf3-d0232af3f4a2","sequence":{"long":14809},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584401553884950,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17280","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10ecd9fb-a2dd-4b28-8dab-9b3a61ef5087","sequence":{"long":14810},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584401553884950,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17281","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7459619f-fe6d-41d2-8ffc-73a331d2204b","sequence":{"long":14811},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584401553884950,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17278","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f2aceef-963f-47f3-8a39-f22ddedae54e","sequence":{"long":14812},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584401553884950,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17279","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"265971d5-b94c-4d0e-bae0-9bf66e874b04","sequence":{"long":14813},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584401553884950,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17280","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"115bf710-a81b-42c0-af3f-6377a4c86cd9","sequence":{"long":14814},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584401553884950,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17281","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dcb09e8-91a9-42c3-87ca-763de26ed839","sequence":{"long":14815},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":965741},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"797673bf-d50b-4e9f-ab74-6814730ea4e4","sequence":{"long":14817},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6020e41a-2a2c-46e3-b5f1-9213b6b449af","sequence":{"long":14816},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c95265e6-e057-4873-a274-aa3ef0efc0a8","sequence":{"long":14819},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee5bbb37-77ec-4d51-9853-f034f8878da3","sequence":{"long":14818},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d3a7375-71a0-4642-b689-64189db38bef","sequence":{"long":14821},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc357c0d-7334-44fb-8a37-268cb3046a3b","sequence":{"long":14820},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b700f73-e68a-4e59-8418-133baf381f63","sequence":{"long":14822},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d382505-95db-4375-b1fc-73bac363d9d8","sequence":{"long":14823},"type":"EVENT_READ","threadId":{"int":100263},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"383ff070-3151-4ce7-a0b4-12579624ed3e","sequence":{"long":14824},"type":"EVENT_READ","threadId":{"int":100263},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8c588b2-9421-4f0f-ab8a-585b78b7a77b","sequence":{"long":14825},"type":"EVENT_READ","threadId":{"int":100263},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2426},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be82608f-7033-411b-a030-1ad68b4b9081","sequence":{"long":14826},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2479},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf0bca2c-844b-4ca1-9130-877c03402a81","sequence":{"long":14827},"type":"EVENT_WRITE","threadId":{"int":100263},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02835f4d-a3c3-46d6-bd2f-4d8ebab75eda","sequence":{"long":14828},"type":"EVENT_READ","threadId":{"int":100263},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ecc7aa9-b18d-45d0-b15f-968b4697a2c7","sequence":{"long":14829},"type":"EVENT_READ","threadId":{"int":100263},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d457131-7361-4257-98a5-0b092e7018c9","sequence":{"long":14830},"type":"EVENT_READ","threadId":{"int":100263},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e74cbd9-c8b3-42e4-aa4b-f463df67960e","sequence":{"long":14831},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c0a7722-34ea-4650-b670-2fce854f2ad6","sequence":{"long":14832},"type":"EVENT_WRITE","threadId":{"int":100263},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"403412c7-8997-40bd-aec8-dd33ffdcbc0f","sequence":{"long":14833},"type":"EVENT_READ","threadId":{"int":100263},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75c2dcba-9585-448e-94e7-deb3d7674c66","sequence":{"long":14834},"type":"EVENT_SENDTO","threadId":{"int":100263},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17282","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c52d9ba6-d980-4b97-ac14-eefde0bbf93c","sequence":{"long":14835},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17282","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17c2cd3d-4f74-4923-b32d-dd1ffa504740","sequence":{"long":14836},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402124261704,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26eaf251-6222-4f9a-830d-f357fcabdd51","sequence":{"long":14837},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402134358957,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcec0e40-c899-48fb-bf14-b2dd87c0f72f","sequence":{"long":14838},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402134358957,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ce719f7-df33-42b4-814e-ba2920e27a69","sequence":{"long":14839},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402134358957,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ed73095-d781-4d98-a63d-2da48450eb44","sequence":{"long":14840},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402134358957,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf01ef61-7ec3-47ad-8bd0-76da9fb6768d","sequence":{"long":14841},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584402304376296,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":969062},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f323503a-4e22-4c55-9e04-3fdd53fe8b73","sequence":{"long":14842},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584403314081657,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":969427},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43aec755-51d5-4208-9010-a6a005ecd967","sequence":{"long":14843},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":969427},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2ee7c49-b1a3-4ce1-9033-8ed1a6bdd1f4","sequence":{"long":14845},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d060a96e-f414-4331-abfb-c9110eceb96f","sequence":{"long":14844},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce554172-8f26-42e7-b462-272b373109a5","sequence":{"long":14847},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8dde66d8-f2be-4dad-a378-b73412950e37","sequence":{"long":14846},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"760caf99-86cd-4c2b-9a7a-2dc588c37b68","sequence":{"long":14849},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42ec2091-1187-44d8-885a-39bccc032eef","sequence":{"long":14848},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14c1d08c-f45f-4c9e-8d72-e6fe7883f2f9","sequence":{"long":14850},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c11ea3c-ea58-41b8-b576-45e003796737","sequence":{"long":14851},"type":"EVENT_READ","threadId":{"int":100264},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cba5787-ac26-43e1-b884-406e3839d74c","sequence":{"long":14852},"type":"EVENT_READ","threadId":{"int":100264},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01fdf4fe-7cdf-4cd6-a503-1a30fa1a468c","sequence":{"long":14853},"type":"EVENT_READ","threadId":{"int":100264},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3317},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0291874-0114-4918-84ce-0ebcf3af9d76","sequence":{"long":14854},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3370},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d057c44-c78e-40e5-b753-bc9602533e7d","sequence":{"long":14855},"type":"EVENT_WRITE","threadId":{"int":100264},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c01cba2e-94ed-422e-bbb5-530700c1d2a7","sequence":{"long":14856},"type":"EVENT_READ","threadId":{"int":100264},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fce45dd-8e6a-4232-ad4c-e49956e353b2","sequence":{"long":14857},"type":"EVENT_READ","threadId":{"int":100264},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73949521-0539-4f5e-962f-f7ec83d2cf38","sequence":{"long":14858},"type":"EVENT_READ","threadId":{"int":100264},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8201dfb5-a0db-4404-b71a-983b2cc22997","sequence":{"long":14859},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"355a50c3-d4d3-40f4-9fb4-ba85e0f9b5a2","sequence":{"long":14860},"type":"EVENT_WRITE","threadId":{"int":100264},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ef41d97-4b59-42aa-8116-f268001ca775","sequence":{"long":14861},"type":"EVENT_READ","threadId":{"int":100264},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15a839b5-8464-4ecd-b89a-456126418128","sequence":{"long":14862},"type":"EVENT_SENDTO","threadId":{"int":100264},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17283","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c671649f-ba4c-4b4e-8f6f-a1816334ef1c","sequence":{"long":14863},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17283","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a94ed4aa-67b1-44e9-a039-4ae7de0e0e3f","sequence":{"long":14864},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404124278609,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17ac1b60-6fd4-44bc-b579-fe37c0d35c8e","sequence":{"long":14865},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404133903136,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"169039fd-7751-4691-aba9-ed56ba1af08b","sequence":{"long":14866},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404133903136,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8194fbbc-a1bf-4ccf-bdae-2134c4c81c3c","sequence":{"long":14867},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404133903136,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93e2f5f9-9838-486f-bce1-0dc4f6fcc97e","sequence":{"long":14868},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404133903136,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"474b8833-d5ef-4571-8cc0-352c19201c2d","sequence":{"long":14869},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404334213115,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":971874},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33f6e9e9-8e48-425c-886d-15c4791d7e38","sequence":{"long":14870},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404553973081,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21d74773-5566-41e4-87ea-d23a088e9c6d","sequence":{"long":14871},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404553973081,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17284","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10c3e30d-81b9-420c-8c4c-a81ae3b36fe4","sequence":{"long":14872},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404553973081,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17285","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ba9a616-1031-469a-9242-455b7fb08c99","sequence":{"long":14873},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404553973081,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17286","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4855fd5-76f7-4920-97ce-79db176cdcf6","sequence":{"long":14874},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404553973081,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17287","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2aff489b-fce7-4eef-8a64-6c9985a5bb4b","sequence":{"long":14875},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404553973081,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17284","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"437b9f74-4782-40e5-9eec-4a4826a2b3c5","sequence":{"long":14876},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404553973081,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17285","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3206bd5-6f28-4ba4-8b51-bdec094f48bf","sequence":{"long":14877},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404553973081,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17286","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c9cbe1b-1e6b-4ae2-bf05-85f26cde6bfc","sequence":{"long":14878},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584404553973081,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17287","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"063ea962-d601-45d1-affb-e016901e269f","sequence":{"long":14879},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584405344666802,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":973056},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f63c4a3f-731a-4e38-8a33-0062488a0d17","sequence":{"long":14880},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":973056},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13dfd54d-1a23-4937-8a66-4580358e3e57","sequence":{"long":14882},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52dd2730-94c0-475a-935d-71441b4274b3","sequence":{"long":14881},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"417facb2-a11e-4484-b20d-b329fa047842","sequence":{"long":14884},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5dcbd7e-a806-46fb-987b-ac9594a8ebb6","sequence":{"long":14883},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e299917-8640-4c4d-a5dc-560e1a981685","sequence":{"long":14886},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cde66e4e-663b-40bf-9ac6-014ac79f4f57","sequence":{"long":14885},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3108e500-020e-44b1-acdf-4a45e0705bbc","sequence":{"long":14887},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad4371bf-6dee-4da1-bc42-b3e8317c8abb","sequence":{"long":14888},"type":"EVENT_READ","threadId":{"int":100265},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc0c853c-5971-4000-800b-33e54eddb577","sequence":{"long":14889},"type":"EVENT_READ","threadId":{"int":100265},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bab4bcad-cc70-413e-a8c0-a791d92478ea","sequence":{"long":14890},"type":"EVENT_READ","threadId":{"int":100265},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2443},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d85fe611-b7ab-4642-baa2-9981bd7f2ac1","sequence":{"long":14891},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2496},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fbd4065-1f07-472a-9ce1-15969280ed8b","sequence":{"long":14892},"type":"EVENT_WRITE","threadId":{"int":100265},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa7ebb3b-6f7e-4c71-a040-65c53ba3c665","sequence":{"long":14893},"type":"EVENT_READ","threadId":{"int":100265},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59bb8bdd-9150-4092-8e44-8126694f14be","sequence":{"long":14894},"type":"EVENT_READ","threadId":{"int":100265},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40d1c014-c0e7-4c4b-84a5-bb6290466291","sequence":{"long":14895},"type":"EVENT_READ","threadId":{"int":100265},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1178},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac605880-c200-4fc0-a344-e13709ed4c7b","sequence":{"long":14896},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1231},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad09a6dd-c4a0-41ae-99fc-e1ebca260c5b","sequence":{"long":14897},"type":"EVENT_WRITE","threadId":{"int":100265},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a372aec-a002-4ae9-99ed-3b5148bc32e8","sequence":{"long":14898},"type":"EVENT_READ","threadId":{"int":100265},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d549fae5-3f9b-4724-8176-49802b710166","sequence":{"long":14899},"type":"EVENT_SENDTO","threadId":{"int":100265},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17288","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"582a75e9-812e-4f26-95fa-b0fcf371e7d9","sequence":{"long":14900},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17288","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75394b91-e37f-49b0-82cc-63eff27e34d5","sequence":{"long":14901},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406124146356,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7ae8392-7fdb-4aab-ad48-2fac4e745159","sequence":{"long":14902},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406134219765,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78c16359-b757-4072-8417-6835873c38ce","sequence":{"long":14903},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406134219765,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dbc7c31-5d7b-4414-b65e-d46295249a94","sequence":{"long":14904},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406134219765,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"befabac9-995e-40bf-ba09-8acf0fdabc0d","sequence":{"long":14905},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406134219765,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eabca595-00a7-4147-9ace-401a90fb4e92","sequence":{"long":14906},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584406363950676,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":975490},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6839c98-8686-4dc1-91ff-f785374746ea","sequence":{"long":14907},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584407374036276,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":975856},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62812cf2-a1cd-4518-bf57-9d10dd81ffeb","sequence":{"long":14908},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584407553896337,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef6035f3-a5ad-46e1-84ae-14052f1f36a0","sequence":{"long":14909},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584407553896337,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17289","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b457b37-a077-49e3-b751-470aaf2c5008","sequence":{"long":14910},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584407553896337,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17290","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"990121f1-0579-43e9-b3e4-527f40c98199","sequence":{"long":14911},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584407553896337,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17291","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"597f73c9-55ad-4644-a358-ba7dae80c789","sequence":{"long":14912},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584407553896337,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17292","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91fc2b8a-0f91-4d35-8161-46502ab5abb8","sequence":{"long":14913},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584407553896337,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17289","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c1f6099-5070-4a51-9354-6a8a9ae9ccd3","sequence":{"long":14914},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584407553896337,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17290","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1317723-3cf7-4886-9c94-b7ce1cfa32cf","sequence":{"long":14915},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584407553896337,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17291","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af7aac9b-e3fe-4f85-bdba-39ce68fa29ea","sequence":{"long":14916},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584407553896337,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17292","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80eef903-28e2-495e-b145-186e2943b8f7","sequence":{"long":14917},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":975856},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae22bd30-c83d-4139-98bb-69875d384222","sequence":{"long":14919},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad7ae3f7-fc8d-448c-8fd1-e25ee344eee9","sequence":{"long":14918},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9335a64b-b1e8-4f55-ad90-c25b7a24f089","sequence":{"long":14921},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c88c67be-8703-4638-95f4-843c6505335b","sequence":{"long":14920},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15f99408-4541-48f0-a62b-93976b4788e4","sequence":{"long":14923},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9ea5255-5c98-4cf9-ab98-89fcb9cee0ba","sequence":{"long":14922},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afb8dd6e-0919-47e5-9de7-6f568c7f5279","sequence":{"long":14924},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b9a51e0-972e-443b-bffe-89438665b84d","sequence":{"long":14925},"type":"EVENT_READ","threadId":{"int":100266},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5b34e2e-f149-4ede-af1f-25db140860ce","sequence":{"long":14926},"type":"EVENT_READ","threadId":{"int":100266},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26b45dd6-c097-4c9e-a31f-730b87bcb0fa","sequence":{"long":14927},"type":"EVENT_READ","threadId":{"int":100266},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2430},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6acc4f77-92bf-491e-b2c2-e0de0a9c0ff8","sequence":{"long":14928},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2483},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c2dd176-8f85-461f-9dac-4cabe57a688d","sequence":{"long":14929},"type":"EVENT_WRITE","threadId":{"int":100266},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6222c73b-4a83-466a-9056-11d1cbd9e727","sequence":{"long":14930},"type":"EVENT_READ","threadId":{"int":100266},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bbdb4ac-bbd7-4191-b6b9-735df8298272","sequence":{"long":14931},"type":"EVENT_READ","threadId":{"int":100266},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c644e7ce-0aec-49c3-ad01-63c480e3a561","sequence":{"long":14932},"type":"EVENT_READ","threadId":{"int":100266},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":362},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21402578-0436-4ccb-b93a-a2d07e55fdea","sequence":{"long":14933},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":415},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fdd7855-ef81-4101-94e1-0a3417d71315","sequence":{"long":14934},"type":"EVENT_WRITE","threadId":{"int":100266},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"756e059d-8ecd-414b-a58b-ac5c34dd58c8","sequence":{"long":14935},"type":"EVENT_READ","threadId":{"int":100266},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ce772a0-caca-4fa6-af5c-f5b9e1df95c7","sequence":{"long":14936},"type":"EVENT_SENDTO","threadId":{"int":100266},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17293","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e73800cc-4251-4f30-8cea-4f36238a9498","sequence":{"long":14937},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17293","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77750375-fd6d-4517-81e2-e6f88b4b343c","sequence":{"long":14938},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408123922197,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72849493-c2d4-4b6a-a5c1-42e36051e9cc","sequence":{"long":14939},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408134000160,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc191376-9062-47cc-a10d-455e2511430a","sequence":{"long":14940},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408134000160,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6886616b-204f-40d3-be61-acc9a761d5ca","sequence":{"long":14941},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408134000160,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71d57e1f-b60b-46fd-877f-bc6494c8fde8","sequence":{"long":14942},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408134000160,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d7c8848-2280-492b-a061-abbb91614944","sequence":{"long":14943},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584408393883739,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":979172},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26b1d23f-25bb-46e7-8159-e34a0fa75d8d","sequence":{"long":14944},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584409404577929,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":979536},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ede0c652-37e9-47c9-ab69-11a437778637","sequence":{"long":14945},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":979536},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63595915-003e-4287-a81f-26b4f2ec07a2","sequence":{"long":14947},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4abfce4e-9f4f-4d98-81d7-ce4554e5dd99","sequence":{"long":14946},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c219a942-8f39-47a8-a989-80fe27f711ff","sequence":{"long":14949},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e8fe9e1-ac05-4680-b29f-096c0a7f3d69","sequence":{"long":14948},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b35225a7-6548-4d50-b018-65173dc07354","sequence":{"long":14951},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b0d2d93-cb6a-4e73-b264-28d94fdf0cad","sequence":{"long":14950},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c00bc4b-b8d6-4f50-83b3-3cdb0c2010a6","sequence":{"long":14952},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba06f05c-fbdb-42e0-9fc4-c80cdfbdb61d","sequence":{"long":14953},"type":"EVENT_READ","threadId":{"int":100267},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6730be8-225d-4f55-9931-4aff56978063","sequence":{"long":14954},"type":"EVENT_READ","threadId":{"int":100267},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a66a2112-14ea-4737-a2fb-bc8b84d2d7ad","sequence":{"long":14955},"type":"EVENT_READ","threadId":{"int":100267},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3312},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abd237c1-d66a-49a4-98b0-978ee85d67e3","sequence":{"long":14956},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3365},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b9073c1-2b1c-4499-bc2a-0dfe46eea8c2","sequence":{"long":14957},"type":"EVENT_WRITE","threadId":{"int":100267},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fab3db6-f09a-4499-b8bd-73f9397053bf","sequence":{"long":14958},"type":"EVENT_READ","threadId":{"int":100267},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a117056a-16e8-40f8-9553-07ec2329618b","sequence":{"long":14959},"type":"EVENT_READ","threadId":{"int":100267},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb3731e3-3dea-4c73-b072-a8a2d30dcbfb","sequence":{"long":14960},"type":"EVENT_READ","threadId":{"int":100267},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae3a99dc-4968-4b5c-833d-2c50bdc48d11","sequence":{"long":14961},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff0337ab-2ca6-4e65-b157-4490069cf5a7","sequence":{"long":14962},"type":"EVENT_WRITE","threadId":{"int":100267},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"295a3036-25b4-4678-8d1f-b4cb53d8ed8a","sequence":{"long":14963},"type":"EVENT_READ","threadId":{"int":100267},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eda21a22-872b-4646-bbca-22b6a2846e06","sequence":{"long":14964},"type":"EVENT_SENDTO","threadId":{"int":100267},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17294","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b68359bd-2812-4d2e-9a76-f424b4695f90","sequence":{"long":14965},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17294","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a3a0b3c-ee53-4565-bb5c-7d2dba52b4ad","sequence":{"long":14966},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410124161928,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a44b37db-6fb7-4dd0-94c0-db682c6de77e","sequence":{"long":14967},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410134312941,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8524d59-83f9-43cc-af0a-0d0e09a7348f","sequence":{"long":14968},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410134312941,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9175202b-077b-4f23-a7cc-b491051a71b9","sequence":{"long":14969},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410134312941,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e56feda-897e-42e7-9ef9-305300d42041","sequence":{"long":14970},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410134312941,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e45c2aa-7bd9-4022-91cd-a861c6d24f0d","sequence":{"long":14971},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410423897303,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":981978},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac7b7bea-413f-4b9a-9108-e866efe26a8b","sequence":{"long":14972},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410554159596,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7172649-bc14-414d-8eeb-c98e79aa3e18","sequence":{"long":14973},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410554159596,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17295","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c2e1632-207f-4bd1-a56b-342ea714202e","sequence":{"long":14974},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410554159596,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17296","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6a78fd1-9486-4536-ba8d-c4e91e724d97","sequence":{"long":14975},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410554159596,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17297","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0267c168-6cd7-4273-b012-e5f1ce54e748","sequence":{"long":14976},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410554159596,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17298","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9da26fe6-f665-46e3-b469-7ade2f71c6d3","sequence":{"long":14977},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410554159596,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17295","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8aea622-af43-46a3-847c-5b678bc6424a","sequence":{"long":14978},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410554159596,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17296","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b15beb6a-7519-410a-825c-cb6a6f84013e","sequence":{"long":14979},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410554159596,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17297","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43bf67db-8d3f-43ff-9696-eabf3e2c65df","sequence":{"long":14980},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584410554159596,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17298","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa4962eb-13f6-4817-9c77-278c85af97e8","sequence":{"long":14981},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584411434323544,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":983162},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a1c2ab5-6d7b-479e-846a-5ea9b669feb6","sequence":{"long":14982},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":983162},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5d17cb7-a93f-49c6-8926-a013d1d4b6ec","sequence":{"long":14984},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a423f96-4230-43d9-b508-b7a8e798935f","sequence":{"long":14983},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4110956f-f304-4c06-a6a8-3eeea91217f2","sequence":{"long":14986},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cce676e8-ce86-4b8d-ba26-a87cc9cfd19b","sequence":{"long":14985},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be7d7573-f86e-46fc-84b4-b1581402290d","sequence":{"long":14988},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d51d7ac-5f4b-4a25-b605-de7677c38535","sequence":{"long":14987},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2332fa37-a411-4f3d-86e6-a31b59624513","sequence":{"long":14989},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fba56bcf-60c7-41f9-969e-7ada9fbf770c","sequence":{"long":14990},"type":"EVENT_READ","threadId":{"int":100268},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68e01ef6-a544-4ee6-aa89-71bd003ec81c","sequence":{"long":14991},"type":"EVENT_READ","threadId":{"int":100268},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2d74db7-7cfa-4d2c-8058-e56121696125","sequence":{"long":14992},"type":"EVENT_READ","threadId":{"int":100268},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2438},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa263557-21a5-40eb-a811-e8c12743ec92","sequence":{"long":14993},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2491},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48ad17cd-cbf8-4adc-bf67-2272d3f70e34","sequence":{"long":14994},"type":"EVENT_WRITE","threadId":{"int":100268},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"711e905f-f33b-425b-a7f7-c5c40ea490a5","sequence":{"long":14995},"type":"EVENT_READ","threadId":{"int":100268},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bf7da94-7d05-4ae5-848e-8b880c744959","sequence":{"long":14996},"type":"EVENT_READ","threadId":{"int":100268},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c578aa33-5428-4382-9e71-b2d2199c9699","sequence":{"long":14997},"type":"EVENT_READ","threadId":{"int":100268},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1180},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51aae39d-45af-4343-8b4a-8a5cda6f3ea9","sequence":{"long":14998},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1233},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2388c5bf-c59b-4015-a5a8-c452f1c8ec49","sequence":{"long":14999},"type":"EVENT_WRITE","threadId":{"int":100268},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"616eb6a4-c1dd-4939-b071-920137c8f7b8","sequence":{"long":15000},"type":"EVENT_READ","threadId":{"int":100268},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da6d8b9f-995d-4d59-8dbc-b28d2af31c26","sequence":{"long":15001},"type":"EVENT_SENDTO","threadId":{"int":100268},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17299","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea763e03-626c-4758-b090-463869b41813","sequence":{"long":15002},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17299","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2d9b9cf-5f4a-4524-8470-c3f641540767","sequence":{"long":15003},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412124408772,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f15c87b-eb72-44da-b890-f9ea5f55b173","sequence":{"long":15004},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412134051223,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6279c5e-049a-40c1-90be-e1985091fad4","sequence":{"long":15005},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412134051223,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0563e158-af58-4931-9fba-383260395dd0","sequence":{"long":15006},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412134051223,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8481d16-2eaa-4d06-8558-659d666862ba","sequence":{"long":15007},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412134051223,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a118547b-1afe-4ea6-aa92-f4ec39655888","sequence":{"long":15008},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584412454448661,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":985597},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a752f70d-1fc8-41b2-956b-422dcb09988b","sequence":{"long":15009},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584413463877787,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":985959},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91e9710a-3f7a-42e8-829a-3b72032ff749","sequence":{"long":15010},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584413553885034,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e041c207-01d8-44c6-a2ea-91233db5bc3d","sequence":{"long":15011},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584413553885034,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17300","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c56d60c-a561-40cf-9539-f9041cbe1269","sequence":{"long":15012},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584413553885034,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17301","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88d9fceb-9a39-414f-9fb9-76b43ccc1013","sequence":{"long":15013},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584413553885034,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17302","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f46585da-a0b2-4db4-9085-b8762807fb53","sequence":{"long":15014},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584413553885034,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17303","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99584c05-c9cd-40d6-ae80-6a7592452f7b","sequence":{"long":15015},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584413553885034,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17300","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56c89f8d-0cf0-4285-95e2-169ce3bf8771","sequence":{"long":15016},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584413553885034,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17301","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e096ecb8-fdb5-4d3b-9da6-38d359eee562","sequence":{"long":15017},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584413553885034,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17302","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80547b30-bed8-41e8-8b6c-147fe0ffa6e9","sequence":{"long":15018},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584413553885034,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17303","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"188ac2db-774a-4773-8f3d-729d3fd1f5f8","sequence":{"long":15019},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":985959},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b5def2b-3f8a-415f-8565-35955dc7cf5b","sequence":{"long":15021},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65379834-58ac-43b5-b889-40b8f8a9f63c","sequence":{"long":15020},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cc567d4-3112-4216-981a-68bef563f0a4","sequence":{"long":15023},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"372ead8b-c51f-486c-9c99-cf69f4ccc886","sequence":{"long":15022},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29103a3d-63cc-4656-9329-728e4c7bb663","sequence":{"long":15025},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c311cba8-6313-40e7-81f2-86a0867cc158","sequence":{"long":15024},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d664fd3d-7474-46f0-807b-22cfb481479d","sequence":{"long":15026},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9021287-47f7-4b20-8872-904935602dc8","sequence":{"long":15027},"type":"EVENT_READ","threadId":{"int":100269},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"607470be-1436-4b55-8947-1538b668538c","sequence":{"long":15028},"type":"EVENT_READ","threadId":{"int":100269},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"107fc516-981b-4f8f-aee3-1c3f28f8e9f1","sequence":{"long":15029},"type":"EVENT_READ","threadId":{"int":100269},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2431},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"998ece55-f29c-487d-a8cd-c9cc4ba50b1a","sequence":{"long":15030},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2484},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c62e7d72-cba2-47c6-b3c6-52630fd9c946","sequence":{"long":15031},"type":"EVENT_WRITE","threadId":{"int":100269},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40e560c1-9224-4c84-a038-32f136dc143e","sequence":{"long":15032},"type":"EVENT_READ","threadId":{"int":100269},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"764d7a8b-47e0-4798-b07e-b363900a1854","sequence":{"long":15033},"type":"EVENT_READ","threadId":{"int":100269},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e64a1f58-b73b-45ca-bbf7-2da0b6246c9c","sequence":{"long":15034},"type":"EVENT_READ","threadId":{"int":100269},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78694766-3b13-4061-9bad-9d5193e99ad9","sequence":{"long":15035},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"969363cf-5d60-4e67-a364-e01fc2c2c436","sequence":{"long":15036},"type":"EVENT_WRITE","threadId":{"int":100269},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b2783c9-e597-49dd-a3f9-1efb696984c6","sequence":{"long":15037},"type":"EVENT_READ","threadId":{"int":100269},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8fe49db-ea1f-466e-98d3-14cf1e58efa8","sequence":{"long":15038},"type":"EVENT_SENDTO","threadId":{"int":100269},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17304","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5158c8f6-f373-4ab7-8856-9175da303fbf","sequence":{"long":15039},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17304","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0356fb59-d53d-4a70-9908-ae99d29be054","sequence":{"long":15040},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"501a9fb0-a0c4-451b-8be0-fef12b6dfa46","sequence":{"long":15041},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62e64624-014c-4df8-84d7-7d96c0d55e26","sequence":{"long":15042},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414124379024,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e87505ed-7c7b-4973-a893-0ba295da411f","sequence":{"long":15043},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414133855720,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f246216b-5e2f-4bf3-a6ca-d243eae7841a","sequence":{"long":15044},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414133855720,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ac38d37-1320-41a9-bf6e-6f530e43cde7","sequence":{"long":15045},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584414483836657,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":989269},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b323fe1-30d6-4e18-b08d-635684bab544","sequence":{"long":15046},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584415494289392,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":989634},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2b79f8e-ac8b-4032-af6d-4b57844b5b26","sequence":{"long":15047},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416044341965,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31bc2c1f-9d84-40c9-acb4-b17080566073","sequence":{"long":15048},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416044341965,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c53a6683-6fb9-4642-8d56-c798946c32f3","sequence":{"long":15049},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":989634},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbf2fd79-41e4-4292-90a1-908bb512e384","sequence":{"long":15051},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fb20f5a-3d3e-4b6b-a8d9-395f757e3fac","sequence":{"long":15050},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64ecdcad-bbfc-45bd-a34a-a51ac31a3d12","sequence":{"long":15053},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"695fcdd2-0e2e-4c68-a7d2-88485fa2a789","sequence":{"long":15052},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"356be0ad-b1e3-45cb-8838-84b93122969f","sequence":{"long":15055},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"144a97a0-ae41-454d-a4fa-82c9c4de5484","sequence":{"long":15054},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd349774-4a51-4be5-8c6c-2aa89a0cd8e4","sequence":{"long":15056},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0653df4-45a3-431b-8e57-62cd526e247b","sequence":{"long":15057},"type":"EVENT_READ","threadId":{"int":100270},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6287be53-1c46-41ec-bf9e-37a138d9339d","sequence":{"long":15058},"type":"EVENT_READ","threadId":{"int":100270},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebed4530-73f9-4705-adc8-6703a66cb000","sequence":{"long":15059},"type":"EVENT_READ","threadId":{"int":100270},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3306},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5cc65a2-0848-4fd6-88a5-1d901adcefa4","sequence":{"long":15060},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"220bddb9-73bf-409f-bb0f-b1d5f1b0ce56","sequence":{"long":15061},"type":"EVENT_WRITE","threadId":{"int":100270},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa05966e-e05f-494e-a204-f5614e2cd9e2","sequence":{"long":15062},"type":"EVENT_READ","threadId":{"int":100270},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"696e898d-5a7e-4bf9-8836-7a4bdd4e36ad","sequence":{"long":15063},"type":"EVENT_READ","threadId":{"int":100270},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8edcc8ce-5eeb-4b14-91da-79c319d8f0c7","sequence":{"long":15064},"type":"EVENT_READ","threadId":{"int":100270},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c2106e8-3045-4a1e-9abd-ee731c549389","sequence":{"long":15065},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cccb9baf-63b4-435d-85eb-c5e9fcf15dfa","sequence":{"long":15066},"type":"EVENT_WRITE","threadId":{"int":100270},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"277a2214-7fd2-4fc7-8163-841eb14ff513","sequence":{"long":15067},"type":"EVENT_READ","threadId":{"int":100270},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff1146c3-0f38-4d03-ad99-8205d37d2904","sequence":{"long":15068},"type":"EVENT_SENDTO","threadId":{"int":100270},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17305","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc0ae226-345e-43f5-94c2-1b8b72e67338","sequence":{"long":15069},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17305","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62543a07-cab5-4f8a-8d17-a11848642694","sequence":{"long":15070},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416123993178,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b893a738-6ed7-41f0-b96b-bebedc2e220b","sequence":{"long":15071},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416133873592,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5377c283-16a8-428a-b1a9-61f7becc18c1","sequence":{"long":15072},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416133873592,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4484cfb8-1b21-4cd9-80de-a3df7c50901e","sequence":{"long":15073},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416133873592,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1410e03-c5c0-4a42-a415-836785bfdb7a","sequence":{"long":15074},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416133873592,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0b559a5-8924-4047-b322-aa5867baf925","sequence":{"long":15075},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416223907807,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db7f7d49-4e4e-414c-9e82-a23a62d9632c","sequence":{"long":15076},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416223907807,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"644e233d-1b6a-455f-97ef-02417329fd89","sequence":{"long":15077},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416344205345,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8de99e25-bc97-414c-8e1e-a7fff6a77b9f","sequence":{"long":15078},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416344205345,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8133d78-61f6-4b81-8ef5-cafa1e7a0a27","sequence":{"long":15079},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416483881722,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87234196-3b35-4df0-9dd0-c19ba4760c4b","sequence":{"long":15080},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416483881722,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8176c69b-e993-43cf-9e82-70f0c8c3780d","sequence":{"long":15081},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416513964774,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":992831},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6838dff8-559b-4a46-a2da-8c229e883e1a","sequence":{"long":15082},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416554376215,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c757dc23-1c31-4cb1-9c29-619054349c33","sequence":{"long":15083},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416554376215,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17306","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c135300-2f0a-4d04-b0a0-4e9797cac5a6","sequence":{"long":15084},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416554376215,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17307","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f59be81-e56f-4298-831f-90a1650f4349","sequence":{"long":15085},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416554376215,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17308","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40d04610-3019-4536-add1-88e82c7f116e","sequence":{"long":15086},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416554376215,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17309","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1c60a38-2ce3-48bf-8f2a-191bd0dcace5","sequence":{"long":15087},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416554376215,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17306","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ee93787-e775-4102-9a00-7df5cd782241","sequence":{"long":15088},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416554376215,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17307","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"998cb39e-3345-4a4c-9bf1-3e69bcd1522f","sequence":{"long":15089},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416554376215,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17308","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ddd5382-fe96-47e8-805a-27cc31deda66","sequence":{"long":15090},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416554376215,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17309","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f369a6c1-37e8-472a-80f8-6b9a12789102","sequence":{"long":15091},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416574415259,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37755170-b297-4ef5-831c-19e27975a68d","sequence":{"long":15092},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416574415259,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f0cab16-95dc-4054-a60b-447c9cb2838f","sequence":{"long":15093},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416693872807,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3a7d9b3-5586-4f52-a06f-ef959a24e947","sequence":{"long":15094},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416693872807,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cf05b96-cbbe-4bf5-88db-eedb0a459bcd","sequence":{"long":15095},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416984306277,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cceee20b-8688-4824-b488-8c23ce4bc3b5","sequence":{"long":15096},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416984306277,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"5e17cedc-467e-11e9-aed1-080027fc76ba","type":"SUBJECT_PROCESS","cid":1512,"parentSubject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584416994472554},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2419f5ef-5e96-4f71-8973-554470d432bb","sequence":{"long":15097},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1512","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1512","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffafa480-dff2-43d5-a8dd-7cb865564c29","sequence":{"long":15098},"type":"EVENT_EXECUTE","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"d1524fc4-3a5e-855b-9e3a-5d212b8581ed"},"predicateObjectPath":{"string":"/usr/bin/whoami"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584416994472554,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"whoami","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e3f512b-20a5-4cac-bac5-014a2da87b8a","sequence":{"long":15099},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"959a34dd-de72-4352-a1d2-6a2488e7a572","sequence":{"long":15100},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97fd2aaa-edb1-46ae-b33f-05b546d33405","sequence":{"long":15101},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a2c0e76-d85e-49e2-83fc-3059dc172a4d","sequence":{"long":15102},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77e5398c-a47b-46fb-8488-61007847bc4f","sequence":{"long":15103},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"feffe198-5387-4a78-9e1f-282afcf6b293","sequence":{"long":15104},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5876b8cc-303c-44eb-af84-78c97f074dad","sequence":{"long":15105},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c73adff7-2a7c-471e-8aa4-a8e014589772","sequence":{"long":15106},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b0057ef-3c3b-4c44-8f7e-0ff7456aaa8e","sequence":{"long":15107},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f56ad631-f442-4422-aaee-504503f98eb3","sequence":{"long":15108},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"baa85a29-b980-4a7a-947c-5957e2c06a18","sequence":{"long":15109},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e73c901-f1ef-4d49-a997-c24cbec413ce","sequence":{"long":15110},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0776ba0f-d1b0-41e7-b63d-47db93932354","sequence":{"long":15111},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe4b8d41-564a-44da-a1ba-d9dbd3ee8dfa","sequence":{"long":15112},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9bde62e-ed3d-4d61-a7ea-8ad076c47c15","sequence":{"long":15113},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"268b49a2-bda3-440e-8209-8f1eed4420f0","sequence":{"long":15114},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b592079-9a17-4109-83b4-86b49970c33a","sequence":{"long":15115},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be726688-eb38-4172-b366-1e41c8cd8ba7","sequence":{"long":15116},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dbb60ad-883a-4f6b-a419-e387bacb4b68","sequence":{"long":15117},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2677994a-7f1e-41f4-904f-d3e6c709c117","sequence":{"long":15118},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":{"string":"/etc/nsswitch.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c45d47d-aa21-4c3f-967d-cdf797b6fee2","sequence":{"long":15119},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71e90997-9605-4f18-9b71-5fa2c43f478e","sequence":{"long":15120},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39a36684-164d-484e-8ba9-50b425c46741","sequence":{"long":15121},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"dc4ebdcb-eaaf-2b5e-afea-5aa3ae2b561c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0828a03b-da29-4bee-a98d-6b1b28c89083","sequence":{"long":15122},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":{"string":"/etc/pwd.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d54881b0-4286-423a-a055-b188c56c3771","sequence":{"long":15123},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8124ba0-5cd6-45fa-817e-0ad40f0f7fe5","sequence":{"long":15124},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa2fb661-129e-48bd-b039-81a52e1ddc6d","sequence":{"long":15125},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a981fb7b-a5be-459a-8f03-c67a6d85a157","sequence":{"long":15126},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1e56bb9-76da-46ee-9e20-04d71de5cfc7","sequence":{"long":15127},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67b798c6-2c1f-47ba-892b-ceb53608c95d","sequence":{"long":15128},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2119863-bb3e-4c82-aef3-1b52c23920ed","sequence":{"long":15129},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d52667d-f1bb-4334-b0ec-1935989af561","sequence":{"long":15130},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a842689f-a7ba-422d-aa21-bdb45f3693dd","sequence":{"long":15131},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef863a03-24b5-4277-bfcf-c2557e802abd","sequence":{"long":15132},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"66169aa0-8e5f-e85e-9f8e-9d6b1ee8fe96"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31910184-1425-4340-8057-fb25437ed175","sequence":{"long":15133},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b53fcf48-fea7-40f5-b2bf-0c1fc254cec0","sequence":{"long":15134},"type":"EVENT_EXIT","threadId":{"int":100120},"subject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObject":{"UUID":"5e17cedc-467e-11e9-aed1-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcbe9f65-56f7-4080-85f2-20ffb81bc792","sequence":{"long":15135},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fd3162d-aa3a-442e-95d3-f1600c8fd946","sequence":{"long":15136},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584416994472554,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":50},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"5e3f49f2-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"5e3f49f2-467e-11e9-aed1-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"96b1fc5d-2f02-589e-8d7d-8499f2775d39","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"5e3f49f2-467e-11e9-aed1-080027fc76ba"},"uuid2":{"UUID":"5e3f49f2-467e-11e9-aed2-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"644c24de-df6c-4722-a6cc-a18953b5b74b","sequence":{"long":15137},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"96b1fc5d-2f02-589e-8d7d-8499f2775d39"},"predicateObjectPath":null,"predicateObject2":{"UUID":"5e3f49f2-467e-11e9-aed2-080027fc76ba"},"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_socketpair"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","ret_fd2":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed98ca8e-f33e-49e8-8c9d-fac505fb1e6d","sequence":{"long":15138},"type":"EVENT_FCNTL","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"28","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"28","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f00022fe-c565-45cc-9b21-727fd4ac3c01","sequence":{"long":15139},"type":"EVENT_FCNTL","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"29","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"29","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f40ebea-f259-4961-bb0d-9dbb2e7122df","sequence":{"long":15140},"type":"EVENT_FCNTL","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e58c2284-7036-4066-86dc-10eb3283f627","sequence":{"long":15141},"type":"EVENT_FCNTL","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"04"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7d5b92e-5aa2-4dce-91b9-695c06462600","sequence":{"long":15142},"type":"EVENT_OPEN","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"03614f72-3bf3-3753-b33b-4946a3373b97"},"predicateObjectPath":{"string":"/etc/resolv.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a70f81e5-096a-42c2-bae3-41552d75eda1","sequence":{"long":15143},"type":"EVENT_READ","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"03614f72-3bf3-3753-b33b-4946a3373b97"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":102},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb075702-4eee-487d-a704-60b3b2171e95","sequence":{"long":15144},"type":"EVENT_READ","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"03614f72-3bf3-3753-b33b-4946a3373b97"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b96fc197-937d-4ce2-9de6-1a3202844281","sequence":{"long":15145},"type":"EVENT_CLOSE","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"03614f72-3bf3-3753-b33b-4946a3373b97"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"1df6d669-9ad1-615e-919a-34676e6130b6","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13b65a62-6216-4840-8e4f-a6add74b2c48","sequence":{"long":15146},"type":"EVENT_OPEN","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"1df6d669-9ad1-615e-919a-34676e6130b6"},"predicateObjectPath":{"string":"/etc/services"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"011bbe65-54e7-4c4e-ad20-0578a1b3f725","sequence":{"long":15147},"type":"EVENT_LSEEK","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"1df6d669-9ad1-615e-919a-34676e6130b6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4e2f0ff-8223-471e-86bf-a0db3a8b3057","sequence":{"long":15148},"type":"EVENT_LSEEK","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"1df6d669-9ad1-615e-919a-34676e6130b6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"824a567a-a58d-4265-980b-576cf62e4f87","sequence":{"long":15149},"type":"EVENT_READ","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"1df6d669-9ad1-615e-919a-34676e6130b6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":32768},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9939a055-2f20-4f44-9d43-8a7213b15bcb","sequence":{"long":15150},"type":"EVENT_CLOSE","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"1df6d669-9ad1-615e-919a-34676e6130b6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9582433a-c3ce-4237-94c0-3b994532d74b","sequence":{"long":15151},"type":"EVENT_OPEN","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":{"string":"/etc/hosts"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e01a373-2014-4fce-8e40-0e24a86ff050","sequence":{"long":15152},"type":"EVENT_READ","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1031},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e862c703-f9f9-4d80-a6dc-21da5828323c","sequence":{"long":15153},"type":"EVENT_READ","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a123caaf-8564-4716-8d4d-1b8da15a74e7","sequence":{"long":15154},"type":"EVENT_CLOSE","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"c9f28fe6-f2a2-d15b-a2f2-a51d9bd1cd0b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"5e3fa898-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":null,"localPort":null,"remoteAddress":{"string":"149.32.200.97"},"remotePort":{"int":53},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80da0a17-a571-4555-9585-780a577dc8c6","sequence":{"long":15155},"type":"EVENT_CONNECT","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"5e3fa898-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","address":"149.32.200.97","port":"53","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"1272c10a-40de-5c70-8db9-c59730c57d27","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"10.0.2.15"},"localPort":{"int":29578},"remoteAddress":{"string":"149.32.200.97"},"remotePort":{"int":53},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a678ab60-cdf2-4b4f-8cac-834044a069d1","sequence":{"long":15156},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100271},"subject":null,"predicateObject":{"UUID":"5e3fa898-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"1272c10a-40de-5c70-8db9-c59730c57d27"},"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70195a09-61e9-4b43-ac3c-9b206b958be4","sequence":{"long":15157},"type":"EVENT_SENDTO","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"5e3fa898-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417254040088,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":40},"programPoint":null,"properties":{"map":{"ret_msgid":"17310","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac94a068-30cd-4440-872e-6675d5043cc3","sequence":{"long":15158},"type":"EVENT_RECVFROM","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"5e3fa898-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417363996266,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":104},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1","address":"149.32.200.97","port":"53","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"598d518a-928d-4cc5-bdb5-ae91b87024cd","sequence":{"long":15159},"type":"EVENT_CLOSE","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"5e3fa898-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417363996266,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"5e514e85-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":null,"localPort":null,"remoteAddress":{"string":"149.32.200.97"},"remotePort":{"int":53},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e14baa2d-12d0-43bc-b403-ed072a94015d","sequence":{"long":15160},"type":"EVENT_CONNECT","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"5e514e85-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417363996266,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","address":"149.32.200.97","port":"53","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"49318419-aa40-505b-b433-9bffa770ad4e","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"10.0.2.15"},"localPort":{"int":51176},"remoteAddress":{"string":"149.32.200.97"},"remotePort":{"int":53},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43fd30b0-5c7d-43e0-9f64-48431f449ebd","sequence":{"long":15161},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100271},"subject":null,"predicateObject":{"UUID":"5e514e85-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"49318419-aa40-505b-b433-9bffa770ad4e"},"predicateObject2Path":null,"timestampNanos":1552584417363996266,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"525e2654-440c-4a72-9564-9f2deb098a82","sequence":{"long":15162},"type":"EVENT_SENDTO","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"5e514e85-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417363996266,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":40},"programPoint":null,"properties":{"map":{"ret_msgid":"17311","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7888579-8595-4b02-a44b-6e24c9a69e54","sequence":{"long":15163},"type":"EVENT_RECVFROM","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"5e514e85-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417383919500,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":95},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1","address":"149.32.200.97","port":"53","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"585570d1-4b5c-4d36-83d7-e4046dfe2ad9","sequence":{"long":15164},"type":"EVENT_CLOSE","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"5e514e85-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417383919500,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f83949d-69dc-4942-9e76-afc1b84ba37a","sequence":{"long":15165},"type":"EVENT_OPEN","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"1df6d669-9ad1-615e-919a-34676e6130b6"},"predicateObjectPath":{"string":"/etc/services"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417383919500,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fab1d6ee-bb4a-458a-a316-f06148921414","sequence":{"long":15166},"type":"EVENT_LSEEK","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"1df6d669-9ad1-615e-919a-34676e6130b6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417383919500,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d573f817-f014-4fd7-83ee-4072c85dcba9","sequence":{"long":15167},"type":"EVENT_LSEEK","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"1df6d669-9ad1-615e-919a-34676e6130b6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417383919500,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46fa8998-b920-44bb-8d4d-20f71aeeef79","sequence":{"long":15168},"type":"EVENT_READ","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"1df6d669-9ad1-615e-919a-34676e6130b6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417383919500,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":32768},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d72cb3e5-446e-4032-a0a6-2aa056b2d203","sequence":{"long":15169},"type":"EVENT_CLOSE","threadId":{"int":100271},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"1df6d669-9ad1-615e-919a-34676e6130b6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417383919500,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4a86d5b-1959-4b55-a2ce-204ced264eb7","sequence":{"long":15170},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417543988933,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1001535},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e07030ab-a025-41ed-8076-580513f8ddb8","sequence":{"long":15171},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417974088074,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5972328-f20f-41ca-ba7d-129503ce072c","sequence":{"long":15172},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417974088074,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f6f4da6-4799-4c24-8322-513dab91218d","sequence":{"long":15173},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417974088074,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60f8a9c2-0f02-4ac5-8292-2c3b295d1931","sequence":{"long":15174},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417974088074,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":6},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17a7c06e-dfe1-4bd4-a5de-629be6f70113","sequence":{"long":15175},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417974088074,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb8ca96e-e42d-4d94-9561-471db5fd6aa3","sequence":{"long":15176},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417974088074,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83fdf0fd-076d-42e9-bc8e-b26bbaebda65","sequence":{"long":15177},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417974088074,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cf91d3f-c993-45ee-ab01-3cb9e04b5fd0","sequence":{"long":15178},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584417974088074,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":31},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"956d3488-a651-482c-8802-4f20442b122c","sequence":{"long":15179},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1001535},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2171dea2-c592-4239-b737-aac887ab144a","sequence":{"long":15181},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57f49410-c6ef-423d-98a8-5d8a87812e40","sequence":{"long":15180},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcaedf5f-3eb2-418c-ab2a-09a394e25ad8","sequence":{"long":15183},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c852cac1-ea3a-46eb-91fe-6cbffac66f7a","sequence":{"long":15182},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f0886cb-7f3a-414b-be63-32ef915f4a25","sequence":{"long":15185},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b949266f-f4f5-4a75-87be-18b46f93ddab","sequence":{"long":15184},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d109e50-d244-490b-9b07-08e362296d32","sequence":{"long":15187},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ffc8cdd-7f29-448f-8ad8-9869ccdfc9a2","sequence":{"long":15186},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9d6b18f-68a3-4f02-8f08-1fef322c10ad","sequence":{"long":15188},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cf28e4d-b643-436e-aabf-5bdefccc4f0a","sequence":{"long":15189},"type":"EVENT_READ","threadId":{"int":100272},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d384a18-5203-4d8e-97f5-aa2f45ecb101","sequence":{"long":15190},"type":"EVENT_READ","threadId":{"int":100272},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"024ad64e-11e1-495f-b34e-5a353d52ce13","sequence":{"long":15191},"type":"EVENT_READ","threadId":{"int":100272},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3193},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"625e4579-eefd-4099-b854-3edb9d0a0b2f","sequence":{"long":15192},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3246},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33b050b1-92d5-414f-9ada-daf9324bfb01","sequence":{"long":15193},"type":"EVENT_WRITE","threadId":{"int":100272},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcc5da06-3eac-4028-a1e2-7155eae80f5d","sequence":{"long":15194},"type":"EVENT_READ","threadId":{"int":100272},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be998b68-645c-4b7e-b9e2-3a1d8a8b0dab","sequence":{"long":15195},"type":"EVENT_READ","threadId":{"int":100272},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0d790c2-2192-4272-b186-83e192432d4e","sequence":{"long":15196},"type":"EVENT_READ","threadId":{"int":100272},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4410},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b8062c9-a9a2-4098-8809-5f9eb2af48b7","sequence":{"long":15197},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4463},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9b27604-41c1-4177-98f4-b1731348856b","sequence":{"long":15198},"type":"EVENT_WRITE","threadId":{"int":100272},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f05b4004-4fc8-4374-a3cf-4127481f87f9","sequence":{"long":15199},"type":"EVENT_READ","threadId":{"int":100272},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a6887ff-909a-4592-8c6c-0d3ba65d97db","sequence":{"long":15200},"type":"EVENT_READ","threadId":{"int":100272},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3882f21f-50b0-4cb5-ade2-38053a554b06","sequence":{"long":15201},"type":"EVENT_READ","threadId":{"int":100272},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4286},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01692ff1-cf14-405f-bf00-887338c85327","sequence":{"long":15202},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4339},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78482d29-4a3a-4d4a-860a-20ff8e318ceb","sequence":{"long":15203},"type":"EVENT_WRITE","threadId":{"int":100272},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87415543-9473-480a-8e3b-9fec598faead","sequence":{"long":15204},"type":"EVENT_READ","threadId":{"int":100272},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d378f6ef-56c7-43be-8940-55d899599ee8","sequence":{"long":15205},"type":"EVENT_SENDTO","threadId":{"int":100272},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17314","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2c5b3d0-2cf9-4b15-9012-89463a8eb017","sequence":{"long":15206},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17314","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d34c2de-c9d3-4d54-ae0b-5ea0099bf08a","sequence":{"long":15207},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418123846069,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52699cb7-ef48-4d7d-b486-7d0cada7b2d3","sequence":{"long":15208},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418133987583,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1803deb-7b59-4634-b230-0007f996cbf0","sequence":{"long":15209},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418133987583,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9970b9e-7c08-431d-88dc-b132e2f80bd0","sequence":{"long":15210},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418144121218,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bbdb68f-951e-477c-94c0-a8df6e3efa4c","sequence":{"long":15211},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418144121218,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55eea5a3-7e61-4af7-aa37-18db1bbc3b1b","sequence":{"long":15212},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418144121218,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0754987-5f41-48b6-ba67-f502e2d24a4a","sequence":{"long":15213},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418144121218,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b548ffe-0aff-47ba-b4a5-ffcb1af1078a","sequence":{"long":15214},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418554267304,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1005195},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51042fa6-9081-4e7f-8520-9aa63531024f","sequence":{"long":15215},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418874413171,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d110c229-9eb0-4e75-a330-bdfb4474b3a4","sequence":{"long":15216},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418874413171,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c925a4ba-8887-412d-a37c-2e2981e9d396","sequence":{"long":15217},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418874413171,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dde76af-38fb-419b-a321-f5ab5db2b387","sequence":{"long":15218},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584418874413171,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"554b961e-62b7-4759-bf7d-da70fd6f70b5","sequence":{"long":15219},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584419553866343,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35d2ce30-845d-43a5-bf6d-bcf16a7c6f06","sequence":{"long":15220},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584419553866343,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17315","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"849d3191-cbd5-44b3-94d0-7c3227e4c3ca","sequence":{"long":15221},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584419553866343,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17316","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5577509e-e98a-4281-8d46-f4498d2f4b01","sequence":{"long":15222},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584419553866343,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17317","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfc1bc1f-5e41-4b64-b6d2-75daf82f769a","sequence":{"long":15223},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584419553866343,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17318","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da490864-3867-46fa-9a06-baa0886e948c","sequence":{"long":15224},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584419553866343,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17315","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fe32bbd-30b3-46f1-9d88-f32607e4790c","sequence":{"long":15225},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584419553866343,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17316","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3131a6f8-a7b9-454b-b279-e5e3c1ca14c0","sequence":{"long":15226},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584419553866343,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17317","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8bdce17-b249-4036-9daf-29015638d7c8","sequence":{"long":15227},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584419553866343,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17318","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b34756c-043c-4fe5-a353-9abaac8c9aaf","sequence":{"long":15228},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584419563876326,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1006678},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76ec33d0-80b0-4a5a-ac30-18ed48eaa7a3","sequence":{"long":15229},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584419774396815,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fec9bc0-bdbe-40a5-986d-46d08847f2ad","sequence":{"long":15230},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584419774396815,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d804135a-1ada-463b-bda1-edf0344239b5","sequence":{"long":15231},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584419774396815,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9001a627-cbcb-4212-a3d7-d42b83f81f4c","sequence":{"long":15232},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584419774396815,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":36},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a50556ff-2f08-4662-a115-d524430e2f40","sequence":{"long":15233},"type":"EVENT_OPEN","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":{"string":"/etc/cron.d"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420013874688,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00e808"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cb39497-62e8-4501-b6e8-f1bcec36feb8","sequence":{"long":15234},"type":"EVENT_CLOSE","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420013874688,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b2d41b3-a0be-4474-8bf0-dc4cbf46d67a","sequence":{"long":15235},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1006678},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0455329-5177-4769-9844-b66cb26c89d3","sequence":{"long":15237},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"306a7b85-8233-4300-a6ef-ee670575abe5","sequence":{"long":15236},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba0ea6bc-5191-45a8-aedd-3ab8f78dc755","sequence":{"long":15239},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16b00f2b-ba07-46c5-804f-bba992362706","sequence":{"long":15238},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"668b399b-27bd-460b-9f5e-54d63b9add7d","sequence":{"long":15241},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2e435e1-32ca-4756-95fc-9db0a10a3081","sequence":{"long":15240},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fafaffb-868f-4ea7-bf68-5e5f8e875347","sequence":{"long":15242},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51b85cfc-b981-4251-aff0-749f7d6dd30f","sequence":{"long":15243},"type":"EVENT_READ","threadId":{"int":100273},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90b20c26-f219-45ed-a148-c05b717f4e2d","sequence":{"long":15244},"type":"EVENT_READ","threadId":{"int":100273},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6732a354-e7b2-445b-bed6-8467a3af2f96","sequence":{"long":15245},"type":"EVENT_READ","threadId":{"int":100273},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3656},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55692e16-21ea-4737-8189-4030d52b4383","sequence":{"long":15246},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3709},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de863a48-08cb-4b28-bfd6-0403e36abb7e","sequence":{"long":15247},"type":"EVENT_WRITE","threadId":{"int":100273},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0add1455-6f11-4b8a-a648-b82384bfe6c5","sequence":{"long":15248},"type":"EVENT_READ","threadId":{"int":100273},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc0adb72-5f4d-47af-99c1-5a2dd8f2e3ed","sequence":{"long":15249},"type":"EVENT_READ","threadId":{"int":100273},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28dd952b-fd96-4390-9872-bf049b6dc8d1","sequence":{"long":15250},"type":"EVENT_READ","threadId":{"int":100273},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1479},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5f14575-909e-46ab-a49f-75434f2ddae2","sequence":{"long":15251},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1532},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31fd4954-a8d8-4fc5-ac5a-83a7fb4740d6","sequence":{"long":15252},"type":"EVENT_WRITE","threadId":{"int":100273},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5aeb21c2-2de7-4c9b-94a6-b4cb4f7ce2c3","sequence":{"long":15253},"type":"EVENT_READ","threadId":{"int":100273},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d4614eb-3ee3-458d-af95-c6369143d2ac","sequence":{"long":15254},"type":"EVENT_SENDTO","threadId":{"int":100273},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17319","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"451a56a9-4b30-4300-8557-7c4853a99a7c","sequence":{"long":15255},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17319","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3ea2d8c-2258-4570-90ef-7813ea3fe0d5","sequence":{"long":15256},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"496af1e2-18fb-4712-85cb-1f699744f2fd","sequence":{"long":15257},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bd5ae2e-3bbb-41bc-9e67-7397c0780d1a","sequence":{"long":15258},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420124084755,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fa69337-290d-44f7-829b-71ea00cedeb2","sequence":{"long":15259},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420134665091,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea28f553-af66-4dcb-bb72-dc92adb5601c","sequence":{"long":15260},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420134665091,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c875f43-1859-468e-8b73-256aeb2b38ed","sequence":{"long":15261},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420574608737,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1009795},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aac242e9-c3f9-4bf2-b156-0c837571795b","sequence":{"long":15262},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98a116bc-1839-41e6-8ed6-8dfa9b564169","sequence":{"long":15263},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"604abe51-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1513,"parentSubject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584420684121696},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d6bda54-1def-45d3-b213-da810fdfafc5","sequence":{"long":15264},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1513","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1513","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c063a449-6da9-49c7-91a1-2d1d1b583b09","sequence":{"long":15265},"type":"EVENT_EXECUTE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584420684121696,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/all.sh","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7343003-fe36-4622-9b51-3475ec64e765","sequence":{"long":15266},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3de4f11d-34b4-4588-8fc6-a764627df7da","sequence":{"long":15267},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"430dab03-0e8d-42c5-a85b-fa0235a875f1","sequence":{"long":15268},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6db2c915-1700-4f42-a489-432eab3cf3ac","sequence":{"long":15269},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"675b654a-1246-4d6f-81eb-bb2e64bb18a2","sequence":{"long":15270},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95bb0602-de5a-4848-b8c5-a82cf82412be","sequence":{"long":15271},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"614fc465-fee8-4f41-b25e-57ddf65cffe1","sequence":{"long":15272},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d7a8a57-1c54-4ec4-8991-f10d75d4d8f2","sequence":{"long":15273},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55aa05d2-7a82-4b60-a919-4694336ccb5d","sequence":{"long":15274},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d01f19c3-fa1f-4e3d-b9eb-f4ef27b18154","sequence":{"long":15275},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aea868c3-9471-4215-85e5-c4785d04b039","sequence":{"long":15276},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98e892b1-ba2e-4d1d-90c2-7a0cae720b54","sequence":{"long":15277},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c072012b-56ad-4d70-b069-903615c1798a","sequence":{"long":15278},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e35824d-3f18-4bbf-8f82-32ba787004bb","sequence":{"long":15279},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ec2f90d-1866-411a-8577-7e53a7aac6cd","sequence":{"long":15280},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7624aa50-6eb9-4b23-942f-f7824b6af2b9","sequence":{"long":15281},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"796eedcd-0537-4c8c-bf91-496046c9ecd7","sequence":{"long":15282},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64ec93a9-5471-416b-b95d-bef0e4c166f3","sequence":{"long":15283},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b2d0768-fd54-4a4b-b6fa-412956484389","sequence":{"long":15284},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2824b189-ec75-4806-89c4-e48fcf568443","sequence":{"long":15285},"type":"EVENT_EXECUTE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584420684121696,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/all.sh","ppid":"1282","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cae364c-9ac6-4929-9891-4e3d55f9381d","sequence":{"long":15286},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebfd4062-c7ee-4403-a0fa-35f8ecea0189","sequence":{"long":15287},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13f25b17-eb3e-4120-b6a9-82d26b20c9d5","sequence":{"long":15288},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"defc8872-f82a-4b32-9bc2-1ca6349ab022","sequence":{"long":15289},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1574d72-94b3-485e-86e1-fc01ddf5cc3f","sequence":{"long":15290},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9624b1d2-ff2d-4eb8-a5ed-0c10f9fdcea2","sequence":{"long":15291},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"136c3cdc-de30-4525-b6c5-7423c7574b22","sequence":{"long":15292},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b56df750-8bd7-4754-a40b-ab8473a3e097","sequence":{"long":15293},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b15e03a6-ff87-49d3-a1f9-b701a61842fe","sequence":{"long":15294},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14a1dd4a-0bfe-4899-a876-344afa171cae","sequence":{"long":15295},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97197d50-71f3-4d9a-9d3c-50c93ec370ae","sequence":{"long":15296},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db2283ba-76c9-4b5a-9df7-03adbcc5e42a","sequence":{"long":15297},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2f2c123-1b04-477d-9759-7eedb36bfdd2","sequence":{"long":15298},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be0db81b-d7a5-430d-af13-1e5fc7a20d48","sequence":{"long":15299},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be1e4c6e-60e8-4409-a22b-a5734e9c7afd","sequence":{"long":15300},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4943652b-4d0a-4b52-96ec-230fff837ca6","sequence":{"long":15301},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9da94c7c-dbdd-455e-926e-66b2dfd52eab","sequence":{"long":15302},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01d67e62-54b7-4af7-ae80-047481599420","sequence":{"long":15303},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6bf50d0-e776-410c-a043-dc19cba3ad10","sequence":{"long":15304},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c503c3a5-41c7-4c1b-857e-e195587abd74","sequence":{"long":15305},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d29f0b28-73cc-4fe7-91a4-d960f42ee9e3","sequence":{"long":15306},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7901282-b877-4633-ba95-f83e2f5669b0","sequence":{"long":15307},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73c88891-cf4d-4d51-8064-21c3ad4a476d","sequence":{"long":15308},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c27a77e-e457-4b38-b146-a0ffb0b0d4cd","sequence":{"long":15309},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32e468e8-9603-4029-9cbb-9eb809006d86","sequence":{"long":15310},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e179be7-5196-4eb4-9f4c-4b753fdf4014","sequence":{"long":15311},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59345975-2d2e-4776-a0b1-fabb8e36fb14","sequence":{"long":15312},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b329d9cd-3760-4aa8-962e-530f88003b3b","sequence":{"long":15313},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afc31cd2-e24c-4e58-814e-4c66413114f1","sequence":{"long":15314},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02ea56b0-d14b-4c93-970a-b65f819d83d8","sequence":{"long":15315},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0425c99-8569-4e22-8337-c1f5ac593ef0","sequence":{"long":15316},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e3fe2da-3d66-409c-a798-b800e2f91df3","sequence":{"long":15317},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b03e5b8-0f4e-4231-b068-6e6aa93ddd94","sequence":{"long":15318},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eac0c79b-8bb5-4aa2-952f-68aca7cdc91a","sequence":{"long":15319},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"293e3194-1d0a-4347-90ea-a6cd746c66c6","sequence":{"long":15320},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1ac489d-ff63-4f58-892a-85578b837cd6","sequence":{"long":15321},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ded0cc5-62a9-44f4-9215-38ffd215a9f3","sequence":{"long":15322},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"547a25ed-1af4-4a72-b31c-12ba690e7a2f","sequence":{"long":15323},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6020e002-784f-4e4d-803e-1aad2e52e5d9","sequence":{"long":15324},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb048a20-fddd-4451-b2a4-2fa92d0a75c4","sequence":{"long":15325},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4afed9a3-995c-4de3-8767-770c2c445c63","sequence":{"long":15326},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49eefe1e-8ff0-4ef4-86c3-66ffe2825d99","sequence":{"long":15327},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e798e2e9-9f2e-44d1-8e9a-90ba8909cccf","sequence":{"long":15328},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbfc2559-97fe-4221-969c-cc937128a255","sequence":{"long":15329},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea6cec28-e4e1-40e7-aa48-a0408f4e53f0","sequence":{"long":15330},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20e669e0-1f09-4332-b646-4f6751685d7f","sequence":{"long":15331},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91991609-9e3f-4c05-9cc6-70e46616ef21","sequence":{"long":15332},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18e5f6da-02f3-4285-942b-70362c0f132a","sequence":{"long":15333},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b79e0cd-e147-4d55-8c77-c54df01c3aa3","sequence":{"long":15334},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"829e235f-9b9c-4ed6-9485-1429e6b603b8","sequence":{"long":15335},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8099a8da-1485-402b-a6a4-a7415b5327a8","sequence":{"long":15336},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ed03bbe-6067-491f-8c15-8fe2784bb0f1","sequence":{"long":15337},"type":"EVENT_MPROTECT","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28eac2b1-3df5-49cd-9507-1937b841e419","sequence":{"long":15338},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9245064d-56b5-4f93-b63e-2a2db8bf0496","sequence":{"long":15339},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bec97b3-99f3-457f-8c21-6080c49058f2","sequence":{"long":15340},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/all.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c3ff791-834b-4124-9992-d883fdb44b59","sequence":{"long":15341},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"752ff26b-2e8c-46f8-b3db-c271f45871a4","sequence":{"long":15342},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49b0c19e-0145-41f4-8286-05181e163cb0","sequence":{"long":15343},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b309a034-72a7-4b37-9d0f-eff4143bc849","sequence":{"long":15344},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b16dfd32-0f58-4d6a-8432-acb19789ca9b","sequence":{"long":15345},"type":"EVENT_FCNTL","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5646efc1-74b1-4dc0-b0cc-49f801fa0be8","sequence":{"long":15346},"type":"EVENT_FCNTL","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1788938-9b5e-4a7b-9e1f-5a5882a158fc","sequence":{"long":15347},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b812247-dea9-4834-ac4a-60cb498f6530","sequence":{"long":15348},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1884},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"348bf690-5836-40ae-bd92-3a983c88bdba","sequence":{"long":15349},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":516},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"604be711-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1514,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584420684121696},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85f3e715-df1b-4e20-8a01-97b38987772c","sequence":{"long":15350},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"604be711-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1514","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1514","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7c74023-0cd8-4760-9033-58542708af80","sequence":{"long":15351},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"604be711-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584420684121696,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17524476-d885-4a62-b3f4-0c334b1dcb79","sequence":{"long":15352},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421604041203,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1018769},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22c2d288-c984-455a-8f07-b44ce588fae3","sequence":{"long":15353},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"604be711-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"604be711-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58a9aff4-1804-41d9-8331-26f870e509bc","sequence":{"long":15354},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33f1f103-0e4f-45ce-9ff3-6ba7fe26c5a4","sequence":{"long":15355},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9efc3eff-6e4b-4704-8e66-de4d1410d18e","sequence":{"long":15356},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bca0b79a-c5ae-4090-8adf-3a7d3ad838d9","sequence":{"long":15357},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ee8d8ca-7800-429a-93cf-38c9af2fdda9","sequence":{"long":15358},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f36ac23-21bd-4d12-9048-0b10f18e4121","sequence":{"long":15359},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64751bdc-6aae-4ec0-ab4a-0bcd8258700a","sequence":{"long":15360},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":34},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"60e6ab2d-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1515,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584421704387085},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6084a49-cb6f-4095-a986-5d0190ca173d","sequence":{"long":15361},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1515","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1515","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4290dd72-d22d-4ca5-919e-9fee04ea03e3","sequence":{"long":15362},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fd091f8-029b-4c3f-88ed-115b38461516","sequence":{"long":15363},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"56ecc1ae-1878-7b59-b818-6135097b8030"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./change_file_permissions"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584421704387085,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./change_file_permissions ","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1a3521b-a847-4996-9425-22b9b1292fd2","sequence":{"long":15364},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8f1e4c7-97a8-417f-bfd2-583bf27ed2a8","sequence":{"long":15365},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb9cf3e8-da2f-47d6-ba8c-8902b5d491a8","sequence":{"long":15366},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9467a8e5-1479-4fb5-b192-1dc90dabde52","sequence":{"long":15367},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c291419-4dfa-4fb1-a24d-286340c7dd99","sequence":{"long":15368},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0580bd7f-6266-4d00-b4f5-792cfad6ee83","sequence":{"long":15369},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d79ddc2b-7c49-4bce-bbd6-1b20fbc6e41f","sequence":{"long":15370},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bd109bd-db38-481a-9718-56913259f779","sequence":{"long":15371},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db05c219-1e66-436b-bebe-841fd53f8f6b","sequence":{"long":15372},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f1df836-55bf-4058-8406-413fd46cd379","sequence":{"long":15373},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"387b5af6-a5fb-433e-9db3-cb06d599507d","sequence":{"long":15374},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b500d7c-c1fd-431e-9f8c-0e0dd71b3f12","sequence":{"long":15375},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90f91678-81dc-469f-b99a-ea6ec2e3b391","sequence":{"long":15376},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5e8842b-5779-466f-920b-07a5e8e91425","sequence":{"long":15377},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16f67fcb-c33e-4d76-8591-fc58a47a28c9","sequence":{"long":15378},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cfbdc52-a649-4ad8-ba79-640562cb17e9","sequence":{"long":15379},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"526a9129-26ab-490f-a3ab-71447366af74","sequence":{"long":15380},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c05ba6f9-80ee-47c1-9cc5-074586a3a99d","sequence":{"long":15381},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9eab6196-1bee-4a8f-835d-c6c83e41de3c","sequence":{"long":15382},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"433a96ff-0bb2-4294-9923-dad1e251454d","sequence":{"long":15383},"type":"EVENT_MODIFY_FILE_ATTRIBUTES","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/README.md"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_chmod"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3c5ad88-2b59-4ac7-b614-bcd1282dba49","sequence":{"long":15384},"type":"EVENT_MODIFY_FILE_ATTRIBUTES","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/README.md"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_chmod"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b7"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a98a6e04-230c-49d4-90ec-458bd53029ff","sequence":{"long":15385},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"60e6ab2d-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"change_file_permiss"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acab4d98-0c79-4f01-a51c-e7653287e8ee","sequence":{"long":15386},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1368},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40d7557d-fd46-4a92-9842-c00a62458ab9","sequence":{"long":15387},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":532},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"60e76282-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1516,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584421704387085},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e112c5b9-18b0-4828-ae12-50bc9d73039d","sequence":{"long":15388},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1516","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1516","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7526b24-5a04-4d64-880b-2425f25049d0","sequence":{"long":15389},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55088c24-737c-4b37-ab0a-f6f3c046903f","sequence":{"long":15390},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584421704387085,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdc48a3f-3b19-4f89-a1a6-f159b6e87786","sequence":{"long":15391},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dcfa4f59-53c2-48f0-80d2-8128a03060e4","sequence":{"long":15392},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"259d975c-1605-4a6f-9c8f-7a403d003f03","sequence":{"long":15393},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"962a88a4-5c59-4b0e-a63d-9c87d3b0e35a","sequence":{"long":15394},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4df5b1a6-9cd9-4641-b4ec-5a4183728aff","sequence":{"long":15395},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8335e66c-5a17-4c2d-a4c6-6d7e452a535f","sequence":{"long":15396},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef96bf36-9b16-437f-b59e-cfffd1148dbd","sequence":{"long":15397},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c8b90b9-2bbf-41d4-83da-75435d8ea196","sequence":{"long":15398},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffda089c-988d-434a-8a2a-fe323b9a32fd","sequence":{"long":15399},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3fa57c2-af8d-4e7b-a961-390078191149","sequence":{"long":15400},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d00369c-0c9d-4880-9aa8-c4f6ba2b2905","sequence":{"long":15401},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c07129dd-170f-4abe-9b62-10ed79e4ad30","sequence":{"long":15402},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17f1ecb8-338f-47a5-bdaa-c560eb67f287","sequence":{"long":15403},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"798366a3-fc36-4b6b-815d-5d210c6a12e9","sequence":{"long":15404},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"316989bd-9c27-4ff3-877f-299d2155ae3f","sequence":{"long":15405},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b88b693-1fcf-4a36-9a9f-6838f31398a9","sequence":{"long":15406},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4369d2cc-da5b-4a66-ac53-05abb67f0f69","sequence":{"long":15407},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c7f39bd-6c24-433e-b55b-5b475f5abf74","sequence":{"long":15408},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421704387085,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"961c80b1-bdcf-418c-ae08-a4f145ac697a","sequence":{"long":15409},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584421714467938,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a84c111-ed83-403d-bf4e-7fa9a5ac94f5","sequence":{"long":15410},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1018769},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0ee176a-044b-4b7f-8146-1b082239fc8e","sequence":{"long":15412},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7498b0eb-6b80-4075-af5b-5499ec5ccba2","sequence":{"long":15411},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4b24753-8096-4ddd-869c-7eeb5ccacc1f","sequence":{"long":15414},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20573c6d-76af-4a55-aa3b-89f447961efa","sequence":{"long":15413},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"038699f0-5482-4768-8f65-8e63eda874e1","sequence":{"long":15416},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9467a136-8c9e-4bff-92c0-f334982853e0","sequence":{"long":15415},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac8cca0d-a862-4239-8dc0-0770c32cc6ad","sequence":{"long":15418},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e676708-85ba-4f1b-9ef7-3da1b96160ce","sequence":{"long":15417},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"756e9ba7-ee88-4a77-a809-f1c04dbee147","sequence":{"long":15419},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55bb93c3-9939-410d-833b-ecb341068cd9","sequence":{"long":15420},"type":"EVENT_READ","threadId":{"int":100274},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"988d6e58-7580-4f8a-9a49-da6c89f1a3a0","sequence":{"long":15421},"type":"EVENT_READ","threadId":{"int":100274},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05c8d94f-1565-41a1-a1ea-3feb579138d7","sequence":{"long":15422},"type":"EVENT_READ","threadId":{"int":100274},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3113},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54b4fb8a-e9c2-4794-b13b-ac22e29728a4","sequence":{"long":15423},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3166},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bde185a7-1c7d-45f7-9a63-cf365e271af5","sequence":{"long":15424},"type":"EVENT_WRITE","threadId":{"int":100274},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6468f427-6c59-438a-9059-7cfe23e38511","sequence":{"long":15425},"type":"EVENT_READ","threadId":{"int":100274},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03416b0e-52d9-4a02-8d0d-c574be859b3a","sequence":{"long":15426},"type":"EVENT_READ","threadId":{"int":100274},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c75ee3fc-5559-4e3e-8295-ecadfc6d46ee","sequence":{"long":15427},"type":"EVENT_READ","threadId":{"int":100274},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4825},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"412e15d1-3612-41ee-8b4b-f4168d0116e9","sequence":{"long":15428},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4878},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45eb0a80-f096-4980-8883-ba392b7080d8","sequence":{"long":15429},"type":"EVENT_WRITE","threadId":{"int":100274},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9424e00-6ab6-4560-a196-b4021d3feb04","sequence":{"long":15430},"type":"EVENT_READ","threadId":{"int":100274},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d262bb2d-3ff8-4e77-b8ae-e02239c954f9","sequence":{"long":15431},"type":"EVENT_READ","threadId":{"int":100274},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08218d8d-fa00-4c1c-bc5b-005c69f9de65","sequence":{"long":15432},"type":"EVENT_READ","threadId":{"int":100274},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4141},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff8e1c38-a2ea-4881-be44-73f20f2b09e6","sequence":{"long":15433},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4194},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ffc5e4f-13d8-4349-bf01-07838332e1fc","sequence":{"long":15434},"type":"EVENT_WRITE","threadId":{"int":100274},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1ce618d-285f-4a8e-a0bc-d99e3c368c41","sequence":{"long":15435},"type":"EVENT_READ","threadId":{"int":100274},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e28a9dcf-68c2-40f6-a443-bff2a208e536","sequence":{"long":15436},"type":"EVENT_SENDTO","threadId":{"int":100274},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17320","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4448c1e-152e-4cfa-84bd-48f10ddd41e4","sequence":{"long":15437},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17320","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6fe8b2e-6ee9-4fcd-90a8-20f5a3432368","sequence":{"long":15438},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422124578154,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e47b39a2-3ba7-4e15-a6a5-f1b7bd667045","sequence":{"long":15439},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422134286759,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"896e89eb-9f5f-42d4-a333-fd85f0768f6c","sequence":{"long":15440},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422134286759,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31bd3296-0005-4af4-9c6a-564cf1e288fc","sequence":{"long":15441},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422144201756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de256b73-892c-4dad-9137-78a586fe42ae","sequence":{"long":15442},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422144201756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e862e7b1-7ef7-4f10-a22e-fb5001b39637","sequence":{"long":15443},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422144201756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d24c369-787b-4d01-ad8a-e66e5a5d8a32","sequence":{"long":15444},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422144201756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd924d37-908b-411e-b7c2-e1fd34c072ab","sequence":{"long":15445},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422553857895,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1daff65a-910c-414f-ad12-f40eaf0b9dae","sequence":{"long":15446},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422553857895,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17321","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70a5c280-0d25-4069-91fe-79a14b43a1fd","sequence":{"long":15447},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422553857895,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17322","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4bf4452-5fde-456e-abeb-50afb8a1ffba","sequence":{"long":15448},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422654762242,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1028020},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c11e367a-1e40-459a-aba6-3f0162d69eca","sequence":{"long":15449},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"60e76282-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1275245-2880-4e0c-b8bb-227666864b5a","sequence":{"long":15450},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a710f7a6-5df2-40ce-b1f7-41e3aaaae669","sequence":{"long":15451},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"61838ec5-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1517,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584422734066919},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d148bd60-6138-4876-bd33-ec92c46407d1","sequence":{"long":15452},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1517","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1517","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"574bf6d7-90d8-4def-ad22-4152b95e52d5","sequence":{"long":15453},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c6f6739-642b-4b54-9427-342bf5f7305c","sequence":{"long":15454},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"0609dc59-7cb8-de5b-b87c-35aeebded4bf"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_file"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584422734066919,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_file ","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c65686e-752c-4f57-bfa5-f98472a559ae","sequence":{"long":15455},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08abe010-27f0-4921-b74a-7bf48aa6e7b1","sequence":{"long":15456},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e19fe2ef-5dd1-4661-95c3-2d0ad0027747","sequence":{"long":15457},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"306a7978-bf86-4db4-9dd3-0faae9ca5f3f","sequence":{"long":15458},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bda1e19-1c71-4355-a431-641d6865b4f4","sequence":{"long":15459},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02354316-13d3-413d-9f54-01a9a52b77ff","sequence":{"long":15460},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90e18c75-a663-4bf3-9d0a-f32b1e55b83f","sequence":{"long":15461},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb058d8e-4884-4f9e-8374-3a448704d248","sequence":{"long":15462},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec94e43d-d472-439d-8f23-6436f32c6d1a","sequence":{"long":15463},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6733a407-a480-4d8b-857f-9f14f8c2eaec","sequence":{"long":15464},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7e7e0ab-2bfd-4179-905e-4d4110866b04","sequence":{"long":15465},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8cd8498-4541-456a-9d28-9333c4ffc5df","sequence":{"long":15466},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0786d202-8a54-47a9-835d-1e755ff166f7","sequence":{"long":15467},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e658ca5-fe62-4619-92de-36ca652a8c22","sequence":{"long":15468},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98925e23-8211-46a9-8ba8-ce3e299104e7","sequence":{"long":15469},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd2f1ac4-3b73-459a-b845-3552a5a70c4a","sequence":{"long":15470},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b84ed2df-842f-45ce-83bc-5d0527f4bf8e","sequence":{"long":15471},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45f61278-ce28-4be5-9d6d-241d40e276b6","sequence":{"long":15472},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"090a5e52-c79d-43f8-9365-3e3760a715a9","sequence":{"long":15473},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e16a5f0-45c5-4d07-a748-9f3afcb329d2","sequence":{"long":15474},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/README.md"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"03a0fc55-d7ed-6d5d-add7-543d4d6df1d3","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4da783e2-462e-4711-81d9-668cc08a18ea","sequence":{"long":15475},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"03a0fc55-d7ed-6d5d-add7-543d4d6df1d3"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/out.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41fc2186-58ca-4f0f-9184-e5a161ca18dc","sequence":{"long":15476},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2498},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a73a272f-4a6f-468c-bb1b-9012512549cc","sequence":{"long":15477},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7120725-1ad0-402d-834d-a02da4beefaa","sequence":{"long":15478},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","return_value":"0","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ef02adb-660f-400f-bde1-b6fcfc52d3b1","sequence":{"long":15479},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","return_value":"0","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ea41fc8-4ab8-4478-9e85-d2200d72d184","sequence":{"long":15480},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9e44b63-14f7-4863-9b79-fefdbc6b3886","sequence":{"long":15481},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a2fb0ae-a8a2-a45f-a2a8-6749ffa400ef"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c8c180e-3560-41d1-b684-679371a36d93","sequence":{"long":15482},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"03a0fc55-d7ed-6d5d-add7-543d4d6df1d3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2498},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58c1f96a-f182-40b6-88c4-abe146988fea","sequence":{"long":15483},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"03a0fc55-d7ed-6d5d-add7-543d4d6df1d3"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25014366-ed33-4d38-9ea1-26ad78634003","sequence":{"long":15484},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"61838ec5-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copy_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3942a6d2-045e-4ceb-a64b-df8dfa9fe76b","sequence":{"long":15485},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1352},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b22bd019-652b-4e10-a845-5f38e05c81f1","sequence":{"long":15486},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":554},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6184b48e-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1518,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584422734066919},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d26aa72e-9181-4708-9af3-4a60747a2688","sequence":{"long":15487},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6184b48e-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1518","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1518","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"791cb8ac-c43e-41eb-95f7-4c560dfb2328","sequence":{"long":15488},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6184b48e-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"831d4088-2736-4ba4-9a52-c3a5ddfba271","sequence":{"long":15489},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"6184b48e-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584422734066919,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d3eb9b4-61c5-4a6b-9af6-9c4f87f61b57","sequence":{"long":15490},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6184b48e-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46ff8005-82fc-4220-bcfa-53229467525a","sequence":{"long":15491},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6184b48e-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bce2eb0-f7b6-443c-a794-2aa866de8196","sequence":{"long":15492},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6184b48e-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e19d7a0d-06c2-4583-ab51-6132d4ebf9af","sequence":{"long":15493},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6184b48e-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584422734066919,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4e9af3d-536e-4df5-84d7-dc841e9da737","sequence":{"long":15494},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423683920264,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1033018},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4e4cde3-38f7-49b6-b0e7-4e28861e1fea","sequence":{"long":15495},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"6184b48e-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6184b48e-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22d27d07-334d-4c65-9e0d-d3ec89979d48","sequence":{"long":15496},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0efe4ef-0b11-4c9e-bfa0-96aa3be65904","sequence":{"long":15497},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6220b512-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1519,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584423763933545},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c69383f-412e-4462-aca0-3cb5efa65fa0","sequence":{"long":15498},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1519","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1519","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97d35371-0f02-4e1a-90d8-1ae6dc7565e8","sequence":{"long":15499},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05cd7dfa-fb22-4b85-95ac-411fcb9a78dd","sequence":{"long":15500},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"0f7e034a-4539-ea5b-b945-2560fbea7185"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584423763933545,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_buf ","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"957b4b26-cc11-43fa-a40d-59c057a18a36","sequence":{"long":15501},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d915d29-e0d0-4629-afe0-11e5e341f234","sequence":{"long":15502},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88f3adf5-e485-4372-a3fd-c4fe8224e1a9","sequence":{"long":15503},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9d2736f-99c8-4929-8a82-c9ff60c5c16b","sequence":{"long":15504},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e726535-6660-4a97-86b6-00a1109ef00e","sequence":{"long":15505},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20458c0a-3fad-4b6a-9a84-df124f873f87","sequence":{"long":15506},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7f697d2-2ed7-48b5-ad19-d284101304ce","sequence":{"long":15507},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e65f4b78-e0e0-4101-9bf7-2ee2fa8a042c","sequence":{"long":15508},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be7b49f4-2f80-4ab4-a675-ff9efe383844","sequence":{"long":15509},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d2bc16e-df37-48fb-9f9d-76e908a70ee1","sequence":{"long":15510},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b58426d5-3854-4aaa-abe0-2d033bbb8a8c","sequence":{"long":15511},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0283e731-36bd-4160-9bde-e993db7829d9","sequence":{"long":15512},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5da6f0a0-3206-4ac3-901d-ad52bc74fd1c","sequence":{"long":15513},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fea86266-bd41-4505-8b3b-1e4583624930","sequence":{"long":15514},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8703e2b2-8b82-4a4a-bd9f-faaa8c03356a","sequence":{"long":15515},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a792fadb-8e7c-4763-8fb8-8696cf13202f","sequence":{"long":15516},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8eb5829-d52a-42e6-bf3a-ee3dc42b3c1e","sequence":{"long":15517},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f82b4304-d140-4ee8-94c1-0605151f4088","sequence":{"long":15518},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15748606-4d7c-4ebf-899a-f47bc1c454e2","sequence":{"long":15519},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae0223db-e14d-49c3-b915-e8c6d50ab4d3","sequence":{"long":15520},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6220b512-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copy_static_buf"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"567e2c21-9d37-4278-975e-0be10e7b691f","sequence":{"long":15521},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1330},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad502017-af36-43d2-83d1-1ba0c904d573","sequence":{"long":15522},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":588},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"622169a1-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1520,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584423763933545},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb30097d-5067-4227-94b7-3eb1b5661cd5","sequence":{"long":15523},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1520","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1520","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31ad0fbd-36d4-4d4d-8c87-280a9a8f2656","sequence":{"long":15524},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82a54633-de0e-4daa-9060-15dcb9c92cce","sequence":{"long":15525},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584423763933545,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9448019b-b122-4127-8549-f6371843c79d","sequence":{"long":15526},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2b08095-93ad-4e27-b836-2b8d761e2de6","sequence":{"long":15527},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7c46456-432c-4fcc-98bd-db1c65e60a9f","sequence":{"long":15528},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37cb8a51-3ed7-4b95-9d3a-a3e116e92a75","sequence":{"long":15529},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27471451-7aaa-44eb-b258-fe50b6c1aec6","sequence":{"long":15530},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd9f3b07-98ad-480e-a588-87e48856f843","sequence":{"long":15531},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b44552d1-5cab-4700-be0b-6f857b28cbb0","sequence":{"long":15532},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42a419c5-a16c-4b74-84ee-6d58121fe060","sequence":{"long":15533},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4f340f3-ad33-43ef-a02b-26399ed084be","sequence":{"long":15534},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e6c957e-d0a5-4314-b7b2-75dc092fb470","sequence":{"long":15535},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59f63885-f150-494f-8162-a60895422b5d","sequence":{"long":15536},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9481a1a5-34c0-492d-b50a-c7808a7faf75","sequence":{"long":15537},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58c47e2b-8a44-4130-af1a-057adb5820f9","sequence":{"long":15538},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cd02cf6-d0de-4482-acfe-f4e41433f843","sequence":{"long":15539},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584423763933545,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6def29a9-3122-458f-b8f3-222e1b604691","sequence":{"long":15540},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424714289257,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1037897},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"761858ce-7c55-496a-8eaa-5b56168a008f","sequence":{"long":15541},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"622169a1-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6dd807e2-5a2c-4e4b-b677-e019e1ec0b1d","sequence":{"long":15542},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d36beada-fc67-4ad8-b9ad-71fddde5d59e","sequence":{"long":15543},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":38},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"62bc54a0-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1521,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584424784068895},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f883fb7-e472-4588-8e64-de6765c912e5","sequence":{"long":15544},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1521","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1521","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02935375-4077-499f-87e6-f54bfa8151b5","sequence":{"long":15545},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60c3ed61-eac3-4bb7-8be9-8c1063b19b3d","sequence":{"long":15546},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"8d001f29-417a-805e-ba41-cecf5e804caf"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_stack_frame"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584424784068895,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_buf_stack_frame ","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04a5f2e0-80f4-458c-afc6-e179ff0ca94a","sequence":{"long":15547},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b933d75d-a5be-4c49-9d10-84083a09d51f","sequence":{"long":15548},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69d0d981-8110-4bb8-87d9-4a8eb7b54bcb","sequence":{"long":15549},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ea964ad-599c-49bb-a4ad-4ec3901161a7","sequence":{"long":15550},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f84f59a-a802-4355-b8ba-cd76e79ece29","sequence":{"long":15551},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b89c6e3-d65c-4b76-8db7-7c7b48dd8607","sequence":{"long":15552},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac4f7799-69e8-4254-b366-3728311b07c0","sequence":{"long":15553},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dcf22af-94f5-4b69-8a38-fecbc586dc0b","sequence":{"long":15554},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83b72e6b-5ada-4697-bf8d-9e514631d98c","sequence":{"long":15555},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bf688de-b582-4139-bb32-578543019163","sequence":{"long":15556},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed98054a-df42-457f-a1f5-b2bc75601393","sequence":{"long":15557},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9de20697-7407-473d-9b59-f11891964916","sequence":{"long":15558},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c738ed16-a807-498e-b4cf-56822a4557ea","sequence":{"long":15559},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bfbe533-73f2-4e45-b87e-9112c34131d1","sequence":{"long":15560},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b3784a5-fd01-4683-b038-9d51cc4b3287","sequence":{"long":15561},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fbf903d-3a3f-41c1-a447-f0a44a4c1613","sequence":{"long":15562},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8fc9a11-d80c-41af-80e9-6e785c2809a1","sequence":{"long":15563},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a6a0b63-bf21-44d9-a98a-fd4d69f7acb3","sequence":{"long":15564},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a86a750-85c2-4f6b-b0a2-9617cd71a16a","sequence":{"long":15565},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2f92e22-a3e1-44b3-be48-adfd46fbad17","sequence":{"long":15566},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"62bc54a0-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copy_static_buf_sta"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e06f2a79-5831-41be-99e9-6063ceaab52a","sequence":{"long":15567},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1296},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2acf2eb7-4cde-423e-8716-a5819139bd0d","sequence":{"long":15568},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":617},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"62bd012c-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1522,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584424784068895},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42cfdc31-7852-4f2e-89b2-203598a5fe9e","sequence":{"long":15569},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1522","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1522","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f2540d5-ede0-4a45-bc09-0d14625de11e","sequence":{"long":15570},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9e9b689-1ed2-4c4d-b0c4-433275d51e0d","sequence":{"long":15571},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584424784068895,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10467109-3ec8-443d-b1ae-4693801d4136","sequence":{"long":15572},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2a22bdf-ba6c-400a-92c8-87ea74f4e9e5","sequence":{"long":15573},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fdbef37-b36d-45d2-a576-6c1204b3bd3b","sequence":{"long":15574},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"978806d6-d56e-47ad-a6b6-5bfa44ee5829","sequence":{"long":15575},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bd80234-b966-40a3-9cdd-7e7703decc89","sequence":{"long":15576},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"314a87bc-bfab-414e-bdf7-0fec45ee52b6","sequence":{"long":15577},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d791684e-5b82-4647-966e-3aecbd76ccb1","sequence":{"long":15578},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c380ee90-8652-45bb-a045-f75b4e8b8b7b","sequence":{"long":15579},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eea2c487-39b2-41f3-9e8d-ce03ecdc2945","sequence":{"long":15580},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"499efd77-8c9c-4f0d-9525-c48c3ef2398b","sequence":{"long":15581},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7f078fd-fb8a-4876-88df-d9f2f663b9ea","sequence":{"long":15582},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"119baef4-fca5-44ec-a1b2-1584307b9fb7","sequence":{"long":15583},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e735ca90-e29f-4994-a73f-64afe119eef1","sequence":{"long":15584},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7d2fdb2-8f34-4be3-ab06-14ac666aa1e3","sequence":{"long":15585},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584424784068895,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2701316-f85c-466c-a304-fcaa302c0916","sequence":{"long":15586},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425743915351,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1042770},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b754c72-3ec8-4363-aa78-007048b77a4b","sequence":{"long":15587},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"62bd012c-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e347945e-986e-4258-9955-89db6a756981","sequence":{"long":15588},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4db4f9db-8992-418a-b8a6-2796231bd795","sequence":{"long":15589},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"635816b6-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1523,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584425804421141},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4331d6b6-facf-4ad6-ad7c-7c40c51b1e75","sequence":{"long":15590},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1523","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1523","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7fe69cb-96f3-4a02-9069-53216bcf1786","sequence":{"long":15591},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77672cec-0745-45ae-b78b-bd9d026e170f","sequence":{"long":15592},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"656c7084-7a51-2d53-917a-60f4832de58f"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_buf_string"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584425804421141,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_buf_string ","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73773262-ba6e-4409-934a-8b51361512c6","sequence":{"long":15593},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37998627-e789-4d83-8313-df94ccb53e26","sequence":{"long":15594},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9b6b731-958c-4d51-b108-2d915afc2905","sequence":{"long":15595},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60c2207e-e5c6-4ed0-a3dd-6e2ea7f7d831","sequence":{"long":15596},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ef08af0-1e58-4323-95c7-09fe79b63311","sequence":{"long":15597},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec03f11e-9f18-4485-a7df-1cea39585bc2","sequence":{"long":15598},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b174a9ac-d8ad-41a5-afba-671042971882","sequence":{"long":15599},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"742a8c65-53af-4161-a693-845a6e12f291","sequence":{"long":15600},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfed7905-9922-4400-b8d9-b2aed93c5af1","sequence":{"long":15601},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98c01ba3-74a4-471c-8c25-0b0b4ebc4e52","sequence":{"long":15602},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88eb3221-ec70-43f9-b615-a31c7c94b108","sequence":{"long":15603},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ad1f910-95d4-4267-aa28-c2dd626c36fd","sequence":{"long":15604},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edff5a94-2cc0-4035-a38d-db3a22ddc6ef","sequence":{"long":15605},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fecdfa73-51e1-4e92-9ede-18fa5dac6017","sequence":{"long":15606},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5db3fc6e-655c-4042-92ec-a29e46abdb60","sequence":{"long":15607},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"400d9d58-873d-462c-ac9e-cf82aeebd6b8","sequence":{"long":15608},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"938e1a1a-d33b-4ff0-b194-dd7514aa6c63","sequence":{"long":15609},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39ffb691-5ed6-4600-bd11-97578e7f62aa","sequence":{"long":15610},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d41160c0-67b1-4584-b20f-b0453c3f7121","sequence":{"long":15611},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"647db605-fbcd-4590-93ca-85bc42ea21d6","sequence":{"long":15612},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05cb8031-ea19-44cc-9f99-c90de77957e2","sequence":{"long":15613},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"635816b6-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copy_static_buf_str"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88b7aca9-40c7-4b88-bfa6-7892b465196c","sequence":{"long":15614},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1267},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"571269e9-2c46-48f8-96e0-9b3d3c861eb5","sequence":{"long":15615},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":644},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6358c1f4-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1524,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584425804421141},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39f04ccd-040b-4f6e-b4df-ed17afd28ff3","sequence":{"long":15616},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1524","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1524","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"019d2075-f45e-4cd8-a3af-5ce136de3539","sequence":{"long":15617},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dd77ac0-b5d4-4d38-bc46-50b88c1d668d","sequence":{"long":15618},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584425804421141,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2f169a5-770c-4d26-b912-dd8a45c150c6","sequence":{"long":15619},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3edbdfdc-3154-465b-b86f-b555892e897c","sequence":{"long":15620},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a68d371-249f-4fcd-acad-5eab7ffd65c7","sequence":{"long":15621},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cabb591-036e-4b43-9055-041ee4d5b345","sequence":{"long":15622},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c87cf9a-b1a2-44a6-9206-07b5e29578b3","sequence":{"long":15623},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f5b6af3-dca6-4d16-86b7-72eec9500093","sequence":{"long":15624},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae27787d-4f0f-4bfc-9519-3e4c64e08dac","sequence":{"long":15625},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c58f2c8-803b-4687-8e93-5b900a9cb22f","sequence":{"long":15626},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"224fd94d-1917-4c18-973e-d27b8959d3a6","sequence":{"long":15627},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f44c12e6-ce52-4a27-aa2c-a1194e0f9a33","sequence":{"long":15628},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4ce5fd7-adee-4740-b66b-823e226ea643","sequence":{"long":15629},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1699b56e-7292-4c9a-992a-b0d9438cb3a0","sequence":{"long":15630},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21619ea3-5e1f-459b-9bd1-4fde53332283","sequence":{"long":15631},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584425804421141,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf5fbb37-14db-4943-b8d2-ac1f0eed284f","sequence":{"long":15632},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426774419391,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1047710},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00e9c8c5-222f-4b25-884f-3a4e71d8074f","sequence":{"long":15633},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6358c1f4-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59d089bd-5e16-4e9d-a585-2d49fe34134a","sequence":{"long":15634},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00ae8403-bf17-44b8-afa3-11268059a713","sequence":{"long":15635},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":31},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"63f3cab7-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1525,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584426824427450},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4af3b453-2929-4666-b2a2-479cdf86b32f","sequence":{"long":15636},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1525","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1525","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73bfcda8-1df1-41ea-84b4-b53f190d36f0","sequence":{"long":15637},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09e69dd3-6009-44c7-9bf4-b1bf9da4da73","sequence":{"long":15638},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a40cfc78-90a1-075c-a190-f4d7ac07bd69"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copy_static_heap_buf"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584426824427450,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copy_static_heap_buf ","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df10a2fe-84db-4ed3-a558-fba03fbdff04","sequence":{"long":15639},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da9a374a-7585-411f-956b-2b19b3e4fd6e","sequence":{"long":15640},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aeb12d33-3d44-4715-a7c4-d469fb9eef39","sequence":{"long":15641},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a265e36b-52a3-4877-aef2-ed24cf733323","sequence":{"long":15642},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f8bd5fd-298c-4adc-a307-9d3a897c0615","sequence":{"long":15643},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5718845a-681f-4f42-99a7-6e4189812e21","sequence":{"long":15644},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bf9aea9-2675-44f4-9849-d6c2b8c89a29","sequence":{"long":15645},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e46a4e2-a5cd-494d-bca7-28c0a1557957","sequence":{"long":15646},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"790d7126-02f9-4f2a-89ea-aeb748df34ba","sequence":{"long":15647},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4ff2226-6a1a-4c7b-a95c-ebae6bc6d3c4","sequence":{"long":15648},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ab9c1ba-7a9f-459e-9665-74841f4f07d5","sequence":{"long":15649},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8206023-8f6b-4f03-9ff0-f855dda3f762","sequence":{"long":15650},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22690134-2870-4989-a49d-1b4de909bad3","sequence":{"long":15651},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e41ed0b4-9473-44f7-a28e-7883df2e3528","sequence":{"long":15652},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b779ab69-d6d9-48bb-911a-76468e335d9d","sequence":{"long":15653},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1784a8f9-e418-4489-92b9-028d415c2542","sequence":{"long":15654},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"907b0d4b-a43b-4a73-b1ba-f48d61bbd3a1","sequence":{"long":15655},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18e165f5-339a-4a17-95f9-def0ef755a7c","sequence":{"long":15656},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67485f3c-ed1c-45eb-94e6-bea0468f0b83","sequence":{"long":15657},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8945e023-5614-4d25-9c8d-c2adc2b9d2c3","sequence":{"long":15658},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"63f3cab7-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copy_static_heap_bu"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6758c456-8303-4c58-9eed-14884bffa4e8","sequence":{"long":15659},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1240},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ff8fef9-dfec-4ee3-abe5-17b706ac53ff","sequence":{"long":15660},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":663},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"63f47686-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1526,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584426824427450},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0cf506e-679c-4863-a762-6704fb008e02","sequence":{"long":15661},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1526","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1526","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acde952c-9ba8-4c01-bcd2-b6bb22666fbc","sequence":{"long":15662},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a932cce4-6fe5-459d-9843-44540428039e","sequence":{"long":15663},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584426824427450,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae8fab32-e7a2-4acd-bf50-ff4070383181","sequence":{"long":15664},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a44e481d-5c85-4daa-8e25-a5ce3d0bddc6","sequence":{"long":15665},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3b52ef6-cefe-4852-bf47-3f069296f05f","sequence":{"long":15666},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbb2c682-4c4a-4183-bdc3-2a44a76ed996","sequence":{"long":15667},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc4e42fd-c70c-45e9-ba34-0750fed88467","sequence":{"long":15668},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4beb4de-baf1-4776-b61d-f8938968d31b","sequence":{"long":15669},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24a7153c-6cb4-4fbf-b824-262c2ba1a44e","sequence":{"long":15670},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d0e23b6-a566-4b61-b9d0-2c54e8f9ba85","sequence":{"long":15671},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c62c6b4-3e70-4692-bb15-712dceeed704","sequence":{"long":15672},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2294e58-7dcd-456e-b0df-80338c8364f2","sequence":{"long":15673},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8203fd7a-7294-4326-8887-476dafafb99b","sequence":{"long":15674},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa335cd6-3bd9-4d6f-ae63-6e0de0fc93da","sequence":{"long":15675},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"881c7233-262b-415e-8bb2-a5a7b106e3ba","sequence":{"long":15676},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf720490-5c33-42b6-9a78-6a6fa70a46dc","sequence":{"long":15677},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584426824427450,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f884f6a-9391-4782-ab3b-a21fcbce43e6","sequence":{"long":15678},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1052582},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e645d3ae-9c71-41c8-b549-9344764b7ed1","sequence":{"long":15680},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8872e51e-3698-4866-8389-957548d042d4","sequence":{"long":15679},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10894897-7a14-4d52-8cae-8874770415ff","sequence":{"long":15682},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c20d6d9e-2633-4fff-a82f-92c7525e3ff4","sequence":{"long":15681},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ad4f592-2d8b-473c-988d-baf1e2f35a98","sequence":{"long":15684},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5dd1149-a94e-4aa0-8d02-fc115606ee32","sequence":{"long":15683},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d7aa164-744f-49af-ad9c-40d6a6d5a1b5","sequence":{"long":15685},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38d3fea9-7e76-480a-97e0-1d2f70993fa3","sequence":{"long":15686},"type":"EVENT_READ","threadId":{"int":100277},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1399177-c6d7-4f02-b0fb-dd80e44446b6","sequence":{"long":15687},"type":"EVENT_READ","threadId":{"int":100277},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4fe4d32-0220-4e56-b2d7-6f63f64e54a5","sequence":{"long":15688},"type":"EVENT_READ","threadId":{"int":100277},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4936},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af160ee4-d13a-4025-839a-3d6764cea01c","sequence":{"long":15689},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4989},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40ae5754-6838-4c0e-97cb-701845f9a07d","sequence":{"long":15690},"type":"EVENT_WRITE","threadId":{"int":100277},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d09a9f1-7e46-44da-8930-1bdf51411a6b","sequence":{"long":15691},"type":"EVENT_READ","threadId":{"int":100277},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"869f7f67-3a81-432a-8f9a-14b6814d8f00","sequence":{"long":15692},"type":"EVENT_READ","threadId":{"int":100277},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c52e015-b904-4d92-8fb4-2904e3850128","sequence":{"long":15693},"type":"EVENT_READ","threadId":{"int":100277},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427804615106,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4868},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d56df5b3-fee9-41da-b142-773c73f9ed87","sequence":{"long":15694},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427813879344,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4921},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2aa5baa-aa09-4119-ac18-865d337e3749","sequence":{"long":15695},"type":"EVENT_WRITE","threadId":{"int":100277},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427813879344,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d78af3d3-9698-4bd8-9f45-4be411c537cc","sequence":{"long":15696},"type":"EVENT_READ","threadId":{"int":100277},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427813879344,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d56de6b9-1385-452c-8d61-50f71fea2fbd","sequence":{"long":15697},"type":"EVENT_SENDTO","threadId":{"int":100277},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427813879344,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17331","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c418eadd-0d38-4e40-a949-98dd199ac25e","sequence":{"long":15698},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427813879344,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17331","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d76b4617-91ae-49ef-b37f-b044ca7b718b","sequence":{"long":15699},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427813879344,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f72d55d8-5501-4ebc-89f1-f2bceb7465eb","sequence":{"long":15700},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427813879344,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49374fb0-e94f-419e-a633-9d45da0d6a25","sequence":{"long":15701},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427813879344,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e5e22fc-3678-47a1-9060-df2aefe7d0ed","sequence":{"long":15702},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427823857254,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7d4d501-2cbe-45aa-a591-f22f417c46a6","sequence":{"long":15703},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427823857254,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bd85101-fda5-4024-b97b-78bc9f188938","sequence":{"long":15704},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"63f47686-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86452b83-026b-4b38-b5b9-7d7239438da2","sequence":{"long":15705},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c134ad2-52d7-4c98-bbcc-8f94d1dc4d35","sequence":{"long":15706},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":23},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"648f499d-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1527,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584427843982013},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96f05cc9-1f0f-4d1c-b5ea-9ce1050b90f4","sequence":{"long":15707},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1527","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1527","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aaddbc60-19d5-4349-bbb1-987533476edc","sequence":{"long":15708},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aca6d76a-71a6-4dba-9349-5081166652b6","sequence":{"long":15709},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"1bca75f7-71d4-1553-9471-f02cd31597be"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./fork_process"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584427843982013,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./fork_process ","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd93ee10-31cd-41cd-8e82-744c79627893","sequence":{"long":15710},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff758e3f-204f-444b-888b-5a2a3194e3f0","sequence":{"long":15711},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"840d9764-883b-4051-9428-43df28aaadd1","sequence":{"long":15712},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f16991a1-8446-4c32-8fb2-9feea27bf922","sequence":{"long":15713},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0b4962a-b422-40ed-9530-7b8ebb06f2de","sequence":{"long":15714},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ffc9160-200c-4b68-b28f-867fecaee4db","sequence":{"long":15715},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9efe3ee-20a4-42c6-ac46-60a8eb8d7514","sequence":{"long":15716},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e12cacdb-2a82-4792-8d3b-32056cebfed2","sequence":{"long":15717},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc9cc5e4-c0b7-41b5-abba-66956085df87","sequence":{"long":15718},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20bb7f19-a5bb-42ca-b2a9-e7d5eb61267e","sequence":{"long":15719},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"865327f1-3341-4e1f-ac37-7b00dbd45303","sequence":{"long":15720},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9deb0e8-28a0-41c9-aae8-cd75a624766c","sequence":{"long":15721},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adb8fc5f-e22f-46e0-b0fc-fcabeb599e10","sequence":{"long":15722},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c96ec457-d02c-4802-9115-116f312e071d","sequence":{"long":15723},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89f56b62-4600-47a2-a579-38c6394b6786","sequence":{"long":15724},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"200f3271-0368-42b3-9a1f-e5eb8c0132db","sequence":{"long":15725},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d40813a-2fbb-44d0-b82f-a5b7ad91e971","sequence":{"long":15726},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"648f499d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584427843982013,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"fork_process"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"500251eb-8951-4088-ad77-89bd00973431","sequence":{"long":15727},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428833907966,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1057300},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"64907b28-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1529,"parentSubject":null,"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5b70801-d588-47fd-80b8-65bdd08e6fa5","sequence":{"long":15728},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"64907b28-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"64907b28-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eaa70d30-e355-4da8-9eec-d1f8a698f812","sequence":{"long":15729},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c1f3f79-5774-4f75-96aa-7f35ba610ee6","sequence":{"long":15730},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":18},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"652ae83a-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1530,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584428864156433},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f08becd-cb6e-431e-ae5f-993ce6596581","sequence":{"long":15731},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1530","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1530","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5793e63c-5935-439b-a6eb-a39ea3fbb949","sequence":{"long":15732},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe1b0ff2-7bce-49c3-94aa-39878b16ffdb","sequence":{"long":15733},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2e1f69d8-d3e4-2950-a4d3-829bb0298789"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./listdir"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584428864156433,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./listdir ","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"414c907b-7f10-4b3a-a744-b6f09b336166","sequence":{"long":15734},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"881f0b2b-b483-48d9-8a79-72b7a8209215","sequence":{"long":15735},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1aba81ab-8ff3-41b9-8e13-a30422b569aa","sequence":{"long":15736},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d9dd9df-8861-43be-9fea-3878e074f594","sequence":{"long":15737},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"623aee16-f151-4bf6-a50d-ad203711d6d7","sequence":{"long":15738},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b587e7c3-8e82-4411-bb7c-9e2805c8b543","sequence":{"long":15739},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf52a1ae-7bb5-4e41-8a2a-218a5afc4bb5","sequence":{"long":15740},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31bdac0a-3785-4e64-88f7-e67ec49ccd21","sequence":{"long":15741},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad29a43f-c720-49d1-8f63-56096cd510bf","sequence":{"long":15742},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cad0f9b-2579-41cc-9572-d0d65a93d916","sequence":{"long":15743},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17ecbf30-fbf3-42bc-95a3-440627802f6c","sequence":{"long":15744},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32cd0a5a-dd7c-4fc7-8d18-d81a70674358","sequence":{"long":15745},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ea932c3-f619-4253-8dd0-5faf6fd7d3fd","sequence":{"long":15746},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e024cc89-18ec-4ebd-b7b6-1d4c52d2b9ea","sequence":{"long":15747},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cff1186-5f4f-466a-a2e0-70292c7f230f","sequence":{"long":15748},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a52934b0-3f99-44f1-8128-c1e08863c212","sequence":{"long":15749},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cc91393-eaf2-4677-80f9-1c69e3c0a95b","sequence":{"long":15750},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b612df1-42d8-4081-9150-79a9495eab4c","sequence":{"long":15751},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f136093-4a81-4a19-b6b5-57bb9ade7a04","sequence":{"long":15752},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a02754c0-e54a-4585-bd7d-7b56d1d061e4","sequence":{"long":15753},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/."},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00eb50"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5280f6bb-ce38-4056-8829-4aff10601cc1","sequence":{"long":15754},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"721ae50e-de49-4f2b-8986-6ec0679751ad","sequence":{"long":15755},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a94559e-976a-4fca-a1bc-46bb3039430c","sequence":{"long":15756},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05cb1c58-0a54-4d01-99fb-94aa2ca98bbc","sequence":{"long":15757},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"955ba779-609c-4b76-930e-a151a0e336c6","sequence":{"long":15758},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":9},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f41d3e3c-931a-46b5-a356-c4342af8cc65","sequence":{"long":15759},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19dc277a-c715-43a4-b6e3-a5689303850c","sequence":{"long":15760},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a68376eb-cd5f-4f45-b4bd-d6a254ca7498","sequence":{"long":15761},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b546c786-d2d5-4086-8a21-ca9b2f63bc35","sequence":{"long":15762},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a80249ca-1c75-4472-bcb3-112b7d1c396b","sequence":{"long":15763},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c40096fd-3db0-47c0-8656-436362185c8a","sequence":{"long":15764},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14133eb9-4624-4776-81f5-83971755c642","sequence":{"long":15765},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":24},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ed7e945-c24f-44c0-ae7f-31bb8aea9b8a","sequence":{"long":15766},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8268f94b-acb2-43b9-905e-1af1232c1221","sequence":{"long":15767},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df7cb0a3-c8f2-4c62-9314-5360ba6c338d","sequence":{"long":15768},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3339c6ee-3bd1-4833-a449-356b06759369","sequence":{"long":15769},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"420b4490-c708-4b16-9fc1-b8a60fe2abaf","sequence":{"long":15770},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428864156433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":23},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dee3066-f72e-41a9-b959-8df102637b2a","sequence":{"long":15771},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":21},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd5d9c3f-927d-4ed4-8f54-ab3a95ed133b","sequence":{"long":15772},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93e4f3dd-80b1-4d0e-ba94-c13901011bec","sequence":{"long":15773},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25b67d0e-13f8-4625-a1a3-d3f64fd54b02","sequence":{"long":15774},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":23},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7f47de6-716c-4ad7-a49d-d535ef648c55","sequence":{"long":15775},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":24},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bea09329-87b5-4656-a825-d5377414dd15","sequence":{"long":15776},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53ecf3a7-da44-47b4-a1ff-f327344e7bc3","sequence":{"long":15777},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"886b04ea-8bca-4665-ae2c-307477123e84","sequence":{"long":15778},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6d3e63f-3b98-4c72-8054-3e19879ddc5d","sequence":{"long":15779},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b7107d9-fbcc-41ca-8d85-3ef50d99086c","sequence":{"long":15780},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a680434-dc5b-4863-b1c9-80f0088cede5","sequence":{"long":15781},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"224dd9cc-317a-402c-a363-73385f00c166","sequence":{"long":15782},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"289b9df6-19a3-4716-8985-f2280db39c9e","sequence":{"long":15783},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":13},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a0aa462-8bf2-458a-866d-53ef1cbcaf96","sequence":{"long":15784},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49daa9ce-58ca-4e96-a05c-f540cfeff6b1","sequence":{"long":15785},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cafc03ec-c5f0-46f7-adef-a71288676ae7","sequence":{"long":15786},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd8c39a3-f626-4ada-b0e4-97e7b4d9db44","sequence":{"long":15787},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f047aac-f548-43fe-ac34-d8091e5a32cb","sequence":{"long":15788},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6598978c-0dd2-46c3-9eac-b189fcaff04f","sequence":{"long":15789},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":10},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e910738-c268-4110-bf63-e1ab29b8e621","sequence":{"long":15790},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":9},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a31ce742-e26e-4644-b755-81661b4461f7","sequence":{"long":15791},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9da3ce4-63a0-4142-b471-870d6685e490","sequence":{"long":15792},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fa878f2-7ab1-4a66-80fe-32cc6ecb8cb4","sequence":{"long":15793},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4faa815-87bb-4d1d-80ca-1b3aa5c99fd4","sequence":{"long":15794},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16bc9d4c-0b17-4969-b5e4-45c39cc64984","sequence":{"long":15795},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31ccf4b3-e288-47cb-a8b2-91ab29580773","sequence":{"long":15796},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"1edee73d-9a38-a754-b89a-6d3944a71c62"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59ded78d-0346-4b10-8bfa-6ad92fba0bd4","sequence":{"long":15797},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"652ae83a-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"listdir"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9d2ff20-4ee2-46e2-8ee0-c987e4ff38c1","sequence":{"long":15798},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1207},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f6fa090-e4f8-4bfc-9fee-bab891ce5b05","sequence":{"long":15799},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":698},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"652d7380-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1531,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584428873871782},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4314d22a-531a-4866-909c-8e3b053225ae","sequence":{"long":15800},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1531","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1531","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21229b17-b5fd-4731-a362-a708ca86d866","sequence":{"long":15801},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b52e965-e1d6-4d9e-b5d8-90cc9d55a241","sequence":{"long":15802},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584428873871782,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af17ca41-a7cc-4ab4-8aa9-12bd118b7de6","sequence":{"long":15803},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0103ac85-8a0f-410b-8cdf-1ad65457dd7d","sequence":{"long":15804},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"249528b9-6d7b-406d-a4c3-db3ec7ebec03","sequence":{"long":15805},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84e73129-8c2a-454d-a414-0a5af9029036","sequence":{"long":15806},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"854ae0c2-2278-4f2a-a2fd-dfee21e6c630","sequence":{"long":15807},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55ddd129-038d-4083-87cd-dfe122d6d3ee","sequence":{"long":15808},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e7da302-b5e7-4d11-a510-4d2bdce5f909","sequence":{"long":15809},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f71e0b2f-638e-4729-8b11-b76988845d76","sequence":{"long":15810},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbfe2360-b27d-4a54-ba35-477111fd1694","sequence":{"long":15811},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7bddc5a-9360-4407-8ae4-577bbfcc14e9","sequence":{"long":15812},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03c6101d-ec08-43f4-bbf8-15317b481293","sequence":{"long":15813},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d619ce0e-fae2-4b2e-9d4c-0b9746060366","sequence":{"long":15814},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"317db490-1f9a-4a3d-9119-a04304009a09","sequence":{"long":15815},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57a46219-43a8-4eb7-a6c7-77966d09b8db","sequence":{"long":15816},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428873871782,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f133de9f-2330-4c6c-aed8-32c51d97bbaa","sequence":{"long":15817},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428883941520,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2682004-44cc-4445-b776-1363c822a871","sequence":{"long":15818},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584428883941520,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11db707a-3a85-4e50-a99b-fe1120727df4","sequence":{"long":15819},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429884048836,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1065170},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d447428-7481-4117-bd15-da367ac073f4","sequence":{"long":15820},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"652d7380-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a76f0e8-757f-4e1f-9f8a-6b7a7eba60a8","sequence":{"long":15821},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86865d0b-e877-4972-8613-fe6a3c770796","sequence":{"long":15822},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":25},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"65c9a9a6-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1532,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584429903890986},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6850adea-9fc6-4cb8-91c9-b72df80b6c3e","sequence":{"long":15823},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1532","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1532","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e599f3cb-7066-4a31-a389-e0a88414ae77","sequence":{"long":15824},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"423566e9-e810-473e-91a0-f0e4d6c12506","sequence":{"long":15825},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"cbeb200e-1746-3e58-8617-b743583e4f59"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./make_directory"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584429903890986,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./make_directory ","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1be0c3bd-e099-49ed-818c-ce2c71feaf28","sequence":{"long":15826},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5e1044a-218e-4025-89af-9d3efa0f4567","sequence":{"long":15827},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dc3202c-8776-4fef-899e-fb70c26d7623","sequence":{"long":15828},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b59c7d74-6a4e-4089-b8d7-a0b96c435dd7","sequence":{"long":15829},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84d42f34-1562-4587-b9e4-c44298bb7bf3","sequence":{"long":15830},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"caae00e5-3d63-4640-9d22-feae895e2198","sequence":{"long":15831},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7f381ae-761c-49d7-baff-beb5dd9594d7","sequence":{"long":15832},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb6dfcc6-c9bc-4102-86da-53176d04464a","sequence":{"long":15833},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4527577b-326e-4db1-9d62-2bf1aefb9ae0","sequence":{"long":15834},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"629531ee-41e3-4adc-9170-d50a46d186e6","sequence":{"long":15835},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"566e99fe-08d2-4254-8820-733ddf1520ba","sequence":{"long":15836},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63d506f3-f2f4-4b00-9d97-3935ed6861a9","sequence":{"long":15837},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98922d3f-46cb-409e-b7ae-4c95f9bead9e","sequence":{"long":15838},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df87e244-f9a2-4228-95eb-6276ab48b4ad","sequence":{"long":15839},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8126bcef-086b-4055-ab2f-b652ad608eba","sequence":{"long":15840},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fdebe38-19ca-4624-9a0a-c639424edad4","sequence":{"long":15841},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d01da8c-7a3d-4a01-a47d-d3f04a3888fd","sequence":{"long":15842},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dc7ef62-cf04-4aa6-872c-45cef8484cc7","sequence":{"long":15843},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e12cdca9-7f29-47c8-951b-dedbf82bd2f7","sequence":{"long":15844},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"9e2d96dd-3aba-a25f-ba3a-5be12fa267ac","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_DIR","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c86edd45-ff3f-4966-9ea1-300b5f17af7a","sequence":{"long":15845},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"9e2d96dd-3aba-a25f-ba3a-5be12fa267ac"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/temporary"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mkdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69263159-4dbe-477c-80b6-345b5cf073d8","sequence":{"long":15846},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"65c9a9a6-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"make_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b466c6a3-8a95-40a8-b63a-a7ff61c66a37","sequence":{"long":15847},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1186},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eab8ff14-6d86-4072-ac05-57cc5c05c0bc","sequence":{"long":15848},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":727},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"65ca8b6c-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1533,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584429903890986},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2bcb957-f004-4350-8c6b-210752bda79f","sequence":{"long":15849},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1533","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1533","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5dac401-39e1-484d-890e-46d78ced0e47","sequence":{"long":15850},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35ccbdde-0ae5-484f-939e-a52d85e878ab","sequence":{"long":15851},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584429903890986,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b76d225-ba18-441e-ad23-4b3c918963a2","sequence":{"long":15852},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"218bb210-ffad-46d7-b7f2-8a0952b9ecca","sequence":{"long":15853},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05f56757-18ec-47ee-8213-31dd6b033338","sequence":{"long":15854},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b50afdc9-4879-44a4-ae06-2169fc577390","sequence":{"long":15855},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"782684e1-46e1-4d4b-a835-65c87dcebf38","sequence":{"long":15856},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4f285c9-2c61-4663-8915-fb42bfa97a81","sequence":{"long":15857},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a2e0273-f939-4990-8d8e-e857d3b1df58","sequence":{"long":15858},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb00736a-d5e5-4c75-af31-9903774525bf","sequence":{"long":15859},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b96ce08-86a8-42ae-94f1-233ef62b9bab","sequence":{"long":15860},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85b90db5-f426-450b-b932-aad19af652eb","sequence":{"long":15861},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ba0297f-881d-4991-b71f-4351ff206ae7","sequence":{"long":15862},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36e9fbb6-deee-4642-9794-3eb6aa258be1","sequence":{"long":15863},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66a45b7a-52c6-4910-acc9-afdb0a1d7346","sequence":{"long":15864},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584429903890986,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8257a873-8e35-476a-9f24-76c081efef24","sequence":{"long":15865},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1070174},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f4101d3-939b-4ac9-b170-489d11ccf9ee","sequence":{"long":15866},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"65ca8b6c-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e065d670-789c-457c-87f5-a3d3f17bd508","sequence":{"long":15867},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfc8eb53-aad5-4699-b2ee-914a9df83c2a","sequence":{"long":15868},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"666466ab-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1534,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584430913895665},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d2d97a9-66d5-4cd7-919f-9739fc2af444","sequence":{"long":15869},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1534","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1534","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9dfd56d-9e5a-43b5-a118-19fbeb95a748","sequence":{"long":15870},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66fd6e31-4fb1-4fcd-b82f-3ea91a817ef6","sequence":{"long":15871},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6741c59f-8ce3-8e50-a38c-f0d1808ea1c5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_multi_write"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584430913895665,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./multi_read_multi_write ","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb77b475-b87b-4e6d-9483-5f57c58bcab9","sequence":{"long":15872},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf9a7fcd-3251-4c9c-b6ea-17c1407cf573","sequence":{"long":15873},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34c18b28-2627-4d37-983a-9a5934f07de8","sequence":{"long":15874},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9e2fcab-f022-4081-b334-17b755be048e","sequence":{"long":15875},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e33efa27-b37b-4dc1-b251-891b10d68ea1","sequence":{"long":15876},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a4bf459-f41f-4898-b4e8-9c199d9897b0","sequence":{"long":15877},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"426f769b-d52a-429c-b86c-a803b208f864","sequence":{"long":15878},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"182a9365-c0b4-4dc2-939a-7a5fe140fe24","sequence":{"long":15879},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02ed4480-5209-477e-819d-e7c416d1ce9a","sequence":{"long":15880},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a339951-4698-4020-aad5-9664420b14f9","sequence":{"long":15881},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3d7a5fe-7be2-4e9e-b00d-428e85be21f0","sequence":{"long":15882},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"833bf919-15b1-44a0-8ea4-4ca469a4a282","sequence":{"long":15883},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cfe5ec1-d169-46ba-99bd-6a1553ab28f9","sequence":{"long":15884},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c7f331e-7251-47cc-8205-7ae8a10d76ca","sequence":{"long":15885},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"125cc911-bdb7-4521-9d45-0f55ea3ae673","sequence":{"long":15886},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d8b2ecd-431d-4a43-ba6b-ee492de4cc66","sequence":{"long":15887},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe905b27-65bf-4835-910b-7706fa778e4c","sequence":{"long":15888},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b5d0007-8305-4f1d-a1e5-a9858c64e763","sequence":{"long":15889},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"210f53c1-bb2d-4c13-9d4f-2ca883f04dcf","sequence":{"long":15890},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8291bd8e-104d-43ed-b754-58aadcf7855d","sequence":{"long":15891},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"939061b0-170e-4a51-b1b3-f786b4783d78","sequence":{"long":15892},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430913895665,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"332007e3-0ccd-42f2-adc4-288c5676e4de","sequence":{"long":15893},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"9679d39e-c74a-3855-8ac7-3e3be538a626"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/output_file1.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"746a8e50-b78f-45d6-b9c0-4bee45103cd1","sequence":{"long":15894},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"95dea952-8b38-a659-b88b-355249a60651"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/output_file2.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"6","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"6","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24fcdd33-9181-4bdb-816c-551d264f9857","sequence":{"long":15895},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":209},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d41fd7ad-478a-41f1-84de-b941cad37640","sequence":{"long":15896},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":382},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aceb8436-ae9c-4a72-8b88-2464a1391517","sequence":{"long":15897},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9621010a-b580-4795-a176-9d88586b9716","sequence":{"long":15898},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"996ed48a-03b3-4e8f-b9f4-b74bb53b3647","sequence":{"long":15899},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"9679d39e-c74a-3855-8ac7-3e3be538a626"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":191},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1f3bcc2-a63c-4ae9-9128-8495e560792a","sequence":{"long":15900},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"9679d39e-c74a-3855-8ac7-3e3be538a626"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4853777-a365-4356-ae43-c16705dd3ee5","sequence":{"long":15901},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"95dea952-8b38-a659-b88b-355249a60651"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":187},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdb03da6-7020-4ae0-babb-9410a8c53304","sequence":{"long":15902},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"95dea952-8b38-a659-b88b-355249a60651"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"6","return_value":"0","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"159966f6-71d2-4d03-8111-6ac6504ffab4","sequence":{"long":15903},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"666466ab-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"multi_read_multi_wr"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d5a49a8-c5c1-4e10-aeb3-8a09729059c9","sequence":{"long":15904},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1157},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a9f3e4d-fd8b-4ff9-b50a-cb42b92e802c","sequence":{"long":15905},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"666576d5-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1535,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584430923858739},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f017f00-704d-4ea8-bec3-1b12bc2c60e7","sequence":{"long":15906},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"666576d5-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1535","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1535","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f14a51a-0cea-45f3-9c31-496ab6ee2b6b","sequence":{"long":15907},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"666576d5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a50ebc5-44c2-4ee8-aa17-5399ee6f541a","sequence":{"long":15908},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"666576d5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584430923858739,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb18d6cf-9274-42c5-b65d-5f79e810c379","sequence":{"long":15909},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"666576d5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25dcd54a-6d9c-4ce7-9dbb-387ef0c24d67","sequence":{"long":15910},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"666576d5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584430923858739,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5c88557-6b97-44ee-bcfd-ac97c5a65885","sequence":{"long":15911},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1075253},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1f65986-4e84-4b02-af71-6c08cb7a1139","sequence":{"long":15912},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"666576d5-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"666576d5-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"084b3245-cb94-4c57-b1bf-dfcfa68fd5af","sequence":{"long":15913},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b85cdce1-769a-4efb-a6f1-eabb2a1647f6","sequence":{"long":15914},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":34},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6701724a-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1536,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584431944473296},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d231ffa9-08c4-4e55-88c9-995bfb6f8a2f","sequence":{"long":15915},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1536","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1536","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21021c5a-1ea4-4c82-9313-a318acd0aa39","sequence":{"long":15916},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ddeda2c-8d57-4995-ac0b-a51304d46e61","sequence":{"long":15917},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"d8b8f561-1e30-f858-b01e-d3c3b8f82fe5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./multi_read_single_write"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584431944473296,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./multi_read_single_write ","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51e3f7ca-b8ba-40c7-a420-ca18aa17f691","sequence":{"long":15918},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4628db3-d56f-4790-8591-54993edb77e8","sequence":{"long":15919},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87ca47d4-f375-4ee2-802c-c945aa225aa6","sequence":{"long":15920},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8aa67fb3-3fb0-4217-ac81-a805e7d6918b","sequence":{"long":15921},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7db24947-c95f-4252-b9a0-a4337240bbaa","sequence":{"long":15922},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b106603e-9447-4a32-9980-2f326b31aadb","sequence":{"long":15923},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"753714a2-329c-4288-91c5-70bb132dc5c9","sequence":{"long":15924},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07891aec-4045-4062-ac80-cb6b966b81ae","sequence":{"long":15925},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"203afbb1-cfd2-46c6-8b3f-c76d1f5defda","sequence":{"long":15926},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f3d751b-5487-4c62-ad9e-9d912674c905","sequence":{"long":15927},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"228dae1a-7690-4787-8c98-f5d4da75e669","sequence":{"long":15928},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa1ed13e-75fc-4d81-8a3c-f4e6fdf4736f","sequence":{"long":15929},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edb4e12c-6d6c-4253-9b13-0ae137440cdd","sequence":{"long":15930},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44289b29-41be-4b3c-8518-fbe6528b1603","sequence":{"long":15931},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98412e27-e61f-4f77-9978-1b060a575428","sequence":{"long":15932},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0550060d-646a-4609-b11b-11e199fcdd50","sequence":{"long":15933},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cd9e4df-f23d-4df9-be50-d0cde4f15d8b","sequence":{"long":15934},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec033770-a26f-44f4-81c5-7f73c8cc4030","sequence":{"long":15935},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b7c1e50-805b-4426-b607-eee04bb7d09f","sequence":{"long":15936},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5b22b84-740d-4e4e-8e5e-1e30b8a207bd","sequence":{"long":15937},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb389394-526e-4608-af3e-ca556b0f6b48","sequence":{"long":15938},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../copy_static_buf_stack_frame.c"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"4","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c72a3115-56da-4672-9e3a-9030bfa85e70","sequence":{"long":15939},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"93a7558e-de2a-0550-aade-8f47a0052450"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/merged_file.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49ebcc3d-ef5a-42c8-8798-ce74b345544f","sequence":{"long":15940},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":209},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74709c0b-9ef5-455a-ba82-9e2541363ed6","sequence":{"long":15941},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":382},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea19d2b6-f75f-4db8-9a1f-029049bc11f6","sequence":{"long":15942},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"66902a05-711e-db5e-9e71-61fe3edb93c1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f0c8f1f-d07e-44ac-b295-284218ae40f1","sequence":{"long":15943},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"310e9e89-2b11-5f5c-912b-f6fd3c5feee6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adcc94e9-a115-4682-974f-64cb6892da7c","sequence":{"long":15944},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"93a7558e-de2a-0550-aade-8f47a0052450"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":378},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b3bbdd7-7284-4dd5-bdd7-0d92023e4a5f","sequence":{"long":15945},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"93a7558e-de2a-0550-aade-8f47a0052450"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7506cd49-424b-47ed-be61-6e060b5df589","sequence":{"long":15946},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6701724a-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"multi_read_single_w"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf890419-bbef-48fb-ab79-d56e6750acfb","sequence":{"long":15947},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1127},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"049a8e77-1f7d-478c-9460-fd4ed9399884","sequence":{"long":15948},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":780},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"67024d97-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1537,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584431944473296},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ab613ab-892c-47fc-aec2-70cb91aba4d8","sequence":{"long":15949},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"67024d97-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431944473296,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1537","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1537","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29459b5e-83be-423c-9596-38128bef3f67","sequence":{"long":15950},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"67024d97-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431954396238,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cdfe466-bed4-4dcf-aae6-fdc5c60ab8e8","sequence":{"long":15951},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"67024d97-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584431954396238,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2b2319b-14f7-40c2-852e-e918d8e021f3","sequence":{"long":15952},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"67024d97-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431954396238,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0eeb5693-5de4-4513-9364-da42be2a6ba7","sequence":{"long":15953},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"67024d97-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431954396238,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f199519-a83a-411d-943c-3f6f6fb867fd","sequence":{"long":15954},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"67024d97-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431954396238,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a034f64e-d7f9-47d0-bb8c-fbeac6b94113","sequence":{"long":15955},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"67024d97-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431954396238,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62be72e1-b4c2-4bf8-8210-bdfeda928eb9","sequence":{"long":15956},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"67024d97-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584431954396238,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cac15221-d911-4960-b4ac-a94d0aa4e824","sequence":{"long":15957},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1080401},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0806bb2a-36e7-40af-a998-5dac1e3c0db8","sequence":{"long":15958},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"67024d97-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"67024d97-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0698dabf-de34-43b5-b351-54211cb13b23","sequence":{"long":15959},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"241db4ff-e26a-4461-b4d9-986307345053","sequence":{"long":15960},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":27},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"679ee503-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1538,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584432973974675},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85daa5a9-4ad5-4cd1-aff6-f6a2a318859a","sequence":{"long":15961},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1538","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1538","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"519305e8-300a-4a59-88fc-f593da971839","sequence":{"long":15962},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"340d5c61-67fb-4bf1-8e7e-687b70017435","sequence":{"long":15963},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6afebb5e-412d-d25c-ad41-600cfcd2423e"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./remove_directory"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584432973974675,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./remove_directory ","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fa09a95-bfcf-45f7-86e6-7e9146fa6c3b","sequence":{"long":15964},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ba8969c-1951-47f4-9317-b63ea8e83e5b","sequence":{"long":15965},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4867ad74-90a2-46ff-8e5a-4840b19424a9","sequence":{"long":15966},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"916cec38-8aae-4e83-a0e0-d15cfb40fe4b","sequence":{"long":15967},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d76d1548-9b58-4439-aa62-1e1131c93fb3","sequence":{"long":15968},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01f17c67-8ebc-41fd-83f5-3629cbc196e1","sequence":{"long":15969},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0728621-9e47-403e-866c-cac2cbaddf68","sequence":{"long":15970},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"164e98bf-5595-46d2-b719-38c5354c65c8","sequence":{"long":15971},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c5124d0-ad2a-4033-b3e4-97c105885e6f","sequence":{"long":15972},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"faa8e49d-3cda-4a0b-884c-8623c643ff30","sequence":{"long":15973},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0578e2d-4718-456d-accd-3c1d2eb74b19","sequence":{"long":15974},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14473977-3b9e-41da-bdc7-55bd360875b2","sequence":{"long":15975},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c565d4e9-55b1-407f-ba85-b0bd1fc865ed","sequence":{"long":15976},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ce43eba-89ee-4618-9a51-ce05d5a6f205","sequence":{"long":15977},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b33833fa-314f-4a0c-8f8b-35103ae577c9","sequence":{"long":15978},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7252a95-6220-4669-be7e-d2faa43d54a6","sequence":{"long":15979},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"182df5bd-4afc-4ff5-8c30-40822801138a","sequence":{"long":15980},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12a0a9fe-ef33-4173-9980-7a334fa6e537","sequence":{"long":15981},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a2e3e96-610c-41fe-be72-5ee7e68a9c6c","sequence":{"long":15982},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432973974675,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fd12e3f-df16-4afe-8be8-3b26c4d21477","sequence":{"long":15983},"type":"EVENT_UNLINK","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"9e2d96dd-3aba-a25f-ba3a-5be12fa267ac"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/temporary"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_rmdir"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18fea110-ce41-4d53-9988-41b8e5610bf2","sequence":{"long":15984},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"679ee503-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"remove_directory"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"064f68df-6ce1-4ac5-8f03-c9032ae4a23e","sequence":{"long":15985},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1104},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1afe6213-e2ab-411f-9cc2-ac097f6926bb","sequence":{"long":15986},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":798},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"679fadce-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1539,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584432983984696},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2b50e9c-f718-4f43-91c0-b0228d06ee21","sequence":{"long":15987},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1539","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1539","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df2d0498-c9e4-4936-ad7e-e82f63096181","sequence":{"long":15988},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"227935d3-c1eb-4258-b5cf-56d82811b5f9","sequence":{"long":15989},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584432983984696,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4a33e77-bd05-4711-a007-4a6a678c0ec4","sequence":{"long":15990},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b573034-6d38-4808-83df-677f1639c214","sequence":{"long":15991},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af52b0ca-ea33-4431-a08f-aa7fd435c66a","sequence":{"long":15992},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bc3d2b4-c5b5-49aa-9ffd-f19261fc7e0c","sequence":{"long":15993},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2589590-9860-41fa-afc4-e548e078cdb3","sequence":{"long":15994},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef2ecb11-f14b-4c2a-8bf6-4f09c71279a7","sequence":{"long":15995},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cd14ae2-fe02-4098-ae83-b145906845a9","sequence":{"long":15996},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c43f79c5-b615-4645-87c8-ec678dee7f5a","sequence":{"long":15997},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7221a604-a654-4c75-8ec5-2040fa8c4348","sequence":{"long":15998},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65b1b72d-7bdb-45e4-ac3c-5c1f94f586e5","sequence":{"long":15999},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"694afd7b-afb8-4c31-96f7-29c166f558df","sequence":{"long":16000},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3581c380-f602-43c0-abb5-36b2b3334bc8","sequence":{"long":16001},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cc6429f-e5ef-43a2-8a55-38c1fa063f8a","sequence":{"long":16002},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584432983984696,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5657cd0-853d-4841-ad27-3c7d511f63f2","sequence":{"long":16003},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1085392},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45c24ae5-20d2-419a-875c-adb02d566b3c","sequence":{"long":16004},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"679fadce-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c62416c0-27d1-4880-aeed-aed522da2f8c","sequence":{"long":16005},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26dfb4be-403c-43fb-89a6-407a273fb4de","sequence":{"long":16006},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"683beda8-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1540,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584434004427548},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b023240-2d30-43f8-8708-f5778579355f","sequence":{"long":16007},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1540","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1540","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c5fca5d-e2c4-4984-9aa2-dc57511e7f19","sequence":{"long":16008},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cb94690-aedf-4019-96d0-ea83388445f3","sequence":{"long":16009},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"5b518504-be76-5653-b6be-34ff435661ed"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./remove_file"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584434004427548,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./remove_file ","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44e69047-343c-433b-b5a5-4ef908ee87db","sequence":{"long":16010},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f298a985-fe42-4133-8230-189fdff6f003","sequence":{"long":16011},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6582d636-d4c8-44a5-b19f-41b75fb7fd83","sequence":{"long":16012},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3a9d8b6-9e5b-49cc-ae6c-f4ad26691782","sequence":{"long":16013},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d227af7f-c5c3-4a04-94e1-18a217a1aaf9","sequence":{"long":16014},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08d7b145-a623-4153-814a-b86e825820b1","sequence":{"long":16015},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"021fbd06-7356-4254-a8b2-18e03e4b4523","sequence":{"long":16016},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0251b5e7-b39e-47b3-ab6a-28e471e8a3f8","sequence":{"long":16017},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b160136-d8d2-48f5-a27a-63e8cc7f4598","sequence":{"long":16018},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45480ecf-95df-4500-931f-76d1ce1d09b2","sequence":{"long":16019},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11f58b32-88d9-4688-9b47-92dc5d74ddd1","sequence":{"long":16020},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0241698-16f7-4deb-bb4f-3000a190e881","sequence":{"long":16021},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2436cfeb-d574-4ea7-97f2-b47e5da048bd","sequence":{"long":16022},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cd9d533-2298-46ab-a047-a0858acdb4a2","sequence":{"long":16023},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90fb70c6-b81b-4cd4-8ead-f75c1a749a03","sequence":{"long":16024},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"548d8959-e70f-4dec-b793-e8f654dbeeb5","sequence":{"long":16025},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f107f8d9-cee6-4fa2-83fe-cc75994183f4","sequence":{"long":16026},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d51e55e-0f58-4fda-aac5-f6ab2f9e523a","sequence":{"long":16027},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"360b8330-044d-4038-b9e9-73b22559452e","sequence":{"long":16028},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70b66ad9-6c90-4700-85b9-6158f4cf1f31","sequence":{"long":16029},"type":"EVENT_UNLINK","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"03a0fc55-d7ed-6d5d-add7-543d4d6df1d3"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/out.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_unlink"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74892443-a1c8-484c-a9bf-2174884353b5","sequence":{"long":16030},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"683beda8-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"remove_file"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"575299ac-1725-4698-987f-e45d19abef61","sequence":{"long":16031},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434004427548,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1086},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f5abacd-4a85-472d-9e2a-d55addd5dc9b","sequence":{"long":16032},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":872},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"683cae13-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1541,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584434013886023},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"318eba94-fc95-4ad4-a237-8c47849dfd2f","sequence":{"long":16033},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1541","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1541","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66df5a8c-d676-4413-848c-6b98b7dd3626","sequence":{"long":16034},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"478ce099-9a17-46be-a9d0-e70665c34022","sequence":{"long":16035},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584434013886023,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fa2b532-812e-4028-8bb3-f9dfb2a93a5e","sequence":{"long":16036},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09ecec27-bade-4c87-8ad3-0362d807543f","sequence":{"long":16037},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54fc4ec3-054a-4a40-8e27-6f34ed2de90d","sequence":{"long":16038},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8758c79a-05ab-4f6c-9b14-622c0af203b8","sequence":{"long":16039},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"098c7c3a-30d0-4c64-94c5-870f296b15fa","sequence":{"long":16040},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b2053be-ef1e-491d-94e2-799fc113af75","sequence":{"long":16041},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef94bee0-fa09-4b68-bb24-8382c3b0e33b","sequence":{"long":16042},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fcfffa0-eafe-451a-89db-ba4bc59fd5e8","sequence":{"long":16043},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7d11879-80d3-4dd8-829d-7eafe19eb671","sequence":{"long":16044},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8488f841-a2a4-44e1-881c-a9985b3b5c0f","sequence":{"long":16045},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c399765b-a73e-4532-9c97-df7be3935831","sequence":{"long":16046},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"243df891-8a92-47b6-8544-7be96f5ed48a","sequence":{"long":16047},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf3a0269-a204-49c6-9780-f1d9066d0e5d","sequence":{"long":16048},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584434013886023,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e514d02-5629-4323-a128-0e94a8baee3b","sequence":{"long":16049},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435024202717,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1090418},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62d2a779-cfe2-49db-b979-d005b33ce281","sequence":{"long":16050},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"683cae13-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435024202717,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"994675d6-5813-4a13-b2b9-cbf871087527","sequence":{"long":16051},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435024202717,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf8bd97e-7e51-4cd2-92c4-19cdb4f07a26","sequence":{"long":16052},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435024202717,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"68d83cba-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1542,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584435024202717},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90f715fd-869e-4daa-a373-c84a6071a2ab","sequence":{"long":16053},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435024202717,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1542","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1542","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e247e6a-2106-4780-b7d8-f23c55674c10","sequence":{"long":16054},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435024202717,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a7a2c54-d9be-412e-a4cf-134fcea6de39","sequence":{"long":16055},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"5b518504-be76-5653-b6be-34ff435661ed"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./copied_pipe"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584435024202717,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./copied_pipe a","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5edc4ff7-0757-49f9-8572-b7a5884548e0","sequence":{"long":16056},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435024202717,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"386f8f09-6b68-4856-a3e6-27997cf5893a","sequence":{"long":16057},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba5b7cd9-6ba7-467d-bb52-d9b3c506f8f4","sequence":{"long":16058},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e008d479-689f-404f-9f22-b32f298933ab","sequence":{"long":16059},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc12ccfd-3c0a-45d5-ad2e-ec4da34cb54f","sequence":{"long":16060},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"30d54858-98d9-4795-b187-092e93bb9686","sequence":{"long":16061},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6634b053-e80a-4362-b383-3040c9047bf3","sequence":{"long":16062},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc7dd72a-e70d-434e-baa6-b4798702c57f","sequence":{"long":16063},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b76dfc2c-e462-4337-827e-a60314dc1eda","sequence":{"long":16064},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0709a3fc-dfcb-44ac-8099-f8e53b39fa5b","sequence":{"long":16065},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bd15120-6a62-438e-81b0-5c0521c872e3","sequence":{"long":16066},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20438641-6800-4ed5-8d03-ab4165bc9c23","sequence":{"long":16067},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"589850ed-4773-44eb-8c39-aef669f555c9","sequence":{"long":16068},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a68ca461-170c-4a96-af3b-282be540e6f2","sequence":{"long":16069},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b639291-cfe9-4683-abc1-da6f41c2cc6b","sequence":{"long":16070},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"739b8b30-a7a7-473b-ad0e-61ea99951b66","sequence":{"long":16071},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4499e46a-7a8a-4aeb-9bb0-ea3d5749f4ca","sequence":{"long":16072},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"196d371a-03a3-49eb-b345-fb291a2d815b","sequence":{"long":16073},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"699ac9c2-00c5-4eef-8344-d5a60c7a8039","sequence":{"long":16074},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"68d8c813-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"68d8c812-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"0f6e5826-35ad-5e13-bb41-ef58ac0270b2","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"68d8c812-467e-11e9-aed2-080027fc76ba"},"uuid2":{"UUID":"68d8c813-467e-11e9-aed2-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"897091da-6016-4d00-a2ab-90f45d580c91","sequence":{"long":16075},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"0f6e5826-35ad-5e13-bb41-ef58ac0270b2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"68d8cb51-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1543,"parentSubject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584435034712594},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2ec012d-6315-48f5-9d3c-2189e0f239a8","sequence":{"long":16076},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"68d8cb51-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1543","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1543","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3acded93-58b3-4f44-8dbf-a61e60434c1c","sequence":{"long":16077},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"68d8cb51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1542","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"111039ee-e310-460c-8f5b-8d2f0c244642","sequence":{"long":16078},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"68d8cb51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"68d8c813-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1542","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3541e9e1-a804-4068-bb1b-585e2dc2c8ea","sequence":{"long":16079},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"68d8cb51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"68d8cb51-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1542","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9da1c7f5-5e97-40d9-be9a-33c746793558","sequence":{"long":16080},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"68d8c812-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba87044a-8e6e-4226-8b00-d1226b90efbf","sequence":{"long":16081},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94a21382-ef19-4652-85cc-03156761c7f7","sequence":{"long":16082},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"68d83cba-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"copied_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07756f81-5b5b-42b5-9580-3c1e34fc76af","sequence":{"long":16083},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1012},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d9e7cda-7d6e-4c49-8ba3-fdef7f0fa811","sequence":{"long":16084},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":923},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"68d95835-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1544,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584435034712594},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d55efe7-f400-47c5-b352-d77957cf867b","sequence":{"long":16085},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"68d95835-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1544","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1544","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"662950d5-7afc-4400-817b-0248504dad81","sequence":{"long":16086},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"68d95835-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50dc4f98-4f75-4c31-bf42-2f2c83337e7e","sequence":{"long":16087},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"68d95835-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584435034712594,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"462e6cf4-71d9-4540-aa6e-2143ed9cbef2","sequence":{"long":16088},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"68d95835-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e56f2f03-ca4a-417d-927e-edc88196e740","sequence":{"long":16089},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"68d95835-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"beee415d-3ac0-4220-8b70-dfc7e6f434df","sequence":{"long":16090},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"68d95835-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"533ce019-998a-41a9-8a24-1ae9aa417279","sequence":{"long":16091},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"68d95835-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e4c9009-add5-41ac-89a1-5a3f841ceea4","sequence":{"long":16092},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"68d95835-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584435034712594,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5eaccd4a-4bd9-47a4-9e03-69a5e500e304","sequence":{"long":16093},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1095543},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff1679bd-b037-4190-a1c1-313f19c097e9","sequence":{"long":16094},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"68d95835-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"68d95835-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a613efa4-8332-4d6c-8e65-bd70d0b50455","sequence":{"long":16095},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40727b65-5cef-47fd-81f2-20c40aea04e8","sequence":{"long":16096},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6974c6fa-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1545,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584436053856433},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f5a620b-12fb-4f23-b5b7-99d80a344a70","sequence":{"long":16097},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1545","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1545","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c13b38b-1c86-4d27-a8f8-5f9cffddf1ad","sequence":{"long":16098},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4fc26a4-0724-4e9e-aba0-448dd5782bed","sequence":{"long":16099},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584436053856433,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/datagram.sh a","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d42b94f-1ef2-4e9d-a3be-c18b55ab83a4","sequence":{"long":16100},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1222519c-e141-4f49-8a54-aa9afa102de0","sequence":{"long":16101},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf7fc7bb-9965-4f31-93d3-f2f20e598e06","sequence":{"long":16102},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e327a230-4a9b-46ee-a710-9e2cfbe44eed","sequence":{"long":16103},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67bb5dc8-63f3-41f9-bbb1-89affa06efed","sequence":{"long":16104},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07ca4596-10cb-4a1e-b10e-0346b10acfd1","sequence":{"long":16105},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49d0b213-3b27-4bd5-b526-1d6c9a4591c3","sequence":{"long":16106},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ed5119a-e26c-4afc-940c-93cb73103bda","sequence":{"long":16107},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18290342-1941-42d4-bd11-0fa33b0ad120","sequence":{"long":16108},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9070adb-fdc4-4962-83aa-36d50a0f3745","sequence":{"long":16109},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"988050e3-07e0-45bd-9d47-65b4e69215e6","sequence":{"long":16110},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50a99736-8bcf-4983-bd80-fda78f422f26","sequence":{"long":16111},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1b2ad3b-66e9-4d24-8ca4-ff0807069bf8","sequence":{"long":16112},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b763f16d-cb3d-4afe-bca9-e46d20b909a1","sequence":{"long":16113},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e87a658-8562-499d-83e0-e2bba2e06efd","sequence":{"long":16114},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb3bd66f-0a2a-4fc5-94bd-6c7208c15dcf","sequence":{"long":16115},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ca7d6ed-a4e3-434c-8ca9-5cef9baf804e","sequence":{"long":16116},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a2731b6-12fc-401b-9b3c-7998bc12bd7a","sequence":{"long":16117},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b032d211-90d6-4df2-b8c1-650b0c601c6a","sequence":{"long":16118},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"948f3825-bdf0-44a1-996c-fd59008b15d7","sequence":{"long":16119},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584436053856433,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/datagram.sh a","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4da8666-6003-4e89-b72b-c1659a807ba5","sequence":{"long":16120},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33aedf9f-0149-4ff5-8b28-0e5c04f6d1b4","sequence":{"long":16121},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23a47d61-0a8b-46ec-93b0-76ba213eb443","sequence":{"long":16122},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e427c069-44fe-4bc5-8e69-3a2f6f355bde","sequence":{"long":16123},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59c5c0c8-4a28-45d9-82d0-9e219825ebda","sequence":{"long":16124},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e7bd47f-4018-441f-b69c-ae049dbf8d92","sequence":{"long":16125},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2acfec34-f42d-4cfa-a259-fc1f17913fa0","sequence":{"long":16126},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12dda74a-4d15-4dae-8a0b-c08f847a3a51","sequence":{"long":16127},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bb3db1e-d888-404b-946f-acb14d561bd4","sequence":{"long":16128},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fab1ec7-a60e-4cca-8f68-09e0eb48caf2","sequence":{"long":16129},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436053856433,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e54ec79a-fc12-446b-a64b-2eddea4a3287","sequence":{"long":16130},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33ab8f0d-cffd-4b82-ae1f-f8a7775cf587","sequence":{"long":16131},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"426672bf-8735-4c2e-85f1-c7f3efdb9139","sequence":{"long":16132},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d664051a-635d-48a4-a68e-ccbb002c6458","sequence":{"long":16133},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74b810fd-897b-4d28-97cf-c8cf906af5b8","sequence":{"long":16134},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a551aca-6f10-40b7-82f9-f52962a4fda0","sequence":{"long":16135},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b7eb115-c92f-4a32-adf0-4cd6ba3833bc","sequence":{"long":16136},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fb5b784-6fa6-4b32-87fa-4e203b897f50","sequence":{"long":16137},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e6479e7a-8a74-4d59-a12d-00d268d977fb","sequence":{"long":16138},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"668b1a28-dd0d-42f6-9942-61f695f90e47","sequence":{"long":16139},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"837f3439-df4e-4ccf-912a-8a7ffc0dd1e4","sequence":{"long":16140},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68cab86f-877f-4eb7-9c24-46c3930657ac","sequence":{"long":16141},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25a35dae-6a3f-4c80-80ac-d30f79baab5e","sequence":{"long":16142},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d65aa22a-42f4-4d10-842f-f2b4fa339300","sequence":{"long":16143},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd0d0191-bf43-408d-8b6c-e5326394a66f","sequence":{"long":16144},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74a4218e-df03-4988-80d8-a6df4e7f2ac0","sequence":{"long":16145},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db12c6ca-2760-4c66-b1ec-af3b40c0c31b","sequence":{"long":16146},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5472fa21-28c5-4469-a15e-4afdef6e9165","sequence":{"long":16147},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ddd44d3f-87a0-4372-8154-2ecee6418152","sequence":{"long":16148},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"399a2cb3-395d-4b8e-ae09-5a1d79e37bdc","sequence":{"long":16149},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b4d770f-9bcb-4f9d-aa19-e1c4cefec199","sequence":{"long":16150},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd9ec1f4-d0ef-47c3-98a4-0b68449beb87","sequence":{"long":16151},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"906beff2-74ab-4af8-a13e-65f1b9a90e0a","sequence":{"long":16152},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccd3a713-af6f-4a34-9765-8f04ba6115bd","sequence":{"long":16153},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1b92a15-4dbd-4850-92ae-4a698b03e177","sequence":{"long":16154},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"208b19a2-71fc-47f2-9733-79decc595d9a","sequence":{"long":16155},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87126f7f-65d5-4d0f-bb8d-7be3f38356c3","sequence":{"long":16156},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da7cd991-f6df-4972-9205-8e1ba06750d5","sequence":{"long":16157},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"461a4be3-35d5-4a6a-926f-62522281abd2","sequence":{"long":16158},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a6971a7-c3f2-4cf5-81e8-e024512840af","sequence":{"long":16159},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bb32f33-3401-4fb5-945d-88a7fef2ed9c","sequence":{"long":16160},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5845dbb3-35da-4365-a22e-e4fa8a195619","sequence":{"long":16161},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00db0534-f6dd-4901-952a-d1242017d16f","sequence":{"long":16162},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"123160dd-0fd4-4518-9792-5fa1ca55dc61","sequence":{"long":16163},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe527f2c-6c6b-4119-b378-8f8fbb03d168","sequence":{"long":16164},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fafd6202-2bc9-43de-a7e2-9b836cedd09d","sequence":{"long":16165},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9422782-d416-4446-afb8-9c20feb849b7","sequence":{"long":16166},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d4661e7-28de-40de-a361-33e832806925","sequence":{"long":16167},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a2b2472-c3a5-43f3-bc2b-47a16e9d5aaa","sequence":{"long":16168},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d51f99e6-f93d-46ba-ac63-5259a1681331","sequence":{"long":16169},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0598742f-f800-453e-8fb3-3347dd1670a2","sequence":{"long":16170},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"026a8a1f-3a26-4109-af98-820a1a06db98","sequence":{"long":16171},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61dd59a8-4642-4f54-96f3-9c649304fa37","sequence":{"long":16172},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"259ef04a-3d6b-4c6a-b856-8bae95323d97","sequence":{"long":16173},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b822024a-e825-451d-8541-c937b110b2a1","sequence":{"long":16174},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/datagram.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35bd2dc2-394d-4212-bdb5-912eb6fccc15","sequence":{"long":16175},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31b91582-e21a-407a-a092-758b1c33f6cb","sequence":{"long":16176},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4156bb7-3d67-46bb-864f-2be367eaca84","sequence":{"long":16177},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc3d4f2d-a98d-4356-9184-932d58a0c136","sequence":{"long":16178},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e35dd7a-be14-4e81-bcec-ab81c767aa16","sequence":{"long":16179},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e35fc57-7aab-4118-aabb-da58965e326d","sequence":{"long":16180},"type":"EVENT_FCNTL","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"242bebb7-037d-4f3c-927e-64ba63197a2b","sequence":{"long":16181},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19c11067-8d69-4db1-a0c7-6afbb454084b","sequence":{"long":16182},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":296},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"627b5b7f-75e3-41bb-920f-0b7777dbcaa7","sequence":{"long":16183},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":250},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6976c7cb-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1546,"parentSubject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584436064675618},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab6750c1-e57f-4126-b9d3-2e7ad3b698ed","sequence":{"long":16184},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1546","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1546","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"066f9616-6cce-4f47-a16a-b1c460f59e4c","sequence":{"long":16185},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b21bf40-e79f-4f1d-8b75-ae8cb5194078","sequence":{"long":16186},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":268},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6976fae9-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1547,"parentSubject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584436064675618},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0c8f90b-3b1b-425a-8a3e-33eb88538a7f","sequence":{"long":16187},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436064675618,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1547","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1547","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86041736-4440-4c61-82c4-a464509d71b4","sequence":{"long":16188},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1545","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"783e492b-c0d0-47e1-8f69-b66126805227","sequence":{"long":16189},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1545","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68c43f9f-1c9d-400a-ac9c-52d00be74931","sequence":{"long":16190},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1545","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca34aa5a-67fe-4d93-858a-66b142a1862a","sequence":{"long":16191},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"373ba8a7-d481-4f5a-81d4-177fea4f8ab6"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./datagram_server"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584436074461252,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./datagram_server","ppid":"1545","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d01ef348-b3db-42f7-bac7-92b9b6745b98","sequence":{"long":16192},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0077911-fae7-4fb4-abae-2270ef402272","sequence":{"long":16193},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1545","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a726a7d4-e936-45ec-a793-cb84fea89b3c","sequence":{"long":16194},"type":"EVENT_EXECUTE","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584436074461252,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1545","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fe0a4a6-341b-40fe-a722-637d88e94d3c","sequence":{"long":16195},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9d27d24-68f6-40ff-b37a-9c52fa60c265","sequence":{"long":16196},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2596865b-24fc-42a1-ac73-445c7fa6766f","sequence":{"long":16197},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da0e2949-0cce-480b-b8a8-b4191cb1404f","sequence":{"long":16198},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36776476-dc45-46b4-998e-ba215d6ee34b","sequence":{"long":16199},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d067fe4c-77ca-40d6-a034-a0aeb200615a","sequence":{"long":16200},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed57cccc-9ca8-4f91-845d-e2bbf1506bf7","sequence":{"long":16201},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76eea54a-1620-4e8c-86b3-7299b4e00902","sequence":{"long":16202},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a818fed-7dc6-40f5-842b-937d872e17c3","sequence":{"long":16203},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8b777f3-1742-446e-92c2-e0f0ee2a1e30","sequence":{"long":16204},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2904281e-1a3b-41c2-8014-b06480394847","sequence":{"long":16205},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa24109f-e49c-4375-8765-b4804f174063","sequence":{"long":16206},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b03264fd-ea55-4d6c-ae4a-f15471d057eb","sequence":{"long":16207},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93944d45-eee5-4951-af04-7103d208aaef","sequence":{"long":16208},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"790962c2-6e2f-4e61-a087-a4b73ff1d9ce","sequence":{"long":16209},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed1e5049-6cf9-49ac-84dd-6c5f72216b1b","sequence":{"long":16210},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f68c208-ba1f-4e2e-bd22-5e470ff4a845","sequence":{"long":16211},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44277774-1f7d-4d3f-9281-549b3066d4fa","sequence":{"long":16212},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1107b7b1-f919-43cb-a523-5eae7fc4ed95","sequence":{"long":16213},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a0f9281-3095-4f76-ac79-2e3ecde42dc8","sequence":{"long":16214},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f46940cd-fa3a-4b99-b1d4-cfa6d75e5903","sequence":{"long":16215},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ca96607-59ae-4972-b841-bc8c5c2cd696","sequence":{"long":16216},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2775892-20d8-4459-afe0-0141946db02c","sequence":{"long":16217},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bde07d3-1d25-4483-893a-70d26590b6e2","sequence":{"long":16218},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9aef3cd7-a330-40e8-a7aa-78b4a149a34f","sequence":{"long":16219},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9c0387b-e6fe-4ebb-a5ab-94673be466a0","sequence":{"long":16220},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be806c10-5e1b-442a-bf73-0525991fc39b","sequence":{"long":16221},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f382a88a-5526-4937-a514-cd3334d11c11","sequence":{"long":16222},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0fbad17-8978-4f0c-baf5-bf5fcd9bf467","sequence":{"long":16223},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63f32fad-6c75-4896-a8bd-d09e498d0ca2","sequence":{"long":16224},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0abca774-6c1f-4ec3-9a1f-ebe0fe59e4b6","sequence":{"long":16225},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65734ad4-099b-49f0-b471-2dce1642344b","sequence":{"long":16226},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f43faee7-ba57-45af-b5c0-9c19332cc371","sequence":{"long":16227},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ddc8a36-42d7-4537-afe9-a58523cc6dc6","sequence":{"long":16228},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584436074461252,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"329520b3-a1e7-456b-9344-8df99b73d750","sequence":{"long":16229},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1109606},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a24476c9-b4c4-439d-9941-c953ff2a2369","sequence":{"long":16230},"type":"EVENT_EXIT","threadId":{"int":100150},"subject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6976fae9-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1545","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85f44027-d6d2-4aa9-91c1-4c4e93a939a7","sequence":{"long":16231},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0bc69a2-330e-4901-a9eb-8601f4d0e758","sequence":{"long":16232},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cea762a-1d29-4bb8-a17e-2ed93b2d6faf","sequence":{"long":16233},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d120880-2c77-4b47-94e6-36718eb8aa06","sequence":{"long":16234},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"065689dc-406d-47b0-9c5b-4de80b1fab1a","sequence":{"long":16235},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11eb0681-47d6-4846-8cb3-6da2979f071f","sequence":{"long":16236},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6a199b1c-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1548,"parentSubject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584437134371235},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d044f5c2-5725-49c5-8f2b-192025c178d5","sequence":{"long":16237},"type":"EVENT_FORK","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1548","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1548","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a21e778-aef6-44b5-a4e6-0b4b8455ac28","sequence":{"long":16238},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1545","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5a21277-a038-4aaa-9553-a2a8cf3abf72","sequence":{"long":16239},"type":"EVENT_EXECUTE","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ffa1f988-cf0d-7f5b-8dcf-910bcb7fb68e"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./datagram_client"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584437134371235,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./datagram_client a","ppid":"1545","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"295716c2-b7fc-4d1e-b3a5-281b30368de9","sequence":{"long":16240},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a0e6d22-465b-46da-a65f-ece36814cef8","sequence":{"long":16241},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c0dc63b-01c0-44ec-bcb4-4368cea6784d","sequence":{"long":16242},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35fcea6e-18ec-42d7-9505-7492fd08f4a7","sequence":{"long":16243},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6f92d13-5bc1-449e-b009-e6e4c0f1f11f","sequence":{"long":16244},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64186afc-15e2-4948-bda1-b9519568f0d9","sequence":{"long":16245},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a7ca4f4-c954-44dd-8342-80a50b43c0c6","sequence":{"long":16246},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb9ee5ed-06d5-4c2d-a49d-c37fb1ce4dcd","sequence":{"long":16247},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a89f80a4-cadb-4775-a639-de2cc0d45308","sequence":{"long":16248},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"466e6011-a7fb-44f0-9257-a710c0c14725","sequence":{"long":16249},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b73d8b3f-d22c-4738-928d-a12688442e40","sequence":{"long":16250},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0a0c596-1987-49e9-91b6-60ea44e5c41d","sequence":{"long":16251},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32de7f2a-94ec-4f06-8048-fabc53a33b0e","sequence":{"long":16252},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"917111e7-60f0-4f68-9f1c-5065c46b941a","sequence":{"long":16253},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4beab2c8-a38b-433c-8f9f-76894b7b4e34","sequence":{"long":16254},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efe09334-c976-4a1d-8943-4125bd1c650e","sequence":{"long":16255},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74178626-2f8e-4ca3-ad57-d62da8c0ae7b","sequence":{"long":16256},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50f3932f-80c5-4625-bba8-965f8fbbf5b8","sequence":{"long":16257},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dedd16d1-c7f2-4c70-b926-0b2f134c5a10","sequence":{"long":16258},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6a1a1ef3-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c76374d-75a7-4d90-9889-91afd5b4db81","sequence":{"long":16259},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a1a1ef3-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6a1a27ca-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a0a240e-b0c6-44d2-b074-0356610e1426","sequence":{"long":16260},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a1a27ca-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcc2eff6-0891-46e3-bf6b-19fb2d1cc9d5","sequence":{"long":16261},"type":"EVENT_WRITE","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437134371235,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"6a1a4653-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"::1"},"localPort":{"int":50883},"remoteAddress":{"string":"::1"},"remotePort":{"int":4950},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"6978d0e1-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"::1"},"localPort":{"int":4950},"remoteAddress":{"string":"::1"},"remotePort":{"int":50883},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3426a98d-52ae-41b8-8926-586d13deae92","sequence":{"long":16262},"type":"EVENT_SENDTO","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a1a4653-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"ret_msgid":"17348","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","address":"::1","port":"4950","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"282c6cdf-d006-4e2f-a145-f19279386a06","sequence":{"long":16263},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a1a4653-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"6a1a521e-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"127.0.0.1"},"localPort":{"int":60145},"remoteAddress":{"string":"127.0.0.1"},"remotePort":{"int":4950},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa1d9866-2aaa-4bf9-b398-c4dadb33f44c","sequence":{"long":16264},"type":"EVENT_SENDTO","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a1a521e-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"ret_msgid":"17349","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1545","address":"127.0.0.1","port":"4950","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06510ccc-e066-4b00-99af-49f5e40e9cf5","sequence":{"long":16265},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a1a521e-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01c9ebac-0331-4104-be8d-b134bbfeac55","sequence":{"long":16266},"type":"EVENT_EXIT","threadId":{"int":100150},"subject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a199b1c-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1545","exec":"datagram_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fabe5154-cd9a-46ec-9f3b-ee157f3c5843","sequence":{"long":16267},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38903a1a-040d-3c53-8d04-93e6a33cb671"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b551347-8123-4d60-ad42-13ddc3014556","sequence":{"long":16268},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6974c6fa-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"651f40f6-c199-41ba-9517-ed5c87465fc9","sequence":{"long":16269},"type":"EVENT_RECVFROM","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6978d0e1-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"ret_msgid":"17348","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","address":"::1","port":"50883","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dfd8f7b-0c3c-41c3-9c39-c3f78e32b448","sequence":{"long":16270},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":31},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5e98673-fb68-46a5-827d-8f95b36dd26d","sequence":{"long":16271},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e53330d-014c-4259-83d0-cbf19ae54d03","sequence":{"long":16272},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6978d0e1-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac4fdbc0-55c9-49ae-b1b2-4b875f59feed","sequence":{"long":16273},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6976c7cb-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"datagram_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbb50e92-e269-4b35-bdf5-ea326bf75768","sequence":{"long":16274},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":961},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ca06f35-dfb3-4f09-bb4a-020d31583e60","sequence":{"long":16275},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":974},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6a1a904a-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1549,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584437143921076},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4422deae-0f79-4128-94be-ca7cea4a860d","sequence":{"long":16276},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1549","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1549","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"839d0f4a-4e57-49d6-be88-6dc107dbbff0","sequence":{"long":16277},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13f3d0ec-0ee6-406f-bb49-06268cd3169f","sequence":{"long":16278},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584437143921076,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34d126c8-ce0b-4437-b82b-8535f65ced87","sequence":{"long":16279},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77d34aeb-04b1-418e-9f8a-43fd9adaaf71","sequence":{"long":16280},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b17c8fd6-501c-4d36-bee0-592087c4fb83","sequence":{"long":16281},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35ac0cac-0f9b-428c-adca-536ff475447a","sequence":{"long":16282},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34fb3faf-6e56-4bd2-aae7-7609fa837b35","sequence":{"long":16283},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4f0fc29-642e-4450-a932-a5c209353fd2","sequence":{"long":16284},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf5ef86b-57a2-41d6-8be9-af00547bf1b0","sequence":{"long":16285},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b95ae9d6-7f83-47cb-97f5-cd6ef8f2cac9","sequence":{"long":16286},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"254f8415-7b9e-4ff6-bdf6-4d4634259df4","sequence":{"long":16287},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"473baef7-4698-4475-8d33-74849f935241","sequence":{"long":16288},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2b500e0-986e-41b3-bbc1-8578fa84d583","sequence":{"long":16289},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6671119e-617c-4fce-b95e-8fe8ebf30f0f","sequence":{"long":16290},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5ad0a19-84ca-4be5-8cc2-b560f8296d44","sequence":{"long":16291},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cc6f5fc-2828-44a3-a47d-3e0f6c0bf660","sequence":{"long":16292},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"572b0a7c-c268-4229-9de0-8faab63f3295","sequence":{"long":16293},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6913274-1a6f-46da-8e0b-4268c330133c","sequence":{"long":16294},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b0db821-b145-495f-9ca2-a5ab1f3db257","sequence":{"long":16295},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"881b80c4-5233-4b94-8cf3-5d3efd19dc11","sequence":{"long":16296},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ecd21a3-58e9-4f76-974b-4afb0815d40f","sequence":{"long":16297},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437143921076,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2521e5a-e8ed-4b4a-8cd7-8adc9b1c986e","sequence":{"long":16298},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437554058524,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe3a9d4c-d1ec-4560-93b2-10c4d06828cf","sequence":{"long":16299},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437554058524,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17350","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad08f10f-3ade-4390-b179-2bb7818e33a6","sequence":{"long":16300},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437554058524,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17351","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07d0eb04-bec6-4a04-a0cc-cdbada49809f","sequence":{"long":16301},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437554058524,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17352","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9ece84f-24c3-4628-ba99-6c1ba849f412","sequence":{"long":16302},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437554058524,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17353","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec193a97-0200-476f-9da6-55b7079c7feb","sequence":{"long":16303},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437554058524,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17350","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f52dd5a-c3a2-43bc-92a3-0dc371300c59","sequence":{"long":16304},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437554058524,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17351","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"426bef57-d4f9-41aa-977d-6e818489f162","sequence":{"long":16305},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437554058524,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17352","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46a1aa94-7487-476f-b44e-c7ae9d6dec47","sequence":{"long":16306},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584437554058524,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17353","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14e3ea92-e3a0-49f6-bba8-7bf6c8adfd41","sequence":{"long":16307},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438124253481,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1109606},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64461473-779b-4a9f-877e-f3228663b1e5","sequence":{"long":16309},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584438124253481,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"513584d0-9fd6-4cac-af54-2ab80cc4e00e","sequence":{"long":16308},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438124253481,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d992e3df-5a94-442b-a663-7c1c4c50fe54","sequence":{"long":16311},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584438124253481,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca8c4136-403a-4d5f-9851-b84c9952e874","sequence":{"long":16310},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438124253481,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9592378-fe6f-4365-beda-b14e936cb063","sequence":{"long":16313},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584438124253481,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3be1623f-5798-4e40-8040-248e612e7249","sequence":{"long":16312},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438124253481,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05b49bc3-a1d5-4e36-b3da-4fb8f71b475f","sequence":{"long":16315},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584438124253481,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c076448-ae82-470f-8dd6-58af69b7e1f2","sequence":{"long":16314},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438124253481,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5853b77-69da-4627-b718-5c7cb4fcff04","sequence":{"long":16316},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438124253481,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83149ad7-f55d-414f-a3ba-508926ece4fa","sequence":{"long":16317},"type":"EVENT_READ","threadId":{"int":100282},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438124253481,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7165846e-9180-4ca3-bf47-8cd610cf31dd","sequence":{"long":16318},"type":"EVENT_READ","threadId":{"int":100282},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438124253481,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a84e852-672b-43f9-a1bb-a89f3cd27878","sequence":{"long":16319},"type":"EVENT_READ","threadId":{"int":100282},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438124253481,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4934},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c21be057-f589-4dad-b67b-63ac933abc67","sequence":{"long":16320},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438174204922,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1119124},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edf60e56-6239-4c98-bc78-949b4324ee6d","sequence":{"long":16321},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438174204922,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9449c16a-62c1-4acd-a3fa-092783cf3615","sequence":{"long":16322},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6a1a904a-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b98e6bd2-7412-48d9-9c06-b93ab989f22e","sequence":{"long":16323},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90ba051c-ba0b-4ed1-97d0-25abe43f579d","sequence":{"long":16324},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":22},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6ab91c12-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1550,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584438183922949},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6be4b658-2599-4111-ab0b-ffa82e07577b","sequence":{"long":16325},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1550","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1550","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b17168b4-2682-49fa-90ba-69f60458efda","sequence":{"long":16326},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d50621a-629d-40a8-b615-a4e473edd8c8","sequence":{"long":16327},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"f5cca548-4198-c65d-9841-9bcbadc62d45"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./direct_pipe"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584438183922949,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./direct_pipe a","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4201da79-da59-40b8-82bc-f09cb1beae44","sequence":{"long":16328},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"115f65da-71ee-423f-81df-1c06d57dc53f","sequence":{"long":16329},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd1ef7ae-32fd-463a-9f87-45eb39d9822e","sequence":{"long":16330},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a49fec3-3588-4467-a503-796eb61bc294","sequence":{"long":16331},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8ebc3f5-8b64-4e12-8807-4d765f21584b","sequence":{"long":16332},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c4e985c-3e98-4da1-9be8-255c84ad59c6","sequence":{"long":16333},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98603164-dad0-4d42-a4db-d7df8be34d1c","sequence":{"long":16334},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63b3bfdc-eff8-4457-9e4c-f6a71dc8aaa4","sequence":{"long":16335},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d60e9314-ba6d-465f-9d6e-f83a1b6d74bb","sequence":{"long":16336},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0099ea7e-ca45-40e9-b8e7-d381562cdeb9","sequence":{"long":16337},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efca5ca8-d3cc-462e-8d86-2bd9ddf68d0b","sequence":{"long":16338},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a3d6e12-3782-44f6-8945-cc3d188928f9","sequence":{"long":16339},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8ed73c5-6fa8-49fc-b4da-0e27f2f50a0e","sequence":{"long":16340},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89f3778c-0d40-43e9-8bd0-5d806de06cb7","sequence":{"long":16341},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"100af2d1-c227-4c84-af16-c01e307c0fd0","sequence":{"long":16342},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05b84aa0-4c93-48fc-85f2-d5d619e190fb","sequence":{"long":16343},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94526bde-20f3-4c74-8761-823ab0cce3ed","sequence":{"long":16344},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70fc6d68-a24b-40ee-96b2-628538f4966b","sequence":{"long":16345},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1614e64-47a0-4de9-8436-bbc70a8d6448","sequence":{"long":16346},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"6ab99e7c-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"SrcSinkObject":{"uuid":"6ab99e7b-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"SRCSINK_IPC","fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_SRC_SINK_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"IpcObject":{"uuid":"8dd3a31a-7268-531f-8bf7-63e3e7cc85ae","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"IPC_OBJECT_PIPE_UNNAMED","uuid1":{"UUID":"6ab99e7b-467e-11e9-aed2-080027fc76ba"},"uuid2":{"UUID":"6ab99e7c-467e-11e9-aed2-080027fc76ba"},"fd1":null,"fd2":null}},"CDMVersion":"20","type":"RECORD_IPC_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e321d033-e890-4ed8-801d-261cafdfa7e2","sequence":{"long":16347},"type":"EVENT_CREATE_OBJECT","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"8dd3a31a-7268-531f-8bf7-63e3e7cc85ae"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_pipe"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","ret_fd2":"4","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6ab9a7a7-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1551,"parentSubject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584438183922949},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"534b36ca-2505-4836-95c5-8fc864d1e4ac","sequence":{"long":16348},"type":"EVENT_FORK","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ab9a7a7-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1551","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1551","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d15be305-bf87-461e-9564-c955b8b70ff4","sequence":{"long":16349},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"6ab9a7a7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1550","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56962136-46db-4d23-8ec1-d7e15b4db33d","sequence":{"long":16350},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"6ab9a7a7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ab99e7c-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","ppid":"1550","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10e36f11-daf1-4bb5-9a44-d18d0167db48","sequence":{"long":16351},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"6ab9a7a7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1550","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5426e68-2aa1-4a40-9b9d-5c61cd334995","sequence":{"long":16352},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"6ab9a7a7-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ab9a7a7-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1550","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77698142-22d0-44be-9233-e14890da144e","sequence":{"long":16353},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ab99e7b-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":2},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"355088a2-63ba-4a3d-8bfe-d9a97ac961bd","sequence":{"long":16354},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":17},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"091edd8f-e4bd-4760-b6e5-6b51fd8c1a87","sequence":{"long":16355},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":14},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd3f2670-94ba-42d7-9b49-b5a4382bc0fd","sequence":{"long":16356},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ab91c12-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"direct_pipe"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f39bb1ec-558a-4e06-9dbd-786fdbc5fd2b","sequence":{"long":16357},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":910},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3308a041-b051-426c-88af-40782e4d4552","sequence":{"long":16358},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1025},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6aba4abf-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1552,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584438183922949},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4a970c8-00f4-4311-8ac6-70a30d239b73","sequence":{"long":16359},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6aba4abf-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1552","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1552","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8feefb3a-0161-441a-81b6-6993e3f9f4bf","sequence":{"long":16360},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6aba4abf-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c082d38b-5daa-45d0-a76e-20d248d02c28","sequence":{"long":16361},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"6aba4abf-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584438183922949,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3dc00be6-3896-4926-a1ef-cf112d5615be","sequence":{"long":16362},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6aba4abf-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438183922949,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acd733a1-49c8-4fdd-b8b6-9823065e0ac5","sequence":{"long":16363},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6aba4abf-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438193827577,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47e2a3b1-92c3-475d-a20e-de2a777984d8","sequence":{"long":16364},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6aba4abf-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438193827577,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7525f679-6484-4811-b73a-d20656c75828","sequence":{"long":16365},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6aba4abf-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584438193827577,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d02e04fb-9199-485c-8f7e-74ff415e3e52","sequence":{"long":16366},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1124251},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"092c9a85-827e-4a8a-922a-8ed87378a6c2","sequence":{"long":16367},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"6aba4abf-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6aba4abf-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ec2a4e7-b2e2-4cd3-b8a4-3d8274b3e4e2","sequence":{"long":16368},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"921c51a8-3c6f-4b91-87bb-6d141dc349ec","sequence":{"long":16369},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":25},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6b55589d-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1553,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584439203907306},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83f49373-262f-4b78-8113-d2ded82c65c8","sequence":{"long":16370},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1553","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1553","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fffc908d-838a-4802-ac80-3640126b3a74","sequence":{"long":16371},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b55059e-4c52-4701-9119-d1e47b4c2edb","sequence":{"long":16372},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584439203907306,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/named.sh a","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81361d18-17da-4637-a32e-701e0df67e02","sequence":{"long":16373},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b39a1bd-d025-4388-8a56-ca6cd18da42e","sequence":{"long":16374},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27d0a844-ad48-4fcf-bf10-b1d016ebe8e3","sequence":{"long":16375},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdb76310-86b9-4d8b-a032-98df6f8201bc","sequence":{"long":16376},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1516b962-fb57-4585-8d2d-b7f53494f4fb","sequence":{"long":16377},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24dbed5d-5cb0-40c7-8c0a-916d2234ac1a","sequence":{"long":16378},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3de436ec-e8f6-46ea-8d26-99a0b782debc","sequence":{"long":16379},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e8553d6-fe20-466b-bfed-387d78116cd1","sequence":{"long":16380},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"235bdea8-73d2-4db2-a161-41ab11293705","sequence":{"long":16381},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e534f17-e846-46d6-a2aa-88ea9f9a7e95","sequence":{"long":16382},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43c50016-88c6-4a30-8cf5-2cca1faabb44","sequence":{"long":16383},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"718fc22f-d0d3-484a-b9df-76bcf51f2246","sequence":{"long":16384},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0811831f-4b56-4b31-968e-6834286ffcad","sequence":{"long":16385},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"961e34ce-fb8e-4493-b7a7-f249b4f44373","sequence":{"long":16386},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21e32b32-3a97-414e-b6f9-73982f59cbbf","sequence":{"long":16387},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afb8b79d-b76c-4514-926c-eb919bd50bb7","sequence":{"long":16388},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a21cec0-07c4-4275-aefa-9bfbddeabe92","sequence":{"long":16389},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c65bf074-8eae-4ff4-9fb8-c80c586c89b9","sequence":{"long":16390},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbe50cd8-1dab-4e45-a2c7-f88c5f80b369","sequence":{"long":16391},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70e2f24f-d995-4f01-baf5-a175dec09190","sequence":{"long":16392},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584439203907306,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/named.sh a","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0e4869a-cb5a-4fa7-86ee-d3a5c447cebe","sequence":{"long":16393},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60fd5a53-b30c-4af3-bfcb-d15684bd9d6f","sequence":{"long":16394},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2684ab1-df5c-4499-9473-a1cd6a0996d3","sequence":{"long":16395},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c61b76df-6814-4594-a88d-94dbf26a791c","sequence":{"long":16396},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca721cb1-6c29-4ce1-9012-1f7309cc554d","sequence":{"long":16397},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d838d726-bc9d-4a18-a93e-0a62a225948a","sequence":{"long":16398},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439203907306,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8c44490-861a-4f25-a51d-68473512bd77","sequence":{"long":16399},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc08d63f-3c8a-4587-998f-122154954ba0","sequence":{"long":16400},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1aab66f-390b-4d73-8e14-682c6c886261","sequence":{"long":16401},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad6cee3f-fc46-4e13-ac7e-901714970b4e","sequence":{"long":16402},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39dd7d7b-1f15-4436-981f-59ad2cb56310","sequence":{"long":16403},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b8647b0-ecde-44e9-af26-248a29ccbd59","sequence":{"long":16404},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65e56cf9-30cb-4d55-8a0f-ec1e272302f9","sequence":{"long":16405},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00608be0-1f05-4253-8a63-5be27202edf4","sequence":{"long":16406},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32f269db-58f1-42b8-a5f4-c4c3e5eba57c","sequence":{"long":16407},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d68f2ae7-a827-4c5a-aac1-2aba6904edae","sequence":{"long":16408},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d9c04da-78f6-4c7a-8853-94edc4947bc3","sequence":{"long":16409},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab9490ec-86f3-4748-af27-580c85f882d3","sequence":{"long":16410},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9befae81-d829-4c35-8684-0ee48433e229","sequence":{"long":16411},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f723b6e5-de5c-44f5-a0bf-6131af2946e6","sequence":{"long":16412},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ae7ff18-19cf-442d-b23c-5a928e43e16a","sequence":{"long":16413},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"335bd4cc-87bd-4f00-a0ca-2a7c0776da0b","sequence":{"long":16414},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7216efbf-e23c-4c05-9bc4-f8c8f193ab0f","sequence":{"long":16415},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c77f750-6e71-435c-b7f5-abff8d01415f","sequence":{"long":16416},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"687b7713-df71-48c8-a1c6-9dcbd7894033","sequence":{"long":16417},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a074cf7-4bab-4268-9ded-7c4294e60bb3","sequence":{"long":16418},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8b0cbfd-bb4b-4347-a963-fb85a4d095f8","sequence":{"long":16419},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"320501a6-db57-4b2d-b8b8-7c33d0bb2954","sequence":{"long":16420},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d81b74e-1c74-4dd2-97ce-8a6ce971fd11","sequence":{"long":16421},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c06bdfc-616b-4f56-b3aa-b056eb5b5279","sequence":{"long":16422},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70291418-a4c5-40de-8a98-03c75e58dadb","sequence":{"long":16423},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf8a0bc7-1c0f-4f7d-b3f5-8243509132c6","sequence":{"long":16424},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84d24037-2177-4016-8fd9-6988528c60ec","sequence":{"long":16425},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e4e98f3-aece-49e0-b0c7-a920a0db831f","sequence":{"long":16426},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5d19742-7aaa-413f-9962-312b81671080","sequence":{"long":16427},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52e4b049-f5ae-49b0-8cff-772e701c7cff","sequence":{"long":16428},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"feb3a387-132b-4b61-b8d2-6f9ce82abddc","sequence":{"long":16429},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c74929b-f0d0-483b-aa7d-b95968bf035f","sequence":{"long":16430},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97e37378-0876-41f1-8e44-8c1b4da55f31","sequence":{"long":16431},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6155ff95-1590-41cd-b4c2-b7e2369e24b8","sequence":{"long":16432},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36ce8915-207a-4545-ac7d-3ddbd2fec8fd","sequence":{"long":16433},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0867bc1e-d4b7-40b5-8c69-4905ff29cea1","sequence":{"long":16434},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9ecaafa7-d02d-4eb1-b20e-43c9f80e64cc","sequence":{"long":16435},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe1a9f9e-9f30-4955-9686-e55de2f97bf8","sequence":{"long":16436},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dde2c0d-2dde-40e7-b135-b9721b2255a5","sequence":{"long":16437},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a04ae79-88f2-45ca-af5c-777a1ffd8604","sequence":{"long":16438},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b48cfac-a59d-49a9-b57a-9c410435b311","sequence":{"long":16439},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"287528b8-f5d6-45be-ac1f-aab8b5426111","sequence":{"long":16440},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3108864d-4f92-43e9-b808-5413265dbed8","sequence":{"long":16441},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea4081d5-d930-4eb2-94e2-ae751bbdd6d8","sequence":{"long":16442},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dcac87e-93fd-4bdb-9039-0dc01ac2d726","sequence":{"long":16443},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e41c9e3-499d-4695-9f70-7d6e3c9da749","sequence":{"long":16444},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8b303fd-f6e2-4281-829f-1dce68bbec23","sequence":{"long":16445},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7251c2fa-9c86-4624-9d99-56333bdfd3c7","sequence":{"long":16446},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05fb9d4c-5516-41bc-aceb-59867c31680d","sequence":{"long":16447},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/named.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"691a87c7-0c9f-4927-a67a-8b491362d451","sequence":{"long":16448},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab98dc5f-b9ea-4377-9904-249eb46d1fea","sequence":{"long":16449},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee1984e8-25eb-4514-8db2-80a2c799f0fb","sequence":{"long":16450},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71c04d8f-092e-460c-b257-5bd153b12633","sequence":{"long":16451},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b07511cc-9ad0-4281-a7e1-36db66c83325","sequence":{"long":16452},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2dd782c-bded-4eea-a958-90798f5c91b0","sequence":{"long":16453},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf8b5bb8-4308-4246-9256-a915fd75fb93","sequence":{"long":16454},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15cf9c0b-1a36-48b4-9966-99c41f93ba4f","sequence":{"long":16455},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":286},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"763fafdf-8a7a-4370-9469-accbede9aac7","sequence":{"long":16456},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":253},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6b57508b-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1554,"parentSubject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584439213920762},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35fb4db0-b483-4994-8902-a9dc125a2c7e","sequence":{"long":16457},"type":"EVENT_FORK","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1554","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1554","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ae61e95-95b7-400f-b05e-51c707dea273","sequence":{"long":16458},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":33},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6707fc2d-a21b-4e4d-80c5-224e7d02414e","sequence":{"long":16459},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":271},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6b578690-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1555,"parentSubject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584439213920762},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fd0f6c8-3179-4601-8291-4d98936e9dd7","sequence":{"long":16460},"type":"EVENT_FORK","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439213920762,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1555","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1555","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32eaae9a-2f43-430e-9f96-31d7f404149a","sequence":{"long":16461},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1553","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f47888b-60aa-4cea-beb7-f25e9ae7d5f8","sequence":{"long":16462},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1553","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2dd6cb52-1a9c-4f0e-b1d9-74e9236f689f","sequence":{"long":16463},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1553","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d80f1c72-4446-4b31-9e9f-5841d378e1b4","sequence":{"long":16464},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"b0bc4f68-c591-a656-91c5-dcf6b6a6dfa5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./named_writer"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584439224574414,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./named_writer a","ppid":"1553","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1c38557-f045-495c-bb6e-9961d45f4841","sequence":{"long":16465},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b87e2d5b-9fa1-4a28-a928-c17ff390e870","sequence":{"long":16466},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd3a69b0-b174-4e57-b7b4-53f94b13b2b1","sequence":{"long":16467},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"976e7b63-483b-4442-9bb8-0e2659ae95ed","sequence":{"long":16468},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03496db2-89bd-4b65-a8c2-beb0822e8488","sequence":{"long":16469},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"830a835e-700e-4bc0-8658-d91f03aa4a67","sequence":{"long":16470},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2e7ac2e-ed80-4935-8b03-664e2e6396e1","sequence":{"long":16471},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"803c3341-11ef-40ac-8e33-6bbf6858d90a","sequence":{"long":16472},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99b9fd24-f1db-41a6-9195-306f696b12a1","sequence":{"long":16473},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2bab2a7-6762-4fea-ba29-83d67f7643cf","sequence":{"long":16474},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4146d495-c3ca-433f-93bd-8ac4cb8db281","sequence":{"long":16475},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09628043-cf89-4037-9574-a3f38779d38b","sequence":{"long":16476},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2aa3f766-b121-4cf1-a4b7-bc6358ef1ff7","sequence":{"long":16477},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8606e023-a578-4b3a-ab43-b97a0fa03923","sequence":{"long":16478},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b85dd63a-45b2-487e-a043-9708fc753c53","sequence":{"long":16479},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b876aec-5e3d-4813-80f1-4ebd2d671dc7","sequence":{"long":16480},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d17f0a0e-1c4d-4587-bca7-c5c9adddfa69","sequence":{"long":16481},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5976e0f-64f4-422b-a89a-a8b790a06331","sequence":{"long":16482},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6557215-0c25-4ca4-873a-404e384779c5","sequence":{"long":16483},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1553","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebf5a939-6d97-4789-81c8-4a399978de2a","sequence":{"long":16484},"type":"EVENT_EXECUTE","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584439224574414,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1553","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01f96d88-a3a3-44a9-bb24-c246b5402c31","sequence":{"long":16485},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba33b1fe-920a-4631-8e89-5bd1b55037ba","sequence":{"long":16486},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6eac771-568c-43a5-b412-ddbc7f17e177","sequence":{"long":16487},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":27},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c00a6fee-7489-4dcb-9c5e-f17d711db463","sequence":{"long":16488},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"274f9ae6-b940-4a2c-ba3a-dc4d07954d8a","sequence":{"long":16489},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d93d388-d1e4-4ec6-bc4c-e2353da412fb","sequence":{"long":16490},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24f80c86-efd0-420d-85f6-c9f4f8260923","sequence":{"long":16491},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e3d2718-a36a-4191-8caf-f0b77ac34720","sequence":{"long":16492},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47055b43-46ad-4fc9-b537-4b6dc8b59f17","sequence":{"long":16493},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d2dfd90-30b4-46cc-8054-d43c67414020","sequence":{"long":16494},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f6b680e-c87e-4680-986c-e8729f5e4ede","sequence":{"long":16495},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bcfe40d0-cd7d-49af-83b9-363d582ac8f8","sequence":{"long":16496},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da4a126c-72ed-456c-826e-42b1abc9a3a5","sequence":{"long":16497},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d0eebe5-61d6-4b45-b790-7c1b1dd4e3fc","sequence":{"long":16498},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a6b5e01-40a6-4ea2-842e-8810a46e2763","sequence":{"long":16499},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"840414f8-0c26-4328-8d33-4d322341b564","sequence":{"long":16500},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f45daebe-1110-4fc5-b8e0-0a28973035b2","sequence":{"long":16501},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584439224574414,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35b88f16-6f55-4445-8ff8-68a06ef0bb2b","sequence":{"long":16502},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1138306},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c7420ed-ccf6-4adb-bec8-93ce627d765e","sequence":{"long":16503},"type":"EVENT_EXIT","threadId":{"int":100150},"subject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6b578690-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1553","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77d54df5-92a0-4768-b23b-9d6ce1231f7a","sequence":{"long":16504},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"636b9adf-111f-4dcc-a3e8-87f78c83e126","sequence":{"long":16505},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4fa5695-cdfb-4bb3-8923-a961f194a997","sequence":{"long":16506},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49035d30-0494-466b-83f9-a2d2311c0046","sequence":{"long":16507},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e794d61-eefb-4880-b23d-744d603a0932","sequence":{"long":16508},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25514673-3262-4f77-a861-c98f3c55d61d","sequence":{"long":16509},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":15},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6bfa6958-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1556,"parentSubject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584440284231412},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b1c945e-87dd-478f-be41-29e5b78ff9e5","sequence":{"long":16510},"type":"EVENT_FORK","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1556","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1556","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ff013b1-6bbc-4136-bd26-b06961a283c1","sequence":{"long":16511},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1553","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3250843-0e41-4c3c-a3fb-3adb4af3349a","sequence":{"long":16512},"type":"EVENT_EXECUTE","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"d13b936e-e1a2-e756-a2e1-63e636e7e7c5"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./named_reader"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584440284231412,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./named_reader","ppid":"1553","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"595008db-3f36-49e4-8c08-aa2c7bd32619","sequence":{"long":16513},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f37cecc-e9e3-4aae-8f9b-083b8355af1b","sequence":{"long":16514},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2ebcff9-5113-45f3-89aa-7394e211912f","sequence":{"long":16515},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2ec0bd0-a45e-417f-8155-d0d95be33906","sequence":{"long":16516},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"920e541d-5e1d-4309-b277-4b4ab69fe58f","sequence":{"long":16517},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a282ac23-9c75-4f24-882f-e2478ad199ef","sequence":{"long":16518},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc908964-34c8-48cf-add0-27edc903aaa7","sequence":{"long":16519},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf123269-b5fa-4f33-9b17-c82dbeeebc61","sequence":{"long":16520},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8442d2fc-62af-4175-b812-659eafa104fd","sequence":{"long":16521},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa0389d3-9363-408d-8fe0-7dfc9d979e73","sequence":{"long":16522},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"913f15e1-c10e-4106-b455-b1a05bebe7b4","sequence":{"long":16523},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f41a01e-6ada-4afb-8c9a-8d49ff6c94ea","sequence":{"long":16524},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4178aafe-72c1-4921-b1e9-db38913dc680","sequence":{"long":16525},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62d8aa6a-ff79-4bdb-a237-10faab4759d5","sequence":{"long":16526},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a6c3658-d927-48a9-86b3-369aba0addaf","sequence":{"long":16527},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"782f4c23-2f73-4858-bd62-36faaa2fbb4a","sequence":{"long":16528},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b725bd8-8498-4938-9917-c68bfd7b4361","sequence":{"long":16529},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440284231412,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb47aa67-32c0-4da5-9f4a-5c2c769d725d","sequence":{"long":16530},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b21d5541-cd86-4e8d-a492-b03b54ab4e5f","sequence":{"long":16531},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0edee054-a942-4e96-bb69-85abacb6156d","sequence":{"long":16532},"type":"EVENT_WRITE","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":27},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a5ee9d0-c0d1-48f7-9b0f-eb89b987c3fd","sequence":{"long":16533},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"eafcf6b5-df06-685f-86df-21037f68996a"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6b594c4f-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce6f6daa-ccf3-4e9d-b53c-e77d269c4e5e","sequence":{"long":16534},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"eafcf6b5-df06-685f-86df-21037f68996a"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pipe.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"01"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6b594c4e-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90982827-a94e-469d-8040-b0f6c2021bef","sequence":{"long":16535},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6b594c4e-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"261e0222-1c58-4c4d-83db-2b30e8ee2e0f","sequence":{"long":16536},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":18},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59623f0f-c256-42b0-bae9-83b63153bc1c","sequence":{"long":16537},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"eafcf6b5-df06-685f-86df-21037f68996a"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9f48ba0-d79f-4fc5-a9c8-5923b90906d2","sequence":{"long":16538},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6b57508b-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1553","exec":"named_writer"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82f0fe85-c9c3-479e-b1ee-67161e1624a8","sequence":{"long":16539},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6b594c4e-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfb38572-93da-4a91-a1d2-0c22c07e41c0","sequence":{"long":16540},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6b594c4f-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"567d914d-c4f9-41c6-8635-780531acb74f","sequence":{"long":16541},"type":"EVENT_WRITE","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2ccf085-7428-4ad8-b01a-965a861a0933","sequence":{"long":16542},"type":"EVENT_EXIT","threadId":{"int":100150},"subject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6bfa6958-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1553","exec":"named_reader"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adee7a88-e910-4d89-b354-f7d074e5f81e","sequence":{"long":16543},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"38944848-7de6-8d54-a67d-1217648d35c0"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff0dbe43-0443-438d-b4e4-5216df6458e6","sequence":{"long":16544},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6b55589d-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1351f5c-27ac-451d-9664-f7029c226c3c","sequence":{"long":16545},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":859},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"787ca986-1bfb-4e25-865a-cf60e89ee79c","sequence":{"long":16546},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1041},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6bfb8fe0-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1557,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584440294245531},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7aaf519b-7bc5-406c-a65d-be8f93a7bc77","sequence":{"long":16547},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6bfb8fe0-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584440294245531,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1557","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1557","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1dbf4ee-e526-490f-b0a9-1ceb75c34eed","sequence":{"long":16548},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1143219},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8de2459-0961-4d9f-b231-68aed2218365","sequence":{"long":16549},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"6bfb8fe0-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6bfb8fe0-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94475481-d055-439f-89cb-2ad469bc4283","sequence":{"long":16550},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ea2a940-2fab-4ba5-abec-420acbd56eca","sequence":{"long":16551},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6c977eff-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1558,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584441313878565},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1346dab9-91d5-4344-a160-7cbb2ab536b9","sequence":{"long":16552},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1558","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1558","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbf6b966-bf18-43c2-94b9-9676119f660d","sequence":{"long":16553},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85323179-8dd7-43a6-a61c-a37e87af3b90","sequence":{"long":16554},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"7eec5b1a-792a-5556-aa79-9b231655b451"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./shm_exfil"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584441313878565,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./shm_exfil ","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c194b89c-0bb7-495b-9d92-68ada2fb9c5c","sequence":{"long":16555},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5171f55a-e509-4d66-b6ef-139d6f2dc3c3","sequence":{"long":16556},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41c0ebab-c428-4889-892c-cba469f4cc7e","sequence":{"long":16557},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7493c479-a66e-4d3d-938c-f4a71808037a","sequence":{"long":16558},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03c7ca2a-73d5-4734-bb63-10e69b651141","sequence":{"long":16559},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90521286-6ed4-46dd-b122-773a797ed4dd","sequence":{"long":16560},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a895b923-f1d8-40af-9a2b-b91eeaa0ae02","sequence":{"long":16561},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62a49838-78c7-46ef-ab3f-6ff3d33c677f","sequence":{"long":16562},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc450be9-2bf7-4024-a3fe-955161b1d7ec","sequence":{"long":16563},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4ff7b21-b51c-469b-a80b-03e1430a8c04","sequence":{"long":16564},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16337203-64f8-45a0-83c1-f805f7a9e8f4","sequence":{"long":16565},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0ff0783-819d-43a5-8a7e-4563bf7e574e","sequence":{"long":16566},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf54f935-b386-4460-b800-f62afef2867f","sequence":{"long":16567},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"738a75c5-e859-4e89-972f-513319565d38","sequence":{"long":16568},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"211d9da2-9b6d-47ee-a1b5-e8dbbcb8ab87","sequence":{"long":16569},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cba29e0-6c47-43f5-8356-8f9b6b5f513c","sequence":{"long":16570},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a24ec8d6-f3fc-4da2-b025-31b4b60cf23e","sequence":{"long":16571},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"261c3fe5-a2a9-486e-8a5f-5cad5ae0d61a","sequence":{"long":16572},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4e93f9f-e343-4aeb-97f1-e47c12365845","sequence":{"long":16573},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6c980dd4-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1559,"parentSubject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584441313878565},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f42972a0-1d77-4ed7-83d0-eb96e8b7183f","sequence":{"long":16574},"type":"EVENT_FORK","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6c980dd4-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441313878565,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1559","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1559","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"e743c6df-0852-745d-9208-c2ae9d74024c","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"236a40f6-d748-44ff-ab3f-6602fb7fd12f","sequence":{"long":16575},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6c980dd4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e743c6df-0852-745d-9208-c2ae9d74024c"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/SECRETFILE.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441324035099,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"0601"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1558","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fd10e7b-2681-4c4b-a310-e6c7c26e84bb","sequence":{"long":16576},"type":"EVENT_WRITE","threadId":{"int":100150},"subject":{"UUID":"6c980dd4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e743c6df-0852-745d-9208-c2ae9d74024c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441324035099,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":7},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1558","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5213bf63-5769-4676-a00b-e3b383cdc202","sequence":{"long":16577},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6c980dd4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e743c6df-0852-745d-9208-c2ae9d74024c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441324035099,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1558","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"358ce0a3-98b2-4d17-a6bd-d8bb5091e829","sequence":{"long":16578},"type":"EVENT_EXIT","threadId":{"int":100150},"subject":{"UUID":"6c980dd4-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6c980dd4-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584441324035099,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1558","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f78b2a4-12b7-45e1-a4f7-eb9459530076","sequence":{"long":16579},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1143219},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79d543d1-b65c-48c8-883e-5ba252c42e7f","sequence":{"long":16581},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef72f99d-6c9e-4aa6-8c3f-9a0500986871","sequence":{"long":16580},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3ec89e8-ee3c-4f6b-b594-5c058d1b48f0","sequence":{"long":16583},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a7946f2-abfb-47f4-92c8-a2e5107d3f53","sequence":{"long":16582},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7b8b906-be2b-4dc7-b410-47b45333b12c","sequence":{"long":16585},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1432757-c581-4956-8693-3730214c972c","sequence":{"long":16584},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdf1165a-36e3-417e-9e84-e5e2340c3ca1","sequence":{"long":16587},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7496ba40-ef33-4a79-80c9-d7c273cf7c3c","sequence":{"long":16586},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a2421c7-a3bb-49a9-9f3b-922241eadb44","sequence":{"long":16589},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a8ad936-00ad-4d90-9e67-7d04a80cc75a","sequence":{"long":16588},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"085b483c-d9f9-4d27-a1b6-f68afc73483b","sequence":{"long":16590},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e2018ce-706b-4db3-b817-2ee65d15ebf8","sequence":{"long":16591},"type":"EVENT_READ","threadId":{"int":100284},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0a01efe-ae43-4bd8-adce-ab3f88ce4f02","sequence":{"long":16592},"type":"EVENT_READ","threadId":{"int":100284},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19d7550b-6827-46a0-b647-0a541d09a312","sequence":{"long":16593},"type":"EVENT_READ","threadId":{"int":100284},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4920},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9170bad-11df-4d16-83fa-7e4ac5f640f2","sequence":{"long":16594},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4973},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d7d4bbe-b216-4aae-8e67-8d1c1b66eb91","sequence":{"long":16595},"type":"EVENT_WRITE","threadId":{"int":100284},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d53635f8-0870-4256-9b2f-e18d2a90cb41","sequence":{"long":16596},"type":"EVENT_READ","threadId":{"int":100284},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff1d3706-94d8-4823-b05a-84b022e01953","sequence":{"long":16597},"type":"EVENT_READ","threadId":{"int":100284},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf9cf815-359d-48e6-8eaa-dabc51d1d862","sequence":{"long":16598},"type":"EVENT_READ","threadId":{"int":100284},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442124065300,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4016},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92a862d8-52ac-47cc-aa05-2e061da06178","sequence":{"long":16599},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1147957},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"278a1d6a-0e71-483d-ad45-736617c5f414","sequence":{"long":16600},"type":"EVENT_WRITE","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7770ee8c-f3c8-48b9-9b7f-f63431f0f71f","sequence":{"long":16601},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6c977eff-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"shm_exfil"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63f2a562-dbec-4838-b0cf-c4eb820cbd5d","sequence":{"long":16602},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":843},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7f39bf5-c2f7-4b3a-a52e-db929e5c5cd6","sequence":{"long":16603},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1092},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6d348418-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1560,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584442343872792},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a160f0bf-fe0b-4005-865b-4e129df85ac6","sequence":{"long":16604},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1560","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1560","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55dc4451-2638-441e-967e-285e5c971859","sequence":{"long":16605},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4885f94f-6014-402f-bce4-6c2296fabcb4","sequence":{"long":16606},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584442343872792,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e689cd93-b6c1-4ef4-b72b-a16d16298190","sequence":{"long":16607},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"433038b2-e5d3-4ab2-83d5-af894cef708b","sequence":{"long":16608},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9eceb8a7-2954-422e-b0cf-5f396059edb7","sequence":{"long":16609},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72f9e625-91ca-420b-91bb-8a533b5ac37e","sequence":{"long":16610},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acad2a54-dd48-4559-9daa-2a6545dd3135","sequence":{"long":16611},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e557f89-def9-44dd-8d66-217b6a1f7762","sequence":{"long":16612},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd84e07c-ef7f-459f-9548-be3df61fba15","sequence":{"long":16613},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18dbd8ff-691c-4e21-a95f-5125ada5e6fc","sequence":{"long":16614},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3c1f284-9804-4022-bb12-f93d76844668","sequence":{"long":16615},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a03cac3-a76d-49b4-8188-4d87336d783b","sequence":{"long":16616},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc8af25c-bdc4-47d8-aaf7-c66045467848","sequence":{"long":16617},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"543ede6f-6404-4eac-a430-41424dff7e2c","sequence":{"long":16618},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4a545a1-d563-417a-bcc6-5b77a0933553","sequence":{"long":16619},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf126690-eaf9-4bb5-894a-3177bf16e45e","sequence":{"long":16620},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a02bd2b-2521-4dc6-a5f6-35bdc1379a10","sequence":{"long":16621},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d96fbf81-660f-4577-9094-3fd95ef96e7b","sequence":{"long":16622},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba6b12f5-c0f6-463e-878e-6b3e9b6d14cf","sequence":{"long":16623},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2b4d841-42c4-4c06-a8cb-4b6c37223c32","sequence":{"long":16624},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f75eea3-5962-496d-ad9c-42767e58be1b","sequence":{"long":16625},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584442343872792,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82fb400d-779d-432f-8cdb-86b97fcf7f71","sequence":{"long":16626},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1150896},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"356c4480-2126-4ac9-b67f-af0ff8a1e680","sequence":{"long":16627},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6d348418-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70d09112-8054-44f6-b45e-e8757beca2b1","sequence":{"long":16628},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74c47e2d-96be-4d55-bc1d-e1c4f5b749b3","sequence":{"long":16629},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6dd05417-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1561,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584443363982269},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1104545c-0607-421a-a4d5-69ccf992656d","sequence":{"long":16630},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1561","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1561","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19cd17dc-ceed-47b2-a111-3cf730ee62fa","sequence":{"long":16631},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf6a510c-276a-4e0c-8805-ca665f605d14","sequence":{"long":16632},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584443363982269,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/signal.sh a","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0fd10e8-7ae7-4bdc-a44e-54bda0103704","sequence":{"long":16633},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe17a30c-67e5-461f-896f-e8c6ca04c343","sequence":{"long":16634},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e728c87d-b299-46e9-8210-9ee1656f390b","sequence":{"long":16635},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87ce8ef2-dc83-4e14-829f-ab8b45f713f2","sequence":{"long":16636},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fc52a0c-ec68-419f-a5cf-9dc541e5d09c","sequence":{"long":16637},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d799833-d244-4a6e-82c1-c09d3013fe88","sequence":{"long":16638},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10862ed3-f84e-4dcc-a63d-c4966cf65a71","sequence":{"long":16639},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47daf9d2-03d0-42f8-9101-3abf1d5a93a9","sequence":{"long":16640},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cf6a240-a1dc-44ef-9e17-4edab7da2541","sequence":{"long":16641},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d67ec4f8-30a7-4da6-ba07-cd87c9942e07","sequence":{"long":16642},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24262f56-2669-4039-92e7-4f38d46d709e","sequence":{"long":16643},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d3c1854-3e90-4d7f-8af8-8b62d80e8dc0","sequence":{"long":16644},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cce2a745-f104-448f-a064-7cda641a457e","sequence":{"long":16645},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45bafeb6-d8d2-4dd0-8680-982db6c8c0cd","sequence":{"long":16646},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a5920cf-78fd-4187-8b23-b5a94ea89a6c","sequence":{"long":16647},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fc6d60f-05a6-44c4-b973-66a5691dd317","sequence":{"long":16648},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"170d9d57-e1e2-4fcd-8a4d-448fa474eb03","sequence":{"long":16649},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f26b6e5-00ef-4de9-aebf-21e174be9379","sequence":{"long":16650},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ffbb5aa-8040-4a91-b396-3f2aff5fda7f","sequence":{"long":16651},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443363982269,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1848131-6cf4-461b-a179-e225be3993b8","sequence":{"long":16652},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584443373877641,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/signal.sh a","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb3d6690-42dc-4c78-819b-839f73201c3a","sequence":{"long":16653},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"690c91ad-e977-4817-b260-24fd0ba0fc4c","sequence":{"long":16654},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"448464a0-f471-4d79-ac80-8d99c13ee41a","sequence":{"long":16655},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fba4d358-afea-450b-977e-35434e674895","sequence":{"long":16656},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"349f29ca-4309-49b8-adb7-2e18a2d7e4a4","sequence":{"long":16657},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3092bcf9-024b-49ea-8e0e-4040f3b0786d","sequence":{"long":16658},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbd3d5a2-2625-44e0-b1db-c05f1eebdcce","sequence":{"long":16659},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed1cb588-2fbf-4ad8-91dd-d70923787ca2","sequence":{"long":16660},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2559c6f6-f35f-4bc2-9c0d-26761f1c4876","sequence":{"long":16661},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25802b3d-2243-4283-93a5-b47b187eb86b","sequence":{"long":16662},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a898467b-87c1-4c7f-82dd-c42c1dd992c9","sequence":{"long":16663},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c8330b5-ec10-407d-a2db-90109bada19b","sequence":{"long":16664},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0367a0d-91ca-46f9-a1b7-e5a903c386d2","sequence":{"long":16665},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5bd5e960-0c58-4ce0-91b0-34f4c27de4cd","sequence":{"long":16666},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dab108b3-571c-4911-ad10-9e58cc65e1f7","sequence":{"long":16667},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b78255d6-2c34-486b-8fd9-f61df68531d7","sequence":{"long":16668},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c6902eb-d068-493b-96c7-71b818a24c76","sequence":{"long":16669},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d0c8d81-c50b-4832-a0e0-13726e0ad4ad","sequence":{"long":16670},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"416dbe07-1b7e-4d9b-bdbe-ad157a110841","sequence":{"long":16671},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f82b1cdb-7ba0-4805-b8dd-12d788a321f6","sequence":{"long":16672},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e2399a4-3311-4492-979e-3b0bd77694cb","sequence":{"long":16673},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"763f11fd-f079-4669-986a-89ba379538d6","sequence":{"long":16674},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0386f74-a279-4d05-af6f-957c2ce3f8dd","sequence":{"long":16675},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46996573-875d-4cf7-b2b1-2e2565cc11c6","sequence":{"long":16676},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"604d72c0-d2fc-4b8c-9def-c970af310c8e","sequence":{"long":16677},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fecf20a-d9ed-4015-9f6c-7aee3b3ecd70","sequence":{"long":16678},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c05a80a4-ea7a-4ce9-8e7c-7bff06a9d635","sequence":{"long":16679},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"896d3a2e-342a-440b-8cb2-9e929df15ba4","sequence":{"long":16680},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2522fd8-0b9e-432b-86c3-503b34e786ef","sequence":{"long":16681},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a5aee76-344d-4551-80de-0c5ffe5fddc4","sequence":{"long":16682},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef16e93b-24b8-465a-874f-ad9757a77c5b","sequence":{"long":16683},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e42b0f1-8998-4d7d-ac53-ef88ca79a388","sequence":{"long":16684},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b23a80e4-48a3-46eb-9e14-cfcd2e33ba41","sequence":{"long":16685},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a256ec3c-768f-475c-b2b0-a29020659a20","sequence":{"long":16686},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a559da6b-c7b4-494d-8301-b1a14ee60688","sequence":{"long":16687},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75e46a30-d6b5-4d14-9819-a1453e2d3673","sequence":{"long":16688},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad96161e-663b-451b-bb62-09bdc4d9f1b4","sequence":{"long":16689},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bb5e908-5b20-4113-aed2-9462cb938601","sequence":{"long":16690},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4fe48f5-2d9f-444e-a507-adec273398af","sequence":{"long":16691},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bed9cac0-4b8b-4b30-862c-a3b4fe5e2438","sequence":{"long":16692},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b39c4e07-7238-46fe-9e63-2c445c39afd7","sequence":{"long":16693},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52122bc0-176d-4f5e-873d-effd8398b294","sequence":{"long":16694},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a989e12-434c-4352-a094-3cdc9c46207d","sequence":{"long":16695},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2984c9f-72be-4535-8036-1350496508e7","sequence":{"long":16696},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b830ba8e-bb18-4c2a-bd50-ed2002f3b02a","sequence":{"long":16697},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96ae5a92-3211-48df-9624-b9b5189f0735","sequence":{"long":16698},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44c6b29c-6a39-4f9c-9887-9ffe28c87699","sequence":{"long":16699},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7deea93a-12ab-4016-9d2a-7bbe9915f303","sequence":{"long":16700},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e85527c6-b8bd-4f53-8775-e76de4709235","sequence":{"long":16701},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e4f1f4f-5be7-4309-9b6b-2a72fea0b7e6","sequence":{"long":16702},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90b6fc99-d14f-4c2f-b33e-9a60f861d4e2","sequence":{"long":16703},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42049dac-261d-4e87-bc49-2e59728b65fc","sequence":{"long":16704},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50ae81c7-8b20-4930-8c16-d73f8071e7f7","sequence":{"long":16705},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d0ac900-66b1-495b-8fda-b930733ac536","sequence":{"long":16706},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e58ae69f-4fcd-4ff0-8579-50cd4071838f","sequence":{"long":16707},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/signal.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc2a84fe-028c-4bf5-80c9-a4c1735ad1e3","sequence":{"long":16708},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96f77606-d4c6-4004-826f-02553d02d98a","sequence":{"long":16709},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf45f4e7-a4e2-427c-8789-6277e8d603ec","sequence":{"long":16710},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"764ede27-1abf-4d43-a6df-4ac713783cab","sequence":{"long":16711},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e309f07-8e7d-4b1f-bd98-6169e6053846","sequence":{"long":16712},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c736a97-3024-434a-bdb2-04602bce75aa","sequence":{"long":16713},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06a5d5bd-349f-4883-b38a-0c3ac5562a3b","sequence":{"long":16714},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18b613a4-3f7f-4565-a1f9-e96c70b6eff3","sequence":{"long":16715},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":289},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1228a0f3-4d14-47db-8f53-368b34554e2f","sequence":{"long":16716},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":245},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6dd24633-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1562,"parentSubject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584443373877641},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06bd4a73-6f39-4a3e-98d4-d56cce657bfe","sequence":{"long":16717},"type":"EVENT_FORK","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1562","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1562","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e88d436-f5d7-4e9e-b97b-43ca7f841c15","sequence":{"long":16718},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443373877641,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":44},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffb8f11a-5948-4e02-a7d8-080fa5a3c46d","sequence":{"long":16719},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1561","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f37e20c-8ef6-44e5-bfec-14962335c983","sequence":{"long":16720},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7c6174f-7f34-4a4b-8193-b8c4329fd3c7","sequence":{"long":16721},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b34c9093-e2d4-487c-a279-4d97ecc12e75","sequence":{"long":16722},"type":"EVENT_EXECUTE","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"f7889531-95ae-715e-ae95-c4adae711987"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./signal_server"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584443383857081,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./signal_server","ppid":"1561","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d44eb9fc-dffe-41fe-8a11-9fdcf832d103","sequence":{"long":16723},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e634a5a-da1e-4c79-a004-bcdbc37d1187","sequence":{"long":16724},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbc8380b-7f1e-4bd1-96af-11974c3c8567","sequence":{"long":16725},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fcbf44d-f849-44d6-9bf0-31f91bf86ad5","sequence":{"long":16726},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":263},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6dd2f704-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1563,"parentSubject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584443383857081},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"baa1dde3-c87b-49c7-afdd-0df124e73920","sequence":{"long":16727},"type":"EVENT_FORK","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1563","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1563","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aebe39fe-8a35-42ba-9e04-b710416370b2","sequence":{"long":16728},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"585593d8-bf05-4ee9-a90a-bce8104f910c","sequence":{"long":16729},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dce1772c-c50a-41e5-94eb-479575728e43","sequence":{"long":16730},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bedc735-b87d-456c-9b3f-ef46663b4822","sequence":{"long":16731},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73c30452-f909-4b05-8c0e-d26455875361","sequence":{"long":16732},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":{"string":"/usr/lib/libc++.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fdb94c5-c1b6-48d3-bcf1-ed36d3fe830b","sequence":{"long":16733},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7eafcbd-b6d3-4438-bc97-8946e0f0e1bf","sequence":{"long":16734},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db575071-e11d-4afd-aba3-fe157f6c7417","sequence":{"long":16735},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a06740dd-3258-4ecb-8ff5-943cff459b04","sequence":{"long":16736},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0af85e85-22bf-44ce-89e6-7a0d6c3a42c0","sequence":{"long":16737},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a395670-f58f-4a9a-bdba-3aaa2661b8be","sequence":{"long":16738},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b67b82c-b154-49c8-bef2-174f244687b2","sequence":{"long":16739},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa40e73c-f1d4-4456-b9c9-7206868c692d","sequence":{"long":16740},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a3d8ad1-73ca-4bdb-b6bb-d563b589a9cf","sequence":{"long":16741},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7b92007-e583-4e1d-8183-8a50e34c6358","sequence":{"long":16742},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":{"string":"/lib/libcxxrt.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d13e7f02-12da-4a06-a20f-6343256f34ae","sequence":{"long":16743},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f7f2970-af00-4885-ad80-32e7fbd71f0d","sequence":{"long":16744},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"354c611b-5b49-4742-972d-cd20565d8131","sequence":{"long":16745},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abb7e4bd-8255-4264-b7cd-28d8a1ba05e6","sequence":{"long":16746},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c0d3511-ac8d-40bd-87ff-bd9fac097244","sequence":{"long":16747},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06570b0f-279c-4035-ad44-1343690b46ee","sequence":{"long":16748},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e0bef48-8758-4c6f-8e62-344b1e010efc","sequence":{"long":16749},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ce03faa-bb74-400f-9655-8c683f892912","sequence":{"long":16750},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9488882-2561-4381-8f0c-caf988dce026","sequence":{"long":16751},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9441f9e6-8dbc-4fa0-940a-aecc7d99ecaf","sequence":{"long":16752},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":{"string":"/lib/libm.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e4d94a0-538d-456e-b9eb-2f497642b749","sequence":{"long":16753},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17eb4b7b-db36-4e45-a7e9-a49779238097","sequence":{"long":16754},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90c62820-0cfe-476e-b8ba-dae76dd0d4d1","sequence":{"long":16755},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22006f5d-9e75-472b-8e2d-a495e6360e89","sequence":{"long":16756},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ea262a6-6698-46b0-9d9d-7facb9418230","sequence":{"long":16757},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a3ba896-1245-4e98-8297-7961a1fc33ec","sequence":{"long":16758},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33f6acc0-3de9-418a-bac8-0b3517e3a5f0","sequence":{"long":16759},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f50abcf-0ec4-416b-bb7c-febafab04a50","sequence":{"long":16760},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72f7bb74-4f44-4b22-a716-9656160d6660","sequence":{"long":16761},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f22651df-5efb-4dc5-9a68-3804e1c59b98","sequence":{"long":16762},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":{"string":"/lib/libgcc_s.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99f7c1fc-a18a-49fd-94d2-1c4c78327192","sequence":{"long":16763},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b8f2cf0-4bd7-4a24-a994-3d052468d37f","sequence":{"long":16764},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5b04c5f-ff97-4bb9-930f-f176c3603a7d","sequence":{"long":16765},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3600384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06c5f348-025f-48be-ae33-c3dbcc8307cb","sequence":{"long":16766},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3600384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c99f54c-346b-430a-b1c1-6807182a337a","sequence":{"long":16767},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3637248},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a629a7aa-67e8-4312-a0a9-3ebc2ba634d4","sequence":{"long":16768},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3637248},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54525cb8-2f1f-4998-99c5-9bb7ae85c761","sequence":{"long":16769},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3690496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df599e7c-cc23-4264-8672-4251b64e33d8","sequence":{"long":16770},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3690496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed2fb354-94b6-4c67-8316-2dc0ea4351ab","sequence":{"long":16771},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53f505d1-f966-48d2-9566-f6681f53ab14","sequence":{"long":16772},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"217a1a2c-827a-43e5-8a1a-9f9efc1f6715","sequence":{"long":16773},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fff3063-2519-4a32-8707-2195d3b75a86","sequence":{"long":16774},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4b9808f-ef2e-4741-8387-1a0feafee17f","sequence":{"long":16775},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3702784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03941aca-1a69-4a74-9747-3875ea5cb3c3","sequence":{"long":16776},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3702784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"486fd6a6-79c6-411d-8a53-98b841327275","sequence":{"long":16777},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4218880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fe3a58a-7f90-4ca2-9365-aaa458e6eca0","sequence":{"long":16778},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4218880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e78b7f9d-10b6-4b4f-a567-f8ac579053ae","sequence":{"long":16779},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5550080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3037ea9d-87f0-4820-bb3e-1fd7fee128db","sequence":{"long":16780},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5550080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"584c8eba-0bde-452f-bb03-2fd4d39e3bf4","sequence":{"long":16781},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443383857081,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"999b27bf-de80-4daa-8f51-341abce15cb5","sequence":{"long":16782},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cc520be-efd4-4acc-b71d-d71081b1b14e","sequence":{"long":16783},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6219a8a-7735-4097-bb53-e3349822c7e4","sequence":{"long":16784},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89da550b-38d9-43ee-a77a-c17703e79318","sequence":{"long":16785},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ddfce3a-6691-4d27-9aff-6512034ae213","sequence":{"long":16786},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88d3368d-4c03-4807-89a8-bea1b3e21f12","sequence":{"long":16787},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61cbad0b-63c7-4be0-af64-0dc068e82990","sequence":{"long":16788},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1561","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7157a350-8248-4641-8119-6689ea5ad11c","sequence":{"long":16789},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584443394217625,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1561","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80cac3f5-8d5a-472d-bcff-558c544744ab","sequence":{"long":16790},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c400fe2-5d57-4b09-88d3-cd5ddaf965bb","sequence":{"long":16791},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16e8dfd6-1e88-4149-a1bb-adec81552e40","sequence":{"long":16792},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"feef82bf-7266-4290-83a5-7b1ec11ce4b0","sequence":{"long":16793},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98e6ca27-4f61-49a0-bc42-a392f67d4ba5","sequence":{"long":16794},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec8131bc-8f88-4316-886e-6cf8c537f7e6","sequence":{"long":16795},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b86a03ef-785e-47c5-9a2b-e34dfd3c5d8c","sequence":{"long":16796},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c65cb127-e7d1-44d5-b905-1b7eeadf9232","sequence":{"long":16797},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a52cdf2d-1c2a-4077-8755-541db6440142","sequence":{"long":16798},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eadd54bf-52f6-4eb2-9a13-33ef6fc51f5a","sequence":{"long":16799},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21d2d335-c11d-4a9e-9bca-f9a431a9920e","sequence":{"long":16800},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"034a39d6-d70f-494b-9e15-6d3e5f704b2c","sequence":{"long":16801},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a652045-ace6-46c2-9763-82d3b0a54c22","sequence":{"long":16802},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebc62729-6464-4087-8104-7637c075db71","sequence":{"long":16803},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b4c0310-130f-4aa2-bd00-8fd282cbfc2e","sequence":{"long":16804},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46b45251-8c72-4fea-b4b7-a5986c7ae6a6","sequence":{"long":16805},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1c9588b-b97a-48d5-a0fb-9741be0df08e","sequence":{"long":16806},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1067468e-b661-4e4b-8c47-08d899b0c073","sequence":{"long":16807},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584443394217625,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82cb1476-6263-4403-8726-4d69a88bf727","sequence":{"long":16808},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444464228828,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1168708},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b856862-7d28-4a7e-a410-7fd784713db2","sequence":{"long":16809},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6dd2f704-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444464228828,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"004aa3ea-7497-473a-9aad-179ae6db3f91","sequence":{"long":16810},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444464228828,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1e22b58-5cbd-4768-a190-29a1ea31dd15","sequence":{"long":16811},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444464228828,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"894144de-95eb-4274-a620-7a7b2ea7deff","sequence":{"long":16812},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444464228828,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"607f8393-2f4b-4920-be78-b99d8ed3c9af","sequence":{"long":16813},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0adb90fb-2c72-4983-a30c-a9f3903ac7d1","sequence":{"long":16814},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc1b5d23-49b0-44b0-9fca-d019eb2aa958","sequence":{"long":16815},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6e78fb87-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1564,"parentSubject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584444473970773},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88a9569b-694a-4087-8ee9-78f19228f752","sequence":{"long":16816},"type":"EVENT_FORK","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1564","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1564","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8eba4901-7857-4670-88fa-7ca83563bbe8","sequence":{"long":16817},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1561","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc447525-139e-40e9-b47c-720e6ecdb2ac","sequence":{"long":16818},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"74643ad1-37f8-b356-b837-c78bb6b345d2"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./signal_client"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584444473970773,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./signal_client a","ppid":"1561","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94702d60-5220-4888-b0f5-a802cede2617","sequence":{"long":16819},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c17e59ce-c9fb-4c68-9be7-c73e4d4038ff","sequence":{"long":16820},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4dcd60b1-0517-45f1-ac4c-425599658ce5","sequence":{"long":16821},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b32589a8-5938-4c89-b42a-84b75d9ab8f9","sequence":{"long":16822},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"467861b6-ad4f-45aa-b3ce-116d63addf60","sequence":{"long":16823},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62e17817-4fcc-4aea-8f6c-6f09f4957bd4","sequence":{"long":16824},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f00ed755-99b0-4ef1-a71e-5c849b659014","sequence":{"long":16825},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff97bd9a-1eae-4a13-86e3-4744af013338","sequence":{"long":16826},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":{"string":"/usr/lib/libc++.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"265b9be0-2abf-4db4-88f9-df46609447f0","sequence":{"long":16827},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34574150-d782-4c82-91eb-22633a565bdc","sequence":{"long":16828},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16fd510e-f964-4815-9972-8f1426efd22c","sequence":{"long":16829},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89c739d0-6894-45cd-9fca-b393b6b51971","sequence":{"long":16830},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2416640},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78d8a657-6566-43c7-9425-f3789b863bd8","sequence":{"long":16831},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f631b82b-4af7-4053-8d2b-8dc2a806db7c","sequence":{"long":16832},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2793472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d26df21d-0476-4b1e-bc00-09286e08f949","sequence":{"long":16833},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"171ee013-75e9-41e5-8ba2-5a830cdf104a","sequence":{"long":16834},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3215360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"06790584-8366-4285-9e74-3804ab2ce8c4","sequence":{"long":16835},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"86731679-6196-845b-9661-bd57db846ad9"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1761f1c-668a-45ee-9cf6-2847cf42fbb3","sequence":{"long":16836},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":{"string":"/lib/libcxxrt.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6218b67e-d047-48f8-baed-9b503f02b1aa","sequence":{"long":16837},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa08ea0d-3958-412a-ba30-ba0ce1797729","sequence":{"long":16838},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"071f85e7-1ceb-4ec6-9fbc-49212aa3dbc8","sequence":{"long":16839},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5d817c7-76e0-4414-8c7e-7a50ec43f12a","sequence":{"long":16840},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3252224},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3bdf799-3d65-41af-9de7-51a6672d24ac","sequence":{"long":16841},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"615666be-c72e-49ae-9f53-28d9332fd974","sequence":{"long":16842},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3305472},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe8d48e9-d008-4878-af96-43358011949d","sequence":{"long":16843},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a0047af-9443-4cbc-bf06-175a8ac2c240","sequence":{"long":16844},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3362816},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a90dfc4b-7d25-420a-a881-ed3903b13dc2","sequence":{"long":16845},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"11055fcc-3e6d-ad52-ad3e-07c112adcb50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"207e9216-8c7d-4f03-b2e7-2144f84dec47","sequence":{"long":16846},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":{"string":"/lib/libm.so.5"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2496224-8e86-4862-866b-5843eed541db","sequence":{"long":16847},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"035fb756-edfb-47d3-8e44-298262153054","sequence":{"long":16848},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eea93bc2-5535-46f1-a49b-34fe1fff5d84","sequence":{"long":16849},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77c2ea10-7cbc-444b-ba50-20611e3b62e5","sequence":{"long":16850},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3395584},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08dad096-2d73-494d-9356-2c88cd63c6f8","sequence":{"long":16851},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"43720b2a-62ff-46e0-979d-d0c092124632","sequence":{"long":16852},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3465216},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a2017f2-2b58-4263-a790-ad120585ab61","sequence":{"long":16853},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58482fa7-f5d9-4d65-a4ee-1ac21b82f477","sequence":{"long":16854},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3588096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd14a645-d0eb-4b21-9763-3f53a3bbddbf","sequence":{"long":16855},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"4c04d3c5-3aee-7458-ae3a-ee0258746598"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"321fd582-a93f-499a-8994-a67dbe62f3bf","sequence":{"long":16856},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":{"string":"/lib/libgcc_s.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a9f74a8-61bf-442d-8722-8512b9b7b4fb","sequence":{"long":16857},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94b9de13-ca4a-4d98-81d5-da02c6bcc846","sequence":{"long":16858},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1bc78a9-f8e0-4001-82a4-f056b8241e4d","sequence":{"long":16859},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3600384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a69fa04a-1975-4855-9e89-3cf5ed83e1a7","sequence":{"long":16860},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3600384},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecc1d95c-11af-41ee-bd84-808fcb392763","sequence":{"long":16861},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3637248},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23cb7475-51b3-4d55-87a2-c87152c2eaf4","sequence":{"long":16862},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3637248},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af4ef85f-9f03-4ec3-9cda-591051cbff5c","sequence":{"long":16863},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3690496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72c00605-78af-4a5c-a51f-6ba49ea06302","sequence":{"long":16864},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3690496},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3caa99e5-2514-440b-85d0-7e0422847c73","sequence":{"long":16865},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a7ccc371-8123-4454-a381-b03504446d50"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9798ebdd-c82e-463a-b919-877fb8e4ed40","sequence":{"long":16866},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"638807b0-b69d-4e20-b935-629345565b8a","sequence":{"long":16867},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7786d99-6e5c-4ec5-965d-1e72c546a1fc","sequence":{"long":16868},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2412544},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cace8eb7-6918-4add-900c-1aec16465e55","sequence":{"long":16869},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3702784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58b4911e-7341-43e2-bcd2-9d09bbc226c6","sequence":{"long":16870},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3702784},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02905497-a0c0-4e3a-9c05-c1e79c63e10b","sequence":{"long":16871},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4218880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bf42ace-6ed4-4b06-9452-e751447d74a0","sequence":{"long":16872},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4218880},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edce4667-127d-4023-92b2-c04e099d7f71","sequence":{"long":16873},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5550080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c41fdd1c-14d8-4e22-b961-bc1ad9955dd2","sequence":{"long":16874},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5550080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"514489d6-f32d-4031-947d-fa0cd0a5bbdc","sequence":{"long":16875},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2693a44d-6b09-492f-862c-f5c2ab837fa9","sequence":{"long":16876},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46f311e1-99d9-403e-9558-c676370bf989","sequence":{"long":16877},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5bb26c6-d524-4606-ba5a-5338274388be","sequence":{"long":16878},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444473970773,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d29b5c05-fe6a-474d-bafa-f50262f8eeb1","sequence":{"long":16879},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6bdf54ce-92b6-47ad-9e02-39810b5b99ff","sequence":{"long":16880},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9205ebb3-cc06-4503-aad8-ac909fc40285","sequence":{"long":16881},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5676da34-071f-45db-b39a-e83b80599bbb","sequence":{"long":16882},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"01b6"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"883d09e8-dcd2-4d26-8255-1b5f79687914","sequence":{"long":16883},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff8a3837-fb14-41dd-a2a3-23bd9329f5c6","sequence":{"long":16884},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bafad55-0b3b-4fbf-8acb-12e081aa1bdd","sequence":{"long":16885},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbaa6593-b24b-4911-8eef-d1ac721d97db","sequence":{"long":16886},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2787e00-6a3f-4151-8061-171c7fbba20e","sequence":{"long":16887},"type":"EVENT_LSEEK","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d95f16d-4851-486d-8cef-ff211ae667f4","sequence":{"long":16888},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"907f3369-3ec4-42b8-b42a-099727d083fa","sequence":{"long":16889},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":28},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9ec2827-231a-46bd-a5a1-6862b926f104","sequence":{"long":16890},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6e78fb87-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"signal_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b735f681-1e10-4e31-abda-cc65c440674a","sequence":{"long":16891},"type":"EVENT_UNLINK","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a74bb88e-ea0e-db59-8eea-b7ea89dbe2cb"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/pid.tmp"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_unlink"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5919ffe-aa2d-4199-89f4-f4cedd202ff3","sequence":{"long":16892},"type":"EVENT_WRITE","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"862e76e6-6224-4bc0-a69c-760435822260","sequence":{"long":16893},"type":"EVENT_EXIT","threadId":{"int":100150},"subject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6dd24633-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1561","exec":"signal_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6899dba-9eb8-4e30-a48d-cf7ef0e3e463","sequence":{"long":16894},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"fdea8fdd-1295-d356-9512-4bf3c6d37104"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44de1f6d-2fc1-48c7-b9b4-dcea62db4cb8","sequence":{"long":16895},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6dd05417-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbb0360a-250b-4186-9f26-897f07bd24f9","sequence":{"long":16896},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":792},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edb82d76-2b95-45bf-941d-dd104ef6aed2","sequence":{"long":16897},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1143},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6e7b2830-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1565,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584444484199126},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d59135bd-ccda-4ed7-b178-5235e91ed5d7","sequence":{"long":16898},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6e7b2830-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1565","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1565","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1aa7eaf7-cc75-487b-9854-9f6c2239816e","sequence":{"long":16899},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6e7b2830-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584444484199126,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"726eb321-c5a5-441b-9d0f-4e2f470eed4f","sequence":{"long":16900},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1177549},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd85d9a9-cd97-400e-af64-4757ce8d5c86","sequence":{"long":16901},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"6e7b2830-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6e7b2830-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"798dcc22-e8d4-4b9d-8c3f-c86e2e382ef3","sequence":{"long":16902},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"277a8c61-b01a-4c87-b4d8-0da2a1a7a5db","sequence":{"long":16903},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":26},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6f18b1f3-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1566,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584445514098887},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84168d25-68d4-4b49-94e7-eabca94301e5","sequence":{"long":16904},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1566","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1566","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aab9b3dd-ca87-4639-a886-bb53b94071a4","sequence":{"long":16905},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf08e8cd-e1f0-4f36-87c5-06fb9631f6fc","sequence":{"long":16906},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584445514098887,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"/usr/bin/env bash ../Bash/stream.sh a","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c2e83c3-fe61-48db-88ad-9c8d796fe7a0","sequence":{"long":16907},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9191a2ac-61ef-456f-8ee0-ee0d6c391d06","sequence":{"long":16908},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5ed17f6-2d79-41fa-9fe0-393dd62c1c98","sequence":{"long":16909},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"072a9d33-7f12-408c-b409-bfa147410219","sequence":{"long":16910},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efdaac09-7929-4b41-bf5e-a9559c425dbd","sequence":{"long":16911},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49dc925a-fc6b-42e8-a7df-38ec5a0e2509","sequence":{"long":16912},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0189fe0f-f9ca-4ac6-9eae-67561843ba68","sequence":{"long":16913},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca09ad85-f62f-47d9-8610-0eef60621cb8","sequence":{"long":16914},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"298221c2-f461-4459-b9ec-c5531efc121d","sequence":{"long":16915},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c980a15c-0af9-4478-a168-2974fdc4c8bd","sequence":{"long":16916},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445514098887,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38eb30b3-c067-47d2-9b65-ffd1ba69d260","sequence":{"long":16917},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b8130ac-a847-4efe-819a-d7bae6d6f12b","sequence":{"long":16918},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e291d000-3b56-4572-b594-8aaee14a6a37","sequence":{"long":16919},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d97287d6-10e1-4565-8751-bd07479a4e0d","sequence":{"long":16920},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74f8ea2e-52f1-445a-bfab-7ff0d227b11a","sequence":{"long":16921},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6369326a-ddaf-40c7-983f-729e98e24f17","sequence":{"long":16922},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4247552},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca753724-6ed3-4901-a5b8-ef8deadf6048","sequence":{"long":16923},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14191961-d760-4ac7-ac1b-d8bf4d0387fb","sequence":{"long":16924},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a93fc1f-8e6f-465f-bd5b-92420855665d","sequence":{"long":16925},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42127e3e-f73f-4806-b1b1-715e71609b22","sequence":{"long":16926},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17ec1e80-a1f9-ca5f-b9a1-5a793fcab981"},"predicateObjectPath":{"string":"/usr/local/bin/bash"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584445523941575,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"bash ../Bash/stream.sh a","ppid":"1513","exec":"env"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e34c7e6-a834-4bed-a71b-3b7cebbaf6ba","sequence":{"long":16927},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8d1eb72-b9f8-4808-a468-5a4bc07396cf","sequence":{"long":16928},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f22ac96-d1b5-4576-81b9-61ad7250656b","sequence":{"long":16929},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5050a406-a58c-4784-b9ea-b0d85d42f103","sequence":{"long":16930},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc850a00-24fc-43d2-8a60-21d20ea382f8","sequence":{"long":16931},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f7c64bd-4be6-4748-8211-7e643e4c034f","sequence":{"long":16932},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"219932c0-58e9-47e6-950c-0d0087ab670b","sequence":{"long":16933},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"787b0a82-14ec-43a2-aa79-236def28eafd","sequence":{"long":16934},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":{"string":"/lib/libncurses.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdbf7a0f-5245-4898-ba2f-df7e2575e75c","sequence":{"long":16935},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe3cb0bb-810d-4a63-bc17-40184b6f4395","sequence":{"long":16936},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7341250f-ec7b-49cc-a4d4-77628a7cbe93","sequence":{"long":16937},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3435555c-c54d-4ebc-bbbb-e093f0752cfa","sequence":{"long":16938},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3506176},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"754016dc-1381-440d-9e98-aa823c5105eb","sequence":{"long":16939},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20c7601e-9f61-40e4-9b20-9d75d5cef5f8","sequence":{"long":16940},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3657728},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf55e99a-8f76-459c-9be8-ad07794da2c5","sequence":{"long":16941},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7737ac1-fc7c-4bbc-9a96-c6f15344e239","sequence":{"long":16942},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3837952},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec56042c-8ee4-4446-b924-28c5a04cd13a","sequence":{"long":16943},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"e270d10a-6d2e-d757-ae6d-4173d7d7bc9b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01885419-6f1a-406c-b7a0-a70b627e7425","sequence":{"long":16944},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":{"string":"/usr/local/lib/libintl.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"130bddea-e10b-4362-8e54-7ac6c09964b1","sequence":{"long":16945},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a58132fb-ca1b-4d5d-8059-102c3de5fab6","sequence":{"long":16946},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45208359-faac-4654-9027-df4b03650e57","sequence":{"long":16947},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29a2648c-4177-4aee-ba7b-a6ff747ef3e5","sequence":{"long":16948},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3862528},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fddd844f-13d1-4b4c-9191-acba5e6fc4ae","sequence":{"long":16949},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ab318c3-357d-4ade-9287-f40acd2fe1b2","sequence":{"long":16950},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3878912},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6aea360e-fc4d-4f0e-8300-efb69a6a5cec","sequence":{"long":16951},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67a5b15b-03ac-4115-9f18-5fd406083501","sequence":{"long":16952},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3903488},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d11ab4a-173d-4c2e-96f2-8e2f79d95283","sequence":{"long":16953},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"066d2f22-503b-3d5c-bb50-bda4ac3d505f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd3100e1-37ee-4955-a23c-92699857ccbd","sequence":{"long":16954},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":{"string":"/usr/lib/libdl.so.1"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"addeaf97-74ef-4b76-9c00-5feea7ba5a69","sequence":{"long":16955},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dbc5125-c394-418d-92e0-3101954eae72","sequence":{"long":16956},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d6b4d95-d361-401a-b2f4-a84a15a11167","sequence":{"long":16957},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8963d6b-668a-4d0f-8225-c1d7aba566de","sequence":{"long":16958},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3915776},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b867b532-78eb-4efe-aff1-cf3d70e4b4cd","sequence":{"long":16959},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d09d4fc5-adfb-40e0-8ece-d734025fdcfe","sequence":{"long":16960},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3919872},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5d7ae2f-7337-4d45-a499-84b5e54f8b23","sequence":{"long":16961},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b608f3c7-4ea1-411a-8adc-e40ac2d785d2","sequence":{"long":16962},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3923968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3aaa24cb-35c2-4024-adb0-f56678be08ed","sequence":{"long":16963},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"2291fb8e-646b-c75b-ab64-2eb55bc78dd5"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4215b6f-d5fc-4d4f-b3b0-caa9471ddd11","sequence":{"long":16964},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b9e6d35-9793-49fd-9c2c-6d9a1312a897","sequence":{"long":16965},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbd89109-1dd3-41b2-a97c-a3ef67a3a769","sequence":{"long":16966},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3502080},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19882b6b-8bde-4f7a-9248-cfdfbb93a943","sequence":{"long":16967},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"430bedb2-3de4-4e1a-93b7-c699a5066205","sequence":{"long":16968},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3932160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e00f0eff-e709-4fb5-9bb0-8a973d50b10a","sequence":{"long":16969},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a27359c-a334-4d6c-80ba-a91ed0514b61","sequence":{"long":16970},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4448256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51441642-f12c-4be0-870a-38510986189f","sequence":{"long":16971},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"903952f7-7a21-4779-9eeb-a830f3e1ff59","sequence":{"long":16972},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":5779456},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0012cc77-4e59-432a-b986-1ba04b7664bf","sequence":{"long":16973},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"774f2802-26b8-4613-8617-237ff1fb45ec","sequence":{"long":16974},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f74d78d4-561e-400d-bbd8-11f8cb45d605","sequence":{"long":16975},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf83b012-8438-4d8e-b4cc-ff3f39a667af","sequence":{"long":16976},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"239f4085-0683-46ee-9837-b20634933a62","sequence":{"long":16977},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"888477c1-3a21-48fd-be7a-2e9d9bd5334a","sequence":{"long":16978},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0519579-5a3d-441a-9c33-47e864eb73c0","sequence":{"long":16979},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":{"string":"/dev/tty"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"06"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f46fcf8-579f-42eb-a3fa-76725beccca0","sequence":{"long":16980},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cbb1896-6b56-49df-b309-7cc2c3bb44b6","sequence":{"long":16981},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/../Bash/stream.sh"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d73d916-b00c-4275-b308-8da703eb20cd","sequence":{"long":16982},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af713db7-3e0c-4632-b735-d0a93524b0f6","sequence":{"long":16983},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":80},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dda85613-e185-4174-a845-dbbaa9c2e5d6","sequence":{"long":16984},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09653549-7946-46b6-89ee-ffd5b7cf3516","sequence":{"long":16985},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a89c22b3-db99-44b4-a1fd-35d692d19805","sequence":{"long":16986},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"02"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82e300bf-b88b-4f8f-950a-6432ea33a70a","sequence":{"long":16987},"type":"EVENT_FCNTL","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cbb596a-84ab-4c32-b0de-df36df36f171","sequence":{"long":16988},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eee4f86e-a645-4f40-8a1d-c3ab355ab4aa","sequence":{"long":16989},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":290},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a459a0e-008b-4433-ad5d-8ef8f93ae76b","sequence":{"long":16990},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445523941575,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":256},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6f1a8489-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1567,"parentSubject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584445534324005},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"684bccd9-94d5-4911-8cd0-4824c161ada4","sequence":{"long":16991},"type":"EVENT_FORK","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1567","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1567","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"927119d1-aa48-4d9a-a95f-a840fed9e8e3","sequence":{"long":16992},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":34},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84213f9a-c267-43a3-8c82-a194f5e51be1","sequence":{"long":16993},"type":"EVENT_LSEEK","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":274},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6f1ab290-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1568,"parentSubject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584445534324005},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8eb4c2cd-89d8-4a2e-bf51-c0069b3933e6","sequence":{"long":16994},"type":"EVENT_FORK","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1568","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1568","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"179b3039-7f02-477f-8653-fb97d0f9340a","sequence":{"long":16995},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1566","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebbeb819-c97c-444b-88d3-f2501bc619fd","sequence":{"long":16996},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":{"string":"/dev/null"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1566","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bf7911f-3186-4a35-943d-94fdbbacc433","sequence":{"long":16997},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"1633500b-d34b-8058-8bd3-abb7d880915e"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36f631a7-9e21-4eec-9c11-43aa75ba4259","sequence":{"long":16998},"type":"EVENT_EXECUTE","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"eeac9f12-b277-945c-b7b2-6dc48c944589"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./stream_server"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584445534324005,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./stream_server a","ppid":"1566","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3af2f092-1074-4460-aafd-9472d9efdc98","sequence":{"long":16999},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4e7ee0f-0431-4f86-bc42-08700bc0bc1e","sequence":{"long":17000},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1566","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73536c73-3330-4a66-ae95-8538db87a033","sequence":{"long":17001},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584445534324005,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1566","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a1ffa15-991e-4e8b-98be-df6faf961d91","sequence":{"long":17002},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a831a178-9f88-426e-8d30-7e7609258b98","sequence":{"long":17003},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5ce3513-bcfe-44cb-9ffa-763c82f6339d","sequence":{"long":17004},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2182abf4-6c80-4614-b98e-9e14d947cce6","sequence":{"long":17005},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e8a7504-8296-482b-97e8-d474918f2340","sequence":{"long":17006},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00250b76-c0da-4a32-8258-30139788b94b","sequence":{"long":17007},"type":"EVENT_READ","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3a22603-7ea5-492c-a56d-73dfaa1ba746","sequence":{"long":17008},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"897c6934-78c9-4391-b2e0-f4a6afce2517","sequence":{"long":17009},"type":"EVENT_OPEN","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1096b3b-83eb-4c84-abbd-dfb84fffa142","sequence":{"long":17010},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da1279b2-ed83-48f2-96ab-fe1a514ec34b","sequence":{"long":17011},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d122edf2-f134-437f-84d5-cf9052b22f02","sequence":{"long":17012},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9c4ecae-ad58-4022-b73e-b291dacb7a37","sequence":{"long":17013},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8d7ec89-b113-4ed4-8c6c-27e1aa44176d","sequence":{"long":17014},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26cedd7a-f8e6-42aa-bab4-44f785e2423a","sequence":{"long":17015},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2740347e-eecd-4900-aaba-c6bb760caf48","sequence":{"long":17016},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d72cdfa6-eb2d-449f-8252-d48120069ca1","sequence":{"long":17017},"type":"EVENT_MMAP","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87de126d-60a0-4ac0-a3c6-fb4238c9f742","sequence":{"long":17018},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbf8bbdd-1744-4a75-8d28-18c43a938510","sequence":{"long":17019},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bde86de-94f7-4a6a-8034-6d8c226f74c6","sequence":{"long":17020},"type":"EVENT_MPROTECT","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6f1be505-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f1b4b74-109d-4b08-9032-423f2c8281fd","sequence":{"long":17021},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6f1be505-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6f1bede6-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e674fa48-37bb-4b17-b23d-22c49105a1d8","sequence":{"long":17022},"type":"EVENT_CLOSE","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6f1bede6-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6f1bf7ce-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_UNIX_SOCKET","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f45684e5-f42d-48b3-a2c7-2b4626dedd56","sequence":{"long":17023},"type":"EVENT_BIND","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6f1bf7ce-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_bind"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","address":"::","port":"3490","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f338c4a8-0a5e-4f3f-acdd-7de75d66b65f","sequence":{"long":17024},"type":"EVENT_OTHER","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6f1bf7ce-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_listen"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7622d789-729e-48c2-a6c0-8efc732afcd2","sequence":{"long":17025},"type":"EVENT_WRITE","threadId":{"int":100150},"subject":{"UUID":"6f1a8489-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445534324005,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":35},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1566","exec":"stream_server"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ab66556-76a6-41da-b2f0-1d5b3b19c3b1","sequence":{"long":17026},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0c9c07d-4334-43e4-be22-f8912e0edcf5","sequence":{"long":17027},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e839195-3912-4527-859d-f8fc62fbc579","sequence":{"long":17028},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40f19541-5188-4901-be1f-2179b074174d","sequence":{"long":17029},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57747b1e-100c-4479-a6b0-b709475f1022","sequence":{"long":17030},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af4e1500-d722-4dce-b4f1-fc8080801f2e","sequence":{"long":17031},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8258f11-3785-4f68-9a90-0e403a213e65","sequence":{"long":17032},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8387b6c7-e013-4787-8f35-ffdd191ebacf","sequence":{"long":17033},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b18eb581-4598-4c0c-aef6-f832547ca62d","sequence":{"long":17034},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a4bb34e-e6af-4491-8223-6b8cf7ebff0d","sequence":{"long":17035},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce1ead0f-583c-4611-a8c7-d9d6a17dfaef","sequence":{"long":17036},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0ccb0ae-e22f-437d-a17c-12345fd63f38","sequence":{"long":17037},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fa3c3ad-b5c1-44aa-b012-da64f33a727b","sequence":{"long":17038},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0614d2c0-5c60-435c-bf6d-95bdfd6ba619","sequence":{"long":17039},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f4fcc63-c9fa-44fc-87f0-3f9e964eb62a","sequence":{"long":17040},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7e4b893-6024-4ec5-b816-2c0cc6f34e49","sequence":{"long":17041},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ca2ab12-130b-47e0-9064-8e281616d16d","sequence":{"long":17042},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb1e8f1e-97e3-4387-92cf-250f7e40b3bb","sequence":{"long":17043},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584445544294043,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"238b0618-f409-41df-8373-226a1d22afda","sequence":{"long":17044},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1177549},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2849f84a-06bc-4c5b-bf3a-9909eb82b3e3","sequence":{"long":17046},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b719c06f-08c6-44c6-a09a-3538cd06e05e","sequence":{"long":17045},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b035dbdb-47ab-406c-85af-b54d3fb33e29","sequence":{"long":17048},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c79bec6-a2c6-4065-9391-87c157786d4d","sequence":{"long":17047},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"312359b8-95a0-4143-8772-db7d150d72cc","sequence":{"long":17050},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdbba577-23a8-4ba7-9a68-156cf558886f","sequence":{"long":17049},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ddf2a6f-ec53-4840-971a-e7400efd3947","sequence":{"long":17052},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b25764cd-e791-47a5-a142-3fd83e256c47","sequence":{"long":17051},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9ab2696-71a3-46a1-9d73-72f7ebf96274","sequence":{"long":17054},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98198289-454c-412e-a7f3-cb91f1461106","sequence":{"long":17053},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bef0804-a628-40a7-806d-ac962c4780ab","sequence":{"long":17056},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7cc0ba3b-0cac-4ce1-a25f-6814473cc633","sequence":{"long":17055},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afbf0259-094c-43e3-9c93-6d6e4f098856","sequence":{"long":17058},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b17b0e3b-3d49-4cf9-b410-e271cf51ad3f","sequence":{"long":17057},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cccdd79b-883d-4130-a106-62108e0b9403","sequence":{"long":17059},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c3ecb32-b67c-4fa7-9237-172ce4473875","sequence":{"long":17060},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fb372e5-3160-4d7a-b827-d3895ab8ca7f","sequence":{"long":17061},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8a1468e-fc89-41b5-949e-c425bd8eec47","sequence":{"long":17062},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4923},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc0f718a-2a92-48ad-923a-7e3bc6bf93a9","sequence":{"long":17063},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4976},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edc9c204-02dd-4170-a856-476aecb6144e","sequence":{"long":17064},"type":"EVENT_WRITE","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1bbdae4-f434-4cfd-ac81-aa1f9fd5a6cc","sequence":{"long":17065},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ad8edf7-ef81-4bc1-91b5-4800ea8785ce","sequence":{"long":17066},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e131efeb-ef90-4f76-9e46-b0944ff73415","sequence":{"long":17067},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4017},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf8df80c-2c95-427e-938e-5ed4969c7cd3","sequence":{"long":17068},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4070},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74008ce9-fecc-40ba-90ce-1104f1ac816a","sequence":{"long":17069},"type":"EVENT_WRITE","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446124407117,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abd8ef63-776a-4e01-a4f6-5a22cfbfe690","sequence":{"long":17070},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e8279b6-954c-4370-97c2-84187b020f4b","sequence":{"long":17071},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8ac47e3-59b7-4b91-881d-9c1f6c396b02","sequence":{"long":17072},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4667},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2a216b9-fb13-4cb3-a4bd-40bbb2049d2c","sequence":{"long":17073},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4720},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d43b07b9-82f5-451e-b763-f6b443106b57","sequence":{"long":17074},"type":"EVENT_WRITE","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27575177-2579-4612-a334-c4fb31871257","sequence":{"long":17075},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d2131b6-dda0-4f92-9385-577b5cd7d1d7","sequence":{"long":17076},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4e1a178-8d01-4997-af59-bc2e0ee0a73a","sequence":{"long":17077},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4189},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65515722-4ee3-41df-bcc6-80a83f030615","sequence":{"long":17078},"type":"EVENT_WRITE","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b1e953c-8406-4cc9-a35d-3ce01637f757","sequence":{"long":17079},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2a47dc8-4e77-42de-9592-5f789e31f928","sequence":{"long":17080},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"566afd5d-f598-4ba5-912e-6b471cb48e1c","sequence":{"long":17081},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4584},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aec4ab2f-2c83-4cbf-85b0-c7adac946102","sequence":{"long":17082},"type":"EVENT_WRITE","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fb1d478-ee4f-4f1d-932a-8a6e76abb794","sequence":{"long":17083},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f604e129-2737-4d3a-8d2e-ca11071bd45b","sequence":{"long":17084},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3204d59a-bf9b-496a-89ce-0a12f1f46b64","sequence":{"long":17085},"type":"EVENT_READ","threadId":{"int":100286},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446133897041,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4249},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b4b524e-c872-4b90-ada5-1d916adb8539","sequence":{"long":17086},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1195630},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbc4eb73-4f32-484e-98d0-d7e75bcdaeef","sequence":{"long":17087},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c57d7dba-a550-43a4-8bf6-167878babeb7","sequence":{"long":17088},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17367","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db1de91e-c3d4-4f6d-950b-d33e79d65fd9","sequence":{"long":17089},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17368","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fcd6f4b-bb51-481a-bc90-c2dd1e6eebe1","sequence":{"long":17090},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17369","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bc69f9a-18ef-4c10-a8ca-d8804a4dceca","sequence":{"long":17091},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17370","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5274725-80f3-4949-b58d-e96b4ae1b880","sequence":{"long":17092},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17367","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d3df49b-c931-4c67-945f-01f29be1756d","sequence":{"long":17093},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17368","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9771397-64d3-4489-a8b0-001dd1691011","sequence":{"long":17094},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17369","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"056adf3b-56aa-4236-89f9-96ebd9d507d7","sequence":{"long":17095},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17370","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f81852a4-0d12-4969-84ba-8a0d27c3f5d8","sequence":{"long":17096},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6f1ab290-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1566","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93d61f4a-8033-400a-bc46-73d2d23776f8","sequence":{"long":17097},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":{"string":"/usr/share/misc/termcap.db"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8933cfc-ffde-4459-8d44-61a5d1e2b60c","sequence":{"long":17098},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":260},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb7aa54e-8e69-42d3-9ab7-eb7de99af22b","sequence":{"long":17099},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88d5abcf-d1d0-4460-9fb3-a43483bb3575","sequence":{"long":17100},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4096},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce8da5c8-5dbb-46de-aae9-4c1cbab24bcc","sequence":{"long":17101},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"96d82599-7779-ef52-b977-075492ef8d39"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b1103c0-0c38-4997-b52b-df04965dbce7","sequence":{"long":17102},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":16},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6fc15517-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1569,"parentSubject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584446623850756},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7984531a-9566-4569-96b4-226f929dc9ea","sequence":{"long":17103},"type":"EVENT_FORK","threadId":{"int":100139},"subject":{"UUID":"6f18b1f3-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1569","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1569","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1542f283-126d-4f84-8e9e-b025146c8d38","sequence":{"long":17104},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"648191b4-da2e-2357-aeda-9bcac723947b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1566","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e2d19a4-daf7-498b-8e52-8e40955c930b","sequence":{"long":17105},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"acf88428-0c9e-7555-9e0c-dc6fa5750416"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./stream_client"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584446623850756,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./stream_client","ppid":"1566","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10f005a9-bda3-48fd-a7cd-d890296eef0d","sequence":{"long":17106},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"796b6618-d1cb-422a-8dd3-e42aa78ff14b","sequence":{"long":17107},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5e5a341-2912-4d88-9bc6-48e558b4103d","sequence":{"long":17108},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3dfb322e-76bb-457b-9b5f-e505b019cb4c","sequence":{"long":17109},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1b59b32-8ed2-4653-b6a1-6d850d6be43a","sequence":{"long":17110},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40098cf3-9902-42fe-8c2e-077ef9245321","sequence":{"long":17111},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3ec0cc0-945b-431c-809a-9f717dd838c1","sequence":{"long":17112},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf5f3c78-b39d-4723-9c6a-cb60d794a520","sequence":{"long":17113},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6f93642-cdc9-4f9b-8b61-f4c2a163f9bd","sequence":{"long":17114},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24b2525e-750c-41f2-9583-76810873fbb9","sequence":{"long":17115},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e1fb1f7-fbcb-4470-b52a-b1d8e6ba7e0f","sequence":{"long":17116},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4b8039f-7a82-48f1-b25b-b1bb79d648a4","sequence":{"long":17117},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8c66272-5cbe-405b-9fae-c890556dfe06","sequence":{"long":17118},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e146431e-42c6-440d-a0c3-64d176e7aa74","sequence":{"long":17119},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4237671b-7614-4408-ba22-0c59ad461e0e","sequence":{"long":17120},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67b509f2-8871-4ef3-afab-24c464b87008","sequence":{"long":17121},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96e1eeae-1057-4bb4-8f68-e89abcfd31ed","sequence":{"long":17122},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c588a56-61f9-4a32-ab76-8016accaa734","sequence":{"long":17123},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d4e2bef-fc61-4a6b-8d4f-fb7a8a98d089","sequence":{"long":17124},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6fc1e2fd-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d5d666f-8a80-46a0-a71c-0a5ba4256404","sequence":{"long":17125},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6fc1e2fd-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"FileObject":{"uuid":"6fc1ee82-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"type":"FILE_OBJECT_FILE","fileDescriptor":null,"localPrincipal":null,"size":null,"peInfo":null,"hashes":null}},"CDMVersion":"20","type":"RECORD_FILE_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38bf07c2-eae8-471c-9b54-29d2a1ec6fc4","sequence":{"long":17126},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6fc1ee82-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"6fc1f718-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"0.0.0.1"},"localPort":{"int":13773},"remoteAddress":{"string":"0.0.0.1"},"remotePort":{"int":3490},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"461baf55-7272-5323-a652-930a87d78de0","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"0.0.0.1"},"localPort":{"int":3490},"remoteAddress":{"string":"0.0.0.1"},"remotePort":{"int":13773},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbd9a844-614b-4192-8e48-4592958a9279","sequence":{"long":17127},"type":"EVENT_ADD_OBJECT_ATTRIBUTE","threadId":{"int":100015},"subject":null,"predicateObject":{"UUID":"6f1bf7ce-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":{"UUID":"461baf55-7272-5323-a652-930a87d78de0"},"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":null,"parameters":null,"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"6fc2037c-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":{"string":"0.0.0.1"},"localPort":{"int":3490},"remoteAddress":{"string":"0.0.0.1"},"remotePort":{"int":13773},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bbe1cd4-bd37-4ca1-9e0a-faa0e3a1656d","sequence":{"long":17128},"type":"EVENT_CONNECT","threadId":{"int":100121},"subject":{"UUID":"6fc15517-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6fc1f718-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584446623850756,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1566","address":"::1","port":"3490","exec":"stream_client"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c02f31e1-b774-43e6-a6a8-041deba15931","sequence":{"long":17129},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1200432},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"6fc2e0eb-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1571,"parentSubject":null,"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":0},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"853ea053-4b62-44af-890a-0e786ebaa475","sequence":{"long":17130},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"6fc2e0eb-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6fc2e0eb-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0e592c4-d55a-4dce-940a-40ab427fc2f2","sequence":{"long":17131},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b7571ed-e57c-4b6f-ac96-0c940e8a8ee9","sequence":{"long":17132},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"705edb2a-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1572,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584447653827442},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"860a8932-af96-48af-85e3-80fc9cd95ff0","sequence":{"long":17133},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1572","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1572","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff62c164-cf09-4863-af7f-6fd45a33a060","sequence":{"long":17134},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e111501-35e1-455d-8379-a3509caffaf4","sequence":{"long":17135},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"c9e441c0-7c31-1a56-b17c-3f9a061af725"},"predicateObjectPath":{"string":"/usr/home/user/ripe-prov-tests-master/Linux/./with_wget"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584447653827442,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"./with_wget ","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"815adbfb-2caa-4428-861b-b727e5e0307f","sequence":{"long":17136},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7079f92-8caf-42bf-885f-4a1ec119a226","sequence":{"long":17137},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c942caa2-e306-4f82-817d-6a96426a630c","sequence":{"long":17138},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8be23d77-6ef7-4d75-9ab7-ed05ede757ea","sequence":{"long":17139},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc9ed06d-39b7-4a38-9e27-ae6b9c627c19","sequence":{"long":17140},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"568dfe72-002d-4d87-8b54-3fe6c0839eb4","sequence":{"long":17141},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1116ad0-96d0-40c8-b6a7-e689b4a22bd5","sequence":{"long":17142},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37ec3f8b-7d50-4f5b-a508-d23889b24ac1","sequence":{"long":17143},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5a666d3-d01c-4c6a-a3e8-25a0ebed6c45","sequence":{"long":17144},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"565436f3-38b9-4d4a-83e0-35e79d72ff51","sequence":{"long":17145},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db882887-a890-4433-8b8a-8e9b2f4455e8","sequence":{"long":17146},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bf73be7-b8cd-4527-9f6f-ae4611099f06","sequence":{"long":17147},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b4bc0c8-77a3-4847-9c0e-1712498b6524","sequence":{"long":17148},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0b59541-9c09-4593-a13f-5b1b63f09ec8","sequence":{"long":17149},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33efca7f-083b-4e6a-8f80-80de53acfba4","sequence":{"long":17150},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1e27791-1c54-4b99-9177-ba9f6ddfe693","sequence":{"long":17151},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de9c9fce-7349-47d6-84e7-ecb4ad127542","sequence":{"long":17152},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d3ef8a0-f8b5-4fd0-93f6-65a1002f1262","sequence":{"long":17153},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e5eb30f-37bf-4f47-a973-b8d5700e1d6a","sequence":{"long":17154},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447653827442,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"705f7e50-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1573,"parentSubject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584447664016709},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7abce9a0-e4f3-4df6-a8e6-8dad269d831e","sequence":{"long":17155},"type":"EVENT_FORK","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_vfork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1573","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1573","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f17266de-dc48-412f-933e-ade2993152bf","sequence":{"long":17156},"type":"EVENT_EXECUTE","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"f3f7eadf-5a79-ba55-b95a-881315bae424"},"predicateObjectPath":{"string":"/bin/sh"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584447664016709,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sh -c wget http://www.google.com/index.html","ppid":"1572","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55de0dbb-23ab-495e-9050-4be5cd54d8ff","sequence":{"long":17157},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35bc8ee4-964f-4713-a7eb-abc3bd2e1c67","sequence":{"long":17158},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e88e3807-3d09-4687-b358-60841a071cad","sequence":{"long":17159},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c817aef7-c43c-48d0-81e4-d2bc40d2d70d","sequence":{"long":17160},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4db1f028-22dd-4aba-a93b-b57d111da14a","sequence":{"long":17161},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66e317e9-11d5-4d0f-b369-db6e64bddc90","sequence":{"long":17162},"type":"EVENT_READ","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd61a74c-a8d0-4289-aff0-af231c4dde83","sequence":{"long":17163},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b13a87ea-0548-46dc-a957-e19be2aa0ebb","sequence":{"long":17164},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":{"string":"/lib/libedit.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83500501-4a05-413e-acab-345b6f74b100","sequence":{"long":17165},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e51da97f-9924-434b-95e8-d78b276cf179","sequence":{"long":17166},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28ee3a3d-a1d8-410e-b2ec-61a114ae2451","sequence":{"long":17167},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85924a08-9062-4849-8f96-e292bbac7b43","sequence":{"long":17168},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2568192},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe5c6405-31c1-40a8-874f-49b8da4faf80","sequence":{"long":17169},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"334c5ab9-9a54-444b-bf1f-0bea33b7dedb","sequence":{"long":17170},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2650112},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84b81388-4721-4fd2-a60f-0ba14acdd1bb","sequence":{"long":17171},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8126ac24-a2aa-4e57-a7bc-2b2a1d69d57e","sequence":{"long":17172},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2789376},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9abe4d69-fadb-4a37-8f87-507ccf04a557","sequence":{"long":17173},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"152a8717-716f-265c-af71-11d7ac26ac9f"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53682fd2-889c-4c8b-a504-9b315abb5cfc","sequence":{"long":17174},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ced2785c-4256-446c-981c-6f9a31a6872b","sequence":{"long":17175},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a02a8cb-9cd0-4ae3-9e73-e2ffb317570c","sequence":{"long":17176},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4931138a-bcd0-4104-914f-ab103da84cc8","sequence":{"long":17177},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2818048},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b31dfbf4-f54d-42a6-9a8a-d6b4dd4db26a","sequence":{"long":17178},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2818048},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb406d9b-afe4-4c61-9c51-ba76055f51f1","sequence":{"long":17179},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3334144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4e2f26b-d8bb-4b9c-a9b0-0705de268a89","sequence":{"long":17180},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":3334144},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d31b7b0b-c6a7-4460-aa41-bebcde9e481b","sequence":{"long":17181},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4665344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79e36e11-971e-45d7-8207-25c7ce563178","sequence":{"long":17182},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4665344},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d07cb086-6331-4515-be15-8f365346a8ce","sequence":{"long":17183},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4a928704-fe01-4837-a2cf-849018e98148","sequence":{"long":17184},"type":"EVENT_OPEN","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":{"string":"/lib/libncursesw.so.8"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a1cf980-83f7-4d65-a700-7c9751e2d035","sequence":{"long":17185},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"494749e7-e9b7-4f44-a514-0e847f222526","sequence":{"long":17186},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2564096},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10c94b90-31a5-477a-b28b-2e7fe57c000b","sequence":{"long":17187},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6983680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee8aeeb9-fe8b-41d6-81e9-1111cd84ae9e","sequence":{"long":17188},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":6983680},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8850a74a-b296-4ac6-a95f-76372116bb2b","sequence":{"long":17189},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccc66561-f5c6-44dd-ad31-3e05e626b552","sequence":{"long":17190},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7151616},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9e24168-3359-4ed5-a616-65a91343c66c","sequence":{"long":17191},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7356416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a63bcd08-5d68-4e88-b3d0-b3fb3b5a65af","sequence":{"long":17192},"type":"EVENT_MMAP","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":7356416},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e782314-2a14-4d21-939e-b1e074f8da39","sequence":{"long":17193},"type":"EVENT_CLOSE","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"04da366e-0b24-2e5c-a40b-b8adfc2e2ba6"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da0f9cf3-de62-4b8b-a037-adc02e1db4f8","sequence":{"long":17194},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d660f9a-9d28-43cf-be99-b79ee365103d","sequence":{"long":17195},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2eba02e6-0b82-4892-9374-e8c5f2c50abd","sequence":{"long":17196},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f967cba7-c341-466c-9d75-03ce036829ce","sequence":{"long":17197},"type":"EVENT_MPROTECT","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a63e8936-6a90-410c-ae46-7670f9ebb9c0","sequence":{"long":17198},"type":"EVENT_WRITE","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":20},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e788ea7-4fbb-499e-b1a0-b8f0b33f0581","sequence":{"long":17199},"type":"EVENT_EXIT","threadId":{"int":100121},"subject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"705f7e50-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1572","exec":"sh"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37e2578d-1fc7-4d66-a8fe-3c0fe9e4bcef","sequence":{"long":17200},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"705edb2a-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"with_wget"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90e0cd55-5df4-4263-92ba-9da27af3cac2","sequence":{"long":17201},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":725},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d95722b4-909a-4026-99db-365e6705bf5c","sequence":{"long":17202},"type":"EVENT_LSEEK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1866},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"7060a8b6-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1574,"parentSubject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584447664016709},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46ac9359-fdeb-4dae-8e72-87de123b97f4","sequence":{"long":17203},"type":"EVENT_FORK","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1574","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1574","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3f9ed59-ddb2-409a-8aff-5553ca362636","sequence":{"long":17204},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","return_value":"0","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a938149-269a-4319-9d30-a1f66d686e79","sequence":{"long":17205},"type":"EVENT_EXECUTE","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"6ce4ece2-78d7-5951-9778-d00331594fca"},"predicateObjectPath":{"string":"/bin/sleep"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584447664016709,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"sleep 1","ppid":"1513","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d912f93-ae4f-4d4f-98c9-8e4afd30d63f","sequence":{"long":17206},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eebfea3b-e63b-4f3e-891b-854794fc6757","sequence":{"long":17207},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc2dde27-0774-411e-86f8-8122a2059127","sequence":{"long":17208},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"707df366-c3ec-45ec-975f-548d4a6115df","sequence":{"long":17209},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fde356b0-cf9d-465d-80af-ce42fbdb137d","sequence":{"long":17210},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"483d7c93-2193-46fb-a97c-70f90b0bca7b","sequence":{"long":17211},"type":"EVENT_READ","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3e5c714-843f-4407-8be0-5374727f2df1","sequence":{"long":17212},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a99b51c-7076-48e2-b105-950709bcd817","sequence":{"long":17213},"type":"EVENT_OPEN","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"134ceb8f-3fab-4597-a1a8-8033f9bf17cb","sequence":{"long":17214},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9de10e6-c4b9-46d5-9df5-965264a48d52","sequence":{"long":17215},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2387968},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf0feabc-6339-4679-8217-18b85f8a1dfe","sequence":{"long":17216},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b0cc84a-f848-4cdc-86c6-6638d205020a","sequence":{"long":17217},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2392064},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f223c6f5-a79f-4687-a82a-b33a113ea816","sequence":{"long":17218},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7de33e41-c06e-4744-a806-9cf024e80814","sequence":{"long":17219},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2908160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18ebbd8a-f03c-4f29-b914-96cae4984ae3","sequence":{"long":17220},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c37e191-c768-426b-8a9e-6d410d1dc8a6","sequence":{"long":17221},"type":"EVENT_MMAP","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":4239360},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_WRITE']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5f5a829-79fa-482c-8a97-2ae5c74e8cb7","sequence":{"long":17222},"type":"EVENT_CLOSE","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1474ebe1-a84d-4ad3-acf2-e6168520040b","sequence":{"long":17223},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7933eee-aeff-4608-a6e5-8cf39fa65f11","sequence":{"long":17224},"type":"EVENT_MPROTECT","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584447664016709,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71c03023-a167-4813-903e-d58b416ae119","sequence":{"long":17225},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1200432},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20b708f6-809c-4249-8c64-2d789d8e0a45","sequence":{"long":17227},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d10f241f-2741-4e01-997f-ea68b50cc370","sequence":{"long":17226},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa4ee8b7-b550-44f0-ada4-1d956322bdbb","sequence":{"long":17229},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd274929-c488-42ca-a1f4-b2cbe35402bc","sequence":{"long":17228},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"950a201f-c93f-4d96-b63e-d8fa1748784b","sequence":{"long":17231},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9b50650-8154-46ca-a8fd-d49968a48dbe","sequence":{"long":17230},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bb924db-e0c6-43e0-8adb-882e393971a4","sequence":{"long":17233},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca428f8d-b3fe-415e-8543-27485b813615","sequence":{"long":17232},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa0ed20c-84d3-4b98-8770-e46b896aa5ef","sequence":{"long":17235},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba551a9f-257c-454c-b249-d7489fc57950","sequence":{"long":17234},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23018a78-cc86-44ca-af5e-1cc2772a8467","sequence":{"long":17237},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7aaff6c5-ff9f-4264-9775-a4e12b58127f","sequence":{"long":17236},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19e82a8d-c6f2-4901-ac3f-f87f7113b64d","sequence":{"long":17238},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9afa06e-fa9e-45d0-8b7f-48fb703025fc","sequence":{"long":17239},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7c24bb4-382e-46df-af0e-6bf8f59b5b19","sequence":{"long":17240},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cf5da0e-ca00-4ef3-9058-1555e83be858","sequence":{"long":17241},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4917},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07f0e776-8e03-4d5f-adfc-e17ecfca8262","sequence":{"long":17242},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4970},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"117e7eac-65d9-461c-bbe0-bba5eaff0b9f","sequence":{"long":17243},"type":"EVENT_WRITE","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef88fb8e-afa1-44a7-9338-77816a285233","sequence":{"long":17244},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28f01164-cc24-4485-acf3-3e12337c4bbc","sequence":{"long":17245},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7186263-3a7c-4f4b-9734-10bb7d92bbba","sequence":{"long":17246},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4025},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5e48f2f-f35f-4fe2-9262-71ff6eed2d73","sequence":{"long":17247},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4078},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb2dd971-89d1-4131-bb43-76d8811e4a71","sequence":{"long":17248},"type":"EVENT_WRITE","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d647ea6b-b720-4d0c-888c-5d340066ff16","sequence":{"long":17249},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20f441ba-b05b-4bcc-acdb-89099372318e","sequence":{"long":17250},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58b1abdc-fbc9-46e5-9758-3c3c92c0b123","sequence":{"long":17251},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":5069},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa1e11de-2a87-42a4-acfb-82d40baeede1","sequence":{"long":17252},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5122},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3fc01ae2-f446-4ef3-9ff6-bafe68927ebe","sequence":{"long":17253},"type":"EVENT_WRITE","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448124267696,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a0ac0e97-342d-46ee-ada3-cd4e8a26f23d","sequence":{"long":17254},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448133852278,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba204dd5-bd4b-47c1-9362-a394f697d513","sequence":{"long":17255},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448133852278,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ca67756-dd1a-4453-a86b-331a095cba2e","sequence":{"long":17256},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448133852278,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4054},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ff86a93-3556-482d-8bfe-fa0ded5ded8d","sequence":{"long":17257},"type":"EVENT_WRITE","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448133852278,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21bf39be-a2b3-4b69-9026-cd65eb3770cc","sequence":{"long":17258},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448133852278,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13255c10-9e63-4fc6-93e6-50ab0a9577f5","sequence":{"long":17259},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448133852278,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5acf499-f84a-428b-ac0e-cc0dc1a0d248","sequence":{"long":17260},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448133852278,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4798},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"137da429-6b50-4c21-9650-2401642eb557","sequence":{"long":17261},"type":"EVENT_WRITE","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448133852278,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2801614c-5ddc-4609-8cc7-c4fd8fe075e3","sequence":{"long":17262},"type":"EVENT_READ","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448133852278,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cb8bc1e-f3fa-49c6-a3a1-e087fa4bb3b7","sequence":{"long":17263},"type":"EVENT_SENDTO","threadId":{"int":100287},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448133852278,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17371","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ce60c7b-d9bc-4d3b-8f1a-09b1ef4ce0a0","sequence":{"long":17264},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448133852278,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17371","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6dfa1b4-09bc-4960-85b2-eabb5938454f","sequence":{"long":17265},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448133852278,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"895b6902-caca-4949-964e-b3488bbea6f9","sequence":{"long":17266},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448133852278,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3c5ac63-3b12-4810-88be-0e14fd6cfbab","sequence":{"long":17267},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448133852278,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6381708a-e2ce-498d-beb7-28ad15504208","sequence":{"long":17268},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448133852278,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4107},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a7c30d2-c964-4987-a178-ac67d93dc0c8","sequence":{"long":17269},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448174053876,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"818a9ac7-6aea-46fe-a472-9bf321389934","sequence":{"long":17270},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448174053876,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3852e59-0147-4921-8113-e5873cb10ccc","sequence":{"long":17271},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448174053876,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4851},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"993bd319-6342-4b35-bc5c-95c191659b40","sequence":{"long":17272},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448174053876,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75a33eda-1b4a-40b4-b1f9-0074ba6ebabb","sequence":{"long":17273},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448733851940,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1214072},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3f825af4-1ebd-4172-b721-b2680b9b3afa","sequence":{"long":17274},"type":"EVENT_EXIT","threadId":{"int":100139},"subject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"7060a8b6-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448733851940,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1513","exec":"sleep"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98808bc8-b6e0-4c37-899a-2336caea2bf9","sequence":{"long":17275},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448733851940,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":18},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf0aff00-4b03-4ee1-8369-30c81f1e2abe","sequence":{"long":17276},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448733851940,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc99183d-21e0-4336-a707-9e01287109da","sequence":{"long":17277},"type":"EVENT_WRITE","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448733851940,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"1","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72476ec6-9629-46e7-a7a5-a6dca2400711","sequence":{"long":17278},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"a518b5ee-67b5-d155-b567-a865b5d16327"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448733851940,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"255","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c71f8110-bcc4-4110-96a7-06bcb77fd6dd","sequence":{"long":17279},"type":"EVENT_EXIT","threadId":{"int":100120},"subject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"604abe51-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448733851940,"names":{"array":["aue_exit"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab39d817-6a3d-4dea-8c01-9618c9c111b3","sequence":{"long":17280},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448733851940,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9886878f-aba3-4a82-b196-6788780c288f","sequence":{"long":17281},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584448733851940,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":50},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c098f78b-3a58-44ee-b345-19abfd35aee7","sequence":{"long":17282},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584449553879164,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84b27af6-4e9a-4b82-bb32-9190b6f76cca","sequence":{"long":17283},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584449553879164,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17372","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f3535c9-9bf4-408c-9e37-1890bf91680e","sequence":{"long":17284},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584449553879164,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17373","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"568682f7-c3eb-4170-8ba1-0a8b90903925","sequence":{"long":17285},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584449553879164,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17374","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4d407e8-34f3-44a3-99ac-2bbaae010554","sequence":{"long":17286},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584449553879164,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17375","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34f5c02e-7daf-4692-97ac-aecdc945b9c3","sequence":{"long":17287},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584449553879164,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17372","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"026a9e74-4586-4b34-9e0b-b2cc736c6dcd","sequence":{"long":17288},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584449553879164,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17373","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32aef7df-1ab6-4de7-ab63-de454a1fcf96","sequence":{"long":17289},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584449553879164,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17374","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d9bd2ed-2a19-4547-8657-cd115bda41e9","sequence":{"long":17290},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584449553879164,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17375","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c2ffc34-b270-47d5-bb5f-4c436bf7346b","sequence":{"long":17291},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584449743875592,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1216062},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1641d98a-7749-4d21-8587-a0430e999684","sequence":{"long":17292},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1216062},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2b3f8b1-599f-4a45-9dbe-5889b755cbdf","sequence":{"long":17294},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fdee0d4c-1c63-417b-add6-b036fa69dfa4","sequence":{"long":17293},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80cb750a-e0df-4ad6-9fd1-6d86ee70187f","sequence":{"long":17296},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47d7edca-6206-4ce3-adaa-473279cf85db","sequence":{"long":17295},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c3b2fd5-dcfd-4440-8283-0f54438fcb34","sequence":{"long":17298},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e7f1691-d285-4dd7-97c9-d73d95286ac8","sequence":{"long":17297},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"614d43af-e6e3-42d0-9057-6ffdd006c3f0","sequence":{"long":17300},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c917b43-e4a1-470b-92db-db9f89bd20ef","sequence":{"long":17299},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cd33806-df11-4219-b0c7-98d2dbacc9d9","sequence":{"long":17302},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0589afc-8290-4fa3-b7d1-64a4368c3fb0","sequence":{"long":17301},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7e60c06-ec83-47ca-89e3-cc1a4263817a","sequence":{"long":17303},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c11adc7-3e46-429e-b102-9a6d5ec49fea","sequence":{"long":17304},"type":"EVENT_READ","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed6ba530-0b1b-4fd4-bc30-bf2060303311","sequence":{"long":17305},"type":"EVENT_READ","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbbfe370-6225-4331-8f39-5cdfcfd49a40","sequence":{"long":17306},"type":"EVENT_READ","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4947},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33e040b3-cd1a-44c2-ba27-503a1a4c3058","sequence":{"long":17307},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":5000},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e78950c-3bd4-4d26-ac85-1b874f6a428f","sequence":{"long":17308},"type":"EVENT_WRITE","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"804fb59b-5b67-4e8a-892f-8443a784d549","sequence":{"long":17309},"type":"EVENT_READ","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"939563fc-089e-462c-bbf1-a1f26ec90fc6","sequence":{"long":17310},"type":"EVENT_READ","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a5dbf71-7b5f-48fb-accd-31fedd5ca9a9","sequence":{"long":17311},"type":"EVENT_READ","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4332},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12c086e4-5811-4bd1-86ad-8520c69a8526","sequence":{"long":17312},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4385},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8db72310-1753-41f8-9719-443e1837dee3","sequence":{"long":17313},"type":"EVENT_WRITE","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0f793895-0906-46f0-b78a-dc4aa99d9ef8","sequence":{"long":17314},"type":"EVENT_READ","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e57c835-21bb-4168-820e-7b3d74b051d6","sequence":{"long":17315},"type":"EVENT_READ","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc741d88-e927-489c-b434-42022d30e56c","sequence":{"long":17316},"type":"EVENT_READ","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4349},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ac0c853-a18a-44da-84d3-c72babd938b4","sequence":{"long":17317},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4402},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"553c04c4-aebd-43cf-8cb9-e62ae47234c1","sequence":{"long":17318},"type":"EVENT_WRITE","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6810b96-3c2d-41e7-a1a3-5de9b3266664","sequence":{"long":17319},"type":"EVENT_READ","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"004e3fe7-059b-4c78-9ef8-5cdb70a24952","sequence":{"long":17320},"type":"EVENT_READ","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8d1e02f-ba4c-4618-b877-88f85db7046c","sequence":{"long":17321},"type":"EVENT_READ","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1986},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7316477d-d772-42d7-a6d8-1375576c2906","sequence":{"long":17322},"type":"EVENT_WRITE","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2dac57f-81c9-4f5b-9e68-ba5d391eaafa","sequence":{"long":17323},"type":"EVENT_READ","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a2eb703-9bc4-4bf8-8812-c3a4f8d61f37","sequence":{"long":17324},"type":"EVENT_SENDTO","threadId":{"int":100288},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17376","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42573352-fbba-41f2-b90a-2d0d9d646703","sequence":{"long":17325},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450124330093,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17376","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9986933-7667-4976-91f3-2abf98c8a72c","sequence":{"long":17326},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450133851536,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa338e33-3c88-4075-a7d1-b6a21d9988ae","sequence":{"long":17327},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450133851536,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60984aeb-c8d6-4ea1-accb-4b354b1124dc","sequence":{"long":17328},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450133851536,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"002c68cb-195e-44df-8bd8-eb79d346e469","sequence":{"long":17329},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450133851536,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2039},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"937bb421-745f-480a-8811-9300552f853f","sequence":{"long":17330},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450174112545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab739dfe-3eb9-4b86-845f-d4210c60bf4e","sequence":{"long":17331},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450174112545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"16ff6929-4af0-4d15-aaa0-4beace8870d5","sequence":{"long":17332},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450174112545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abf15858-d409-412d-81bf-52a7727e2a87","sequence":{"long":17333},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450174112545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9555834e-d799-4a7f-938d-31c3efac790f","sequence":{"long":17334},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450174112545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"597aabf2-1661-4b93-a43a-f2f6dd437ce3","sequence":{"long":17335},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450174112545,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c618ddf8-746b-4ca5-b0f7-3e3bc9abb893","sequence":{"long":17336},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584450773921816,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1219697},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0298fae6-922e-48a0-ab1f-82cc7e42e3d0","sequence":{"long":17337},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584451774143857,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1220060},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dccf0abd-14fe-40eb-bdf0-6688fca7d6ea","sequence":{"long":17338},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1220060},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72c85911-bdc7-4033-81bb-ea13fc10cf81","sequence":{"long":17340},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc648e3f-5aba-4567-8df0-ee4a0f4fbb3f","sequence":{"long":17339},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ba23038-a6f7-4dd8-b81e-9435d784ea00","sequence":{"long":17342},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"085e3804-668f-43df-a388-b3117e031510","sequence":{"long":17341},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cd720a9-253f-47f2-96d4-0ac324934910","sequence":{"long":17344},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"82ab84d0-e863-429f-8c81-25ecb769ec45","sequence":{"long":17343},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45221f65-f682-436f-bd6d-5ef4df411f15","sequence":{"long":17345},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11801fcf-a241-44fc-8fd8-2b8649757d44","sequence":{"long":17346},"type":"EVENT_READ","threadId":{"int":100289},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90a4a23a-811b-4566-b900-8f9877db6d4c","sequence":{"long":17347},"type":"EVENT_READ","threadId":{"int":100289},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf2050ca-beb3-4c28-a437-7884c0259cc9","sequence":{"long":17348},"type":"EVENT_READ","threadId":{"int":100289},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3631},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8305a0f-5b12-4930-ad15-b39c956b8952","sequence":{"long":17349},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3684},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf9e24aa-c088-4ced-b9a6-ab26280b98b0","sequence":{"long":17350},"type":"EVENT_WRITE","threadId":{"int":100289},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71cc3a90-34e0-4dc0-8a16-2526c4d2e972","sequence":{"long":17351},"type":"EVENT_READ","threadId":{"int":100289},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1e76166-3e25-4971-893c-4e726b41683c","sequence":{"long":17352},"type":"EVENT_READ","threadId":{"int":100289},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ae94af5-343c-4beb-9d04-9a064fe9d09f","sequence":{"long":17353},"type":"EVENT_READ","threadId":{"int":100289},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e24df44-390a-4657-a2db-915e33ee9a8a","sequence":{"long":17354},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e64422b-9c79-46b7-b0fa-d9f802546491","sequence":{"long":17355},"type":"EVENT_WRITE","threadId":{"int":100289},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"010f7682-096c-4e02-847c-3410ca8db865","sequence":{"long":17356},"type":"EVENT_READ","threadId":{"int":100289},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35f56ec5-c88b-4e64-9999-af90911ed1d2","sequence":{"long":17357},"type":"EVENT_SENDTO","threadId":{"int":100289},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17377","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5196bc3d-7946-4335-859e-a991a9bd4e18","sequence":{"long":17358},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17377","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59a1a134-24fc-4a9f-9512-731d0d59c7f0","sequence":{"long":17359},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452123993319,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdcb9c1b-b4e2-4d07-99ff-a85bd53b9191","sequence":{"long":17360},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452134082761,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efb4658c-e311-4341-a9f8-b4a40feaacda","sequence":{"long":17361},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452134082761,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cec0706-148d-4e9b-8b36-406ba26ecec8","sequence":{"long":17362},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452134082761,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"145dbc5d-f2d5-4947-bc95-64592ff9696b","sequence":{"long":17363},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452134082761,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91107668-0786-4188-8a7d-494162064d8a","sequence":{"long":17364},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452553881776,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb512fbb-6d7f-4e22-98d7-74873aaa1590","sequence":{"long":17365},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452553881776,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17378","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9151bb19-3695-45ce-b77a-55f8c4ed2d7a","sequence":{"long":17366},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452553881776,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17379","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1046fdfc-bb74-4fba-af41-46177252f19f","sequence":{"long":17367},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452553881776,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17380","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d404f73f-0da2-4042-af17-8c652e87462c","sequence":{"long":17368},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452553881776,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17381","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a605be1a-3a83-4abe-917b-506b0ee20708","sequence":{"long":17369},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452553881776,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17378","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99ea8ddc-b11a-4f54-8829-8f803a63c873","sequence":{"long":17370},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452553881776,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17379","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"704a42d2-e796-44a3-b47a-d89fc55af8a5","sequence":{"long":17371},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452553881776,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17380","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4984f941-cb6f-4e20-ada6-24ff1cb1d74d","sequence":{"long":17372},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452553881776,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17381","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cb03887-7fb9-4909-9138-18878763ac2a","sequence":{"long":17373},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584452794082676,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1223288},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"464d7c88-2f4c-4f32-b8d4-ed7db3c775e0","sequence":{"long":17374},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584453804654643,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1223649},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59cd9699-981c-43fb-9d24-42bb40b2fd3b","sequence":{"long":17375},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1223649},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb4c99ae-d948-4756-85f2-15367a7a85b6","sequence":{"long":17377},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aaa884c5-56fb-4310-bbb6-447eba92b0a9","sequence":{"long":17376},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ff8caa2-0237-409b-ba2b-0c07afe03929","sequence":{"long":17379},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7583d0c1-b9d9-46eb-ba27-610e0abce5c9","sequence":{"long":17378},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce2cb80f-c23d-4673-9317-8ddca61d4ec4","sequence":{"long":17381},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"178c8aff-0b20-4b2b-bd0a-5d57de95c5ac","sequence":{"long":17380},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d70e887-c044-4cce-b716-a8624f390a68","sequence":{"long":17382},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48c3d987-c607-4cf7-8056-df06957408e8","sequence":{"long":17383},"type":"EVENT_READ","threadId":{"int":100290},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b85e748-7be0-4845-8f51-dec670d586bb","sequence":{"long":17384},"type":"EVENT_READ","threadId":{"int":100290},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2a33477-7d26-426c-997a-3aa951a3eba3","sequence":{"long":17385},"type":"EVENT_READ","threadId":{"int":100290},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3224},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aebf3b76-2f04-4ec7-8364-beefe7d8d1b3","sequence":{"long":17386},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3277},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99bd800c-fbb2-4351-b03e-b2cfa3cf093d","sequence":{"long":17387},"type":"EVENT_WRITE","threadId":{"int":100290},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9d58499-1ef8-4b3b-aab8-eae0d7e23203","sequence":{"long":17388},"type":"EVENT_READ","threadId":{"int":100290},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81a447e4-7a04-40f0-a8b0-dd9fd6ced045","sequence":{"long":17389},"type":"EVENT_READ","threadId":{"int":100290},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23bd6cb1-aec4-45b6-919e-83f1aac41d87","sequence":{"long":17390},"type":"EVENT_READ","threadId":{"int":100290},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":357},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5e8b2f66-63cb-4a87-b3bd-49e2d3064e04","sequence":{"long":17391},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":410},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cb04484-71a6-42a8-a8e2-a58ba80aa5ca","sequence":{"long":17392},"type":"EVENT_WRITE","threadId":{"int":100290},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e5c7775-aeb0-4c32-ae41-21c92d506d0f","sequence":{"long":17393},"type":"EVENT_READ","threadId":{"int":100290},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b27e1011-e463-4f61-8be8-468319d7dde8","sequence":{"long":17394},"type":"EVENT_SENDTO","threadId":{"int":100290},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17382","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ce3f2c7a-f5ae-4443-8a58-24c1fbe73c41","sequence":{"long":17395},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17382","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1b69086-9514-4422-9178-5cf5c8c2d4a0","sequence":{"long":17396},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454124243001,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"842a757c-039b-4899-a109-1fed13c34813","sequence":{"long":17397},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454134101141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61b41d8a-cf7f-440b-b207-70c397c21bde","sequence":{"long":17398},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454134101141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d40c83d8-3ff7-40cb-9a81-6d2acf0190ca","sequence":{"long":17399},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454134101141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab42652d-de4c-4c08-81ac-9f3ff2404476","sequence":{"long":17400},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454134101141,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92948331-b01d-4f6b-a49d-92f7b4668583","sequence":{"long":17401},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584454824464327,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1226066},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"073b9966-0609-4ebc-8e2c-55719a0eec43","sequence":{"long":17402},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584455553865301,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1eb11c43-bc59-4203-9b4b-2f92c88b370c","sequence":{"long":17403},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584455553865301,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17383","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0af317b6-faee-484a-8447-39bdec848530","sequence":{"long":17404},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584455553865301,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17384","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b5d3532c-550f-41e0-8bbd-82a0aaacb2b1","sequence":{"long":17405},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584455553865301,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17385","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba6297fe-a3dd-4719-a892-c97144acbadb","sequence":{"long":17406},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584455553865301,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17386","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c17900c-86a7-47f8-bc20-11fba961df69","sequence":{"long":17407},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584455553865301,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17383","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d678b2e7-1159-4483-a23b-b5e59e9f49e8","sequence":{"long":17408},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584455553865301,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17384","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fbf6e62-7780-4879-9f26-de4c31aa51ac","sequence":{"long":17409},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584455553865301,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17385","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"648771dc-657a-4119-abb8-dae634efaca5","sequence":{"long":17410},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584455553865301,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17386","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13a543d4-adf6-4462-8533-0c3e38950b92","sequence":{"long":17411},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584455833894270,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1227258},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb387fd8-68da-4bc9-b523-3caec2e3818b","sequence":{"long":17412},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1227258},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3345455c-d65d-489f-b37d-ee58d8efd92f","sequence":{"long":17414},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb3d7850-faa4-415b-b1f6-f9a68e4fb541","sequence":{"long":17413},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3bcc008a-ecc4-4a07-927b-57e04e83640b","sequence":{"long":17416},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d089121-3a27-4a4d-8429-c58b0fd4816c","sequence":{"long":17415},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f2468ca-bf60-4a23-806a-e5dbd742759d","sequence":{"long":17418},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c0d22f7-671d-42b6-8204-c87b649f2ec8","sequence":{"long":17417},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d8e0a5d-6b7b-469d-ba40-45bb0b96f658","sequence":{"long":17419},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7868ff32-3e8c-4fe8-b0c4-7d64ac4ede03","sequence":{"long":17420},"type":"EVENT_READ","threadId":{"int":100291},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ded9bdf-49cd-43c4-bcb6-639be01c1f85","sequence":{"long":17421},"type":"EVENT_READ","threadId":{"int":100291},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acfdb5b0-6915-4b11-9bd6-58b24b244860","sequence":{"long":17422},"type":"EVENT_READ","threadId":{"int":100291},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2372513a-2d35-41a5-a6e6-6a65da43169a","sequence":{"long":17423},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2466},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9123805-4fcc-4697-bfe4-a684ff5dce14","sequence":{"long":17424},"type":"EVENT_WRITE","threadId":{"int":100291},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb9af592-df44-4588-9c59-b011f287e4fa","sequence":{"long":17425},"type":"EVENT_READ","threadId":{"int":100291},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"839d0616-df85-4f86-9b23-904b1f93b906","sequence":{"long":17426},"type":"EVENT_READ","threadId":{"int":100291},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7ce11e6-7288-406a-b777-8ff1eb9fa63f","sequence":{"long":17427},"type":"EVENT_READ","threadId":{"int":100291},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1188},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"021248b5-49da-49e4-839c-82c2050931da","sequence":{"long":17428},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1241},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63c26ca7-4572-49d8-98ad-c17f1fa53239","sequence":{"long":17429},"type":"EVENT_WRITE","threadId":{"int":100291},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66f9a966-29cb-4874-9ad2-d068ccf5013b","sequence":{"long":17430},"type":"EVENT_READ","threadId":{"int":100291},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49099993-0e4f-490f-90c0-905c0348e37f","sequence":{"long":17431},"type":"EVENT_SENDTO","threadId":{"int":100291},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17387","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d462eb8f-91fc-481a-a605-ff30c785a6de","sequence":{"long":17432},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17387","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"955a8cfd-2328-489b-9057-990f73e7eec4","sequence":{"long":17433},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456123849125,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db26345b-18f3-430d-a188-4e5862fb167c","sequence":{"long":17434},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456133892794,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90c600ff-4b19-4cbd-a8d0-c9840067d2b8","sequence":{"long":17435},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456133892794,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6cb2a2be-3107-4a78-b793-95012054c594","sequence":{"long":17436},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456133892794,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd37ad01-efdb-4917-ac8f-203972b4b5d3","sequence":{"long":17437},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456133892794,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c1c5ee0a-d8cb-4087-99c8-afac66568f01","sequence":{"long":17438},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584456853907891,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1229683},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f55fad09-4c7f-43ad-a67b-5c53934e874c","sequence":{"long":17439},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584457864192805,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1230046},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c4b784a-e143-407a-bf7c-a2c06e74037d","sequence":{"long":17440},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1230046},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71b6f422-a4df-4244-aa28-827da9ba980f","sequence":{"long":17442},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f56c12e-e2d8-432c-86f2-fd4eda38881f","sequence":{"long":17441},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4252df9-97db-4bb4-a6b0-1144ba54973f","sequence":{"long":17444},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ffa74f7-4723-448f-b8ed-e1d1faedbe79","sequence":{"long":17443},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5276c1a-f93d-49b3-b1b3-4ba3b29b3488","sequence":{"long":17446},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5bb51a9-6f3c-4563-8e07-ef73ef513f57","sequence":{"long":17445},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"167a5cd7-aead-4843-a553-b1f629303895","sequence":{"long":17447},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfa1cf82-7898-464c-ba22-7e4ab58c2af5","sequence":{"long":17448},"type":"EVENT_READ","threadId":{"int":100292},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a6ca029-9f1d-4a17-b9c0-ff92e8de567b","sequence":{"long":17449},"type":"EVENT_READ","threadId":{"int":100292},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6b261af-91c9-4894-ab70-76d6fc964fcf","sequence":{"long":17450},"type":"EVENT_READ","threadId":{"int":100292},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2421},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56e04f73-5a23-444f-9c42-e2e5d4bef1ca","sequence":{"long":17451},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2474},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"add78111-470d-4d58-8063-02a74ff9c539","sequence":{"long":17452},"type":"EVENT_WRITE","threadId":{"int":100292},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"010949a8-3e94-417b-9177-00aa38b9432e","sequence":{"long":17453},"type":"EVENT_READ","threadId":{"int":100292},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da588eeb-355a-4e25-8e56-8f45c3ceb5cf","sequence":{"long":17454},"type":"EVENT_READ","threadId":{"int":100292},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff828587-41be-49c2-9d8c-6f092039ef5c","sequence":{"long":17455},"type":"EVENT_READ","threadId":{"int":100292},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95d92d56-d9cc-4a7c-83b0-79f2b656db57","sequence":{"long":17456},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd4f4683-1b70-4cd1-866b-32cf5d7952e8","sequence":{"long":17457},"type":"EVENT_WRITE","threadId":{"int":100292},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9c0f67a-b64b-4643-b1d7-f33e93b46505","sequence":{"long":17458},"type":"EVENT_READ","threadId":{"int":100292},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4a6dcfa-e6ca-44db-a4e6-9846b5c9dd1f","sequence":{"long":17459},"type":"EVENT_SENDTO","threadId":{"int":100292},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17388","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac0dc6fc-ad71-479b-8996-25e8d335c5fc","sequence":{"long":17460},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17388","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"decdc029-25e4-4942-9b34-296872b0c21b","sequence":{"long":17461},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38a321d1-283c-4c22-9947-5e6c62d75d84","sequence":{"long":17462},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35ccc865-ad9a-4648-8ff0-7277229554bf","sequence":{"long":17463},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458123987075,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b75a6fb4-0b4e-4a6e-a424-0e5a352be7ad","sequence":{"long":17464},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458134048959,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da09e2ed-6aee-4999-bbe9-7bc01bf7f917","sequence":{"long":17465},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458134048959,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b812f0b-a168-45a7-9168-b65842d6fc28","sequence":{"long":17466},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458554036441,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"075e509b-dbee-4d9c-b213-b616c2eeb4d1","sequence":{"long":17467},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458554036441,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17389","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c07ab00d-8414-4466-880b-77967585d4c4","sequence":{"long":17468},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458554036441,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17390","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"272853e7-6e9f-4e17-b5e4-864e7ec7ed73","sequence":{"long":17469},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458554036441,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17391","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f178ef0f-9475-4952-aece-aa6b89e48994","sequence":{"long":17470},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458554036441,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17392","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"109c91fa-1e5c-44c4-904b-9341296395fb","sequence":{"long":17471},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458554036441,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17389","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab32ac7f-82ca-4acb-853d-54218662a5d4","sequence":{"long":17472},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458554036441,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17390","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0af2d8de-647f-4114-bc46-810a5a246add","sequence":{"long":17473},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458554036441,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17391","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5069d35d-0c4b-4247-8583-d6aa7505b5ed","sequence":{"long":17474},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458554036441,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17392","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b73c90d-5367-4b04-95f3-f3bd186f4f75","sequence":{"long":17475},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584458884115235,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1233276},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07bc3b5a-4866-442d-bc61-b9cf530736a3","sequence":{"long":17476},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584459893963834,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1233638},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ffdcbbf-ab54-4281-a588-df810002e8c6","sequence":{"long":17477},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1233638},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f47b9ef1-985d-4a21-97c9-5db27f5b9512","sequence":{"long":17479},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3ccf1e5-54d1-45c1-8573-0a5c65abcbff","sequence":{"long":17478},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55c106e0-0126-4d3e-90e9-57249ee15949","sequence":{"long":17481},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f81cf18-7215-47ea-92cc-92483f281ce4","sequence":{"long":17480},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b020e6b0-4571-4668-8f87-f3cc401a4a47","sequence":{"long":17483},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"389c289c-9f30-4d26-82a6-e6613d09ba89","sequence":{"long":17482},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c818906-6563-4461-bf00-0ee0694b8b79","sequence":{"long":17484},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ab58f47-4765-4e39-b6df-3a77c7b0946a","sequence":{"long":17485},"type":"EVENT_READ","threadId":{"int":100293},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38e19279-8e00-4be5-8f68-c26379786c70","sequence":{"long":17486},"type":"EVENT_READ","threadId":{"int":100293},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80c178ab-e98d-4e9f-a9eb-43f765ed4058","sequence":{"long":17487},"type":"EVENT_READ","threadId":{"int":100293},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3226},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a8d283e-166d-4be7-b659-ab491705311b","sequence":{"long":17488},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3279},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58ab6c5e-654c-4013-88ed-de08f276a16c","sequence":{"long":17489},"type":"EVENT_WRITE","threadId":{"int":100293},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d91b83c-509e-4ed2-a407-a9c13b1e65ad","sequence":{"long":17490},"type":"EVENT_READ","threadId":{"int":100293},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98a3f747-668f-4c32-9ebf-9a35820ab35e","sequence":{"long":17491},"type":"EVENT_READ","threadId":{"int":100293},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"539889f0-c0a1-4856-9b02-79b3eea7c099","sequence":{"long":17492},"type":"EVENT_READ","threadId":{"int":100293},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcdb2f02-1dde-4280-9827-8bad61e076dd","sequence":{"long":17493},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fb39713-1205-4875-87c7-a5a70003625c","sequence":{"long":17494},"type":"EVENT_WRITE","threadId":{"int":100293},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35a0957e-781a-453c-9481-17450128f86d","sequence":{"long":17495},"type":"EVENT_READ","threadId":{"int":100293},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c3c6803-c7b2-455c-bffd-ddc6d239ff8d","sequence":{"long":17496},"type":"EVENT_SENDTO","threadId":{"int":100293},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17393","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9eafdfc7-54a3-46f1-8c8c-e15aaaa04cbe","sequence":{"long":17497},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17393","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbfa663c-10c2-4238-8416-a0cedb5183c4","sequence":{"long":17498},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460124381599,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9dbbf19e-83d3-4070-91d5-baa1319effcd","sequence":{"long":17499},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460133918341,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7a711e7-3358-4a34-aebf-6b6786b22a14","sequence":{"long":17500},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460133918341,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"443ebac8-cd7a-4eb1-8dde-fb685b879daf","sequence":{"long":17501},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460133918341,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c57a1d7c-6a2c-4fc3-80d5-e9830fcd0871","sequence":{"long":17502},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460133918341,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a60b15d8-82c8-47f5-a1db-fdccadb04b48","sequence":{"long":17503},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584460914179428,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1236071},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6080560-ba06-4b77-ab55-5a6768d702f4","sequence":{"long":17504},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584461553865492,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1cf0abfd-4963-4c61-bac0-f32d9b251a25","sequence":{"long":17505},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584461553865492,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17394","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01f5c8af-3f3f-43f3-adb4-f4130af2bd8b","sequence":{"long":17506},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584461553865492,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17395","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67adcf8c-d7fc-4f9d-87f7-568416960921","sequence":{"long":17507},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584461553865492,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17396","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3219b0e-6a0d-432e-801f-e3157e5fd8f7","sequence":{"long":17508},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584461553865492,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17397","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cc0ee75-f447-413c-af10-f85d4cc68db8","sequence":{"long":17509},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584461553865492,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17394","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b87ea31b-3573-4605-8278-99c42cd31a31","sequence":{"long":17510},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584461553865492,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17395","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19f1637b-26ee-4e93-831b-9e86465f877e","sequence":{"long":17511},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584461553865492,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17396","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc941aad-e3ec-49dd-9687-b23f8eef4b46","sequence":{"long":17512},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584461553865492,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17397","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e99c235b-08aa-4208-ba26-bd64941eb3e7","sequence":{"long":17513},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584461923912427,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1237253},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8709746f-da0d-4233-a33d-46ff1d25dee6","sequence":{"long":17514},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1237253},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da1365ba-d726-4c26-9862-074469f14d81","sequence":{"long":17516},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bacb4a7f-bfe6-4e51-a85c-029baa9c0262","sequence":{"long":17515},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bad37a9-ed31-4937-b403-d5b1e1561745","sequence":{"long":17518},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cbcf38a-8d1f-4db8-9e75-b2dd15ef784a","sequence":{"long":17517},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40ef12cb-baf2-4921-8ed9-5594dfb71cb9","sequence":{"long":17520},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a049bc26-cb59-48ef-8ecd-bae4c6100ea8","sequence":{"long":17519},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91fbd125-66ab-4bdd-a0ed-1774e4bfc48d","sequence":{"long":17521},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24beb5a6-013f-484e-bf55-10fe0a9ce5f1","sequence":{"long":17522},"type":"EVENT_READ","threadId":{"int":100294},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c28fc5e-6b80-486f-afb7-5c25662cd300","sequence":{"long":17523},"type":"EVENT_READ","threadId":{"int":100294},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3aa1f70-b49e-48db-a45b-69141e2d4460","sequence":{"long":17524},"type":"EVENT_READ","threadId":{"int":100294},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2429},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb191c58-9c87-4bea-a1b6-720f8d1cdf6e","sequence":{"long":17525},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2482},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf80957d-076d-4864-aab4-d3b872f44fb0","sequence":{"long":17526},"type":"EVENT_WRITE","threadId":{"int":100294},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"422f94c6-80b6-4b58-8b62-345097c2dd9e","sequence":{"long":17527},"type":"EVENT_READ","threadId":{"int":100294},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"275a8601-4aed-4b1a-8c44-697931806297","sequence":{"long":17528},"type":"EVENT_READ","threadId":{"int":100294},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c94b41de-ed00-4547-914f-e3ad44029f19","sequence":{"long":17529},"type":"EVENT_READ","threadId":{"int":100294},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1178},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0d9143a-25a7-473c-b69c-48816f3e6987","sequence":{"long":17530},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1231},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a022929-ddac-4a6d-834c-4667dfe540b6","sequence":{"long":17531},"type":"EVENT_WRITE","threadId":{"int":100294},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"860fe73a-7608-47be-9512-199067114284","sequence":{"long":17532},"type":"EVENT_READ","threadId":{"int":100294},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1ca4a760-9a36-48eb-bda4-1bc4945977e3","sequence":{"long":17533},"type":"EVENT_SENDTO","threadId":{"int":100294},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17398","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f107cacb-46be-4102-b38e-8a31f4d67143","sequence":{"long":17534},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17398","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c832826-a6de-4442-bcd0-68c007da4418","sequence":{"long":17535},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8aaf3dbd-9fda-4dc3-aed1-049898587350","sequence":{"long":17536},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76f804ea-7fe2-4af3-9c05-5a35db33fc52","sequence":{"long":17537},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462124322794,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d306de52-e43f-488e-a143-c8c10937da61","sequence":{"long":17538},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462134585695,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73dae4e6-305a-420a-af5e-b58bd2fcab66","sequence":{"long":17539},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462134585695,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"704084cb-f353-44dc-b388-363ef069de33","sequence":{"long":17540},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584462943852502,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1239690},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5218d0a-cee1-42f2-9c5e-277338008b6e","sequence":{"long":17541},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584463954020571,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1240052},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fe2913c-0f81-45bc-be24-0735fe821796","sequence":{"long":17542},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1240052},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50761c06-01de-475c-afff-3d7a9664bf97","sequence":{"long":17544},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1990cc52-c947-486c-91c2-accd2def7d4d","sequence":{"long":17543},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"422d99f1-60a1-499e-8fd0-10bca1397754","sequence":{"long":17546},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c40b0112-6337-4f93-9ae8-e34dcbfe0d5a","sequence":{"long":17545},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6cf260a-dc67-49bd-a186-2214b53df269","sequence":{"long":17548},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19005bc7-8c61-48e1-a0c3-24d7eef7f979","sequence":{"long":17547},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9d98542-522d-45ee-9a19-bc054af42642","sequence":{"long":17549},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad800e11-4ca9-441c-8f06-2fc0e210cd79","sequence":{"long":17550},"type":"EVENT_READ","threadId":{"int":100295},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69a3402b-26b7-47c3-b0bf-2849a7a398ca","sequence":{"long":17551},"type":"EVENT_READ","threadId":{"int":100295},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d859cd33-67df-42d5-a06a-2d9f0e8f8013","sequence":{"long":17552},"type":"EVENT_READ","threadId":{"int":100295},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2433},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6aee8d9-0915-4f3b-bda8-b3bca792d975","sequence":{"long":17553},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2486},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a685b26-acaf-4066-9bff-48491beb65a4","sequence":{"long":17554},"type":"EVENT_WRITE","threadId":{"int":100295},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"053b0074-b154-445f-8a89-a840199abc51","sequence":{"long":17555},"type":"EVENT_READ","threadId":{"int":100295},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54e2ea26-205e-420c-9443-ca6bb5ca8e43","sequence":{"long":17556},"type":"EVENT_READ","threadId":{"int":100295},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5523c9c5-34f2-4fd7-b6b2-265753781982","sequence":{"long":17557},"type":"EVENT_READ","threadId":{"int":100295},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a28f9e7a-ded3-4cda-b7db-40a03177132e","sequence":{"long":17558},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95c9029c-ec8f-4271-a05b-93604f7f9a74","sequence":{"long":17559},"type":"EVENT_WRITE","threadId":{"int":100295},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b8b757a-7a6a-4cdf-8838-ce6c18f80cf8","sequence":{"long":17560},"type":"EVENT_READ","threadId":{"int":100295},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24c75445-071e-461c-90f6-6c566ac23c3d","sequence":{"long":17561},"type":"EVENT_SENDTO","threadId":{"int":100295},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17399","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c72d79a-ff84-4a25-813d-96dd692fc59b","sequence":{"long":17562},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17399","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b31fda51-7509-49f1-8f87-4035e7b31d8e","sequence":{"long":17563},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464124066201,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91819dd3-b046-44e7-ad28-d34964b5d7f4","sequence":{"long":17564},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464134054163,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0698854f-31b5-438b-9922-b4601cd88911","sequence":{"long":17565},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464134054163,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3842573-ffdb-437f-82a1-648990156ccb","sequence":{"long":17566},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464134054163,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9e506d7-a5a7-4c7d-8ea4-3c230ba3bf15","sequence":{"long":17567},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464134054163,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cf28b56-3556-457f-9b47-eff6c2bb9e7c","sequence":{"long":17568},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464554000636,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b67ebdf-7acf-49c1-8c5b-3b05237449c2","sequence":{"long":17569},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464554000636,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17400","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d4bf59e-5f24-4490-855b-eadb385f6444","sequence":{"long":17570},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464554000636,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17401","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b44eebcd-003e-469e-990f-30eb2cf610bf","sequence":{"long":17571},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464554000636,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17402","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8345bea-115b-4f73-9cbf-0505e99a7017","sequence":{"long":17572},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464554000636,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17403","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5095c9ce-48ba-4204-9521-981496578e3a","sequence":{"long":17573},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464554000636,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17400","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7779c2cc-c167-452c-bbc3-a974f712132a","sequence":{"long":17574},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464554000636,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17401","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40309175-d76e-411b-b6f8-6c4120d64878","sequence":{"long":17575},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464554000636,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17402","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"99648e4a-f6d7-4697-817c-bf750e608aa5","sequence":{"long":17576},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464554000636,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17403","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"475c88d1-5a64-4af7-a878-be3006c18cde","sequence":{"long":17577},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584464973968246,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1243280},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbc45525-8e05-40c9-8041-15d3a358e6bd","sequence":{"long":17578},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584465984232722,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1243644},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe8258df-4b48-470b-a120-278b01493a0a","sequence":{"long":17579},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1243644},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c73b5ca1-34f2-461b-9393-ae4d80f2d542","sequence":{"long":17581},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ae0eabc-7633-47ab-be6e-f5e55ffd41c5","sequence":{"long":17580},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bee12a24-656a-435f-bb37-901e4d3d7870","sequence":{"long":17583},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b6cc138-3bac-4bc6-81a7-ff88edf275ab","sequence":{"long":17582},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67c5b23b-8dfc-4e87-9532-5a0b84e0aed3","sequence":{"long":17585},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f70c1073-7441-437d-973c-f97865462947","sequence":{"long":17584},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95e13ec1-1a31-4192-a02b-bfe89750a4f8","sequence":{"long":17586},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"589e4e54-ea3d-490a-af65-c49b55b2f4a8","sequence":{"long":17587},"type":"EVENT_READ","threadId":{"int":100296},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09971c56-4f69-4b68-918d-df435bb54654","sequence":{"long":17588},"type":"EVENT_READ","threadId":{"int":100296},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b9ac7338-1c88-4979-9611-fd4144bd82e1","sequence":{"long":17589},"type":"EVENT_READ","threadId":{"int":100296},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3224},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15630fb7-be25-4036-a7de-1b02d83c86de","sequence":{"long":17590},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3277},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c815d889-c080-45f2-933e-73cc85ac2b6e","sequence":{"long":17591},"type":"EVENT_WRITE","threadId":{"int":100296},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3945e29-012a-4ddc-8bbe-efee3d75620a","sequence":{"long":17592},"type":"EVENT_READ","threadId":{"int":100296},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7a58235-e78d-40f0-b9a8-4eaaa8f3a85c","sequence":{"long":17593},"type":"EVENT_READ","threadId":{"int":100296},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"032fffae-84f8-4e20-9d62-35b7b7f74096","sequence":{"long":17594},"type":"EVENT_READ","threadId":{"int":100296},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6773dc0c-d75c-44e7-927b-72bf9997f505","sequence":{"long":17595},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71d6a539-84c4-4d6a-8176-8da8948893e6","sequence":{"long":17596},"type":"EVENT_WRITE","threadId":{"int":100296},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ef4b032-556b-48f1-9ac5-62404f2b217b","sequence":{"long":17597},"type":"EVENT_READ","threadId":{"int":100296},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"299590a2-f0e1-4030-b7f6-1bff994bbc1e","sequence":{"long":17598},"type":"EVENT_SENDTO","threadId":{"int":100296},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17404","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41a71254-0afe-4caa-ad35-d88522e670fb","sequence":{"long":17599},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17404","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c11774e5-6e46-480a-be2c-f203da610de1","sequence":{"long":17600},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466124059516,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1bfcc75-3d5b-4b3f-9b18-cab65c863432","sequence":{"long":17601},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466134185415,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02fb6dbe-c75c-44a4-a102-2a5a6462f32d","sequence":{"long":17602},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466134185415,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"283b1eb5-5e21-4399-80ef-c40de7030d49","sequence":{"long":17603},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466134185415,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2aa1f4e7-d6ed-4973-91b3-7a8cf7f23d83","sequence":{"long":17604},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584466134185415,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95aa9f5a-af3e-4a61-a248-a0d246a216b3","sequence":{"long":17605},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584467003966475,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1246080},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cba255a1-321d-42a4-8172-a8adf6ae9e46","sequence":{"long":17606},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584467554802913,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df51b5d5-ebf2-4402-8919-1dd251abbeb7","sequence":{"long":17607},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584467554802913,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17405","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9620582-5cb6-4c3d-ada8-2a94e98fc6eb","sequence":{"long":17608},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584467554802913,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17406","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66e5e00d-f223-4ec7-89a4-1a280a35ff5d","sequence":{"long":17609},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584467554802913,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17407","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ffc228d9-051c-4fe8-9d3d-2917370f095a","sequence":{"long":17610},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584467554802913,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17408","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0252a576-8b93-4359-8caa-3486609234a1","sequence":{"long":17611},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584467554802913,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17405","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42242535-d6c8-49f0-8a6f-87d95b90f5c8","sequence":{"long":17612},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584467554802913,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17406","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c97c1b5c-6f48-4772-9521-1ac9d9d2f0f2","sequence":{"long":17613},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584467554802913,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17407","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"055678b1-8a21-44bc-bc0c-513d40d5c7c4","sequence":{"long":17614},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584467554802913,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17408","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2f851fc-ecce-4153-9519-ffe6888f3595","sequence":{"long":17615},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468014109522,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1247264},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"304c058e-6114-4e72-b98c-e9048fe79bdb","sequence":{"long":17616},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1247264},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9fc0fbef-6284-4fee-9cbd-01bedb6733f0","sequence":{"long":17618},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94a2019a-578c-457a-8ef4-745008fa9f56","sequence":{"long":17617},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b49df9f-52f1-413c-af90-61110ee82cb7","sequence":{"long":17620},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f99c659-70c9-4e78-904a-d7367e5ea9b3","sequence":{"long":17619},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6e8406f-b111-4c5a-b068-d07ca1d3287b","sequence":{"long":17622},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a94ae58-7977-44f7-b14a-1d1a78c6907b","sequence":{"long":17621},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83f30c01-fe70-4fee-bad5-9c150a935637","sequence":{"long":17623},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95fa2c84-ae62-4b60-9305-c80625c24411","sequence":{"long":17624},"type":"EVENT_READ","threadId":{"int":100297},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72c5c684-d00e-4d50-af68-38e48394ef97","sequence":{"long":17625},"type":"EVENT_READ","threadId":{"int":100297},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9713a661-4199-4aa1-8804-a072d6a4fc7b","sequence":{"long":17626},"type":"EVENT_READ","threadId":{"int":100297},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2432},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"524e5117-dd9b-4a77-b27b-f37122dd1a94","sequence":{"long":17627},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2485},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71e87d60-711b-4388-a3e4-02ee2cfedcdc","sequence":{"long":17628},"type":"EVENT_WRITE","threadId":{"int":100297},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98459519-8aa2-4ec2-86de-1850134b8349","sequence":{"long":17629},"type":"EVENT_READ","threadId":{"int":100297},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"923e55fc-6e99-4689-ae07-00325259ef20","sequence":{"long":17630},"type":"EVENT_READ","threadId":{"int":100297},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b4b13f6-60b5-4492-85ed-194320d8bb80","sequence":{"long":17631},"type":"EVENT_READ","threadId":{"int":100297},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1180},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5edbb60-9c81-479c-a171-f1edc16c2ec1","sequence":{"long":17632},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1233},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de6dd1bf-081a-4abf-8b13-39c37f7edff6","sequence":{"long":17633},"type":"EVENT_WRITE","threadId":{"int":100297},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"428f91b1-d898-4df9-a877-6ca01183da13","sequence":{"long":17634},"type":"EVENT_READ","threadId":{"int":100297},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b15197f-ef31-477b-91b2-cbe36afafeb5","sequence":{"long":17635},"type":"EVENT_SENDTO","threadId":{"int":100297},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17409","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f85e2d3b-2a7a-46ec-8083-006250e7b98b","sequence":{"long":17636},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17409","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2705ccfe-4a1a-434d-9d30-778ac36f5c3d","sequence":{"long":17637},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51ef7312-5cb4-43b1-85f6-c3aff5fe80c5","sequence":{"long":17638},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03155a15-9f64-4da9-91ca-725f3e384eef","sequence":{"long":17639},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468124321035,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67e78615-340d-41f8-aa60-648c7eb76093","sequence":{"long":17640},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468134325669,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"649274e0-6c4b-45d6-afed-a17dce484b51","sequence":{"long":17641},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584468134325669,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b3de9f2-080e-46cf-a683-f3e3e2109e47","sequence":{"long":17642},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584469024225210,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1249696},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05101228-9dab-48fc-a478-f78096b8ab7d","sequence":{"long":17643},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470034008763,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1250061},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84f59f7a-bec4-4231-81db-eb6e79127e32","sequence":{"long":17644},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1250061},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"493b6ad9-ed82-48b0-9623-e3ec4b8c6fe6","sequence":{"long":17646},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a884541-15ad-4773-8b93-8806f795595a","sequence":{"long":17645},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88761fba-1b43-4f10-b340-fd4938a2e994","sequence":{"long":17648},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b115faed-4a9c-4ad4-a61a-001af56bff31","sequence":{"long":17647},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fe75b8f-00fd-4d6b-b53b-2181fbf3f186","sequence":{"long":17650},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aab3be57-93b6-47e2-8ff3-314d485ba7dc","sequence":{"long":17649},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95607980-ce11-436e-9b5d-41d7acbeb8ba","sequence":{"long":17651},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3af7672-2235-41cf-bde1-dce501d2b2a1","sequence":{"long":17652},"type":"EVENT_READ","threadId":{"int":100298},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"826a04c8-dea2-4fc9-92b7-ce4600614b93","sequence":{"long":17653},"type":"EVENT_READ","threadId":{"int":100298},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b30fb4f-f487-4aca-ac0c-0ba6b94751d1","sequence":{"long":17654},"type":"EVENT_READ","threadId":{"int":100298},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2428},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea6d96eb-5a58-4a24-89c6-a3df7678cb9e","sequence":{"long":17655},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2481},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abbe0b29-9045-49d8-b9a9-22715f9b79bc","sequence":{"long":17656},"type":"EVENT_WRITE","threadId":{"int":100298},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6d6b8a8-9d7c-4623-8537-fa46005f7530","sequence":{"long":17657},"type":"EVENT_READ","threadId":{"int":100298},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1ceec24-73a4-4dda-ae8a-88c74193b5db","sequence":{"long":17658},"type":"EVENT_READ","threadId":{"int":100298},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4af161f-8dee-457c-8951-bd01bb267665","sequence":{"long":17659},"type":"EVENT_READ","threadId":{"int":100298},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a4c4dc1a-92db-455d-bfda-bc9dcdb6864b","sequence":{"long":17660},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abc4c935-bd4a-4290-a32c-f25a96c3a685","sequence":{"long":17661},"type":"EVENT_WRITE","threadId":{"int":100298},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28038277-c818-486a-9629-844d871cb4ac","sequence":{"long":17662},"type":"EVENT_READ","threadId":{"int":100298},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e12718ba-4eb6-4990-8942-e637ed5b4df1","sequence":{"long":17663},"type":"EVENT_SENDTO","threadId":{"int":100298},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17410","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0772390-641b-4e41-846a-b7d613f40214","sequence":{"long":17664},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17410","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"388536ef-41ba-42b1-b59a-4edf7d8c3efb","sequence":{"long":17665},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa5399c0-ef5d-4573-9d63-a8eb04e91920","sequence":{"long":17666},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b64952e9-1237-481a-af45-d876187c5ce1","sequence":{"long":17667},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c03ebf63-3854-4685-a229-aa63cb8e4912","sequence":{"long":17668},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b07da29-8688-442c-a6b7-5a668c2a7896","sequence":{"long":17669},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470124099629,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0083682e-30d7-4225-a798-5d0ef64094ed","sequence":{"long":17670},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470553934589,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be594591-ad00-4b9e-a60f-0b5dbd8c8e33","sequence":{"long":17671},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470553934589,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17411","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"88467df4-0aba-4169-8cec-eb746d8db41e","sequence":{"long":17672},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470553934589,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17412","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a380628b-eb77-4abb-b751-27c2ab3427f9","sequence":{"long":17673},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470553934589,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17413","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd3dfa48-1b77-4768-b821-da8f66412359","sequence":{"long":17674},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470553934589,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17414","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"240ce8c4-9fab-4540-b0f6-1ea2600a2811","sequence":{"long":17675},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470553934589,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17411","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d92bc270-b4a4-4b86-805b-fc2eeaa46979","sequence":{"long":17676},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470553934589,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17412","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12e604a3-a7cb-4d0d-955d-51e3e7cc8a7b","sequence":{"long":17677},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470553934589,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17413","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05c8b312-381b-4d9a-8a87-8ad2a40388e9","sequence":{"long":17678},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584470553934589,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17414","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cb104bf-de64-4e4e-b009-be577e4b8fa5","sequence":{"long":17679},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584471053899008,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1253290},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc92edb4-9a1e-4be8-b313-af2fc5675a12","sequence":{"long":17680},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472064051405,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1253653},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0dac8409-aa82-4ea2-ab31-a534f9da7f5b","sequence":{"long":17681},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1253653},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9596b013-0942-4dbf-9034-f5faa7403037","sequence":{"long":17683},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6933ce2b-96bc-4df4-b225-059758a41932","sequence":{"long":17682},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35493e29-e316-4064-ac34-e9158ca65f19","sequence":{"long":17685},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6d59cff-0f3f-433b-85ea-499391f1ff77","sequence":{"long":17684},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d34270d2-dad9-44bf-95b9-5ca82cda7748","sequence":{"long":17687},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"70eb029e-b89a-4220-948d-79228d073d58","sequence":{"long":17686},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6177a63f-cf7e-40df-98d7-36cdfc5a6ec0","sequence":{"long":17688},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a273f45-fb66-4a63-a8ef-0f395bafc460","sequence":{"long":17689},"type":"EVENT_READ","threadId":{"int":100299},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"288ecd9b-7fa9-4ba8-8cc4-e103575ef8a6","sequence":{"long":17690},"type":"EVENT_READ","threadId":{"int":100299},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7ad0242-b40b-46f8-a26a-d04183de7a01","sequence":{"long":17691},"type":"EVENT_READ","threadId":{"int":100299},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3225},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4547390-4759-4ab5-85af-560a3fbcb4dc","sequence":{"long":17692},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3278},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d7e4274-d7cb-4929-bd42-8bdf5306d507","sequence":{"long":17693},"type":"EVENT_WRITE","threadId":{"int":100299},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29a1c830-95c9-4287-a63e-20161abacc57","sequence":{"long":17694},"type":"EVENT_READ","threadId":{"int":100299},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a47a9795-49e0-4d83-be30-307ac0985df6","sequence":{"long":17695},"type":"EVENT_READ","threadId":{"int":100299},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50b54dc8-911c-44c3-8977-6292f6b90840","sequence":{"long":17696},"type":"EVENT_READ","threadId":{"int":100299},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6302b0a3-1f81-41bc-85da-57c6f1091ca4","sequence":{"long":17697},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b94932f-4f52-49a9-a10a-5b2d83e99579","sequence":{"long":17698},"type":"EVENT_WRITE","threadId":{"int":100299},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"94c78df1-6785-46ac-9d95-b66004eea92a","sequence":{"long":17699},"type":"EVENT_READ","threadId":{"int":100299},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b15bdf89-1826-4c1a-aa3d-62c6bfb0553e","sequence":{"long":17700},"type":"EVENT_SENDTO","threadId":{"int":100299},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17415","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5cb1530a-0b8c-47f6-8546-62da7a307101","sequence":{"long":17701},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17415","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa3ffc3f-54b8-4c8a-be0c-04bcdb77281a","sequence":{"long":17702},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472124502542,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96b73698-3bc8-4bf9-877f-af8e81db9aa4","sequence":{"long":17703},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472134235058,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd03cfa5-5354-4757-b779-f7705f7396cb","sequence":{"long":17704},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472134235058,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5aa19cc2-64b9-4618-b314-f398d28eff88","sequence":{"long":17705},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472134235058,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c99f3cdd-39cd-400a-be1e-34944dd04145","sequence":{"long":17706},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584472134235058,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a88b628f-cb44-4866-8b14-f24072e7397f","sequence":{"long":17707},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584473084679458,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1256091},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed63f38e-c73f-4a55-8841-681769b3c441","sequence":{"long":17708},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584473554810204,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7fa2436-b619-43a6-babb-30aded7155f5","sequence":{"long":17709},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584473554810204,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17416","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f8474a1-f56e-4c90-9547-2f2b9021def1","sequence":{"long":17710},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584473554810204,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17417","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f937063-1f98-485c-9e62-9d51c70625b1","sequence":{"long":17711},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584473554810204,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17418","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65e4af39-b794-4e2d-ad53-8aae7cf72d97","sequence":{"long":17712},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584473554810204,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17419","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e154891e-c8b2-403e-97a3-44f912ffb40d","sequence":{"long":17713},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584473554810204,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17416","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f2d8caf-f0ca-4903-9e7b-7a8e268a72dd","sequence":{"long":17714},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584473554810204,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17417","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c839787-5d08-4777-8537-ea24f18cb1ec","sequence":{"long":17715},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584473554810204,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17418","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7f9d6b0-48f7-4d4f-8860-95157883dcb7","sequence":{"long":17716},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584473554810204,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17419","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"21180dbb-c2b4-46da-95f6-3f54723f9986","sequence":{"long":17717},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474094375838,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1257267},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6da789d-8b99-4475-9977-e319aabf8068","sequence":{"long":17718},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1257267},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb36c6a4-7b70-4248-a730-993e1c386342","sequence":{"long":17720},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55989de6-2264-4a74-9ad7-159379b23ea9","sequence":{"long":17719},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f03a9047-5f7c-44e2-95fa-1f0fc4e37cfc","sequence":{"long":17722},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9160a7d-d311-473c-9635-eb5c1fd80072","sequence":{"long":17721},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f27d330-bef7-431d-a5b2-f581ba33863f","sequence":{"long":17724},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38c97a5d-3b06-41fe-ba12-949f11535a1d","sequence":{"long":17723},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00ef3882-2d12-4333-94ce-ad5ab5d26e8b","sequence":{"long":17725},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de5ab848-ae2a-4bf5-a2ac-f289919c1753","sequence":{"long":17726},"type":"EVENT_READ","threadId":{"int":100300},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a527fcd-d892-41ac-ae32-3bcb78d63bc0","sequence":{"long":17727},"type":"EVENT_READ","threadId":{"int":100300},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c596886c-e212-4d00-b864-91d4318ab4ef","sequence":{"long":17728},"type":"EVENT_READ","threadId":{"int":100300},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2434},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dadfdce6-54b5-47a4-9189-a094083417f9","sequence":{"long":17729},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2487},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b306797-dba5-41e3-b055-a433e6cabd59","sequence":{"long":17730},"type":"EVENT_WRITE","threadId":{"int":100300},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83ab2cb3-90f3-4ab8-bf44-33bc436ef764","sequence":{"long":17731},"type":"EVENT_READ","threadId":{"int":100300},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bdfbce42-4d87-4a45-b04c-b466989b5510","sequence":{"long":17732},"type":"EVENT_READ","threadId":{"int":100300},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f13d45fd-2964-49ea-980f-90219ae6749f","sequence":{"long":17733},"type":"EVENT_READ","threadId":{"int":100300},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1172},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7427da99-e246-47c6-b8df-fb05267ac481","sequence":{"long":17734},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1225},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d6b3591-0d74-4a0b-b44b-7ab0d7d77623","sequence":{"long":17735},"type":"EVENT_WRITE","threadId":{"int":100300},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92d70526-e8ce-4c27-b63f-822b499dcee6","sequence":{"long":17736},"type":"EVENT_READ","threadId":{"int":100300},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91918b25-920d-48a3-8dec-294daf4f61cb","sequence":{"long":17737},"type":"EVENT_SENDTO","threadId":{"int":100300},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17420","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"868e43fc-b5b8-48fc-a5ca-d8c59f29a208","sequence":{"long":17738},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17420","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f80f5dc-b1e9-419e-9cbb-26e81acfdcf3","sequence":{"long":17739},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49e79eff-5959-4bcd-93c1-251e6154dbd3","sequence":{"long":17740},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1086623e-67e1-48dd-af80-fe274ada4c39","sequence":{"long":17741},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474124184605,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c8427e4-a751-4620-bf84-08dc396c6d22","sequence":{"long":17742},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474134546537,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee102338-8b34-4fde-a81d-34b27d3ce5b7","sequence":{"long":17743},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584474134546537,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18b746a3-392b-4b83-a399-e5b13d1fae1d","sequence":{"long":17744},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584475114006376,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1259697},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d152dff-fbe3-4014-9e22-88600229280e","sequence":{"long":17745},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1260063},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a512e97-6e70-4bdf-add3-1d9104c97026","sequence":{"long":17746},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1260063},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dff6330-f235-4144-b2e6-48d65b2ea25f","sequence":{"long":17748},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03007d9f-6ce6-4cee-a4dd-3bceb6d4f720","sequence":{"long":17747},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f64b28c-d50b-49f6-9c79-d2a054a8df4a","sequence":{"long":17750},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ced703f6-2cf7-442e-8fbb-3584484079cc","sequence":{"long":17749},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f09d90d-59a4-4325-ae9f-55ac1080d43c","sequence":{"long":17752},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4b97d7f-e246-4198-a35a-4eaad0751873","sequence":{"long":17751},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be3becec-f8b3-457e-8942-8275dfa4e0a6","sequence":{"long":17753},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e376355-1ec0-4155-8411-c6963d38c497","sequence":{"long":17754},"type":"EVENT_READ","threadId":{"int":100301},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7fb2dca2-4c70-47da-a9fd-715e46937ba3","sequence":{"long":17755},"type":"EVENT_READ","threadId":{"int":100301},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3c756ac-df63-487d-b750-8b1d94f9d079","sequence":{"long":17756},"type":"EVENT_READ","threadId":{"int":100301},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2426},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20e34828-df7e-472f-8730-bb813c046c5b","sequence":{"long":17757},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2479},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"794483c0-5e62-4824-918c-d8b763e0593c","sequence":{"long":17758},"type":"EVENT_WRITE","threadId":{"int":100301},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"40fb1e24-0ac1-4de4-9b91-90250e451902","sequence":{"long":17759},"type":"EVENT_READ","threadId":{"int":100301},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5dfbebf3-457a-4358-b25c-252b73134a9c","sequence":{"long":17760},"type":"EVENT_READ","threadId":{"int":100301},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c62d006-dd45-4929-bef5-a2c0fba530dd","sequence":{"long":17761},"type":"EVENT_READ","threadId":{"int":100301},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":362},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45e09675-9d65-4fe6-b3a9-26c2bbe66ff3","sequence":{"long":17762},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":415},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"048374ff-1d6e-4dcc-b058-8ca98ff5d6b3","sequence":{"long":17763},"type":"EVENT_WRITE","threadId":{"int":100301},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad975c40-f70f-4257-8584-613f8e8bf422","sequence":{"long":17764},"type":"EVENT_READ","threadId":{"int":100301},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b025941b-256b-4cb0-b6ca-a2ffe683fbb1","sequence":{"long":17765},"type":"EVENT_SENDTO","threadId":{"int":100301},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17421","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55e79a69-440b-4e28-a5a3-c1b6e1dc1825","sequence":{"long":17766},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17421","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e735127-9b4b-4bed-99df-59b377491ae5","sequence":{"long":17767},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476123862887,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a80ec386-7826-4096-83df-4feb7c418612","sequence":{"long":17768},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476133895763,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"adc4e328-5d67-459a-96bf-dfb13c3a809c","sequence":{"long":17769},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476133895763,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"44829130-5819-425d-adcc-97b734d34e8c","sequence":{"long":17770},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476133895763,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3b2f80d-ae84-4436-9112-28b373e787cb","sequence":{"long":17771},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476133895763,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a40d9c7-179e-46a3-af21-3e7a290ecb15","sequence":{"long":17772},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476554137112,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"56e19f84-7d4d-4323-b23e-f23a0da8b343","sequence":{"long":17773},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476554137112,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17422","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f196d4fa-103e-4788-9df8-138e365838ea","sequence":{"long":17774},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476554137112,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17423","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b43f3bdb-bb38-46b9-bfa1-bc95496fbbc6","sequence":{"long":17775},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476554137112,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17424","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"25a3d091-6208-4f05-89f2-604f8bd507fb","sequence":{"long":17776},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476554137112,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17425","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"991304b1-511d-47e7-ad9c-e40644b326aa","sequence":{"long":17777},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476554137112,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17422","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27f3b5c6-0033-4ba1-b89f-6b5c4f996cfc","sequence":{"long":17778},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476554137112,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17423","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4b0f9a3-7345-4a82-9e86-40d37d84156d","sequence":{"long":17779},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476554137112,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17424","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42802bad-3083-4bd1-929c-29aa880b3645","sequence":{"long":17780},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584476554137112,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17425","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"668f5247-b48f-4d44-a2ac-92f65bd84d16","sequence":{"long":17781},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584477143922864,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1263292},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e9bbae4-c5c6-41df-b50e-7df372237140","sequence":{"long":17782},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478124887597,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1263292},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f52eed7e-4e83-4215-8fca-8bcdae091cc7","sequence":{"long":17784},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584478124887597,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba8503b1-7a8f-4a62-8257-f2aa783fcab5","sequence":{"long":17783},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478124887597,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64a91840-36fa-41fd-9026-0bc8f4e3a949","sequence":{"long":17786},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584478124887597,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b37ce959-223a-4f48-80f9-5b765fb675e5","sequence":{"long":17785},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478124887597,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41ec9725-a476-4125-94f4-298080daf55e","sequence":{"long":17787},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478124887597,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27e94d18-1915-4537-8c73-3f5281be749e","sequence":{"long":17788},"type":"EVENT_READ","threadId":{"int":100302},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478124887597,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"608e267a-ecfd-4713-9cb1-efd75e66431f","sequence":{"long":17789},"type":"EVENT_READ","threadId":{"int":100302},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478124887597,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"407d0a59-c5ac-4d67-90a1-24df2df64388","sequence":{"long":17790},"type":"EVENT_READ","threadId":{"int":100302},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478124887597,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3225},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f76b1ee5-eb92-4ef0-9b1c-4f2a8b3cc9be","sequence":{"long":17791},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478124887597,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3278},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51fbc179-ca49-4f0a-9d20-e44c059cdfd6","sequence":{"long":17792},"type":"EVENT_WRITE","threadId":{"int":100302},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478124887597,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8379b6aa-0fb3-4270-82cc-9fd99a78101b","sequence":{"long":17793},"type":"EVENT_READ","threadId":{"int":100302},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478124887597,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a5536183-277a-455a-98a4-c9689a2a24e6","sequence":{"long":17794},"type":"EVENT_SENDTO","threadId":{"int":100302},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478124887597,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17426","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1bcbf6c9-aada-469f-9e8e-bd2b337404dc","sequence":{"long":17795},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478124887597,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17426","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"397deeae-962e-44ad-840a-e9b287c57f1c","sequence":{"long":17796},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478124887597,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"60a2b0a2-6bfe-4b99-b54e-bf4769f37502","sequence":{"long":17797},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478133865563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"449212c3-113b-4ea3-a38e-1953debb804a","sequence":{"long":17798},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478133865563,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4fc6d80-233e-4bce-8678-ae69346bfd31","sequence":{"long":17799},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584478154181514,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1265132},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1fa37a3-334c-4909-b868-7aff2dc354f1","sequence":{"long":17800},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584479163878471,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1265496},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"831bb65e-0fa3-432a-9d3f-ba94e26508f3","sequence":{"long":17801},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584479554103913,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4dd7033b-f9a3-4da9-9846-3d51f391cdd7","sequence":{"long":17802},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584479554103913,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17427","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b4d68c7-26e5-4990-86e1-5337cdeedb70","sequence":{"long":17803},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584479554103913,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17428","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d07fd73b-1de9-4a09-989c-4a29ea999ced","sequence":{"long":17804},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584479554103913,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17429","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef1ac1b2-8409-4698-a21c-ee9e901b1c4c","sequence":{"long":17805},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584479554103913,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17430","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4fad8461-e6ce-4d90-b63d-72c495866eab","sequence":{"long":17806},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584479554103913,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17427","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b21350a2-943e-41f1-a7f0-0f41908a79d6","sequence":{"long":17807},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584479554103913,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17428","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f211336-2a2c-4618-8724-4016554710ac","sequence":{"long":17808},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584479554103913,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17429","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec8bca43-738e-45a0-83c8-981ef881422a","sequence":{"long":17809},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584479554103913,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17430","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e75da9d5-7956-4486-a8fa-006078dd07cb","sequence":{"long":17810},"type":"EVENT_OPEN","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":{"string":"/etc/cron.d"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480013902334,"names":{"array":["aue_open_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"120004"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00e808"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"5","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"5","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4c778f4-51d6-4a82-a3cb-1a768b8357ea","sequence":{"long":17811},"type":"EVENT_CLOSE","threadId":{"int":100079},"subject":{"UUID":"b57805cf-467a-11e9-ae92-080027fc76ba"},"predicateObject":{"UUID":"09806a61-b72a-5859-aab7-43fff9583fdc"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480013902334,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"5","return_value":"0","ppid":"1","exec":"cron"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3250fee8-7344-4333-af66-be30cc178fd6","sequence":{"long":17812},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1265496},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2a3e0b9f-735e-4b15-a8b7-ca49bb1525db","sequence":{"long":17814},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a3ceb5a-91fe-47d8-874a-159efd0c59bc","sequence":{"long":17813},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d3055d8-8011-440a-b22d-5dccd61f8b89","sequence":{"long":17816},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1edc486-5f6a-4ab7-83b9-c86abfb2610a","sequence":{"long":17815},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad84feb4-c274-45c5-aa99-af6d9debfdb7","sequence":{"long":17818},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"966a5ca2-f306-46f3-a31d-9eacc4e09cc4","sequence":{"long":17817},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bdf9527-56ef-48ba-8768-34d69d29184a","sequence":{"long":17819},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1ef8ab4-edf0-44a2-a1a8-231caf0d07e7","sequence":{"long":17820},"type":"EVENT_READ","threadId":{"int":100303},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e295f55-1fa6-4799-b6f3-ad4b8e110442","sequence":{"long":17821},"type":"EVENT_READ","threadId":{"int":100303},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8011f507-23d3-43a3-87f0-5407c1158ba9","sequence":{"long":17822},"type":"EVENT_READ","threadId":{"int":100303},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1836},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6eec661-473d-4c68-9d60-6f97198ae55f","sequence":{"long":17823},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1889},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da27bb67-3655-48ce-86ab-5971c18ce180","sequence":{"long":17824},"type":"EVENT_WRITE","threadId":{"int":100303},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5deebed9-29d9-4ac2-88a6-9d9bf4db7765","sequence":{"long":17825},"type":"EVENT_READ","threadId":{"int":100303},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dda16a3-543a-4521-9f00-a3b598a80c67","sequence":{"long":17826},"type":"EVENT_READ","threadId":{"int":100303},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc8c8703-7a9f-42ee-8cf7-b3daea0bf10a","sequence":{"long":17827},"type":"EVENT_READ","threadId":{"int":100303},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3358c885-8ae7-4c14-96bc-f85b327ffd4e","sequence":{"long":17828},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3098c93b-acb2-4a77-b41e-f29d5b55b555","sequence":{"long":17829},"type":"EVENT_WRITE","threadId":{"int":100303},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f200ab5f-dda5-4e61-9d82-088b65946979","sequence":{"long":17830},"type":"EVENT_READ","threadId":{"int":100303},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1025c419-d075-4493-b418-8551c0affc16","sequence":{"long":17831},"type":"EVENT_SENDTO","threadId":{"int":100303},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17431","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de977cf6-b25a-4881-98bc-ee41b6291a14","sequence":{"long":17832},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17431","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7bb8b5a-454c-41c5-bb83-bc2c61a33a16","sequence":{"long":17833},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27b8c1ab-339f-4833-98a1-d739407f68c1","sequence":{"long":17834},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f9ab5ad-a62b-41f3-ac7e-4a0b32e01714","sequence":{"long":17835},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0551794b-d2da-4dd9-813c-60c32a45913a","sequence":{"long":17836},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed140354-30da-49f0-a166-27abbe5a3b70","sequence":{"long":17837},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480124033425,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ebc5c59-2a94-4462-8f2d-aff955929666","sequence":{"long":17838},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584480183908239,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1269081},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92d7a068-ec0a-4d94-b140-11fb4254afb5","sequence":{"long":17839},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584481194513468,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1269446},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"NetFlowObject":{"uuid":"8464f2f3-467e-11e9-aed2-080027fc76ba","baseObject":{"permission":null,"epoch":null,"properties":{"map":{}}},"localAddress":null,"localPort":null,"remoteAddress":{"string":"74.6.168.73"},"remotePort":{"int":123},"ipProtocol":null,"initTcpSeqNum":null,"fileDescriptor":null}},"CDMVersion":"20","type":"RECORD_NET_FLOW_OBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1843843b-fcde-464e-8aba-a75104772d86","sequence":{"long":17840},"type":"EVENT_CONNECT","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"8464f2f3-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584481254270566,"names":{"array":["aue_connect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","address":"74.6.168.73","port":"123","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c512e181-979e-4a1a-8f1a-e9a072c787fd","sequence":{"long":17841},"type":"EVENT_CLOSE","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"8464f2f3-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584481254270566,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"4","return_value":"0","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04efda47-da9e-41e8-846d-68fe761d2cc0","sequence":{"long":17842},"type":"EVENT_SENDTO","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"b5434a9c-467a-11e9-ae89-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584481254270566,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":48},"programPoint":null,"properties":{"map":{"ret_msgid":"17432","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"22","ppid":"1","address":"74.6.168.73","port":"123","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae69cfa7-8bf2-4720-810e-582ee9460097","sequence":{"long":17843},"type":"EVENT_SENDTO","threadId":{"int":100092},"subject":{"UUID":"b5358eab-467a-11e9-ae89-080027fc76ba"},"predicateObject":{"UUID":"b541acd0-467a-11e9-ae89-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584481254270566,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":99},"programPoint":null,"properties":{"map":{"ret_msgid":"17433","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"ntpd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fab9f38-2e39-4165-b42f-e9099fe8eebb","sequence":{"long":17844},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b2110-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584481254270566,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":99},"programPoint":null,"properties":{"map":{"ret_msgid":"17433","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d5633c7-5703-4efd-a83c-076696f2d4c9","sequence":{"long":17845},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1269446},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"482220ab-b9ec-4c15-beff-05d05dd326e5","sequence":{"long":17847},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4398bb0-d30a-4987-b1b5-9c5bb22af61e","sequence":{"long":17846},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ea4e476-acf4-47d5-8a53-177a9b6ef76c","sequence":{"long":17849},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6be8aa08-0f54-4437-8d99-42398fdd83a5","sequence":{"long":17848},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be5084c6-a9fe-4295-b9d4-196b8808660f","sequence":{"long":17851},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbdd45f2-d9a3-468f-ac4a-1f027a5b3b42","sequence":{"long":17850},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e32b41e3-4849-4a91-a73b-ee9c64c9c6d4","sequence":{"long":17852},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8632ebd-b7a6-41bc-ac08-2599d9249fc8","sequence":{"long":17853},"type":"EVENT_READ","threadId":{"int":100304},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79742afa-5df1-4680-a0f6-457a014afc50","sequence":{"long":17854},"type":"EVENT_READ","threadId":{"int":100304},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98b695dc-457a-42cf-bad8-0a226c330fad","sequence":{"long":17855},"type":"EVENT_READ","threadId":{"int":100304},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3581},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a315742f-5076-4782-86cf-c0e82ea23e7a","sequence":{"long":17856},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3634},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b02bca06-8fbe-4231-aae8-d17a87428827","sequence":{"long":17857},"type":"EVENT_WRITE","threadId":{"int":100304},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ec1dc29-ec1b-4192-8c9a-017a458aa394","sequence":{"long":17858},"type":"EVENT_READ","threadId":{"int":100304},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a974617e-dce3-4f35-9a77-4ab762364f9b","sequence":{"long":17859},"type":"EVENT_READ","threadId":{"int":100304},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf224be5-39e6-41ae-8f1f-8d324f043a7d","sequence":{"long":17860},"type":"EVENT_READ","threadId":{"int":100304},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14e8f16e-4222-47fc-834d-390297e55cad","sequence":{"long":17861},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aea071d2-c366-423f-b28a-ec5ec9b38074","sequence":{"long":17862},"type":"EVENT_WRITE","threadId":{"int":100304},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86a40d2c-b949-4504-9631-5ceabf7b87c9","sequence":{"long":17863},"type":"EVENT_READ","threadId":{"int":100304},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f424880-8d26-4463-8cd4-081a5fdf6659","sequence":{"long":17864},"type":"EVENT_SENDTO","threadId":{"int":100304},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17434","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e64b1805-90b5-43cb-b4ff-552faff6ae09","sequence":{"long":17865},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17434","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8cc4abc-d332-4dd4-a00a-6e0767ed67c6","sequence":{"long":17866},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482124160835,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f8110d0-4c93-4494-97e7-c2689137534d","sequence":{"long":17867},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482133833202,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c460793-b287-4efd-83c2-a5940c89db37","sequence":{"long":17868},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482133833202,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e7e7c5c-d003-4853-a9f2-d9fb83438c36","sequence":{"long":17869},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482133833202,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c65f9131-bf1f-4727-bbf4-600f0fb34f41","sequence":{"long":17870},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482133833202,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9761b78c-76ed-4a2c-ba91-64e7289c6eff","sequence":{"long":17871},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482214320927,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1272763},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a16ad1d5-5488-40fd-992a-7be20fa9e024","sequence":{"long":17872},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482554127838,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9dda335-b603-435d-a766-ef446c0fb35b","sequence":{"long":17873},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482554127838,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17435","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fabe8a32-9d17-415c-a6aa-490f7afc1331","sequence":{"long":17874},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482554127838,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17436","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec724c2e-ef7e-4d27-a350-a5073a0f580a","sequence":{"long":17875},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482554127838,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17437","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4580d52-6e29-486a-ab07-a54892740a33","sequence":{"long":17876},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482554127838,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17438","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccd12cd6-6654-42a8-8b27-a162583992da","sequence":{"long":17877},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482554127838,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17435","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cad1686d-33bd-44d0-9e87-c675a5dc9cff","sequence":{"long":17878},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482554127838,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17436","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"13e98a9b-a041-4c6c-940a-d7a9dbe847ad","sequence":{"long":17879},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482554127838,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17437","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e73cae4-f045-4ad7-99a2-82c8727e5a57","sequence":{"long":17880},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584482554127838,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17438","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fbf7065-53b5-4b5c-ae3c-7837815eb8ee","sequence":{"long":17881},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584483224438472,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1273950},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fb27502b-2974-4bd2-84ee-1b503be61b6f","sequence":{"long":17882},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1273950},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ce54267-a85a-4e90-b073-2459cfec04fd","sequence":{"long":17884},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73144cd7-bb26-4461-8d32-ff05b9895297","sequence":{"long":17883},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10e383b4-b76a-487c-816a-ca4d1b76d70f","sequence":{"long":17886},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7c89b86-81f7-42df-a2f0-25660071be98","sequence":{"long":17885},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f06ff0d3-574d-44a8-9b8c-589d0b24ce78","sequence":{"long":17888},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d557d2a0-3617-404b-8f53-96bd41597663","sequence":{"long":17887},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d211813e-d737-432d-80a5-b7dcfd7b8573","sequence":{"long":17889},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0d47720-7304-4b66-ad24-4970bc84e117","sequence":{"long":17890},"type":"EVENT_READ","threadId":{"int":100305},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b6c6cb1-3fa9-4c00-a882-629ec8b9df65","sequence":{"long":17891},"type":"EVENT_READ","threadId":{"int":100305},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f92bc1b2-7568-4f30-87bf-3279c7079537","sequence":{"long":17892},"type":"EVENT_READ","threadId":{"int":100305},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3313},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea9db6ae-bd60-4456-8db8-1369873a586a","sequence":{"long":17893},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3366},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e01acf01-a1f6-47ff-bc34-6d41deac18e2","sequence":{"long":17894},"type":"EVENT_WRITE","threadId":{"int":100305},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1779a7f-b121-4947-9ca1-10d322aa4721","sequence":{"long":17895},"type":"EVENT_READ","threadId":{"int":100305},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef2ca196-b1e3-4c1c-9336-d4f262d3e94b","sequence":{"long":17896},"type":"EVENT_READ","threadId":{"int":100305},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbd75712-cdfa-450b-aeef-d625b8336045","sequence":{"long":17897},"type":"EVENT_READ","threadId":{"int":100305},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1183},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac5f95f3-df62-4dd3-8480-14f666cb5787","sequence":{"long":17898},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1236},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7272cf7-1c29-4fa6-aa69-f459be335524","sequence":{"long":17899},"type":"EVENT_WRITE","threadId":{"int":100305},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d73b9816-5901-4c8d-bbf4-83c1fbd7f9f1","sequence":{"long":17900},"type":"EVENT_READ","threadId":{"int":100305},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"040fbd70-4863-4508-8f36-8f66b120b6a5","sequence":{"long":17901},"type":"EVENT_SENDTO","threadId":{"int":100305},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17439","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4405a1b3-7268-4924-810d-8f4f0518e8e7","sequence":{"long":17902},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17439","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2bddf42-2aff-43d2-bb57-38cfac7c0037","sequence":{"long":17903},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484124549854,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91d219e0-921b-43c5-8ffb-6c00c864637d","sequence":{"long":17904},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484133856444,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6532cb0-9115-472f-adad-9ffaf0d5d9ee","sequence":{"long":17905},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484133856444,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"915dee17-e9aa-4a4e-a27e-85dab4772e81","sequence":{"long":17906},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484133856444,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5020ab7d-5d96-4f64-aba5-0835c65871ed","sequence":{"long":17907},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484133856444,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cff3c381-22b7-44e5-a190-d30151c88f5c","sequence":{"long":17908},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584484244311279,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1276392},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34b30fc4-0412-4a74-a444-4f9f37865035","sequence":{"long":17909},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584485254610173,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1276757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ebab34f2-33ae-4220-8c28-d3de660991e0","sequence":{"long":17910},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584485554055465,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f720bed8-48a6-4e1e-9aed-3c73fc103def","sequence":{"long":17911},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584485554055465,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17440","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fb3a8ea-79d1-4b2a-9843-f90dbf4e4f0d","sequence":{"long":17912},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584485554055465,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17441","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55c00241-140b-431a-b7c1-d38baf6393e2","sequence":{"long":17913},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584485554055465,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17442","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae64a874-9f20-4086-aad6-1bfc58931456","sequence":{"long":17914},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584485554055465,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17443","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f570cc08-428a-426c-9502-8102b9b6e522","sequence":{"long":17915},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584485554055465,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17440","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ccd2332-30b4-4383-87a4-fd6fdd072a38","sequence":{"long":17916},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584485554055465,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17441","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34479c67-707a-457b-8661-a9e93758ab74","sequence":{"long":17917},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584485554055465,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17442","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"733881da-5bb8-4a0f-8110-7400e7e3a8a5","sequence":{"long":17918},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584485554055465,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17443","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59762074-9df3-4480-8848-247bfd2156d3","sequence":{"long":17919},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1276757},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9c86873-7509-42eb-8575-c51ee0900ab3","sequence":{"long":17921},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9228878e-2f24-4ef4-80e6-0f46df6c482b","sequence":{"long":17920},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29b3f57a-eeac-4104-b322-4d7732b68e7c","sequence":{"long":17923},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f74d9ecb-76d1-45bf-9270-50e268f13125","sequence":{"long":17922},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f6b60405-effa-47f2-87ed-ecbe25e992c1","sequence":{"long":17925},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9194a129-2fca-4e0f-bce3-565552bd8b86","sequence":{"long":17924},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5fcccee-2c05-49cb-96d4-d2b5e5e31079","sequence":{"long":17926},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7956f769-b6b1-4971-99ad-3771f600667c","sequence":{"long":17927},"type":"EVENT_READ","threadId":{"int":100306},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efcb8360-882c-4e75-9021-b2d8445cb0d5","sequence":{"long":17928},"type":"EVENT_READ","threadId":{"int":100306},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4d67758-26a8-4492-bb12-1fdab8643b81","sequence":{"long":17929},"type":"EVENT_READ","threadId":{"int":100306},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2438},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc808428-f8a6-407a-a6fa-f20cb3c2574d","sequence":{"long":17930},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2491},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9e3aa0e-2a51-400c-b999-939d05880f96","sequence":{"long":17931},"type":"EVENT_WRITE","threadId":{"int":100306},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0061dd40-1912-4b90-90cd-203fcd660006","sequence":{"long":17932},"type":"EVENT_READ","threadId":{"int":100306},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58f50bdd-da64-4faf-a0c0-983fd445831b","sequence":{"long":17933},"type":"EVENT_READ","threadId":{"int":100306},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afd214ef-f4bd-4b82-9812-2a91c654feef","sequence":{"long":17934},"type":"EVENT_READ","threadId":{"int":100306},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d9db9fe4-c5a5-4c61-9e56-b362ab8f42ff","sequence":{"long":17935},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76cf2b55-fccc-4690-93fe-355f6e4aaec5","sequence":{"long":17936},"type":"EVENT_WRITE","threadId":{"int":100306},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0274279c-db13-4b48-b342-d6b7da2a23fd","sequence":{"long":17937},"type":"EVENT_READ","threadId":{"int":100306},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac275b30-4107-44ac-a5b0-be3d0f66e235","sequence":{"long":17938},"type":"EVENT_SENDTO","threadId":{"int":100306},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17444","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a51ea305-aa4a-4652-93f3-0b7deb331f71","sequence":{"long":17939},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17444","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"554c5e87-5cb2-4711-bd62-2d134a4904d0","sequence":{"long":17940},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f039ebf-23b8-4066-ae41-38879d6134aa","sequence":{"long":17941},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5341e4e9-6a8f-4de7-8cb4-5243d17f7b4c","sequence":{"long":17942},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486124573757,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d562488-8d3f-42a0-9b75-c599c95a1e24","sequence":{"long":17943},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486133937745,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5564d2fd-1054-40b6-b387-339c256982a3","sequence":{"long":17944},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486133937745,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb995876-bed1-43c3-b967-f62437f18e77","sequence":{"long":17945},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584486273915410,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1280067},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d4b9c92-c254-4446-8111-480cc3214e51","sequence":{"long":17946},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584487284828533,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1280430},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3052696e-176e-4ab5-9d41-374410f38fa0","sequence":{"long":17947},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1280430},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"729e3c42-cf07-499e-8fd6-a82ae7150888","sequence":{"long":17949},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1416e14a-e47d-4b13-98ea-6cc68e3c8bd1","sequence":{"long":17948},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7186bcf0-5da3-4ab1-b220-71c24d10c972","sequence":{"long":17951},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"735a4ce8-1f65-4047-a54e-97084e2b9653","sequence":{"long":17950},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5aa25830-1554-463e-968d-b8150c186778","sequence":{"long":17953},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"28ad6ae1-9d33-45f8-ae80-6861f055e2b4","sequence":{"long":17952},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e635679d-4c9a-423f-b897-228dbe82fd6f","sequence":{"long":17954},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc027192-978a-483d-ab1a-07c48462dbf7","sequence":{"long":17955},"type":"EVENT_READ","threadId":{"int":100307},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45168f7d-55ce-4285-b9f1-78b7f3d3c80d","sequence":{"long":17956},"type":"EVENT_READ","threadId":{"int":100307},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"da271403-f5c1-4774-9c88-633c5560d4d2","sequence":{"long":17957},"type":"EVENT_READ","threadId":{"int":100307},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3306},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26ae8962-460d-42c6-bb20-d2622a25b901","sequence":{"long":17958},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cff34ff-d4d1-4d89-95f2-6bf6af337195","sequence":{"long":17959},"type":"EVENT_WRITE","threadId":{"int":100307},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ba9c5b5-ca40-4412-9097-cdb1344dd9d4","sequence":{"long":17960},"type":"EVENT_READ","threadId":{"int":100307},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e666bfda-ae34-4b34-af0a-f881ead27ff9","sequence":{"long":17961},"type":"EVENT_READ","threadId":{"int":100307},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f3412a33-2a92-43ec-8341-8ba364f8edf2","sequence":{"long":17962},"type":"EVENT_READ","threadId":{"int":100307},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3af2e8de-fdb7-47ff-afee-c122d6b24ef7","sequence":{"long":17963},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b60ac15-204a-40a3-bd96-3d88cb3841eb","sequence":{"long":17964},"type":"EVENT_WRITE","threadId":{"int":100307},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd9d071e-81fd-4b1f-bda9-dd083fd4653f","sequence":{"long":17965},"type":"EVENT_READ","threadId":{"int":100307},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c983898-0f6d-47bd-b8d3-d1e8f47d3bb1","sequence":{"long":17966},"type":"EVENT_SENDTO","threadId":{"int":100307},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17445","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"823d5fe2-000f-48da-abe8-07f145977b64","sequence":{"long":17967},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17445","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6645c759-ba22-4180-aaf8-a2c9b119099a","sequence":{"long":17968},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488124300049,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a262c52-9bf9-43a2-9792-3a40e0c25eed","sequence":{"long":17969},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488133895741,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12628033-62bc-4988-bd8b-a87b30580244","sequence":{"long":17970},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488133895741,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af4f7fc3-d3f5-4772-a2d0-f816fadabe6d","sequence":{"long":17971},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488133895741,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4f42f178-3e7c-4b95-8b94-24a6de0b4236","sequence":{"long":17972},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488133895741,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2aed89ff-8ec8-42b8-ab74-ece16da5bb64","sequence":{"long":17973},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488304430211,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1282864},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78ddd528-bb13-46ee-922e-a23af05fb34a","sequence":{"long":17974},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488554032827,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"860ce5f1-795e-4dc9-af1c-2826bdea6836","sequence":{"long":17975},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488554032827,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17446","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0055d1da-d510-44e5-888d-119e7f40e82e","sequence":{"long":17976},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488554032827,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17447","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b01f0c27-93c2-47d3-aa3d-0348eee2d63a","sequence":{"long":17977},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488554032827,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17448","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"091d5846-2d53-430b-b65e-abf6076f4e52","sequence":{"long":17978},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488554032827,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17449","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4892b43d-1d5f-403e-8643-514c4a0ce194","sequence":{"long":17979},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488554032827,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17446","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d9b8c5f-ad56-412a-a02e-501cca491a0f","sequence":{"long":17980},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488554032827,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17447","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"465c6ff9-a5c6-4b11-8a4d-a59fc343cf92","sequence":{"long":17981},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488554032827,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17448","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3cfef32-d58e-4e23-a149-b9da816ee19b","sequence":{"long":17982},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584488554032827,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17449","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42cc536f-fdb7-4849-807d-d3612570c0ca","sequence":{"long":17983},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584489314110483,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1284046},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f2d04a3-42e5-4253-a44d-dcc3bc889fff","sequence":{"long":17984},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1284046},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f63be5cf-75da-40cb-a25c-e86667c1f570","sequence":{"long":17986},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77eb063d-0de1-43ef-acbf-d63b254fdbb3","sequence":{"long":17985},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9bdd269-1bae-4384-b2d0-2cfd46f80ecf","sequence":{"long":17988},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e8e8261-2d59-4b09-b33d-17d8ed7ec4d3","sequence":{"long":17987},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64728947-e8c2-4590-9cb1-cf8f7f156185","sequence":{"long":17990},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"363ed040-d29c-413d-b2ca-1628258d56bc","sequence":{"long":17989},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa8501df-b3cf-452a-ba38-7acdba2b7c31","sequence":{"long":17991},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4a1c0e5-b4c3-4199-b210-638d43a02fcc","sequence":{"long":17992},"type":"EVENT_READ","threadId":{"int":100308},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23a9771a-b550-4f75-84f3-df7f5c896a44","sequence":{"long":17993},"type":"EVENT_READ","threadId":{"int":100308},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c4c9e51b-b282-419f-ab71-45c05355cc01","sequence":{"long":17994},"type":"EVENT_READ","threadId":{"int":100308},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2430},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd220c91-b605-4d14-a2dd-2e1d0292a922","sequence":{"long":17995},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2483},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df779dd4-8dab-4dc0-a1cf-a3eaba0fabd7","sequence":{"long":17996},"type":"EVENT_WRITE","threadId":{"int":100308},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3407d882-48d5-4ac2-92fd-50a1179bb697","sequence":{"long":17997},"type":"EVENT_READ","threadId":{"int":100308},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"859a3153-fba3-4640-b0ad-f78a67158512","sequence":{"long":17998},"type":"EVENT_READ","threadId":{"int":100308},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"85f7cfb3-8c2a-4d41-acc1-37a46c68e3ba","sequence":{"long":17999},"type":"EVENT_READ","threadId":{"int":100308},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1178},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c4716e9-9fd0-4e88-ba8a-f666c4e87c57","sequence":{"long":18000},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1231},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9f77c3f-dd23-42d6-a4aa-c4537fb043ae","sequence":{"long":18001},"type":"EVENT_WRITE","threadId":{"int":100308},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37cf5363-dd60-40f2-ac1e-802c9e970df9","sequence":{"long":18002},"type":"EVENT_READ","threadId":{"int":100308},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03d716ae-8fbc-4ad4-a24e-482717b5e0e7","sequence":{"long":18003},"type":"EVENT_SENDTO","threadId":{"int":100308},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17450","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17436bf7-79a9-41b7-aa38-63d17c8a9717","sequence":{"long":18004},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17450","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f95e4ef0-7265-47c6-9fac-9fecea2fdf8b","sequence":{"long":18005},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf413d87-f676-49bd-bf52-f45af6e7416a","sequence":{"long":18006},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"678ba80f-6420-49c7-9d6c-932afa799d58","sequence":{"long":18007},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490123842997,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbec9e92-c89a-46fa-90ca-2afc8dfcc1ec","sequence":{"long":18008},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490133853052,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dbd4ad7b-7e52-4855-bf52-68c8b01156c7","sequence":{"long":18009},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490133853052,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"186596ec-07cb-4c45-b956-3a687b527953","sequence":{"long":18010},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584490333831535,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1286488},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f39dde7a-b027-49dd-ae5c-ea723b8d5b24","sequence":{"long":18011},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584491344558360,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1286849},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a15133b-848f-4f23-92e0-5494f3389f41","sequence":{"long":18012},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584491553878990,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e226800-e72c-4e14-9524-2728cdb9f9c4","sequence":{"long":18013},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584491553878990,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17451","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d2fb658-8f9f-4ea0-8d33-05c2635a71fa","sequence":{"long":18014},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584491553878990,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17452","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5919f52d-dbe4-4112-bbe5-8445e157f3b1","sequence":{"long":18015},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584491553878990,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17453","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd00ed27-df77-4412-89df-77d3b4187f43","sequence":{"long":18016},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584491553878990,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17454","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e863f68-10c6-4583-97d9-c41f59b834b0","sequence":{"long":18017},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584491553878990,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17451","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fe42052-f0d8-45af-9db4-9f76ae24a464","sequence":{"long":18018},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584491553878990,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17452","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2f291e6-0d75-447e-b702-23c7d801d1f3","sequence":{"long":18019},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584491553878990,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17453","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a817dd2d-5e34-4d99-aee6-565ee2959c09","sequence":{"long":18020},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584491553878990,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17454","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9abe467d-32ce-4630-9c20-04347f8cdfc9","sequence":{"long":18021},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1286849},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f38a9be5-6e83-4b52-bb76-2e4e0eeb0c9d","sequence":{"long":18023},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d789c9a-f272-4ccd-854d-f6676b7f836f","sequence":{"long":18022},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3298a0e3-e3c3-4f84-85a3-bfb06eb0b00f","sequence":{"long":18025},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b737f28c-0db4-4002-af95-fcac45fe0387","sequence":{"long":18024},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f355bf05-cae4-45a3-b6ba-993d3a2210e9","sequence":{"long":18027},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2db7658a-21c2-4c29-a9ab-14c2a8ee73d8","sequence":{"long":18026},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7603a96e-eae1-4ae4-889b-04f9f5f38f31","sequence":{"long":18028},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de97b9df-18fa-4d3b-8efe-bc9d7144b7d3","sequence":{"long":18029},"type":"EVENT_READ","threadId":{"int":100309},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7cc91cc-d93a-4ea3-a0dd-29dad07b19f4","sequence":{"long":18030},"type":"EVENT_READ","threadId":{"int":100309},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"017254eb-5288-4e31-ad2d-21aaa7a6412a","sequence":{"long":18031},"type":"EVENT_READ","threadId":{"int":100309},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2438},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b15cc599-cca6-4660-9ce8-a5ac2ba02663","sequence":{"long":18032},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2491},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80b225f0-cb51-45c0-ac76-b056d8a755a0","sequence":{"long":18033},"type":"EVENT_WRITE","threadId":{"int":100309},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b963e69-aebf-4e38-bbca-12694d3fcef5","sequence":{"long":18034},"type":"EVENT_READ","threadId":{"int":100309},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1128ec63-5c69-4b9c-9ae4-0818df9dfe13","sequence":{"long":18035},"type":"EVENT_READ","threadId":{"int":100309},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd25895a-0129-486b-9284-82a7a901228a","sequence":{"long":18036},"type":"EVENT_READ","threadId":{"int":100309},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":357},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5be19e2b-73bf-4aaa-923a-85a24299ff94","sequence":{"long":18037},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":410},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d807cd1-3bbc-4475-8c4c-b2cede40d352","sequence":{"long":18038},"type":"EVENT_WRITE","threadId":{"int":100309},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"638890ad-6515-4532-889f-104159c3e025","sequence":{"long":18039},"type":"EVENT_READ","threadId":{"int":100309},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aab2b7a9-61f2-4bc6-a6b7-4e443c02333c","sequence":{"long":18040},"type":"EVENT_SENDTO","threadId":{"int":100309},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17455","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"39f95754-ae05-4029-a9f6-5a0888af77c8","sequence":{"long":18041},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17455","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08b5f6e4-00d9-465d-974a-cbbccf849877","sequence":{"long":18042},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0aca58f9-403a-45f7-9170-df2459627491","sequence":{"long":18043},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7d39d8d3-303b-41d2-bd2c-06d51a99278e","sequence":{"long":18044},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492124051666,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a972500f-c6d8-4dc8-8099-558681e9d287","sequence":{"long":18045},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492133997455,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df9c4544-0495-4eea-ba2a-729360b76af9","sequence":{"long":18046},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492133997455,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"253f0587-43c2-4a7a-a388-cf79187b995c","sequence":{"long":18047},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584492364302282,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1290166},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"910cdf38-f51a-4088-9db5-30fa06afc720","sequence":{"long":18048},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584493374204607,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1290531},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"334d6f13-7001-4dd3-b2db-23d25abb79bf","sequence":{"long":18049},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1290531},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d65186a3-bde2-4052-9f93-bf324b432f6b","sequence":{"long":18051},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"125b7d73-5ffa-4777-aca1-41e6a08ae685","sequence":{"long":18050},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c243dc2b-76b6-485d-bf2f-48c73f10305b","sequence":{"long":18053},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8f9c153-f2c2-42ba-9b00-2810423393a8","sequence":{"long":18052},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"043d0f2a-1002-492f-aa71-7fe2b4e3d540","sequence":{"long":18055},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fa18c25-6922-4d1e-bf45-13d2f0b76237","sequence":{"long":18054},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c4221d2-94ba-433f-a512-41833d97e832","sequence":{"long":18056},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2b0fa29-5764-4251-8092-b0356fabf233","sequence":{"long":18057},"type":"EVENT_READ","threadId":{"int":100310},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46974087-30cc-481b-a800-007feffe5185","sequence":{"long":18058},"type":"EVENT_READ","threadId":{"int":100310},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a03f66fe-5401-42dc-85b1-071e34d7a31f","sequence":{"long":18059},"type":"EVENT_READ","threadId":{"int":100310},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3313},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1da1301-87a1-4256-8ef6-77e882a593ce","sequence":{"long":18060},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3366},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a69bb1e3-eb81-4db8-91bb-6222a1b6f5a2","sequence":{"long":18061},"type":"EVENT_WRITE","threadId":{"int":100310},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4075cc76-f4ce-4221-b858-19224b69a73e","sequence":{"long":18062},"type":"EVENT_READ","threadId":{"int":100310},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfe7f6ae-be7d-4a15-ad02-03e9e67ba8fc","sequence":{"long":18063},"type":"EVENT_READ","threadId":{"int":100310},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc8e4fd0-278d-425c-b838-737f96eea10e","sequence":{"long":18064},"type":"EVENT_READ","threadId":{"int":100310},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95bb7c31-519a-432a-9779-7e641f798ede","sequence":{"long":18065},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7b38624-46bd-4fc0-88b3-009fff2d53b8","sequence":{"long":18066},"type":"EVENT_WRITE","threadId":{"int":100310},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98f8424b-17c3-4b71-bbf5-7fe29966c9eb","sequence":{"long":18067},"type":"EVENT_READ","threadId":{"int":100310},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0745d790-ab57-48c0-9ac9-751f10ad2ff2","sequence":{"long":18068},"type":"EVENT_SENDTO","threadId":{"int":100310},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17456","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a1b664c-3cee-4c7a-b7f9-e574a6053a23","sequence":{"long":18069},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17456","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a109b69a-f5b6-4491-be6e-a2016c50e186","sequence":{"long":18070},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494123841560,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d02d383-15a1-43cb-8fc7-58b16fa86f92","sequence":{"long":18071},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494133856389,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10b7b724-9762-40be-892c-237661fe9256","sequence":{"long":18072},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494133856389,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4e85c3c-e2d2-4933-aeb3-e3e70f35a431","sequence":{"long":18073},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494133856389,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64e34608-6d77-4b94-ab90-e629d1b99c36","sequence":{"long":18074},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494133856389,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4952ce58-874b-4556-8667-b2b385a94063","sequence":{"long":18075},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494394619608,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1292971},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"37bd92b9-f3a6-4725-bc6d-69da80855fb6","sequence":{"long":18076},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494554778756,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4195fe60-4d4e-41a1-bbd5-c70e40c352c1","sequence":{"long":18077},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494554778756,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17457","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"826be225-9549-4f65-8060-b002b19cfb6b","sequence":{"long":18078},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494554778756,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17458","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49e74dae-34cb-4504-a2c2-706385577e29","sequence":{"long":18079},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494554778756,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17459","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"668c75a6-4a6d-4155-b773-646611a1b952","sequence":{"long":18080},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494554778756,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17460","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8aa37cbd-a3ea-4deb-8dd0-5a128dfd4784","sequence":{"long":18081},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494554778756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17457","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38dad713-93b5-4138-90c0-04347a30a4ec","sequence":{"long":18082},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494554778756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17458","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfaa493e-f44b-4088-bc99-da8ef00b423a","sequence":{"long":18083},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494554778756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17459","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cadf81e5-b066-454d-9072-ad932d089dae","sequence":{"long":18084},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584494554778756,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17460","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b183d9a5-470e-415e-b014-2e4dc40d1c6b","sequence":{"long":18085},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584495404277052,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1294156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"04f32995-8592-441d-9a9b-4705421ecc31","sequence":{"long":18086},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1294156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9a5433e9-5679-4c6a-8b37-a3f79bf8608c","sequence":{"long":18088},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"639bb461-9958-46ad-a7d3-6a475296e55d","sequence":{"long":18087},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71e34735-8319-4e74-b861-fdc1b3d007f1","sequence":{"long":18090},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41ce5510-3afe-42a5-acc7-2febbc759e7d","sequence":{"long":18089},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9427f04a-95e0-4faa-97a2-fb23c338ba94","sequence":{"long":18092},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a635733b-ec10-4785-9caa-1bbcba027ef7","sequence":{"long":18091},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24dff586-5458-4892-8ede-398b14996a66","sequence":{"long":18093},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a151713b-90bc-40b5-be70-baf67a88b81d","sequence":{"long":18094},"type":"EVENT_READ","threadId":{"int":100311},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2235382-faca-417c-8f37-dc16220b76b6","sequence":{"long":18095},"type":"EVENT_READ","threadId":{"int":100311},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"679932ce-3f2b-484b-a8b1-6819c1aff30d","sequence":{"long":18096},"type":"EVENT_READ","threadId":{"int":100311},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2436},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ca6d0a1-3e6a-44f6-8356-df94832db01c","sequence":{"long":18097},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2489},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4bba24a2-1750-49f4-abf2-b6fcb72b97d2","sequence":{"long":18098},"type":"EVENT_WRITE","threadId":{"int":100311},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"118f70f4-1f13-439d-8436-d680d93e41c7","sequence":{"long":18099},"type":"EVENT_READ","threadId":{"int":100311},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8aafd708-709a-4c2c-b0e5-aa4351ab0b10","sequence":{"long":18100},"type":"EVENT_READ","threadId":{"int":100311},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1dcafef0-b651-43e4-9d98-c5493ddc670c","sequence":{"long":18101},"type":"EVENT_READ","threadId":{"int":100311},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1181},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4dec375a-dfaa-4da2-8705-ced258dfce05","sequence":{"long":18102},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1234},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b8811ac-9620-402d-ac1f-3972a49715cd","sequence":{"long":18103},"type":"EVENT_WRITE","threadId":{"int":100311},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29f58f78-ccc1-49c7-a73b-324cf62b41f6","sequence":{"long":18104},"type":"EVENT_READ","threadId":{"int":100311},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"562cb613-38dd-4042-b07f-d4c2930167c2","sequence":{"long":18105},"type":"EVENT_SENDTO","threadId":{"int":100311},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17461","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b85a2e73-0343-4c7f-a34d-8d6719a29a02","sequence":{"long":18106},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17461","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02956882-fab9-4e77-ab61-2ffab01b6fdd","sequence":{"long":18107},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aecd7a46-0c6c-441e-bc6d-e55624936736","sequence":{"long":18108},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8cc9066-8b63-4703-92da-31a1c34eb0c8","sequence":{"long":18109},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496123875716,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b22f196c-5f0e-4b51-8a44-3463680d8ad6","sequence":{"long":18110},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496134877797,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4780817a-a045-4d4f-8453-0c4b8744dd7c","sequence":{"long":18111},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496134877797,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8265a3d3-1386-4688-8f98-d2e052adaabd","sequence":{"long":18112},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584496423910610,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1296587},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18a8d53b-4af3-4de3-9daa-eb3f20d21705","sequence":{"long":18113},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584497433831100,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1296953},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bece42d-f6d7-41b9-abae-ffcfff744119","sequence":{"long":18114},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584497554705118,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24d72b0a-f23b-4209-920b-6eea1cd131ab","sequence":{"long":18115},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584497554705118,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17462","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c9ab757-0f33-4973-b0e1-3f3d1662c341","sequence":{"long":18116},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584497554705118,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17463","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7501fbac-64c6-4c4a-803f-bda068fbe4cc","sequence":{"long":18117},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584497554705118,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17464","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52c7c9a3-9fe5-4375-a892-3e5cab65acb3","sequence":{"long":18118},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584497554705118,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17465","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ee21116-a07c-4f28-96b7-f2fbc3a7e32c","sequence":{"long":18119},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584497554705118,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17462","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18e38654-5eb8-4425-a4e2-3dc3efcc42af","sequence":{"long":18120},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584497554705118,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17463","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d0049af-ca26-44d9-922b-9662cea3bd2e","sequence":{"long":18121},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584497554705118,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17464","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46796a42-29c4-48a2-acf5-4cd5e0ea321b","sequence":{"long":18122},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584497554705118,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17465","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"edddb547-5de1-40f7-9e0d-a7ff3daffb90","sequence":{"long":18123},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1296953},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98dd36c9-711f-492e-89b2-40da525549f4","sequence":{"long":18125},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8c43ece-51d0-4a07-b79d-b3569e13923b","sequence":{"long":18124},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"355813ce-4d31-4444-a702-ae1cf54cec8f","sequence":{"long":18127},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8b000af-a6ba-4fce-842a-94b024931bd1","sequence":{"long":18126},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b9e10ff-0ad0-4601-b28d-3aa2f6806af0","sequence":{"long":18129},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9e588c4-6c03-4995-86d9-5cba49bc4ed2","sequence":{"long":18128},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a716e37f-6d58-41ce-b1e1-38e169f8a3d7","sequence":{"long":18130},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f30a5c5-a9b4-4fae-851f-833788efa4bf","sequence":{"long":18131},"type":"EVENT_READ","threadId":{"int":100312},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cd8c5b05-d661-4e26-9b84-02f571e22d16","sequence":{"long":18132},"type":"EVENT_READ","threadId":{"int":100312},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b11191d1-13ad-4ebf-83d9-1969353e8171","sequence":{"long":18133},"type":"EVENT_READ","threadId":{"int":100312},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2427},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38608942-b8d5-493e-89e3-ff97e29db735","sequence":{"long":18134},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2480},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93ac20cb-f937-47ed-b836-20b776774f5b","sequence":{"long":18135},"type":"EVENT_WRITE","threadId":{"int":100312},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"47fcf20c-55cd-4bc5-b694-733660b862e1","sequence":{"long":18136},"type":"EVENT_READ","threadId":{"int":100312},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7353c2dd-1bc8-4c50-87dd-b8869082f806","sequence":{"long":18137},"type":"EVENT_READ","threadId":{"int":100312},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67845292-b697-4696-8f70-1b032b751f82","sequence":{"long":18138},"type":"EVENT_READ","threadId":{"int":100312},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":362},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00493e04-2d51-4e77-a0d9-07add14d2913","sequence":{"long":18139},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":415},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"238972e7-9e38-4129-823a-0defaf75dc6b","sequence":{"long":18140},"type":"EVENT_WRITE","threadId":{"int":100312},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4d8f12a-fb98-4ebd-8b99-76534d0bb8d1","sequence":{"long":18141},"type":"EVENT_READ","threadId":{"int":100312},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bbf32460-7a9c-4082-8e31-57ddda46eea1","sequence":{"long":18142},"type":"EVENT_SENDTO","threadId":{"int":100312},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17466","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7c0a63ce-c55d-4fe6-9977-956bdc8f5d78","sequence":{"long":18143},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17466","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f256a00-e553-4669-9e9b-5f616a8f442a","sequence":{"long":18144},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e0de0dc9-1212-4951-b383-10325cca7730","sequence":{"long":18145},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d450284f-7a62-4ea3-a21a-697bc091449d","sequence":{"long":18146},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ed2a971-25d6-4a08-bdd2-4cb544ee1193","sequence":{"long":18147},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6c5e37b0-61c1-4549-9122-c66c52f3a18d","sequence":{"long":18148},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498124133887,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"068f5432-d6b7-4cf3-9780-8bcf9ea46f06","sequence":{"long":18149},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584498454210284,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1300272},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f01d01ab-8562-48ca-aa78-a69993ff9e1e","sequence":{"long":18150},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584499464335120,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1300637},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0407922d-beeb-47a2-bdea-ba7b7c75c991","sequence":{"long":18151},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1300637},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e159804-cd91-4452-ad32-f10369762322","sequence":{"long":18153},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22049ed4-c50a-44a4-8c90-028d9528e81a","sequence":{"long":18152},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42402dff-b63c-4b34-9482-055af0910e43","sequence":{"long":18155},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ff4cd416-2234-4d70-88a3-307b91dfac35","sequence":{"long":18154},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4b87735-44dc-4ea6-90e7-e045680a3df1","sequence":{"long":18157},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0fa1dfc1-4686-48db-9839-a1648842f407","sequence":{"long":18156},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c88e1d3c-fc2f-47a5-973c-7693e94526c0","sequence":{"long":18158},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b648df1-be76-4a74-ba35-c97a447afe5f","sequence":{"long":18159},"type":"EVENT_READ","threadId":{"int":100313},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"547344a5-8eaa-4880-bf8b-99d8d5c2eea8","sequence":{"long":18160},"type":"EVENT_READ","threadId":{"int":100313},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c34412b2-cfd2-4dc8-8ef4-396443c4c88c","sequence":{"long":18161},"type":"EVENT_READ","threadId":{"int":100313},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3315},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fd1ee7f5-12f5-4cd6-8a76-fdf4578e3c83","sequence":{"long":18162},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3368},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3289f888-3ff9-474c-a4f8-7182f4c2a4e9","sequence":{"long":18163},"type":"EVENT_WRITE","threadId":{"int":100313},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f26bc89e-075e-44fd-b1bf-fc51d39dd063","sequence":{"long":18164},"type":"EVENT_READ","threadId":{"int":100313},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97eacc23-de8b-411a-b156-fa95bea43139","sequence":{"long":18165},"type":"EVENT_READ","threadId":{"int":100313},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a947f2e6-120f-4e34-b27c-a2c3859fb648","sequence":{"long":18166},"type":"EVENT_READ","threadId":{"int":100313},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"221800ac-15e2-45cd-bd53-d39d1ea4f0a4","sequence":{"long":18167},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6f64197a-ae63-48e4-b0d7-7dbab93dc758","sequence":{"long":18168},"type":"EVENT_WRITE","threadId":{"int":100313},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abac70a2-a9fb-4d79-9b6c-cf87e0715111","sequence":{"long":18169},"type":"EVENT_READ","threadId":{"int":100313},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"184d4d78-abf9-4439-adc4-46675fefccd3","sequence":{"long":18170},"type":"EVENT_SENDTO","threadId":{"int":100313},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17467","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8b98b56-7836-410c-804a-ae7753e4a47d","sequence":{"long":18171},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17467","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5edce525-1b4f-4598-a6b7-1b7061a6cf39","sequence":{"long":18172},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500123896603,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d7be0159-976a-4a9f-b0e1-300c8a167d0f","sequence":{"long":18173},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500134366800,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34166bc5-d81e-47c9-aa91-0bddd1297c21","sequence":{"long":18174},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500134366800,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac314a8e-a935-4525-985f-6f61316046a3","sequence":{"long":18175},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500134366800,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7020abad-4292-49a5-a25e-99b5b1a6331b","sequence":{"long":18176},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500134366800,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cf4fc0a-1d02-4bf9-8a88-d95f32036c06","sequence":{"long":18177},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500483887426,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1303076},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dd5357d1-8990-4052-85e0-1b2cdddd213f","sequence":{"long":18178},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500554503965,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73e9ab37-cd72-4454-a669-3473ffa24e14","sequence":{"long":18179},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500554503965,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17468","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7363dc1b-64be-487b-9642-f82c7fe4ccc1","sequence":{"long":18180},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500554503965,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17469","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d551123-5796-40a8-af1e-9bee1b0fdca7","sequence":{"long":18181},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500554503965,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17470","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91a57d54-aa22-46ee-a3f4-be0e2fd99221","sequence":{"long":18182},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500554503965,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17471","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c38239d-30c1-4b5e-8115-ece7c85f7d87","sequence":{"long":18183},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500554503965,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17468","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ab473f8-2607-405c-acd3-03c5586544c6","sequence":{"long":18184},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500554503965,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17469","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e75faf4-63b6-465f-acc7-d0c48ab81c2d","sequence":{"long":18185},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500554503965,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17470","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0cd9090c-1845-4757-8d11-8946e1ab30bf","sequence":{"long":18186},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584500554503965,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17471","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46c8a526-048b-4346-8d10-8286a07d95ab","sequence":{"long":18187},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584501494302543,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1304265},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b46fd80b-291b-4349-9070-a2072b557fdb","sequence":{"long":18188},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1304265},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa4a7818-4874-4251-ba0c-1a13d3894b00","sequence":{"long":18190},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01ce6962-8e0e-4112-8b89-ff909ec0d346","sequence":{"long":18189},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ccb29678-09d5-4a03-88f1-bb9a86d8a0e5","sequence":{"long":18192},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e6a5a93-42eb-4e89-b5ae-55741a617b6c","sequence":{"long":18191},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"264483c7-7d66-4b5d-91bd-f58c74329daf","sequence":{"long":18194},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9661f97-a402-4b96-bd08-de9cc4f670b6","sequence":{"long":18193},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66b8d2e6-0d68-41c6-a967-b38a692b46aa","sequence":{"long":18195},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0757ab8-c172-4687-946c-8d87fd66fba4","sequence":{"long":18196},"type":"EVENT_READ","threadId":{"int":100314},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3652576c-c83e-42c4-9ef7-fc303c19232c","sequence":{"long":18197},"type":"EVENT_READ","threadId":{"int":100314},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9073f51f-7ad1-41cb-80c1-7d814c970435","sequence":{"long":18198},"type":"EVENT_READ","threadId":{"int":100314},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2435},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"75690b17-17dc-4af4-9fcd-d3e1bc08b4e1","sequence":{"long":18199},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2488},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27f51b10-9abd-45f8-9090-ace6d138b6d5","sequence":{"long":18200},"type":"EVENT_WRITE","threadId":{"int":100314},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8412b357-041d-4f60-9bb7-e373cc884f24","sequence":{"long":18201},"type":"EVENT_READ","threadId":{"int":100314},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"86457e2b-dff8-41a7-a12f-c7b7f622cc16","sequence":{"long":18202},"type":"EVENT_READ","threadId":{"int":100314},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27102da1-6a8d-4076-b881-0d216bfb2c51","sequence":{"long":18203},"type":"EVENT_READ","threadId":{"int":100314},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1185},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5843c46-35c3-4a9c-bbb4-5701be2d0999","sequence":{"long":18204},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1238},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12aecf6d-464b-472c-b896-a3c8d3071028","sequence":{"long":18205},"type":"EVENT_WRITE","threadId":{"int":100314},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"871579a3-c4f9-476c-87de-ea40d76c7b5a","sequence":{"long":18206},"type":"EVENT_READ","threadId":{"int":100314},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5c47f8c-ef14-4b8b-8b30-968440688a11","sequence":{"long":18207},"type":"EVENT_SENDTO","threadId":{"int":100314},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17472","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b85f58d6-291a-4085-9098-ccec10178391","sequence":{"long":18208},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17472","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"188c6284-42aa-4f5c-9128-4f9fc02b4d91","sequence":{"long":18209},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9c412d6-ca2c-4016-afd3-a30b18fc2bd4","sequence":{"long":18210},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ba1ff5d-ebf7-438e-a752-765974b71ecf","sequence":{"long":18211},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502123867508,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34bc6cbb-cf49-4d14-a5bc-236e8576a3ae","sequence":{"long":18212},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502134290151,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"605939b2-2c20-4314-a02b-d0a370e1b4c6","sequence":{"long":18213},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502134290151,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92e5a613-15c7-4407-83cb-c21ab000981d","sequence":{"long":18214},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584502513870224,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1306700},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d171e95a-c665-4df1-99dd-4e174867110c","sequence":{"long":18215},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584503524253487,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1307063},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46ff14a6-b832-4524-8566-d1b9722c1365","sequence":{"long":18216},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584503554042783,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea124527-6ba7-47b1-86e1-3d812cd04bd3","sequence":{"long":18217},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584503554042783,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17473","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3edb5882-d6ba-484b-836a-3d54485e70d2","sequence":{"long":18218},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584503554042783,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17474","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8119965-1319-447c-b080-3fae7be60291","sequence":{"long":18219},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584503554042783,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17475","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"79eb9f77-6c8a-4aa1-8d04-61f05449f595","sequence":{"long":18220},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584503554042783,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17476","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2bdf0c90-5f29-416d-a75a-c5a39ef0ee12","sequence":{"long":18221},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584503554042783,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17473","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2242e7bd-73a8-4958-a00a-092807b08df4","sequence":{"long":18222},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584503554042783,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17474","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f8940d6-a590-41a3-b34e-a49931c1a679","sequence":{"long":18223},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584503554042783,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17475","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3df9287-dfe7-4756-9889-0d5e10c3fd41","sequence":{"long":18224},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584503554042783,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17476","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b16d6489-f2b5-42e9-9182-1c6bcbbeff66","sequence":{"long":18225},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1307063},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76cc2d14-883c-4ac9-a859-2e4a11e02d61","sequence":{"long":18227},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e62a9399-fa5b-4305-8c22-e821cf567ddf","sequence":{"long":18226},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41873bb8-dbfa-4d50-9b81-a58c544761a1","sequence":{"long":18229},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9df858b8-5275-4b5b-a3c4-7ea027a54c58","sequence":{"long":18228},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c42a120f-3df7-4dc7-a9c5-42a8f327175c","sequence":{"long":18231},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d8d7c470-09a7-411a-b2de-8f371bc0ff01","sequence":{"long":18230},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15874247-00d2-424c-81f3-9a27fa6fb847","sequence":{"long":18232},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5f48860-bbd4-4eb7-8c73-0eae517174bc","sequence":{"long":18233},"type":"EVENT_READ","threadId":{"int":100315},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4449a57-d2c4-490f-befc-ef400303db60","sequence":{"long":18234},"type":"EVENT_READ","threadId":{"int":100315},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02857da6-b5bb-40f6-97ea-86d1b5b55227","sequence":{"long":18235},"type":"EVENT_READ","threadId":{"int":100315},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2431},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eb7cfe49-5098-4754-828b-31165405fe86","sequence":{"long":18236},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2484},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0744071e-7025-40b4-ad7b-5fc6524f9f75","sequence":{"long":18237},"type":"EVENT_WRITE","threadId":{"int":100315},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8ac1389-9a0a-4f39-acfd-fc53232c7225","sequence":{"long":18238},"type":"EVENT_READ","threadId":{"int":100315},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69b88c28-bcd4-488e-85db-f15182b768e2","sequence":{"long":18239},"type":"EVENT_READ","threadId":{"int":100315},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b30b369-cd8f-4ee8-9967-2f48a5e30a48","sequence":{"long":18240},"type":"EVENT_READ","threadId":{"int":100315},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9f77afbc-7360-4b69-ac6a-74c32a82f127","sequence":{"long":18241},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f171a49d-b851-433d-9e06-946f0206b0a3","sequence":{"long":18242},"type":"EVENT_WRITE","threadId":{"int":100315},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64b9d630-4cb5-4196-884f-ed056016d874","sequence":{"long":18243},"type":"EVENT_READ","threadId":{"int":100315},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d76675b7-1a65-476c-8766-10608f07de5b","sequence":{"long":18244},"type":"EVENT_SENDTO","threadId":{"int":100315},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17477","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3997de8-4f9e-4835-aa3c-1b2befdf0aa9","sequence":{"long":18245},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17477","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6afc978-6e6c-48e5-8f50-f0363cfb10be","sequence":{"long":18246},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08730fc6-6ded-4895-92b7-188d0a28d796","sequence":{"long":18247},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac946f22-505c-44af-9dca-2191ca0cd231","sequence":{"long":18248},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504124277208,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0ebbb5c-405f-4ec4-aeb3-0c93bdea5b21","sequence":{"long":18249},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504134185279,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad92ddfd-38e4-4828-8931-9d5155a408c9","sequence":{"long":18250},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504134185279,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"630e55a8-ac4d-4653-8a86-e3cdce323455","sequence":{"long":18251},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584504544447345,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1310377},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa5a212f-ee2e-40ca-a00d-9020e1b994ac","sequence":{"long":18252},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584505554355040,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1310742},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64403a3a-7f16-4cd3-8982-9384544248a7","sequence":{"long":18253},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1310742},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f225f97e-d730-4252-8340-96ff1c61c188","sequence":{"long":18255},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2566ec41-a4e9-4af9-ad2b-fc1a9bc5db0d","sequence":{"long":18254},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c207336-8202-4f82-b74e-c13bc1e2b9bd","sequence":{"long":18257},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5c9330a1-6a30-4028-9610-efb13807ecec","sequence":{"long":18256},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f892c085-6d27-4a62-8f22-9f0f5c252228","sequence":{"long":18259},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8c4f3af-60d9-4cd3-bcd5-fd5f2491520f","sequence":{"long":18258},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"68ad605c-8068-4317-b663-70231e0092b6","sequence":{"long":18260},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"05e0276e-f3a4-4b80-b3b2-c6bc699bf4d9","sequence":{"long":18261},"type":"EVENT_READ","threadId":{"int":100316},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19386926-871c-4019-8f9a-dbaa5bd01945","sequence":{"long":18262},"type":"EVENT_READ","threadId":{"int":100316},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed277d90-10fe-4b70-9468-32b672bf4c76","sequence":{"long":18263},"type":"EVENT_READ","threadId":{"int":100316},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3310},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"01a90bf1-687f-4895-91f7-549a5c03895a","sequence":{"long":18264},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3363},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5c08e72-902a-48d6-a75d-a054d7781b78","sequence":{"long":18265},"type":"EVENT_WRITE","threadId":{"int":100316},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d22943d1-7e4a-4ff5-8d63-b045cf0c00f2","sequence":{"long":18266},"type":"EVENT_READ","threadId":{"int":100316},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7bc3356a-e454-45e3-a6e5-c3ace818b9d3","sequence":{"long":18267},"type":"EVENT_READ","threadId":{"int":100316},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"722580fc-a6e7-4d80-8da4-8d1b1dbe15ac","sequence":{"long":18268},"type":"EVENT_READ","threadId":{"int":100316},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2330051c-37d9-4ff1-80d7-6baa39a03b36","sequence":{"long":18269},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b84473a4-22ca-4500-8d31-3783192a0171","sequence":{"long":18270},"type":"EVENT_WRITE","threadId":{"int":100316},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4a7be2f-6816-4887-9843-773c6bf7c4b2","sequence":{"long":18271},"type":"EVENT_READ","threadId":{"int":100316},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"439579b5-f8ce-4e78-ba73-6d56ec3e2764","sequence":{"long":18272},"type":"EVENT_SENDTO","threadId":{"int":100316},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17478","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"549bb14e-376a-4d4d-85e9-396cd6cd24c3","sequence":{"long":18273},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17478","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"73189417-3efe-401d-b916-a02e6820f244","sequence":{"long":18274},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506124678482,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c47b918d-509b-4076-a985-741174eaa709","sequence":{"long":18275},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506134086102,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0723eb06-ff26-41f6-a643-dae3d8836bfa","sequence":{"long":18276},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506134086102,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51b715bb-ba05-4064-b395-07663d592cd4","sequence":{"long":18277},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506134086102,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55adb254-5fc1-4d8f-abcd-f527f461dc28","sequence":{"long":18278},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506134086102,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"50cabee7-34a2-4b33-85fa-31869844832f","sequence":{"long":18279},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506553910240,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a6bf8ea-640a-4492-8e07-65d17c065726","sequence":{"long":18280},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506553910240,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17479","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"11b7e186-a45d-44e0-a5f0-e0aa5d476237","sequence":{"long":18281},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506553910240,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17480","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6b45b3c4-725d-4a4c-9b71-1aa38e35b676","sequence":{"long":18282},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506553910240,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17481","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad2ff457-5a53-4db3-baae-398a419027a0","sequence":{"long":18283},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506553910240,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17482","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e2d4973f-7fc0-48c5-af50-072d16e2909b","sequence":{"long":18284},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506553910240,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17479","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e9a11000-dadb-4cc2-ac86-6e09df596aea","sequence":{"long":18285},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506553910240,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17480","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1236d958-5629-4c8a-90c7-0119eb11dc8a","sequence":{"long":18286},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506553910240,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17481","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"befcf156-b4f7-482b-8ed3-611d8d520043","sequence":{"long":18287},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506553910240,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17482","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0ce85e2f-9947-478f-af57-c810885dd091","sequence":{"long":18288},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584506574579623,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1313977},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08b19543-946e-48df-ac87-5fb131e68227","sequence":{"long":18289},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584507584139091,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1314341},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"15403b5b-b8d2-462b-91df-bbf461af17a2","sequence":{"long":18290},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1314341},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3a01933b-1877-4800-8f7a-e9761d5f5b99","sequence":{"long":18292},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4dc5ee5-0c66-4989-ada5-a5f69783add2","sequence":{"long":18291},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e49501f-e639-41fe-aecf-054a1dc1f418","sequence":{"long":18294},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"277545fd-39eb-4771-8c66-3eb5e77c0249","sequence":{"long":18293},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e438dcc0-dd75-4d13-bc03-e2ec49d34c9f","sequence":{"long":18296},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ecfb25a8-3877-4235-9600-2c0c943536d6","sequence":{"long":18295},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc727e9d-46e0-4187-82df-0fe28f08e1a2","sequence":{"long":18297},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c93cc5c-ef1c-4aba-90c8-b95ff86fe890","sequence":{"long":18298},"type":"EVENT_READ","threadId":{"int":100317},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef0462c4-69ff-484d-8255-a2bc246b6c33","sequence":{"long":18299},"type":"EVENT_READ","threadId":{"int":100317},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7e74a05-464c-4065-ae09-4db605c1decb","sequence":{"long":18300},"type":"EVENT_READ","threadId":{"int":100317},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3231},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b650e1a1-4234-4aab-a2ec-eea6a335702b","sequence":{"long":18301},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3284},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ced4f95d-2842-493a-9c4c-36d90197f297","sequence":{"long":18302},"type":"EVENT_WRITE","threadId":{"int":100317},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"161f0bef-533c-4819-858b-72ab96786373","sequence":{"long":18303},"type":"EVENT_READ","threadId":{"int":100317},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac1652fd-0fdc-4e9f-aefa-6dcdc2520429","sequence":{"long":18304},"type":"EVENT_READ","threadId":{"int":100317},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77ca96b2-e18e-4df9-9ea4-26b7dc79d31b","sequence":{"long":18305},"type":"EVENT_READ","threadId":{"int":100317},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17d64e3d-9838-4136-9350-39861ff8cf6c","sequence":{"long":18306},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d413a54-277a-4c93-a33b-37fafc27b844","sequence":{"long":18307},"type":"EVENT_WRITE","threadId":{"int":100317},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a37ccf02-8c36-4c3c-ac37-8cd573b16784","sequence":{"long":18308},"type":"EVENT_READ","threadId":{"int":100317},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"424a3cd3-be32-45d4-abc0-c1c3750379d8","sequence":{"long":18309},"type":"EVENT_SENDTO","threadId":{"int":100317},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17483","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22299af7-32a8-41ab-bb83-92d5e5b2b95e","sequence":{"long":18310},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17483","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d368548-09f9-440d-a6fe-2d0f3abe60f5","sequence":{"long":18311},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508123906119,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"55a409fa-592d-48fc-94c6-83f4e6c36d2e","sequence":{"long":18312},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508134002991,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96659b09-b75b-48e9-a1d9-e1d09d86c12d","sequence":{"long":18313},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508134002991,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d887ff84-0156-4478-b634-3cedf6ce0cba","sequence":{"long":18314},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508134002991,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f0f3fb9b-db87-4e41-a0e0-0599bcae86d1","sequence":{"long":18315},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508134002991,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2dbecc6-8179-45d9-b907-106f66c78bb5","sequence":{"long":18316},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584508604648975,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1316778},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae7412de-6a7e-471c-b14c-9a6c58e736a7","sequence":{"long":18317},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584509554614294,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d1a5633-9b33-4d03-b9cf-c358a6213f2d","sequence":{"long":18318},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584509554614294,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17484","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"be326fdf-0c30-4f76-af90-24a005abf287","sequence":{"long":18319},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584509554614294,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17485","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"921bcebd-4e9e-4f4b-ba75-02745481bbae","sequence":{"long":18320},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584509554614294,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17486","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d57ff0b4-773e-420e-8591-9e1877d9ff39","sequence":{"long":18321},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584509554614294,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17487","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c91feb6f-a160-4d81-9705-6d6295e723c9","sequence":{"long":18322},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584509554614294,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17484","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00615df3-e9b4-4dfc-98ac-0ff5ce18365f","sequence":{"long":18323},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584509554614294,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17485","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f015a83d-c886-4b60-b72c-0a65b8c100d5","sequence":{"long":18324},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584509554614294,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17486","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e496afa-674b-4a3a-a754-ee1f81d2ff25","sequence":{"long":18325},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584509554614294,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17487","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b44fc25-1665-4d3c-8803-8aaacfc63277","sequence":{"long":18326},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584509613880343,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1317963},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e058a7b1-204f-4093-abbc-3f18d3e8b137","sequence":{"long":18327},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1317963},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee3cbc0c-a4fd-4b2b-b05e-fa03cebe4af1","sequence":{"long":18329},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3c87e15-7fbe-4ccb-838c-cfb524872a8d","sequence":{"long":18328},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84c379eb-f87a-45bb-9a48-ebdf3db3f363","sequence":{"long":18331},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5da8678e-6187-4479-b0e9-8b75eeb6bfde","sequence":{"long":18330},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dad0d87a-228d-4b6d-80a2-f1f3b968fea1","sequence":{"long":18333},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5b16c1c-8e02-446b-9b7f-1590649de064","sequence":{"long":18332},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c90dcadb-ee36-4a07-bea2-5e779565b6b7","sequence":{"long":18334},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c443e065-3ba8-46bb-bcce-4a2e8c8cfb77","sequence":{"long":18335},"type":"EVENT_READ","threadId":{"int":100318},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8a2b6eb9-4661-4ca5-8622-f054102813c4","sequence":{"long":18336},"type":"EVENT_READ","threadId":{"int":100318},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb0ce980-7ffc-4e1a-9e02-6fa6915a4fa8","sequence":{"long":18337},"type":"EVENT_READ","threadId":{"int":100318},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2433},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07d971e7-3a24-4798-93a3-fff8a80bbf86","sequence":{"long":18338},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2486},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d90441b7-f663-4a42-9709-7447efbac1f5","sequence":{"long":18339},"type":"EVENT_WRITE","threadId":{"int":100318},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2b7f3f3-0fdb-4284-b962-8eebcb1f23b4","sequence":{"long":18340},"type":"EVENT_READ","threadId":{"int":100318},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d4841024-d644-4844-9c1e-80b640baf6a4","sequence":{"long":18341},"type":"EVENT_READ","threadId":{"int":100318},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a1e9277-a821-404a-a291-441cac7c0fc6","sequence":{"long":18342},"type":"EVENT_READ","threadId":{"int":100318},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1181},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8bc90e99-3ab6-4acd-ad09-ccd5706fe6fc","sequence":{"long":18343},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1234},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8c4ab9a0-8548-4db4-9b93-2870843b0d1b","sequence":{"long":18344},"type":"EVENT_WRITE","threadId":{"int":100318},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ac5ca7a-141f-49af-8c52-061139f51424","sequence":{"long":18345},"type":"EVENT_READ","threadId":{"int":100318},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b32edd21-88f0-4870-9bef-14e43bedf1c9","sequence":{"long":18346},"type":"EVENT_SENDTO","threadId":{"int":100318},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17488","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8292c376-6321-4399-bbf1-0530a15f43d8","sequence":{"long":18347},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17488","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3eef1617-afc9-4e20-af1f-a83332752ccd","sequence":{"long":18348},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eebd84f6-d2de-450d-a103-c07214fc2d49","sequence":{"long":18349},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc79ffbd-f989-4737-adba-2d80d2c5a9e8","sequence":{"long":18350},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510124234916,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0425570c-8de5-4ee8-ad1f-355d302fdf0f","sequence":{"long":18351},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510133914229,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c85dc09-db69-4321-97d9-a0bb580a24e9","sequence":{"long":18352},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510133914229,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aabaed9a-fc89-4503-be37-c8d74f055023","sequence":{"long":18353},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584510634359060,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1320397},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10cb5480-8c8c-4a29-bd9c-bf3241a906c9","sequence":{"long":18354},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584511644593812,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1320761},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2839064-0159-42ff-be58-afbdb85a50fb","sequence":{"long":18355},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1320761},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"152a919e-e916-4a10-aac1-0ec62f32802f","sequence":{"long":18357},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea5255b9-28ee-4f11-9d3f-041fafbf436c","sequence":{"long":18356},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6e661bb3-517d-4f2d-bb56-88d66e1ed3d7","sequence":{"long":18359},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f151cdf0-8cae-4290-9723-5105327c460c","sequence":{"long":18358},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f5182361-dd2f-4d6c-9c40-1983e7ef0116","sequence":{"long":18361},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1017b534-7afe-4480-bf2b-a4490d33fabc","sequence":{"long":18360},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0533079-58db-4da0-a909-d511f658cc12","sequence":{"long":18362},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67d9dfee-d126-46e7-b721-79ad93ac276f","sequence":{"long":18363},"type":"EVENT_READ","threadId":{"int":100319},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"477c33a1-c607-49f6-9ba8-4e0a66f3849f","sequence":{"long":18364},"type":"EVENT_READ","threadId":{"int":100319},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d0d0001d-6a16-464f-949d-8e5f26cf975b","sequence":{"long":18365},"type":"EVENT_READ","threadId":{"int":100319},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2430},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9882b2de-936c-46e4-9faa-2559745fdfca","sequence":{"long":18366},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2483},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0d9acca9-0347-4b56-82ec-e894c2a5fadf","sequence":{"long":18367},"type":"EVENT_WRITE","threadId":{"int":100319},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd33fabd-3147-4ab7-9b9a-1e81a5c2e0ac","sequence":{"long":18368},"type":"EVENT_READ","threadId":{"int":100319},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7856e6d4-b69d-476d-b7f5-2afc9d0dea3e","sequence":{"long":18369},"type":"EVENT_READ","threadId":{"int":100319},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7ea701e-62bb-4e6c-a403-ed632cd434d3","sequence":{"long":18370},"type":"EVENT_READ","threadId":{"int":100319},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ea9d59d-f648-4c52-8ab2-e849a60cc93b","sequence":{"long":18371},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42a79e6f-e00b-4f2b-a923-7825b882d254","sequence":{"long":18372},"type":"EVENT_WRITE","threadId":{"int":100319},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46169419-2d73-4f46-8178-9a2d9e79ef60","sequence":{"long":18373},"type":"EVENT_READ","threadId":{"int":100319},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cf0fb4e6-46c7-45a3-9f1d-94786968c19b","sequence":{"long":18374},"type":"EVENT_SENDTO","threadId":{"int":100319},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17489","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5de47227-50bf-4d5b-90d2-ab2eea9b1504","sequence":{"long":18375},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17489","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95661b0e-391e-4b3e-9a6a-c9bd2bc80109","sequence":{"long":18376},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512124918227,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5643a773-78ed-4410-9315-9fd49666c9cf","sequence":{"long":18377},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512133923572,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f23c75f4-d969-4296-b682-ce1309dedd30","sequence":{"long":18378},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512133923572,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e96ab0bf-e9db-4145-afad-4b9202d26a3d","sequence":{"long":18379},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512133923572,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea891cd3-0313-4f69-b2a1-afdd79c3ba15","sequence":{"long":18380},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512133923572,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb2f2dfc-b95b-467f-8ff2-1458a92556ef","sequence":{"long":18381},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512553869015,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c85168c5-8669-4ab4-8961-fcb5e80cbc38","sequence":{"long":18382},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512553869015,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17490","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d133045-9c50-4c82-971c-4d30c2696e96","sequence":{"long":18383},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512553869015,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17491","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49b0d8be-1b5f-43f3-b7cf-9cfde12e8b4a","sequence":{"long":18384},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512553869015,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17492","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab6f17f3-2440-4cec-8ad2-874a15512ba1","sequence":{"long":18385},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512553869015,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17493","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"51466ba2-91f0-468e-aac4-d42c559942b2","sequence":{"long":18386},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512553869015,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17490","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5d461922-9ce0-46b6-bc17-0181a2a148dc","sequence":{"long":18387},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512553869015,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17491","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6ba7d8e-75a7-4b95-8e63-54fd59d1d63b","sequence":{"long":18388},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512553869015,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17492","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fe303d7-a01f-4ed5-b8df-d9ef555b2546","sequence":{"long":18389},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512553869015,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17493","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd238e6d-c7a7-4a0e-a476-11b42c74ed82","sequence":{"long":18390},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584512664093577,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1323991},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26c8a2c3-e569-481e-8178-38996c506ec6","sequence":{"long":18391},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584513674669025,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1324352},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7f9fda01-cb3d-4d6e-be27-29b5e8e2efbe","sequence":{"long":18392},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1324352},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"917f3fea-0536-4554-8404-7637bf9b5865","sequence":{"long":18394},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"550cffb8-8de0-47ec-ae05-4d3d603f13c0","sequence":{"long":18393},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c9d1f670-aab6-4ccd-9b4e-b33c2ad1c1e0","sequence":{"long":18396},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"07255049-48c9-450e-a623-caae2d7d5bdb","sequence":{"long":18395},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a3cbb52-c2c9-4d68-aaf6-35ce5aa832ae","sequence":{"long":18398},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e5cfbb9c-e4a1-40d9-910e-60f73e9f1c89","sequence":{"long":18397},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1208783-ce23-4c7c-a362-1e6c9eaf4678","sequence":{"long":18399},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d82c628-b9e6-497f-8886-bbfcc2562b65","sequence":{"long":18400},"type":"EVENT_READ","threadId":{"int":100320},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b7e8653a-d764-4ca7-a828-5a31751b7e99","sequence":{"long":18401},"type":"EVENT_READ","threadId":{"int":100320},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"41f8af43-f7c1-488b-a5d2-a87f2c35689f","sequence":{"long":18402},"type":"EVENT_READ","threadId":{"int":100320},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3226},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a1c90b0-3374-40b2-92da-d874538e6c2a","sequence":{"long":18403},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3279},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e84e5a83-6422-4363-bea2-eff8f737f3f9","sequence":{"long":18404},"type":"EVENT_WRITE","threadId":{"int":100320},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8fa113ac-dd08-4cd4-a382-f0f1532d2e35","sequence":{"long":18405},"type":"EVENT_READ","threadId":{"int":100320},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ac24d893-42eb-48d9-a6ac-6e3943ff1d90","sequence":{"long":18406},"type":"EVENT_READ","threadId":{"int":100320},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfd5044b-5383-422d-88c0-c3f8f470e79a","sequence":{"long":18407},"type":"EVENT_READ","threadId":{"int":100320},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":357},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9dbacaa-45bd-4786-8504-9f8bc446e0a6","sequence":{"long":18408},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":410},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cbf824be-8f79-401f-a153-fec241a4e8bc","sequence":{"long":18409},"type":"EVENT_WRITE","threadId":{"int":100320},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8effff38-e176-4cad-9fe2-2f995d841e6a","sequence":{"long":18410},"type":"EVENT_READ","threadId":{"int":100320},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6fa5fa00-6a74-4415-961b-29577e2bca40","sequence":{"long":18411},"type":"EVENT_SENDTO","threadId":{"int":100320},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17494","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fca5805d-5ea4-4c80-8bda-1c0e550fba73","sequence":{"long":18412},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17494","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31bd40ba-7262-450b-8164-f48530a50313","sequence":{"long":18413},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514124150510,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5db41689-2af5-4302-b25c-f1e3d3132634","sequence":{"long":18414},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514133876580,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c120b179-b449-4f52-9b32-21bd9a2da869","sequence":{"long":18415},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514133876580,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"266dd205-0f3c-4205-8f42-9202f9b5c9b3","sequence":{"long":18416},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514133876580,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4d392aff-27d1-4f36-a430-b54129e14cce","sequence":{"long":18417},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514133876580,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2ba03577-c4f4-477d-b8f3-38cb751157d1","sequence":{"long":18418},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584514684242442,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1326787},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abe98e6f-9e3a-4de5-8f3b-bab8e2215f90","sequence":{"long":18419},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584515554205471,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c976ae09-4b4f-4e35-87f4-b44edf2ba15a","sequence":{"long":18420},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584515554205471,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17495","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31f9fddf-8bce-4a60-a5cd-ad9c8604e31b","sequence":{"long":18421},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584515554205471,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17496","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e24fdaa-29ce-432d-9835-0abc17cc8933","sequence":{"long":18422},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584515554205471,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17497","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3165a858-9fe2-4323-8476-f0318f7daafc","sequence":{"long":18423},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584515554205471,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17498","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c551209c-3263-47de-9737-eb3b8743c14c","sequence":{"long":18424},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584515554205471,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17495","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c868fbd-653f-45c7-9793-765bc6e6e6bc","sequence":{"long":18425},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584515554205471,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17496","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"38c9dbf0-d2e5-4c95-9028-324e2c97c563","sequence":{"long":18426},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584515554205471,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17497","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"33b6fec2-2d9f-452f-8979-b6bfdd1ddd30","sequence":{"long":18427},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584515554205471,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17498","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92cf77c6-7ba8-47cf-ae5b-f022cd73f68f","sequence":{"long":18428},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584515693838384,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1327972},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7f2ff91-ccee-4efb-a42c-966a4f0e2cc7","sequence":{"long":18429},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1327972},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"811225e1-9ae0-4a82-ae8b-c79ed419ae2f","sequence":{"long":18431},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad1c0ab7-3003-4a06-bdbc-5425ce6b4b72","sequence":{"long":18430},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a451800b-6905-4c0a-b21f-868039e122e3","sequence":{"long":18433},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"26531d49-2fd5-4171-ad81-77f399b98f3a","sequence":{"long":18432},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fc20403-14ec-4298-b677-b60ea9d07a95","sequence":{"long":18435},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24cae482-4570-4be3-9a3b-42e466a45d68","sequence":{"long":18434},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e895815a-8215-4519-a674-4529b19dac5c","sequence":{"long":18436},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cc49942-2a17-4621-a14a-2aacb59c5492","sequence":{"long":18437},"type":"EVENT_READ","threadId":{"int":100321},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab2a3f66-70eb-4d69-8071-f9703da6a359","sequence":{"long":18438},"type":"EVENT_READ","threadId":{"int":100321},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7f7c838-7ec5-4f29-906d-a8ba41db4987","sequence":{"long":18439},"type":"EVENT_READ","threadId":{"int":100321},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2431},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"abb65da8-f034-4119-bf02-110157c5e47e","sequence":{"long":18440},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2484},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4371469-026c-4327-a9e6-f3877d7e0e0b","sequence":{"long":18441},"type":"EVENT_WRITE","threadId":{"int":100321},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f71cd6c2-1d6b-47f4-9e94-a76f846668c9","sequence":{"long":18442},"type":"EVENT_READ","threadId":{"int":100321},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a315e0d-90c0-4eda-b16f-07a1d37fbbe7","sequence":{"long":18443},"type":"EVENT_READ","threadId":{"int":100321},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a8fccdfa-8277-48e0-9c40-22637e2d66ef","sequence":{"long":18444},"type":"EVENT_READ","threadId":{"int":100321},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1181},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b63a592-c847-4cb4-99ca-eebb710f8663","sequence":{"long":18445},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1234},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cfb2eca-9e1b-4392-8244-a1f613b1a841","sequence":{"long":18446},"type":"EVENT_WRITE","threadId":{"int":100321},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17055d75-b5b9-4ab3-ac01-081eb66501a8","sequence":{"long":18447},"type":"EVENT_READ","threadId":{"int":100321},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8969fc15-e23e-455a-962c-9d4eb1979293","sequence":{"long":18448},"type":"EVENT_SENDTO","threadId":{"int":100321},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17499","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e234ce7-42f7-4f52-9a47-a79a9dc7ca45","sequence":{"long":18449},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17499","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b2c65ec-ca00-48ec-aa5a-991b081b8d9b","sequence":{"long":18450},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"deae0aed-dc9d-4b9a-b4c6-51941c5f9db2","sequence":{"long":18451},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f74d1f23-2716-403a-8c13-c9a7b8c0c8a8","sequence":{"long":18452},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516124360495,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d64af543-08e8-4d40-a1df-6da93dcef57c","sequence":{"long":18453},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516134265541,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f96810fe-c8ce-405c-a1ee-128163bdd2ee","sequence":{"long":18454},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516134265541,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d670845-14a1-4766-a816-cd2c99f5923a","sequence":{"long":18455},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584516714081398,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1330402},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cdad56e4-e603-473c-b316-c198c45b4777","sequence":{"long":18456},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584517724681292,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1330767},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5fd9af95-7724-4f50-97b3-806098fa4818","sequence":{"long":18457},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1330767},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2f4fc009-9e43-4f5f-be56-1d5721d69d15","sequence":{"long":18459},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"36a377fd-87eb-4b36-a326-4f3a1ed60435","sequence":{"long":18458},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6ea28e2-9d9f-4a24-8106-8f4748f32b37","sequence":{"long":18461},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"53beb2ef-3656-4618-85a3-7eb82d43386b","sequence":{"long":18460},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91c4a4b6-1ac9-4622-9a58-755e5b16813d","sequence":{"long":18463},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2d15090-023d-4a41-9792-35022b3304cd","sequence":{"long":18462},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"46149723-f3cc-43c0-81e8-94169b9d4055","sequence":{"long":18464},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4458c9c-acb6-4f42-99c8-9694622dd7ec","sequence":{"long":18465},"type":"EVENT_READ","threadId":{"int":100322},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1521ebc7-113f-4c30-9748-3c238c055b64","sequence":{"long":18466},"type":"EVENT_READ","threadId":{"int":100322},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4cb3f40b-3b87-4363-8fda-a84dbe98a3ea","sequence":{"long":18467},"type":"EVENT_READ","threadId":{"int":100322},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2426},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c95fdfa6-ae6d-4d7b-9f34-fd298195a615","sequence":{"long":18468},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2479},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba9d7ed0-c982-40f4-8e2e-a42610d1ad4b","sequence":{"long":18469},"type":"EVENT_WRITE","threadId":{"int":100322},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23fb6c6c-5ff6-4398-ade6-29115ace171d","sequence":{"long":18470},"type":"EVENT_READ","threadId":{"int":100322},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5f41ae41-ac3a-49a5-8bed-29f88d43d614","sequence":{"long":18471},"type":"EVENT_READ","threadId":{"int":100322},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9cfccb6b-4fec-4eab-9646-c61a0b1505fd","sequence":{"long":18472},"type":"EVENT_READ","threadId":{"int":100322},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"000fcafd-c131-4c2e-931b-ab22b1d01e2d","sequence":{"long":18473},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae7c4909-d297-4e79-9533-38e52e1f7468","sequence":{"long":18474},"type":"EVENT_WRITE","threadId":{"int":100322},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f78ae480-2047-4e5e-965d-ed75aafbf195","sequence":{"long":18475},"type":"EVENT_READ","threadId":{"int":100322},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8da98854-1111-4235-abb4-2c75f286c075","sequence":{"long":18476},"type":"EVENT_SENDTO","threadId":{"int":100322},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17500","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ca62dc5-d874-43f5-a991-04b61a671c03","sequence":{"long":18477},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17500","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49a5e055-930b-4844-af69-dfc984acd971","sequence":{"long":18478},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2584ff2-8445-4297-aa56-0c0dc01e2afb","sequence":{"long":18479},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"87eb70cd-1c85-4661-8fff-d95a72c4c1dd","sequence":{"long":18480},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518124274759,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61af8c24-1257-410b-8070-042451a3cd43","sequence":{"long":18481},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518133899975,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dffce917-db5c-4ea3-91e6-845b2f1e96c9","sequence":{"long":18482},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518133899975,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0a79c11-a981-4ba8-bb34-4c0f347c7293","sequence":{"long":18483},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518553885761,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b2037376-00d3-4c84-933d-6c1926bdb8b1","sequence":{"long":18484},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518553885761,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17501","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84f58c47-9c92-43f7-ba22-949075b351f0","sequence":{"long":18485},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518553885761,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17502","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3ea5bef8-2d50-4ea2-8991-9364c2a877ad","sequence":{"long":18486},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518553885761,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17503","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f42d7bd9-fafe-40c2-9bc0-93772a9621f4","sequence":{"long":18487},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518553885761,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17504","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef66c761-a75a-4154-8182-603f5db48917","sequence":{"long":18488},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518553885761,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17501","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"84b81d6d-1a81-45e8-9add-e728ebf5baec","sequence":{"long":18489},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518553885761,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17502","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"191b8f01-9a9f-49f1-9cc8-022ab48e9623","sequence":{"long":18490},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518553885761,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17503","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"527a5362-af2f-485d-8145-1f371509592a","sequence":{"long":18491},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518553885761,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17504","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"758b6975-4640-4a57-8175-73d7ca4a0e19","sequence":{"long":18492},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584518744305271,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1333999},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cae84b0f-9d2a-4d16-be24-ae4abc463057","sequence":{"long":18493},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584519754223593,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1334362},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"72352146-3cea-4e4c-833a-5c75a5ab5b1b","sequence":{"long":18494},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1334362},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1869b644-192a-4d43-ab9d-69fbba915912","sequence":{"long":18496},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54905e03-234a-46a7-95c6-f42b9d7b2d74","sequence":{"long":18495},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e4764bc-fc50-4e64-9d65-d25cb51018e4","sequence":{"long":18498},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90ac58d4-c4fe-4207-8909-0d612bf55e1c","sequence":{"long":18497},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8326a54-1359-4b7f-bc38-d223a98e32f1","sequence":{"long":18500},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"321fd209-cdbd-4df3-8d8f-8605a4cb8b9d","sequence":{"long":18499},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"34d23c05-c659-4920-be77-26b990f84d42","sequence":{"long":18501},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfbbe7bb-598b-4e3d-9a2a-6cfc5bfe5cb0","sequence":{"long":18502},"type":"EVENT_READ","threadId":{"int":100323},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d6e95f6d-1c3f-4c5d-becd-43988109beb1","sequence":{"long":18503},"type":"EVENT_READ","threadId":{"int":100323},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a6ee8c1-fd4f-4213-ac7d-fab4247ec315","sequence":{"long":18504},"type":"EVENT_READ","threadId":{"int":100323},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3228},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ad59e41b-ac73-4f87-8d37-c3d48d0bd15e","sequence":{"long":18505},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3281},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7317777e-2550-49a4-ac8f-e02e566bed8d","sequence":{"long":18506},"type":"EVENT_WRITE","threadId":{"int":100323},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"61cddb58-5d34-4bd2-90e3-4b770e99cc57","sequence":{"long":18507},"type":"EVENT_READ","threadId":{"int":100323},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1e6c212-537e-469d-86d0-6f60c21f2354","sequence":{"long":18508},"type":"EVENT_READ","threadId":{"int":100323},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c6ffddcb-461c-4b07-a92e-216f3e8c4e08","sequence":{"long":18509},"type":"EVENT_READ","threadId":{"int":100323},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":359},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f64a7e1-66d9-49d7-a966-8232a9a03632","sequence":{"long":18510},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":412},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0a9f4103-1942-47ff-bde2-70caa204ed04","sequence":{"long":18511},"type":"EVENT_WRITE","threadId":{"int":100323},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3c86300b-9f60-41e6-8a59-daf2aa3b9037","sequence":{"long":18512},"type":"EVENT_READ","threadId":{"int":100323},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c2437d7-754d-4c72-82e4-e7b60b00bb19","sequence":{"long":18513},"type":"EVENT_SENDTO","threadId":{"int":100323},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17505","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"97ecf55a-af55-4407-86d3-9c6de2f4fc08","sequence":{"long":18514},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17505","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c20845e-a6b4-4940-a01d-4daa29be3ccd","sequence":{"long":18515},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520123852571,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5270d908-5412-476c-9e0f-b45014938699","sequence":{"long":18516},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520133863831,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0df83e8-20bf-4137-a85d-a3395bd12a65","sequence":{"long":18517},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520133863831,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d54805ae-543f-48dd-8c41-7a06f43408a2","sequence":{"long":18518},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520133863831,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8f32cef-8dba-4fbb-bf71-e4661ccab0cf","sequence":{"long":18519},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520133863831,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b6d68d3-4474-4862-bdc0-39946955f6c3","sequence":{"long":18520},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584520774189856,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1336799},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92d16d2d-5cbb-4237-ba87-ef8566b3d121","sequence":{"long":18521},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584521554215819,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"42c946df-61e9-4167-ad7d-2cb9985f01ba","sequence":{"long":18522},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584521554215819,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17506","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1c74ce9-73a3-4873-ad47-d339c5fcbb47","sequence":{"long":18523},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584521554215819,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17507","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7745ff78-ea50-4452-b59d-7c5f0973d07a","sequence":{"long":18524},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584521554215819,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17508","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"64c1812c-fa39-4d2b-b607-bb668e56ec9d","sequence":{"long":18525},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584521554215819,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17509","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"597e7f21-4573-4993-963b-f8a91863a464","sequence":{"long":18526},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584521554215819,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17506","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"80fdf55d-b4a8-47f8-b21c-e4e566fdad90","sequence":{"long":18527},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584521554215819,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17507","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32650612-b663-44c0-90d7-6807882b9993","sequence":{"long":18528},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584521554215819,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17508","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"624658b1-8913-4e4a-bd66-17ef55b57d2c","sequence":{"long":18529},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584521554215819,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17509","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b8444b4d-b7bb-404f-b48c-c824083948c6","sequence":{"long":18530},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584521783851194,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1337976},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27db9dbe-59ae-4d14-89d1-fe245d575b75","sequence":{"long":18531},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1337976},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dfc8ec10-bb7b-47f2-a103-744f82ffe092","sequence":{"long":18533},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b0253c7-e233-4cbb-b294-2fa761b5b499","sequence":{"long":18532},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"139c41eb-d106-477a-8709-3e5354895590","sequence":{"long":18535},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d6c4cc3-3157-44b8-9d0c-8cf03a1dd4b1","sequence":{"long":18534},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92488544-643f-43ed-8716-f2f768c66fb3","sequence":{"long":18537},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14b19f40-e0fb-42c3-ba58-a4ead3d0149e","sequence":{"long":18536},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6d5d58ef-952a-475d-8a22-6063eac4f3c5","sequence":{"long":18538},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0a087d7-b2a3-4e6e-91e3-1821e0ee51ff","sequence":{"long":18539},"type":"EVENT_READ","threadId":{"int":100324},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3247088e-7a4a-4d98-96c1-e036039c2574","sequence":{"long":18540},"type":"EVENT_READ","threadId":{"int":100324},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d1a32ad1-1cba-420d-88a3-82494afc140e","sequence":{"long":18541},"type":"EVENT_READ","threadId":{"int":100324},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2433},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6a7e7dea-99ab-4c38-aa92-fc48d04a558f","sequence":{"long":18542},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2486},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"31917d75-ce47-431e-aa06-5c0a22fa7baa","sequence":{"long":18543},"type":"EVENT_WRITE","threadId":{"int":100324},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f187d0f1-b6b4-423e-a5eb-cb4b6eae1c8b","sequence":{"long":18544},"type":"EVENT_READ","threadId":{"int":100324},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7ad6a7a6-c32d-4d46-a09b-7ad7463c2c02","sequence":{"long":18545},"type":"EVENT_READ","threadId":{"int":100324},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cd941a8-f9f3-4173-861e-16689d14b5db","sequence":{"long":18546},"type":"EVENT_READ","threadId":{"int":100324},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1173},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4b131007-2323-46b1-b4be-f404c65bb4cc","sequence":{"long":18547},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1226},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"878f7f5a-c4fe-4e27-9eb5-655df49c4a04","sequence":{"long":18548},"type":"EVENT_WRITE","threadId":{"int":100324},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2b6f82c1-6d1a-4af7-82a1-5a409a85642e","sequence":{"long":18549},"type":"EVENT_READ","threadId":{"int":100324},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2d3610a2-5e84-4794-b276-279b58742df3","sequence":{"long":18550},"type":"EVENT_SENDTO","threadId":{"int":100324},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17510","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c7da4961-19e1-4cb7-97f4-955be282c04f","sequence":{"long":18551},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17510","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b6d2b3ea-4f1f-478c-8a73-0c8f18b2f15d","sequence":{"long":18552},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52d67109-0277-4f2c-a341-3f199d313344","sequence":{"long":18553},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d5939a6e-2dfa-4390-90bb-c6772b387a4c","sequence":{"long":18554},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522123950585,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1186787-095a-4ad7-bc55-4976cc94a45f","sequence":{"long":18555},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522134308729,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d20c50ce-af60-487e-b99a-4c6b8ddfce63","sequence":{"long":18556},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522134308729,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1d79589-843d-45cd-b29b-332093b8af9d","sequence":{"long":18557},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584522804691991,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1340408},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4593e0c7-0a4b-427c-a323-b7274fc78e75","sequence":{"long":18558},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584523814374395,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1340770},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7db25bc8-63ea-4b92-8eb8-a81e2443752d","sequence":{"long":18559},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1340770},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae3d4078-39e9-41eb-b081-d28ce79ab15b","sequence":{"long":18561},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed498901-f1bb-44f7-a670-fafe79ac4da8","sequence":{"long":18560},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b00ef90-a094-4013-8b74-e61529ec1928","sequence":{"long":18563},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08cc7975-4d86-4f64-a3fe-7f7cc0bd8c42","sequence":{"long":18562},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"45571516-6c53-4753-86eb-aa507eb007da","sequence":{"long":18565},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5845ba75-5f06-47d6-9b34-9c99735dc716","sequence":{"long":18564},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db8867a1-382d-4a88-9cbd-eb95c0c0bda0","sequence":{"long":18566},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe7f414f-fdc8-44c1-aca0-a93b3b36f192","sequence":{"long":18567},"type":"EVENT_READ","threadId":{"int":100325},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba323e51-9ad4-4a26-8450-837449da5ca6","sequence":{"long":18568},"type":"EVENT_READ","threadId":{"int":100325},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cfd2dbfd-03d4-4172-9de3-031708721cf0","sequence":{"long":18569},"type":"EVENT_READ","threadId":{"int":100325},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2428},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a27555db-cbac-4da7-b652-efcd5b69d24a","sequence":{"long":18570},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2481},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3d530af2-9e1e-4a63-8c56-7d4fa895cc13","sequence":{"long":18571},"type":"EVENT_WRITE","threadId":{"int":100325},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fee8e805-1c27-413c-986c-99e88bff97b1","sequence":{"long":18572},"type":"EVENT_READ","threadId":{"int":100325},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3399584d-3bce-4da2-879f-8b52dc0e26a4","sequence":{"long":18573},"type":"EVENT_READ","threadId":{"int":100325},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0c07b575-15c1-4f02-b974-553833c2f2f1","sequence":{"long":18574},"type":"EVENT_READ","threadId":{"int":100325},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":358},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98d3fa3b-3845-4454-a2c7-30b43c97c075","sequence":{"long":18575},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":411},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"89f35ecc-bdeb-4fe1-80a2-9d878bbd93bc","sequence":{"long":18576},"type":"EVENT_WRITE","threadId":{"int":100325},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ba9af489-cbf5-4057-9b36-ec9441b4891c","sequence":{"long":18577},"type":"EVENT_READ","threadId":{"int":100325},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9bad1c48-0614-400c-9b94-eb9acd3deb4d","sequence":{"long":18578},"type":"EVENT_SENDTO","threadId":{"int":100325},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17511","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eef9039c-e9d5-465c-8410-30f974e4e989","sequence":{"long":18579},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17511","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b32e468c-d764-4b97-a40a-460ffd0a9625","sequence":{"long":18580},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e8d1a190-6b42-4f45-bc28-c3a744205fa2","sequence":{"long":18581},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f51eaa03-c1f5-4e29-8007-24461af0b1d4","sequence":{"long":18582},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48a2be98-e251-45ef-883e-362a6f02ebca","sequence":{"long":18583},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2599d48b-6566-4cc0-a4d4-63238a887145","sequence":{"long":18584},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524124255426,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b4ca8aab-ed2a-4a36-80a6-c29ef10b85dc","sequence":{"long":18585},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524553830255,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3bf81bf-bebc-4921-b689-9504cffdac5f","sequence":{"long":18586},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524553830255,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17512","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b62a16fe-e077-4273-b206-2021df3071cc","sequence":{"long":18587},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524553830255,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17513","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"18b49998-9ec2-4af5-ad6b-4665f03475b8","sequence":{"long":18588},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524553830255,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17514","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"17decccf-f74e-4869-808a-5bcf603302bf","sequence":{"long":18589},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524553830255,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17515","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0aef1963-cb69-4802-83f3-18fc33c416eb","sequence":{"long":18590},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524553830255,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17512","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aa6c6bdc-c3f6-423e-9707-a8842fab6b0e","sequence":{"long":18591},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524553830255,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17513","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e27b73ee-3c1d-4c27-83fe-da612460b4b7","sequence":{"long":18592},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524553830255,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17514","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c520955-58f2-4a9b-b9e5-962d7efa4d0d","sequence":{"long":18593},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524553830255,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17515","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29d9d147-95f4-41b1-9088-2da644a70699","sequence":{"long":18594},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584524833882781,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1343998},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"27dc1e4e-500d-4b14-839d-bcf45813812f","sequence":{"long":18595},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584525844244311,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1344363},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"642fc9f7-05ab-4d7c-bfb6-2fa4a5f6e791","sequence":{"long":18596},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1344363},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c879d0b5-b465-435f-b17d-5a7dcc40f1d7","sequence":{"long":18598},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7685fc48-1e40-4989-a23d-298a63d71ae7","sequence":{"long":18597},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02cb0514-d6f1-4b11-af5f-a40279d92723","sequence":{"long":18600},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc57e58f-ac90-4e65-a4e2-d7d63377a4b1","sequence":{"long":18599},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0139bd8c-57df-4086-b5d9-22a6769636f4","sequence":{"long":18602},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a028d5b8-034d-48b1-b532-2d61874d5c60","sequence":{"long":18601},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ce2e969-bde2-45be-85dc-91f43ae54f0e","sequence":{"long":18603},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5eea5163-a7c4-40ff-95c3-735ef9f502b2","sequence":{"long":18604},"type":"EVENT_READ","threadId":{"int":100326},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b08ed65d-6b73-4ae9-99c6-ac22101c25ea","sequence":{"long":18605},"type":"EVENT_READ","threadId":{"int":100326},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fbd9fb0e-3d4d-48dd-9ab8-089a8a66fb2f","sequence":{"long":18606},"type":"EVENT_READ","threadId":{"int":100326},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3224},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1f7a1b79-fe4a-4cce-ae48-2c8efd3e6d2a","sequence":{"long":18607},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3277},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1a93b779-14d8-443e-88ba-708168e87535","sequence":{"long":18608},"type":"EVENT_WRITE","threadId":{"int":100326},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e3147bda-8c7b-4622-94d6-262ab11fbfff","sequence":{"long":18609},"type":"EVENT_READ","threadId":{"int":100326},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"03fb8c94-eea1-4281-94c7-47d967bec796","sequence":{"long":18610},"type":"EVENT_READ","threadId":{"int":100326},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0d49f21-ef70-428d-8bf4-e17a1bdc001b","sequence":{"long":18611},"type":"EVENT_READ","threadId":{"int":100326},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bafd172b-c376-44d9-89ec-b3a37796e75e","sequence":{"long":18612},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0b9120be-5b2b-4f7c-9535-d64cd9a9a8cb","sequence":{"long":18613},"type":"EVENT_WRITE","threadId":{"int":100326},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c79f3ec4-cf48-451b-aaf4-92721f2a15dc","sequence":{"long":18614},"type":"EVENT_READ","threadId":{"int":100326},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"98abb231-b9ca-41c5-a582-ee00de36f79b","sequence":{"long":18615},"type":"EVENT_SENDTO","threadId":{"int":100326},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17516","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea7bac57-ce2c-4bbd-b2ef-7537688a7707","sequence":{"long":18616},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17516","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8cf724a7-d70b-4d8f-bd1a-d2882451c8f9","sequence":{"long":18617},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526123853790,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"69ce1655-5ac8-4e42-8456-e05fc5cd6056","sequence":{"long":18618},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526133912957,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c2694b26-efa7-423c-bf55-ff2170db5a41","sequence":{"long":18619},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526133912957,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"90578e02-3a84-468a-89d0-1be4d2977747","sequence":{"long":18620},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526133912957,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9d5e9616-553e-4bf0-8dbf-a87d1f5f6f36","sequence":{"long":18621},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526133912957,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aeef600b-8436-488d-8dcf-066c919d4a69","sequence":{"long":18622},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584526864425768,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1346803},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"398e0f9d-b47a-444d-a02c-728725497ce3","sequence":{"long":18623},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584527554179549,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"12215283-f0f9-4ec6-ae72-2a5fbc54c557","sequence":{"long":18624},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584527554179549,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17517","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bc54fba0-dfc4-41b0-a34e-47fbf8e2e817","sequence":{"long":18625},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584527554179549,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17518","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9b15df89-0827-4c2d-85e7-cf08537f4148","sequence":{"long":18626},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584527554179549,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17519","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"147c8a52-e668-496a-ad39-424bba541e45","sequence":{"long":18627},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584527554179549,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17520","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8367f3e-df66-43f3-ae34-eac24137d53e","sequence":{"long":18628},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584527554179549,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17517","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc29adda-6bc6-4765-b495-5067812d2342","sequence":{"long":18629},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584527554179549,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17518","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"91eff532-cbd6-4113-823a-c0874087361a","sequence":{"long":18630},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584527554179549,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17519","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"29fd8d04-1a09-4231-8e4c-3351c4476cb4","sequence":{"long":18631},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584527554179549,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17520","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cc9d696b-1904-48da-9444-c7620f996f9d","sequence":{"long":18632},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584527873868158,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1347987},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d74e894e-283d-4585-b4b2-162ac21b5ac0","sequence":{"long":18633},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1347987},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed1b9f99-9c32-445c-827a-19b2f76d96e4","sequence":{"long":18635},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fc0d7e83-788e-49b3-82a9-697591117e24","sequence":{"long":18634},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"afa94939-c83c-49da-b143-8bd2f027e742","sequence":{"long":18637},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ec64ee9b-3862-41e0-96ef-c4d052a8d555","sequence":{"long":18636},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"23bf6540-4045-48f6-897d-6caecef60b24","sequence":{"long":18639},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1482efa5-6eb9-4b40-b541-6beec2565e99","sequence":{"long":18638},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"62b49f9e-3065-489b-9278-0736feb6e016","sequence":{"long":18640},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"051f8d4d-4ca2-4ad0-a63b-c7d7f5d15131","sequence":{"long":18641},"type":"EVENT_READ","threadId":{"int":100327},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"00af524c-19b3-43c3-a8e6-a3a6688c75d8","sequence":{"long":18642},"type":"EVENT_READ","threadId":{"int":100327},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"eab697cc-ceb7-449c-91b6-beb64f3251eb","sequence":{"long":18643},"type":"EVENT_READ","threadId":{"int":100327},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2436},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c0952f53-45e2-4150-b945-923342727c8c","sequence":{"long":18644},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2489},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"190dfe4d-8a40-4c49-86e1-a5f70b382214","sequence":{"long":18645},"type":"EVENT_WRITE","threadId":{"int":100327},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfef51b1-1cce-44b9-9060-ddb38afe5493","sequence":{"long":18646},"type":"EVENT_READ","threadId":{"int":100327},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"09a58f87-673f-4ef4-a147-4cfc02ec4bea","sequence":{"long":18647},"type":"EVENT_READ","threadId":{"int":100327},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7dd1c772-2484-4157-862a-c56ea1c7b3b9","sequence":{"long":18648},"type":"EVENT_READ","threadId":{"int":100327},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1180},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4509c31-1eed-41e2-a013-09e15b719295","sequence":{"long":18649},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1233},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed60d161-324b-4019-9826-fa4e229e235b","sequence":{"long":18650},"type":"EVENT_WRITE","threadId":{"int":100327},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"08883b66-749c-485d-8303-5040d11a6b6a","sequence":{"long":18651},"type":"EVENT_READ","threadId":{"int":100327},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"48cf526f-1f3e-416f-a810-c159de6ef769","sequence":{"long":18652},"type":"EVENT_SENDTO","threadId":{"int":100327},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17521","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"83ddca2b-83ab-432a-b0eb-ef270fe0b031","sequence":{"long":18653},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17521","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"93bd5796-dcc2-452b-877b-b3ed986c9687","sequence":{"long":18654},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"142b7e8c-a38d-4331-99a1-b39b01361ee1","sequence":{"long":18655},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e81017d-ea17-4e41-822c-7fcdce6d908c","sequence":{"long":18656},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528124277292,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"81870819-f1f8-4626-b940-486be23fee0b","sequence":{"long":18657},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528134373032,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d3b00695-b639-4d4b-977f-a52b78b49aa3","sequence":{"long":18658},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528134373032,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54e4e6e4-f7d9-494f-a89a-94768c739b43","sequence":{"long":18659},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584528893909521,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1350423},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"66b70c2d-6373-45d5-8fc1-933a61fb8e86","sequence":{"long":18660},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584529904552028,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1350788},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1c907e9-1195-4abc-b4a0-981c38b265da","sequence":{"long":18661},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530023823654,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8c71aab-8838-4476-82c8-b5a19692fc22","sequence":{"long":18662},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530023823654,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"acd94261-decc-4e6f-b301-a5e8b9ec4e60","sequence":{"long":18663},"type":"EVENT_FCNTL","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530023823654,"names":{"array":["aue_fcntl"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"cmd"},"runtimeDataType":null,"valueBytes":{"bytes":"03"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"447b9a29-6774-48e6-8d71-1ccb258547a1","sequence":{"long":18664},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530023823654,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":50},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a1f5f4b-f8d3-4c56-9ddc-fc790085d521","sequence":{"long":18665},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1350788},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bd1ef1f6-ea52-4689-8091-4aad068a489d","sequence":{"long":18667},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8e7de89b-1d80-4532-9235-95680039d376","sequence":{"long":18666},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2c56d302-aab2-4be0-a5f6-1cd38d9ff7a7","sequence":{"long":18669},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"de149f95-b5c3-45d7-8e7c-1e745cf75669","sequence":{"long":18668},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"14d2d30d-4781-4e0c-80ab-53f67639da69","sequence":{"long":18671},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"312bc0af-0aa5-4a74-8b17-892eb2741042","sequence":{"long":18670},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f878f889-7da4-4ba6-8d52-98f6529a3d01","sequence":{"long":18672},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"005f1103-c890-4dc2-b2b4-6e89ef017643","sequence":{"long":18673},"type":"EVENT_READ","threadId":{"int":100328},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5b6f21b4-3c48-4e2e-a249-267b36d1a6b9","sequence":{"long":18674},"type":"EVENT_READ","threadId":{"int":100328},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca484473-3d00-481e-a60c-aa191c54d836","sequence":{"long":18675},"type":"EVENT_READ","threadId":{"int":100328},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2432},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"77cae2a0-665f-4f0c-9fde-5c09684f67ac","sequence":{"long":18676},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2485},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c8aefdd4-fd1f-423f-9131-c1deef157af0","sequence":{"long":18677},"type":"EVENT_WRITE","threadId":{"int":100328},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"32823681-e79b-4acd-9ead-c3c56ee1f600","sequence":{"long":18678},"type":"EVENT_READ","threadId":{"int":100328},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4ac3bbc0-da2b-4a77-8a4a-e568cd2ce141","sequence":{"long":18679},"type":"EVENT_READ","threadId":{"int":100328},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ca10f787-9c98-4bf3-81f5-e1db1fe77a9c","sequence":{"long":18680},"type":"EVENT_READ","threadId":{"int":100328},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d27253d4-1bb8-4147-a188-1d1a75e7b1e6","sequence":{"long":18681},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c53050e2-cdc0-4fc0-917e-acd938a0e7ec","sequence":{"long":18682},"type":"EVENT_WRITE","threadId":{"int":100328},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"af59ce67-33b7-441d-867d-f9def714e4e2","sequence":{"long":18683},"type":"EVENT_READ","threadId":{"int":100328},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fedc2fe-c49b-4432-8f44-5f5edfb8605d","sequence":{"long":18684},"type":"EVENT_SENDTO","threadId":{"int":100328},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17522","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f7e3c6bc-bfcc-4490-8ffe-2a134a941989","sequence":{"long":18685},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17522","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"67f3f0ac-c7b8-4b12-81a1-b46fe3e5ac32","sequence":{"long":18686},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"65d9ecf0-cd6e-4b4d-b505-4bf05162baea","sequence":{"long":18687},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"20b75a15-0c3e-4e6f-8068-bf9ed0fb08bb","sequence":{"long":18688},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"59883f7c-fb34-46d8-8cb7-85e4119821a9","sequence":{"long":18689},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"856bb20b-ed6b-47cf-b12c-92c106e76bc4","sequence":{"long":18690},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530123865486,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7fb356b-c1c9-4629-9181-d7d1d5edbb61","sequence":{"long":18691},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530553901676,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d2e4c1d1-a591-4a8d-ad02-4c4dbb028b77","sequence":{"long":18692},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530553901676,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17523","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1364ae88-05a1-42b6-9e65-a1b18f732e8d","sequence":{"long":18693},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530553901676,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17524","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e075bf42-e304-43fc-a106-68ab0b02e53c","sequence":{"long":18694},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530553901676,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17525","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"57dfb7b6-bc45-4a86-9d12-4350fea54f6c","sequence":{"long":18695},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530553901676,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17526","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f87e1199-1576-4efe-9d7e-26bddfda8405","sequence":{"long":18696},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530553901676,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17523","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e1dfdf55-c068-431e-8769-17d4ebaba9a0","sequence":{"long":18697},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530553901676,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17524","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d19756dd-524e-4447-bac1-e9d258e67bc4","sequence":{"long":18698},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530553901676,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17525","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f9369b3f-50bc-4cad-bb94-bb6ad1f85c96","sequence":{"long":18699},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530553901676,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17526","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f21e5108-88a5-4550-af5b-d5213e643392","sequence":{"long":18700},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584530914278379,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1354512},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f2383477-279d-43b2-b288-6fa39f18b155","sequence":{"long":18701},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584531924739198,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1354877},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"58bf0a58-b4da-423f-a48f-35145358fccd","sequence":{"long":18702},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1354877},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"d08cab7d-cad6-47f4-9017-16700533015b","sequence":{"long":18704},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4000942b-20a5-4c88-8e7b-9103f03255ea","sequence":{"long":18703},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b3da09a5-b65b-4663-8123-f85719b5589c","sequence":{"long":18706},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"df61510d-8c27-48a9-a4ff-40fd4a54becd","sequence":{"long":18705},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9040d65f-138f-4d9a-a7ec-37b66bc93fb3","sequence":{"long":18708},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7a5e8828-a80a-4796-8b7a-2b492f4f172c","sequence":{"long":18707},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7094e825-44d6-4624-9c48-07715a422a6a","sequence":{"long":18709},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ee2985b5-e97a-4c1a-92b2-594df9a7dd2e","sequence":{"long":18710},"type":"EVENT_READ","threadId":{"int":100329},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0356252-a63f-43a8-82e3-52e006dce17e","sequence":{"long":18711},"type":"EVENT_READ","threadId":{"int":100329},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5a167b0b-4135-4618-a77e-da7f78714a92","sequence":{"long":18712},"type":"EVENT_READ","threadId":{"int":100329},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":3720},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"090d200c-698a-48fc-b856-38e70f311a9e","sequence":{"long":18713},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":3773},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3b3ecba4-b606-4a0a-9060-bd860b5f231f","sequence":{"long":18714},"type":"EVENT_WRITE","threadId":{"int":100329},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4fc2a48-79b0-43da-819a-6613b09b2413","sequence":{"long":18715},"type":"EVENT_READ","threadId":{"int":100329},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"35511174-f926-427a-9108-93ea0d90c394","sequence":{"long":18716},"type":"EVENT_READ","threadId":{"int":100329},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c3bd39d3-8ce8-4fdc-b8be-0827b7aa94f4","sequence":{"long":18717},"type":"EVENT_READ","threadId":{"int":100329},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":361},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8bead17-9d78-4c07-bd72-3c8df44be1a4","sequence":{"long":18718},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":414},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c94a8033-ad8f-448b-817e-e3dab009e7f1","sequence":{"long":18719},"type":"EVENT_WRITE","threadId":{"int":100329},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78085cd7-6410-44d3-8d44-09a3b9804f9e","sequence":{"long":18720},"type":"EVENT_READ","threadId":{"int":100329},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a1d6a36e-c46e-42dd-9bdf-bca17e323b8f","sequence":{"long":18721},"type":"EVENT_SENDTO","threadId":{"int":100329},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17527","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6ada59be-ce34-44f9-8d74-f342d38e2e75","sequence":{"long":18722},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17527","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe4a7a50-508a-4496-900b-bb72065b717f","sequence":{"long":18723},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532124353290,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a2d95a49-d82a-4026-9de4-82403a0f8af3","sequence":{"long":18724},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532134238147,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4e535370-85f2-421f-a936-78bd96664b02","sequence":{"long":18725},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532134238147,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"681c0ede-1a06-4549-a3f1-fb03ce2ef69b","sequence":{"long":18726},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532134238147,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71c5a4e3-eedd-472a-a2dc-50f2ffcfc30e","sequence":{"long":18727},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532134238147,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e7518ce6-c543-4361-adc5-71594b209964","sequence":{"long":18728},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584532944226918,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1357311},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"54dd76b0-f264-4089-ab37-355ba045c030","sequence":{"long":18729},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533453917788,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f53b0e1c-f24d-4c2f-8671-7ff1228c7a5e","sequence":{"long":18730},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533453917788,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea7f82e7-9ddf-4b40-8e57-36cc70a38550","sequence":{"long":18731},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533524320820,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"10f711bb-28af-47f3-8e41-449d1f87ecfc","sequence":{"long":18732},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533524320820,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8f507450-af92-429c-b903-92f597999ed5","sequence":{"long":18733},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533553973195,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb57643e-bc98-4ac9-874c-cea079d48004","sequence":{"long":18734},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533553973195,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17528","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb542779-97ae-45c7-a20f-c26819a337a9","sequence":{"long":18735},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533553973195,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17529","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d34c1e3-7a42-4808-8f31-f913272b86b3","sequence":{"long":18736},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533553973195,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17530","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7570cbf7-cf17-4b68-93a9-f1b02d30edf6","sequence":{"long":18737},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533553973195,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17531","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8b0652da-f349-40c7-a053-bcfb8c45c1a9","sequence":{"long":18738},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533553973195,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17528","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b31e9adb-4906-4d6d-bc18-589be80f29ae","sequence":{"long":18739},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533553973195,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17529","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0bd5cc55-2044-48ae-b83d-1bc85df4ccba","sequence":{"long":18740},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533553973195,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17530","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c566a05-af73-4d55-91b7-5a23929c20d3","sequence":{"long":18741},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533553973195,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17531","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e212044e-afc8-4a9e-a04f-783f7c28ec63","sequence":{"long":18742},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533664389072,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22df7a7c-2066-4615-a2da-42e887c88b95","sequence":{"long":18743},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533664389072,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"49d5ba81-d1ec-41c4-8258-e32a51dd19a7","sequence":{"long":18744},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533793943107,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"741b32c6-aaff-40b5-8000-dbfe26b27f20","sequence":{"long":18745},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533793943107,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7b8d9421-41b3-4b30-8413-87622e1504d0","sequence":{"long":18746},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533953875340,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1359167},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1af980c3-d70b-4d34-a96d-ab6dfcc25a0a","sequence":{"long":18747},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533963993042,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"630f1586-4ea7-45ff-80a9-d9babf30bf7b","sequence":{"long":18748},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584533963993042,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2db737f6-de22-44be-8311-0d19dd7513dd","sequence":{"long":18749},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534033874891,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b86991e9-ac0a-4ac4-8bc3-d9e03d146b43","sequence":{"long":18750},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534033874891,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f96082d8-2638-4d2b-a7f7-88d3a4881176","sequence":{"long":18751},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1359167},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f30949c1-ad9c-4b4c-b6f6-016ca701fe35","sequence":{"long":18753},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"dc994079-40aa-4193-979e-8b89b67e38c3","sequence":{"long":18752},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"306dd9a1-71a6-469f-b74c-75acfbc257a4","sequence":{"long":18755},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"95eb4c7e-7444-4563-969c-5011a87f01d3","sequence":{"long":18754},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"571860d9-a342-4d43-b8cc-448b9dda1d25","sequence":{"long":18757},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a6af9bc2-ebe3-406a-b741-fbbce4b5d497","sequence":{"long":18756},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"74aaef27-df0f-4767-b0f9-9c9d078aed86","sequence":{"long":18758},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3e0007ce-fbf3-4e96-975d-2044c7c2d9a2","sequence":{"long":18759},"type":"EVENT_READ","threadId":{"int":100330},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"e4b0ba87-42d9-4cc7-a01d-883124ae49d0","sequence":{"long":18760},"type":"EVENT_READ","threadId":{"int":100330},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ef982ce0-ee34-4868-be61-84067595f41d","sequence":{"long":18761},"type":"EVENT_READ","threadId":{"int":100330},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":2430},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a13a0e44-632c-4bfb-acbf-8312fb529ab4","sequence":{"long":18762},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":2483},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2cad2bd9-1e60-40c9-9973-0edc3fd074f3","sequence":{"long":18763},"type":"EVENT_WRITE","threadId":{"int":100330},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c5727a3e-8f89-410a-a040-790f0cf88aeb","sequence":{"long":18764},"type":"EVENT_READ","threadId":{"int":100330},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b0ede1bd-1a75-430d-a718-db338d5e5a64","sequence":{"long":18765},"type":"EVENT_READ","threadId":{"int":100330},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71aacb17-ad83-49da-b9a7-1c49469dedb4","sequence":{"long":18766},"type":"EVENT_READ","threadId":{"int":100330},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":1852},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ed34c88e-175f-415b-8b9d-adf06c45ff18","sequence":{"long":18767},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1905},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"76a01637-a4e6-435d-99b4-7c3b55277b25","sequence":{"long":18768},"type":"EVENT_WRITE","threadId":{"int":100330},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"71b24eb9-6b51-4730-a7c1-9a9eb054d105","sequence":{"long":18769},"type":"EVENT_READ","threadId":{"int":100330},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"979b684f-b1f9-4b46-b8dc-4400a2ff6100","sequence":{"long":18770},"type":"EVENT_SENDTO","threadId":{"int":100330},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17532","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2e112fc7-8710-408a-8fb1-0b30bf6bf465","sequence":{"long":18771},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17532","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"63f61efb-4788-410a-8abe-739502caf2dc","sequence":{"long":18772},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"425ad3a6-ebbb-4e81-ac81-f8b17dd39cdb","sequence":{"long":18773},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"96523a6d-d46b-4f06-b545-4579f953924c","sequence":{"long":18774},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534123885255,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f8e6ee4a-391e-40b0-a481-bff2d258da68","sequence":{"long":18775},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534133870863,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a3ecdaba-6b78-4003-8cf1-48c65f52ba36","sequence":{"long":18776},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534133870863,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ea497f5e-9d68-4d44-b48b-b96aa53023be","sequence":{"long":18777},"type":"EVENT_READ","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"0","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"aee6a132-552a-4a30-b7e1-27e38f2104ba","sequence":{"long":18778},"type":"EVENT_WRITE","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"ed281817-20f6-7e52-b620-7e7b827e05af"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":1},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"2","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Subject":{"uuid":"a4040771-467e-11e9-aed2-080027fc76ba","type":"SUBJECT_PROCESS","cid":1575,"parentSubject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"localPrincipal":{"UUID":"b0e4ff9d-a7ae-5d76-8d52-533c84e442b1"},"startTimestampNanos":{"long":1552584534304220238},"unitId":null,"iteration":null,"count":null,"cmdLine":null,"privilegeLevel":null,"importedLibraries":null,"exportedLibraries":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd"}}}},"CDMVersion":"20","type":"RECORD_SUBJECT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"52384d26-5cac-45ff-b351-1fe77efa1b80","sequence":{"long":18779},"type":"EVENT_FORK","threadId":{"int":100107},"subject":{"UUID":"d7b5a811-467a-11e9-aea9-080027fc76ba"},"predicateObject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_fork"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_pid":"1575","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"1575","ppid":"1281","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"422287b7-21c8-4caf-b245-fc43a00e2f1d","sequence":{"long":18780},"type":"EVENT_EXECUTE","threadId":{"int":100120},"subject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"d1524fc4-3a5e-855b-9e3a-5d212b8581ed"},"predicateObjectPath":{"string":"/usr/bin/whoami"},"predicateObject2":{"UUID":"27ec417a-1419-0858-9914-a67d9808b904"},"predicateObject2Path":{"string":"/libexec/ld-elf.so.1"},"timestampNanos":1552584534304220238,"names":{"array":["aue_execve"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"-1","cmdLine":"whoami","ppid":"1282","exec":"bash"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"4c82c7c2-0369-4e15-ba49-31cf93d1546b","sequence":{"long":18781},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":{"string":"/etc/libmap.conf"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bf64e6c8-bd2d-4c5e-be8a-29a093d8da43","sequence":{"long":18782},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":47},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8ddbc5ff-bbac-4d8d-bbca-4c30c50aeb88","sequence":{"long":18783},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"17896ffd-a9e4-c755-a4a9-412945c7b90c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3cc6f947-7521-4edd-b604-e65e8bd54ab5","sequence":{"long":18784},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":{"string":"/var/run/ld-elf.so.hints"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"100000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ae36a3d4-eaf9-4b44-a3c6-f1cac4148824","sequence":{"long":18785},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":128},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"19c63796-1172-4a45-8313-6ec069190610","sequence":{"long":18786},"type":"EVENT_READ","threadId":{"int":100120},"subject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":81},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f4cf00b5-b857-4492-8a31-69bc5afdf489","sequence":{"long":18787},"type":"EVENT_CLOSE","threadId":{"int":100120},"subject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"58ea8ea9-f0ae-855c-aef0-404acc85bce2"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_close"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","return_value":"0","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"617cfc34-c131-4914-95f7-2c25a46975b8","sequence":{"long":18788},"type":"EVENT_OPEN","threadId":{"int":100120},"subject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":{"string":"/lib/libc.so.7"},"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_openat_rwtc"]},"parameters":{"array":[{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"flags"},"runtimeDataType":null,"valueBytes":{"bytes":"300000"},"provenance":null,"tag":null,"components":null},{"size":-1,"type":"VALUE_TYPE_CONTROL","valueDataType":"VALUE_DATA_TYPE_INT","isNull":false,"name":{"string":"mode"},"runtimeDataType":null,"valueBytes":{"bytes":"00"},"provenance":null,"tag":null,"components":null}]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"ret_fd1":"3","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"-100","return_value":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a9310e57-a8ff-4841-988b-3c4f196e9d3c","sequence":{"long":18789},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1e62b25e-759e-47fc-9086-5af98e317a4d","sequence":{"long":18790},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2396160},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f287465f-bdc3-449d-8ee6-cc2bfbad771a","sequence":{"long":18791},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"372dd3c6-1931-472c-bb9a-8462878a56b7","sequence":{"long":18792},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2400256},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9e4f3501-1d4a-4d28-a303-a101c7c2054c","sequence":{"long":18793},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"cb20dc56-be63-4b2c-bdce-5b0e0dec7e3f","sequence":{"long":18794},"type":"EVENT_MMAP","threadId":{"int":100120},"subject":{"UUID":"a4040771-467e-11e9-aed2-080027fc76ba"},"predicateObject":{"UUID":"de4160ec-95f8-cb51-b895-6278f1cb229c"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534304220238,"names":{"array":["aue_mmap"]},"parameters":{"array":[]},"location":null,"size":{"long":2916352},"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_READ', 'PROT_EXEC']","arg_mem_other_flags":"['MAP_PRIVATE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1282","exec":"whoami"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"02aac891-febb-4047-bf3a-0007f7ec5213","sequence":{"long":18795},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584534974108811,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1363923},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"92b55307-a63d-4bc6-9902-cb31c63a114a","sequence":{"long":18796},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584535984365741,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1364287},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"3af377ae-ef4f-4ed8-87c9-09e51a670404","sequence":{"long":18797},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1364287},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"efbf39af-1208-4ab3-bdf4-6b297836d50e","sequence":{"long":18799},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1ac85c1-b2ed-42bd-a792-c21c737cc8e6","sequence":{"long":18798},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"db2487e3-78ee-417d-bfcf-83e61397f0ca","sequence":{"long":18801},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"24bc0880-8c84-4a22-9870-aeb9bffae361","sequence":{"long":18800},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"c34b172f-f7a4-4ce5-8b15-e9e269b4f9c7","sequence":{"long":18803},"type":"EVENT_FLOWS_TO","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":null,"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"6881aad9-d823-43d3-ab90-570b9cb4eb4d","sequence":{"long":18802},"type":"EVENT_READ","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_preadv"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"ret_miouuid":"c4673949-cad4-c653-94ca-ec5243c65b55","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"b1e75a88-5859-41bb-bd1d-dd14a1ce8f9a","sequence":{"long":18804},"type":"EVENT_MPROTECT","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":null,"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_mprotect"]},"parameters":{"array":[]},"location":null,"size":null,"programPoint":null,"properties":{"map":{"arg_mem_flags":"['PROT_NONE']","host":"dc53375b-4149-46ac-9570-64b1090f28fd","return_value":"0","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"78814075-e054-4182-8cf7-fe38a697016b","sequence":{"long":18805},"type":"EVENT_READ","threadId":{"int":100331},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fa29ecc3-8995-49e6-ab34-ac72a1489e5b","sequence":{"long":18806},"type":"EVENT_READ","threadId":{"int":100331},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bb24a4c7-0527-4de1-9911-e523e3b33223","sequence":{"long":18807},"type":"EVENT_READ","threadId":{"int":100331},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":4752},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1d664f86-62d6-423a-89be-52d135c81c1a","sequence":{"long":18808},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":4805},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"22da85de-27cd-45ad-8fdc-c567628275a6","sequence":{"long":18809},"type":"EVENT_WRITE","threadId":{"int":100331},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1c22a14b-e7ec-4a90-9575-28c116d5b13e","sequence":{"long":18810},"type":"EVENT_READ","threadId":{"int":100331},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":12},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1b0ab579-c53e-4905-a2cf-2c4cc2a34b32","sequence":{"long":18811},"type":"EVENT_READ","threadId":{"int":100331},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":8},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"9c5f1ee0-e694-4e72-ad1d-e268b3b08093","sequence":{"long":18812},"type":"EVENT_READ","threadId":{"int":100331},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":360},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a651fd15-a957-4de2-9bde-a9849dddf78f","sequence":{"long":18813},"type":"EVENT_WRITE","threadId":{"int":100168},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_write"]},"parameters":{"array":[]},"location":null,"size":{"long":413},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1fc059ee-4dce-4ae8-923d-70af687a685b","sequence":{"long":18814},"type":"EVENT_WRITE","threadId":{"int":100331},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c08bf529-e4b1-eb51-b1e4-ee6f81eb87e1"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_pwrite"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5953cde4-daf2-44fa-9487-940d532941c5","sequence":{"long":18815},"type":"EVENT_READ","threadId":{"int":100331},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"825e9d78-8dfc-a257-bc8d-d06bd7a25609"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_pread"]},"parameters":{"array":[]},"location":null,"size":{"long":0},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fcb96191-e897-4908-9cb9-9b058159eb40","sequence":{"long":18816},"type":"EVENT_SENDTO","threadId":{"int":100331},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"ca0a6fcb-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17533","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"7e0e525b-d5bd-47e2-a773-b813ce352da1","sequence":{"long":18817},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":112},"programPoint":null,"properties":{"map":{"ret_msgid":"17533","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"5ffa6375-ac37-4edb-a5f8-5c21fd875f4c","sequence":{"long":18818},"type":"EVENT_WRITE","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"86836dec-ed75-5552-b5ed-c25e1255414b"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536123882231,"names":{"array":["aue_writev"]},"parameters":{"array":[]},"location":null,"size":{"long":88},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"19","ppid":"1","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2fc6bfc7-274e-429a-9e68-f47aa089cb6a","sequence":{"long":18819},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536133912092,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"177e9c9f-d4d8-493f-9e8a-9e1817e645fa","sequence":{"long":18820},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536133912092,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"a7c2e8a4-a739-4dec-b83f-0fba05da4749","sequence":{"long":18821},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536133912092,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":4},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"0e1430f2-3843-4f43-a4cc-3d85cbff946d","sequence":{"long":18822},"type":"EVENT_RECVFROM","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"d979352e-467d-11e9-aec3-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536133912092,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":46},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"14","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"f1f232d8-3ce3-4739-85f3-c401bc2b6fb9","sequence":{"long":18823},"type":"EVENT_READ","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"e393303b-721f-8457-9f72-2da477847b65"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536553942487,"names":{"array":["aue_read"]},"parameters":{"array":[]},"location":null,"size":{"long":156},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"3","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"bfcdf248-dc1c-4cda-92f0-f505ed4abe61","sequence":{"long":18824},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536553942487,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17534","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"859d2e02-38c3-41c7-a21c-386a52f8bfe0","sequence":{"long":18825},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536553942487,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17535","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"651b0c1b-b85b-4dc4-b358-bc89880322af","sequence":{"long":18826},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536553942487,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17536","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"ab351be2-947d-45dc-b282-f29f6aab3d83","sequence":{"long":18827},"type":"EVENT_SENDTO","threadId":{"int":100075},"subject":{"UUID":"b4fde811-467a-11e9-ae67-080027fc76ba"},"predicateObject":{"UUID":"b693e0fc-467a-11e9-ae9b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536553942487,"names":{"array":["aue_sendto"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17537","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"8","ppid":"1","exec":"devd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"437696eb-c49e-481c-9f0a-d4d01e1e5e2f","sequence":{"long":18828},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536553942487,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":237},"programPoint":null,"properties":{"map":{"ret_msgid":"17534","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"1708e7ef-0f2e-4cdb-a6ab-5394fcf3df6e","sequence":{"long":18829},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536553942487,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17535","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"2665b6cd-be18-45a1-a9c0-9cdf6c26bc9e","sequence":{"long":18830},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536553942487,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":86},"programPoint":null,"properties":{"map":{"ret_msgid":"17536","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"8d851692-6c00-49ed-996f-66ccd36b9d94","sequence":{"long":18831},"type":"EVENT_RECVFROM","threadId":{"int":100085},"subject":{"UUID":"b50b64f4-467a-11e9-ae7b-080027fc76ba"},"predicateObject":{"UUID":"b50b436a-467a-11e9-ae7b-080027fc76ba"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536553942487,"names":{"array":["aue_recvfrom"]},"parameters":{"array":[]},"location":null,"size":{"long":76},"programPoint":null,"properties":{"map":{"ret_msgid":"17537","host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"9","ppid":"1","address":"","exec":"syslogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"} +{"datum":{"Event":{"uuid":"fe935540-a1cd-41ac-8086-c744b4373aba","sequence":{"long":18832},"type":"EVENT_LSEEK","threadId":{"int":100097},"subject":{"UUID":"ca0ad94b-467a-11e9-ae9b-080027fc76ba"},"predicateObject":{"UUID":"c4673949-cad4-c653-94ca-ec5243c65b55"},"predicateObjectPath":null,"predicateObject2":null,"predicateObject2Path":null,"timestampNanos":1552584536994272133,"names":{"array":["aue_lseek"]},"parameters":{"array":[]},"location":null,"size":{"long":1367524},"programPoint":null,"properties":{"map":{"host":"dc53375b-4149-46ac-9570-64b1090f28fd","fd":"7","ppid":"1","exec":"dlogd"}}}},"CDMVersion":"20","type":"RECORD_EVENT","hostId":"dc53375b-4149-46ac-9570-64b1090f28fd","sessionNumber":0,"source":"SOURCE_FREEBSD_DTRACE_CADETS"}